EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Thu, 16 Apr 2015 08:24:01 +0300 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 15.4.16.8669 1.4 Parameters : 1.5 Compilation Date: Thu, 16 Apr 2015 07:56:35 +0300 1.6 Up Time : 27 minutes, 46 seconds Exception: ------------------------------------------------------ 2.1 Date : Thu, 16 Apr 2015 08:51:48 +0300 2.2 Address : 00416EAC 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 15.4.16.8669 2.5 Type : EOSError 2.6 Message : System Error. Code:_2. Не удается найти указанный файл. 2.7 ID : AEC1 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: --------------------------------------------------------------------------------------------------------------- 5.3 Free Memory : 1511 Mb 5.5 Free Disk : 15,85 Gb 5.7 Processor : Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz 5.8 Display Mode: 1280 x 1024, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Radeon X1300 / X1550 Series (Microsoft Corporation - WDDM) (driver 8.56.1.15 - RAM 128 MB) Operating System: ----------------------------------- 6.1 Type : Microsoft Windows 7 6.2 Build # : 7600 6.3 Update : 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------ |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |*Exception Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |00416EAC|SASPlanet.Debug.exe| | | | | |006ED15C|SASPlanet.Debug.exe|u_InetFunc.pas | | |62[0] | |006ED0C8|SASPlanet.Debug.exe|u_InetFunc.pas | | |44[0] | |006ED2CB|SASPlanet.Debug.exe|u_InetFunc.pas | |OpenFileInDefaultProgram|79[2] | |006ED2A4|SASPlanet.Debug.exe|u_InetFunc.pas | |OpenFileInDefaultProgram|77[0] | |008F76B2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |NopendirClick |4793[16] | |00593C06|SASPlanet.Debug.exe|TB2Item.pas |TTBCustomItem |Click |1513[26] | |00593AFA|SASPlanet.Debug.exe|TB2Item.pas |TTBCustomItem |ClickWndProc |1459[29] | |77033573|USER32.dll | | |DispatchMessageA | | |77033569|USER32.dll | | |DispatchMessageA | | |00907D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1317[32] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=7700; Priority=0; Class=TGarbageCollectorThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E6A|ntdll.dll | | |NtWaitForSingleObject | | |75AD1730|KERNELBASE.dll | | |WaitForSingleObjectEx | | |762FEFFE|kernel32.dll | | |WaitForSingleObjectEx | | |762FEFC0|kernel32.dll | | |WaitForSingleObjectEx | | |762FEFAD|kernel32.dll | | |Sleep | | |762FEFA0|kernel32.dll | | |Sleep | | |00748405|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |007483FC|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |007483B6|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |777456AA|ntdll.dll | | |ZwQueryVirtualMemory | | |75AD853D|KERNELBASE.dll | | |VirtualQueryEx | | |762FF212|kernel32.dll | | |GetCurrentThreadId | | |77745A2A|ntdll.dll | | |ZwSetEvent | | |75AD67A4|KERNELBASE.dll | | |GetCurrentThreadId | | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |00748291|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |007481F0|SASPlanet.Debug.exe|vsagps_public_tracks.pas | |Get_TrackType_By_Ext |219[8] | |0083F8EC|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |632[206] | |0083EB1C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |426[0] | |00907BE4|SASPlanet.Debug.exe|SASPlanet.dpr | | |1291[6] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=8408; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |75AD686C|KERNELBASE.dll | | |GetProcessHeap | | |75AD68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |762FF15B|kernel32.dll | | |InterlockedDecrement | | |762FF09C|kernel32.dll | | |TlsGetValue | | |762FF299|kernel32.dll | | |GetCurrentThreadId | | |762FF286|kernel32.dll | | |GetCurrentThreadId | | |0070998A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0065E953|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0065E994|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065E97C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065E81D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |0078A66E|SASPlanet.Debug.exe|u_MarkSystemImplChangeable.pas |TMarkSystemImplChangeable |OnAppStarted |190[2] | |00580946|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064BC06|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064C4EE|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00840C2C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1010[1] | |00840C0C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[0] | |008EC0C2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1689[202]| |77734780|ntdll.dll | | |memset | | |7702CC6C|USER32.dll | | |SendMessageA | | |7702CC28|USER32.dll | | |SendMessageA | | |7702CBB3|USER32.dll | | |SetFocus | | |7702CBA9|USER32.dll | | |SetFocus | | |7702E133|USER32.dll | | |DefWindowProcA | | |77746B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77031484|USER32.dll | | |ShowWindow | | |7703147A|USER32.dll | | |ShowWindow | | |7703F006|USER32.dll | | |IntersectRect | | |7703593C|USER32.dll | | |MonitorFromWindow | | |77035952|USER32.dll | | |MonitorFromWindow | | |00907D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1317[32] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3576; Priority=-15; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |75AD686C|KERNELBASE.dll | | |GetProcessHeap | | |75AD68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |762FF09C|kernel32.dll | | |TlsGetValue | | |762FF299|kernel32.dll | | |GetCurrentThreadId | | |762FF286|kernel32.dll | | |GetCurrentThreadId | | |0070998A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0065E953|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0065E994|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065E97C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065E81D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |00840C5E|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1014[5] | |00840C0C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[0] | |008EC0C2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1689[202]| |77734780|ntdll.dll | | |memset | | |7702CC6C|USER32.dll | | |SendMessageA | | |7702CC28|USER32.dll | | |SendMessageA | | |7702CBB3|USER32.dll | | |SetFocus | | |7702CBA9|USER32.dll | | |SetFocus | | |7702E133|USER32.dll | | |DefWindowProcA | | |77746B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77031484|USER32.dll | | |ShowWindow | | |7703147A|USER32.dll | | |ShowWindow | | |7703F006|USER32.dll | | |IntersectRect | | |7703593C|USER32.dll | | |MonitorFromWindow | | |77035952|USER32.dll | | |MonitorFromWindow | | |00907D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1317[32] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3424; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |75AD686C|KERNELBASE.dll | | |GetProcessHeap | | |00573F96|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |FreeInstance |143[7] | |75AD68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |762FF212|kernel32.dll | | |GetCurrentThreadId | | |762FF09C|kernel32.dll | | |TlsGetValue | | |762FF299|kernel32.dll | | |GetCurrentThreadId | | |762FF286|kernel32.dll | | |GetCurrentThreadId | | |0070998A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0065E953|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0065E994|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065E97C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065E81D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |0070A2B7|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas |TBitmapTileMatrixChangeableWithThread |OnAppStarted |250[1] | |00580946|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064BC06|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064C4EE|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00840C2C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1010[1] | |00840C0C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[0] | |008EC0C2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1689[202]| |77734780|ntdll.dll | | |memset | | |7702CC6C|USER32.dll | | |SendMessageA | | |7702CC28|USER32.dll | | |SendMessageA | | |7702CBB3|USER32.dll | | |SetFocus | | |7702CBA9|USER32.dll | | |SetFocus | | |7702E133|USER32.dll | | |DefWindowProcA | | |77746B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77031484|USER32.dll | | |ShowWindow | | |7703147A|USER32.dll | | |ShowWindow | | |7703F006|USER32.dll | | |IntersectRect | | |7703593C|USER32.dll | | |MonitorFromWindow | | |77035952|USER32.dll | | |MonitorFromWindow | | |00907D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1317[32] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=6928; Priority=0; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |75AD686C|KERNELBASE.dll | | |GetProcessHeap | | |00573F96|SASPlanet.Debug.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |FreeInstance |143[7] | |75AD68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |762FF212|kernel32.dll | | |GetCurrentThreadId | | |762FF09C|kernel32.dll | | |TlsGetValue | | |762FF299|kernel32.dll | | |GetCurrentThreadId | | |762FF286|kernel32.dll | | |GetCurrentThreadId | | |0070998A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0065E953|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0065E994|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065E97C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065E81D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |0070A2B7|SASPlanet.Debug.exe|u_BitmapTileMatrixChangeableWithThread.pas |TBitmapTileMatrixChangeableWithThread |OnAppStarted |250[1] | |00580946|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064BC06|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064C4EE|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00840C2C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1010[1] | |00840C0C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[0] | |008EC0C2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1689[202]| |77734780|ntdll.dll | | |memset | | |7702CC6C|USER32.dll | | |SendMessageA | | |7702CC28|USER32.dll | | |SendMessageA | | |7702CBB3|USER32.dll | | |SetFocus | | |7702CBA9|USER32.dll | | |SetFocus | | |7702E133|USER32.dll | | |DefWindowProcA | | |77746B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77031484|USER32.dll | | |ShowWindow | | |7703147A|USER32.dll | | |ShowWindow | | |7703F006|USER32.dll | | |IntersectRect | | |7703593C|USER32.dll | | |MonitorFromWindow | | |77035952|USER32.dll | | |MonitorFromWindow | | |00907D31|SASPlanet.Debug.exe|SASPlanet.dpr | | |1317[32] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9752; Priority=-2; Class=TThread4InterfacedThread | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |77745E4A|ntdll.dll | | |NtWaitForMultipleObjects| | |75AD686C|KERNELBASE.dll | | |GetProcessHeap | | |75AD68C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx| | |762FF212|kernel32.dll | | |GetCurrentThreadId | | |762FF09C|kernel32.dll | | |TlsGetValue | | |762FF299|kernel32.dll | | |GetCurrentThreadId | | |762FF286|kernel32.dll | | |GetCurrentThreadId | | |0070998A|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |142[5] | |0065E953|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |232[7] | |76301172|kernel32.dll | | |BaseThreadInitThunk | | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=7756; Priority=1; Class=; [Main] | |----------------------------------------------------------------------------------------------------------------------------------------------------------| |0065E994|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |246[3] | |0065E97C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[0] | |0065E81D|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |180[6] | |0071DE83|SASPlanet.Debug.exe|u_VectorTileMatrixChangeableForVectorLayers.pas|TVectorTileMatrixChangeableForVectorLayers|OnAppStarted |252[1] | |00580946|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |155[1] | |0064BC06|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |0064C4EE|SASPlanet.Debug.exe|EmbeddedWB.pas | |Finalization |3554[2] | |00840C2C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1010[1] | |00840C0C|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |1009[0] | |008EC0C2|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1689[202]| |77734780|ntdll.dll | | |memset | | |7702CC6C|USER32.dll | | |SendMessageA | | |7702CC28|USER32.dll | | |SendMessageA | | |7702CBB3|USER32.dll | | |SetFocus | | |7702CBA9|USER32.dll | | |SetFocus | | |7702E133|USER32.dll | | |DefWindowProcA | | |77746B40|ntdll.dll | | |RtlLeaveCriticalSection | | |77031484|USER32.dll | | |ShowWindow | | |7703147A|USER32.dll | | |ShowWindow | | ------------------------------------------------------------------------------------------------------------------------------------------------------------ Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00400000|SASPlanet.Debug.exe| |15.4.16.8669 |6355456 |2015-04-16 07:56:38|T:\GoogleMV | |01A60000|f1ct.dll |Google Earth terrain reader |1.0.2.0 |165376 |2013-01-19 15:43:52|T:\GoogleMV | |02760000|TileStorage_GC.dll | |1.0.1.0 |163840 |2012-11-18 21:41:14|T:\GoogleMV | |0F000000|detoured.dll |Marks process affected by Microsoft Research Detours Package |2.1.67.0 |11544 |2013-10-08 20:03:52|C:\Program Files\Crypto Pro\CSP | |0F6D0000|xercesxmldom.dll |Xerces XML DOM Interfaces |7.0.0.0 |325120 |2007-08-26 22:03:00|T:\GoogleMV | |0F8E0000|XERCESLIB.DLL |Shared Library for Xerces-C Version 1.6.0 |1.6.0.0 |1731584 |2007-08-26 22:03:00|T:\GoogleMV | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:56|T:\GoogleMV | |32600000|CC3260MT.DLL |Borland C++ Multi-thread RTL (WIN/VCL MT) |6.0.1.0 |1500160 |2007-06-01 22:01:00|C:\program files\Delphi_2007_Lite\Bin | |58C50000|TimeZone.dll |Based on tzdata.2014i (2014-10-21) and tz_world_mp (2013-11-26)|1.0.5.0 |6730752 |2014-10-24 12:01:18|T:\GoogleMV | |60900000|sqlite3.dll | | |573100 |2012-02-04 20:31:16|T:\GoogleMV | |61170000|cpcrypt.dll |Модуль исправления функционирования crypt32 |3.6.4648.0 |48408 |2013-10-08 19:54:38|C:\Program Files\Crypto Pro\CSP | |615A0000|cpsecur.dll |Модуль исправления функционирования secur32.dll |3.6.4616.0 |29464 |2013-10-08 19:58:22|C:\Program Files\Crypto Pro\CSP | |61670000|cpwinet.dll |Модуль исправления функционирования wininet.dll |3.6.4469.0 |30488 |2013-10-08 19:58:48|C:\Program Files\Crypto Pro\CSP | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:10|T:\GoogleMV | |68C70000|ieframe.dll |Интернет-обозреватель |8.0.7600.16385 |10973696|2009-07-14 04:15:30|C:\Windows\System32 | |6B4C0000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2012-12-13 13:56:50|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |6C240000|jpeg62.dll | | |244736 |2013-08-02 15:12:56|T:\GoogleMV | |6C840000|libimagequant.dll | | |221776 |2014-05-17 22:32:50|T:\GoogleMV | |6D3B0000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:56|T:\GoogleMV | |6F0A0000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2012-12-13 