EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 23 Nov 2013 22:00:18 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 13.11.23.7655 1.4 Parameters : 1.5 Compilation Date: Sat, 23 Nov 2013 04:03:53 +0400 1.6 Up Time : 1 minute, 6 seconds Exception: ---------------------------------------------------------------------------------------------------------------------- 2.1 Date : Sat, 23 Nov 2013 22:01:24 +0400 2.2 Address : 00464164 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 13.11.23.7655 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 00464164 in module 'SASPlanet.Debug.exe'. Write of address 00000000. 2.7 ID : EE29 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Computer: ------------------------------------------------------------------ 5.3 Free Memory : 258 Mb 5.5 Free Disk : 26,16 Gb 5.7 Processor : Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz 5.8 Display Mode: 1600 x 1200, 32 bit 5.9 Display DPI : 109 5.10 Video Card : VMware SVGA II (driver 11.6.0.38 - RAM 128 MB) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=1940; Priority=0; Class=TThread4InterfacedThread | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |00464164|SASPlanet.Debug.exe| | | | | |0056C963|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |107[4] | |0056C97A|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |108[5] | |00632B3A|SASPlanet.Debug.exe|u_TileMatrix.pas |TTileMatrix |Create |59[6] | |00632AAC|SASPlanet.Debug.exe|u_TileMatrix.pas |TTileMatrix |Create |53[0] | |00633A7F|SASPlanet.Debug.exe|u_TileMatrixFactory.pas |TTileMatrixFactory |BuildEmpty |274[1] | |00633A64|SASPlanet.Debug.exe|u_TileMatrixFactory.pas |TTileMatrixFactory |BuildEmpty |273[0] | |00633D6D|SASPlanet.Debug.exe|u_TileMatrixFactory.pas |TTileMatrixFactory |BuildZoomChange |358[11] | |00633C98|SASPlanet.Debug.exe|u_TileMatrixFactory.pas |TTileMatrixFactory |BuildZoomChange |347[0] | |006339E7|SASPlanet.Debug.exe|u_TileMatrixFactory.pas |TTileMatrixFactory |BuildNewMatrix |263[29] | |007803D3|SASPlanet.Debug.exe|u_ProjectionInfoFactory.pas |TProjectionInfoFactory |GetByConverterAndZoom |99[36] | |006357EA|SASPlanet.Debug.exe|u_TileMatrixChangeableWithThread.pas |TTileMatrixChangeableWithThread |OnPrepareTileMatrix |260[34] | |00634F10|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |137[13] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |0054B8DC|SASPlanet.Debug.exe|GR32_LowLevel.pas | |GetWrapProcEx |964[0] | |00567DB2|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |SetClipRect |5338[7] | |7E42C1D0|USER32.dll | | |DefWindowProcA | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42F406|USER32.dll | | |SendMessageA | | |7E42F3C2|USER32.dll | | |SendMessageA | | |7E42B11C|USER32.dll | | |SetFocus | | |7E42B112|USER32.dll | | |SetFocus | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42A993|USER32.dll | | |CallWindowProcA | | |7E42AF60|USER32.dll | | |ShowWindow | | |7E42AF56|USER32.dll | | |ShowWindow | | |7C9010E0|ntdll.dll | | |RtlLeaveCriticalSection | | |7E42B3FC|USER32.dll | | |CallNextHookEx | | |7C917E88|ntdll.dll | | |LdrGetProcedureAddress | | |7C80AE69|kernel32.dll | | |GetWindowsDirectoryW | | |7C80AE7B|kernel32.dll | | |GetWindowsDirectoryW | | |7E42A6AB|USER32.dll | | |MonitorFromWindow | | |7E42A6BE|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30]| |7C90DC9A|ntdll.dll | | |NtSetInformationThread | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |0077FD68|SASPlanet.Debug.exe|u_GPSSatelliteInfo.pas |TGPSSatelliteInfo |Create |55[0] | |0077FFFB|SASPlanet.Debug.exe|u_GPSPositionFactory.pas |TGPSPositionFactory |BuildSatelliteInfo |96[1] | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30]| |7C90DC9A|ntdll.dll | | |NtSetInformationThread | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2060; Priority=0; Class=TGarbageCollectorThread | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90DF3A|ntdll.dll | | |ZwWaitForSingleObject | | |7C802550|kernel32.dll | | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll | | |WaitForSingleObject | | |7C802530|kernel32.dll | | |WaitForSingleObject | | |006DF745|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |006DF73C|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006DF6F6|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |7C90D96A|ntdll.dll | | |ZwQueryVirtualMemory | | |7C80BA47|kernel32.dll | | |VirtualQueryEx | | |7C8097B8|kernel32.dll | | |GetCurrentThreadId | | |7C90DBFA|ntdll.dll | | |ZwSetEvent | | |7C80A0B1|kernel32.dll | | |SetEvent | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |006DF5D1|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006DF530|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007E6724|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |588[206]| |007E5C14|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |382[0] | |00896A30|SASPlanet.Debug.exe|SASPlanet.dpr | | |1166[5] | |7C90DC9A|ntdll.dll | | |NtSetInformationThread | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2064; Priority=-15; Class=TThread4InterfacedThread | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90DF2A|ntdll.dll | | |NtWaitForMultipleObjects| | |7C8095BC|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C80A100|kernel32.dll | | |WaitForMultipleObjects | | |7C80A0ED|kernel32.dll | | |WaitForMultipleObjects | | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |0054B8DC|SASPlanet.Debug.exe|GR32_LowLevel.pas | |GetWrapProcEx |964[0] | |00567DB2|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |SetClipRect |5338[7] | |7E42C1D0|USER32.dll | | |DefWindowProcA | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42F406|USER32.dll | | |SendMessageA | | |7E42F3C2|USER32.dll | | |SendMessageA | | |7E42B11C|USER32.dll | | |SetFocus | | |7E42B112|USER32.dll | | |SetFocus | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42A993|USER32.dll | | |CallWindowProcA | | |7E42AF60|USER32.dll | | |ShowWindow | | |7E42AF56|USER32.dll | | |ShowWindow | | |7C9010E0|ntdll.dll | | |RtlLeaveCriticalSection | | |7E42B3FC|USER32.dll | | |CallNextHookEx | | |7C917E88|ntdll.dll | | |LdrGetProcedureAddress | | |7C80AE69|kernel32.dll | | |GetWindowsDirectoryW | | |7C80AE7B|kernel32.dll | | |GetWindowsDirectoryW | | |7E42A6AB|USER32.dll | | |MonitorFromWindow | | |7E42A6BE|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30]| |7C90DC9A|ntdll.dll | | |NtSetInformationThread | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2076; Priority=-2; Class=TThread4InterfacedThread | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90DF2A|ntdll.dll | | |NtWaitForMultipleObjects| | |006D26CB|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|PrepareSubset |617[24] | |7C8097B8|kernel32.dll | | |GetCurrentThreadId | | |0056A19B|SASPlanet.Debug.exe|u_InternalPerformanceCounter.pas |TInternalPerformanceCounter |FinishOperation |113[9] | |7C8095BC|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C80A100|kernel32.dll | | |WaitForMultipleObjects | | |7C80A0ED|kernel32.dll | | |WaitForMultipleObjects | | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |0054B8DC|SASPlanet.Debug.exe|GR32_LowLevel.pas | |GetWrapProcEx |964[0] | |00567DB2|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |SetClipRect |5338[7] | |7E42C1D0|USER32.dll | | |DefWindowProcA | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42F406|USER32.dll | | |SendMessageA | | |7E42F3C2|USER32.dll | | |SendMessageA | | |7E42B11C|USER32.dll | | |SetFocus | | |7E42B112|USER32.dll | | |SetFocus | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42A993|USER32.dll | | |CallWindowProcA | | |7E42AF60|USER32.dll | | |ShowWindow | | |7E42AF56|USER32.dll | | |ShowWindow | | |7C9010E0|ntdll.dll | | |RtlLeaveCriticalSection | | |7E42B3FC|USER32.dll | | |CallNextHookEx | | |7C917E88|ntdll.dll | | |LdrGetProcedureAddress | | |7C80AE69|kernel32.dll | | |GetWindowsDirectoryW | | |7C80AE7B|kernel32.dll | | |GetWindowsDirectoryW | | |7E42A6AB|USER32.dll | | |MonitorFromWindow | | |7E42A6BE|USER32.dll | | |MonitorFromWindow | | |00896B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1191[30]| |7C90DC9A|ntdll.dll | | |NtSetInformationThread | | |---------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2080; Priority=-2; Class=TThread4InterfacedThread | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |7C90DF2A|ntdll.dll | | |NtWaitForMultipleObjects| | |7C80981E|kernel32.dll | | |InterlockedExchange | | |00570C95|SASPlanet.Debug.exe|u_SimpleFlagWithInterlock.pas |TSimpleFlagWithInterlock |CheckFlagAndReset |64[1] | |7C8095BC|kernel32.dll | | |WaitForMultipleObjectsEx| | |7C80A100|kernel32.dll | | |WaitForMultipleObjects | | |7C80A0ED|kernel32.dll | | |WaitForMultipleObjects | | |00634EE2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00634B6F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=2052; Priority=1; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------------------------------------------------| |0054B8DC|SASPlanet.Debug.exe|GR32_LowLevel.pas | |GetWrapProcEx |964[0] | |00567DB2|SASPlanet.Debug.exe|GR32.pas |TCustomBitmap32 |SetClipRect |5338[7] | |7E42C1D0|USER32.dll | | |DefWindowProcA | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | |7E42F406|USER32.dll | | |SendMessageA | | |7E42F3C2|USER32.dll | | |SendMessageA | | |7C9010E0|ntdll.dll | | |RtlLeaveCriticalSection | | |7E42B11C|USER32.dll | | |SetFocus | | |7E42B112|USER32.dll | | |SetFocus | | |7E42C1E4|USER32.dll | | |DefWindowProcA | | ----------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00340000|Normaliz.dll |Unicode Normalization DLL |6.0.5441.0 |23552 |2009-01-07 19:20:36|C:\WINDOWS\system32 | |00360000|jpeg62.dll | | |244736 |2013-05-19 04:01:10|c:\z1 | |003D0000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-05-19 04:01:10|c:\z1 | |00400000|SASPlanet.Debug.exe| |13.11.23.7655 |5814272 |2013-11-23 04:03:58|c:\z1 | |00A10000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-05-19 04:01:10|c:\z1 | |00A80000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2013-05-19 04:01:10|c:\z1 | |00FA0000|guard32.dll |COMODO Internet Security |5.8.15089.2124 |300200 |2011-10-07 18:47:12|C:\WINDOWS\system32 | |01A00000|Pwkbdvw.dll |Pwinked |1.0.0.1 |110592 |2002-01-08 18:03:24|C:\Program Files\ParaWin XP | |02290000|xpsp2res.dll |Service Pack 2 Messages |5.1.2600.5512 |2897920 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |05860000|ieframe.dll |Internet Explorer |8.0.6001.18702 |11063808|2009-03-08 05:39:48|C:\WINDOWS\system32 | |10000000|CityHash.dll | | |14336 |2013-08-12 04:01:10|c:\z1 | |1A400000|URLMON.DLL |OLE32 Extensions for Win32 |8.0.6001.18702 |1206784 |2009-03-08 05:34:56|C:\WINDOWS\system32 | |20000000|xpsp3res.dll |Service Pack 3 Messages |5.1.2600.5512 |689152 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |4FFE0000|fltlib.dll |Filter Library |5.1.2600.5512 |16896 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |5AD70000|uxtheme.dll |Microsoft UxTheme Library |6.0.2900.5512 |218624 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |5B860000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.5512 |337408 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |5DCA0000|iertutil.dll |Run time utility for Internet Explorer |8.0.6001.18702 |1985024 |2009-03-08 05:32:22|C:\WINDOWS\system32 | |5EDD0000|olepro32.dll | |5.1.2600.5512 |84992 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |63000000|wininet.dll |Internet Extensions for Win32 |8.0.6001.18702 |914944 |2009-03-08 05:34:58|C:\WINDOWS\system32 | |70010000|PWICHK.dll | | |65536 |2002-01-08 18:03:22|C:\Program Files\ParaWin XP | |71A50000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |5.1.2600.5512 |245248 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.5512 |19968 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.5512 |82432 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.5512 |22528 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |722B0000|sensapi.dll |SENS Connectivity API DLL |5.1.2600.5512 |7168 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |73000000|winspool.drv |Windows Spooler Driver |5.1.2600.5512 |146432 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76380000|msimg32.dll |GDIEXT Client DLL |5.1.2600.5512 |4608 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76390000|imm32.dll |Windows XP IMM32 API Client DLL |5.1.2600.5512 |110080 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2900.5512 |276992 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |769C0000|USERENV.dll |Userenv |5.1.2600.5512 |727040 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76B40000|winmm.dll |MCI API DLL |5.1.2600.5512 |176128 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.5512 |23040 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.5512 |144384 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76D60000|iphlpapi.dll |IP Helper API |5.1.2600.5512 |94720 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76E80000|rtutils.dll |Routing Utilities |5.1.2600.5512 |44032 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76E90000|rasman.dll |Remote Access Connection Manager |5.1.2600.5512 |61440 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76EB0000|TAPI32.dll |Microsoft® Windows(TM) Telephony API Client DLL |5.1.2600.5512 |181760 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76EE0000|RASAPI32.dll |Remote Access API |5.1.2600.5512 |237056 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |76FD0000|CLBCATQ.DLL | |2001.12.4414.700|498688 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77050000|COMRes.dll | |2001.12.4414.700|792064 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77120000|oleaut32.dll | |5.1.2600.5512 |551936 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |773D0000|comctl32.dll |User Experience Controls Library |6.0.2900.5512 |1054208 |2008-04-14 16:00:00|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83| |774E0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.5512 |1287168 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77C00000|version.dll |Version Checking and File Installation Libraries|5.1.2600.5512 |18944 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.5512 |343040 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77C70000|msv1_0.dll |Microsoft Authentication Package v1.0 |5.1.2600.5512 |132608 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77DD0000|ADVAPI32.dll |Advanced Windows 32 Base API |5.1.2600.5512 |617472 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.5512 |584704 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77F10000|GDI32.dll |GDI Client DLL |5.1.2600.5512 |285184 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77F60000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2900.5512 |474112 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.5512 |56320 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |78480000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.1 |572928 |2008-07-29 08:05:08|C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e | |78520000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.1 |655872 |2008-07-29 08:05:08|C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e | |7C800000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.5512 |989696 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |7C900000|ntdll.dll |NT Layer DLL |5.1.2600.5512 |706048 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |7C9C0000|shell32.dll |Windows Shell Common Dll |6.0.2900.5512 |8461312 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |7E410000|USER32.dll |Windows XP USER API Client DLL |5.1.2600.5512 |578560 |2008-04-14 16:00:00|C:\WINDOWS\system32 | |7E720000|SXS.DLL |Fusion 2.5 |5.1.2600.5512 |713216 |2008-04-14 16:00:00|C:\WINDOWS\system32 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority|Threads|Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |4 |System | | |233472 |Normal |64 | | |396 |smss.exe | | |380928 |Normal |3 |\SystemRoot\System32 | |476 |winlogon.exe | | |4222976 |High |19 |C:\WINDOWS\system32 | |520 |services.exe |Services and Controller