EurekaLog 6.1.04 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 12 Dec 2015 13:30:40 +0300 1.2 Name/Description: SASPlanet.Unicode.exe 1.3 Version Number : 15.11.11.9233 1.4 Parameters : 1.5 Compilation Date: Wed, 11 Nov 2015 15:55:30 +0300 1.6 Up Time : 3 seconds Exception: ----------------------------------------------------- 2.1 Date : Sat, 12 Dec 2015 13:30:44 +0300 2.2 Address : 7BC48889 2.3 Module Name : ntdll.dll - (Wine ntdll) 2.4 Module Version: 5.1.2600.2180 2.5 Type : EExternalException 2.6 Message : External exception C0000264. 2.7 ID : 0D21 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Computer: ----------------------------------------------------- 5.3 Free Memory : 4449 Mb 5.5 Free Disk : 9,98 Gb 5.7 Processor : Intel(R) Pentium(R) 4 CPU 2.40GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Wine Display Adapter (driver ) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method|Line | ------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9; Priority=1; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------------------------------------| |7BC48889|ntdll.dll | | | | | |00619CA7|SASPlanet.Unicode.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |129[4] | |00617AC4|SASPlanet.Unicode.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |EndWrite |191[1] | |0089434E|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |149[16] | |00894280|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |133[0] | |00893FE3|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |89[20] | |00893E94|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |69[0] | |00C20CF0|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |765[329]| |00C1FA68|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |436[0] | |00D7B82C|SASPlanet.Unicode.exe|SASPlanet.dpr | | |1382[6] | ------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00330000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00390000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00400000|SASPlanet.Unicode.exe| |15.11.11.9233 |11288064|2015-11-11 15:55:32|C:\tmp\SAS.Planet.Release.151111| |10000000|CityHash.dll | | |14336 |2013-08-25 10:29:26|C:\tmp\SAS.Planet.Release.151111| |5DCA0000|iertutil.dll |Run time utility for Internet Explorer |7.0.5730.13 |266752 |2007-08-13 17:34:04|C:\windows\system32 | |61410000|URLMON.DLL |OLE32 Extensions for Win32 |7.0.5730.13 |1162240 |2007-08-13 17:54:10|C:\windows\system32 | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:08|C:\tmp\SAS.Planet.Release.151111| |6AD80000|jpeg62.dll | | |506464 |2015-05-27 07:49:28|C:\tmp\SAS.Planet.Release.151111| |77760000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.2987 |1497088 |2006-09-23 12:12:50|C:\windows\system32 | |77F60000|shlwapi.dll |Shell Light-weight Utility Library |6.0.2900.2995 |474112 |2006-09-23 12:12:50|C:\windows\system32 | |7B810000|KERNEL32.dll |Wine core dll |5.1.2600.2180 |1690544 |2015-11-30 03:48:00|C:\windows\system32 | |7BC20000|ntdll.dll |Wine ntdll |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7CC60000|psapi.dll |Wine Process Status Helper |5.1.2600.3264 |2500 |2015-11-30 03:48:00|C:\windows\system32 | |7CCD0000|olepro32.dll | |5.0.4277.1 |164112 |1999-08-31 15:55:18|C:\windows\system32 | |7CCF0000|wtsapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7CE50000|mswsock.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7CED0000|uxtheme.dll |Wine core dll |10.0.0.0 |2448 |2015-11-30 03:48:00|C:\windows\system32 | |7D900000|winex11.drv |Wine X11 driver |10.0.0.0 |2452 |2015-11-30 03:48:00|C:\windows\system32 | |7DA10000|imm32.dll |Wine imm32 |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7DA40000|netapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA70000|secur32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DAA0000|cryptui.dll | | |805956 |2015-11-30 03:48:00|C:\windows\system32 | |7DB90000|crypt32.dll |Wine CryptoAPI Library |5.131.2600.1243|251268 |2015-11-30 03:48:00|C:\windows\system32 | |7DC50000|iphlpapi.dll |Wine iphlpapi |5.1.2600.2180 |2480 |2015-11-30 03:48:00|C:\windows\system32 | |7DCB0000|msvcp90.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DDD0000|msvcr90.dll | | |2028 |2015-11-30 03:48:00|C:\windows\system32 | |7DE90000|winmm.dll | | |471768 |2015-11-30 03:48:00|C:\windows\system32 | |7DF40000|winspool.drv |Wine core printer driver |5.1.2600.2180 |29976 |2015-11-30 03:48:00|C:\windows\system32 | |7DF80000|comdlg32.dll |Common Dialog Boxes |6.0.2900.5512 |613744 |2015-11-30 03:48:00|C:\windows\system32 | |7E060000|ws2_32.dll |Wine core dll |5.1.2600.5512 |2476 |2015-11-30 03:48:00|C:\windows\system32 | |7E0A0000|mpr.dll |Wine Multiprotocol Router Library |5.0.2195.6611 |29576 |2015-11-30 03:48:00|C:\windows\system32 | |7E100000|wsock32.