date/time

: 2011-07-22, 08:48:38, 939ms

computer name
: RAFAEL-PC
user name
: Rafael <admin>
registered owner : Microsoft / Microsoft
operating system : Windows NT New x64 Service Pack 1 build 7601
system language : Portuguese
system up time
: 22 minutes 5 seconds
program up time : 4 minutes 7 seconds
processors
: 4x Intel(R) Core(TM) i5 CPU 760 @ 2.80GHz
physical memory : 2407/4055 MB (free/total)
free disk space : (C:) 8,81 GB
display mode
: 1920x1080, 32 bit
process id
: $12b4
allocated memory : 49,17 MB
command line
: "C:\Program Files (x86)\Webteh\BSplayerPro\bsplayer.exe" "C:
\Users\Rafael\Downloads\pitbu ll feat. neyo - nayer - give me everything.mp3"
executable
: bsplayer.exe
exec. date/time : 2010-04-21 13:41
version
: 2.5.3.1034
compiled with
: Delphi 7
madExcept version : 3.0h
callstack crc
: $6b7c3e81, $aecf1101, $aecf1101
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 006C400B in module 'bsplayer.exe
'. Read of address 00000004.
main thread ($b38):
006c400b +0023 bsplayer.exe
0066ed39 +0491 bsplayer.exe
004c7d13 +01df bsplayer.exe
004cb8e2 +018e bsplayer.exe
004dbf19 +0421 bsplayer.exe
004cb4b4 +0034 bsplayer.exe
0047d7cc +0014 bsplayer.exe
761a7bc5 +000a USER32.dll
004e24af +0083 bsplayer.exe
004e24e6 +000a bsplayer.exe
004e2706 +0096 bsplayer.exe
006f074d +13b5 bsplayer.exe
75f23398 +0010 kernel32.dll

rendereu
mbsplayu
Controls
Controls
Forms
Controls
Classes

13837 +1 bsRender.Seek
1260 +88 TMBSPlayer.msgDisp
4667 +53 TControl.WndProc
6364 +33 TWinControl.WndProc
TCustomForm.WndProc
6259 +3 TWinControl.MainWndProc
31881 +0 StdWndProc
DispatchMessageA
Forms
TApplication.ProcessMessage
Forms
TApplication.HandleMessage
Forms
TApplication.Run
bsplayer 644 +415 initialization
BaseThreadInitThunk

thread $38c:
75f23398 +10 kernel32.dll BaseThreadInitThunk
thread $b54:
75f23398 +10 kernel32.dll BaseThreadInitThunk
thread $16d4:
75f23398 +10 kernel32.dll BaseThreadInitThunk
thread $1240:
75f23398 +10 kernel32.dll BaseThreadInitThunk
modules:
00400000 bsplayer.exe
layerPro
025f0000 oldskin.dll
layerPro\plugins
06f90000 ffdshow.ax

