Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0 Copyright (c) Microsoft Corporation. All rights reserved. CommandLine: C:\Documents and Settings\Stefan\Downloads\7z1602.exe Loaded dbghelp extension DLL Loaded exts extension DLL Loaded ntsdexts extension DLL Symbol search path is: SymSrv*SYMSRV.DLL*C:\Windows\Symbols*http://msdl.microsoft.com/download/symbols/ Executable search path is: ModLoad: 00400000 0040e000 image00400000 ModLoad: 7c910000 7c9ca000 ntdll.dll AVRF: 7z1602.exe: pid 0x8B74: flags 0x80000000: application verifier enabled ModLoad: 77da0000 77e4a000 C:\Windows\System32\ADVAPI32.DLL ModLoad: 7c800000 7c909000 C:\Windows\System32\KERNEL32.dll ModLoad: 77e50000 77ee3000 C:\Windows\System32\RPCRT4.dll ModLoad: 77fc0000 77fd1000 C:\Windows\System32\Secur32.dll ModLoad: 5b080000 5b0c9000 C:\Windows\System32\verifier.dll ModLoad: 10000000 1000b000 C:\Windows\System32\VrfKnthk.Dll VrfKnthk!DllMain(0x10000000, 0x00000004 = DLL_PROCESS_VERIFIER, 0x0012FAD8) AVRF: verifier.dll provider initialized for 7z1602.exe with flags 0x80000000 VrfKnthk!DllMain(0x10000000, 0x00000001 = DLL_PROCESS_ATTACH, 0x00000000) VrfKnthk!DllMain: VerifierImage = 0x000207B4 = 7z1602.exe, VerifierFlags = 0x80000000, VerifierDebug = 0x00000000 ModLoad: 774b0000 775ee000 C:\Windows\System32\ole32.dll ModLoad: 77ef0000 77f3a000 C:\Windows\System32\GDI32.dll ModLoad: 7e360000 7e3f1000 C:\Windows\System32\USER32.dll VrfKnthk!DllLoad: module 'USER32.dll' loaded at 0x7E360000, size 0x00091000 VrfKnthk!DllLoad: module 'GDI32.dll' loaded at 0x77EF0000, size 0x0004A000 ModLoad: 77be0000 77c38000 C:\Windows\System32\msvcrt.dll VrfKnthk!DllLoad: module 'msvcrt.dll' loaded at 0x77BE0000, size 0x00058000 VrfKnthk!DllLoad: module 'ole32.dll' loaded at 0x774B0000, size 0x0013E000 ModLoad: 7e670000 7ee92000 C:\Windows\System32\SHELL32.dll ModLoad: 77f40000 77fb7000 C:\Windows\System32\SHLWAPI.dll VrfKnthk!DllLoad: module 'SHLWAPI.dll' loaded at 0x77F40000, size 0x00077000 VrfKnthk!DllLoad: module 'SHELL32.dll' loaded at 0x7E670000, size 0x00822000 VrfKnthk!DllLoad: module '7z1602.exe' loaded at 0x00400000, size 0x0000E000 Break instruction exception - code 80000003 (first chance) eax=00361ec4 ebx=7ffde000 ecx=00000007 edx=00000080 esi=00361f98 edi=00361ec4 eip=7c91120e esp=0012fb20 ebp=0012fc94 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202 *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll - ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g LoadLibraryW(C:\Windows\System32\IMM32.DLL) ModLoad: 76330000 7634d000 C:\Windows\System32\IMM32.DLL VrfKnthk!DllLoad: module 'IMM32.DLL' loaded at 0x76330000, size 0x0001D000 LoadLibraryW(C:\Windows\System32\APPINIT.DLL) ModLoad: 01d70000 01d76000 C:\Windows\System32\APPINIT.DLL VrfKnthk!DllLoad: module 'APPINIT.DLL' loaded at 0x01D70000, size 0x00006000 VrfKnthk!DllUnload: module 'APPINIT.DLL' unloaded from 0x01D70000, size 0x00006000 LoadLibraryW(comctl32.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C80B00B : LoadLibraryW 7E682ED8 : comctl32.dll 7E6D7308 : SHELL32.dll+0x00067308 7E697643 : SHELL32.dll+0x00027643 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=7e682ed8 ecx=7c92f927 edx=0012ef64 esi=0000ffff edi=7c80b00b eip=7c91120e esp=0012f198 ebp=0012f1ac iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g ModLoad: 773a0000 774a3000 C:\Windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll VrfKnthk!DllLoad: module 'comctl32.dll' loaded at 0x773A0000, size 0x00103000 LoadLibraryW(comctl32.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C80B00B : LoadLibraryW 7E682ED8 : comctl32.dll 7E6D7436 : SHELL32.dll+0x00067436 7E6D7176 : SHELL32.dll+0x00067176 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=7e682ed8 ecx=7c92f927 edx=0012f3ec esi=0000ffff edi=7c80b00b eip=7c91120e esp=0012f620 ebp=0012f634 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g LoadLibraryExW(C:\Windows\System32\MSCTF.dll, 0x00000000, 0x00000008) ModLoad: 746a0000 746ec000 C:\Windows\System32\MSCTF.dll VrfKnthk!DllLoad: module 'MSCTF.dll' loaded at 0x746A0000, size 0x0004C000 LoadLibraryW(rpcrt4.dll) =========================================================== VERIFIER STOP 0000FFFE: pid 0x8B74: The application or a component it uses called LoadLibrary*() with the filename or pathname of a not existing file (which might be searched via PATH). 