bugreport.txt
date/time : 2011-08-10, 14:02:12, 171ms
computer name : ZHUKOVSKY_305
user name : Admin <admin>
registered owner : IOC / Lviv Railway
operating system : Windows XP Service Pack 3 build 2600
system language : Russian
system up time : 5 hours 48 minutes
program up time : 2 minutes 15 seconds
processors : 2x Intel(R) Pentium(R) 4 CPU 3.00GHz
physical memory : 325/1015 MB (free/total)
free disk space : (C:) 28,16 GB
display mode : 1280x1024, 32 bit
process id : $ce4
allocated memory : 27,16 MB
executable : FreeCommander.exe
exec. date/time : 2011-08-08 22:00
version : 0.0.0.550
compiled with : Delphi 2010
madExcept version : 3.0l
callstack crc : $4f0cf21b, $3c0d342b, $6ef5447b
count : 3
exception number : 3
exception class : EListError
exception message : List index out of bounds (0).
main thread ($f68):
0049df29 +015 FreeCommander.exe Classes TList.Get
0049fbff +00b FreeCommander.exe Classes TCollection.GetItem
0051bb42 +00a FreeCommander.exe ComCtrls TListColumns.GetItem
006adff9 +031 FreeCommander.exe fcSortListView 135 +6 TfcSortListView.SetSortColumn
0090bb0d +065 FreeCommander.exe fcFileListView 2070 +9 TfcFileListView.SetHeaderSortGlyphs
0090df5c +20c FreeCommander.exe fcFileListView 2866 +44 TfcFileListView.LoadDirDone
00909398 +980 FreeCommander.exe fcFileListView 1230 +194 TfcFileListView.LoadDirItems
00908a0d +01d FreeCommander.exe fcFileListView 1022 +1 TfcFileListView.LoadDirItems
009088f3 +063 FreeCommander.exe fcFileListView 975 +10 TfcFileListView.LoadDirItems
0090c8c9 +1bd FreeCommander.exe fcFileListView 2381 +27 OpenAsShellFolder
0090ca47 +0df FreeCommander.exe fcFileListView 2408 +16 TfcFileListView.OpenFolderItem
0090bf40 +0a8 FreeCommander.exe fcFileListView 2152 +7 TfcFileListView.OpenItem
0090dbd0 +0c0 FreeCommander.exe fcFileListView 2758 +19 TfcFileListView.MouseDown
008c1a5f +23b FreeCommander.exe fcDragDropFileListView 223 +43 TfcDragDropFileListView.MouseDown
005564fc +08c FreeCommander.exe Controls TControl.DoMouseDown
005565bb +047 FreeCommander.exe Controls TControl.WMLButtonDblClk
00555ea4 +2d4 FreeCommander.exe Controls TControl.WndProc
0055a76c +568 FreeCommander.exe Controls TWinControl.WndProc
00520ef4 +074 FreeCommander.exe ComCtrls TCustomListView.WndProc
00559e0c +02c FreeCommander.exe Controls TWinControl.MainWndProc
004ac7f0 +014 FreeCommander.exe Classes StdWndProc
7e368a0b +00a USER32.dll DispatchMessageW
0058739d +11d FreeCommander.exe Forms TApplication.ProcessMessage
005873e2 +00a FreeCommander.exe Forms TApplication.HandleMessage
0058770d +0c9 FreeCommander.exe Forms TApplication.Run
thread $d94 (TChangeHandlerThread):
7c90df48 +0a ntdll.dll NtWaitForMultipleObjects
7c80958a +00 kernel32.dll WaitForMultipleObjectsEx
7c80a110 +13 kernel32.dll WaitForMultipleObjects
00607e6d +6d FreeCommander.exe RzShellCtrls 3824 +11 TChangeHandlerThread.Execute
0046795b +2b FreeCommander.exe madExcept HookedTThreadExecute
004a9cce +42 FreeCommander.exe Classes ThreadProc
00406e28 +28 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
00607b36 +1e FreeCommander.exe RzShellCtrls 3713 +4 TChangeHandlerThread.Create