2.5.3.1034

C:\Program Files (x86)\Webteh\BSp

C:\Program Files (x86)\Webteh\BSp

1.0.7.3135

C:\Users\Rafael\AppData\Roaming\B

Splayer PRO\FFDShow
10000000 mmkeybsupp.dll
1.0.0.0
C:\Program Files (x86)\Webteh\BSp
layerPro
5f690000 ac3filter_intl.dll
C:\Users\Rafael\AppData\Roaming\B
Splayer PRO\AC3 Filter
5f790000 ac3filter.ax
1.6.3.0
C:\Users\Rafael\AppData\Roaming\B
Splayer PRO\AC3 Filter
60930000 mfplat.DLL
12.0.7600.16385
C:\Windows\system32
60d40000 qasf.dll
12.0.7601.17514
C:\Windows\SysWOW64
60d80000 DShowRdpFilter.dll 1.0.0.0
C:\Windows\system32
60dd0000 quartz.dll
6.6.7601.17514
C:\Windows\SysWOW64
60f90000 olepro32.dll
6.1.7601.17514
C:\Windows\system32
60fb0000 mp3dmod.dll
6.1.7600.16385
C:\Windows\SysWOW64
655d0000 DINPUT.dll
6.1.7600.16385
C:\Windows\system32
6e680000 midimap.dll
6.1.7600.16385
C:\Windows\system32
6e690000 MSACM32.dll
6.1.7600.16385
C:\Windows\system32
6e6b0000 msacm32.drv
6.1.7600.16385
C:\Windows\system32
6e730000 AUDIOSES.DLL
6.1.7601.17514
C:\Windows\system32
6e7d0000 AVRT.dll
6.1.7600.16385
C:\Windows\system32
6e7e0000 DSOUND.DLL
6.1.7600.16385
C:\Windows\system32
6e8a0000 ksuser.dll
6.1.7600.16385
C:\Windows\system32
6ead0000 wdmaud.drv
6.1.7601.17514
C:\Windows\system32
70910000 ddraw.dll
6.1.7600.16385
C:\Windows\system32
70a50000 DCIMAN32.dll
6.1.7600.16385
C:\Windows\system32
711e0000 propsys.dll
7.0.7601.17514
C:\Windows\system32
71720000 uxtheme.dll
6.1.7600.16385
C:\Windows\system32
717a0000 dwmapi.dll
6.1.7600.16385
C:\Windows\system32
71bf0000 POWRPROF.dll
6.1.7600.16385
C:\Windows\system32
72bc0000 winmm.dll
6.1.7601.17514
C:\Windows\system32
72db0000 wsock32.dll
6.1.7600.16385
C:\Windows\system32
72e90000 WINSTA.dll
6.1.7601.17514
C:\Windows\system32
72ec0000 wtsapi32.dll
6.1.7601.17514
C:\Windows\system32
72f00000 MMDevAPI.DLL
6.1.7601.17514
C:\Windows\system32
72fd0000 ntmarta.dll
6.1.7600.16385
C:\Windows\system32
73250000 comctl32.dll
6.10.7601.17514
C:\Windows\WinSxS\x86_microsoft.w
indows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
73520000 msdmo.dll
6.6.7601.17514
C:\Windows\system32
73530000 devenum.dll
6.6.7600.16385
C:\Windows\SysWOW64
73bc0000 version.dll
6.1.7600.16385
C:\Windows\system32
73bd0000 profapi.dll
6.1.7600.16385
C:\Windows\system32
73d60000 slc.dll
6.1.7600.16385
C:\Windows\system32
75060000 winspool.drv
6.1.7601.17514
C:\Windows\system32
750d0000 CRYPTBASE.dll
6.1.7600.16385
C:\Windows\syswow64
750e0000 SspiCli.dll
6.1.7601.17514
C:\Windows\syswow64
75150000 MSCTF.dll
6.1.7600.16385
C:\Windows\syswow64
753f0000 ole32.dll
6.1.7601.17514
C:\Windows\syswow64
75550000 CRYPT32.dll
6.1.7601.17514
C:\Windows\syswow64
756d0000 WLDAP32.dll
6.1.7601.17514
C:\Windows\syswow64
75720000 MSASN1.dll
6.1.7601.17514
C:\Windows\syswow64
75730000 KERNELBASE.dll
6.1.7601.17625
C:\Windows\syswow64
75780000 comdlg32.dll
6.1.7601.17514
C:\Windows\syswow64
75800000 SHLWAPI.dll
6.1.7601.17514
C:\Windows\syswow64
758f0000 LPK.dll
6.1.7600.16385
C:\Windows\syswow64
75900000 CLBCatQ.DLL
2001.12.8530.16385 C:\Windows\syswow64
75990000 RPCRT4.dll
6.1.7601.17514
C:\Windows\syswow64
75a80000 SETUPAPI.dll
6.1.7601.17514
C:\Windows\syswow64
75c20000 IMM32.DLL
6.1.7601.17514
C:\Windows\system32
75c80000 DEVOBJ.dll
6.1.7601.17621
C:\Windows\syswow64
75ca0000 WS2_32.dll
6.1.7601.17514
C:\Windows\syswow64
75f10000 kernel32.dll
6.1.7601.17617
C:\Windows\syswow64