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7E120000|wininet.dll |Wine Internet Connectivity |8.0.7601.17601 |85828 |2015-11-30 03:48:00|C:\windows\system32 | |7E190000|comctl32.dll |Wine Common Controls |5.81.4704.1100 |178100 |2015-11-30 03:48:00|C:\windows\system32 | |7E2A0000|msvcrt.dll |Wine CRT library |7.0.2600.2180 |2456 |2015-11-30 03:48:00|C:\windows\system32 | |7E350000|shell32.dll |Wine core dll |6.0.2900.6242 |1808968 |2015-11-30 03:48:00|C:\windows\system32 | |7E5F0000|msimg32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7E610000|rpcrt4.dll |Wine rpcrt4 |5.1.2600.2180 |2472 |2015-11-30 03:48:00|C:\windows\system32 | |7E680000|version.dll |Wine version dll |5.1.2600.2180 |2484 |2015-11-30 03:48:00|C:\windows\system32 | |7E6A0000|gdi32.dll |Wine core dll |10.0.0.0 |16568 |2015-11-30 03:48:00|C:\windows\system32 | |7E7C0000|user32.dll |Wine core dll |5.1.2600.2180 |228012 |2015-11-30 03:48:00|C:\windows\system32 | |7E920000|advapi32.dll |Wine advapi32 dll |5.1.2600.2180 |2488 |2015-11-30 03:48:00|C:\windows\system32 | |7E9B0000|ole32.dll |Wine core dll |10.0.0.0 |19772 |2015-11-30 03:48:00|C:\windows\system32 | |7EAE0000|oleaut32.dll |Microsoft OLE 2.40 for Windows NT(TM) and Windows 95(TM) Operating Systems|2.40.4277.1 |598288 |1999-08-31 15:55:18|C:\windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ---------------------------------------------------------------------------------------------------------------- |ID|Name |Description |Version |Memory|Priority|Threads|Path | ---------------------------------------------------------------------------------------------------------------- |8 |SASPlanet.Unicode.exe| |15.11.11.9233 |0 |Normal |3 |C:\tmp\SAS.Planet.Release.151111| |14|services.exe | | |0 |Normal |6 |C:\windows\system32 | |18|winedevice.exe | | |0 |Normal |3 |C:\windows\system32 | |20|explorer.exe |Wine Explorer|6.1.7601.17567|0 |Normal |4 |C:\windows\system32 | |28|winedevice.exe | | |0 |Normal |4 |C:\windows\system32 | |41|plugplay.exe | | |0 |Normal |3 |C:\windows\system32 | ---------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 7BC4885E mov dword ptr [ebp-$54], $00000001 ; ''... 7BC48865 call -$00024B3A 7BC4886A add ebx, $000913F2 ; ''... 7BC48870 mov dword ptr [ebp-$48], $00000000 ; ''... 7BC48877 mov [ebp-$58], eax 7BC4887A mov eax, [ebp+$0C] 7BC4887D mov [ebp-$50], eax 7BC48880 sub esp, +$0C 7BC48883 push esi 7BC48884 call +$0003ADE3 7BC48889 add esp, +$0C ; <-- EXCEPTION 7BC4888C jmp -$0E 7BC4888E nop 7BC48890 lea ecx, [esp+$04] 7BC48894 and esp, -$10 7BC48897 push dword ptr [ecx-$04] 7BC4889A push ebp 7BC4889B mov ebp, esp 7BC4889D push ecx 7BC4889E sub esp, +$0C 7BC488A1 push $00 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0032F5C0: 0032F680 02DFCC70: 83 C4 0C EB F2 66 90 8D 4C 24 04 83 E4 F0 FF 71 .....f..L$.....q 0032F5C4: 004D5A1A 02DFCC80: FC 55 89 E5 51 83 EC 0C 6A 00 FF 31 E8 A6 FF FF .U..Q...j..1.... 0032F5C8: 0032F5E8 02DFCC90: FF 8D B6 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ........L$.....q 0032F5CC: 0032FAE0 02DFCCA0: FC 55 8B 11 89 E5 53 51 E8 6A B4 FD FF 81 C3 96 .U....SQ.j...... 0032F5D0: 7B8B8DC0 02DFCCB0: 13 09 00 83 EC 0C FF 71 04 8D 83 1C 96 00 00 E8 .......q........ 0032F5D4: 01A12ABC 02DFCCC0: 53 F9 FF FF 8D 65 F8 59 5B 5D 8D 61 FC C2 08 00 S....e.Y[].a.... 0032F5D8: 0123FC7C 02DFCCD0: 8D B4 26 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ..&.....L$.....q 0032F5DC: 00000000 02DFCCE0: FC 55 8B 11 89 E5 53 51 E8 2A B4 FD FF 81 C3 56 .U....SQ.*.....V 0032F5E0: 00000000 02DFCCF0: 13 09 00 8D 83 1C 96 00 00 E8 09 F8 FF FF 59 5B ..............Y[ 0032F5E4: 00000000 02DFCD00: 5D 8D 61 FC C2 04 00 CC CC CC CC CC CC CC CC CC ].a............. 0032F5E8: 0032F658 02DFCD10: CC CC CC CC CC CC CC 8B FF 55 8B EC 5D 8D 4C 24 .........U..].L$ 0032F5EC: 7B83BD3A 02DFCD20: 04 83 E4 F0 FF 71 FC 55 8B 11 89 E5 53 51 E8 E4 .....q.U....SQ.. 0032F5F0: 0032F670 02DFCD30: B3 FD FF 81 C3 10 13 09 00 83 EC 0C FF 71 04 8D .............q.. 0032F5F4: 00000001 02DFCD40: 83 24 96 00 00 E8 CD F8 FF FF 8D 65 F8 59 5B 5D .$.........e.Y[] 0032F5F8: 00414A54 02DFCD50: 8D 61 FC C2 08 00 90 8D 4C 24 04 83 E4 F0 FF 71 .a......L$.....q 0032F5FC: 00320000 02DFCD60: FC 55 8B 11 89 E5 53 51 E8 AA B3 FD FF 81 C3 D6 .U....SQ........ EurekaLog 6.1.04 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 12 Dec 2015 13:46:25 +0300 1.2 Name/Description: SASPlanet.Unicode.exe 1.3 Version Number : 15.11.11.9233 1.4 Parameters : 1.5 Compilation Date: Wed, 11 Nov 2015 15:55:30 +0300 1.6 Up Time : 3 seconds Exception: ----------------------------------------------------- 2.1 Date : Sat, 12 Dec 2015 13:46:29 +0300 2.2 Address : 7BC48889 2.3 Module Name : ntdll.dll - (Wine ntdll) 2.4 Module Version: 5.1.2600.2180 2.5 Type : EExternalException 2.6 Message : External exception C0000264. 2.7 ID : 0D21 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Computer: ----------------------------------------------------- 5.3 Free Memory : 4521 Mb 5.5 Free Disk : 9,98 Gb 5.7 Processor : Intel(R) Pentium(R) 4 CPU 2.40GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Wine Display Adapter (driver ) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method|Line | ------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9; Priority=1; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------------------------------------| |7BC48889|ntdll.dll | | | | | |00619CA7|SASPlanet.Unicode.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |129[4] | |00617AC4|SASPlanet.Unicode.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |EndWrite |191[1] | |0089434E|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |149[16] | |00894280|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |133[0] | |00893FE3|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |89[20] | |00893E94|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |69[0] | |00C20CF0|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |765[329]| |00C1FA68|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |436[0] | |00D7B82C|SASPlanet.Unicode.exe|SASPlanet.dpr | | |1382[6] | ------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00330000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00390000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00400000|SASPlanet.Unicode.exe| |15.11.11.9233 |11288064|2015-11-11 15:55:32|C:\tmp\SAS.Planet.Release.151111| |10000000|CityHash.dll | | |14336 |2013-08-25 10:29:26|C:\tmp\SAS.Planet.Release.151111| |5DCA0000|iertutil.dll |Run time utility for Internet Explorer |7.0.5730.13 |266752 |2007-08-13 17:34:04|C:\windows\system32 | |61410000|URLMON.DLL |OLE32 Extensions for Win32 |7.0.5730.13 |1162240 |2007-08-13 17:54:10|C:\windows\system32 | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:08|C:\tmp\SAS.Planet.Release.151111| |6AD80000|jpeg62.dll | | |506464 |2015-05-27 07:49:28|C:\tmp\SAS.Planet.Release.151111| |77760000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.2987 |1497088 |2006-09-23 12:12:50|C:\windows\system32 | |77F60000|shlwapi.dll |Shell Light-weight Utility Library |6.0.2900.2995 |474112 |2006-09-23 12:12:50|C:\windows\system32 | |7B810000|KERNEL32.dll |Wine core dll |5.1.2600.2180 |1690544 |2015-11-30 03:48:00|C:\windows\system32 | |7BC20000|ntdll.dll |Wine ntdll |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7CCC0000|psapi.dll |Wine Process Status Helper |5.1.2600.3264 |2500 |2015-11-30 03:48:00|C:\windows\system32 | |7CCD0000|olepro32.dll | |5.0.4277.1 |164112 |1999-08-31 15:55:18|C:\windows\system32 | |7CCE0000|wtsapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7CDA0000|mswsock.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7CDD0000|uxtheme.dll |Wine core dll |10.0.0.0 |2448 |2015-11-30 03:48:00|C:\windows\system32 | |7D8F0000|winex11.drv |Wine X11 driver |10.0.0.0 |2452 |2015-11-30 03:48:00|C:\windows\system32 | |7DA00000|imm32.dll |Wine imm32 |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7DA20000|netapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA50000|secur32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA80000|cryptui.dll | | |805956 |2015-11-30 03:48:00|C:\windows\system32 | |7DB70000|crypt32.dll |Wine CryptoAPI Library |5.131.2600.1243|251268 |2015-11-30 03:48:00|C:\windows\system32 | |7DC40000|iphlpapi.dll |Wine iphlpapi |5.1.2600.2180 |2480 |2015-11-30 03:48:00|C:\windows\system32 | |7DCA0000|msvcp90.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DDC0000|msvcr90.dll | | |2028 |2015-11-30 03:48:00|C:\windows\system32 | |7DE70000|winmm.dll | | |471768 |2015-11-30 03:48:00|C:\windows\system32 | |7DF30000|winspool.drv |Wine core printer driver |5.1.2600.2180 |29976 |2015-11-30 03:48:00|C:\windows\system32 | |7DF90000|comdlg32.dll |Common Dialog Boxes |6.0.2900.5512 |613744 |2015-11-30 03:48:00|C:\windows\system32 | |7E070000|ws2_32.dll |Wine core dll |5.1.2600.5512 |2476 |2015-11-30 03:48:00|C:\windows\system32 | |7E0B0000|mpr.dll |Wine Multiprotocol Router Library |5.0.2195.6611 |29576 |2015-11-30 03:48:00|C:\windows\system32 | |7E110000|wsock32.