kd> k ChildEBP RetAddr f84cd9f4 80516a76 nt!DbgUserBreakPoint f84cd9fc 8050ccc0 nt!RtlAssert+0x46 [e:\reactos\lib\rtl\assert.c @ 119] f84cda6c 804b86c8 nt!MmNotPresentFaultSectionView+0xd0 [e:\reactos\ntoskrnl\mm\section.c @ 1324] f84cda94 804b886b nt!MmNotPresentFault+0x168 [e:\reactos\ntoskrnl\mm\mmfault.c @ 172] f84cdaac 804f0e89 nt!MmAccessFault+0x10b [e:\reactos\ntoskrnl\mm\mmfault.c @ 257] f84cdae0 804036df nt!KiTrap0EHandler+0x1a9 [e:\reactos\ntoskrnl\ke\i386\traphdlr.c @ 1260] f84cdae0 f860f518 nt!KiTrap0E+0x8f f84cdb64 f86fd23d win32k!DIB_32BPP_GetPixel+0x28 [e:\reactos\win32ss\gdi\dib\dib32bpp.c @ 31] f84cdc9c f86fde84 win32k!UserDrawIconEx+0x23d [e:\reactos\win32ss\user\ntuser\cursoricon.c @ 1123] f84cdcd0 804f1959 win32k!NtUserDrawIconEx+0xb4 [e:\reactos\win32ss\user\ntuser\cursoricon.c @ 1516] f84cdd0c 804f16fb nt!KiSystemCallTrampoline+0x19 [e:\reactos\ntoskrnl\include\internal\i386\ke.h @ 723] f84cdd44 804f138d nt!KiSystemCall+0x21b [e:\reactos\ntoskrnl\ke\i386\traphdlr.c @ 1645] f84cdd5c 80403d58 nt!KiFastCallEntryHandler+0x6d [e:\reactos\ntoskrnl\ke\i386\traphdlr.c @ 1691] f84cdd5c 7c92116e nt!KiFastCallEntry+0x71 0105e770 77a87231 ntdll!KiFastSystemCallRet 0105e774 77a81af0 user32!ZwUserDrawIconEx+0xc 0105e7a8 0047a60d user32!DrawIconEx+0x30 [e:\reactos\win32ss\user\user32\windows\cursoricon.c @ 1555] WARNING: Stack unwind information not available. Following frames may be wrong. 0105e80c 0042bb41 explorer+0x7a60d 0105f90c 77a7e046 explorer+0x2bb41 0105f930 77a7e0c8 user32!User32EnumWindows+0x126 [e:\reactos\win32ss\user\user32\windows\window.c @ 696] 0105f950 0042bf75 user32!EnumWindows+0x18 [e:\reactos\win32ss\user\user32\windows\window.c @ 745] 0105fa24 0042b3fe explorer+0x2bf75 0105fa40 00471926 explorer+0x2b3fe 0105fa68 77a72dc0 explorer+0x71926 0105fafc 77a74959 user32!IntCallWindowProcW+0x360 [e:\reactos\win32ss\user\user32\windows\message.c @ 1577] 0105fb24 77a74c19 user32!IntCallMessageProc+0x189 [e:\reactos\win32ss\user\user32\windows\message.c @ 1811] 0105fb78 004729e2 user32!DispatchMessageW+0x1d9 [e:\reactos\win32ss\user\user32\windows\message.c @ 2065] 0105fbcc 0047c599 explorer+0x729e2 0105fc30 0047cbfa explorer+0x7c599 0105ff04 004c6b1e explorer+0x7cbfa 0105ff1c 004c6435 explorer+0xc6b1e 0105ffb4 004c61af explorer+0xc6435 0105ffc0 77d8df55 explorer+0xc61af 0105fff0 00000000 kernel32!BaseProcessStartup+0x55 [e:\reactos\dll\win32\kernel32\client\proc.c @ 478] kd> !process PROCESS b10a4d88 SessionId: 0 Cid: 01c8 Peb: 7ffba000 ParentCid: 01b4 DirBase: 1c544000 ObjectTable: e142f310 HandleCount: 43. Image: explorer.exe VadRoot b10b38d0 Vads 270 Clone 0 Private 136. Modified 1. Locked 0. DeviceMap 00000000 Token e1482020 ElapsedTime 00:00:11.231 UserTime 00:00:00.000 KernelTime 00:00:00.000 QuotaPoolUsage[PagedPool] 0 QuotaPoolUsage[NonPagedPool] 0 Working Set Sizes (now,min,max) (5464064, 0, 300) (21856256KB, 0KB, 1200KB) PeakWorkingSetSize 5464064 VirtualSize 22 Mb PeakVirtualSize 31 Mb PageFaultCount 0 MemoryPriority BACKGROUND BasePriority 24 CommitCharge 2524 THREAD b10a3db0 Cid 01c8.01cc Teb: 7ffdf000 Win32Thread: b10cd008 RUNNING on processor 0 THREAD b1083540 Cid 01c8.01f4 Teb: 7ffb9000 Win32Thread: 00000000 WAIT: (UserRequest) UserMode Alertable b1088500 SynchronizationEvent b1084b98 NotificationEvent