date/time : 2010-04-11, 07, 643ms
computer name : DT2
user name : Owner <admin>
registered owner : Microsoft / Microsoft
operating system : Windows 7 x64 build 7600
system language : English
system up time : 18 hours 43 minutes
program up time : 1 hour 9 minutes
processors : 4x AMD Phenom(tm) 9150e Quad-Core Processor
physical memory : 1773/3839 MB (free/total)
free disk space : (C:) 417.38 GB
display mode : 1280x1024, 32 bit
process id : $1248
allocated memory : 124.08 MB
executable : jv16PT.exe
exec. date/time : 2010-04-11 04
version : 2.0.0.779
compiled with : Delphi 2010
madExcept version : 3.0l
callstack crc : $4834b63b, $eee5685d, $eee5685d
count : 2
exception number : 1
exception class : EInvalidPointer
exception message : Invalid pointer operation.
main thread ($10f8):
00405c71 +011 jv16PT.exe System 882 +0 TObject.FreeInstance
00406232 +002 jv16PT.exe System 882 +0 @ClassDestroy
0049629c +024 jv16PT.exe Classes TPersistent.Destroy
004a179f +057 jv16PT.exe Classes TComponent.DestroyComponents
00569799 +035 jv16PT.exe Forms DoneApplication
00470b8a +026 jv16PT.exe SysUtils DoExitProc
00406e9d +065 jv16PT.exe System 882 +0 @Halt0
008d8b66 +112 jv16PT.exe jv16PT 613 +149 initialization
74f53675 +010 kernel32.dll BaseThreadInitThunk
thread $d68:
76eff86a +0e ntdll.dll NtWaitForSingleObject
74bb0810 +92 KERNELBASE.dll WaitForSingleObjectEx
74f5117f +3e kernel32.dll WaitForSingleObjectEx
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $b40:
76f000f6 +0e ntdll.dll NtWaitForMultipleObjects
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $ce8:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $1220:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $111c:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $8b4:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
modules:
00020000 recognition.dll C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
00400000 jv16PT.exe 2.0.0.779 C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
10000000 PATROLPRO.DLL 1.4.0.0 C:\Program Files (x86)\BillP Studios\WinPatrol
70270000 olepro32.dll 6.1.7600.16385 C:\Windows\system32
702b0000 winspool.drv 6.1.7600.16385 C:\Windows\system32
72350000 msimg32.dll 6.1.7600.16385 C:\Windows\system32
724d0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32
724f0000 winmm.dll 6.1.7600.16385 C:\Windows\system32
72830000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32
72940000 sensapi.dll 6.1.7600.16385 C:\Windows\system32
72b00000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32
72c60000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32
72c70000 fwpuclnt.dll 6.1.7600.16385 C:\Windows\System32
72cf0000 dnsapi.DLL 6.1.7600.16385 C:\Windows\system32
72d40000 mswsock.dll 6.1.7600.16385 C:\Windows\system32
72d80000 NLAapi.dll 6.1.7600.16385 C:\Windows\system32
72d90000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32
72da0000 iphlpapi.DLL 6.1.7600.16385 C:\Windows\system32
72f00000 comctl32.dll 6.10.7600.16385 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc
73190000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32
73220000 SHFolder.dll 6.1.7600.16385 C:\Windows\system32
73470000 wship6.dll 6.1.7600.16385 C:\Windows\System32
73870000 rtutils.dll 6.1.7600.16385 C:\Windows\system32
73880000 rasman.dll 6.1.7600.16385 C:\Windows\system32
738a0000 RASAPI32.dll 6.1.7600.16385 C:\Windows\system32
74920000 profapi.dll 6.1.7600.16385 C:\Windows\system32
