Reply 20 of 142, by peterferrie
You have a bug in popa. Compare:
00:03:56:75.07504: 0000:7D3C (60)PUSHA
00:03:56:75.07504: Registers:
00:03:56:75.07520: EAX: 00000000, EBX: 00000700, ECX: 00000001, EDX: 00000000
00:04:10:57.06960: 0000:7D71 (61)POPA
00:04:11:20.06368: EAX: 00007c7a, EBX: 00000000, ECX: 00000000, EDX: 00000001
Looks like a stack imbalance. From there:
00:04:30:64.06528: EAX: 00000201, EBX: 0000007c, ECX: 00000029, EDX: 0000c3c0
This request fails, and you get the crash.