thread $e18 (TChangeHandlerThread):
7c90df48 +0a ntdll.dll NtWaitForMultipleObjects
7c80958a +00 kernel32.dll WaitForMultipleObjectsEx
7c80a110 +13 kernel32.dll WaitForMultipleObjects
00607e6d +6d FreeCommander.exe RzShellCtrls 3824 +11 TChangeHandlerThread.Execute
0046795b +2b FreeCommander.exe madExcept HookedTThreadExecute
004a9cce +42 FreeCommander.exe Classes ThreadProc
00406e28 +28 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
00607b36 +1e FreeCommander.exe RzShellCtrls 3713 +4 TChangeHandlerThread.Create
thread $f18:
7c90df48 +0a ntdll.dll NtWaitForMultipleObjects
7c80958a +00 kernel32.dll WaitForMultipleObjectsEx
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
77de8c8c +00 advapi32.dll
thread $1e8 (TWorkerThread):
7c91003c +10f ntdll.dll RtlFreeHeap
7c9ea8ff +015 SHELL32.dll SHFree
7c9fc285 +01d SHELL32.dll SHMapPIDLToSystemImageListIndex
7ca2b1af +0d7 SHELL32.dll SHGetFileInfoW
00902b9f +067 FreeCommander.exe fcThreadWorkerJobs 450 +10 GetFileOverlayIconIndexPidl
009035ee +032 FreeCommander.exe fcThreadWorkerJobs 742 +3 TfcExtractImageWorkerJob.ExtractIconImage
009034f0 +018 FreeCommander.exe fcThreadWorkerJobs 709 +2 TfcExtractImageWorkerJob.ExtractIconInfo
00902f2b +02b FreeCommander.exe fcThreadWorkerJobs 550 +6 TfcExtractImageWorkerJob.Extract
00902ed7 +00b FreeCommander.exe fcThreadWorkerJobs 535 +6 TfcExtractImageWorkerJob.Execute
0065f67f +05b FreeCommander.exe csWorkerThreadPool 558 +8 TWorkerThread.Run
0065f5d4 +038 FreeCommander.exe csWorkerThreadPool 522 +12 TWorkerThread.Execute
00406e28 +028 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +00d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +037 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
0065f50a +01e FreeCommander.exe csWorkerThreadPool 457 +1 TWorkerThread.Create
thread $f84 (TWorkerThread):
7c910058 +12b ntdll.dll RtlFreeHeap
7c914854 +03d ntdll.dll RtlAppendUnicodeStringToString
7c914a9e +043 ntdll.dll bsearch
7c914d33 +2d8 ntdll.dll bsearch
7c90f65c +02f ntdll.dll RtlNtStatusToDosError
63010a96 +331 WININET.dll InternetCreateUrlW
77f640ce +048 SHLWAPI.dll #219
7c910432 +025 ntdll.dll RtlAcquirePebLock
7c91045d +00c ntdll.dll RtlReleasePebLock
7c9147ea +048 ntdll.dll RtlAppendUnicodeToString
00480041 +059 FreeCommander.exe SysUtils TEncoding.GetByteCount
77dc7086 +087 advapi32.dll RegQueryValueExW
77f642c1 +053 SHLWAPI.dll #128
77dc6b90 +0e1 advapi32.dll RegOpenKeyExW
77f64136 +034 SHLWAPI.dll #125
77f6a071 +048 SHLWAPI.dll #544
77f669ef +059 SHLWAPI.dll #216
77f66988 +010 SHLWAPI.dll #215
7c9f167d +00d SHELL32.dll SHGetPathFromIDListW
7ca2b1af +0d7 SHELL32.dll SHGetFileInfoW
00902b9f +067 FreeCommander.exe fcThreadWorkerJobs 450 +10 GetFileOverlayIconIndexPidl
009035ee +032 FreeCommander.exe fcThreadWorkerJobs 742 +3 TfcExtractImageWorkerJob.ExtractIconImage
009034f0 +018 FreeCommander.exe fcThreadWorkerJobs 709 +2 TfcExtractImageWorkerJob.ExtractIconInfo
00902f2b +02b FreeCommander.exe fcThreadWorkerJobs 550 +6 TfcExtractImageWorkerJob.Extract
00902ed7 +00b FreeCommander.exe fcThreadWorkerJobs 535 +6 TfcExtractImageWorkerJob.Execute
