EurekaLog 6.1.03 Application: ------------------------------------------------------- 1.1 Start Date : Mon, 28 Oct 2013 20:02:08 +0600 1.2 Name/Description: SASPlanet.Debug.exe 1.3 Version Number : 13.10.28.7594 1.4 Parameters : 1.5 Compilation Date: Mon, 28 Oct 2013 06:03:45 +0600 1.6 Up Time : 18 seconds Exception: --------------------------------------------------------------------------------------------------------------------- 2.1 Date : Mon, 28 Oct 2013 20:02:26 +0600 2.2 Address : 0070336F 2.3 Module Name : SASPlanet.Debug.exe 2.4 Module Version: 13.10.28.7594 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0070336F in module 'SASPlanet.Debug.exe'. Read of address 00000000. 2.7 ID : 752F 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.5 Privileges: SeIncreaseQuotaPrivilege - OFF SeSecurityPrivilege - ON SeTakeOwnershipPrivilege - OFF SeLoadDriverPrivilege - OFF SeSystemProfilePrivilege - OFF SeSystemtimePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeCreatePagefilePrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeShutdownPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeChangeNotifyPrivilege - ON SeRemoteShutdownPrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF SeCreateSymbolicLinkPrivilege - OFF Computer: ------------------------------------------------------------------------------ 5.3 Free Memory : 1861 Mb 5.5 Free Disk : 16,05 Gb 5.7 Processor : Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz 5.8 Display Mode: 1366 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce GT 320M (driver 8.16.11.8969 - RAM 1024 MB) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7601 6.3 Update : Service Pack 1 6.4 Language: Russian 6.5 Charset : 204 Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |0070336F|SASPlanet.Debug.exe|u_MarkDbSml.pas |TMarkDbSml |_AddMarksToList |1209[10] | |00703308|SASPlanet.Debug.exe|u_MarkDbSml.pas |TMarkDbSml |_AddMarksToList |1199[0] | |007035AD|SASPlanet.Debug.exe|u_MarkDbSml.pas |TMarkDbSml |GetMarkSubsetByCategoryList|1266[12] | |006EF532|SASPlanet.Debug.exe|u_MarkDbByImpl.pas |TMarkDbByImpl |GetMarkSubsetByCategoryList|233[4] | |007FCA5E|SASPlanet.Debug.exe|u_MarkDbGUIHelper.pas |TMarkDbGUIHelper |ExportCategoryList |456[7] | |007FC9CC|SASPlanet.Debug.exe|u_MarkDbGUIHelper.pas |TMarkDbGUIHelper |ExportCategoryList |449[0] | |0086F4D5|SASPlanet.Debug.exe|frm_MarksExplorer.pas |TfrmMarksExplorer |btnExportClick |550[7] | |75C26285|USER32.dll | | |CallNextHookEx | | |005C17DE|SASPlanet.Debug.exe|TB2Hook.pas | |GetMessageHook |138[9] | |75C17BC5|USER32.dll | | |DispatchMessageA | | |75C17BBB|USER32.dll | | |DispatchMessageA | | |00893B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1173[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=11424; Priority=0; Class=TGarbageCollectorThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |74951405|KERNELBASE.dll | | |WaitForSingleObjectEx | | |006DEC6D|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |130[2] | |006DEC64|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |SleepCancelable |129[1] | |006DEC1E|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Execute |117[10] | |7494EF19|KERNELBASE.dll | | |VirtualQueryEx | | |74950DCE|KERNELBASE.dll | | |SetEvent | | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006DEAF9|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |85[14] | |006DEA58|SASPlanet.Debug.exe|u_GarbageCollectorThread.pas |TGarbageCollectorThread |Create |71[0] | |007E584F|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |583[202] | |007E4D54|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |Create |381[0] | |00893A30|SASPlanet.Debug.exe|SASPlanet.dpr | | |1148[5] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=9976; Priority=-15; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |749514E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006B98C2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00645ACB|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00645B0C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00645AF4|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00645995|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |007E66FA|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |874[5] | |007E66A8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |869[0] | |00878146|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1341[192]| |75C26175|USER32.dll | | |SendMessageA | | |75C2612E|USER32.dll | | |SendMessageA | | |75C22175|USER32.dll | | |SetFocus | | |75C17027|USER32.dll | | |GetWindowLongW | | |75C20DFB|USER32.dll | | |ShowWindow | | |75C17033|USER32.dll | | |GetWindowLongW | | |76EB2280|ntdll.dll | | |RtlLeaveCriticalSection | | |76EC020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |76EC01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74951E5E|KERNELBASE.dll | | |GetProcAddress | | |75C23181|USER32.dll | | |MonitorFromWindow | | |75C2319D|USER32.dll | | |MonitorFromWindow | | |00893B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1173[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=10476; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006D0BE8|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |PrepareTileMatrix |462[33] | |749514E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006D07D9|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |363[46] | |006B98C2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00645ACB|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00645B0C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00645AF4|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00645995|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006D1443|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |665[2] | |006D1434|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |663[0] | |00814DB8|SASPlanet.Debug.exe|u_MapLayerBitmapMaps.pas |TMapLayerBitmapMaps |StartThreads |207[2] | |006CEF0A|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |106[1] | |0057161A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005865DE|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC3EE|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E66C8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |870[1] | |007E66A8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |869[0] | |00878146|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1341[192]| |75C26175|USER32.dll | | |SendMessageA | | |75C2612E|USER32.dll | | |SendMessageA | | |75C22175|USER32.dll | | |SetFocus | | |75C17027|USER32.dll | | |GetWindowLongW | | |75C20DFB|USER32.dll | | |ShowWindow | | |75C17033|USER32.dll | | |GetWindowLongW | | |76EB2280|ntdll.dll | | |RtlLeaveCriticalSection | | |76EC020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |76EC01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74951E5E|KERNELBASE.dll | | |GetProcAddress | | |75C23181|USER32.dll | | |MonitorFromWindow | | |75C2319D|USER32.dll | | |MonitorFromWindow | | |00893B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1173[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3396; Priority=0; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006D04F4|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |GetTileMatrix |286[0] | |006D05E2|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |321[4] | |006D07D9|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |363[46] | |006B98C2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00645ACB|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00645B0C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00645AF4|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00645995|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006D1443|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |665[2] | |006D1434|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |663[0] | |0080AD19|SASPlanet.Debug.exe|u_MapLayerGrids.pas |TMapLayerGrids |StartThreads |217[1] | |006CEF0A|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |106[1] | |0057161A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005865DE|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC3EE|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E66C8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |870[1] | |007E66A8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |869[0] | |00878146|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1341[192]| |75C26175|USER32.dll | | |SendMessageA | | |75C2612E|USER32.dll | | |SendMessageA | | |75C22175|USER32.dll | | |SetFocus | | |75C17027|USER32.dll | | |GetWindowLongW | | |75C20DFB|USER32.dll | | |ShowWindow | | |75C17033|USER32.dll | | |GetWindowLongW | | |76EB2280|ntdll.dll | | |RtlLeaveCriticalSection | | |76EC020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |76EC01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74951E5E|KERNELBASE.dll | | |GetProcAddress | | |75C23181|USER32.dll | | |MonitorFromWindow | | |75C2319D|USER32.dll | | |MonitorFromWindow | | |00893B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1173[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=10112; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |006D04F4|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |GetTileMatrix |286[0] | |006D05E2|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |321[4] | |006D07D9|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |OnPrepareTileMatrix |363[46] | |006B98C2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00645ACB|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00645B0C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00645AF4|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00645995|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006D1443|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |665[2] | |006D1434|SASPlanet.Debug.exe|u_TiledLayerWithThreadBase.pas |TTiledLayerWithThreadBase |StartThreads |663[0] | |006D6CD9|SASPlanet.Debug.exe|u_MapLayerVectorMaps.pas |TMapLayerVectorMaps |StartThreads |310[1] | |006CEF0A|SASPlanet.Debug.exe|u_WindowLayerBasic.pas |TWindowLayerAbstract |OnAppStarted |106[1] | |0057161A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005865DE|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC3EE|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E66C8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |870[1] | |007E66A8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |869[0] | |00878146|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1341[192]| |75C26175|USER32.dll | | |SendMessageA | | |75C2612E|USER32.dll | | |SendMessageA | | |75C22175|USER32.dll | | |SetFocus | | |75C17027|USER32.dll | | |GetWindowLongW | | |75C20DFB|USER32.dll | | |ShowWindow | | |75C17033|USER32.dll | | |GetWindowLongW | | |76EB2280|ntdll.dll | | |RtlLeaveCriticalSection | | |76EC020B|ntdll.dll | | |LdrGetProcedureAddressEx | | |76EC01FD|ntdll.dll | | |LdrGetProcedureAddress | | |74951E5E|KERNELBASE.dll | | |GetProcAddress | | |75C23181|USER32.dll | | |MonitorFromWindow | | |75C2319D|USER32.dll | | |MonitorFromWindow | | |00893B89|SASPlanet.Debug.exe|SASPlanet.dpr | | |1173[30] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3924; Priority=-2; Class=TThread4InterfacedThread | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |749514E9|KERNELBASE.dll | | |WaitForMultipleObjectsEx | | |006D238F|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnPrepareSubset |470[48] | |006B98C2|SASPlanet.Debug.exe|u_BackgroundTask.pas |TBackgroundTask |Execute |129[5] | |00645ACB|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Execute |229[7] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=12212; Priority=1; Class=; [Main] | |-------------------------------------------------------------------------------------------------------------------------------------------------------------| |00645B0C|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |243[3] | |00645AF4|SASPlanet.Debug.exe|u_InterfacedThread.pas |TThread4InterfacedThread |Start |240[0] | |00645995|SASPlanet.Debug.exe|u_InterfacedThread.pas |TInterfacedThread |Start |177[6] | |006D1B64|SASPlanet.Debug.exe|u_VectorItemSubsetChangeableForVectorLayers.pas|TVectorItemSubsetChangeableForVectorLayers|OnAppStarted |258[2] | |0057161A|SASPlanet.Debug.exe|u_ListenerByEvent.pas |TNotifyNoMmgEventListener |Notification |157[1] | |005865DE|SASPlanet.Debug.exe|u_Notifier.pas |TNotifierBase |Notify |87[10] | |005AC3EE|SASPlanet.Debug.exe|u_NotifierOperation.pas |TNotifierOneOperation |ExecuteOperation |165[10] | |007E66C8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |870[1] | |007E66A8|SASPlanet.Debug.exe|u_GlobalState.pas |TGlobalState |StartThreads |869[0] | |00878146|SASPlanet.Debug.exe|frm_Main.pas |TfrmMain |FormActivate |1341[192]| |76EB2280|ntdll.dll | | |RtlLeaveCriticalSection | | --------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00250000|zlib1.dll |zlib data compression library |1.2.7.0 |66048 |2013-05-19 06:01:10|C:\Program Files (x86)\SASPlanet | |00400000|SASPlanet.Debug.exe | |13.10.28.7594 |5804032 |2013-10-28 06:03:48|C:\Program Files (x86)\SASPlanet | |0B540000|libdb51.dll |Berkeley DB 5.1 DLL |5.0.1.29 |1088000 |2013-05-19 06:01:10|C:\Program Files (x86)\SASPlanet | |10000000|FreeImage.dll |FreeImage library |3.15.3.0 |322560 |2013-05-19 06:01:10|C:\Program Files (x86)\SASPlanet | |63000000|wpdshext.dll |Расширение оболочки для переносных устройств |6.1.7601.17514 |2311168 |2010-11-20 18:21:40|C:\Windows\system32 | |63750000|NetworkExplorer.dll |Сетевой проводник |6.1.7601.17514 |1661440 |2010-11-20 18:20:30|C:\Windows\system32 | |63A00000|PortableDeviceApi.dll |Компоненты API для переносных устройств Windows |6.1.7601.17514 |547840 |2010-11-20 18:20:56|C:\Windows\system32 | |63A90000|SearchFolder.dll |SearchFolder |6.1.7601.17514 |646144 |2010-11-20 18:21:08|C:\Windows\system32 | |64BE0000|PortableDeviceTypes.dll |Windows Portable Device (Parameter) Types Component |6.1.7600.16385 |159744 |2009-07-14 07:16:14|C:\Windows\system32 | |64C10000|actxprxy.dll |ActiveX Interface Marshaling Library |6.1.7601.17514 |309760 |2010-11-20 18:18:02|C:\Windows\SysWOW64 | |64C60000|StructuredQuery.dll |Structured Query |7.0.7601.17514 |363520 |2010-11-20 18:21:28|C:\Windows\System32 | |66C40000|davclnt.dll |Web DAV Client DLL |6.1.7601.18201 |81920 |2013-07-04 17:51:06|C:\Windows\System32 | |66C60000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |158720 |2013-05-18 10:39:52|C:\Windows\system32 | |67C80000|jpeg62.dll | | |244736 |2013-05-19 06:01:10|C:\Program Files (x86)\SASPlanet | |69C00000|DAVHLPR.dll |DAV Helper DLL |6.1.7600.16385 |19456 |2009-07-14 07:15:10|C:\Windows\System32 | |69C10000|ntlanman.dll |Microsoft® LAN Manager |6.1.7601.17514 |69120 |2010-11-20 18:20:48|C:\Windows\System32 | |69C30000|drprov.dll |Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт)|6.1.7600.16385 |18944 |2009-07-14 07:15:14|C:\Windows\System32 | |69CB0000|ieproxy.dll |IE ActiveX Interface Marshaling Library |10.0.9200.16720 |257536 |2013-09-23 05:27:50|C:\Program Files (x86)\Internet Explorer | |69D00000|EhStorAPI.dll |Windows Enhanced Storage API |6.1.7601.17514 |128512 |2010-11-20 18:18:40|C:\Windows\system32 | |6BA50000|ieframe.dll |Браузер |10.0.9200.16720 |13761024|2013-09-23 05:27:50|C:\Windows\SysWOW64 | |6E3E0000|SXS.DLL |Fusion 2.5 |6.1.7601.17514 |380416 |2010-11-20 18:21:28|C:\Windows\system32 | |6E640000|EhStorShell.dll |Библиотека DLL расширения оболочки Windows Enhanced Storage |6.1.7600.16385 |189952 |2009-07-14 07:15:16|C:\Windows\system32 | |6E710000|apphelp.dll |Клиентская библиотека совместимости приложений |6.1.7601.17514 |295936 |2010-11-20 18:18:04|C:\Windows\system32 | |6E7E0000|slc.dll |Software Licensing Client DLL |6.1.7600.16385 |27136 |2009-07-14 07:16:16|C:\Windows\system32 | |6E990000|wship6.dll |Библиотека DLL помощника Winsock2 (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-14 07:16:22|C:\Windows\System32 | |6EA40000|api-ms-win-downlevel-advapi32-l2-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |3584 |2013-01-14 03:12:48|C:\Windows\SysWOW64 | |6EA50000|PROPSYS.dll |Система страниц свойств (Microsoft) |7.0.7601.17514 |988160 |2010-11-20 18:20:58|C:\Windows\system32 | |6EB50000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-14 07:15:46|C:\Windows\system32 | |6ED90000|uxtheme.dll |Библиотека тем UxTheme (Microsoft) |6.1.7600.16385 |245760 |2009-07-14 07:11:26|C:\Windows\system32 | |6EE10000|ntmarta.dll |Поставщик Windows NT MARTA |6.1.7600.16385 |121856 |2009-07-14 07:16:12|C:\Windows\system32 | |6EE40000|cscapi.dll |Offline Files Win32 API |6.1.7601.17514 |34816 |2010-11-20 18:18:26|C:\Windows\system32 | |6EE70000|dwmapi.dll |Интерфейс API диспетчера окон рабочего стола (Майкрософт) |6.1.7600.16385 |67072 |2009-07-14 07:15:14|C:\Windows\system32 | |6EE90000|olepro32.dll | |6.1.7601.17514 |90112 |2010-11-20 18:20:50|C:\Windows\system32 | |6EED0000|winspool.drv |Драйвер диспетчера очереди Windows |6.1.7601.17514 |320000 |2010-11-20 18:16:52|C:\Windows\system32 | |6EFD0000|WINSTA.dll |Winstation Library |6.1.7601.17514 |156672 |2010-11-20 18:21:38|C:\Windows\System32 | |6F890000|msxml3.dll |MSXML 3.0 SP11 |8.110.7601.17988 |1236992 |2012-11-01 10:47:56|C:\Windows\System32 | |6FB40000|comctl32.dll |Библиотека элементов управления взаимодействия с пользователем |6.10.7601.17514 |1680896 |2010-11-20 17:55:10|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2| |6FD00000|gdiplus.dll |Microsoft GDI+ |6.1.7601.18120 |1625088 |2013-04-03 10:50:22|C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18120_none_72d2e82386681b36 | |6FE90000|oleacc.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2011-08-27 10:26:28|C:\Windows\SysWOW64 | |70840000|api-ms-win-downlevel-shlwapi-l2-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 03:11:08|C:\Windows\SysWOW64 | |71A20000|wkscli.dll |Workstation Service Client DLL |6.1.7601.17514 |47104 |2010-11-20 18:21:38|C:\Windows\system32 | |71A30000|srvcli.dll |Server Service Client DLL |6.1.7601.17514 |90112 |2010-11-20 18:21:28|C:\Windows\system32 | |71E00000|netutils.dll |Net Win32 API Helpers DLL |6.1.7601.17514 |22528 |2010-11-20 18:20:30|C:\Windows\system32 | |71F30000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-14 07:17:56|C:\Windows\system32 | |71F70000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-14 07:15:08|C:\Windows\system32 | |720E0000|RpcRtRemote.dll |Remote RPC Extension |6.1.7601.17514 |46080 |2010-11-20 18:21:04|C:\Windows\system32 | |72150000|MSVCP90.dll |Microsoft® C++ Runtime Library |9.0.30729.6161 |569680 |2013-05-18 01:24:24|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |72270000|MPR.dll |Библиотека маршрутизации для нескольких служб доступа |6.1.7600.16385 |64000 |2009-07-14 07:15:42|C:\Windows\system32 | |72430000|Secur32.dll |Security Support Provider Interface |6.1.7601.17940 |22016 |2012-08-24 22:57:42|C:\Windows\system32 | |72840000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-14 07:16:20|C:\Windows\system32 | |72850000|IPHLPAPI.DLL |IP Helper API |6.1.7601.17514 |103936 |2010-11-20 18:19:24|C:\Windows\system32 | |72C20000|mswsock.dll |Расширение поставщика службы API Microsoft Windows Sockets 2.0 |6.1.7601.18254 |231424 |2013-09-08 08:04:00|C:\Windows\system32 | |72CF0000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-14 07:16:14|C:\Windows\system32 | |72F50000|winmm.dll |MCI API DLL |6.1.7601.17514 |194048 |2010-11-20 18:21:38|C:\Windows\system32 | |72FC0000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-14 07:16:22|C:\Windows\system32 | |73100000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-14 07:16:18|C:\Windows\system32 | |73250000|MSVCR90.dll |Microsoft® C Runtime Library |9.0.30729.6161 |653136 |2013-05-18 01:24:24|C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57 | |733B0000|ntshrui.dll |Расширения оболочки, обеспечивающие доступ к ресурсам |6.1.7601.17755 |442880 |2012-01-04 14:58:42|C:\Windows\system32 | |73420000|SHDOCVW.dll |Библиотека объектов документов и элементов управления оболочки |6.1.7601.18222 |180224 |2013-07-26 07:56:00|C:\Windows\system32 | |737F0000|DUI70.dll |Подсистема DirectUI Windows |6.1.7600.16385 |717824 |2009-07-14 07:15:14|C:\Windows\system32 | |738B0000|explorerframe.dll |ExplorerFrame |6.1.7601.17514 |1493504 |2010-11-20 18:19:02|C:\Windows\system32 | |73E20000|thumbcache.dll |Кэш эскизов Майкрософт |6.1.7601.17514 |82944 |2010-11-20 18:21:32|C:\Windows\SysWOW64 | |73E70000|libpng15.dll |PNG image compression library |1.5.12.0 |135680 |2013-05-19 06:01:10|C:\Program Files (x86)\SASPlanet | |73F10000|CityHash.dll | | |14336 |2013-08-12 06:01:10|C:\Program Files (x86)\SASPlanet | |74030000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-14 07:15:38|C:\Windows\system32 | |74040000|xmllite.dll |Microsoft XmlLite Library |1.3.1001.0 |180224 |2011-06-16 10:33:20|C:\Windows\system32 | |74190000|api-ms-win-downlevel-shell32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 03:11:08|C:\Windows\SysWOW64 | |741C0000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-14 07:15:14|C:\Windows\system32 | |74420000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.2.9200.16583 |1230336 |2013-04-17 13:02:08|C:\Windows\system32 | |748D0000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-14 07:15:08|C:\Windows\syswow64 | |748E0000|SspiCli.dll |Security Support Provider Interface |6.1.7601.17940 |96768 |2012-08-24 22:53:36|C:\Windows\syswow64 | |74940000|KERNELBASE.