76020000
760b0000
760e0000
76190000
76290000
762b0000
76340000
76f90000
77030000
77060000
779c0000
779f0000

oleaut32.dll
CFGMGR32.dll
msvcrt.dll
USER32.dll
sechost.dll
GDI32.dll
SHELL32.dll
advapi32.dll
WINTRUST.dll
USP10.dll
NSI.dll
ntdll.dll

6.1.7601.17567
6.1.7601.17621
7.0.7600.16385
6.1.7601.17514
6.1.7600.16385
6.1.7601.17514
6.1.7601.17514
6.1.7601.17514
6.1.7601.17514
1.626.7601.17514
6.1.7600.16385
6.1.7601.17514

C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\SysWOW64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\SysWOW64

hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- Kingston DataTraveler 2.0 USB Device
- SAMSUNG HD103SI ATA Device
+ Display adapters
- ATI Radeon HD 4800 Series
(driver 8.801.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST DVDRAM GH22NS50 ATA Device
- UHK WPIRW5QN8 SCSI CdRom Device
+ Human Interface Devices
- HID Non-User Input Data Filter (KB 911895)
- HID Non-User Input Data Filter (KB 911895)
- HID-compliant device
- Mouse USB Microsoft Hardware
- Teclado USB Microsoft Hardware
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 0
- ATA Channel 0
- ATA Channel 1
- ATA Channel 1
- ATA Channel 1
- Controlador de canal duplo padro PCI IDE
- Intel(R) 5 Series/3400 Series Chipset Family 2 port Serial ATA Storage Contr
oller - 3B26 (driver 9.1.1.1013)
- Intel(R) 5 Series/3400 Series Chipset Family 4 port Serial ATA Storage Contr
oller - 3B20 (driver 9.1.1.1013)
+ Keyboards
- Microsoft USB Dual Receiver Wireless Keyboard (IntelliType Pro)
+ Mice and other pointing devices
- Microsoft USB Dual Receiver Wireless Mouse (IntelliPoint)
+ Monitors
- Monitor Genrico PnP
+ Network adapters
- Adaptador de Miniporta WiFi Virtual da Microsoft
- D-Link DWA-125 Wireless N 150 USB Adapter(rev.A2) (driver 3.0.7.0)
- Realtek PCIe GBE Family Controller (driver 7.23.623.2010)
+ Portable Devices
- Apple iPhone
+ Ports (COM & LPT)
- Porta de comunicao (COM1)
- Porta de comunicao (COM2)
- Porta de Impressora (LPT1)
+ Processors

+
+
+
+

- Intel(R) Core(TM) i5 CPU

760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
Sound, video and game controllers
- AMD High Definition Audio Device (driver 7.12.0.7700)
- VIA High Definition Audio (driver 6.0.1.7900)
Storage controllers
- AVF8R77T IDE Controller
Storage volume shadow copies
- Cpia de sombra de volume genrica
- Cpia de sombra de volume genrica
System devices
- Alto-falante do sistema
- Arquivo como Driver de Volume
- ATK0110 ACPI UTILITY (driver 1043.6.0.0)
- Barramento de E/S estendido
- Boto de recurso fixo ACPI
- Boto ligar/desligar ACPI
- CMOS do sistema/relgio em tempo real
- Controlador de acesso direto memria
- Controlador de High Definition Audio
- Controlador de High Definition Audio
- Controlador de interrupo programvel
- Driver de BIOS de Gerenciamento de Sistema Microsoft
- Driver de enumerador da unidade virtual Microsoft
- Enumerador de Barramento de Composio
- Enumerador de Barramento de Raiz UMBus
- Enumerador de dispositivos de software Plug and Play
- Enumerador UMBus
- Enumerador UMBus
- Gerenciador de volumes
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root
- Intel(R) 5 Series/3400 Series Chipset Family SMBus Controller
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) H55 Express Chipset LPC Interface Controller - 3B06
- Intel(R) Management Engine Interface (driver 6.0.0.1179)
- Intel(R) processor DMI - D131
- Intel(R) processor Miscellaneous Registers - D158
- Intel(R) processor PCI Express Root Port 1 - D138
- Intel(R) processor Semaphore and Scratchpad Registers - D156
- Intel(R) processor System Control and Status Registers - D157
- Intel(R) processor System Management Registers - D155
- Intel(R) QuickPath Interconnect - D150
- Intel(R) QuickPath Interconnect - D151
- Interface lgica da porta de impresso
- Microsoft ACPI-Compliant System
- PCI bus
- Placa de sistema
- Placa de sistema
- Processador de dados numricos
- Recursos da placa-me
- Recursos da placa-me
- Recursos da placa-me
- Recursos da placa-me
- Remote Desktop Device Redirector Bus
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver

Port 1 - 3B42
Port 3 - 3B46
Port 6 - 3B4C
- 3B30

- Timer de eventos de alta preciso

- Timer do sistema
+ Universal Serial Bus controllers
- Apple Mobile Device USB Driver (driver 6.0.9999.57)
- Generic USB Hub
- Generic USB Hub
- Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller 3B34 (driver 9.1.1.1020)
- Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller 3B3C (driver 9.1.1.1020)
- Microsoft Mouse and Keyboard Detection Driver (USB)
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub
cpu
eax
ebx
ecx
edx
esi
edi
eip
esp
ebp

registers:
= 00000000
= 0018fcc0
= 00000000
= 00000000
= 00a60fd5
= 00000000
= 006c400b
= 0018f9f0
= 0018fa34

stack dump:
0018f9f0 44
0018fa00 a3
0018fa10 d5
0018fa20 a4
0018fa30 00
0018fa40 00
0018fa50 c0
0018fa60 00
0018fa70 00
0018fa80 00
0018fa90 00
0018faa0 00
0018fab0 00
0018fac0 00
0018fad0 00
0018fae0 00
0018faf0 00
0018fb00 c0
0018fb10 d5
0018fb20 00

fa
3e
0f
ea
00
00
fc
00
00
00
00
00
00
00
00
00
00
fc
0f
00

18
02
a6
ab
00
00
18
00
00
00
00
00
00
00
00
00
00
18
a6
00

00
76
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

disassembling:
[...]
006c3ffc
push
006c3ffd
push
006c4002
push
006c4005
mov
006c4008 13837 mov
006c400b
> cmp
006c400f
jnz
006c4015
mov
006c4018
mov
006c401b
mov

34
a0
b0
30
08
8c
00
00
00
00
00
00
00
00
00
00
00
f0
c0
80

4d
ea
00
fa
fb
fc
00
00
00
00
00
00
00
00
00
00
01
9a
fc
fb

40
ab
00
18
18
18
00
00
00
00
00
00
00
00
00
00
00
36
18
18

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
02
00
00

34
b0
3c
86
3e
34
00
00
00
00
00
00
00
00
00
80
00
34
00
1e

fa
00
fa
0c
ed
4d
00
00
00
00
00
00
00
00
00
62
00
fc
00
a6

18
00
18
68
66
40
00
00
00
00
00
00
00
00
00
6a
00
18
00
20

ebp
$6c45fc
dword ptr fs:[eax]
fs:[eax], esp
eax, [ebp-8]
byte ptr [eax+4], 0
loc_6c45e6
eax, [ebp-8]
edx, [eax+$c]
eax, [eax+8]

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
94
00
00
00
76

c0
00
d7
00
80
08
00
00
00
00
00
00
00
00
00
00
00
16
00
e6

fc
00
5b
00
62
fb
00
00
00
00
00
00
00
00
00
00
00
7d
fb
07

18
00
40
00
6a
18
00
00
00
00
00
00
00
00
00
00
00
4c
18
51

00
00
00
00
94
00
00
00
00
00
00
00
00
00
00
00
00
00
00
60

[email protected].......
.>.v............
........<....[@.
....0.....h.....
........>.f..bj.
........4M@.....
................
................
................
................
................
................
................
................
................
.........bj.....
................
......6.4....}L.
................
...........v..Q`

; System.@HandleFinally

006c401e
[...]