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7E130000|wininet.dll |Wine Internet Connectivity |8.0.7601.17601 |85828 |2015-11-30 03:48:00|C:\windows\system32 | |7E1A0000|comctl32.dll |Wine Common Controls |5.81.4704.1100 |178100 |2015-11-30 03:48:00|C:\windows\system32 | |7E2B0000|msvcrt.dll |Wine CRT library |7.0.2600.2180 |2456 |2015-11-30 03:48:00|C:\windows\system32 | |7E360000|shell32.dll |Wine core dll |6.0.2900.6242 |1808968 |2015-11-30 03:48:00|C:\windows\system32 | |7E600000|msimg32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7E610000|rpcrt4.dll |Wine rpcrt4 |5.1.2600.2180 |2472 |2015-11-30 03:48:00|C:\windows\system32 | |7E690000|version.dll |Wine version dll |5.1.2600.2180 |2484 |2015-11-30 03:48:00|C:\windows\system32 | |7E6B0000|gdi32.dll |Wine core dll |10.0.0.0 |16568 |2015-11-30 03:48:00|C:\windows\system32 | |7E7D0000|user32.dll |Wine core dll |5.1.2600.2180 |228012 |2015-11-30 03:48:00|C:\windows\system32 | |7E930000|advapi32.dll |Wine advapi32 dll |5.1.2600.2180 |2488 |2015-11-30 03:48:00|C:\windows\system32 | |7E9B0000|ole32.dll |Wine core dll |10.0.0.0 |19772 |2015-11-30 03:48:00|C:\windows\system32 | |7EAF0000|oleaut32.dll |Microsoft OLE 2.40 for Windows NT(TM) and Windows 95(TM) Operating Systems|2.40.4277.1 |598288 |1999-08-31 15:55:18|C:\windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ---------------------------------------------------------------------------------------------------------------- |ID|Name |Description |Version |Memory|Priority|Threads|Path | ---------------------------------------------------------------------------------------------------------------- |8 |SASPlanet.Unicode.exe| |15.11.11.9233 |0 |Normal |3 |C:\tmp\SAS.Planet.Release.151111| |14|services.exe | | |0 |Normal |6 |C:\windows\system32 | |18|winedevice.exe | | |0 |Normal |3 |C:\windows\system32 | |20|explorer.exe |Wine Explorer|6.1.7601.17567|0 |Normal |4 |C:\windows\system32 | |28|winedevice.exe | | |0 |Normal |4 |C:\windows\system32 | |41|plugplay.exe | | |0 |Normal |3 |C:\windows\system32 | ---------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 7BC4885E mov dword ptr [ebp-$54], $00000001 ; ''... 7BC48865 call -$00024B3A 7BC4886A add ebx, $000913F2 ; ''... 7BC48870 mov dword ptr [ebp-$48], $00000000 ; ''... 7BC48877 mov [ebp-$58], eax 7BC4887A mov eax, [ebp+$0C] 7BC4887D mov [ebp-$50], eax 7BC48880 sub esp, +$0C 7BC48883 push esi 7BC48884 call +$0003ADE3 7BC48889 add esp, +$0C ; <-- EXCEPTION 7BC4888C jmp -$0E 7BC4888E nop 7BC48890 lea ecx, [esp+$04] 7BC48894 and esp, -$10 7BC48897 push dword ptr [ecx-$04] 7BC4889A push ebp 7BC4889B mov ebp, esp 7BC4889D push ecx 7BC4889E sub esp, +$0C 7BC488A1 push $00 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0032F5C0: 0032F680 0255E7E0: 83 C4 0C EB F2 66 90 8D 4C 24 04 83 E4 F0 FF 71 .....f..L$.....q 0032F5C4: 004D5A1A 0255E7F0: FC 55 89 E5 51 83 EC 0C 6A 00 FF 31 E8 A6 FF FF .U..Q...j..1.... 0032F5C8: 0032F5E8 0255E800: FF 8D B6 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ........L$.....q 0032F5CC: 0032FAE0 0255E810: FC 55 8B 11 89 E5 53 51 E8 6A B4 FD FF 81 C3 96 .U....SQ.j...... 0032F5D0: 7B8B8DC0 0255E820: 13 09 00 83 EC 0C FF 71 04 8D 83 1C 96 00 00 E8 .......q........ 0032F5D4: 01B5A87C 0255E830: 53 F9 FF FF 8D 65 F8 59 5B 5D 8D 61 FC C2 08 00 S....e.Y[].a.... 0032F5D8: 0123FC7C 0255E840: 8D B4 26 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ..&.....L$.....q 0032F5DC: 00000000 0255E850: FC 55 8B 11 89 E5 53 51 E8 2A B4 FD FF 81 C3 56 .U....SQ.*.....V 0032F5E0: 00000000 0255E860: 13 09 00 8D 83 1C 96 00 00 E8 09 F8 FF FF 59 5B ..............Y[ 0032F5E4: 00000000 0255E870: 5D 8D 61 FC C2 04 00 CC CC CC CC CC CC CC CC CC ].a............. 0032F5E8: 0032F658 0255E880: CC CC CC CC CC CC CC 8B FF 55 8B EC 5D 8D 4C 24 .........U..].L$ 0032F5EC: 7B83BD3A 0255E890: 04 83 E4 F0 FF 71 FC 55 8B 11 89 E5 53 51 E8 E4 .....q.U....SQ.. 0032F5F0: 0032F670 0255E8A0: B3 FD FF 81 C3 10 13 09 00 83 EC 0C FF 71 04 8D .............q.. 0032F5F4: 00000001 0255E8B0: 83 24 96 00 00 E8 CD F8 FF FF 8D 65 F8 59 5B 5D .$.........e.Y[] 0032F5F8: 00414A54 0255E8C0: 8D 61 FC C2 08 00 90 8D 4C 24 04 83 E4 F0 FF 71 .a......L$.....q 0032F5FC: 00320000 0255E8D0: FC 55 8B 11 89 E5 53 51 E8 AA B3 FD FF 81 C3 D6 .U....SQ........ EurekaLog 6.1.04 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 12 Dec 2015 13:55:14 +0300 1.2 Name/Description: SASPlanet.Unicode.exe 1.3 Version Number : 15.11.11.9233 1.4 Parameters : 1.5 Compilation Date: Wed, 11 Nov 2015 15:55:30 +0300 1.6 Up Time : 3 seconds Exception: ----------------------------------------------------- 2.1 Date : Sat, 12 Dec 2015 13:55:18 +0300 2.2 Address : 7BC48889 2.3 Module Name : ntdll.dll - (Wine ntdll) 2.4 Module Version: 5.1.2600.2180 2.5 Type : EExternalException 2.6 Message : External exception C0000264. 