date/time : 2010-09-10, 07:06:38, 658ms
computer name : ROOM
user name : master <admin>
registered owner : Microsoft / Microsoft
operating system : Windows 7 x64 build 7600
system language : Russian
system up time : 10 minutes 53 seconds
program up time : 2 minutes 41 seconds
processors : 4x Dual-Core AMD Opteron(tm) Processor 2212
physical memory : 6852/8191 MB (free/total)
free disk space : (C
46,79 GB (D
95,78 GB
display mode : 1920x1080, 32 bit
process id : $d08
allocated memory : 50,53 MB
executable : FlashFXP.exe
exec. date/time : 2010-08-17 22:25
executable hash : F3C2310AA56D193D63BB5CFC164C6245
version : 4.0.0.1467
callstack crc : $2b09a8cf, $6774a7a8, $b514a03b
count : 10
exception number : 1
exception class : EWin32Error
exception message : A Win32 API function failed.
main thread ($ac8):
0040fce6 +0086 FlashFXP.exe SysUtils RaiseLastWin32Error
00455ea1 +0105 FlashFXP.exe Controls 5415 +18 TWinControl.CreateWnd
00445009 +0005 FlashFXP.exe Forms 2263 +1 TScrollingWinControl.CreateWnd
00447c55 +0009 FlashFXP.exe Forms 3768 +1 TCustomForm.CreateWnd
00456059 +0011 FlashFXP.exe Controls 5472 +3 TWinControl.CreateHandle
00458afc +001c FlashFXP.exe Controls 7195 +5 TWinControl.HandleNeeded
00458b09 +0005 FlashFXP.exe Controls 7201 +1 TWinControl.GetHandle
00449b2e +0196 FlashFXP.exe Forms 4862 +27 TCustomForm.ShowModal
00721961 +05c5 FlashFXP.exe FrmMain1 3003 +134 TFrmMain.WMScroll
00453e1d +0111 FlashFXP.exe Controls 4233 +37 TControl.WndProc
0045668a +01ae FlashFXP.exe Controls 5700 +42 TWinControl.WndProc
00446c9d +0571 FlashFXP.exe Forms 3227 +139 TCustomForm.WndProc
004f8322 +0042 FlashFXP.exe ThemeMgr TWindowProcList.DispatchMessage
004f8c78 +00f0 FlashFXP.exe ThemeMgr TThemeManager.FormWindowProc
004fa17c +000c FlashFXP.exe ThemeMgr TThemeManager.PreFormWindowProc
00456314 +002c FlashFXP.exe Controls 5571 +3 TWinControl.MainWndProc
00443d6c +0014 FlashFXP.exe Forms 1521 +8 StdWndProc
75f7810d +000a user32.dll DispatchMessageA
0044cabb +008b FlashFXP.exe Forms 7076 +34 TApplication.ProcessMessage
0044caf2 +000a FlashFXP.exe Forms 7114 +1 TApplication.HandleMessage
0044cda1 +00bd FlashFXP.exe Forms 7218 +26 TApplication.Run
0078d24f +1b7f FlashFXP.exe FlashFXP 856 +589 initialization
75993675 +0010 kernel32.dll BaseThreadInitThunk
thread $ec8:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $948:
779100e6 +0e ntdll.dll NtWaitForMultipleObjects
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $9c4:
779100e6 +0e ntdll.dll NtWaitForMultipleObjects
76dd095c +fa KERNELBASE.dll WaitForMultipleObjectsEx
75991628 +89 kernel32.dll WaitForMultipleObjectsEx
7599191c +13 kernel32.dll WaitForMultipleObjects
0063d4e7 +7b FlashFXP.exe UPTShellControls 4306 +13 TChangeHandlerThread.Execute
0041c114 +0c FlashFXP.exe Classes ThreadProc
0040401c +28 FlashFXP.exe System ThreadWrapper
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $598:
7790f85a +0e ntdll.dll NtWaitForSingleObject
76dd0810 +92 KERNELBASE.dll WaitForSingleObjectEx
7599117f +3e kernel32.dll WaitForSingleObjectEx
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $b60:
7790f85a +0e ntdll.dll NtWaitForSingleObject
76dd0810 +92 KERNELBASE.dll WaitForSingleObjectEx
7599117f +3e kernel32.dll WaitForSingleObjectEx
75991133 +0d kernel32.dll WaitForSingleObject
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $a44: <priority:1>
7790f8e2 +0e ntdll.dll NtRemoveIoCompletion
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $ff0:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $d00:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e10:
75f77eb8 +26 user32.dll GetMessageW
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $cfc:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e0c:
7790fd1a +0e ntdll.dll NtDelayExecution
76dd2c4a +5f KERNELBASE.dll SleepEx
76dd351b +0a KERNELBASE.dll Sleep