74950000 version.dll 6.1.7600.16385 C:\Windows\system32
74960000 wsock32.dll 6.1.7600.16385 C:\Windows\system32
74a40000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64
74a50000 SspiCli.dll 6.1.7600.16385 C:\Windows\syswow64
74ab0000 RPCRT4.dll 6.1.7600.16385 C:\Windows\syswow64
74ba0000 KERNELBASE.dll 6.1.7600.16385 C:\Windows\syswow64
74bf0000 SHLWAPI.dll 6.1.7600.16385 C:\Windows\syswow64
74c50000 ole32.dll 6.1.7600.16385 C:\Windows\syswow64
74de0000 IMAGEHLP.DLL 6.1.7600.16385 C:\Windows\syswow64
74e10000 IMM32.DLL 6.1.7600.16385 C:\Windows\system32
74e70000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64
74f40000 kernel32.dll 6.1.7600.16385 C:\Windows\syswow64
75040000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64
75060000 USP10.dll 1.626.7600.16385 C:\Windows\syswow64
75100000 ADVAPI32.dll 6.1.7600.16385 C:\Windows\syswow64
751a0000 oleaut32.dll 6.1.7600.16385 C:\Windows\syswow64
75230000 GDI32.dll 6.1.7600.16385 C:\Windows\syswow64
752c0000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\syswow64
75370000 PSAPI.dll 6.1.7600.16385 C:\Windows\syswow64
753e0000 MSASN1.dll 6.1.7600.16415 C:\Windows\syswow64
753f0000 Normaliz.dll 6.1.7600.16385 C:\Windows\syswow64
75400000 urlmon.dll 8.0.7600.16535 C:\Windows\syswow64
75540000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64
755d0000 comdlg32.dll 6.1.7600.16385 C:\Windows\syswow64
75650000 LPK.dll 6.1.7600.16385 C:\Windows\syswow64
75660000 WLDAP32.dll 6.1.7600.16385 C:\Windows\syswow64
756b0000 wininet.dll 8.0.7600.16535 C:\Windows\syswow64
757b0000 WS2_32.dll 6.1.7600.16385 C:\Windows\syswow64
757f0000 msvcrt.dll 7.0.7600.16385 C:\Windows\syswow64
758a0000 CRYPT32.dll 6.1.7600.16385 C:\Windows\syswow64
759c0000 USER32.dll 6.1.7600.16385 C:\Windows\syswow64
75ac0000 iertutil.dll 8.0.7600.16385 C:\Windows\syswow64
75cc0000 shell32.dll 6.1.7600.16385 C:\Windows\syswow64
76910000 SETUPAPI.dll 6.1.7600.16385 C:\Windows\syswow64
76ab0000 CFGMGR32.dll 6.1.7600.16385 C:\Windows\syswow64
76eb0000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64
76ee0000 ntdll.dll 6.1.7600.16385 C:\Windows\SysWOW64
processes:
0000 Idle 0 0 0
0004 System 0 0 0
0118 smss.exe 0 0 0
01c0 csrss.exe 0 0 0
0210 wininit.exe 0 0 0
0230 csrss.exe 1 0 0
024c services.exe 0 0 0
0254 lsass.exe 0 0 0
0284 winlogon.exe 1 0 0
0298 lsm.exe 0 0 0
0308 svchost.exe 0 0 0
0370 svchost.exe 0 0 0
03b0 atiesrxx.exe 0 0 0
03e8 svchost.exe 0 0 0
0078 svchost.exe 0 0 0
0138 svchost.exe 0 0 0
040c svchost.exe 0 0 0
0474 atieclxx.exe 1 0 0
049c svchost.exe 0 0 0
0548 aswUpdSv.exe 0 0 0
0568 ashServ.exe 0 0 0
05ac AAWService.exe 0 0 0
06b8 spoolsv.exe 0 0 0
06dc svchost.exe 0 0 0
073c agr64svc.exe 0 0 0
07ac RichVideo.exe 0 0 0
07e0 SeaPort.exe 0 0 0
05ec WLIDSVC.EXE 0 0 0
0868 unsecapp.exe 0 0 0
08e8 WmiPrvSE.exe 0 0 0
0924 ashWebSv.exe 0 0 0
0960 SearchIndexer.exe 0 0 0
09b8 ashMaiSv.exe 0 0 0
09fc svchost.exe 0 0 0
0af4 WLIDSVCM.EXE 0 0 0
0b50 taskhost.exe 1 26 21 normal
0bf8 taskeng.exe 1 10 3 normal
0504 MHotKey.exe 1 111 51 below normal C:\Windows
0aec ChiFuncExt.exe 1 14 6 below normal C:\Windows
0bec dwm.exe 1 19 2 high
0480 explorer.exe 1 626 250 normal
0c6c RAVCpl64.exe 1 54 12 normal
0d28 StikyNot.exe 1 128 63 normal
0dd4 soffice.exe 1 4 1 normal C:\Program Files (x86)\OpenOffice.org 3\program
0df0 soffice.bin 1 111 101 normal C:\Program Files (x86)\OpenOffice.org 3\program
0e10 WZCSLDR2.exe 1 13 10 normal C:\Program Files (x86)\ANI\ANIWZCS2 Service
