0:000> kb ChildEBP RetAddr Args to Child 0007db70 77f574b5 00000000 00000000 77f56f13 kernel32!CreateThread 0007dcfc 7caed664 7caed36a 01cbcde8 00000008 SHLWAPI!SHCreateThread+0x12b 0007df7c 7cae31d1 00133fb0 01c0e368 0000800d SHELL32!CFSDropTarget::Drop+0x2b9 0007dfa4 77f97cc7 00000001 01c0e368 0000800d SHELL32!CDesktopFolderDropTarget::Drop+0x57 0007dfd8 7caa1bed 000f25c8 01c0e368 0000800d SHLWAPI!SHSimulateDrop+0x63 0007dffc 7caa1c28 000f25c8 01c0e368 0000800d SHELL32!SHSimulateDropWithSite+0x30 0007e020 7caa9444 000f25c8 01c0e368 0000800d SHELL32!SimulateDropWithPasteSucceeded+0x1f 0007e058 7ca568aa 00000001 20000000 0007e62c SHELL32!CDefFolderMenu::_ProcessEditPaste+0x7e 0007e2e0 7cab5ec0 01c8f648 0007e62c 001303b0 SHELL32!CDefFolderMenu::InvokeCommand+0x47d 0007e610 7cab6854 01c8f648 0007e62c 0000701c SHELL32!CDefView::_InvokeContextMenu+0xb0 0007e6a4 7cab9cb5 0000701c 001301a0 0007ebcc SHELL32!CDefView::_ExplorerCommand+0x149 0007e6b4 7cabc3b1 0000701c 7e3a929a 00000000 SHELL32!CDefView::_OnDefviewEditCommand+0x36 0007ebcc 7ca1200f 00000000 0000701c 00000000 SHELL32!CDefView::_OnCommand+0x35c 0007ed48 7ca02ee8 000100a4 00000111 0000701c SHELL32!CDefView::WndProc+0x7aa 0007ed8c 7e398734 000100a4 00000111 0000701c SHELL32!CDefView::s_WndProc+0x72 0007edb8 7e398816 7ca02e92 000100a4 00000111 USER32!InternalCallWinProc+0x28 0007ee20 7e3a927b 0009e6d0 7ca02e92 000100a4 USER32!UserCallWinProcCheckWow+0x150 0007ee5c 7e3a92e3 00573810 00573778 0000701c USER32!SendMessageWorker+0x4a5 0007ee7c 7cb3fb28 000100a4 00000111 0000701c USER32!SendMessageW+0x7f 0007ee9c 7cb3f76f 00165860 0007f204 20000000 SHELL32!CContextMenuOnHMENU::InvokeCommand+0x3b 0007eeb8 7cab5ec0 0010abb0 0007f204 0007f244 SHELL32!CContextMenuOnContextMenuArray::InvokeCommand+0x44 0007f1e8 7cab8e69 0010abb0 0007f204 7e3a9930 SHELL32!CDefView::_InvokeContextMenu+0xb0 0007f4f0 7cabbc9e 0010abb0 00000000 0000027c SHELL32!CDefView::_DoContextMenuPopup+0x37e 0007f53c 7ca12080 00010011 00000000 001301a0 SHELL32!CDefView::ContextMenu+0x1e4 0007f6b0 7ca02ee8 000100a4 0000007b 000100a6 SHELL32!CDefView::WndProc+0x840 0007f6f4 7e398734 000100a4 0000007b 000100a6 SHELL32!CDefView::s_WndProc+0x72 0007f720 7e398816 7ca02e92 000100a4 0000007b USER32!InternalCallWinProc+0x28 0007f788 7e3a8ea0 0009e6d0 7ca02e92 000100a4 USER32!UserCallWinProcCheckWow+0x150 0007f7dc 7e3a8eec 00573810 0000007b 000100a6 USER32!DispatchClientMessage+0xa3 0007f804 7c91e473 0007f814 00000018 00573810 USER32!__fnDWORD+0x24 0007f828 7e3994be 7e3a8e0d 000100a6 0000007b ntdll!KiUserCallbackDispatcher+0x13 0007f87c 7e3a8dd9 000100a6 0000007b 000100a6 USER32!NtUserMessageCall+0xc 0007f898 5ad71af6 000100a6 0000007b 000100a6 USER32!RealDefWindowProcW+0x47 0007f8f0 5ad71b3d 00000000 00000000 000100a6 UxTheme!