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e24:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e20:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e18:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $168:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e50:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $4b0:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e1c:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e38:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $c58:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $80:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $3fc:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
modules:
00400000 FlashFXP.exe 4.0.0.1467 D:\work\FlashFXP 4
05b70000 ssleay32.dll 1.0.0.1 D:\work\FlashFXP 4
10000000 libeay32.dll 1.0.0.1 D:\work\FlashFXP 4
6d5a0000 IconCodecService.dll 6.1.7600.16385 C:\Windows\system32
6ddc0000 NetworkExplorer.dll 6.1.7600.16385 C:\Windows\system32
6e4e0000 EhStorAPI.dll 6.1.7600.16385 C:\Windows\system32
6e590000 PortableDeviceTypes.dll 6.1.7600.16385 C:\Windows\system32
6e5c0000 PortableDeviceApi.dll 6.1.7600.16385 C:\Windows\system32
6e650000 thumbcache.dll 6.1.7600.16385 C:\Windows\SysWOW64
6e670000 StructuredQuery.dll 7.0.7600.16385 C:\Windows\System32
6e6d0000 UIAutomationCore.dll 7.0.0.0 C:\Windows\system32
6e800000 SearchFolder.dll 6.1.7600.16385 C:\Windows\system32
6e8a0000 pnrpnsp.dll 6.1.7600.16385 C:\Windows\system32
6e8c0000 napinsp.dll 6.1.7600.16385 C:\Windows\system32
6e8d0000 winrnr.dll 6.1.7600.16385 C:\Windows\System32
6e8e0000 dssenh.dll 6.1.7600.16385 C:\Windows\system32
6e910000 davclnt.dll 6.1.7600.16385 C:\Windows\System32
6e930000 ntlanman.dll 6.1.7600.16385 C:\Windows\System32
6f9d0000 drprov.dll 6.1.7600.16385 C:\Windows\System32
71680000 ieproxy.dll 8.0.7600.16625 C:\Program Files (x86)\Internet Explorer
71b00000 ieframe.DLL 8.0.7600.16625 C:\Windows\system32
725c0000 NLAapi.dll 6.1.7600.16385 C:\Windows\system32
725f0000 sensapi.dll 6.1.7600.16385 C:\Windows\system32
72640000 rtutils.dll 6.1.7600.16617 C:\Windows\system32
72650000 rasman.dll 6.1.7600.16385 C:\Windows\system32
72680000 RASAPI32.dll 6.1.7600.16385 C:\Windows\system32
727f0000 shdocvw.dll 6.1.7600.16385 C:\Windows\System32
72aa0000 Secur32.dll 6.1.7600.16484 C:\Windows\system32
72b20000 PROPSYS.dll 7.0.7600.16385 C:\Windows\system32
72c20000 comctl32.dll 6.10.7600.16385 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_4211 89da2b7fabfc
72dc0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32
72ef0000 LINKINFO.dll 6.1.7600.16385 C:\Windows\system32
72f00000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32
73520000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32
73560000 CRYPTSP.dll 6.1.7600.16385 C:\Windows\system32
73580000 SAMLIB.dll 6.1.7600.16385 C:\Windows\system32
735b0000 wsock32.dll 6.1.7600.16385 C:\Windows\system32
73770000 winspool.drv 6.1.7600.16385 C:\Windows\system32
737d0000 USERENV.dll 6.1.7600.16385 C:\Windows\system32
737f0000 MPR.dll 6.1.7600.16385 C:\Windows\system32
73810000 winmm.dll 6.1.7600.16385 C:\Windows\system32
73850000 samcli.dll 6.1.7600.16385 C:\Windows\system32
73860000 wkscli.dll 6.1.7600.16385 C:\Windows\system32
73870000 srvcli.dll 6.1.7600.16385 C:\Windows\system32
73890000 netutils.dll 6.1.7600.16385 C:\Windows\system32
738f0000 dnsapi.DLL 6.1.7600.16385 C:\Windows\system32
73940000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32
73950000 iphlpapi.DLL 6.1.7600.16385 C:\Windows\system32
73970000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32
739a0000 profapi.dll 6.1.7600.16385 C:\Windows\system32
73a70000 RpcRtRemote.dll 6.1.7600.16385 C:\Windows\system32
73d20000 WINSTA.dll 6.1.7600.16385 C:\Windows\System32
73d60000 apphelp.dll 6.1.7600.16385 C:\Windows\system32
73f00000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32
73f10000 mswsock.dll 6.1.7600.16385 C:\Windows\System32
73f50000 version.dll 6.1.7600.16385 C:\Windows\system32
74140000 XmlLite.dll 1.3.1000.0 C:\Windows\system32
74190000 DAVHLPR.dll 6.1.7600.16385 C:\Windows\System32
74660000 SXS.DLL 6.1.7600.16385 C:\Windows\system32
746e0000 DUI70.dll 6.1.7600.16385 C:\Windows\system32
747a0000 DUser.dll 6.1.7600.16385 C:\Windows\system32