0e4c AirGCFG.exe 1 34 19 normal C:\Program Files (x86)\D-Link\Wireless G WUA-1340
0e8c CNYHKey.exe 1 37 37 normal C:\Windows
0ea8 ButtonMonitor.exe 1 25 17 normal C:\Program Files (x86)\IOI\Smart Copy
0eb0 jusched.exe 1 9 2 normal C:\Program Files (x86)\Java\jre6\bin
0ec0 taskmgr.exe 1 115 107 high C:\Windows\SysWOW64
0ed4 ashDisp.exe 1 81 58 normal C:\Program Files\Alwil Software\Avast4
0f04 WinPatrol.exe 1 35 15 normal C:\Program Files (x86)\BillP Studios\WinPatrol
0f28 MOM.exe 1 10 9 normal
0fec ModLedKey.exe 1 14 6 normal C:\Windows
0a88 wmpnetwk.exe 0 0 0
0cbc AAWTray.exe 1 41 10 normal C:\Program Files (x86)\Lavasoft\Ad-Aware
0778 CCC.exe 1 37 42 normal
06c8 svchost.exe 0 0 0
06f0 wuauclt.exe 1 12 6 normal
047c firefox.exe 1 741 134 normal C:\Program Files (x86)\Mozilla Firefox
0f9c explorer.exe 1 109 39 normal
0dbc explorer.exe 1 223 139 normal
1248 jv16PT.exe 1 2759 300 normal C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
02a8 explorer.exe 1 187 135 normal
0fd0 explorer.exe 1 217 139 normal
0c60 jv16PT.exe 1 241 167 normal C:\Program Files\Macecraft\V\jv16 PowerTools 2009
05b4 BS9532.EXE 1 130 53 normal C:\Program Files (x86)\BookShelf95\AAMSTP32\APP32
13a0 audiodg.exe 0 0 0
1014 notepad.exe 1 23 20 normal
0294 SearchProtocolHost.exe 0 0 0
06c0 SearchFilterHost.exe 0 0 0 idle
1128 dllhost.exe 1 9 5 normal
hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- Maxtor 3200 USB Device
- ST3640623AS ATA Device
+ Display adapters
- ATI Radeon HD 3200 Graphics (driver 8.671.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST DVDRAM GH40F ATA Device
+ Human Interface Devices
- HID-compliant device
- USB Input Device
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 0
- ATA Channel 1
- ATA Channel 1
- Standard Dual Channel PCI IDE Controller
- Standard Dual Channel PCI IDE Controller
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- Microsoft PS/2 Mouse
+ Modems
- LSI PCI-SV92PP Soft Modem (driver 2.2.98.0)
+ Monitors
- Generic Non-PnP Monitor
+ Network adapters
- D-Link WUA-1340 USB Adapter (driver 4.0.8.0)
- Microsoft Virtual WiFi Miniport Adapter
+ Ports (COM & LPT)
- Communications Port (COM1)
- Communications Port (COM2)
- Printer Port (LPT1)
+ Processors
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
+ Sound, video and game controllers
- ATI HDMI Audio (driver 6.0.1.5880)
- Realtek High Definition Audio (driver 6.0.1.5888)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- ATI I/O Communications Processor PCI Bus Controller
- ATI I/O Communications Processor SMBus Controller
- ATI PCI Express (3GIO) Filter Driver (driver 1.2.0.2)
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High Definition Audio Controller
- High precision event timer
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard ISA bridge
- PCI standard PCI-to-PCI bridge
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Realtek USB 2.0 Card Reader (driver 6.0.6000.20097)
- Standard Enhanced PCI to USB Host Controller
- Standard Enhanced PCI to USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- USB Composite Device
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
cpu registers:
eax = 0018fe08
ebx = 00405c71
ecx = 00000007
edx = 00000000
esi = 00405c71
edi = 0fec0750
eip = 74bab727
esp = 0018fe08
ebp = 0018fe58
stack dump:
0018fe08 de fa ed 0e 01 00 00 00 - 00 00 00 00 27 b7 ba 74 ............'..t
0018fe18 07 00 00 00 71 5c 40 00 - d0 a6 8e 03 71 5c 40 00 ....q\@.....q\@.