0065f67f +05b FreeCommander.exe csWorkerThreadPool 558 +8 TWorkerThread.Run
0065f5d4 +038 FreeCommander.exe csWorkerThreadPool 522 +12 TWorkerThread.Execute
0046795b +02b FreeCommander.exe madExcept HookedTThreadExecute
004a9cce +042 FreeCommander.exe Classes ThreadProc
00406e28 +028 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +00d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +037 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
0065f50a +01e FreeCommander.exe csWorkerThreadPool 457 +1 TWorkerThread.Create
thread $6b4 (TWorkerThread):
7ca2b1af +d7 SHELL32.dll SHGetFileInfoW
00902b9f +67 FreeCommander.exe fcThreadWorkerJobs 450 +10 GetFileOverlayIconIndexPidl
009035ee +32 FreeCommander.exe fcThreadWorkerJobs 742 +3 TfcExtractImageWorkerJob.ExtractIconImage
009034f0 +18 FreeCommander.exe fcThreadWorkerJobs 709 +2 TfcExtractImageWorkerJob.ExtractIconInfo
00902f2b +2b FreeCommander.exe fcThreadWorkerJobs 550 +6 TfcExtractImageWorkerJob.Extract
00902ed7 +0b FreeCommander.exe fcThreadWorkerJobs 535 +6 TfcExtractImageWorkerJob.Execute
0065f67f +5b FreeCommander.exe csWorkerThreadPool 558 +8 TWorkerThread.Run
0065f5d4 +38 FreeCommander.exe csWorkerThreadPool 522 +12 TWorkerThread.Execute
00406e28 +28 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
0065f50a +1e FreeCommander.exe csWorkerThreadPool 457 +1 TWorkerThread.Create
thread $20c (TWorkerThread):
7c9101d6 +112 ntdll.dll RtlAllocateHeap
77f640ce +048 SHLWAPI.dll #219
7c809a08 +039 kernel32.dll LocalFree
7c9ea8ff +015 SHELL32.dll SHFree
00480041 +059 FreeCommander.exe SysUtils TEncoding.GetByteCount
7c914a9e +043 ntdll.dll bsearch
7c914e50 +0d7 ntdll.dll RtlFindActivationContextSectionString
7c91045d +00c ntdll.dll RtlReleasePebLock
7c910432 +025 ntdll.dll RtlAcquirePebLock
7c91045d +00c ntdll.dll RtlReleasePebLock
7c914d33 +2d8 ntdll.dll bsearch
77f669ef +059 SHLWAPI.dll #216
77f66988 +010 SHLWAPI.dll #215
773d5601 +02f comctl32.dll ImageList_GetIcon
7ca2b1af +0d7 SHELL32.dll SHGetFileInfoW
00902b9f +067 FreeCommander.exe fcThreadWorkerJobs 450 +10 GetFileOverlayIconIndexPidl
009035ee +032 FreeCommander.exe fcThreadWorkerJobs 742 +3 TfcExtractImageWorkerJob.ExtractIconImage
009034f0 +018 FreeCommander.exe fcThreadWorkerJobs 709 +2 TfcExtractImageWorkerJob.ExtractIconInfo
00902f2b +02b FreeCommander.exe fcThreadWorkerJobs 550 +6 TfcExtractImageWorkerJob.Extract
00902ed7 +00b FreeCommander.exe fcThreadWorkerJobs 535 +6 TfcExtractImageWorkerJob.Execute
0065f67f +05b FreeCommander.exe csWorkerThreadPool 558 +8 TWorkerThread.Run
0065f5d4 +038 FreeCommander.exe csWorkerThreadPool 522 +12 TWorkerThread.Execute
0046795b +02b FreeCommander.exe madExcept HookedTThreadExecute
004a9cce +042 FreeCommander.exe Classes ThreadProc
00406e28 +028 FreeCommander.exe System 16 +0 ThreadWrapper
0046783d +00d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +037 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
0065f50a +01e FreeCommander.exe csWorkerThreadPool 457 +1 TWorkerThread.Create
thread $c1c:
7c90d218 +a ntdll.dll NtDelayExecution
thread $a30: <priority:1>
7c90da48 +0a ntdll.dll NtRemoveIoCompletion
