EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Fri, 28 Jun 2013 16:24:20 +0400 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 13.6.28.7323 1.4 Parameters : 1.5 Compilation Date: Fri, 28 Jun 2013 04:02:36 +0400 1.6 Up Time : 2 minutes, 26 seconds Exception: ------------------------------------------------------------ 2.1 Date : Fri, 28 Jun 2013 16:26:47 +0400 2.2 Address : 00432083 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 13.6.28.7323 2.5 Type : EThread 2.6 Message : Thread Error: Неверный дескриптор (6). 2.7 ID : D3AD 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ----------------------------------------------------------------------------- 5.3 Free Memory : 1451 Mb 5.5 Free Disk : 11,22 Gb 5.7 Processor : Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz 5.8 Display Mode: 1280 x 1024, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce 8600 GT (driver 8.17.12.7533 - RAM 256 MB) Operating System: ----------------------------------- 6.1 Type : Microsoft Windows 7 6.2 Build # : 7600 6.3 Update : 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |00432083|SASPlanet.Debug.exe| | | | | |0082323F|SASPlanet.Debug.exe|frm_ProgressCacheConvrter.pas |TfrmProgressCacheConverter |btnPauseClick |189[7] | |775A2144|ntdll.dll | | |RtlAllocateHeap | | |773B83CF|USER32.dll | | |GetWindowLongW | | |773B83DB|USER32.dll | | |GetWindowLongW | | |775A27A5|ntdll.dll | | |RtlMultiByteToUnicodeN | | |775A1FAA|ntdll.dll | | |RtlFreeHeap | | |775A1F31|ntdll.dll | | |RtlFreeHeap | | |775A2937|ntdll.dll | | |RtlDeleteBoundaryDescriptor| | |7719D7BD|kernel32.dll | | |CreateDirectoryA | | |773D41F4|USER32.dll | | |CallWindowProcA | | |773D41DE|USER32.dll | | |CallWindowProcA | | |76B9941C|GDI32.dll | | |GetObjectA | | |771AF569|kernel32.dll | | |TlsSetValue | | |773B7690|USER32.dll | | |SendMessageW | | |773D41F4|USER32.dll | | |CallWindowProcA | | |773D41DE|USER32.dll | | |CallWindowProcA | | |773ACC8F|USER32.dll | | |CallNextHookEx | | |0079D4F6|SASPlanet.Debug.exe|EwbCore.pas |TCustomEmbeddedWB |Authenticate |1970[15] | |0079D50D|SASPlanet.Debug.exe|EwbCore.pas |TCustomEmbeddedWB |Authenticate |1970[15] | |773ABBB3|USER32.dll | | |GetCapture | | |773ACCC7|USER32.dll | | |CallNextHookEx | | |773B93BF|USER32.dll | | |KillTimer | | |773B3573|USER32.dll | | |DispatchMessageA | | |773B3569|USER32.dll | | |DispatchMessageA | | |0087EB2F|SASPlanet.Debug.exe|SASPlanet.dpr | | |1121[29] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=5988; Priority=0; Class=TGarbageCollectorThread | |-------------------------------------------------------------------------------------------------------------------------------------------| |77595E6A|ntdll.dll | | |NtWaitForSingleObject | | |75721730|KERNELBASE.dll | | |WaitForSingleObjectEx | | |771AEFFE|kernel32.dll | | |WaitForSingleObjectEx | | |771AEFC0|kernel32.dll | | |WaitForSingleObjectEx | | |771AEFAD|kernel32.dll | | |Sleep | | |771AEFA0|kernel32.dll | | |Sleep | | |006D2189|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |006D2180|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006D213A|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |775956AA|ntdll.dll | | |ZwQueryVirtualMemory | | |7572853D|KERNELBASE.dll | | |VirtualQueryEx | | |771AF212|kernel32.dll | | |GetCurrentThreadId | | |77595A2A|ntdll.dll | | |ZwSetEvent | | |757267A4|KERNELBASE.dll | | |GetCurrentThreadId | | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |006D2015|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006D1F74|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007D2996|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |512[169] | |007D2000|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |343[0] | |0087E9E4|SASPlanet.Debug.exe|SASPlanet.dpr | | |1097[5] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=7072; Priority=-15; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------| |77595E4A|ntdll.dll | | |NtWaitForMultipleObjects | | |7572686C|KERNELBASE.dll | | |GetProcessHeap | | |757268C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |771AF09C|kernel32.dll | | |TlsGetValue | | |771AF299|kernel32.dll | | |GetCurrentThreadId | | |771AF286|kernel32.dll | | |GetCurrentThreadId | | |006AE7EE|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D62F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |228[7] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |0063D668|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |241[3] | |0063D650|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |238[0] | |0063D4F9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |176[6] | |007D36F2|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |784[5] | |007D36A0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |779[0] | |00863E8D|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1323[192]| |773ACC6C|USER32.dll | | |SendMessageA | | |773ACC28|USER32.dll | | |SendMessageA | | |00620060|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas|TConfigDataWriteProviderByIniFile|WriteDateTime |155[1] | |00670070|SASPlanet.Debug.exe|x86.inc | |GetPtr |309[28] | |773ACBB3|USER32.dll | | |SetFocus | | |773ACBA9|USER32.dll | | |SetFocus | | |773AE133|USER32.dll | | |DefWindowProcA | | |773B1484|USER32.dll | | |ShowWindow | | |773B147A|USER32.dll | | |ShowWindow | | |77596B40|ntdll.dll | | |RtlLeaveCriticalSection | | |773BF006|USER32.dll | | |IntersectRect | | |775AEB05|ntdll.dll | | |LdrGetProcedureAddressEx | | |775AEE3A|ntdll.dll | | |LdrGetProcedureAddress | | |773B593C|USER32.dll | | |MonitorFromWindow | | |773B5952|USER32.dll | | |MonitorFromWindow | | |0087EB2F|SASPlanet.Debug.exe|SASPlanet.dpr | | |1121[29] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=2168; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------| |77595E4A|ntdll.dll | | |NtWaitForMultipleObjects | | |7572686C|KERNELBASE.dll | | |GetProcessHeap | | |006C4744|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |PrepareTileMatrix |463[33] | |757268C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006C4334|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |771AF09C|kernel32.dll | | |TlsGetValue | | |771AF299|kernel32.dll | | |GetCurrentThreadId | | |771AF286|kernel32.dll | | |GetCurrentThreadId | | |006AE7EE|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D62F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |228[7] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |0063D668|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |241[3] | |0063D650|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |238[0] | |0063D4F9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |176[6] | |006C4FBA|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006C4FA8|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |00801FEC|SASPlanet.Debug.exe|u_MapLayerBitmapMaps.pas |TMapLayerBitmapMaps |StartThreads |206[2] | |006C2A46|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005704BE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00585322|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005A9E1E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007D36C0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |780[1] | |007D36A0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |779[0] | |00863E8D|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1323[192]| |773ACC6C|USER32.dll | | |SendMessageA | | |773ACC28|USER32.dll | | |SendMessageA | | |00620060|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas|TConfigDataWriteProviderByIniFile|WriteDateTime |155[1] | |00670070|SASPlanet.Debug.exe|x86.inc | |GetPtr |309[28] | |773ACBB3|USER32.dll | | |SetFocus | | |773ACBA9|USER32.dll | | |SetFocus | | |773AE133|USER32.dll | | |DefWindowProcA | | |773B1484|USER32.dll | | |ShowWindow | | |773B147A|USER32.dll | | |ShowWindow | | |77596B40|ntdll.dll | | |RtlLeaveCriticalSection | | |773BF006|USER32.dll | | |IntersectRect | | |775AEB05|ntdll.dll | | |LdrGetProcedureAddressEx | | |775AEE3A|ntdll.dll | | |LdrGetProcedureAddress | | |773B593C|USER32.dll | | |MonitorFromWindow | | |773B5952|USER32.dll | | |MonitorFromWindow | | |0087EB2F|SASPlanet.Debug.exe|SASPlanet.dpr | | |1121[29] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1728; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------| |77595E4A|ntdll.dll | | |NtWaitForMultipleObjects | | |7572686C|KERNELBASE.dll | | |GetProcessHeap | | |006C4744|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |PrepareTileMatrix |463[33] | |757268C6|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006C4334|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |771AF09C|kernel32.dll | | |TlsGetValue | | |771AF299|kernel32.dll | | |GetCurrentThreadId | | |771AF286|kernel32.dll | | |GetCurrentThreadId | | |006AE7EE|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D62F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |228[7] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |0063D668|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |241[3] | |0063D650|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |238[0] | |0063D4F9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |176[6] | |006C4FBA|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006C4FA8|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |007F6D89|SASPlanet.Debug.exe|u_MapLayerGrids.pas |TMapLayerGrids |StartThreads |217[1] | |006C2A46|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005704BE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00585322|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005A9E1E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007D36C0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |780[1] | |007D36A0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |779[0] | |00863E8D|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1323[192]| |773ACC6C|USER32.dll | | |SendMessageA | | |773ACC28|USER32.dll | | |SendMessageA | | |00620060|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas|TConfigDataWriteProviderByIniFile|WriteDateTime |155[1] | |00670070|SASPlanet.Debug.exe|x86.inc | |GetPtr |309[28] | |773ACBB3|USER32.dll | | |SetFocus | | |773ACBA9|USER32.dll | | |SetFocus | | |773AE133|USER32.dll | | |DefWindowProcA | | |773B1484|USER32.dll | | |ShowWindow | | |773B147A|USER32.dll | | |ShowWindow | | |77596B40|ntdll.dll | | |RtlLeaveCriticalSection | | |773BF006|USER32.dll | | |IntersectRect | | |775AEB05|ntdll.dll | | |LdrGetProcedureAddressEx | | |775AEE3A|ntdll.dll | | |LdrGetProcedureAddress | | |773B593C|USER32.dll | | |MonitorFromWindow | | |773B5952|USER32.dll | | |MonitorFromWindow | | |0087EB2F|SASPlanet.Debug.exe|SASPlanet.dpr | | |1121[29] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=7348; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------| |006C404C|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |GetTileMatrix |287[0] | |006C413A|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |322[4] | |006C4334|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |364[46] | |771AF09C|kernel32.dll | | |TlsGetValue | | |771AF299|kernel32.dll | | |GetCurrentThreadId | | |771AF286|kernel32.dll | | |GetCurrentThreadId | | |006AE7EE|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |0063D62F|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |228[7] | |771B1172|kernel32.dll | | |BaseThreadInitThunk | | |-------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=5756; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------| |0063D668|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |241[3] | |0063D650|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |238[0] | |0063D4F9|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |176[6] | |006C4FBA|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |666[2] | |006C4FA8|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |664[0] | |006CA619|SASPlanet.Debug.exe|u_MapLayerVectorMaps.pas |TMapLayerVectorMaps |StartThreads |505[1] | |006C2A46|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |112[1] | |005704BE|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |00585322|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005A9E1E|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007D36C0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |780[1] | |007D36A0|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |779[0] | |00863E8D|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1323[192]| |773ACC6C|USER32.dll | | |SendMessageA | | |773ACC28|USER32.dll | | |SendMessageA | | |00620060|SASPlanet.Debug.exe|u_ConfigDataWriteProviderByIniFile.pas|TConfigDataWriteProviderByIniFile|WriteDateTime |155[1] | |00670070|SASPlanet.Debug.exe|x86.inc | |GetPtr |309[28] | |773ACBB3|USER32.dll | | |SetFocus | | |773ACBA9|USER32.dll | | |SetFocus | | |773AE133|USER32.dll | | |DefWindowProcA | | |77596B40|ntdll.dll | | |RtlLeaveCriticalSection | | |773B1484|USER32.dll | | |ShowWindow | | |773B147A|USER32.dll | | |ShowWindow | | --------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00300000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2013-05-19 04:01:10|T:\GoogleMV | |00400000|SASPlanet.Debug.exe| |13.6.28.7323 |5687808 |2013-06-28 04:02:40|T:\GoogleMV | |02DB0000|TileStorage_GE.dll | |1.0.0.9 |123392 |2012-11-05 20:39:18|T:\GoogleMV | |02F20000|f1ct.dll | | |127488 |2012-11-03 19:25:20|T:\GoogleMV | |03090000|TileStorage_GC.dll | |1.0.0.8 |163840 |2012-11-05 20:39:12|T:\GoogleMV | |0E810000|libdb51.dll |Berkeley DB 5.1 DLL |5.0.1.29 |1088000 |2013-05-19 04:01:10|T:\GoogleMV | |0F000000|detoured.dll |Marks process affected by Microsoft Research Detours Package |2.1.0.207 |9728 |2009-04-02 00:58:34|C:\Program Files\Crypto Pro\CSP | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-05-19 04:01:10|T:\GoogleMV | |5FD00000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2012-12-13 14:56:50|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |611B0000|cpcrypt.dll |Модуль исправления функционирования crypt32 |3.6.4349.0 |80896 |2009-04-24 00:14:24|C:\Program Files\Crypto Pro\CSP | |61780000|cpwinet.dll |Модуль исправления функционирования wininet.dll |3.6.4228.0 |69120 |2009-04-24 00:16:38|C:\Program Files\Crypto Pro\CSP | |65E30000|jpeg62.dll | | |244736 |2013-05-19 04:01:10|T:\GoogleMV | |671B0000|mshtml.dll |Средство просмотра HTML Microsoft® |8.0.7600.16385 |5957632 |2009-07-14 05:15:46|C:\Windows\System32 | |6A4A0000|ieframe.dll |Интернет-обозреватель |8.0.7600.16385 |10973696|2009-07-14 05:15:30|C:\Windows\System32 | |6B2B0000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-14 05:16:14|C:\Windows\system32 | |6B9B0000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-05-19 04:01:10|T:\GoogleMV | |6C8F0000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |157184 |2009-07-14 05:15:46|C:\Windows\System32 | |6F2B0000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-14 05:16:14|C:\Windows\system32 | |71480000|proj480.dll | | |193024 |2013-05-19 04:01:10|T:\GoogleMV | |723F0000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-14 