_ThemeDefWindowProc+0x16e 0007f90c 7e3a94ed 000100a6 0000007b 000100a6 UxTheme!ThemeDefWindowProcW+0x18 0007f954 773e0d8d 000100a6 0000007b 000100a6 USER32!DefWindowProcW+0x6b 0007fac0 7e398734 000100a6 0000007b 000100a6 comctl32!ListView_WndProc+0xf0 0007faec 7e398816 773e0c9d 000100a6 0000007b USER32!InternalCallWinProc+0x28 0007fb54 7e3a927b 0009e6d0 773e0c9d 000100a6 USER32!UserCallWinProcCheckWow+0x150 0007fb90 7e3a92e3 005738c0 0056a5a0 000100a6 USER32!SendMessageWorker+0x4a5 0007fbb0 773e0a89 000100a6 0000007b 000100a6 USER32!SendMessageW+0x7f 0007fc30 773e0ac1 000100a6 00000000 0000027c comctl32!ListView_HandleMouse+0x57b 0007fc50 773e14f4 000a10e0 00000000 0000027c comctl32!ListView_OnButtonDown+0x1b 0007fdc0 7e398734 000100a6 00000204 00000002 comctl32!ListView_WndProc+0x857 0007fdec 7e398816 773e0c9d 000100a6 00000204 USER32!InternalCallWinProc+0x28 0007fe54 7e3989cd 0009e6d0 773e0c9d 000100a6 USER32!UserCallWinProcCheckWow+0x150 0007feb4 7e398a10 0007fed4 00000000 0007fef0 USER32!DispatchMessageWorker+0x306 0007fec4 7c9f7b2d 0007fed4 0012d888 000100a6 USER32!DispatchMessageW+0xf 0007fef0 7c9f79c2 7c80934a 0012d888 0012d888 SHELL32!CDesktopBrowser::_PeekForAMessage+0x66 0007ff08 7ca23a2c 00000000 0007ff5c 01013256 SHELL32!CDesktopBrowser::_MessageLoop+0x14 0007ff14 01013256 0012d888 7ffd7000 0007ffc0 SHELL32!SHDesktopMessageLoop+0x24 0007ff5c 0101a5c7 00000000 00000000 00020a4a Explorer!ExplorerWinMain+0x2db 0007ffc0 7c817077 00000010 000810a4 7ffd7000 Explorer!ModuleEntry+0x6d 0007fff0 00000000 0101a55f 00000000 78746341 kernel32!BaseProcessStart+0x23 0:000> g Breakpoint 0 hit eax=0011c778 ebx=7c9d4458 ecx=0011c778 edx=0000010c esi=00000000 edi=02e0f638 eip=7ca08956 esp=02e0f190 ebp=02e0f19c iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206 SHELL32!CShellLink::CShellLink: 7ca08956 8bff mov edi,edi 0:013> kb ChildEBP RetAddr Args to Child 02e0f18c 7ca08927 02e0f638 00000000 02e0f1b0 SHELL32!CShellLink::CShellLink 02e0f19c 7c9fadc6 00000000 7c9d86fc 02e0f638 SHELL32!CShellLink_CreateInstance+0x23 02e0f1b0 7ca02962 7c9d49b8 00000000 7c9d86fc SHELL32!CCF_CreateInstance+0x2b 02e0f1cc 7ca0292c 7ca02849 7c9d49b8 00000000 SHELL32!_CreateFromDllGetClassObject+0x2d 02e0f1e8 7ca028f1 7c9d4458 00000000 7c9d86fc SHELL32!_CreateFromShell+0x1b 02e0f5c8 7c9fb039 7c9d4458 00000000 00000001 SHELL32!_SHCoCreateInstance+0x4e 02e0f608 7ca40757 00000000 7c9d4458 00000000 SHELL32!SHCoCreateInstance+0x40 02e0fa58 7cad28ab 01c245d8 02e0fac8 0018a9e8 SHELL32!CreateLinkToPidl+0x165 02e0fa7c 7cad2a1d 000100a2 01c245d8 02e0fac8 SHELL32!_CreateLinkRetryDesktop+0x2e 02e0fcd4 7caed273 000100a2 02e0fd28 00141804 SHELL32!SHCreateLinks+0xe2 02e0ff34 7caed3b0 00141804 0013dff4 00000000 SHELL32!CFSDropTarget::_DoDrop+0x1d9 02e0ff50 77f56f82 0013dff4 00090778 00090000 SHELL32!CFSDropTarget::_DoDropThreadProc+0x46 02e0ffb4 7c80b729 00000000 00090778 00090000 SHLWAPI!WrapperThreadProc+0x94 02e0ffec 00000000 77f56f13 0007dbc0 00000000 kernel32!BaseThreadStart+0x37