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by thread $d40 at:
71a3d926 +00 mswsock.dll
thread $528:
7c90daa8 +0a ntdll.dll NtReplyWaitReceivePortEx
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by thread $d40 at:
77e7d105 +00 RPCRT4.dll
thread $c00:
7c90d218 +0a ntdll.dll NtDelayExecution
7c8023eb +4b kernel32.dll SleepEx
7c802450 +0a kernel32.dll Sleep
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by thread $d40 at:
77520a03 +00 ole32.dll
thread $db8:
7c90df48 +0a ntdll.dll NtWaitForMultipleObjects
7c80958a +00 kernel32.dll WaitForMultipleObjectsEx
7c80a110 +13 kernel32.dll WaitForMultipleObjects
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by main thread ($f68) at:
6313f508 +00 msieftp.dll
thread $a7c:
7c90daa8 +0a ntdll.dll NtReplyWaitReceivePortEx
0046783d +0d FreeCommander.exe madExcept CallThreadProcSafe
004678a7 +37 FreeCommander.exe madExcept ThreadExceptFrame
>> created by thread $528 at:
77e7d105 +00 RPCRT4.dll
thread $b0c:
7c90da48 +a ntdll.dll NtRemoveIoCompletion
modules:
00400000 FreeCommander.exe 0.0.0.550 C:\Program Files\FreeCommander XE
02730000 inetres.dll 6.0.2900.5512 C:\windows\system32
02780000 msoeres.dll 6.0.2900.5512 C:\Program Files\Outlook Express
02b60000 HaoZipExt.dll 2.3.1.6832 C:\Program Files\HaoZip
034a0000 Normaliz.dll 6.0.5441.0 C:\windows\system32
03b80000 ieframe.dll 8.0.6001.18702 C:\windows\system32
05660000 jsproxy.dll 8.0.6001.18702 C:\windows\system32
057c0000 xpsp2res.dll 5.1.2600.5512 C:\windows\system32
070d0000 WMASF.DLL 10.0.0.4060 C:\windows\system32
086e0000 WMVCore.DLL 10.0.0.4078 C:\windows\system32
096e0000 Audiodev.dll 5.2.3810.3911 C:\windows\system32
10000000 PDFShell.dll 10.1.0.534 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX
1a400000 urlmon.dll 8.0.6001.18702 C:\windows\system32
2f520000 FRIntegration.dll 10.0.102.130 C:\Program Files\ABBYY FineReader 10
42a00000 twext.dll 6.0.3800.5512 C:\windows\system32
5b260000 uxtheme.dll 6.0.2900.5512 C:\windows\system32
5bd50000 NETAPI32.DLL 5.1.2600.5694 C:\windows\system32
5dca0000 iertutil.dll 8.0.6001.18702 C:\windows\system32
5e2f0000 MSOEACCT.dll 6.0.2900.5512 C:\windows\system32
5e5e0000 PSTOREC.DLL 5.1.2600.5512 C:\windows\system32
5f2f0000 olepro32.dll 5.1.2600.5512 C:\windows\system32
607d0000 msoe.dll 6.0.2900.5931 C:\Program Files\Outlook Express
60db0000 msidntld.dll 6.0.2600.0 C:\WINDOWS\system32
60dc0000 msident.dll 6.0.2900.5512 C:\WINDOWS\system32
62340000 mapi32.dll 1.0.2536.0 C:\windows\system32
63000000 WININET.dll 8.0.6001.18702 C:\windows\system32
63130000 msieftp.dll 6.0.2900.5512 C:\WINDOWS\system32
63380000 jscript.dll 5.8.6001.18702 C:\WINDOWS\system32
68000000 rsaenh.dll 5.1.2600.5507 C:\windows\system32
698b0000 hnetcfg.dll 5.1.2600.5512 C:\windows\system32
6bd10000 msohevi.dll 14.0.4730.1010 C:\Program Files\Microsoft Office\Office14
6d380000 directdb.dll 6.0.2900.5512 C:\Program Files\Common Files\System
6d860000 shellex.dll 6.0.4.1424 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
71850000 acctres.dll 6.0.2600.0 C:\windows\system32
71a30000 mswsock.dll 5.1.2600.5625 C:\windows\System32