2.7 ID : 0D21 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Computer: ----------------------------------------------------- 5.3 Free Memory : 4522 Mb 5.5 Free Disk : 10,47 Gb 5.7 Processor : Intel(R) Pentium(R) 4 CPU 2.40GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Wine Display Adapter (driver ) Operating System: ------------------------------------------------ 6.1 Type : Microsoft Windows Server 2008 R2 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method|Line | ------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9; Priority=1; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------------------------------------| |7BC48889|ntdll.dll | | | | | |00619CA7|SASPlanet.Unicode.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |129[4] | |00617AC4|SASPlanet.Unicode.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |EndWrite |191[1] | |0089434E|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |149[16] | |00894280|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |133[0] | |00893FE3|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |89[20] | |00893E94|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |69[0] | |00C20CF0|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |765[329]| |00C1FA68|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |436[0] | |00D7B82C|SASPlanet.Unicode.exe|SASPlanet.dpr | | |1382[6] | ------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00330000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00390000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00400000|SASPlanet.Unicode.exe| |15.11.11.9233 |11288064|2015-11-11 15:55:32|C:\tmp\SAS.Planet.Release.151111| |10000000|CityHash.dll | | |14336 |2013-08-25 10:29:26|C:\tmp\SAS.Planet.Release.151111| |5DCA0000|iertutil.dll |Run time utility for Internet Explorer |7.0.5730.13 |266752 |2007-08-13 17:34:04|C:\windows\system32 | |61410000|URLMON.DLL |OLE32 Extensions for Win32 |7.0.5730.13 |1162240 |2007-08-13 17:54:10|C:\windows\system32 | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:08|C:\tmp\SAS.Planet.Release.151111| |6AD80000|jpeg62.dll | | |506464 |2015-05-27 07:49:28|C:\tmp\SAS.Planet.Release.151111| |77760000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.2987 |1497088 |2006-09-23 12:12:50|C:\windows\system32 | |77F60000|shlwapi.dll |Shell Light-weight Utility Library |6.0.2900.2995 |474112 |2006-09-23 12:12:50|C:\windows\system32 | |7B810000|KERNEL32.dll |Wine core dll |5.1.2600.2180 |1690544 |2015-11-30 03:48:00|C:\windows\system32 | |7BC20000|ntdll.dll |Wine ntdll |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7CCC0000|psapi.dll |Wine Process Status Helper |5.1.2600.3264 |2500 |2015-11-30 03:48:00|C:\windows\system32 | |7CCD0000|olepro32.dll | |5.0.4277.1 |164112 |1999-08-31 15:55:18|C:\windows\system32 | |7CCE0000|wtsapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7CDA0000|mswsock.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7CDC0000|uxtheme.dll |Wine core dll |10.0.0.0 |2448 |2015-11-30 03:48:00|C:\windows\system32 | |7D8E0000|winex11.drv |Wine X11 driver |10.0.0.0 |2452 |2015-11-30 03:48:00|C:\windows\system32 | |7D9F0000|imm32.dll |Wine imm32 |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7DA20000|netapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA40000|secur32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA70000|cryptui.dll | | |805956 |2015-11-30 03:48:00|C:\windows\system32 | |7DB70000|crypt32.dll |Wine CryptoAPI Library |5.131.2600.1243|251268 |2015-11-30 03:48:00|C:\windows\system32 | |7DC30000|iphlpapi.dll |Wine iphlpapi |5.1.2600.2180 |2480 |2015-11-30 03:48:00|C:\windows\system32 | |7DC90000|msvcp90.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DDB0000|msvcr90.dll | | |2028 |2015-11-30 03:48:00|C:\windows\system32 | |7DE70000|winmm.dll | | |471768 |2015-11-30 03:48:00|C:\windows\system32 | |7DF20000|winspool.drv |Wine core printer driver |5.1.2600.2180 |29976 |2015-11-30 03:48:00|C:\windows\system32 | |7DF60000|comdlg32.dll |Common Dialog Boxes |6.0.2900.5512 |613744 |2015-11-30 03:48:00|C:\windows\system32 | |7E040000|ws2_32.dll |Wine core dll |5.1.2600.5512 |2476 |2015-11-30 03:48:00|C:\windows\system32 | |7E080000|mpr.dll |Wine Multiprotocol Router Library |5.0.2195.6611 |29576 |2015-11-30 03:48:00|C:\windows\system32 | |7E0E0000|wsock32.