7C80B00B : LoadLibraryW 77E5ED50 : rpcrt4.dll 77E6B525 : RPCRT4.dll+0x0001B525 77E6B83A : RPCRT4.dll+0x0001B83A =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=77e5ed50 ecx=7c92f927 edx=0012deb4 esi=0000fffe edi=7c80b00b eip=7c91120e esp=0012e0e8 ebp=0012e0fc iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C80B00B : LoadLibraryW 77E5ED50 : rpcrt4.dll 77E6B525 : RPCRT4.dll+0x0001B525 77E6B83A : RPCRT4.dll+0x0001B83A =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=77e5ed50 ecx=7c92f927 edx=0012deb4 esi=0000ffff edi=7c80b00b eip=7c91120e esp=0012e0e8 ebp=0012e0fc iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g LoadLibraryW(version.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C80B00B : LoadLibraryW 763386FC : version.dll 763385B6 : IMM32.DLL+0x000085B6 76338879 : IMM32.DLL+0x00008879 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=763386fc ecx=7c92f927 edx=0012e994 esi=0000ffff edi=7c80b00b eip=7c91120e esp=0012ebc8 ebp=0012ebdc iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g ModLoad: 77bd0000 77bd8000 C:\Windows\System32\version.dll VrfKnthk!DllLoad: module 'version.dll' loaded at 0x77BD0000, size 0x00008000 LoadLibraryExW(C:\Windows\System32\MSCTFIME.IME, 0x00000000, 0x00000002) LoadLibraryExW(C:\Windows\System32\MSCTFIME.IME, 0x00000000, 0x00000002) VrfKnthk!DllUnload: module 'version.dll' unloaded from 0x77BD0000, size 0x00008000 LoadLibraryW(C:\Windows\System32\MSCTFIME.IME) ModLoad: 75250000 7527e000 C:\Windows\System32\MSCTFIME.IME VrfKnthk!DllLoad: module 'MSCTFIME.IME' loaded at 0x75250000, size 0x0002E000 LoadLibraryA(C:\Windows\System32\ole32.dll) LoadLibraryW(C:\Windows\System32\MSCTFIME.IME) LoadLibraryA(UxTheme.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C801B21 : LoadLibraryA 773A30C0 : UxTheme.dll 773A3FAF : comctl32.dll+0x00003FAF 7742A305 : comctl32.dll+0x0008A305 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=773a30c0 ecx=7c92f927 edx=0012f1e0 esi=0000ffff edi=7c801b21 eip=7c91120e esp=0012f414 ebp=0012f428 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g ModLoad: 01f10000 01f1a000 C:\Documents and Settings\Stefan\Downloads\UxTheme.dll VrfKnthk!DllLoad: module 'UxTheme.dll' loaded at 0x01F10000, size 0x0000A000 ModLoad: 5b0f0000 5b128000 C:\Windows\System32\UXTHEME.dll VrfKnthk!DllLoad: module 'UXTHEME.dll' loaded at 0x5B0F0000, size 0x00038000 LoadLibraryA(IMM32.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C801B21 : LoadLibraryA 773A32C0 : IMM32.dll 773A3FAF : comctl32.dll+0x00003FAF 7742B343 : comctl32.dll+0x0008B343 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=773a32c0 ecx=7c92f927 edx=0012f220 esi=0000ffff edi=7c801b21 eip=7c91120e esp=0012f454 ebp=0012f468 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g LoadLibraryW(C:\Windows\System32\MSCTFIME.IME) LoadLibraryW(C:\Windows\System32\mslbui.dll) ModLoad: 609d0000 609d9000 C:\Windows\System32\mslbui.dll VrfKnthk!DllLoad: module 'mslbui.dll' loaded at 0x609D0000, size 0x00009000 LoadLibraryA(OLEAUT32.DLL) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C801B21 : LoadLibraryA 746A7E54 : OLEAUT32.DLL 746E1238 : MSCTF.dll+0x00041238 746E0A22 : MSCTF.dll+0x00040A22 =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=746a7e54 ecx=7c92f927 edx=0012f538 esi=0000ffff edi=7c801b21 eip=7c91120e esp=0012f76c ebp=0012f780 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g ModLoad: 770f0000 7717b000 C:\Windows\System32\OLEAUT32.DLL VrfKnthk!DllLoad: module 'OLEAUT32.DLL' loaded at 0x770F0000, size 0x0008B000 LoadLibraryA(oleaut32.dll) =========================================================== VERIFIER STOP 0000FFFF: pid 0x8B74: The application or a component it uses called LoadLibrary*() without providing an absolute local pathname for the module to load. 7C801B21 : LoadLibraryA 774BC038 : oleaut32.dll 774FFAB6 : ole32.dll+0x0004FAB6 770F55CB : OLEAUT32.DLL+0x000055CB =========================================================== Break instruction exception - code 80000003 (first chance) eax=00000000 ebx=774bc038 ecx=7c92f927 edx=0012f4d8 esi=0000ffff edi=7c801b21 eip=7c91120e esp=0012f70c ebp=0012f720 iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!DbgBreakPoint: 7c91120e cc int 3 0:000> g LoadLibraryW(C:\Windows\System32\Msctf.dll) VrfKnthk!DllMain(0x10000000, 0x00000000 = DLL_PROCESS_DETACH, 0x00000001) VrfKnthk!DllMain: VerifierImage = 0x000207B4 = 7z1602.exe, VerifierFlags = 0x800 00000, VerifierDebug = 0x00000000 eax=0012fa90 ebx=00000000 ecx=00006c83 edx=0012fb6a esi=7c91de6e edi=00000001 eip=7c91e514 esp=0012fdf0 ebp=0012feec iopl=0 nv up ei pl zr na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246 ntdll!KiFastSystemCallRet: 7c91e514 c3 ret 0:000> q