747d0000 explorerframe.dll 6.1.7600.16385 C:\Windows\system32
74940000 olepro32.dll 6.1.7600.16385 C:\Windows\system32
74b30000 fwpuclnt.dll 6.1.7600.16385 C:\Windows\System32
74b70000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32
74fe0000 ntshrui.dll 6.1.7600.16385 C:\Windows\system32
75080000 OLEACC.dll 7.0.0.0 C:\Windows\system32
75260000 WindowsCodecs.dll 6.1.7600.16385 C:\Windows\system32
753c0000 EhStorShell.dll 6.1.7600.16385 C:\Windows\system32
75420000 slc.dll 6.1.7600.16385 C:\Windows\system32
75430000 cscapi.dll 6.1.7600.16385 C:\Windows\system32
75450000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64
75460000 SspiCli.dll 6.1.7600.16484 C:\Windows\syswow64
754c0000 GDI32.dll 6.1.7600.16385 C:\Windows\syswow64
75580000 iertutil.dll 8.0.7600.16385 C:\Windows\syswow64
75780000 IMM32.DLL 6.1.7600.16385 C:\Windows\system32
757e0000 SETUPAPI.dll 6.1.7600.16385 C:\Windows\syswow64
75980000 kernel32.dll 6.1.7600.16385 C:\Windows\syswow64
75a80000 ADVAPI32.dll 6.1.7600.16385 C:\Windows\syswow64
75b20000 MSASN1.dll 6.1.7600.16415 C:\Windows\syswow64
75b30000 urlmon.dll 8.0.7600.16625 C:\Windows\syswow64
75c70000 SHLWAPI.dll 6.1.7600.16385 C:\Windows\syswow64
75cd0000 msvcrt.dll 7.0.7600.16385 C:\Windows\syswow64
75d80000 comdlg32.dll 6.1.7600.16385 C:\Windows\syswow64
75e00000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\syswow64
75eb0000 USP10.dll 1.626.7600.16385 C:\Windows\syswow64
75f50000 LPK.dll 6.1.7600.16385 C:\Windows\syswow64
75f60000 user32.dll 6.1.7600.16385 C:\Windows\syswow64
76060000 Normaliz.dll 6.1.7600.16385 C:\Windows\syswow64
76070000 shell32.dll 6.1.7600.16644 C:\Windows\syswow64
76cc0000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64
76ce0000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64
76d70000 WLDAP32.dll 6.1.7600.16385 C:\Windows\syswow64
76dc0000 KERNELBASE.dll 6.1.7600.16385 C:\Windows\syswow64
76e10000 CFGMGR32.dll 6.1.7600.16385 C:\Windows\syswow64
76e40000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64
76f10000 ole32.dll 6.1.7600.16385 C:\Windows\syswow64
77070000 WINTRUST.dll 6.1.7600.16493 C:\Windows\syswow64
770a0000 RPCRT4.dll 6.1.7600.16385 C:\Windows\syswow64
771f0000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64
77200000 wininet.dll 8.0.7600.16625 C:\Windows\syswow64
77300000 WS2_32.dll 6.1.7600.16385 C:\Windows\syswow64
77340000 oleaut32.dll 6.1.7600.16567 C:\Windows\syswow64
773d0000 crypt32.dll 6.1.7600.16385 C:\Windows\syswow64
778c0000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64
778f0000 ntdll.dll 6.1.7600.16559 C:\Windows\SysWOW64
processes:
000 Idle 0 0 0
004 System 0 0 0
12c smss.exe 0 0 0
198 csrss.exe 0 0 0
1e0 csrss.exe 1 0 0
1e8 wininit.exe 0 0 0
21c services.exe 0 0 0
224 lsass.exe 0 0 0
22c lsm.exe 0 0 0
250 winlogon.exe 1 0 0
2c0 svchost.exe 0 0 0
314 svchost.exe 0 0 0
36c atiesrxx.exe 0 0 0
3a0 svchost.exe 0 0 0
3d0 svchost.exe 0 0 0
3e8 svchost.exe 0 0 0
180 svchost.exe 0 0 0
42c svchost.exe 0 0 0
4a4 atieclxx.exe 1 0 0
4c8 spoolsv.exe 0 0 0
518 svchost.exe 0 0 0
548 svchost.exe 0 0 0
5c8 emaudsv.exe 0 0 0
5ec eTSrv.exe 0 0 0
634 FileZilla server.exe 0 0 0
654 FlushServ.exe 0 0 0
67c gdipp_svc_32.exe 0 0 0
690 gdipp_svc_64.exe 0 0 0
6a8 srvany.exe 0 0 0
6bc Megaserv.exe 0 0 0
6c4 KMService.exe 0 0 0
6ec conhost.exe 0 0 0
700 gdipp_hook_64.exe 0 0 0
708 gdipp_hook_32.exe 0 0 0
770 svchost.exe 0 0 0
7a0 vmware-usbarbitrator.exe 0 0 0
7cc vmnat.exe 0 0 0
7ec vmware-authd.exe 0 0 0
4f8 vmnetdhcp.exe 0 0 0
8ac svchost.exe 0 0 0
930 WUDFHost.exe 0 0 0
aac taskhost.exe 1 26 20 normal
b30 dwm.exe 1 16 2 high
b4c explorer.exe 1 313 193 normal
ba4 wmdc.exe 1 9 3 normal
bac PKIMonitor.exe 1 23 15 normal
bb4 EmuUsbAudioCP.exe 1 50 65 normal C:\Program Files (x86)\Creative Professional\E-MU USB Audio
bbc ProcessHacker.exe 1 492 167 high
bcc robotaskbaricon.exe 1 124 48 normal C:\Program Files (x86)\Siber Systems\AI RoboForm
bdc DTLite.exe 1 123 43 normal C:\Program Files (x86)\DAEMON Tools Lite
be8 Skype.exe 1 285 153 normal C:\Program Files (x86)\Skype\Phone