0018fe28 71 5c 40 00 50 07 ec 0f - 38 ff 18 00 8c fe 18 00 q\@.P...8.......
0018fe38 71 5c 40 00 07 00 00 00 - 71 5c 40 00 d0 a6 8e 03 q\@.....q\@.....
0018fe48 71 5c 40 00 64 44 46 00 - d0 a6 8e 03 88 d5 46 00 q\@.dDF.......F.
0018fe58 38 ff 18 00 71 5c 40 00 - de fa ed 0e 01 00 00 00 8...q\@.........
0018fe68 07 00 00 00 70 fe 18 00 - 71 5c 40 00 d0 a6 8e 03 ....p...q\@.....
0018fe78 71 5c 40 00 71 5c 40 00 - 50 07 ec 0f 38 ff 18 00 q\@.q\@.P...8...
0018fe88 8c fe 18 00 02 00 00 00 - 20 44 40 00 40 de 2b 0f .........D@.@.+.
0018fe98 40 de 2b 0f 71 5c 40 00 - 01 71 26 0f 35 62 40 00 @.+.q\@..q&.5b@.
0018fea8 33 78 4b 00 50 07 ec 0f - 01 95 48 00 b7 5c 40 00 3xK.P.....H..\@.
0018feb8 40 d6 63 00 50 82 56 05 - 60 cf 50 08 a2 17 4a 00 @.c.P.V.`.P...J.
0018fec8 50 82 56 05 50 82 56 05 - 00 00 00 00 f0 14 4a 00 P.V.P.V.......J.
0018fed8 50 82 56 05 00 00 00 00 - 38 41 54 00 71 5c 40 00 P.V.....8AT.q\@.
0018fee8 01 c6 de 0f 35 62 40 00 - a1 62 49 00 b0 5b 2f 0f ....5b@..bI..[/.
0018fef8 50 82 56 05 00 00 00 00 - f1 88 54 00 00 a7 dc 0f P.V.......T.....
0018ff08 50 82 56 05 50 82 56 05 - 00 00 00 00 c9 a9 56 00 P.V.P.V.......V.
0018ff18 50 01 87 03 a0 3a 8e 03 - ca b8 56 00 78 ff 18 00 P....:....V.x...
0018ff28 24 67 40 00 38 ff 18 00 - 50 82 56 01 50 82 56 05 $g@.8...P.V.P.V.
0018ff38 88 ff 18 00 a2 17 4a 00 - 50 60 8f 00 64 0b 47 00 ......J.P`..d.G.
disassembling:
00405c61 mov ebx, eax
00405c63 mov eax, ebx
00405c65 call +$a6 ($405d10) ; System.TObject.CleanupInstance
00405c6a mov eax, ebx
00405c6c call -$1961 ($404310) ; System.@FreeMem
00405c71 > pop ebx
00405c72 ret
date/time : 2010-04-11, 07, 341ms
computer name : DT2
user name : Owner <admin>
registered owner : Microsoft / Microsoft
operating system : Windows 7 x64 build 7600
system language : English
system up time : 19 hours 5 minutes
program up time : 14 minutes 43 seconds
processors : 4x AMD Phenom(tm) 9150e Quad-Core Processor
physical memory : 1720/3839 MB (free/total)
free disk space : (C:) 417.38 GB
display mode : 1280x1024, 32 bit
process id : $cc0
allocated memory : 124.03 MB
executable : jv16PT.exe
exec. date/time : 2010-04-11 04
version : 2.0.0.779
compiled with : Delphi 2010
madExcept version : 3.0l
callstack crc : $0961e4df, $84b820ce, $84b820ce
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 00603C0E in module 'jv16PT.exe'. Read of address 00000280.
