(QEmu 0.9.1)
livecd-73186-dbg.iso
"kdb:> set condition * first always"

Case 1 (Keyboard, right arrow) :

...

(dll/win32/userenv/profile.c:891) Error: 2
shellpath.c:1459: _SHGetUserProfileDirectoryW returning

Entered debugger on first-chance exception (Exception Code: 0xc0000005) (Page Fault)
Memory at 0x00000001 could not be read: Page not present.
kdb:> bt
Eip:
* <shell32.dll:8bbfa (sdk/lib/atl/atlcomcli.h:94 (CMenuSFToolbar::SetShellFolder))>
Frames:
* <shell32.dll:83642 (dll/win32/shell32/shellmenu/CMenuBand.cpp:680 (CMenuBand::SetShellFolder))>
* <shell32.dll:9a5bb (dll/win32/shell32/shellmenu/CStartMenu.cpp:195 (CShellMenuCallback::CallbackSM))>
* <shell32.dll:848b6 (dll/win32/shell32/shellmenu/CMenuBand.cpp:772 (CMenuBand::_CallCB))>
* <shell32.dll:84951 (dll/win32/shell32/shellmenu/CMenuBand.cpp:749 (CMenuBand::_CallCBWithItemId))>
* <shell32.dll:8a19e (dll/win32/shell32/shellmenu/CMenuToolbars.cpp:1261 (CMenuStaticToolbar::InternalPopupItem))>
* <shell32.dll:8b322 (dll/win32/shell32/shellmenu/CMenuToolbars.cpp:1116 (CMenuToolbarBase::PopupItem))>
* <shell32.dll:8502e (dll/win32/shell32/shellmenu/CMenuBand.cpp:1000 (CMenuBand::_MenuItemSelect))>
* <shell32.dll:8d212 (dll/win32/shell32/shellmenu/CMenuFocusManager.cpp:646 (CMenuFocusManager::GetMsgHook))>
* <shell32.dll:8d2b9 (dll/win32/shell32/shellmenu/CMenuFocusManager.cpp:136 (CMenuFocusManager::s_GetMsgHook))>
* <user32.dll:47242 (win32ss/user/user32/windows/hook.c:745 (User32CallHookProcFromKernel))>
* <ntdll.dll:c770 (:0 (KiUserCallbackDispatcher))>
* <explorer.exe:5ff6 (base/shell/explorer/traywnd.cpp:2973 (TrayMessageLoop))>
* <explorer.exe:1569 (base/shell/explorer/explorer.cpp:175 (StartWithDesktop))>
* <explorer.exe:16ba (base/shell/explorer/explorer.cpp:222 (wWinMain))>
* <explorer.exe:10f58 (sdk/lib/crt/startup/crt0_w.c:24 (wmain))>
* <explorer.exe:10024 (sdk/lib/crt/startup/crtexe.c:308 (__tmainCRTStartup))>
* <explorer.exe:1006d (sdk/lib/crt/startup/crtexe.c:168 (wWinMainCRTStartup))>
* <kernel32.dll:10442 (dll/win32/kernel32/client/proc.c:472 (BaseProcessStartup))>
<00000000>
kdb:> cont
err:(win32ss/user/user32/windows/hook.c:778) Hook Exception! Id: 3, Code 0, Proc 0x7b23d298
(win32ss/user/ntuser/callback.c:747) err: Failure to make Callback! Status 0xc0000001

...