app |5.1.2600.5512 |3710976 |Normal |14 |C:\WINDOWS\system32 | |532 |lsass.exe |LSA Shell (Export Version) |5.1.2600.5512 |6320128 |Normal |22 |C:\WINDOWS\system32 | |704 |vmacthlp.exe |VMware Activation Helper |8.4.8.19539 |2826240 |Normal |1 |C:\Program Files\VMware\VMware Tools | |728 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512 |5427200 |Normal |22 |C:\WINDOWS\system32 | |844 |cmdagent.exe |COMODO Internet Security |5.8.15089.2124|1286144 |Normal |33 |C:\Program Files\COMODO\COMODO Internet Security| |876 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512 |20471808|Normal |63 |C:\WINDOWS\system32 | |1232|spoolsv.exe |Spooler SubSystem App |5.1.2600.5512 |6402048 |Normal |10 |C:\WINDOWS\system32 | |1332|TOTALCMD.EXE |Total Commander 32 bit |7.5.6.1 |17580032|Normal |7 |C:\Progs\TotalCmd | |1404|Explorer.EXE |Windows Explorer |6.0.2900.5512 |18898944|Normal |12 |C:\WINDOWS | |1480|VMwareUser.exe |VMware Tools Service |8.4.8.19539 |12333056|Normal |7 |C:\Program Files\VMware\VMware Tools | |1488|cfp.exe |COMODO Internet Security |5.8.16726.2131|6447104 |Normal |28 |C:\Program Files\COMODO\COMODO Internet Security| |1496|pwic.exe | | |3100672 |Normal |1 |C:\Program Files\ParaWin XP | |1516|MultiRes.exe |MultiRes |4.11.1.58 |315392 |Normal |1 |C:\Progs\MultiRes | |1524|procexp.exe |Sysinternals Process Explorer |15.5.0.0 |15233024|High |6 |C:\Progs\SysInternals | |1720|vmtoolsd.exe |VMware Tools Core Service |8.4.8.19539 |10534912|Normal |5 |C:\Program Files\VMware\VMware Tools | |1876|VMUpgradeHelper.exe|VMware virtual hardware upgrade helper application|8.4.8.19539 |4378624 |Normal |4 |C:\Program Files\VMware\VMware Tools | |2044|SASPlanet.Debug.exe| |13.11.23.7655 |88227840|Normal |15 |c:\z1 | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------- 00464148 call CreateFileMappingA 0046414D mov ebx, eax 0046414F push $00 00464151 push $00 00464153 push $00 00464155 push $000F001F ; ''... 0046415A push ebx 0046415B call MapViewOfFile 00464160 mov [edi], eax 00464162 mov eax, [edi] 00464164 mov [eax], esi ; <-- EXCEPTION 00464166 mov eax, [edi] 00464168 add eax, +$04 0046416B mov [edi], eax 0046416D xor eax, eax 0046416F pop edx 00464170 pop ecx 00464171 pop ecx 00464172 mov fs:[eax], edx 00464175 push $0046418F ; '‹Ã_^[‹å]ÃSV‹Ú‹ðƒ>' 0046417A lea eax, [ebp-$14] Registers: ----------------------------- EAX: 0794DB90 EDI: FB800014 EBX: 00407892 ESI: 00407892 ECX: 0794DB00 ESP: 068DFC50 EDX: 00407892 EIP: 0040788D Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 068DFC50: 00000004 03075D90: 89 30 8B 07 83 C0 04 89 07 33 C0 5A 59 59 64 89 .0.......3.ZYYd. 068DFC54: 0040328C 03075DA0: 10 68 8F 41 46 00 8D 45 EC BA 04 00 00 00 E8 89 .h.AF..E........ 068DFC58: 00632994 03075DB0: 1D FA FF C3 E9 13 15 FA FF EB EB 8B C3 5F 5E 5B ............._^[ 068DFC5C: 00000000 03075DC0: 8B E5 5D C3 53 56 8B DA 8B F0 83 3E 00 74 1F 8B ..].SV.....>.t.. 068DFC60: 00407892 03075DD0: 03 83 E8 04 89 03 8B 03 50 E8 12 52 FA FF 33 C0 ........P..R..3. 068DFC64: 06753B94 03075DE0: 89 03 8B 06 50 E8 7E 4C FA FF 33 C0 89 06 5E 5B ....P.~L..3...^[ 068DFC68: 068DFE8F 03075DF0: C3 8D 40 00 55 8B EC 83 C4 F8 53 56 8B D8 8B C3 ..@.U.....SV.... 068DFC6C: 06753B60 03075E00: E8 27 FA FF FF 84 C0 0F 84 AF 00 00 00 83 7B 60 .'............{` 068DFC70: 0056C968 03075E10: 00 0F 84 A5 00 00 00 B2 01 A1 FC 5F 42 00 E8 A5 ..........._B... 068DFC74: 07D3BAC0 03075E20: 0C FA FF 89 45 FC 33 C0 55 68 89 42 46 00 64 FF ....E.3.Uh.BF.d. 068DFC78: 068DFCA4 03075E30: 30 64 89 20 C6 45 FB 01 8D 55 FB B9 01 00 00 00 0d. .E...U...... 068DFC7C: 0056C97F 03075E40: 8B 45 FC 8B 30 FF 56 10 8B 55 FC 8B C3 8B 08 FF .E..0.V..U...... 068DFC80: 0056C987 03075E50: 51 10 BA AC E8 89 00 B8 A8 E8 89 00 E8 63 FF FF Q............c.. 068DFC84: 06753B60 03075E60: FF 8B 45 FC 8B 10 FF 12 8B D0 B9 AC E8 89 00 8B ..E............. 068DFC88: 00000001 03075E70: 43 60 E8 E1 FD FF FF A3 A8 E8 89 00 83 3D AC E8 C`...........=.. 068DFC8C: 06753B9C 03075E80: 89 00 00 74 1A 8B 45 FC 8B 10 FF 12 8B C8 8B 15 ...t..E.........