13:56:50|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |6F940000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 04:16:14|C:\Windows\system32 | |70E80000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7600.16385 |319488 |2009-07-14 04:14:10|C:\Windows\system32 | |71BA0000|CityHash.dll | | |14336 |2013-08-25 10:29:28|T:\GoogleMV | |724D0000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 04:16:14|C:\Windows\system32 | |72850000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 04:16:22|C:\Windows\system32 | |73230000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7600.16385 |216576 |2009-07-14 04:15:22|C:\Windows\System32 | |73640000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 04:16:20|C:\Windows\system32 | |73660000|iphlpapi.DLL |IP Helper API |6.1.7600.16385 |103936 |2009-07-14 04:15:34|C:\Windows\system32 | |736F0000|geodesic.dll | | |27648 |2013-11-28 09:06:52|T:\GoogleMV | |73910000|NLAapi.dll |Network Location Awareness 2 |6.1.7600.16385 |51712 |2009-07-14 04:16:04|C:\Windows\system32 | |73950000|winmm.dll |MCI API DLL |6.1.7600.16385 |194048 |2009-07-14 04:16:20|C:\Windows\system32 | |73A30000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 04:15:46|C:\Windows\system32 | |73AD0000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2009-07-14 04:16:14|C:\Windows\System32 | |73B30000|rtutils.dll |Routing Utilities |6.1.7600.16385 |37376 |2009-07-14 04:16:14|C:\Windows\system32 | |73B40000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 04:16:14|C:\Windows\system32 | |73B70000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 04:16:14|C:\Windows\system32 | |73C00000|olepro32.dll | |6.1.7600.16385 |90112 |2009-07-14 04:16:14|C:\Windows\system32 | |73FA0000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7600.16385 |988160 |2009-07-14 04:16:14|C:\Windows\system32 | |743B0000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |249856 |2009-07-14 04:16:18|C:\Windows\system32 | |747C0000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 04:16:12|C:\Windows\system32 | |74870000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 04:16:22|C:\Windows\System32 | |74CE0000|dnsapi.DLL |Динамическая библиотека API DNS-клиента |6.1.7600.16385 |269824 |2009-07-14 04:15:14|C:\Windows\system32 | |74E10000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 04:16:22|C:\Windows\System32 | |74E20000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7600.16385 |232448 |2009-07-14 04:15:52|C:\Windows\system32 | |74E80000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7600.16385 |1680896 |2009-07-14 04:03:52|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc| |75050000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 04:16:18|C:\Windows\system32 | |75760000|SspiCli.dll |Security Support Provider Interface |6.1.7600.16385 |99840 |2009-07-14 04:16:16|C:\Windows\system32 | |757D0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 04:15:08|C:\Windows\system32 | |757E0000|SXS.DLL |Fusion 2.5 |6.1.7600.16385 |380416 |2009-07-14 04:16:16|C:\Windows\system32 | |75850000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 04:16:14|C:\Windows\system32 | |758C0000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7600.16385 |33280 |2009-07-14 04:15:44|C:\Windows\system32 | |758D0000|CRYPT32.dll |API32 криптографии |6.1.7600.17035 |1157632 |2012-06-02 07:45:22|C:\Windows\system32 | |75AB0000|DEVOBJ.dll |Device Information Set DLL |6.1.7600.16385 |64512 |2009-07-14 04:15:12|C:\Windows\system32 | |75AD0000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |288256 |2009-07-14 04:15:36|C:\Windows\system32 | |75B20000|CFGMGR32.dll |Configuration Manager DLL |6.1.7600.16385 |145920 |2009-07-14 04:15:04|C:\Windows\system32 | |75BB0000|iertutil.dll |Run