71a70000 wshtcpip.dll 5.1.2600.5512 C:\windows\System32
71a80000 WS2HELP.dll 5.1.2600.5512 C:\windows\system32
71a90000 WS2_32.dll 5.1.2600.5512 C:\windows\system32
71ab0000 wsock32.dll 5.1.2600.5512 C:\windows\system32
71b00000 mpr.dll 5.1.2600.5512 C:\windows\system32
71bd0000 SAMLIB.dll 5.1.2600.5512 C:\windows\System32
71bf0000 ntlanman.dll 5.1.2600.5512 C:\windows\System32
71c60000 NETRAP.dll 5.1.2600.5512 C:\windows\System32
71c70000 NETUI1.dll 5.1.2600.5512 C:\windows\System32
71cb0000 NETUI0.dll 5.1.2600.5512 C:\windows\System32
72290000 sensapi.dll 5.1.2600.5512 C:\windows\system32
72fc0000 winspool.drv 5.1.2600.5512 C:\windows\system32
73340000 zipfldr.dll 6.0.2900.5512 C:\windows\system32
746e0000 MSCTF.dll 5.1.2600.5512 C:\windows\system32
75310000 msctfime.ime 5.1.2600.5768 C:\windows\system32
75cc0000 INETCOMM.dll 6.0.2900.6090 C:\windows\system32
75da0000 MLANG.dll 6.0.2900.5512 C:\windows\system32
75f30000 drprov.dll 5.1.2600.5512 C:\windows\System32
75f40000 davclnt.dll 5.1.2600.5512 C:\windows\System32
75f50000 browseui.dll 6.0.2900.6082 C:\windows\system32
76350000 msimg32.dll 5.1.2600.5512 C:\windows\system32
76360000 IMM32.DLL 5.1.2600.5512 C:\windows\system32
76380000 comdlg32.dll 6.0.2900.5512 C:\windows\system32
765d0000 CSCDLL.dll 5.1.2600.5512 C:\windows\System32
765f0000 MSOERT2.dll 6.0.2900.5512 C:\windows\system32
76650000 CRYPTUI.dll 5.131.2600.5512 C:\WINDOWS\system32
76770000 cryptdll.dll 5.1.2600.5512 C:\windows\system32
76960000 LINKINFO.dll 5.1.2600.5512 C:\windows\system32
76970000 ntshrui.dll 5.1.2600.5512 C:\windows\system32
769a0000 Userenv.dll 5.1.2600.5512 C:\windows\system32
76b00000 ATL.DLL 3.5.2284.2 C:\windows\system32
76b20000 winmm.dll 5.1.2600.5512 C:\windows\system32
76be0000 psapi.dll 5.1.2600.5512 C:\windows\system32
76c20000 WINTRUST.dll 5.131.2600.5922 C:\windows\system32
76c80000 IMAGEHLP.dll 5.1.2600.5512 C:\windows\system32
76d50000 iphlpapi.dll 5.1.2600.5512 C:\windows\system32
76e00000 adsldpc.dll 5.1.2600.5512 C:\windows\system32
76e70000 rtutils.dll 5.1.2600.5512 C:\windows\system32
76e80000 rasman.dll 5.1.2600.5512 C:\windows\system32
76ea0000 TAPI32.dll 5.1.2600.5512 C:\windows\system32
76ed0000 RASAPI32.dll 5.1.2600.5512 C:\windows\system32
76f10000 DNSAPI.dll 5.1.2600.6089 C:\windows\system32
76f50000 WLDAP32.dll 5.1.2600.5512 C:\windows\system32
76fa0000 winrnr.dll 5.1.2600.5512 C:\windows\System32
76fb0000 rasadhlp.dll 5.1.2600.5512 C:\windows\system32
76fc0000 CLBCATQ.DLL 2001.12.4414.700 C:\windows\system32
77040000 COMRes.dll 2001.12.4414.700 C:\windows\system32
77110000 oleaut32.dll 5.1.2600.5512 C:\windows\system32
773c0000 comctl32.dll 6.0.2900.6028 C:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202
774d0000 ole32.dll 5.1.2600.6010 C:\windows\system32
77910000 SETUPAPI.dll 5.1.2600.5512 C:\windows\system32
77a10000 cscui.dll 5.1.2600.5512 C:\windows\System32
77a70000 CRYPT32.dll 5.131.2600.5709 C:\windows\system32
77b10000 MSASN1.dll 5.1.2600.5875 C:\windows\system32
77b30000 appHelp.dll 5.1.2600.5512 C:\windows\system32
77bf0000 version.dll 5.1.2600.5512 C:\windows\system32
77c00000 msvcrt.dll 7.0.2600.5512 C:\windows\system32