main thread ($908):
00603c0e +002 jv16PT.exe AdvOutlookList 6255 +0 TAdvOutlookList.GetNextItem
00603bdd +00d jv16PT.exe AdvOutlookList 6241 +4 TAdvOutlookList.GetItemCount
007cdfba +0e6 jv16PT.exe MiscTools_NonPortable 427 +12 CreateBackupStructure
007e5575 +119 jv16PT.exe CustRemoveFormUnit 1441 +20 TCustRemoveForm.RemoveBtnClick
00547103 +06f jv16PT.exe Controls TControl.Click
004dc4a6 +01e jv16PT.exe StdCtrls TCustomButton.Click
004dcf0c +010 jv16PT.exe StdCtrls TCustomButton.CNCommand
00546b98 +2d4 jv16PT.exe Controls TControl.WndProc
0054b460 +568 jv16PT.exe Controls TWinControl.WndProc
004dc16c +06c jv16PT.exe StdCtrls TButtonControl.WndProc
005467bc +024 jv16PT.exe Controls TControl.Perform
0054b5b3 +023 jv16PT.exe Controls DoControlMsg
0054c01b +00b jv16PT.exe Controls TWinControl.WMCommand
00546b98 +2d4 jv16PT.exe Controls TControl.WndProc
0054b460 +568 jv16PT.exe Controls TWinControl.WndProc
0054d26c +01c jv16PT.exe Controls TWinControl.WMNCHitTest
00546b98 +2d4 jv16PT.exe Controls TControl.WndProc
0054b460 +568 jv16PT.exe Controls TWinControl.WndProc
004a2a94 +014 jv16PT.exe Classes StdWndProc
0054ab00 +02c jv16PT.exe Controls TWinControl.MainWndProc
004a2a94 +014 jv16PT.exe Classes StdWndProc
759dcd7c +047 USER32.dll SendMessageW
759e0ad1 +016 USER32.dll CallWindowProcW
0054b560 +0d8 jv16PT.exe Controls TWinControl.DefaultHandler
00547554 +010 jv16PT.exe Controls TControl.WMLButtonUp
005474be +07e jv16PT.exe Controls TControl.WMMouseMove
00546b98 +2d4 jv16PT.exe Controls TControl.WndProc
0054b460 +568 jv16PT.exe Controls TWinControl.WndProc
004dc16c +06c jv16PT.exe StdCtrls TButtonControl.WndProc
0054ab00 +02c jv16PT.exe Controls TWinControl.MainWndProc
004a2a94 +014 jv16PT.exe Classes StdWndProc
759d7df5 +00a USER32.dll DispatchMessageW
00575c35 +11d jv16PT.exe Forms TApplication.ProcessMessage
00575c7a +00a jv16PT.exe Forms TApplication.HandleMessage
00575fa5 +0c9 jv16PT.exe Forms TApplication.Run
008d8ae8 +094 jv16PT.exe jv16PT 600 +136 initialization
74f53675 +010 kernel32.dll BaseThreadInitThunk
thread $125c:
76eff86a +0e ntdll.dll NtWaitForSingleObject
74bb0810 +92 KERNELBASE.dll WaitForSingleObjectEx
74f5117f +3e kernel32.dll WaitForSingleObjectEx
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $d08:
76f000f6 +0e ntdll.dll NtWaitForMultipleObjects
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $1258:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $13d8:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $1348:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
thread $1094:
76f01edf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
74f53675 +10 kernel32.dll BaseThreadInitThunk
modules:
00020000 recognition.dll C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
00400000 jv16PT.exe 2.0.0.779 C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
10000000 PATROLPRO.DLL 1.4.0.0 C:\Program Files (x86)\BillP Studios\WinPatrol
6a6e0000 ieframe.dll 8.0.7600.16535 C:\Windows\SysWOW64
70270000 olepro32.dll 6.1.7600.16385 C:\Windows\system32
702b0000 winspool.drv 6.1.7600.16385 C:\Windows\system32
71030000 RICHED20.DLL 5.31.23.1229 C:\Windows\system32
720d0000 OLEACC.dll 7.0.0.0 C:\Windows\SysWOW64