cmp

edx, [ebp+$c]

date/time
: 2011-08-02, 21:17:25, 1ms
computer name
: RAFAEL-PC
user name
: Rafael <admin>
registered owner : Microsoft / Microsoft
operating system : Windows NT New x64 Service Pack 1 build 7601
system language : Portuguese
system up time
: 9 hours 19 minutes
program up time : 2 seconds
processors
: 4x Intel(R) Core(TM) i5 CPU 760 @ 2.80GHz
physical memory : 2054/4055 MB (free/total)
free disk space : (C:) 4,21 GB
display mode
: 1920x1080, 32 bit
process id
: $16f4
allocated memory : 293,96 MB
command line
: "C:\Program Files (x86)\Webteh\BSplayerPro\bsplayer.exe" "C:
\Users\Rafael\Downloads\Gozando.Dentro.das.Coroas.FUDENCiO.fw.tv.by.DarkShadow.r
ar.part"
executable
: bsplayer.exe
exec. date/time : 2010-04-21 13:41
version
: 2.5.3.1034
compiled with
: Delphi 7
madExcept version : 3.0h
callstack crc
: $16e40e6d, $66f021ae, $66f021ae
exception number : 1
exception class : EListError
exception message : List index out of bounds (0).
main thread ($11a0):
00473615 +0019 bsplayer.exe
005db303 +004f bsplayer.exe
005dbfc5 +0009 bsplayer.exe
00666525 +00c9 bsplayer.exe
006757fe +1106 bsplayer.exe
0066eb70 +02c8 bsplayer.exe
004c7d13 +01df bsplayer.exe
004cb8e2 +018e bsplayer.exe
004dbf19 +0421 bsplayer.exe
004cb4b4 +0034 bsplayer.exe
0047d7cc +0014 bsplayer.exe
76247bc5 +000a USER32.dll
004e24af +0083 bsplayer.exe
004e24e6 +000a bsplayer.exe
004e2706 +0096 bsplayer.exe
006f074d +13b5 bsplayer.exe
759e3398 +0010 kernel32.dll

Classes
readrar_hooks
readrar_hooks
bspcodecfu
mbsplayu
mbsplayu
Controls
Controls
Forms
Controls
Classes
Forms
Forms
Forms
bsplayer

TList.Get
HFindRecByHandle
NewGetFileSize
HandleFileError
TMBSPlayer.OpenFile
TMBSPlayer.msgDisp
TControl.WndProc
TWinControl.WndProc
TCustomForm.WndProc
6259 +3 TWinControl.MainWndProc
31881 +0 StdWndProc
DispatchMessageA
TApplication.ProcessMessage
TApplication.HandleMessage
TApplication.Run
644 +415 initialization
BaseThreadInitThunk
83
496
371
3952
1221
4667
6364

thread $e44:
759e3398 +10 kernel32.dll BaseThreadInitThunk
thread $1678:
759e3398 +10 kernel32.dll BaseThreadInitThunk
thread $103c:
759e3398 +10 kernel32.dll BaseThreadInitThunk
thread $b28:
759e3398 +10 kernel32.dll BaseThreadInitThunk