77c60000 msv1_0.dll 5.1.2600.5876 C:\windows\system32
77cb0000 ACTIVEDS.dll 5.1.2600.5512 C:\windows\system32
77dc0000 advapi32.dll 5.1.2600.5755 C:\windows\system32
77e70000 RPCRT4.dll 5.1.2600.6022 C:\windows\system32
77f10000 GDI32.dll 5.1.2600.5698 C:\windows\system32
77f60000 SHLWAPI.dll 6.0.2900.5912 C:\windows\system32
77fe0000 Secur32.dll 5.1.2600.5834 C:\windows\system32
78130000 MSVCR80.dll 8.0.50727.4053 C:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989
78480000 MSVCP90.dll 9.0.30729.5570 C:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6
78520000 MSVCR90.dll 9.0.30729.5570 C:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.5570_x-ww_0517bbc6
7c420000 MSVCP80.dll 8.0.50727.4053 C:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989
7c800000 kernel32.dll 5.1.2600.5781 C:\windows\system32
7c900000 ntdll.dll 5.1.2600.6055 C:\windows\system32
7c9c0000 SHELL32.dll 6.0.2900.6072 C:\windows\system32
7e1e0000 SHDOCVW.dll 6.0.2900.6082 C:\WINDOWS\system32
7e360000 USER32.dll 5.1.2600.5512 C:\windows\system32
processes:
000 Idle 0 0
004 System 0 0 normal
3f0 smss.exe 0 0 normal C:\windows\system32
420 csrss.exe 0 0
438 winlogon.exe 67 15 high C:\windows\system32
46c services.exe 4 3 normal C:\windows\system32
478 lsass.exe 6 5 normal C:\windows\system32
53c USBSRService.exe 4 1 normal C:\Program Files\USB Safely Remove
558 svchost.exe 4 2 normal C:\windows\system32
5b8 svchost.exe 0 0
660 svchost.exe 11 25 normal C:\windows\System32
72c svchost.exe 0 0
784 svchost.exe 0 0
0c4 spoolsv.exe 7 9 normal C:\windows\system32
124 scardsvr.exe 0 0
3c8 svchost.exe 0 0
578 avp.exe 4 7 normal C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
608 klnagent.exe 4 6 normal C:\Program Files\Kaspersky Lab\NetworkAgent 8
62c pservice.exe 8 3 normal C:\Program Files\Trident Software\Pragma6
168 CAPRPCSK.EXE 4 1 normal C:\windows\system32
4d0 CAPPSWK.EXE 71 39 normal C:\windows\system32\spool\drivers\w32x86\3
9f0 alg.exe 0 0
51c Explorer.EXE 464 182 normal C:\windows
b78 RTHDCPL.EXE 772 157 normal C:\windows
be8 avp.exe 40 25 normal C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
ba0 hkcmd.exe 11 16 normal C:\windows\system32
c10 igfxpers.exe 11 11 normal C:\windows\system32
c34 ctfmon.exe 81 38 normal C:\windows\system32
59c USBSafelyRemove.exe 344 83 normal C:\Program Files\USB Safely Remove
c64 wcescomm.exe 12 6 normal C:\Program Files\Microsoft ActiveSync
db4 rapimgr.exe 14 7 normal C:\PROGRA~1\MICROS~2
e98 qip.exe 2189 553 normal C:\Program Files\QIP
cc0 firefox.exe 723 72 normal C:\Program Files\Mozilla Firefox
b08 plugin-container.exe 33 36 normal C:\Program Files\Mozilla Firefox
ce4 FreeCommander.exe 273 168 normal C:\Program Files\FreeCommander XE
hardware:
+ DVD и CD-ROM дисководы
- TSSTcorp CD/DVDW SH-S182D
+ IDE ATA/ATAPI контроллеры
- Вторичный канал IDE
- Вторичный канал IDE
- Первичный канал IDE
- Первичный канал IDE
- Стандартный двухканальный контроллер PCI IDE
- Стандартный двухканальный контроллер PCI IDE
+ Видеоадаптеры
- Intel(R) 82945G Express Chipset Family (driver 6.14.10.4543)
+ Дисководы гибких дисков