72350000 msimg32.dll 6.1.7600.16385 C:\Windows\system32
724d0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32
724f0000 winmm.dll 6.1.7600.16385 C:\Windows\system32
72830000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32
72940000 sensapi.dll 6.1.7600.16385 C:\Windows\system32
72b00000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32
72c60000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32
72c70000 fwpuclnt.dll 6.1.7600.16385 C:\Windows\System32
72cf0000 dnsapi.DLL 6.1.7600.16385 C:\Windows\system32
72d40000 mswsock.dll 6.1.7600.16385 C:\Windows\system32
72d80000 NLAapi.dll 6.1.7600.16385 C:\Windows\system32
72d90000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32
72da0000 iphlpapi.DLL 6.1.7600.16385 C:\Windows\system32
72f00000 comctl32.dll 6.10.7600.16385 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc
73190000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32
73220000 SHFolder.dll 6.1.7600.16385 C:\Windows\system32
73470000 wship6.dll 6.1.7600.16385 C:\Windows\System32
73870000 rtutils.dll 6.1.7600.16385 C:\Windows\system32
73880000 rasman.dll 6.1.7600.16385 C:\Windows\system32
738a0000 RASAPI32.dll 6.1.7600.16385 C:\Windows\system32
74920000 profapi.dll 6.1.7600.16385 C:\Windows\system32
74950000 version.dll 6.1.7600.16385 C:\Windows\system32
74960000 wsock32.dll 6.1.7600.16385 C:\Windows\system32
74a40000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64
74a50000 SspiCli.dll 6.1.7600.16385 C:\Windows\syswow64
74ab0000 RPCRT4.dll 6.1.7600.16385 C:\Windows\syswow64
74ba0000 KERNELBASE.dll 6.1.7600.16385 C:\Windows\syswow64
74bf0000 SHLWAPI.dll 6.1.7600.16385 C:\Windows\syswow64
74c50000 ole32.dll 6.1.7600.16385 C:\Windows\syswow64
74de0000 IMAGEHLP.DLL 6.1.7600.16385 C:\Windows\syswow64
74e10000 IMM32.DLL 6.1.7600.16385 C:\Windows\system32
74e70000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64
74f40000 kernel32.dll 6.1.7600.16385 C:\Windows\syswow64
75040000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64
75060000 USP10.dll 1.626.7600.16385 C:\Windows\syswow64
75100000 ADVAPI32.dll 6.1.7600.16385 C:\Windows\syswow64
751a0000 oleaut32.dll 6.1.7600.16385 C:\Windows\syswow64
75230000 GDI32.dll 6.1.7600.16385 C:\Windows\syswow64
752c0000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\syswow64
75370000 PSAPI.dll 6.1.7600.16385 C:\Windows\syswow64
753e0000 MSASN1.dll 6.1.7600.16415 C:\Windows\syswow64
753f0000 Normaliz.dll 6.1.7600.16385 C:\Windows\syswow64
75400000 urlmon.dll 8.0.7600.16535 C:\Windows\syswow64
75540000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64
755d0000 comdlg32.dll 6.1.7600.16385 C:\Windows\syswow64
75650000 LPK.dll 6.1.7600.16385 C:\Windows\syswow64
75660000 WLDAP32.dll 6.1.7600.16385 C:\Windows\syswow64
756b0000 wininet.dll 8.0.7600.16535 C:\Windows\syswow64
757b0000 WS2_32.dll 6.1.7600.16385 C:\Windows\syswow64
757f0000 msvcrt.dll 7.0.7600.16385 C:\Windows\syswow64
758a0000 CRYPT32.dll 6.1.7600.16385 C:\Windows\syswow64
759c0000 USER32.dll 6.1.7600.16385 C:\Windows\syswow64
75ac0000 iertutil.dll 8.0.7600.16385 C:\Windows\syswow64
75cc0000 shell32.dll 6.1.7600.16385 C:\Windows\syswow64
76910000 SETUPAPI.dll 6.1.7600.16385 C:\Windows\syswow64