+10
+1
+7
+365
+49
+53
+33

thread $1670:
759e3398 +10 kernel32.dll BaseThreadInitThunk
modules:
00400000 bsplayer.exe
2.5.3.1034
C:\Program Files (x86)\Webteh\B
SplayerPro
042a0000 oldskin.dll
C:\Program Files (x86)\Webteh\B
SplayerPro\plugins
07100000 mkunicode.dll
C:\Users\Rafael\AppData\Roaming
\BSplayer PRO\Haali media splitter
09d20000 FLVSplitter.ax
1.0.0.5
C:\Users\Rafael\AppData\Roaming
\BSplayer PRO\Flash Video (FLV)
09d90000 RealMediaSplitter.ax 1.0.1.2
C:\Users\Rafael\AppData\Roaming
\BSplayer PRO\RealMedia splitter
09e00000 mkzlib.dll
C:\Users\Rafael\AppData\Roaming
\BSplayer PRO\Haali media splitter
09e90000 splitter.ax
1.10.262.12
C:\Users\Rafael\AppData\Roaming
\BSplayer PRO\Haali media splitter
10000000 mmkeybsupp.dll
1.0.0.0
C:\Program Files (x86)\Webteh\B
SplayerPro
690f0000 MF.dll
12.0.7601.17514
C:\Windows\system32
6b6b0000 msmpeg2adec.dll
6.1.7140.0
C:\Windows\SysWOW64
6b850000 d3d9.dll
6.1.7601.17514
C:\Windows\system32
6d080000 dxva2.dll
6.1.7600.16385
C:\Windows\system32
70360000 quartz.dll
6.6.7601.17514
C:\Windows\SysWOW64
70e80000 mpg2splt.ax
6.6.7601.17528
C:\Windows\SysWOW64
70f50000 DShowRdpFilter.dll 1.0.0.0
C:\Windows\system32
70fa0000 atiu9pag.dll
8.14.1.6170
C:\Windows\system32
71130000 AVRT.dll
6.1.7600.16385
C:\Windows\SysWOW64
71140000 ksuser.dll
6.1.7600.16385
C:\Windows\system32
711c0000 msdmo.dll
6.6.7601.17514
C:\Windows\system32
71260000 devenum.dll
6.6.7600.16385
C:\Windows\SysWOW64
713c0000 propsys.dll
7.0.7601.17514
C:\Windows\system32
71880000 slc.dll
6.1.7600.16385
C:\Windows\system32
71890000 ATL.DLL
3.5.2284.0
C:\Windows\system32
71960000 bcryptprimitives.dll 6.1.7600.16385
C:\Windows\SysWOW64
719a0000 bcrypt.dll
6.1.7600.16385
C:\Windows\system32
719c0000 ncrypt.dll
6.1.7600.16385
C:\Windows\system32
71af0000 uxtheme.dll
6.1.7600.16385
C:\Windows\system32
71b70000 dwmapi.dll
6.1.7600.16385
C:\Windows\system32
71cc0000 POWRPROF.dll
6.1.7600.16385
C:\Windows\SysWOW64
72110000 MFPlat.DLL
12.0.7600.16385
C:\Windows\SysWOW64
72170000 evr.dll
6.1.7601.17514
C:\Windows\SysWOW64
721f0000 olepro32.dll
6.1.7601.17514
C:\Windows\system32
72390000 ddraw.dll
6.1.7600.16385
C:\Windows\system32
72c90000 winmm.dll
6.1.7601.17514
C:\Windows\system32
72fa0000 wsock32.dll
6.1.7600.16385
C:\Windows\system32
73070000 WINSTA.dll
6.1.7601.17514
C:\Windows\system32
730a0000 wtsapi32.dll
6.1.7601.17514
C:\Windows\system32
73200000 ntmarta.dll
6.1.7600.16385
C:\Windows\system32
73470000 comctl32.dll
6.10.7601.17514
C:\Windows\WinSxS\x86_microsoft
.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
736a0000 d3d8thk.dll
6.1.7600.16385
C:\Windows\system32
73730000 version.dll
6.1.7600.16385
C:\Windows\system32
741f0000 DCIMAN32.dll
6.1.7600.16385
C:\Windows\system32
747c0000 winspool.drv
6.1.7601.17514
C:\Windows\system32
74c40000 CRYPTBASE.dll
6.1.7600.16385
C:\Windows\syswow64
74c50000 SspiCli.dll
6.1.7601.17514
C:\Windows\syswow64
74cb0000 SHELL32.dll
6.1.7601.17514
C:\Windows\syswow64

75900000
759d0000
75ae0000
75bc0000
75bf0000
75c50000
75cf0000
75e90000
75ea0000
75ee0000
75f10000
761d0000
761e0000
76230000
76330000
763e0000
76400000
76670000
76700000
76780000
768c0000
76920000
76a10000
76a20000
76ab0000
76b40000
77560000

MSCTF.dll
kernel32.dll
WLDAP32.dll
CFGMGR32.dll
IMM32.DLL
USP10.dll
SETUPAPI.dll
NSI.dll
WS2_32.dll
WINTRUST.dll
CRYPT32.dll
LPK.dll
KERNELBASE.dll
USER32.dll
msvcrt.dll
sechost.dll
advapi32.dll
CLBCatQ.DLL
comdlg32.dll
DEVOBJ.dll
SHLWAPI.dll
RPCRT4.dll
MSASN1.dll
oleaut32.dll
GDI32.dll
ole32.dll
ntdll.dll