5c4 svchost.exe 0 0 0
a7c jusched.exe 1 9 2 normal C:\Program Files (x86)\Common Files\Java\Java Update
470 vmware-tray.exe 1 25 11 normal C:\Program Files (x86)\VMware\VMware Workstation
3c4 wmagent.exe 1 156 54 normal C:\Program Files (x86)\WebMoney Agent
a6c FileZilla Server Interface.exe 1 71 40 normal C:\Program Files (x86)\FileZilla Server
c3c MOM.exe 1 10 10 normal
cc8 WmiPrvSE.exe 0 0 0
dac CCC.exe 1 31 28 normal
f88 svchost.exe 0 0 0
264 mstsc.exe 1 114 70 normal
368 TOTALCMD.EXE 1 330 162 normal C:\totalcmd
d08 FlashFXP.exe 1 259 209 normal D:\work\FlashFXP 4
ffc taskhost.exe 0 0 0
7dc FlashFXP_4_1480_RC2_Setup.exe 1 15 8 normal C:\Users\master\Documents
hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- JetFlash Transcend 8GB USB Device
- MEGARAID LD 0 MEGARAID SCSI Disk Device
- MEGARAID LD 1 MEGARAID SCSI Disk Device
- MEGARAID LD 2 MEGARAID SCSI Disk Device
- MEGARAID LD 3 MEGARAID SCSI Disk Device
- MEGARAID LD 4 MEGARAID SCSI Disk Device
- ST350063 0AS SCSI Disk Device
+ Display adapters
- ATI Radeon HD 4800 Series (driver 8.762.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST BD-RE GGW-H20N SCSI CdRom Device
- NWJUXCH TIBWH2N SCSI CdRom Device
+ Human Interface Devices
- USB Input Device
+ IEEE 1394 Bus host controllers
- Texas Instruments 1394 OHCI Compliant Host Controller
+ Imaging devices
- A4 TECH USB2.0 PC Camera J
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- HID-compliant mouse
+ Monitors
- BenQ FP93GX+ (Analog) (driver 1.0.0.0)
- Generic Non-PnP Monitor
- Generic PnP Monitor
+ Network adapters
- NVIDIA nForce Networking Controller
- NVIDIA nForce Networking Controller #2
- VirtualBox Host-Only Ethernet Adapter (driver 3.2.8.0)
- VMware Virtual Ethernet Adapter for VMnet1 (driver 4.0.3.0)
- VMware Virtual Ethernet Adapter for VMnet8 (driver 4.0.3.0)
+ Portable Devices
- Transcend
+ Processors
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
+ Smart Card Filter
- Smart card filter driver
- Smart card filter driver
- Smart card filter driver
+ Smart card readers
- Aladdin IFD Handler (driver 5.0.0.37)
- Aladdin IFD Handler (driver 5.0.0.37)
- Aladdin VR Handler (driver 5.0.0.37)
+ Sound, video and game controllers
- ATI High Definition Audio Device (driver 7.11.0.7708)
- USB2.0 Camera Audio
+ Storage controllers
- AB9LAEO3 IDE Controller
- Intel(R) RAID Controller SRCS28X (driver 6.51.3.64)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- AMD Address Map Configuration
- AMD Address Map Configuration
- AMD DRAM and HyperTransport(tm) Trace Mode Configuration
- AMD DRAM and HyperTransport(tm) Trace Mode Configuration
- AMD HyperTransport(tm) Configuration
- AMD HyperTransport(tm) Configuration
- AMD Miscellaneous Configuration
- AMD Miscellaneous Configuration
- Composite Bus Enumerator
- Direct memory access controller
- Extended IO Bus
- File as Volume Driver
- High Definition Audio Controller
- High precision event timer
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- NVIDIA nForce PCI System Management
- NVIDIA nForce PCI System Management
- PCI bus
- PCI bus
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI standard ISA bridge
- PCI standard PCI Express to PCI/PCI-X Bridge
- PCI standard PCI Express to PCI/PCI-X Bridge
- PCI standard PCI-to-PCI bridge
- PCI standard PCI-to-PCI bridge
- PCI standard RAM Controller
- PCI standard RAM Controller
- PCI standard RAM Controller
- Plug and Play Software Device Enumerator
- Programmable interrupt controller
- RAID Virtual Device
- Remote Desktop Device Redirector Bus
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Standard Enhanced PCI to USB Host Controller
- Standard OpenHCD USB Host Controller
- USB Composite Device
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub
cpu registers:
eax = 024e20b0
ebx = 00000000
ecx = 00000002
edx = 0040fceb
esi = 00000000
edi = 004128cc
eip = 0040fceb
esp = 0018f970
ebp = 0018f9c8
stack dump:
0018f970 eb fc 40 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..@.............