76ab0000 CFGMGR32.dll 6.1.7600.16385 C:\Windows\syswow64
76eb0000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64
76ee0000 ntdll.dll 6.1.7600.16385 C:\Windows\SysWOW64
processes:
0000 Idle 0 0 0
0004 System 0 0 0
0118 smss.exe 0 0 0
01c0 csrss.exe 0 0 0
0210 wininit.exe 0 0 0
0230 csrss.exe 1 0 0
024c services.exe 0 0 0
0254 lsass.exe 0 0 0
0284 winlogon.exe 1 0 0
0298 lsm.exe 0 0 0
0308 svchost.exe 0 0 0
0370 svchost.exe 0 0 0
03b0 atiesrxx.exe 0 0 0
03e8 svchost.exe 0 0 0
0078 svchost.exe 0 0 0
0138 svchost.exe 0 0 0
040c svchost.exe 0 0 0
0474 atieclxx.exe 1 0 0
049c svchost.exe 0 0 0
0548 aswUpdSv.exe 0 0 0
0568 ashServ.exe 0 0 0
05ac AAWService.exe 0 0 0
06b8 spoolsv.exe 0 0 0
06dc svchost.exe 0 0 0
073c agr64svc.exe 0 0 0
07ac RichVideo.exe 0 0 0
07e0 SeaPort.exe 0 0 0
05ec WLIDSVC.EXE 0 0 0
0868 unsecapp.exe 0 0 0
08e8 WmiPrvSE.exe 0 0 0
0924 ashWebSv.exe 0 0 0
0960 SearchIndexer.exe 0 0 0
09b8 ashMaiSv.exe 0 0 0
09fc svchost.exe 0 0 0
0af4 WLIDSVCM.EXE 0 0 0
0b50 taskhost.exe 1 26 21 normal
0bf8 taskeng.exe 1 10 3 normal
0504 MHotKey.exe 1 111 51 below normal C:\Windows
0aec ChiFuncExt.exe 1 14 6 below normal C:\Windows
0bec dwm.exe 1 19 2 high
0480 explorer.exe 1 618 245 normal
0c6c RAVCpl64.exe 1 54 12 normal
0d28 StikyNot.exe 1 128 63 normal
0dd4 soffice.exe 1 4 1 normal C:\Program Files (x86)\OpenOffice.org 3\program
0df0 soffice.bin 1 112 102 normal C:\Program Files (x86)\OpenOffice.org 3\program
0e10 WZCSLDR2.exe 1 13 10 normal C:\Program Files (x86)\ANI\ANIWZCS2 Service
0e4c AirGCFG.exe 1 34 19 normal C:\Program Files (x86)\D-Link\Wireless G WUA-1340
0e8c CNYHKey.exe 1 37 37 normal C:\Windows
0ea8 ButtonMonitor.exe 1 25 17 normal C:\Program Files (x86)\IOI\Smart Copy
0eb0 jusched.exe 1 9 2 normal C:\Program Files (x86)\Java\jre6\bin
0ec0 taskmgr.exe 1 115 107 high C:\Windows\SysWOW64
0ed4 ashDisp.exe 1 81 58 normal C:\Program Files\Alwil Software\Avast4
0f04 WinPatrol.exe 1 35 15 normal C:\Program Files (x86)\BillP Studios\WinPatrol
0f28 MOM.exe 1 10 9 normal
0fec ModLedKey.exe 1 14 6 normal C:\Windows
0a88 wmpnetwk.exe 0 0 0
0cbc AAWTray.exe 1 41 10 normal C:\Program Files (x86)\Lavasoft\Ad-Aware
0778 CCC.exe 1 37 42 normal
06c8 svchost.exe 0 0 0
06f0 wuauclt.exe 1 12 6 normal
047c firefox.exe 1 728 133 normal C:\Program Files (x86)\Mozilla Firefox
0f9c explorer.exe 1 109 39 normal
0dbc explorer.exe 1 204 130 normal
02a8 explorer.exe 1 187 129 normal
0fd0 explorer.exe 1 194 126 normal
0c60 jv16PT.exe 1 241 167 normal C:\Program Files\Macecraft\V\jv16 PowerTools 2009
1014 notepad.exe 1 23 20 normal
0f10 jv16PT.exe 1 2391 157 normal C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
0cc0 jv16PT.exe 1 3224 402 normal C:\Program Files\Macecraft\V\Y-betas\jv16PT2010_Beta5
07c8 explorer.exe 1 206 131 normal
11d8 regedit.exe 1 65 25 normal
110c audiodg.exe 0 0 0
hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- Maxtor 3200 USB Device
- ST3640623AS ATA Device
+ Display adapters
- ATI Radeon HD 3200 Graphics (driver 8.671.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST DVDRAM GH40F ATA Device
+ Human Interface Devices
- HID-compliant device
- USB Input Device
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 0