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7E100000|wininet.dll |Wine Internet Connectivity |8.0.7601.17601 |85828 |2015-11-30 03:48:00|C:\windows\system32 | |7E170000|comctl32.dll |Wine Common Controls |5.81.4704.1100 |178100 |2015-11-30 03:48:00|C:\windows\system32 | |7E280000|msvcrt.dll |Wine CRT library |7.0.2600.2180 |2456 |2015-11-30 03:48:00|C:\windows\system32 | |7E360000|shell32.dll |Wine core dll |6.0.2900.6242 |1808968 |2015-11-30 03:48:00|C:\windows\system32 | |7E600000|msimg32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7E610000|rpcrt4.dll |Wine rpcrt4 |5.1.2600.2180 |2472 |2015-11-30 03:48:00|C:\windows\system32 | |7E690000|version.dll |Wine version dll |5.1.2600.2180 |2484 |2015-11-30 03:48:00|C:\windows\system32 | |7E6B0000|gdi32.dll |Wine core dll |10.0.0.0 |16568 |2015-11-30 03:48:00|C:\windows\system32 | |7E7D0000|user32.dll |Wine core dll |5.1.2600.2180 |228012 |2015-11-30 03:48:00|C:\windows\system32 | |7E930000|advapi32.dll |Wine advapi32 dll |5.1.2600.2180 |2488 |2015-11-30 03:48:00|C:\windows\system32 | |7E9B0000|ole32.dll |Wine core dll |10.0.0.0 |19772 |2015-11-30 03:48:00|C:\windows\system32 | |7EAF0000|oleaut32.dll |Microsoft OLE 2.40 for Windows NT(TM) and Windows 95(TM) Operating Systems|2.40.4277.1 |598288 |1999-08-31 15:55:18|C:\windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ---------------------------------------------------------------------------------------------------------------- |ID|Name |Description |Version |Memory|Priority|Threads|Path | ---------------------------------------------------------------------------------------------------------------- |8 |SASPlanet.Unicode.exe| |15.11.11.9233 |0 |Low |3 |C:\tmp\SAS.Planet.Release.151111| |14|services.exe | | |0 |Low |6 |C:\windows\system32 | |18|explorer.exe |Wine Explorer|6.1.7601.17567|0 |Low |4 |C:\windows\system32 | |20|winedevice.exe | | |0 |Low |3 |C:\windows\system32 | |28|winedevice.exe | | |0 |Low |4 |C:\windows\system32 | |41|plugplay.exe | | |0 |Low |3 |C:\windows\system32 | ---------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 7BC4885E mov dword ptr [ebp-$54], $00000001 ; ''... 7BC48865 call -$00024B3A 7BC4886A add ebx, $000913F2 ; ''... 7BC48870 mov dword ptr [ebp-$48], $00000000 ; ''... 7BC48877 mov [ebp-$58], eax 7BC4887A mov eax, [ebp+$0C] 7BC4887D mov [ebp-$50], eax 7BC48880 sub esp, +$0C 7BC48883 push esi 7BC48884 call +$0003ADE3 7BC48889 add esp, +$0C ; <-- EXCEPTION 7BC4888C jmp -$0E 7BC4888E nop 7BC48890 lea ecx, [esp+$04] 7BC48894 and esp, -$10 7BC48897 push dword ptr [ecx-$04] 7BC4889A push ebp 7BC4889B mov ebp, esp 7BC4889D push ecx 7BC4889E sub esp, +$0C 7BC488A1 push $00 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0032F5C0: 0032F680 02599340: 83 C4 0C EB F2 66 90 8D 4C 24 04 83 E4 F0 FF 71 .....f..L$.....q 0032F5C4: 004D5A1A 02599350: FC 55 89 E5 51 83 EC 0C 6A 00 FF 31 E8 A6 FF FF .U..Q...j..1.... 0032F5C8: 0032F5E8 02599360: FF 8D B6 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ........L$.....q 0032F5CC: 0032FAE0 02599370: FC 55 8B 11 89 E5 53 51 E8 6A B4 FD FF 81 C3 96 .U....SQ.j...... 0032F5D0: 7B8B8DC0 02599380: 13 09 00 83 EC 0C FF 71 04 8D 83 1C 96 00 00 E8 .......q........ 0032F5D4: 011744EC 02599390: 53 F9 FF FF 8D 65 F8 59 5B 5D 8D 61 FC C2 08 00 S....e.Y[].a.... 0032F5D8: 0123FC7C 025993A0: 8D B4 26 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ..&.....L$.....q 0032F5DC: 00000000 025993B0: FC 55 8B 11 89 E5 53 51 E8 2A B4 FD FF 81 C3 56 .U....SQ.*.....V 0032F5E0: 00000000 025993C0: 13 09 00 8D 83 1C 96 00 00 E8 09 F8 FF FF 59 5B ..............Y[ 0032F5E4: 00000000 025993D0: 5D 8D 61 FC C2 04 00 CC CC CC CC CC CC CC CC CC ].a............. 0032F5E8: 0032F658 025993E0: CC CC CC CC CC CC CC 8B FF 55 8B EC 5D 8D 4C 24 .........U..].L$ 0032F5EC: 7B83BD3A 025993F0: 04 83 E4 F0 FF 71 FC 55 8B 11 89 E5 53 51 E8 E4 .....q.U....SQ.. 0032F5F0: 0032F670 02599400: B3 FD FF 81 C3 10 13 09 00 83 EC 0C FF 71 04 8D .............q.. 0032F5F4: 00000001 02599410: 83 24 96 00 00 E8 CD F8 FF FF 8D 65 F8 59 5B 5D .$.........e.Y[] 0032F5F8: 00414A54 02599420: 8D 61 FC C2 08 00 90 8D 4C 24 04 83 E4 F0 FF 71 .a......L$.....q 0032F5FC: 00320000 02599430: FC 55 8B 11 89 E5 53 51 E8 AA B3 FD FF 81 C3 D6 .U....SQ........ EurekaLog 6.1.04 Application: ------------------------------------------------------- 1.1 Start Date : Sat, 12 Dec 2015 14:02:02 +0300 1.2 Name/Description: SASPlanet.Unicode.exe 1.3 Version Number : 15.11.11.9233 1.4 Parameters : 1.5 Compilation Date: Wed, 11 Nov 2015 15:55:30 +0300 1.6 Up Time : 3 seconds Exception: ----------------------------------------------------- 2.1 Date : Sat, 12 Dec 2015 14:02:06 +0300 2.2 Address : 7BC48889 2.3 Module Name : ntdll.dll - (Wine ntdll) 2.4 Module Version: 5.1.2600.2180 2.5 Type : EExternalException 2.6 Message : External exception C0000264. 