0018f980 84 f9 18 00 eb fc 40 00 - b0 20 4e 02 00 00 00 00 ......@...N.....
0018f990 00 00 00 00 cc 28 41 00 - c8 f9 18 00 a0 f9 18 00 .....(A.........
0018f9a0 d0 f9 18 00 48 3a 40 00 - c8 f9 18 00 00 36 45 02 ....H:@......6E.
0018f9b0 00 00 00 00 00 00 00 00 - 00 00 00 00 a0 fa 18 00 ................
0018f9c0 3a 5e 45 00 00 00 40 00 - a0 fa 18 00 a6 5e 45 00 :^E...@......^E.
0018f9d0 ec fa 18 00 48 3a 40 00 - a0 fa 18 00 00 36 45 02 ....H:@......6E.
0018f9e0 00 00 00 00 00 00 00 00 - 38 00 00 00 08 28 00 00 ........8....(..
0018f9f0 0c fe 44 00 00 00 00 00 - 00 00 00 00 00 00 40 00 ..D...........@.
0018fa00 00 00 00 00 05 00 01 00 - 00 00 00 00 00 00 00 00 ................
0018fa10 60 fa 18 00 00 00 00 00 - 00 00 c8 86 01 01 00 00 `...............
0018fa20 43 03 00 00 ca 01 00 00 - fa 00 00 00 87 00 00 00 C...............
0018fa30 1e 04 02 00 00 00 00 00 - 08 28 00 00 24 7e 40 00 .........(..$~@.
0018fa40 00 00 00 00 00 00 00 00 - 00 00 40 00 00 00 00 00 ..........@.....
0018fa50 05 00 01 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa60 54 46 72 6d 4c 61 6e 67 - 53 65 6c 00 00 00 00 00 TFrmLangSel.....
0018fa70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018faa0 38 fb 18 00 0e 50 44 00 - 00 36 45 02 5a 7c 44 00 8....PD..6E.Z|D.
disassembling:
[...]
00455e58 push eax
00455e59 lea eax, [ebp-$40]
00455e5c push eax
00455e5d call -$4da86 ($4083dc) ; Windows.UnregisterClass
00455e62 5409 mov dword ptr [ebp-$64], $44fe0c ; Controls.InitWndProc
00455e69 5410 lea eax, [ebp-$40]
00455e6c mov [ebp-$44], eax
00455e6f 5411 lea eax, [ebp-$68]
00455e72 push eax
00455e73 call -$4dc2c ($40824c) ; Windows.RegisterClass
00455e78 test ax, ax
00455e7b jnz loc_455e82
00455e7d call -$46222 ($40fc60) ; SysUtils.RaiseLastWin32Error
00455e82 5413 mov [$78f170], ebx
00455e88 5414 lea edx, [ebp-$8c]
00455e8e mov eax, ebx
00455e90 mov ecx, [eax]
00455e92 call dword ptr [ecx+$98]
00455e98 5415 cmp dword ptr [ebx+$140], 0
00455e9f jnz loc_455ea6
00455ea1 > call -$46246 ($40fc60) ; SysUtils.RaiseLastWin32Error
00455ea6 5417 mov eax, [ebx+$54]
00455ea9 call -$49e7e ($40c030) ; SysUtils.StrDispose
00455eae 5418 xor eax, eax
00455eb0 mov [ebx+$54], eax
00455eb3 5419 mov eax, ebx
00455eb5 call +$307e ($458f38) ; Controls.TWinControl.UpdateBounds
00455eba 5420 push 1
00455ebc mov eax, [ebx+$58]
00455ebf call -$31fe0 ($423ee4) ; Graphics.TFont.GetHandle
00455ec4 mov ecx, eax
00455ec6 mov edx, $30
00455ecb mov eax, ebx
00455ecd call -$22aa ($453c28) ; Controls.TControl.Perform
00455ed2 5421 cmp byte ptr [ebx+$4c], 0
00455ed6 jz loc_455ee3
00455ed8 mov eax, ebx
00455eda mov bx, $ffef
00455ede call -$5298f ($403554) ; System.@CallDynaInst
00455ee3 xor eax, eax
00455ee5 pop edx
[...]
