Description
bt
kd> kp
|
# Child-SP RetAddr Call Site
|
00 fffff880`04a94740 fffff800`004030d5 nt!KiDispatchException(struct _EXCEPTION_RECORD * ExceptionRecord = 0xfffff880`04a94dd0, struct _KEXCEPTION_FRAME * ExceptionFrame = 0xfffff880`04a94c90, struct _KTRAP_FRAME * TrapFrame = 0xfffff880`04a94e70, char PreviousMode = 0n1 '', unsigned char FirstChance = 0x01 '')+0x252 [E:\amd64\reactos\ntoskrnl\ke\amd64\except.c @ 344]
|
01 fffff880`04a94c90 fffff800`0040446b nt!InternalDispatchException+0xef
|
02 fffff880`04a94e70 00000000`00003ade nt!KiPageFault+0x12d
|
03 00000000`00c6fe38 00000000`004e1848 0x3ade
|
04 00000000`00c6fe40 00000000`004e1726 wuauserv!UpdateServiceStatus(unsigned long dwState = 4)+0xe8 [E:\amd64\reactos\base\services\wuauserv\wuauserv.c @ 45]
|
05 00000000`00c6fe80 00000001`400042c0 wuauserv!ServiceMain(unsigned long argc = 1, wchar_t ** argv = 0x00000000`00134350)+0x1e6 [E:\amd64\reactos\base\services\wuauserv\wuauserv.c @ 116]
|
06 00000000`00c6fed0 000007ff`b4527ebd svchost!ServiceStarter(unsigned long dwNumServicesArgs = 1, wchar_t ** lpServiceArgVectors = 0x00000000`00134350)+0x240 [E:\amd64\reactos\base\services\svchost\svchost.c @ 1155]
|
07 00000000`00c6ff40 00000000`00000000 advapi32!ScServiceMainStubW(void * Context = 0x00000000`00134320)+0xdd [E:\amd64\reactos\dll\win32\advapi32\service\sctrl.c @ 213]
|
problem:
kd> u SetServiceStatus
|
wuauserv!SetServiceStatus:
|
00000000`004e18bb ff253f170000 jmp qword ptr [wuauserv!_imp_SetServiceStatus (00000000`004e3000)]
|
00000000`004e18c1 cc int 3
|
00000000`004e18c2 cc int 3
|
00000000`004e18c3 cc int 3
|
00000000`004e18c4 cc int 3
|
00000000`004e18c5 cc int 3
|
00000000`004e18c6 cc int 3
|
00000000`004e18c7 cc int 3
|
kd> dq wuauserv!_imp_SetServiceStatus
|
00000000`004e3000 00000000`00003920 00000000`00003900
|
00000000`004e3010 00000000`00000000 00000000`00003ac2
|
00000000`004e3020 00000000`00003aaa 00000000`00003a8e
|
00000000`004e3030 00000000`00003a76 00000000`00003a5e
|
00000000`004e3040 00000000`00003a44 00000000`00003a34
|
00000000`004e3050 00000000`00003a1a 00000000`00003a04
|
00000000`004e3060 00000000`000039ee 00000000`0000397a
|
00000000`004e3070 00000000`00003988 00000000`00003998
|
kd> u 00000000`00003920
|
The import table is invalid
-> related to insert RMap twice (race condition in page fault handler?)