- Дисковод гибких дисков
+ Дисковые устройства
- Hitachi HDS721616PLA380
+ Звуковые, видео и игровые устройства
- Realtek High Definition Audio (driver 5.10.0.5506)
- Аудио кодеки
- Видео кодеки
- Драйверы аудио (без PnP)
- Устройства записи видео (без PnP)
- Устройство управления
+ Клавиатуры
- Стандартная (101/102 клавиши) или клавиатура PS/2 Microsoft Natural
+ Компьютер
- Многопроцессорный компьютер с ACPI
+ Контроллеры гибких дисков
- Стандартный контроллер гибких дисков
+ Контроллеры универсальной последовательной шины USB
- Корневой USB концентратор
- Корневой USB концентратор
- Корневой USB концентратор
- Корневой USB концентратор
- Корневой USB концентратор
- Поддержка USB принтера
- Стандартный расширенный PCI - USB хост-контроллер
- Стандартный универсальный PCI - USB хост-контроллер
- Стандартный универсальный PCI - USB хост-контроллер
- Стандартный универсальный PCI - USB хост-контроллер
- Стандартный универсальный PCI - USB хост-контроллер
+ Мониторы
- Модуль подключения монитора
- Модуль подключения монитора
+ Мыши и иные указывающие устройства
- HID-совместимая мышь
+ Порты (COM и LPT)
- ECP порт принтера (LPT1)
- Последовательный порт (COM1)
+ Принтеры
- Canon LBP-810 (driver 1.0.1.12)
+ Процессоры
- Intel(R) Pentium(R) 4 CPU 3.00GHz
- Intel(R) Pentium(R) 4 CPU 3.00GHz
+ Сетевые платы
- Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller (driver 8.56.5.3)
+ Системные устройства
- ATK0110 ACPI UTILITY (driver 1043.2.15.37)
- CMOS и часы
- Intel(R) 82801 PCI мост - 244E
- Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA (driver 8.3.0.1011)
- Intel(R) 82802 Firmware концентратор
- Microsoft ACPI-совместимая система
- Встроенный динамик
- Высокоточный таймер событий
- Диспетчер логических дисков
- Диспетчер томов
- Драйвер Microsoft System Management BIOS
- Драйвер клавиатуры сервера терминалов
- Драйвер мыши сервера терминалов
- Драйвер шины Microsoft UAA для High Definition Audio
- Кнопка включения питания ACPI
- Кнопка фиксированной возможности ACPI
- Контроллер прямого доступа к памяти
- Логический интерфейс порта принтера
- Перенаправитель устройства сервера терминалов
- Перечислитель программных устройств Plug and Play
- Порт чтения данных ISAPNP
- Программируемый контроллер прерываний
- Процессор числовых данных
- Ресурсы системной платы
- Ресурсы системной платы
- Ресурсы системной платы
- Ресурсы системной платы
- Ресурсы системной платы
- Системная плата
- Системная плата
- Системный таймер
- Составная батарея Microsoft
- Стандартный мост PCI - CPU
- Стандартный мост PCI - ISA
- Стандартный мост PCI - PCI
- Устройство обновления микропрограмм
- Шина PCI
+ Устройства HID (Human Interface Devices)
- USB HID-совместимое устройство
+ Устройства чтения смарт-карт
- Smart Card Reader 378 (driver 1.0.4.
disassembling:
[...]
006adfef test al, al
006adff1 jz loc_6adff5
006adff3 133 xor esi, esi
006adff5 135 mov edx, esi
006adff7 mov eax, edi
006adff9 > call -$1924c6 ($51bb38) ; ComCtrls.TListColumns.GetItem
006adffe mov eax, [eax+8]
006ae001 136 cmp eax, [ebp+$41c]
006ae007 jnz loc_6ae011
006ae009 cmp bl, [ebp+$420]
006ae00f jz loc_6ae01d
[...]