2.7 ID : 0D21 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Computer: ----------------------------------------------------- 5.3 Free Memory : 4569 Mb 5.5 Free Disk : 10,47 Gb 5.7 Processor : Intel(R) Pentium(R) 4 CPU 2.40GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : Wine Display Adapter (driver ) Operating System: ------------------------------------------------ 6.1 Type : Microsoft Windows Server 2008 R2 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: ------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method|Line | ------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=9; Priority=1; Class=; [Main] | |-----------------------------------------------------------------------------------------------------------------------------------------------| |7BC48889|ntdll.dll | | | | | |00619CA7|SASPlanet.Unicode.exe|u_BaseInterfacedObjectDebug.pas |TBaseInterfacedObjectDebug |_AddRef |129[4] | |00617AC4|SASPlanet.Unicode.exe|u_ReadWriteSyncSRW.pas |TSynchronizerSRW |EndWrite |191[1] | |0089434E|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |149[16] | |00894280|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|OnConfigChange |133[0] | |00893FE3|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |89[20] | |00893E94|SASPlanet.Unicode.exe|u_ImageResamplerFactoryChangeableByConfig.pas|TImageResamplerFactoryChangeableByConfig|Create |69[0] | |00C20CF0|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |765[329]| |00C1FA68|SASPlanet.Unicode.exe|u_GlobalState.pas |TGlobalState |Create |436[0] | |00D7B82C|SASPlanet.Unicode.exe|SASPlanet.dpr | | |1382[6] | ------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |00330000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00390000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-08-02 15:12:54|C:\tmp\SAS.Planet.Release.151111| |00400000|SASPlanet.Unicode.exe| |15.11.11.9233 |11288064|2015-11-11 15:55:32|C:\tmp\SAS.Planet.Release.151111| |10000000|CityHash.dll | | |14336 |2013-08-25 10:29:26|C:\tmp\SAS.Planet.Release.151111| |5DCA0000|iertutil.dll |Run time utility for Internet Explorer |7.0.5730.13 |266752 |2007-08-13 17:34:04|C:\windows\system32 | |61410000|URLMON.DLL |OLE32 Extensions for Win32 |7.0.5730.13 |1162240 |2007-08-13 17:54:10|C:\windows\system32 | |62E80000|zlib1.dll |zlib data compression library |1.2.8.0 |107520 |2014-02-14 01:04:08|C:\tmp\SAS.Planet.Release.151111| |6AD80000|jpeg62.dll | | |506464 |2015-05-27 07:49:28|C:\tmp\SAS.Planet.Release.151111| |77760000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.2987 |1497088 |2006-09-23 12:12:50|C:\windows\system32 | |77F60000|shlwapi.dll |Shell Light-weight Utility Library |6.0.2900.2995 |474112 |2006-09-23 12:12:50|C:\windows\system32 | |7B810000|KERNEL32.dll |Wine core dll |5.1.2600.2180 |1690544 |2015-11-30 03:48:00|C:\windows\system32 | |7BC20000|ntdll.dll |Wine ntdll |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7CCC0000|psapi.dll |Wine Process Status Helper |5.1.2600.3264 |2500 |2015-11-30 03:48:00|C:\windows\system32 | |7CCD0000|olepro32.dll | |5.0.4277.1 |164112 |1999-08-31 15:55:18|C:\windows\system32 | |7CCE0000|wtsapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7CDA0000|mswsock.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7CDC0000|uxtheme.dll |Wine core dll |10.0.0.0 |2448 |2015-11-30 03:48:00|C:\windows\system32 | |7D8C0000|winex11.drv |Wine X11 driver |10.0.0.0 |2452 |2015-11-30 03:48:00|C:\windows\system32 | |7D9E0000|imm32.dll |Wine imm32 |5.1.2600.2180 |2468 |2015-11-30 03:48:00|C:\windows\system32 | |7DA00000|netapi32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DA30000|cryptui.dll | | |805956 |2015-11-30 03:48:00|C:\windows\system32 | |7DB20000|crypt32.dll |Wine CryptoAPI Library |5.131.2600.1243|251268 |2015-11-30 03:48:00|C:\windows\system32 | |7DC20000|msvcp90.