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18229 |274944 |2013-08-02 07:50:44|C:\Windows\syswow64 | |74990000|GDI32.dll |GDI Client DLL |6.1.7601.17514 |311296 |2010-11-20 18:08:52|C:\Windows\syswow64 | |74A20000|shell32.dll |Общая библиотека оболочки Windows |6.1.7601.18222 |12872704|2013-07-26 07:56:00|C:\Windows\syswow64 | |75670000|api-ms-win-downlevel-advapi32-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |10752 |2013-01-14 03:16:44|C:\Windows\syswow64 | |756B0000|LPK.dll |Language Pack |6.1.7601.18177 |25600 |2013-06-06 10:57:02|C:\Windows\syswow64 | |756C0000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7601.17514 |269824 |2010-11-20 18:21:38|C:\Windows\syswow64 | |757A0000|MSCTF.dll |Серверная библиотека MSCTF |6.1.7600.16385 |828928 |2009-07-14 07:15:44|C:\Windows\syswow64 | |75870000|ole32.dll |Microsoft OLE для Windows |6.1.7601.17514 |1414144 |2010-11-20 18:20:50|C:\Windows\syswow64 | |759D0000|URLMON.DLL |Расширения OLE32 для Win32 |10.0.9200.16720 |1141248 |2013-09-23 05:28:06|C:\Windows\syswow64 | |75B00000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7601.17514 |34304 |2010-11-20 18:19:46|C:\Windows\syswow64 | |75B10000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7601.17514 |119808 |2010-11-20 18:08:52|C:\Windows\syswow64 | |75BD0000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-14 07:16:14|C:\Windows\SysWOW64 | |75BF0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-14 07:16:14|C:\Windows\syswow64 | |75C00000|USER32.dll |Многопользовательская библиотека клиента USER API Windows |6.1.7601.17514 |833024 |2010-11-20 18:08:58|C:\Windows\syswow64 | |75D00000|CFGMGR32.dll |Configuration Manager DLL |6.1.7601.17621 |145920 |2011-05-24 16:39:40|C:\Windows\syswow64 | |75D30000|USP10.dll |Uniscribe Unicode script processor |1.626.7601.18009 |626688 |2012-11-22 10:45:04|C:\Windows\syswow64 | |75DD0000|ADVAPI32.dll |Расширенная библиотека API Windows 32 |6.1.7601.18247 |640512 |2013-08-29 07:48:18|C:\Windows\syswow64 | |75E70000|api-ms-win-downlevel-user32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |4096 |2013-01-14 03:11:22|C:\Windows\syswow64 | |75E80000|DEVOBJ.dll |Device Information Set DLL |6.1.7601.17621 |64512 |2011-05-24 16:40:06|C:\Windows\syswow64 | |75EA0000|api-ms-win-downlevel-shlwapi-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |9728 |2013-01-14 03:17:04|C:\Windows\syswow64 | |75EB0000|api-ms-win-downlevel-ole32-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |5632 |2013-01-14 03:11:10|C:\Windows\syswow64 | |75EC0000|iertutil.dll |Run time utility for Internet Explorer |10.0.9200.16720 |2048512 |2013-09-23 05:27:50|C:\Windows\syswow64 | |760C0000|RPCRT4.dll |Библиотека удаленного вызова процедур |6.1.7601.18205 |663552 |2013-07-09 10:52:34|C:\Windows\syswow64 | |761B0000|CRYPT32.dll |API32 криптографии |6.1.7601.18205 |1166848 |2013-07-09 10:46:32|C:\Windows\syswow64 | |762D0000|msvcrt.dll |Windows NT CRT DLL |7.0.7601.17744 |690688 |2011-12-16 13:53:00|C:\Windows\syswow64 | |76380000|kernel32.dll |Библиотека клиента Windows NT BASE API |6.1.7601.18229 |1114112 |2013-08-02 07:50:42|C:\Windows\syswow64 | |76490000|WININET.dll |Расширения Интернета для Win32 |10.0.9200.16720 |1767936 |2013-09-23 05:28:08|C:\Windows\syswow64 | |76650000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-14 07:15:04|C:\Windows\syswow64 | |766E0000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-14 07:16:12|C:\Windows\syswow64 | |766F0000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7601.18205 |175104 |2013-07-09 10:52:12|C:\Windows\syswow64 | |76720000|normaliz.DLL |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-14 