date/time : 2010-09-10, 19:12:27, 382ms
computer name : ROOM
user name : master <admin>
registered owner : Microsoft / Microsoft
operating system : Windows 7 x64 build 7600
system language : Russian
system up time : 12 hours 16 minutes
program up time : 24 seconds
processors : 4x Dual-Core AMD Opteron(tm) Processor 2212
physical memory : 6896/8191 MB (free/total)
free disk space : (C
46,78 GB (D
95,78 GB
display mode : 1920x1080, 32 bit
process id : $e28
allocated memory : 44,64 MB
executable : FlashFXP.exe
exec. date/time : 2010-09-08 23:08
executable hash : 990A5EC13579C9E1C6B0CC8E908940D3
version : 4.0.0.1480
callstack crc : $2b09a8cf, $72e40c94, $72e40c94
count : 6
exception number : 1
exception class : EWin32Error
exception message : A Win32 API function failed.
main thread ($5f4):
0040fcda +0086 FlashFXP.exe SysUtils RaiseLastWin32Error
00456085 +0105 FlashFXP.exe Controls TWinControl.CreateWnd
004451bd +0005 FlashFXP.exe Forms TScrollingWinControl.CreateWnd
00447e09 +0009 FlashFXP.exe Forms TCustomForm.CreateWnd
0045623d +0011 FlashFXP.exe Controls TWinControl.CreateHandle
00458d24 +001c FlashFXP.exe Controls TWinControl.HandleNeeded
00458d31 +0005 FlashFXP.exe Controls TWinControl.GetHandle
00449ce2 +0196 FlashFXP.exe Forms TCustomForm.ShowModal
0072426a +05e6 FlashFXP.exe FrmMain1 2982 +134 TFrmMain.WMScroll
00454001 +0111 FlashFXP.exe Controls TControl.WndProc
0045686e +01ae FlashFXP.exe Controls TWinControl.WndProc
00446e51 +0571 FlashFXP.exe Forms TCustomForm.WndProc
0050a372 +0042 FlashFXP.exe ThemeMgr TWindowProcList.DispatchMessage
0050acc8 +00f0 FlashFXP.exe ThemeMgr TThemeManager.FormWindowProc
0050c1cc +000c FlashFXP.exe ThemeMgr TThemeManager.PreFormWindowProc
004564f8 +002c FlashFXP.exe Controls TWinControl.MainWndProc
00443f20 +0014 FlashFXP.exe Forms StdWndProc
75f7810d +000a user32.dll DispatchMessageA
0044cc6f +008b FlashFXP.exe Forms TApplication.ProcessMessage
0044cca6 +000a FlashFXP.exe Forms TApplication.HandleMessage
0044cf55 +00bd FlashFXP.exe Forms TApplication.Run
0078fd4d +1ced FlashFXP.exe FlashFXP 867 +597 initialization
75993675 +0010 kernel32.dll BaseThreadInitThunk
thread $8d8:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $e44:
779100e6 +0e ntdll.dll NtWaitForMultipleObjects
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $950:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $9cc:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $698:
77911ecf +0b ntdll.dll NtWaitForWorkViaWorkerFactory
75993675 +10 kernel32.dll BaseThreadInitThunk
thread $554:
7790fd1a +0e ntdll.dll NtDelayExecution
76dd2c4a +5f KERNELBASE.dll SleepEx
76dd351b +0a KERNELBASE.dll Sleep
75993675 +10 kernel32.dll BaseThreadInitThunk
modules:
00400000 FlashFXP.exe 4.0.0.1480 D:\work\FlashFXP 4
05620000 ssleay32.dll 1.0.0.1 D:\work\FlashFXP 4
10000000 libeay32.dll 1.0.0.1 D:\work\FlashFXP 4
6e8c0000 dssenh.dll 6.1.7600.16385 C:\Windows\system32
6e8f0000 IconCodecService.dll 6.1.7600.16385 C:\Windows\system32
71680000 ieproxy.dll 8.0.7600.16625 C:\Program Files (x86)\Internet Explorer
727f0000 shdocvw.dll 6.1.7600.16385 C:\Windows\System32
72aa0000 Secur32.dll 6.1.7600.16484 C:\Windows\system32
72b20000 PROPSYS.dll 7.0.7600.16385 C:\Windows\system32
72c20000 comctl32.dll 6.10.7600.16385 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_4211 89da2b7fabfc
72dc0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32
72f00000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32