time utility for Internet Explorer |8.0.7600.16385 |2058240 |2009-07-14 04:15:30|C:\Windows\system32 | |75DE0000|LPK.dll |Language Pack |6.1.7600.16385 |26624 |2009-07-14 04:15:38|C:\Windows\system32 | |75DF0000|GDI32.dll |GDI Client DLL |6.1.7600.16385 |304640 |2009-07-14 04:15:24|C:\Windows\system32 | |75E40000|SETUPAPI.dll |Windows Setup API |6.1.7600.16385 |1668608 |2009-07-14 04:16:16|C:\Windows\system32 | |75FE0000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7600.16385 |268800 |2009-07-14 04:16:20|C:\Windows\system32 | |76030000|oleaut32.dll | |6.1.7600.16385 |571904 |2009-07-14 04:16:14|C:\Windows\system32 | |760C0000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 04:09:02|C:\Windows\system32 | |760D0000|URLMON.DLL |Расширения OLE32 для Win32 |8.0.7600.16385 |1224704 |2009-07-14 04:16:18|C:\Windows\system32 | |76210000|advapi32.dll |Расширенная библиотека API Windows 32 |6.1.7600.16385 |640000 |2009-07-14 04:14:54|C:\Windows\system32 | |762B0000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |857088 |2009-07-14 04:15:36|C:\Windows\system32 | |76390000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 04:16:14|C:\Windows\SYSTEM32 | |763B0000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 04:16:12|C:\Windows\system32 | |763C0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 04:16:14|C:\Windows\system32 | |763D0000|shell32.dll |Общая библиотека оболочки Windows |6.1.7600.16385 |12866560|2009-07-14 04:16:16|C:\Windows\system32 | |77020000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7600.16385 |811520 |2009-07-14 04:16:18|C:\Windows\system32 | |770F0000|wininet.dll |Расширения Интернета для Win32 |8.0.7600.16385 |977920 |2009-07-14 04:16:20|C:\Windows\system32 | |771F0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 04:15:04|C:\Windows\system32 | |77280000|USP10.dll |Uniscribe Unicode script processor |1.626.7600.16385 |627200 |2009-07-14 04:16:18|C:\Windows\system32 | |77320000|ole32.dll |Microsoft OLE для Windows |6.1.7600.16385 |1412608 |2009-07-14 04:16:14|C:\Windows\system32 | |77480000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7600.16385 |350208 |2009-07-14 04:16:16|C:\Windows\system32 | |774E0000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7600.16385 |652288 |2009-07-14 04:16:14|C:\Windows\system32 | |77590000|msvcrt.dll |Windows NT CRT DLL |7.0.7600.16385 |690688 |2009-07-14 04:15:52|C:\Windows\system32 | |77640000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7600.16385 |206336 |2009-07-14 04:16:22|C:\Windows\system32 | |77680000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7600.16385 |486912 |2009-07-14 04:15:08|C:\Windows\system32 | |77700000|ntdll.dll |Системная библиотека NT |6.1.7600.16385 |1286144 |2009-07-14 04:17:52|C:\Windows\SYSTEM32 | |77840000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7600.16385 |118272 |2009-07-14 04:15:34|C:\Windows\system32 | |77860000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 04:15:44|C:\Windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |117 | | |280 |smss.exe |Диспетчер сеанса Windows |6.1.7600.16385|0 |Above-Normal|2 | | |388 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |9 | | |448 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |456 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |14 | | |496 |services.exe |Приложение служб и контроллеров |6.1.7600.16385|0 |Normal |6 | | |544 |lsass.exe |Local Security Authority Process |6.1.7600.16385|0 |Normal |10 | | |552 |lsm.exe |Служба диспетчера локальных сеансов |6.1.7600.16385|0 |Normal |9 | | |596 |NvXDSync.exe | | |0 |Normal |9 | | |636 |winlogon.exe |Программа входа в систему Windows |6.1.7600.16385|0 |High |3 | | |704 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |12 | | |764 |nvvsvc.exe |NVIDIA Driver Helper Service, Version 307.83|8.17.13.783 |0 |Normal |4 | | |804 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |892 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |19 | | |956 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |14 | | |992 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |44 | | |1024|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1036|nvtray.exe |NVIDIA Settings |7.17.13.783 |0 |Normal |4 |C:\Program Files\NVIDIA Corporation\Display| |1120|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |21 | | |1196|ipoint.exe |IPoint.exe |8.20.468.0 |0 |Normal |9 |C:\Program Files\Microsoft IntelliPoint | |1212|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |35 | | |1304|infium.exe | |9.0.4.5 |0 |Normal |61 |D:\Programs\QIP Infium | |1368|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |17 | | |1480|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1500|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |24 | | |1636|dwservice.exe | | |0 |Normal |23 | | |1676|SearchIndexer.exe |Индексатор службы Microsoft Windows Search |7.0.7600.16385|0 |Normal |14 | | |1720|frwl_svc.exe | | |0 |Normal |12 | | |1868|hasplms.exe |Sentinel LDK License Manager Service |15.0.1.36539 |0 |Normal |15 | | |1896|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1928|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1952|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |3 | | |2016|QUICKSTART.EXE | | |0 |Normal |3 |D:\Programs\QuickStart | |2052|dwengine.exe | | |0 |Normal |26 | | |2176|conhost.exe |Окно консоли узла |6.1.7600.16385|0 |Normal |2 |C:\Windows\system32 | |2216|dwarkdaemon.exe | | |0 |Normal |5 | | |2280|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |5 | | |2288|dpupdchk.exe |dpupdchk.exe |8.20.468.0 |0 |Normal |5 |C:\Program Files\Microsoft IntelliPoint | |2388|outcall.exe |Asterisk Outlook integration |1.0.0.1 |0 |Normal |3 |C:\Program Files\Bicom Systems\OutCALL | |2416|TortoiseHgOverlayServer.exe|TortoiseHg Overlay Icon Server |3.0.0.0 |0 |Normal |3 |C:\Program Files\TortoiseHg | |2508|audiodg.exe |Изоляция графов аудиоустройств Windows |6.1.7600.16385|0 |Normal |5 | | |2708|Dwm.exe |Диспетчер окон рабочего стола |6.1.7600.16385|0 |Normal |5 |C:\Windows\system32 | |3124|dwengine.exe | | |0 |Normal |3 | | |3364|spideragent.exe |SpIDer Agent for Windows |8.1.1.5122 |0 |Normal |17 |C:\Program Files\DrWeb | |3380|LMS.exe | | |0 |Normal |4 | | |3408|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |13 | | |3504|UNS.exe | | |0 |Normal |14 | | |3648|twms.exe |tiny wms server | |0 |Normal |11 |T:\GoogleMV | |3688|frwl_notify.exe |Dr.Web Firewall for Windows notify module |8.0.2.8070 |0 |Normal |6 |C:\Program Files\DrWeb | |3804|TeamViewer.exe |TeamViewer 9 |9.0.38846.0 |0 |Normal |18 |C:\Program Files\TeamViewer\Version9 | |3860|TiltWheelMouse.exe |pximouse |1.0.0.2 |0 |Normal |2 |C:\Windows\System32 | |3932|uTorrent.exe |µTorrent |3.4.2.39710 |0 |Normal |30 |\\fs\userdoc\Garl\Application Data\uTorrent| |4036|taskhost.exe |Хост-процесс для задач Windows |6.1.7600.16385|0 |Normal |9 |C:\Windows\system32 | |4160|ndn.exe | | |0 |Normal |6 |D:\Programs\NDN_W32 | |4196|opera.exe |Opera Internet Browser |12.17.1863.0 |0 |Normal |24 |C:\Program Files\Opera | |4708|Explorer.exe |Проводник |6.1.7600.16385|0 |Normal |27 |C:\Windows | |4784|SASPlanet.Debug.exe | |15.4.16.8669 |0 |Normal |31 |T:\GoogleMV | |4880|cmd.exe |Обработчик команд Windows |6.1.7600.16385|0 |Normal |1 |C:\Windows\system32 | |5252|svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |6 | | |5504|chrome.exe |Google Chrome |30.0.1599.69 |0 |Normal |14 |C:\Program Files\Google\Chrome\Application | |5704|WerFault.exe |Отчет об ошибках