EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Wed, 20 Nov 2013 23:41:04 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 13.11.20.7636 1.4 Parameters : 1.5 Compilation Date: Wed, 20 Nov 2013 04:13:54 +0400 1.6 Up Time : 1 minute, 26 seconds Exception: ---------------------------------------------------------------------------------------------------------------------- 2.1 Date : Wed, 20 Nov 2013 23:42:30 +0400 2.2 Address : 0054B77D 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 13.11.20.7636 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0054B77D in module 'SASPlanet.Debug.exe'. Write of address 0A542000. 2.7 ID : 95D3 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeLockMemoryPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - ON SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: --------------------------------------------------------------------------------- 5.3 Free Memory : 10922 Mb 5.5 Free Disk : 407.02 Gb 5.7 Processor : Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz 5.8 Display Mode: 2560 x 1440, 32 bit 5.9 Display DPI : 109 5.10 Video Card : Intel(R) HD Graphics 4000 (driver 9.17.10.2932 - RAM 2112 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |0054B77D|SASPlanet.Debug.exe|GR32_LowLevel.pas | |FillLongword_SSE2 |346[39] | |00565B6F|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |HorzLine |3011[1] | |00565B4C|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |HorzLine |3010[0] | |0056600B|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |Line |3413[28] | |00565F20|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |Line |3385[0] | |00812EAC|SASPlanet.Debug.exe|u_LayerScaleLineHorizontal.pas |TLayerScaleLineHorizontal |DrawScaleLegend |175[3] | |00812E4C|SASPlanet.Debug.exe|u_LayerScaleLineHorizontal.pas |TLayerScaleLineHorizontal |DrawScaleLegend |172[0] | |00812DF0|SASPlanet.Debug.exe|u_LayerScaleLineHorizontal.pas |TLayerScaleLineHorizontal |RedrawScaleLegend |147[38] | |00812BA0|SASPlanet.Debug.exe|u_LayerScaleLineHorizontal.pas |TLayerScaleLineHorizontal |RedrawScaleLegend |109[0] | |00812B78|SASPlanet.Debug.exe|u_LayerScaleLineHorizontal.pas |TLayerScaleLineHorizontal |DoUpdateBitmapDraw |96[5] | |006D0B75|SASPlanet.Debug.exe|u_WindowLayerWithPos.pas |TWindowLayerWithBitmapBase |DoViewUpdate |239[31] | |00791987|SASPlanet.Debug.exe|u_ScaleLineConfig.pas |TScaleLineConfig |GetVisible |149[5] | |006D05E6|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |ViewUpdateUnlock |131[4] | |006D05B8|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |ViewUpdateUnlock |127[0] | |008115D6|SASPlanet.Debug.exe|u_LayerScaleLine.pas |TLayerScaleLineBase |OnTimer |250[11] | |0057111E|SASPlanet.Debug.exe|u_ListenerTime.pas |TListenerTimeCheck |Notification |124[4] | |005AC986|SASPlanet.Debug.exe|u_NotifierTime.pas |TNotifierTime |Notify |100[12] | |007E85FC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |OnGUISyncronizedTimer |976[4] | |008850F4|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |tbitmOnInterfaceOptionsClick|3645[6] | |005CFE7A|SASPlanet.Debug.exe|TB2Item.pas |TTBCustomItem |Click |1513[26] | |005CFD6E|SASPlanet.Debug.exe|TB2Item.pas |TTBCustomItem |ClickWndProc |1459[29] | |74BF7BC5|USER32.dll | | |DispatchMessageA | | |74BF7BBB|USER32.dll | | |DispatchMessageA | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=4900; Priority=0; Class=TGarbageCollectorThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F09F9|KERNELBASE.dll | | |WaitForSingleObjectEx | | |006E02A9|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |006E02A0|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006E025A|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |750EE50D|KERNELBASE.dll | | |VirtualQueryEx | | |750F03C2|KERNELBASE.dll | | |SetEvent | | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |006E0135|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006E0094|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007E7288|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |588[206] | |007E6778|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |382[0] | |00896A30|SASPlanet.Debug.exe|SASPlanet.dpr | | |1166[5] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2180; Priority=-15; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F0ADD|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |00634BB0|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00634B98|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00634A39|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |007E8132|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |879[5] | |007E80E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[0] | |0087B28A|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1339[192]| |74C06175|USER32.dll | | |SendMessageA | | |74C0612E|USER32.dll | | |SendMessageA | | |74C02175|USER32.dll | | |SetFocus | | |74C00DFB|USER32.dll | | |ShowWindow | | |76F92260|ntdll.dll | | |RtlLeaveCriticalSection | | |76FA01EB|ntdll.dll | | |LdrGetProcedureAddressEx | | |76FA01DD|ntdll.dll | | |LdrGetProcedureAddress | | |750F1452|KERNELBASE.dll | | |GetProcAddress | | |74C03181|USER32.dll | | |MonitorFromWindow | | |74C0319D|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3092; Priority=0; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F0ADD|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |0063592B|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |299[73] | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |00634BB0|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00634B98|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00634A39|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |00635600|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |196[2] | |0057172E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005866F2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC502|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E8100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |875[1] | |007E80E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[0] | |0087B28A|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1339[192]| |74C06175|USER32.dll | | |SendMessageA | | |74C0612E|USER32.dll | | |SendMessageA | | |74C02175|USER32.dll | | |SetFocus | | |74C00DFB|USER32.dll | | |ShowWindow | | |76F92260|ntdll.dll | | |RtlLeaveCriticalSection | | |76FA01EB|ntdll.dll | | |LdrGetProcedureAddressEx | | |76FA01DD|ntdll.dll | | |LdrGetProcedureAddress | | |750F1452|KERNELBASE.dll | | |GetProcAddress | | |74C03181|USER32.dll | | |MonitorFromWindow | | |74C0319D|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1232; Priority=0; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F0ADD|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006358B0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |283[57] | |0063592B|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |299[73] | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |00634BB0|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00634B98|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00634A39|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |00635600|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |196[2] | |0057172E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005866F2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC502|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E8100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |875[1] | |007E80E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[0] | |0087B28A|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1339[192]| |74C06175|USER32.dll | | |SendMessageA | | |74C0612E|USER32.dll | | |SendMessageA | | |74C02175|USER32.dll | | |SetFocus | | |74C00DFB|USER32.dll | | |ShowWindow | | |76F92260|ntdll.dll | | |RtlLeaveCriticalSection | | |76FA01EB|ntdll.dll | | |LdrGetProcedureAddressEx | | |76FA01DD|ntdll.dll | | |LdrGetProcedureAddress | | |750F1452|KERNELBASE.dll | | |GetProcAddress | | |74C03181|USER32.dll | | |MonitorFromWindow | | |74C0319D|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1144; Priority=-2; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F0ADD|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006D2D3F|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnPrepareSubset |470[48] | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |00634BB0|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00634B98|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00634A39|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006D2514|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnAppStarted |258[2] | |0057172E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005866F2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC502|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E8100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |875[1] | |007E80E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[0] | |0087B28A|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1339[192]| |74C06175|USER32.dll | | |SendMessageA | | |74C0612E|USER32.dll | | |SendMessageA | | |74C02175|USER32.dll | | |SetFocus | | |74C00DFB|USER32.dll | | |ShowWindow | | |76F92260|ntdll.dll | | |RtlLeaveCriticalSection | | |76FA01EB|ntdll.dll | | |LdrGetProcedureAddressEx | | |76FA01DD|ntdll.dll | | |LdrGetProcedureAddress | | |750F1452|KERNELBASE.dll | | |GetProcAddress | | |74C03181|USER32.dll | | |MonitorFromWindow | | |74C0319D|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=684; Priority=-2; Class=TThread4InterfacedThread | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |750F0ADD|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006358B0|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |283[57] | |0063592B|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |299[73] | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2568; Priority=1; Class=; [Main] | |--------------------------------------------------------------------------------------------------------------------------------------------------------------| |00634BB0|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00634B98|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00634A39|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |00635600|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnAppStarted |196[2] | |0057172E|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005866F2|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC502|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E8100|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |875[1] | |007E80E0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[0] | |0087B28A|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1339[192]| |76F92260|ntdll.dll | | |RtlLeaveCriticalSection | | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |002D0000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2013-05-19 04:01:10|D:\z3 | |00310000|guard32.dll |COMODO Internet Security |5.10.31649.2253 |301224 |2012-03-11 21:13:20|C:\Windows\SysWOW64 | |00400000|SASPlanet.Debug.exe| |13.11.20.7636 |5814272 |2013-11-20 04:13:58|D:\z3 | |0A510000|MouseHook.dll | | |43008 |2010-10-07 20:23:06|C:\Progs\System\Tray_Commander | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-05-19 04:01:10|D:\z3 | |6B4E0000|ieframe.dll |Internet Browser |9.0.8112.16443 |9705984 |2012-02-28 05:27:14|C:\Windows\SysWOW64 | |6F670000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-05-19 04:01:10|D:\z3 | |6F980000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-21 07:24:18|C:\Windows\system32 | |6FCC0000|jpeg62.dll | | |244736 |2013-05-19 04:01:10|D:\z3 | |6FD10000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2011-08-27 08:26:28|C:\Windows\SysWOW64 | |70590000|Secur32.dll |Security Support Provider Interface |6.1.7601.17725 |22016 |2011-11-17 09:34:54|C:\Windows\system32 | |71800000|pshook.dll |Punto Switcher hook module |3.2.7.84 |22888 |2012-03-19 20:27:18|C:\Program Files (x86)\Punto Switcher | |71950000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2012-04-08 18:49:52|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |719E0000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2012-04-08 18:49:52|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |71B60000|rtutils.dll |Routing Utilities |6.1.7601.17514 |37376 |2010-11-21 07:24:02|C:\Windows\system32 | |720E0000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 05:16:14|C:\Windows\system32 | |72200000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 05:16:14|C:\Windows\system32 | |72950000|dwmapi.dll |Microsoft Desktop Window Manager API |6.1.7600.16385 |67072 |2009-07-14 05:15:14|C:\Windows\system32 | |72A10000|uxtheme.dll |Microsoft UxTheme Library |6.1.7600.16385 |245760 |2009-07-14 05:11:26|C:\Windows\system32 | |72AA0000|iphlpapi.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-21 07:24:34|C:\Windows\system32 | |72AC0000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-21 07:24:04|C:\Windows\system32 | |72AE0000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 05:15:46|C:\Windows\system32 | |72B10000|winspool.drv |Windows Spooler Driver |6.1.7601.17514 |320000 |2010-11-21 07:24:10|C:\Windows\system32 | |72B70000|comctl32.dll |User Experience Controls Library |6.10.7601.17514 |1680896 |2010-11-21 07:23:56|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |72D10000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-21 07:24:18|C:\Windows\system32 | |72D90000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 05:16:14|C:\Windows\system32 | |72DD0000|dnsapi.DLL |DNS Client API DLL |6.1.7601.17570 |270336 |2011-03-03 09:38:02|C:\Windows\system32 | |72E60000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 05:16:20|C:\Windows\system32 | |72FB0000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |6.1.7601.17514 |232448 |2010-11-21 07:24:10|C:\Windows\system32 | |73030000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 05:16:22|C:\Windows\system32 | |730A0000|fltlib.dll |Filter Library |6.1.7600.16385 |14848 |2009-07-14 05:15:22|C:\Windows\system32 | |730B0000|version.dll |Version Checking and File Installation Libraries|6.1.7600.16385 |21504 |2009-07-14 05:16:18|C:\Windows\system32 | |731F0000|CityHash.dll | | |14336 |2013-08-12 04:01:10|D:\z3 | |74390000|BtMmHook.dll |Multimedia Keys Hook DLL |6.5.1.2700 |198944 |2012-04-01 12:22:26|C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64 | |74400000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 05:16:14|C:\Windows\system32 | |74640000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 05:15:08|C:\Windows\syswow64 | |74650000|SspiCli.dll |Security Support Provider Interface |6.1.7601.17725 |96768 |2011-11-17 09:28:50|C:\Windows\syswow64 | |746B0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 05:15:04|C:\Windows\syswow64 | |74740000|oleaut32.dll | |6.1.7601.17676 |571904 |2011-08-27 08:26:28|C:\Windows\syswow64 | |747E0000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.17514 |626176 |2010-11-21 07:24:18|C:\Windows\syswow64 | |74880000|iertutil.dll |Run time utility for Internet Explorer |9.0.8112.16443 |1792000 |2012-02-28 05:04:34|C:\Windows\syswow64 | |74BE0000|USER32.dll |Multi-User Windows USER API Client DLL |6.1.7601.17514 |833024 |2010-11-21 07:24:22|C:\Windows\syswow64 | |74CE0000|GDI32.dll |GDI Client DLL |6.1.7601.17514 |311296 |2010-11-21 07:24:16|C:\Windows\syswow64 | |74D70000|comdlg32.dll |Common Dialogs DLL |6.1.7601.17514 |485888 |2010-11-21 07:23:50|C:\Windows\syswow64 | |74F90000|WININET.dll |Internet Extensions for Win32 |9.0.8112.16443 |1127424 |2012-02-28 05:11:08|C:\Windows\syswow64 | |750B0000|imagehlp.dll |Windows NT Image Helper |6.1.7601.17787 |159232 |2012-03-01 09:33:24|C:\Windows\syswow64 | |750E0000|KERNELBASE.dll |Windows NT BASE API Client DLL |6.1.7601.17651 |272384 |2011-07-16 08:24:24|C:\Windows\syswow64 | |75130000|MSCTF.dll |MSCTF Server DLL |6.1.7600.16385 |828928 |2009-07-14 05:15:44|C:\Windows\syswow64 | |75250000|ADVAPI32.dll |Advanced Windows 32 Base API |6.1.7601.17514 |640512 |2010-11-21 07:24:30|C:\Windows\syswow64 | |752F0000|ole32.dll |Microsoft OLE for Windows |6.1.7601.17514 |1414144 |2010-11-21 07:24:02|C:\Windows\syswow64 | |75450000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 05:09:02|C:\Windows\syswow64 | |75460000|SHLWAPI.dll |Shell Light-weight Utility Library |6.1.7601.17514 |350208 |2010-11-21 07:23:50|C:\Windows\syswow64 | |75550000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 11:53:00|C:\Windows\syswow64 | |75600000|RPCRT4.dll |Remote Procedure Call Runtime |6.1.7601.17514 |663040 |2010-11-21 07:24:12|C:\Windows\syswow64 | |756F0000|shell32.dll |Windows Shell Common Dll |6.1.7601.17755 |12872704|2012-01-04 12:59:40|C:\Windows\syswow64 | |76370000|kernel32.dll |Windows NT BASE API Client DLL |6.1.7601.17651 |1114112 |2011-07-16 08:24:24|C:\Windows\syswow64 | |764B0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 05:16:14|C:\Windows\SysWOW64 | |764D0000|LPK.dll |Language Pack |6.1.7600.16385 |25600 |2009-07-14 05:11:24|C:\Windows\syswow64 | |764E0000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 05:16:12|C:\Windows\syswow64 | |764F0000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-21 07:24:26|C:\Windows\syswow64 | |76550000|URLMON.DLL |OLE32 Extensions for Win32 |9.0.8112.16443 |1103360 |2012-02-28 05:12:02|C:\Windows\syswow64 | |76670000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |6.1.7601.17514 |206848 |2010-11-21 07:23:56|C:\Windows\syswow64 | |76F40000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 05:16:14|C:\Windows\syswow64 | |76F70000|ntdll.dll |NT Layer DLL |6.1.7601.17725 |1292080 |2011-11-17 09:38:40|C:\Windows\SysWOW64 | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |ID |Name |Description |Version |Memory|Priority |Threads|Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |168 | | |376 |smss.exe | | |0 |Above-Normal|2 | | |532 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |7 | | |548 |uSerenity.exe |µSerenity |2.2.1.25130 |0 |Normal |11 |C:\Progs\Internet\uTorrent | |584 |KeePass.exe |KeePass Password Safe 1.25 |1.25.0.0 |0 |Normal |4 |C:\Progs\Security\KeePass | |596 |csrss.exe | | |0 |High |9 | | |636 |cmdagent.exe | | |0 |Normal |34 | | |700 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |32 | | |748 |wininit.exe |Windows Start-Up Application |6.1.7600.16385|0 |High |3 | | |760 |csrss.exe | | |0 |High |11 | | |804 |services.exe | | |0 |Normal |6 | | |816 |conhost.exe | | |0 |Normal |2 | | |820 |lsass.exe | | |0 |Normal |7 | | |828 |lsm.exe | | |0 |Normal |10 | | |864 |winlogon.exe | | |0 |High |3 | | |924 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |21 | | |964 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |11 | | |1036|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |15 | | |1068|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |42 | | |1080|conhost.exe | | |0 |Normal |2 | | |1084|lmgrd.exe | | |0 |Normal |3 | | |1168|audiodg.exe | | |0 |Normal |9 | | |1188|FileZilla server.exe | | |0 |Normal |10 | | |1216|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |11 | | |1312|srvany.exe | | |0 |Normal |2 | | |1484|spoolsv.exe | | |0 |Normal |18 | | |1516|potplayermini.exe |PotPlayer | |0 |High |31 |c:\Progs\Multimedia\PotPlayer | |1544|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |8 | | |1596|taskhost.exe | | |0 |Normal |8 | | |1612|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |5 | | |1704|KMService.exe | | |0 |Normal |3 | | |1924|dwm.exe | | |0 |High |5 | | |1956|explorer.exe |Windows Explorer |6.1.7601.17567|0 |Normal |24 | | |1988|btwdins.exe |Bluetooth Support Server |6.5.1.2700 |0 |Normal |9 | | |2012|mstsc.exe |Remote Desktop Connection |6.1.7601.17514|0 |Normal |12 | | |2044|imdsksvc.exe | | |0 |Normal |3 | | |2056|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |6 | | |2084|lmgrd.exe | | |0 |Normal |2 | | |2092|USBDLM.exe | | |0 |Above-Normal|7 | | |2164|winvnc4.exe | | |0 |Normal |3 | | |2188|trados.exe | | |0 |Normal |5 | | |2200|cfp.exe | | |0 |Normal |30 | | |2232|procexp64.exe | | |0 |High |5 | | |2240|winvnc4.exe | | |0 |Normal |8 | | |2272|punto.exe |Punto Switcher |3.2.7.84 |0 |Normal |6 |C:\Program Files (x86)\Punto Switcher | |2304|PNotes.exe |Pinned notes, slips, chits etc. |9.1.0.101 |0 |Normal |5 |C:\Progs\TextTools\PNotes | |2316|nncron.exe |nnCron - system command scheduler |1.93.1141.10 |0 |Normal |10 |C:\Progs\System\nnCron | |2324|NetworkIndicator.exe |Network Activity Indicator system tray utility|1.6.0.14 |0 |Normal |3 |C:\Windows | |2336|TC.exe |Tray Commander |2.2.0.0 |0 |Normal |3 |C:\Progs\System\Tray_Commander | |2356|BTTray.exe |Bluetooth Tray Application |6.5.1.2700 |0 |Normal |14 | | |2404|FNPLicensingService.exe| | |0 |Normal |6 | | |2592|ps64ldr.exe | | |0 |Normal |2 | | |2636|adb.exe | | |0 |Normal |5 |C:\Progs\FileTools\TotalCmd\Plugins\wfx\ADB\bin| |2652|DynSite.exe |DynSite |1.12.826.4 |0 |Normal |8 |C:\Progs\Network\DynSite | |2816|splwow64.exe |Print driver host for 32bit applications |6.1.7601.17514|0 |Normal |6 | | |2900|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |8 | | |3068|USBDLM_usr.exe | | |0 |Normal |3 | | |3104|RCAssistant.exe |RC Assistant |3.1.5.64 |0 |Real-Time |2 |C:\Progs\Multimedia\BeholdTV\RCAssistant | |3196|TOTALCMD64.EXE | | |0 |Normal |8 | | |3260|aida64.exe |AIDA64 Extreme Edition |2.85.2400.0 |0 |Normal |2 |c:\Progs\Hardware\Aida64 | |3280|TrueCrypt.exe |TrueCrypt |7.1.1.0 |0 |Normal |6 |C:\Progs\Security\TrueCrypt | |3404|firefox.exe |Firefox |24.1.0.5042 |0 |Normal |40 |c:\Progs\Internet\MozillaFirefox | |3432|sppsvc.exe | | |0 |Normal |4 | | |3436|miranda32.exe |Miranda IM |0.10.19.0 |0 |Normal |10 |C:\Progs\Internet\Miranda\173425835 | |3456|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |5 | | |3780|RunDll32.exe |Windows host process (Rundll32) |6.1.7600.16385|0 |Normal |2 |C:\Windows\SysWOW64 | |3884|BTStackServer.exe |Bluetooth Stack COM Server |6.5.1.2700 |0 |Normal |27 | | |3956|TOTALCMD64.EXE | | |0 |Normal |13 | | |4140|HprSnap7.exe |HyperSnap |7.26.1.0 |0 |Normal |16 |C:\Progs\Graphic\HyperSnap | |4184|Calcute.exe | | |0 |Normal |2 |C:\Progs\Misc\Calcute | |4808|SASPlanet.Debug.exe | |13.11.20.7636 |0 |Normal |19 |D:\z3 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Assembler Information: ----------------------------------------------------------------------------- ; GR32_LowLevel.FillLongword_SSE2 (Line=332 - Offset=25) ; ------------------------------------------------------ 0054B761 dec eax ; ; Line=333 - Offset=26 ; -------------------- 0054B762 jnz GR32_LowLevel.FillLongword_SSE2 (Line=330) ; ; Line=336 - Offset=29 ; -------------------- 0054B764 mov eax, edx ; ; Line=337 - Offset=30 ; -------------------- 0054B766 shr eax, $02 ; ; Line=338 - Offset=31 ; -------------------- 0054B769 shl eax, $02 ; ; Line=339 - Offset=32 ; -------------------- 0054B76C sub edx, eax ; ; Line=340 - Offset=33 ; -------------------- 0054B76E shr eax, $02 ; ; Line=342 - Offset=35 ; -------------------- 0054B771 movd MM0, ecx ; ; Line=343 - Offset=36 ; -------------------- 0054B775 DB $66, $0F, $62, $C0 //punpckldq MM0, MM0 ; ; Line=344 - Offset=37 ; -------------------- 0054B779 DB $66, $0F, $62, $C0 //punpckldq MM0, MM0 ; ; Line=346 - Offset=39 ; -------------------- 0054B77D movq [edi], MM0 ; <-- EXCEPTION ; ; Line=347 - Offset=40 ; -------------------- 0054B781 add edi, +$10 ; ; Line=348 - Offset=41 ; -------------------- 0054B784 dec eax ; ; Line=349 - Offset=42 ; -------------------- 0054B785 jnz GR32_LowLevel.FillLongword_SSE2 (Line=346) ; ; Line=352 - Offset=45 ; -------------------- 0054B787 mov eax, ecx ; ; Line=353 - Offset=46 ; -------------------- 0054B789 mov ecx, edx ; ; Line=355 - Offset=48 ; -------------------- 0054B78B rep 0054B78C stosd ; ; Line=358 - Offset=51 ; -------------------- 0054B78D pop edi ; ; Line=396 - Offset=89 ; -------------------- 0054B78E ret Registers: ----------------------------- EAX: 0000003E EDI: 0A542000 EBX: 0054B738 ESI: 0000002F ECX: AA000000 ESP: 0018F970 EDX: 00000002 EIP: 0054B77D Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018F970: 0018F9C4 03D9A950: 66 0F 7F 07 83 C7 10 48 75 F6 89 C8 89 D1 F3 AB f......Hu....... 0018F974: 00565B71 03D9A960: 5F C3 90 56 57 89 C6 89 D7 39 F7 74 02 F3 A5 5F _..VW....9.t..._ 0018F978: 00000000 03D9A970: 5E C3 90 53 8B 08 8B 1A 89 18 89 0A 5B C3 90 55 ^..S........[..U 0018F97C: 0018F9D4 03D9A980: 8B EC 51 53 56 8B 75 08 8B 1A 3B 18 7D 0E 8B 18 ..QSV.u...;.}... 0018F980: 00566010 03D9A990: 89 5D FC 8B 1A 89 18 8B 5D FC 89 1A 3B 08 7E 02 .]......]...;.~. 0018F984: AA000000 03D9A9A0: 89 08 3B 32 7F 03 4E 89 32 8B 12 3B 10 0F 9D C0 ..;2..N.2..;.... 0018F988: 0000079D 03D9A9B0: 5E 5B 59 5D C2 04 00 3B D0 7E 03 8B C2 C3 3B C8 ^[Y]...;.~....;. 0018F98C: 0018F9EC 03D9A9C0: 7D 02 8B C1 C3 8B C0 3B C8 7D 03 8B C1 C3 3B D0 }......;.}....;. 0018F990: 00405720 03D9A9D0: 7E 02 8B C2 C3 8B C0 53 56 8B DA 8B F0 3B DE 7E ~......SV....;.~ 0018F994: 0018F9D4 03D9A9E0: 15 8B C6 2B C1 8B D1 2B D3 42 8B DA 99 F7 FB 8B ...+...+.B...... 0018F998: 0000079C 03D9A9F0: C2 03 C1 5E 5B C3 8B C6 2B C3 2B CB 41 99 F7 F9 ...^[...+.+.A... 0018F99C: 080A5010 03D9AA00: 8B C2 03 C3 5E 5B C3 53 56 8B F2 8B D8 8B C3 99 ....^[.SV....... 0018F9A0: 00000000 03D9AA10: F7 FE 89 11 8B C3 99 F7 FE 5E 5B C3 8D 40 00 53 .........^[..@.S 0018F9A4: 00000000 03D9AA20: 56 51 8B F1 8B DA 3B D8 7E 13 8B CC 8B D6 2B D3 VQ....;.~.....+. 0018F9A8: 0000002F 03D9AA30: 42 2B C6 E8 CF FF FF FF 01 34 24 EB 11 8B CC 8B B+.......4$..... 0018F9AC: 0000079E 03D9AA40: D6 2B D3 42 2B C3 E8 BC FF FF FF 01 1C 24 A8 01 .+.B+........$..