07:09:02|C:\Windows\syswow64 | |76730000|api-ms-win-downlevel-version-l1-1-0.dll |ApiSet Stub DLL |6.2.9200.16492 |3072 |2013-01-14 03:11:08|C:\Windows\syswow64 | |76740000|SHLWAPI.dll |Библиотека небольших программ оболочки |6.1.7601.17514 |350208 |2010-11-20 18:21:20|C:\Windows\syswow64 | |767A0000|comdlg32.dll |Библиотека общих диалоговых окон |6.1.7601.17514 |485888 |2010-11-20 18:18:24|C:\Windows\syswow64 | |76820000|oleaut32.dll | |6.1.7601.17676 |571904 |2011-08-27 10:26:28|C:\Windows\syswow64 | |768B0000|WS2_32.dll |32-разрядная библиотека Windows Socket 2.0 |6.1.7601.17514 |206848 |2010-11-20 18:21:40|C:\Windows\syswow64 | |768F0000|SETUPAPI.dll |Windows Setup API |6.1.7601.17514 |1667584 |2010-11-20 18:21:16|C:\Windows\syswow64 | |76E60000|api-ms-win-downlevel-normaliz-l1-1-0.dll|ApiSet Stub DLL |6.2.9200.16492 |2560 |2013-01-14 03:17:04|C:\Windows\syswow64 | |76E90000|ntdll.dll |Системная библиотека NT |6.1.7601.18247 |1292192 |2013-08-29 07:50:32|C:\Windows\SysWOW64 | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |4 | | |4 |System | | |0 |Normal |181 | | |376 |smss.exe | | |0 |Above-Normal|2 | | |388 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |17 | | |412 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |20 | | |424 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |49 | | |544 |csrss.exe | | |0 |High |9 | | |584 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |15 | | |608 |wininit.exe |Автозагрузка приложений Windows |6.1.7600.16385 |0 |High |3 | | |636 |csrss.exe | | |0 |High |12 | | |684 |services.exe | | |0 |Normal |7 | | |692 |lsass.exe | | |0 |Normal |9 | | |704 |lsm.exe | | |0 |Normal |10 | | |780 |winlogon.exe | | |0 |High |3 | | |840 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |11 | | |908 |nvvsvc.exe | | |0 |Normal |5 | | |948 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |10 | | |1064 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |5 | | |1080 |klwtblfs.exe |WebToolBar component |13.0.1.4190 |0 |Normal |4 |C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013 | |1152 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |23 | | |1272 |SearchIndexer.exe |Индексатор службы Microsoft Windows Search |7.0.7601.17610 |0 |Normal |14 | | |1312 |iexplore.exe | | |0 |Normal |13 | | |1336 |iTunesHelper.exe |iTunesHelper |11.1.1.11 |0 |Normal |10 |C:\Program Files (x86)\iTunes | |1340 |MMDx64Fx.exe | | |0 |Normal |1 | | |1364 |nvvsvc.exe | | |0 |Normal |5 | | |1504 |spoolsv.exe | | |0 |Normal |17 | | |1568 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |18 | | |1672 |armsvc.exe | | |0 |Normal |4 | | |1716 |AppleMobileDeviceService.exe| | |0 |Normal |12 | | |1740 |avp.exe | | |0 |Normal |87 | | |1772 |mDNSResponder.exe | | |0 |Normal |4 | | |1820 |dsiwmis.exe | | |0 |Normal |4 | | |1872 |ePowerSvc.exe | | |0 |Normal |4 | | |1900 |LMS.exe | | |0 |Normal |4 | | |1936 |sftvsa.exe | | |0 |Normal |4 | | |1960 |IEXPLORE.EXE |Internet Explorer |10.0.9200.16720|0 |Normal |77 |C:\Program Files (x86)\Internet Explorer | |2088 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |9 | | |2248 |sftlist.exe | | |0 |Normal |17 | | |2588 |CVHSVC.EXE | | |0 |Normal |7 | | |2660 |alg.exe | | |0 |Normal |4 | | |2704 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |13 | | |2904 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |5 | | |2920 |avp.exe | | |0 |Normal |19 | | |2940 |svchost.exe |Хост-процесс для служб Windows |6.1.7600.16385 |0 |Normal |15 | | |2980 |taskhost.exe | | |0 |Normal |11 | | |3076 |dwm.exe | | |0 |High |5 | | |3112 |ePowerEvent.exe | | |0 |Normal |1 | | |3124 |explorer.exe |Проводник |6.1.7601.17567 |0 |Normal |31 | | |3300 |GoogleCrashHandler.exe | | |0 |Low |5 | | |3308 |GoogleCrashHandler64.exe | | |0 |Low |5 | | |3420 |RAVCpl64.exe | | |0 |Normal |11 | | |3444 |ETDCtrl.exe | | |0 |Normal |9 | | |3456 |PLFSetI.exe |DefaultSettingEXE MFC Application |1.0.7.0 |0 |Normal |1 |C:\Windows | |3472 |ePowerTray.exe | | |0 |Normal |3 | | |3484 |Skype.exe |Skype |6.9.66.106 |0 |Normal |33 |C:\Program Files (x86)\Skype\Phone | |3616 |ETDCtrlHelper.exe | | |0 |Above-Normal|1 | | |3648 |unsecapp.exe | | |0 |Normal |4 | | |3680 |IEXPLORE.EXE |Internet Explorer |10.0.9200.16720|0 |Normal |31 |C:\Program Files (x86)\Internet Explorer | |3736 |WmiPrvSE.exe |WMI Provider Host |6.1.7601.17514 |0 |Normal |5 | | |3788 |uTorrent.exe |µTorrent |3.3.2.30260 |0 |Normal |28 |C:\Users\Acer\AppData\Roaming\uTorrent | |3808 |LMworker.exe |Launch Manager Worker |1.7.0.575 |0 |Normal |1 |C:\Program Files (x86)\Launch Manager | |4088 |LManager.exe |Launch Manager |4.0.8.575 |0 |Normal |6 |C:\Program Files (x86)\Launch Manager | |4180 |UNS.exe | | |0 |Normal |13 | | |4232 |iPodService.exe | | |0 |Normal |12 | | |4844 |cvh.exe |Microsoft Office Client Virtualization Handler|14.0.7106.5000 |0 |Normal |5 |C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler| |5004 |taskeng.exe |Обработчик планировщика заданий |6.1.7601.17514 |0 |Normal |5 | | |5508 |WUDFHost.exe | | |0 |Normal |9 | | |6000 |MsSpellCheckingFacility.exe | | |0 |Normal |5 | | |6148 |OfficeVirt.exe | | |0 |Normal |3 |C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler| |6224 |OSPPSVC.EXE | | |0 |Normal |3 | | |9648 |TOTALCMD64.EXE | | |0 |Normal |11 | | |11384|audiodg.exe | | |0 |Normal |7 | | |12132|SASPlanet.Debug.exe | |13.10.28.7594 |0 |Normal |28 |C:\Program Files (x86)\SASPlanet | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ------------------------------------------------------------------------------------- ; u_MarkDbSml.TMarkDbSml._AddMarksToList (Line=1203 - Offset=4) ; ------------------------------------------------------------- 00703357 mov ecx, [eax] 00703359 call dword ptr [ecx+$1C] ; ; Line=1206 - Offset=7 ; -------------------- 0070335C lea edx, [ebp-$08] 0070335F mov eax, edi 00703361 mov ecx, [eax] 00703363 call dword ptr [ecx+$28] 00703366 jmp u_MarkDbSml.TMarkDbSml._AddMarksToList (Line=1207) ; ; Line=1208 - Offset=9 ; -------------------- 00703368 test bl, bl 0070336A jnz u_MarkDbSml.TMarkDbSml._AddMarksToList (Line=1213) ; ; Line=1209 - Offset=10 ; --------------------- 0070336C mov eax, [ebp-$0C] 0070336F mov edx, [eax] ; <-- EXCEPTION 00703371 call dword ptr [edx+$1C] 00703374 test al, al 00703376 jz u_MarkDbSml.TMarkDbSml._AddMarksToList (Line=1207) ; ; Line=1210 - Offset=11 ; --------------------- 00703378 mov edx, [ebp-$04] 0070337B mov eax, esi 0070337D mov ecx, [eax] 0070337F call dword ptr [ecx+$10] 00703382 jmp u_MarkDbSml.TMarkDbSml._AddMarksToList (Line=1207) ; ; Line=1213 - Offset=14 ; --------------------- 00703384 mov edx, [ebp-$04] 00703387 mov eax, esi Registers: ----------------------------- EAX: 00000000 EDI: 0B312ECC EBX: 00000000 ESI: 05D6C368 ECX: 00000001 ESP: 0018FBFC EDX: 00000000 EIP: 0070336F Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0018FBFC: 0018FC34 036BDF80: 8B 10 FF 52 1C 84 C0 74 16 8B 55 FC 8B C6 8B 08 ...R...t..U..... 0018FC00: 00405720 036BDF90: FF 51 10 EB 0A 8B 55 FC 8B C6 8B 08 FF 51 10 8D .Q....U......Q.. 0018FC04: 0018FC28 036BDFA0: 45 F0 50 8D 45 FC E8 92 4E D0 FF 50 6A 01 8B 45 E.P.E...N..Pj..E 0018FC08: 0056AA52 036BDFB0: F8 50 8B 00 FF 50 0C 85 C0 74 BE 33 C0 5A 59 59 .P...P...t.3.ZYY 0018FC0C: 00000000 036BDFC0: 64 89 10 68 D7 33 70 00 8D 45 F4 E8 6D 4E D0 FF d..h.3p..E..mN.. 0018FC10: 00000001 036BDFD0: 8D 45 F8 E8 65 4E D0 FF 8D 45 FC E8 5D 4E D0 FF .E..eN...E..]N.. 0018FC14: 00000000 036BDFE0: C3 E9 CB 22 D0 FF EB E0 5F 5E 5B 8B E5 5D C2 04 ..."...._^[..].. 0018FC18: 00000001 036BDFF0: 00 55 8B EC 6A 00 6A 00 6A 00 6A 00 6A 00 53 56 .U..j.j.j.j.j.SV 0018FC1C: 00000000 036BE000: 57 8B F1 8B FA 8B 5D 0C 33 C0 55 68 B7 34 70 00 W.....].3.Uh.4p. 0018FC20: 00000000 036BE010: 64 FF 30 64 89 20 8D 55 F8 8B C7 8B 08 FF 51 28 d.0d. .U......Q( 0018FC24: 00000000 036BE020: EB 5C 8D 55 EC 8B 45 FC 8B 08 FF 51 18 8B 45 EC .\.U..E....Q..E. 0018FC28: 0018FC78 036BE030: 8B D6 8B 08 FF 51 44 84 C0 74 43 84 DB 75 34 8D .....QD..tC..u4. 0018FC2C: 007035B2 036BE040: 45 F4 E8 F6 4D D0 FF 8B C8 BA C8 34 70 00 8B 45 E...M......4p..E 0018FC30: 05D6C368 036BE050: FC E8 1B 40 D1 FF 84 C0 74 24 8B 45 F4 8B 10 FF ...@....t$.E.... 0018FC34: 0018FC40 036BE060: 52 1C 84 C0 74 18 8B 55 FC 8B 45 08 8B 08 FF 51 R...t..U..E....Q 0018FC38: 00405720 036BE070: 10 EB 0B 8B 55 FC 8B 45 08 8B 08 FF 51 10 8D 45 ....U..E....Q..E