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DD40000|msvcr90.dll | | |2028 |2015-11-30 03:48:00|C:\windows\system32 | |7DE30000|secur32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7DE60000|iphlpapi.dll |Wine iphlpapi |5.1.2600.2180 |2480 |2015-11-30 03:48:00|C:\windows\system32 | |7DE90000|winmm.dll | | |471768 |2015-11-30 03:48:00|C:\windows\system32 | |7DF40000|winspool.drv |Wine core printer driver |5.1.2600.2180 |29976 |2015-11-30 03:48:00|C:\windows\system32 | |7DF80000|comdlg32.dll |Common Dialog Boxes |6.0.2900.5512 |613744 |2015-11-30 03:48:00|C:\windows\system32 | |7E060000|ws2_32.dll |Wine core dll |5.1.2600.5512 |2476 |2015-11-30 03:48:00|C:\windows\system32 | |7E0A0000|mpr.dll |Wine Multiprotocol Router Library |5.0.2195.6611 |29576 |2015-11-30 03:48:00|C:\windows\system32 | |7E100000|wsock32.dll |Wine core dll |4.0.0.0 |2444 |2015-11-30 03:48:00|C:\windows\system32 | |7E120000|wininet.dll |Wine Internet Connectivity |8.0.7601.17601 |85828 |2015-11-30 03:48:00|C:\windows\system32 | |7E190000|comctl32.dll |Wine Common Controls |5.81.4704.1100 |178100 |2015-11-30 03:48:00|C:\windows\system32 | |7E2A0000|msvcrt.dll |Wine CRT library |7.0.2600.2180 |2456 |2015-11-30 03:48:00|C:\windows\system32 | |7E350000|shell32.dll |Wine core dll |6.0.2900.6242 |1808968 |2015-11-30 03:48:00|C:\windows\system32 | |7E5F0000|msimg32.dll | | |1032 |2015-11-30 03:48:00|C:\windows\system32 | |7E610000|rpcrt4.dll |Wine rpcrt4 |5.1.2600.2180 |2472 |2015-11-30 03:48:00|C:\windows\system32 | |7E680000|version.dll |Wine version dll |5.1.2600.2180 |2484 |2015-11-30 03:48:00|C:\windows\system32 | |7E6A0000|gdi32.dll |Wine core dll |10.0.0.0 |16568 |2015-11-30 03:48:00|C:\windows\system32 | |7E7C0000|user32.dll |Wine core dll |5.1.2600.2180 |228012 |2015-11-30 03:48:00|C:\windows\system32 | |7E920000|advapi32.dll |Wine advapi32 dll |5.1.2600.2180 |2488 |2015-11-30 03:48:00|C:\windows\system32 | |7E9B0000|ole32.dll |Wine core dll |10.0.0.0 |19772 |2015-11-30 03:48:00|C:\windows\system32 | |7EAE0000|oleaut32.dll |Microsoft OLE 2.40 for Windows NT(TM) and Windows 95(TM) Operating Systems|2.40.4277.1 |598288 |1999-08-31 15:55:18|C:\windows\system32 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Processes Information: ---------------------------------------------------------------------------------------------------------------- |ID|Name |Description |Version |Memory|Priority|Threads|Path | ---------------------------------------------------------------------------------------------------------------- |8 |SASPlanet.Unicode.exe| |15.11.11.9233 |0 |Low |3 |C:\tmp\SAS.Planet.Release.151111| |14|services.exe | | |0 |Low |6 |C:\windows\system32 | |18|winedevice.exe | | |0 |Low |3 |C:\windows\system32 | |20|explorer.exe |Wine Explorer|6.1.7601.17567|0 |Low |4 |C:\windows\system32 | |28|winedevice.exe | | |0 |Low |4 |C:\windows\system32 | |41|plugplay.exe | | |0 |Low |3 |C:\windows\system32 | ---------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 7BC4885E mov dword ptr [ebp-$54], $00000001 ; ''... 7BC48865 call -$00024B3A 7BC4886A add ebx, $000913F2 ; ''... 7BC48870 mov dword ptr [ebp-$48], $00000000 ; ''... 7BC48877 mov [ebp-$58], eax 7BC4887A mov eax, [ebp+$0C] 7BC4887D mov [ebp-$50], eax 7BC48880 sub esp, +$0C 7BC48883 push esi 7BC48884 call +$0003ADE3 7BC48889 add esp, +$0C ; <-- EXCEPTION 7BC4888C jmp -$0E 7BC4888E nop 7BC48890 lea ecx, [esp+$04] 7BC48894 and esp, -$10 7BC48897 push dword ptr [ecx-$04] 7BC4889A push ebp 7BC4889B mov ebp, esp 7BC4889D push ecx 7BC4889E sub esp, +$0C 7BC488A1 push $00 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0032F5C0: 0032F680 025D9340: 83 C4 0C EB F2 66 90 8D 4C 24 04 83 E4 F0 FF 71 .....f..L$.....q 0032F5C4: 004D5A1A 025D9350: FC 55 89 E5 51 83 EC 0C 6A 00 FF 31 E8 A6 FF FF .U..Q...j..1.... 0032F5C8: 0032F5E8 025D9360: FF 8D B6 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ........L$.....q 0032F5CC: 0032FAE0 025D9370: FC 55 8B 11 89 E5 53 51 E8 6A B4 FD FF 81 C3 96 .U....SQ.j...... 0032F5D0: 7B8B8DC0 025D9380: 13 09 00 83 EC 0C FF 71 04 8D 83 1C 96 00 00 E8 .......q........ 0032F5D4: 011744EC 025D9390: 53 F9 FF FF 8D 65 F8 59 5B 5D 8D 61 FC C2 08 00 S....e.Y[].a.... 0032F5D8: 0123FC7C 025D93A0: 8D B4 26 00 00 00 00 8D 4C 24 04 83 E4 F0 FF 71 ..&.....L$.....q 0032F5DC: 00000000 025D93B0: FC 55 8B 11 89 E5 53 51 E8 2A B4 FD FF 81 C3 56 .U....SQ.*.....V 0032F5E0: 00000000 025D93C0: 13 09 00 8D 83 1C 96 00 00 E8 09 F8 FF FF 59 5B ..............Y[ 0032F5E4: 00000000 025D93D0: 5D 8D 61 FC C2 04 00 CC CC CC CC CC CC CC CC CC ].a............. 0032F5E8: 0032F658 025D93E0: CC CC CC CC CC CC CC 8B FF 55 8B EC 5D 8D 4C 24 .........U..].L$ 0032F5EC: 7B83BD3A 025D93F0: 04 83 E4 F0 FF 71 FC 55 8B 11 89 E5 53 51 E8 E4 .....q.U....SQ.. 0032F5F0: 0032F670 025D9400: B3 FD FF 81 C3 10 13 09 00 83 EC 0C FF 71 04 8D .............q.. 0032F5F4: 00000001 025D9410: 83 24 96 00 00 E8 CD F8 FF FF 8D 65 F8 59 5B 5D .$.........e.Y[] 0032F5F8: 00414A54 025D9420: 8D 61 FC C2 08 00 90 8D 4C 24 04 83 E4 F0 FF 71 .a......L$.....q 0032F5FC: 00320000 025D9430: FC 55 8B 11 89 E5 53 51 E8 AA B3 FD FF 81 C3 D6 .U....SQ........