73520000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32
73560000 CRYPTSP.dll 6.1.7600.16385 C:\Windows\system32
73580000 SAMLIB.dll 6.1.7600.16385 C:\Windows\system32
73770000 winspool.drv 6.1.7600.16385 C:\Windows\system32
737d0000 USERENV.dll 6.1.7600.16385 C:\Windows\system32
73810000 winmm.dll 6.1.7600.16385 C:\Windows\system32
73850000 samcli.dll 6.1.7600.16385 C:\Windows\system32
73870000 srvcli.dll 6.1.7600.16385 C:\Windows\system32
73890000 netutils.dll 6.1.7600.16385 C:\Windows\system32
73970000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32
739a0000 profapi.dll 6.1.7600.16385 C:\Windows\system32
73a70000 RpcRtRemote.dll 6.1.7600.16385 C:\Windows\system32
73d60000 apphelp.dll 6.1.7600.16385 C:\Windows\system32
73f50000 version.dll 6.1.7600.16385 C:\Windows\system32
74660000 SXS.DLL 6.1.7600.16385 C:\Windows\system32
746e0000 DUI70.dll 6.1.7600.16385 C:\Windows\system32
747a0000 DUser.dll 6.1.7600.16385 C:\Windows\system32
747d0000 explorerframe.dll 6.1.7600.16385 C:\Windows\system32
74940000 olepro32.dll 6.1.7600.16385 C:\Windows\system32
74fe0000 ntshrui.dll 6.1.7600.16385 C:\Windows\system32
75080000 OLEACC.dll 7.0.0.0 C:\Windows\system32
75260000 WindowsCodecs.dll 6.1.7600.16385 C:\Windows\system32
753c0000 EhStorShell.dll 6.1.7600.16385 C:\Windows\system32
75420000 slc.dll 6.1.7600.16385 C:\Windows\system32
75430000 cscapi.dll 6.1.7600.16385 C:\Windows\system32
75450000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64
75460000 SspiCli.dll 6.1.7600.16484 C:\Windows\syswow64
754c0000 GDI32.dll 6.1.7600.16385 C:\Windows\syswow64
75780000 IMM32.DLL 6.1.7600.16385 C:\Windows\system32
757e0000 SETUPAPI.dll 6.1.7600.16385 C:\Windows\syswow64
75980000 kernel32.dll 6.1.7600.16385 C:\Windows\syswow64
75a80000 ADVAPI32.dll 6.1.7600.16385 C:\Windows\syswow64
75b20000 MSASN1.dll 6.1.7600.16415 C:\Windows\syswow64
75c70000 SHLWAPI.dll 6.1.7600.16385 C:\Windows\syswow64
75cd0000 msvcrt.dll 7.0.7600.16385 C:\Windows\syswow64
75d80000 comdlg32.dll 6.1.7600.16385 C:\Windows\syswow64
75e00000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\syswow64
75eb0000 USP10.dll 1.626.7600.16385 C:\Windows\syswow64
75f50000 LPK.dll 6.1.7600.16385 C:\Windows\syswow64
75f60000 user32.dll 6.1.7600.16385 C:\Windows\syswow64
76070000 shell32.dll 6.1.7600.16644 C:\Windows\syswow64
76cc0000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64
76ce0000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64
76d70000 WLDAP32.dll 6.1.7600.16385 C:\Windows\syswow64
76dc0000 KERNELBASE.dll 6.1.7600.16385 C:\Windows\syswow64
76e10000 CFGMGR32.dll 6.1.7600.16385 C:\Windows\syswow64
76e40000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64
76f10000 ole32.dll 6.1.7600.16385 C:\Windows\syswow64
770a0000 RPCRT4.dll 6.1.7600.16385 C:\Windows\syswow64
771f0000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64
77300000 ws2_32.dll 6.1.7600.16385 C:\Windows\syswow64
77340000 oleaut32.dll 6.1.7600.16567 C:\Windows\syswow64
773d0000 crypt32.dll 6.1.7600.16385 C:\Windows\syswow64
778f0000 ntdll.dll 6.1.7600.16559 C:\Windows\SysWOW64
processes:
000 Idle 0 0 0
004 System 0 0 0
12c smss.exe 0 0 0
198 csrss.exe 0 0 0
1e0 csrss.exe 1 0 0
1e8 wininit.exe 0 0 0
21c services.exe 0 0 0
224 lsass.exe 0 0 0
22c lsm.exe 0 0 0
250 winlogon.exe 1 0 0
2c0 svchost.exe 0 0 0
314 svchost.exe 0 0 0
36c atiesrxx.exe 0 0 0
3a0 svchost.exe 0 0 0
3d0 svchost.exe 0 0 0
3e8 svchost.exe 0 0 0