Windows |6.1.7600.16385|0 |Normal |4 |C:\Windows\system32 | |5708|chrome.exe |Google Chrome |30.0.1599.69 |0 |Normal |9 |C:\Program Files\Google\Chrome\Application | |6180|conhost.exe |Окно консоли узла |6.1.7600.16385|0 |Normal |2 |C:\Windows\system32 | |6868|OUTLOOK.EXE |Microsoft Office Outlook |12.0.6691.5000|0 |Normal |43 |C:\Program Files\Microsoft Office\Office12 | |6932|ndn.exe | | |0 |Normal |6 |D:\Programs\NDN_W32 | |7192|TeamViewer_Service.exe | | |0 |Normal |24 | | |7416|mstsc.exe |Подключение к удаленному рабочему столу |6.1.7600.16385|0 |Normal |12 |C:\Windows\system32 | |7440|Qfinder.exe |Qfinder |5.0.1.225 |0 |Normal |13 |C:\Program Files\QNAP\Qfinder | |7728|WerFault.exe |Отчет об ошибках Windows |6.1.7600.16385|0 |Normal |4 |C:\Windows\system32 | |7844|spoolsv.exe |Диспетчер очереди печати |6.1.7600.16385|0 |Normal |25 | | |8104|WerFault.exe |Отчет об ошибках Windows |6.1.7600.16385|0 |Normal |4 |C:\Windows\system32 | |8164|iSCSIAgent.exe |iSCSIAgent Application |1.0.0.1 |0 |Normal |3 |C:\Program Files\QNAP\Qfinder | |8176|chrome.exe |Google Chrome |30.0.1599.69 |0 |Normal |19 |C:\Program Files\Google\Chrome\Application | |8264|chrome.exe |Google Chrome |30.0.1599.69 |0 |Normal |34 |C:\Program Files\Google\Chrome\Application | |8708|tv_w32.exe | | |0 |Normal |2 | | |9884|conhost.exe |Окно консоли узла |6.1.7600.16385|0 |Normal |2 |C:\Windows\system32 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: -------------------------------------------------------------------------------- 00416E8A call -$00001B67 00416E8F mov edx, eax 00416E91 jmp +$14 00416E93 mov ecx, [$9233C0] 00416E99 mov dl, $01 00416E9B mov eax, dword ptr [EOSError] 00416EA0 call -$00001BB9 00416EA5 mov edx, eax 00416EA7 mov [edx+$0C], ebx 00416EAA mov eax, edx 00416EAC call -$00011651 ; <-- EXCEPTION 00416EB1 xor eax, eax 00416EB3 pop edx 00416EB4 pop ecx 00416EB5 pop ecx 00416EB6 mov fs:[eax], edx 00416EB9 push $00416ECE ; '[‹е]ГђS‹Ш…Ыu.иPяяя‹Г[ГSVі.‹5tЉђ' 00416EBE lea eax, [ebp-$14] 00416EC1 call -$00010FBE 00416EC6 ret Registers: ----------------------------- EAX: 0F2DDED0 EDI: 0012FDA0 EBX: 00000002 ESI: 00000000 ECX: 00000000 ESP: 0012FC2C EDX: 00416EB1 EIP: 00416EAC Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012FC2C: 0012FC64 18309BB0: E8 AF E9 FE FF 33 C0 5A 59 59 64 89 10 68 CE 6E .....3.ZYYd..h.n 0012FC30: 0040573C 18309BC0: 41 00 8D 45 EC E8 42 F0 FE FF C3 E9 F0 E7 FE FF A..E..B......... 0012FC34: 0012FC50 18309BD0: EB F0 5B 8B E5 5D C3 90 53 8B D8 85 DB 75 05 E8 ..[..]..S....u.. 0012FC38: 00000000 18309BE0: 50 FF FF FF 8B C3 5B C3 53 56 B3 01 8B 35 74 8A P.....[.SV...5t. 0012FC3C: 00000000 18309BF0: 90 00 EB 07 FF 56 04 8B D8 8B 36 84 DB 74 04 85 .....V....6..t.. 0012FC40: 00000002 18309C00: F6 75 F1 8B C3 5E 5B C3 53 56 BE 74 8A 90 00 EB .u...^[.SV.t.... 0012FC44: 00000000 18309C10: 12 8B 1E 8B 03 89 06 BA 08 00 00 00 8B C3 E8 FD ................ 0012FC48: 16B3F398 18309C20: C1 FE FF 83 3E 00 75 E9 5E 5B C3 90 8B 10 33 50 ....>.u.^[....3P 0012FC4C: 00D0820B 18309C30: 04 33 50 08 33 50 0C 89 D0 C3 8B C0 8B 10 C1 CA .3P.3P.......... 0012FC50: 0012FCBC 18309C40: 05 33 50 04 C1 CA 05 33 50 08 C1 CA 05 33 50 0C .3P....3P....3P. 0012FC54: 00416E3A 18309C50: 89 D0 C3 90 8B 0D 94 27 92 00 B2 01 A1 70 C6 40 .......'.....p.@ 0012FC58: 00416EE0 18309C60: 00 E8 8A E3 FF FF E8 F9 E8 FE FF C3 53 56 57 55 ............SVWU 0012FC5C: 16ADE888 18309C70: A1 5C 2A 92 00 83 38 00 74 26 6A 0A 68 D8 6F 41 .\*...8.t&j.h.oA 0012FC60: 006ED161 18309C80: 00 A1 5C 2A 92 00 8B 00 50 E8 92 20 FF FF 50 A1 ..\*....P.. ..P. 0012FC64: 0012FCD8 18309C90: 5C 2A 92 00 8B 00 50 E8 94 23 FF FF 8B F8 EB 33 \*....P..#.....3 0012FC68: 0040573C 18309CA0: 33 FF 8B 1D B4 32 92 00 8B 1B 85 DB 74 25 8B F3 3....2......t%..