6.1.7600.16385
6.1.7601.17617
6.1.7601.17514
6.1.7601.17621
6.1.7601.17514
1.626.7601.17514
6.1.7601.17514
6.1.7600.16385
6.1.7601.17514
6.1.7601.17514
6.1.7601.17514
6.1.7600.16385
6.1.7601.17625
6.1.7601.17514
7.0.7600.16385
6.1.7600.16385
6.1.7601.17514
2001.12.8530.16385
6.1.7601.17514
6.1.7601.17621
6.1.7601.17514
6.1.7601.17514
6.1.7601.17514
6.1.7601.17567
6.1.7601.17514
6.1.7601.17514
6.1.7601.17514

C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\system32
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\SysWOW64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\SysWOW64

hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- SAMSUNG HD103SI ATA Device
+ Display adapters
- ATI Radeon HD 4800 Series
(driver 8.801.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST DVDRAM GH22NS50 ATA Device
- UHK WPIRW5QN8 SCSI CdRom Device
+ Human Interface Devices
- HID Non-User Input Data Filter (KB 911895)
- HID Non-User Input Data Filter (KB 911895)
- HID-compliant device
- Mouse USB Microsoft Hardware
- Teclado USB Microsoft Hardware
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 0
- ATA Channel 0
- ATA Channel 1
- ATA Channel 1
- ATA Channel 1
- Controlador de canal duplo padro PCI IDE
- Intel(R) 5 Series/3400 Series Chipset Family 2 port Serial ATA Storage Contr
oller - 3B26 (driver 9.1.1.1013)
- Intel(R) 5 Series/3400 Series Chipset Family 4 port Serial ATA Storage Contr
oller - 3B20 (driver 9.1.1.1013)
+ Keyboards
- Microsoft USB Dual Receiver Wireless Keyboard (IntelliType Pro)
+ Mice and other pointing devices
- Microsoft USB Dual Receiver Wireless Mouse (IntelliPoint)

+ Monitors
- Monitor Genrico PnP
+ Network adapters
- Adaptador de Miniporta WiFi Virtual da Microsoft
- D-Link DWA-125 Wireless N 150 USB Adapter(rev.A2) (driver 3.0.7.0)
- Realtek PCIe GBE Family Controller (driver 7.23.623.2010)
+ Ports (COM & LPT)
- Porta de comunicao (COM1)
- Porta de comunicao (COM2)
- Porta de Impressora (LPT1)
+ Processors
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
- Intel(R) Core(TM) i5 CPU
760 @ 2.80GHz
+ Sound, video and game controllers
- AMD High Definition Audio Device (driver 7.12.0.7700)
- VIA High Definition Audio (driver 6.0.1.7900)
+ Storage controllers
- AMCP5NLL IDE Controller
+ System devices
- Alto-falante do sistema
- Arquivo como Driver de Volume
- ATK0110 ACPI UTILITY (driver 1043.6.0.0)
- Barramento de E/S estendido
- Boto de recurso fixo ACPI
- Boto ligar/desligar ACPI
- CMOS do sistema/relgio em tempo real
- Controlador de acesso direto memria
- Controlador de High Definition Audio
- Controlador de High Definition Audio
- Controlador de interrupo programvel
- Driver de BIOS de Gerenciamento de Sistema Microsoft
- Driver de enumerador da unidade virtual Microsoft
- Enumerador de Barramento de Composio
- Enumerador de Barramento de Raiz UMBus
- Enumerador de dispositivos de software Plug and Play
- Enumerador UMBus
- Gerenciador de volumes
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 1 - 3B42
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 3 - 3B46
- Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 6 - 3B4C
- Intel(R) 5 Series/3400 Series Chipset Family SMBus Controller - 3B30
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) H55 Express Chipset LPC Interface Controller - 3B06
- Intel(R) Management Engine Interface (driver 6.0.0.1179)
- Intel(R) processor DMI - D131
- Intel(R) processor Miscellaneous Registers - D158
- Intel(R) processor PCI Express Root Port 1 - D138
- Intel(R) processor Semaphore and Scratchpad Registers - D156
- Intel(R) processor System Control and Status Registers - D157
- Intel(R) processor System Management Registers - D155
- Intel(R) QuickPath Interconnect - D150
- Intel(R) QuickPath Interconnect - D151
- Interface lgica da porta de impresso
- Microsoft ACPI-Compliant System
- PCI bus
- Placa de sistema
- Placa de sistema
- Processador de dados numricos