- ATA Channel 1
- ATA Channel 1
- Standard Dual Channel PCI IDE Controller
- Standard Dual Channel PCI IDE Controller
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- Microsoft PS/2 Mouse
+ Modems
- LSI PCI-SV92PP Soft Modem (driver 2.2.98.0)
+ Monitors
- Generic Non-PnP Monitor
+ Network adapters
- D-Link WUA-1340 USB Adapter (driver 4.0.8.0)
- Microsoft Virtual WiFi Miniport Adapter
+ Ports (COM & LPT)
- Communications Port (COM1)
- Communications Port (COM2)
- Printer Port (LPT1)
+ Processors
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
- AMD Phenom(tm) 9150e Quad-Core Processor
+ Sound, video and game controllers
- ATI HDMI Audio (driver 6.0.1.5880)
- Realtek High Definition Audio (driver 6.0.1.5888)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- ATI I/O Communications Processor PCI Bus Controller
- ATI I/O Communications Processor SMBus Controller
- ATI PCI Express (3GIO) Filter Driver (driver 1.2.0.2)
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High Definition Audio Controller
- High precision event timer
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard host CPU bridge
- PCI standard ISA bridge
- PCI standard PCI-to-PCI bridge
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Realtek USB 2.0 Card Reader (driver 6.0.6000.20097)
- Standard Enhanced PCI to USB Host Controller
- Standard Enhanced PCI to USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- Standard OpenHCD USB Host Controller
- USB Composite Device
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
cpu registers:
eax = 00000000
ebx = 00000000
ecx = 00000000
edx = 00000000
esi = 00000000
edi = 00000000
eip = 00603c0e
esp = 0018f444
ebp = 0018f4c4
stack dump:
0018f444 e2 3b 60 00 24 00 00 00 - 00 00 00 00 00 00 00 00 .;`.$...........
0018f454 bf df 7c 00 9c f4 18 00 - 00 00 00 00 00 00 00 00 ..|.............
0018f464 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f474 ec e0 7c 00 ec 52 1f 12 - cc f4 18 00 24 67 40 00 ..|..R......$g@.
0018f484 c4 f4 18 00 00 f7 18 00 - 88 c4 4d 00 f0 67 b9 11 ..........M..g..
0018f494 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f4a4 00 00 00 00 00 00 00 00 - 3e 00 00 00 71 00 00 00 ........>...q...
0018f4b4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f4c4 50 f5 18 00 7a 55 7e 00 - b4 f8 18 00 24 67 40 00 P...zU~.....$g@.
0018f4d4 50 f5 18 00 00 f7 18 00 - 88 c4 4d 00 f0 67 b9 11 P.........M..g..
0018f4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f514 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f524 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018f534 00 00 00 00 00 00 00 00 - 30 8c 55 05 00 00 00 00 ........0.U.....
0018f544 00 00 00 00 00 00 00 00 - 00 00 00 00 98 f6 18 00 ................
0018f554 09 71 54 00 f0 67 b9 11 - ab c4 4d 00 00 f7 18 00 .qT..g....M.....
0018f564 11 cf 4d 00 f0 67 b9 11 - 9b 6b 54 00 00 f7 18 00 ..M..g...kT.....
0018f574 e4 f8 18 00 f0 67 b9 11 - c0 ba 07 02 00 00 00 00 .....g..........
disassembling:
00603c0c public AdvOutlookList.TAdvOutlookList.GetNextItem: ; function entry point
00603c0c 6255 xor ecx, ecx
00603c0e > mov eax,
00603c14 call +$1999f ($61d5b8) ; OutlookGroupedList.TOutlookGroupedList.GetNextItem
00603c19 6256 ret