05:16:14|C:\Windows\system32 | |725F0000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7600.16385 |319488 |2009-07-14 05:14:10|C:\Windows\system32 | |726A0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 05:16:22|C:\Windows\system32 | |72B50000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2012-12-13 14:56:50|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |72C20000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-14 05:16:14|C:\Windows\system32 | |73160000|fwpuclnt.dll |API пользовательского режима FWP/IPsec |6.1.7600.16385 |216576 |2009-07-14 05:15:22|C:\Windows\System32 | |73440000|iphlpapi.DLL |IP Helper API |6.1.7600.16385 |103936 |2009-07-14 05:15:34|C:\Windows\system32 | |73690000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 05:16:20|C:\Windows\system32 | |73870000|NLAapi.dll |Network Location Awareness 2 |6.1.7600.16385 |51712 |2009-07-14 05:16:04|C:\Windows\system32 | |73960000|winmm.dll |MCI API DLL |6.1.7600.16385 |194048 |2009-07-14 05:16:20|C:\Windows\system32 | |739A0000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 05:16:12|C:\Windows\system32 | |739D0000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 05:15:46|C:\Windows\system32 | |73A70000|OLEACC.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2009-07-14 05:16:14|C:\Windows\System32 | |73AB0000|rtutils.dll |Routing Utilities |6.1.7600.16385 |37376 |2009-07-14 05:16:14|C:\Windows\system32 | |73B00000|mlang.dll |Библиотека DLL многоязыковой поддержки |6.1.7600.16385 |177664 |2009-07-14 05:15:42|C:\Windows\system32 | |73C50000|olepro32.dll | |6.1.7600.16385 |90112 |2009-07-14 05:16:14|C:\Windows\system32 | |74140000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |249856 |2009-07-14 05:16:18|C:\Windows\system32 | |74770000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 05:16:18|C:\Windows\system32 | |74800000|wshtcpip.dll |Библиотека DLL помощника службы Winsock2 (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-14 05:16:22|C:\Windows\System32 | |74A80000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем|6.10.7600.16385 |1680896 |2009-07-14 05:03:52|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc| |74D30000|dnsapi.DLL |Динамическая библиотека API DNS-клиента |6.1.7600.16385 |269824 |2009-07-14 05:15:14|C:\Windows\system32 | |74E60000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 05:16:22|C:\Windows\System32 | |74E70000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0|6.1.7600.16385 |232448 |2009-07-14 05:15:52|C:\Windows\system32 | |75580000|SspiCli.dll |Security Support Provider Interface |6.1.7600.16385 |99840 |2009-07-14 05:16:16|C:\Windows\system32 | |755A0000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7600.16385 |292352 |2009-07-14 05:14:54|C:\Windows\system32 | |755F0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 05:15:08|C:\Windows\system32 | |75600000|SXS.DLL |Fusion 2.5 |6.1.7600.16385 |380416 |2009-07-14 05:16:16|C:\Windows\system32 | |756A0000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 05:16:14|C:\Windows\system32 | |75710000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7600.16385 |33280 |2009-07-14 05:15:44|C:\Windows\system32 | |75720000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |288256 |2009-07-14 05:15:36|C:\Windows\system32 | |757A0000|CRYPT32.dll |API32 криптографии |6.1.7600.16385 |1151488 |2009-07-14 05:15:08|C:\Windows\system32 | |759A0000|iertutil.dll |Run time utility for Internet Explorer |8.0.7600.16385 |2058240 |2009-07-14 05:15:30|C:\Windows\system32 | |75BA0000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7600.16385 |350208 |2009-07-14 05:16:16|C:\Windows\system32 | |75C00000|shell32.dll |Общая библиотека оболочки Windows |6.1.7600.16385 |12866560|2009-07-14 05:16:16|C:\Windows\system32 | |76850000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 05:15:44|C:\Windows\system32 | |76920000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 05:16:14|C:\Windows\SYSTEM32 | |769A0000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7600.16385 |268800 |2009-07-14 05:16:20|C:\Windows\system32 | |76B90000|GDI32.dll |GDI Client DLL |6.1.7600.16385 |304640 |2009-07-14 05:15:24|C:\Windows\system32 | |76BE0000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7600.16385 |118272 |2009-07-14 05:15:34|C:\Windows\system32 | |76C00000|ole32.dll |Microsoft OLE для Windows |6.1.7600.16385 |1412608 |2009-07-14 05:16:14|C:\Windows\system32 | |76D60000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7600.16385 |652288 |2009-07-14 05:16:14|C:\Windows\system32 | |76E10000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 05:15:04|C:\Windows\system32 | |76EA0000|wininet.dll |Расширения Интернета для Win32 |8.0.7600.16385 |977920 |2009-07-14 05:16:20|C:\Windows\system32 | |76FA0000|USP10.dll |Uniscribe Unicode script processor |1.626.7600.16385 |627200 |2009-07-14 05:16:18|C:\Windows\system32 | |77040000|advapi32.dll |Расширенная библиотека API Windows 32 |6.1.7600.16385 |640000 |2009-07-14 05:14:54|C:\Windows\system32 | |770E0000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7600.16385 |486912 |2009-07-14 05:15:08|C:\Windows\system32 | |77160000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7600.16385 |857088 |2009-07-14 05:15:36|C:\Windows\system32 | |77240000|LPK.dll |Language Pack |6.1.7600.16385 |26624 |2009-07-14 05:15:38|C:\Windows\system32 | |77250000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 05:09:02|C:\Windows\system32 | |77260000|URLMON.DLL |Расширения OLE32 для Win32 |8.0.7600.16385 |1224704 |2009-07-14 05:16:18|C:\Windows\system32 | |773A0000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7600.16385 |811520 |2009-07-14 05:16:18|C:\Windows\system32 | |77470000|msvcrt.dll |Windows NT CRT DLL |7.0.7600.16385 |690688 |2009-07-14 05:15:52|C:\Windows\system32 | |77550000|ntdll.dll |Системная библиотека NT |6.1.7600.16385 |1286144 |2009-07-14 05:17:52|C:\Windows\SYSTEM32 | |77690000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 05:16:12|C:\Windows\system32 | |776A0000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7600.16385 |206336 |2009-07-14 05:16:22|C:\Windows\system32 | |776E0000|oleaut32.dll | |6.1.7600.16385 |571904 |2009-07-14 05:16:14|C:\Windows\system32 | |77770000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 05:16:14|C:\Windows\system32 | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |118 | | |260 |smss.exe |Диспетчер сеанса Windows |6.1.7600.16385|0 |Above-Normal|3 | | |308 |nvvsvc.exe |NVIDIA Driver Helper Service, Version 275.33|8.17.12.7533 |0 |Normal |5 | | |320 |NvXDSync.exe | | |0 |Normal |8 | | |348 |winvnc.exe | | |0 |Normal |6 | | |368 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |9 | | |436 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385|0 |High |3 | | |448 |csrss.exe |Процесс исполнения клиент-сервер |6.1.7600.16385|0 |High |15 | | |504 |winlogon.exe |Программа входа в систему Windows |6.1.7600.16385|0 |High |3 | | |548 |services.exe |Приложение служб и контроллеров |6.1.7600.16385|0 |Normal |7 | | |564 |lsass.exe |Local Security Authority Process |6.1.7600.16385|0 |Normal |9 | | |572 |lsm.exe |Служба диспетчера локальных сеансов |6.1.7600.16385|0 |Normal |9 | | |680 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |11 | | |744 |nvvsvc.exe |NVIDIA Driver Helper Service, Version 275.33|8.17.12.7533 |0 |Normal |5 | | |784 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |9 | | |872 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |21 | | |916 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |21 | | |956 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |41 | | |976 |QUICKSTART.EXE | | |0 |Normal |3 |D:\Programs\QuickStart | |1116 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |31 | | |1216 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |26 | | |1364 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |18 | | |1372 |uTorrent.exe |µTorrent |3.3.0.29625 |0 |Normal |50 |C:\Program Files\uTorrent | |1436 |spoolsv.exe |Диспетчер очереди печати |6.1.7600.16385|0 |Normal |20 | | |1472 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1580 |armsvc.exe | | |0 |Normal |4 | | |1668 |MobileBalance.exe |Мониторинг баланса сотовых телефонов. |2.82.0.5114 |0 |Normal |13 |D:\Programs\mtsb | |1676 |dwservice.exe | | |0 |Normal |22 | | |1704 |frwl_svc.exe | | |0 |Normal |12 | | |1748 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |20 | | |1780 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1816 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |4 | | |1836 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |3 | | |1864 |nvSCPAPISvr.exe | | |0 |Normal |6 | | |1912 |taskeng.exe |Обработчик планировщика заданий |6.1.7600.16385|0 |Below-Normal|4 | | |1928 |spideragent.exe |SpIDer Agent for Windows |8.1.0.5140 |0 |Normal |17 |C:\Program Files\DrWeb | |2284 |OUTLOOK.EXE |Microsoft Office Outlook |12.0.6607.1000|0 |Normal |2 |C:\Program Files\Microsoft Office\Office12 | |2432 |dwengine.exe | | |0 |Normal |26 | | |2560 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |5 | | |2768 |dwarkdaemon.exe | | |0 |Normal |6 | | |2880 |wmdc.exe |Центр устройств Microsoft Windows Mobile |6.1.6965.0 |0 |Normal |15 |C:\Windows\WindowsMobile | |2932 |dwengine.exe | | |0 |Normal |3 | | |3044 |Explorer.EXE |Проводник |6.1.7600.16385|0 |Normal |41 |C:\Windows | |3060 |taskhost.exe |Хост-процесс для задач Windows |6.1.7600.16385|0 |Normal |10 |C:\Windows\system32 | |3132 |Dwm.exe |Диспетчер окон рабочего стола |6.1.7600.16385|0 |Normal |6 |C:\Windows\system32 | |3224 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |9 | | |3324 |TiltWheelMouse.exe |pximouse |1.0.0.2 |0 |Normal |3 |C:\Windows\System32 | |3336 |TortoiseHgOverlayServer.exe|TortoiseHg Overlay Icon Server |2.7.2.0 |0 |Normal |3 |C:\Program Files\TortoiseHg | |3340 |LMS.exe | | |0 |Normal |4 | | |3424 |ipoint.exe |IPoint.exe |8.20.468.0 |0 |Normal |9 |C:\Program Files\Microsoft IntelliPoint | |3432 |daemonu.exe | | |0 |Normal |10 | | |3460 |dpupdchk.exe |dpupdchk.exe |8.20.468.0 |0 |Normal |5 |C:\Program Files\Microsoft IntelliPoint | |3468 |frwl_notify.exe |Dr.Web Firewall for Windows notify module |7.0.1.11210 |0 |Normal |6 |C:\Program Files\DrWeb | |3504 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385|0 |Normal |13 | | |3708 |UNS.exe | | |0 |Normal |14 | | |3828 |nvtray.exe |NVIDIA Settings |7.17.12.7533 |0 |Normal |5 |C:\Program Files\NVIDIA Corporation\Display| |3868 |explorer.exe |Проводник |6.1.7600.16385|0 |Normal |13 |C:\Windows | |3892 |cmd.exe |Обработчик команд Windows |6.1.7600.16385|0 |Normal |1 |C:\Windows\system32 | |4028 |iexplore.exe |Internet Explorer |8.0.7600.16385|0 |Normal |58 |C:\Program Files\Internet Explorer | |4724 |tv_w32.exe | | |0 |Normal |2 | | |4864 |AsteriskMonitor.exe |AsteriskMonitor |1.0.0.0 |0 |Normal |14 |C:\AsteriskManager | |4936 |EXCEL.EXE |Microsoft Office Excel |12.0.6611.1000|0 |Normal |8 |C:\Program Files\Microsoft Office\Office12 | |5704 |mstsc.exe |Подключение к удаленному рабочему столу |6.1.7600.16385|0 |Normal |10 |C:\Windows\system32 | |5836 |conhost.exe |Окно консоли узла |6.1.7600.16385|0 |Normal |2 |C:\Windows\system32 | |5920 |opera.exe |Opera Internet Browser |12.15.1748.0 |0 |Normal |22 |C:\Program Files\Opera | |6248 |TeamViewer.exe |TeamViewer 8 |8.0.19045.0 |0 |High |19 |C:\Program Files\TeamViewer\Version8 | |6268 |taskmgr.exe |Диспетчер задач Windows |6.1.7600.16385|0 |High |5 |C:\Windows\system32 | |6376 |ndn.exe | | |0 |Normal |4 |D:\Programs\NDN_W32 | |6444 |audiodg.exe |Изоляция графов аудиоустройств Windows |6.1.7600.16385|0 |Normal |6 | | |6772 |mstsc.exe |Подключение к удаленному рабочему столу |6.1.7600.16385|0 |Normal |10 |C:\Windows\system32 | |6784 |rundll32.exe |Хост-процесс Windows (Rundll32) |6.1.7600.16385|0 |Normal |4 |C:\Windows\System32 | |6848 |Miranda32.exe |Miranda NG |0.94.2.4132 |0 |Normal |18 |D:\Programs\MirandaNG | |7060 |infium.exe | |9.0.4.5 |0 |Normal |61 |D:\Programs\QIP Infium | |7564 |explorer.exe |Проводник |6.1.7600.16385|0 |Normal |8 |C:\Windows | |7584 |winvnc.exe | | |0 |Normal |9 | | |7652 |SASPlanet.Debug.exe | |13.6.28.7323 |0 |Normal |19 |T:\GoogleMV | |7676 |1cv8.exe |1cv8 |8.2.17.153 |0 |Normal |8 |C:\Program Files\1cv82\8.2.17.153\bin | |7808 |TeamViewer_Service.exe | | |0 |Normal |13 | | |8752 |mstsc.exe |Подключение к удаленному рабочему столу |6.1.7600.16385|0 |Normal |10 |C:\Windows\system32 | |10068|OUTLOOK.EXE |Microsoft Office Outlook |12.0.6607.1000|0 |Normal |35 |C:\Program Files\Microsoft Office\Office12 | |10192|SearchIndexer.exe |Индексатор службы Microsoft Windows Search |7.0.7600.16385|0 |Normal |14 | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------------------------- 00432060 mov byte ptr [ebp-$0C], $0B 00432064 mov [ebp-$08], ebx 00432067 mov byte ptr [ebp-$04], $00 0043206B lea eax, [ebp-$10] 0043206E push eax 0043206F push $01 00432071 mov ecx, [$895F34] 00432077 mov dl, $01 00432079 mov eax, dword ptr [EThread] 0043207E call -$0001D363 00432083 call -$0002C844 ; <-- EXCEPTION 00432088 xor eax, eax 0043208A pop edx 0043208B pop ecx 0043208C pop ecx 0043208D mov fs:[eax], edx 00432090 push $004320A5 ; '[‹е]Г‹АS‹Ш„Тu.иДoэя‹Р‹Гиoяяя[ГђS'... 00432095 lea eax, [ebp-$14] 00432098 call -$0002C1B1 0043209D ret Registers: ----------------------------- EAX: 0E7C1B40 EDI: 0012F670 EBX: 00000006 ESI: 004A89C8 ECX: 00000000 ESP: 0012F45C EDX: 00432088 EIP: 00432083 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012F45C: 0012F490 0E7E7170: E8 BC 37 FD FF 33 C0 5A 59 59 64 89 10 68 A5 20 ..7..3.ZYYd..h. 0012F460: 00405720 0E7E7180: 43 00 8D 45 EC E8 4F 3E FD FF C3 E9 FD 35 FD FF C..E..O>.....5.. 0012F464: 0012F480 0E7E7190: EB F0 5B 8B E5 5D C3 8B C0 53 8B D8 84 D2 75 0E ..[..]...S....u. 0012F468: 0E7EC720 0E7E71A0: E8 C4 6F FD FF 8B D0 8B C3 E8 6F FF FF FF 5B C3 ..o.......o...[. 0012F46C: 00000000 0E7E71B0: 90 53 66 83 78 1A 00 74 0A 8B D8 8B D0 8B 43 1C .Sf.x..t......C. 0012F470: 0E7BF628 0E7E71C0: FF 53 18 5B C3 66 83 78 1A 00 74 0B 50 68 C4 20 .S.[.f.x..t.Ph. 0012F474: 004A890B 0E7E71D0: 43 00 E8 8A 02 00 00 C3 90 53 56 8B DA 8B F0 0F C........SV..... 0012F478: 00000006 0E7E71E0: B6 C3 8B 04 85 3C FE 87 00 50 8B 46 04 50 E8 5E .....<...P.F.P.^ 0012F47C: 75749300 0E7E71F0: 72 FD FF 83 F8 01 1B D2 42 8B C6 E8 99 FF FF FF r.......B....... 0012F480: 0012F4B0 0E7E7200: 5E 5B C3 8B C0 55 8B EC 53 56 57 8B FA 68 2C BA ^[...U..SVW..h,. 0012F484: 004320C1 0E7E7210: 89 00 E8 B2 6D FD FF 33 C0 55 68 CA 21 43 00 64 ....m..3.Uh.!C.d 0012F488: 08B10300 0E7E7220: FF 30 64 89 20 83 3D 38 FE 87 00 00 74 71 A1 38 .0d. .=8....tq.8 0012F48C: 00432424 0E7E7230: FE 87 00 8B 70 08 4E 83 FE 00 7C 63 8B D6 A1 38 ....p.N...|c...8 0012F490: 0012F4B8 0E7E7240: FE 87 00 E8 39 5C FF FF 8B D8 83 7B 08 00 75 49 ....9\.....{..uI 0012F494: 004058B7 0E7E7250: 85 FF 74 06 8B 03 3B 38 74 1B 66 83 7D 0A 00 74 ..t...;8t.f.}..t 0012F498: 0012F4B0 0E7E7260: 38 8B 03 8B 40 08 3B 45 08 75 2E 8B 03 8B 40 0C 8...@.;E.u....@.