- Recursos da placa-me
- Recursos da placa-me
- Recursos da placa-me
- Recursos da placa-me
- Remote Desktop Device Redirector Bus
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- Timer de eventos de alta preciso
- Timer do sistema
+ Universal Serial Bus controllers
- Generic USB Hub
- Generic USB Hub
- Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller 3B34 (driver 9.1.1.1020)
- Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller 3B3C (driver 9.1.1.1020)
- Microsoft Mouse and Keyboard Detection Driver (USB)
- USB Root Hub
- USB Root Hub
cpu
eax
ebx
ecx
edx
esi
edi
eip
esp
ebp

registers:
= 0282d150
= 0286feb8
= 00000000
= 0047361a
= 00000000
= 00000000
= 0047361a
= 0018f7e4
= 0018f840

stack dump:
0018f7e4 1a
0018f7f4 f8
0018f804 00
0018f814 00
0018f824 ba
0018f834 00
0018f844 1a
0018f854 d5
0018f864 00
0018f874 ca
0018f884 f0
0018f894 00
0018f8a4 34
0018f8b4 08
0018f8c4 00
0018f8d4 f4
0018f8e4 00
0018f8f4 2a
0018f904 00
0018f914 b8

36
f7
00
00
35
00
36
0f
00
bf
f8
00
4d
00
00
03
00
65
00
27

47
18
00
00
47
00
47
cb
00
5d
18
00
40
00
00
00
00
66
00
82

disassembling:
[...]
005db2f4
mov
005db2f7
cmp
005db2f9
jnz
005db2fb 83 mov
005db2fe
mov

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
02

de
1a
00
00
a0
48
d5
c0
00
f4
0a
c0
f0
01
00
68
b8
20
00
3c

fa
36
00
00
f8
c9
0f
fc
37
03
00
f8
f8
00
00
a4
27
f9
00
fa

ed
47
00
00
18
86
cb
18
85
00
27
18
18
00
00
e2
82
18
00
18

0e
00
00
00
00
02
00
00
02
00
5f
00
00
00
00
00
02
00
00
00

edx, [ebp-4]
eax, [edx]
loc_5db30d
edx, [ebp-$c]
eax, [$70ff7c]

01
50
40
00
34
00
c0
08
98
f4
f4
00
00
00
00
60
30
34
13
03

00
d1
f8
00
4d
00
fc
b3
f8
03
03
00
00
00
00
11
33
4d
ba
58

00
82
18
00
40
00
18
5d
18
00
00
00
00
00
00
59
78
40
4d
67

00
02
00
00
00
00
00
00
00
00
00
00
00
00
00
06
02
00
00
00

07
b8
14
f4
40
84
6c
00
90
30
00
f8
00
00
00
00
18
18
20
44

00
fe
f8
f3
f8
f8
b9
37
f8
33
00
f8
00
00
00
11
f9
f9
0e
fa

00
86
18
46
18
18
5d
85
18
78
00
18
00
00
00
59
18
18
7c
18

00
02
00
00
00
00
00
02
00
02
00
00
00
00
00
06
00
00
02
00

.6G.............
.....6G.P.......
........@.......
..............F.
.5G.....4M@.@...
....H...........
.6G.........l.].
..........]..7..
.....7..........
..].........03x.
......'_........
................
4M@.............
................
................
....h...`.Y...Y.
.....'..03x.....
*ef.....4M@.....
..........M...|.
.'..<....Xg.D...

005db303
> call
005db308
mov
005db30b 84 jmp
005db30d 86 inc
005db310 79 dec
005db313
jnz
[...]

-$167d0c ($4735fc)
[ebp-8], eax
loc_5db31a
dword ptr [ebp-$c]
dword ptr [ebp-$10]
loc_5db2e5

; Classes.TList.Get