180 svchost.exe 0 0 0
42c svchost.exe 0 0 0
4a4 atieclxx.exe 1 0 0
4c8 spoolsv.exe 0 0 0
518 svchost.exe 0 0 0
548 svchost.exe 0 0 0
5c8 emaudsv.exe 0 0 0
5ec eTSrv.exe 0 0 0
634 FileZilla server.exe 0 0 0
654 FlushServ.exe 0 0 0
67c gdipp_svc_32.exe 0 0 0
690 gdipp_svc_64.exe 0 0 0
6a8 srvany.exe 0 0 0
6bc Megaserv.exe 0 0 0
6c4 KMService.exe 0 0 0
6ec conhost.exe 0 0 0
700 gdipp_hook_64.exe 0 0 0
708 gdipp_hook_32.exe 0 0 0
770 svchost.exe 0 0 0
7a0 vmware-usbarbitrator.exe 0 0 0
7cc vmnat.exe 0 0 0
7ec vmware-authd.exe 0 0 0
4f8 vmnetdhcp.exe 0 0 0
8ac svchost.exe 0 0 0
930 WUDFHost.exe 0 0 0
aac taskhost.exe 1 26 20 normal
b30 dwm.exe 1 17 2 high
b4c explorer.exe 1 467 234 normal
ba4 wmdc.exe 1 9 3 normal
bac PKIMonitor.exe 1 23 15 normal
bb4 EmuUsbAudioCP.exe 1 50 65 normal C:\Program Files (x86)\Creative Professional\E-MU USB Audio
bbc ProcessHacker.exe 1 523 177 high
bcc robotaskbaricon.exe 1 124 52 normal C:\Program Files (x86)\Siber Systems\AI RoboForm
bdc DTLite.exe 1 123 43 normal C:\Program Files (x86)\DAEMON Tools Lite
be8 Skype.exe 1 287 148 normal C:\Program Files (x86)\Skype\Phone
5c4 svchost.exe 0 0 0
a7c jusched.exe 1 9 2 normal C:\Program Files (x86)\Common Files\Java\Java Update
470 vmware-tray.exe 1 25 11 normal C:\Program Files (x86)\VMware\VMware Workstation
3c4 wmagent.exe 1 156 54 normal C:\Program Files (x86)\WebMoney Agent
a6c FileZilla Server Interface.exe 1 71 40 normal C:\Program Files (x86)\FileZilla Server
c3c MOM.exe 1 10 10 normal
dac CCC.exe 1 31 27 normal
f88 svchost.exe 0 0 0
368 TOTALCMD.EXE 1 342 165 normal C:\totalcmd
294 wuauclt.exe 1 12 7 normal
72c mstsc.exe 1 92 65 normal
e4c notepad.exe 1 33 21 normal C:\Windows\SysWOW64
c68 chrome.exe 1 69 48 normal C:\Users\master\AppData\Roaming\ChromePlus
174 chrome.exe 1 9 1 normal C:\Users\master\AppData\Roaming\ChromePlus
cac chrome.exe 1 32 1 normal C:\Users\master\AppData\Roaming\ChromePlus
a34 svchost.exe 0 0 0
e28 FlashFXP.exe 1 228 175 normal D:\work\FlashFXP 4
798 VSSVC.exe 0 0 0
ce0 svchost.exe 0 0 0
hardware:
+ Computer
- ACPI x64-based PC
+ Disk drives
- JetFlash Transcend 8GB USB Device
- MEGARAID LD 0 MEGARAID SCSI Disk Device
- MEGARAID LD 1 MEGARAID SCSI Disk Device
- MEGARAID LD 2 MEGARAID SCSI Disk Device
- MEGARAID LD 3 MEGARAID SCSI Disk Device
- MEGARAID LD 4 MEGARAID SCSI Disk Device
- ST350063 0AS SCSI Disk Device
+ Display adapters
- ATI Radeon HD 4800 Series (driver 8.762.0.0)
+ DVD/CD-ROM drives
- HL-DT-ST BD-RE GGW-H20N SCSI CdRom Device
- NWJUXCH TIBWH2N SCSI CdRom Device
+ Human Interface Devices
- USB Input Device
+ IEEE 1394 Bus host controllers
- Texas Instruments 1394 OHCI Compliant Host Controller
+ Imaging devices
- A4 TECH USB2.0 PC Camera J
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- HID-compliant mouse
+ Monitors
- BenQ FP93GX+ (Analog) (driver 1.0.0.0)
- Generic Non-PnP Monitor
- Generic PnP Monitor
+ Network adapters
- NVIDIA nForce Networking Controller
- NVIDIA nForce Networking Controller #2
- VirtualBox Host-Only Ethernet Adapter (driver 3.2.8.0)
- VMware Virtual Ethernet Adapter for VMnet1 (driver 4.0.3.0)
- VMware Virtual Ethernet Adapter for VMnet8 (driver 4.0.3.0)
+ Portable Devices
- Transcend
+ Processors
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
- Dual-Core AMD Opteron(tm) Processor 2212
+ Smart Card Filter
- Smart card filter driver
- Smart card filter driver
- Smart card filter driver
+ Smart card readers
- Aladdin IFD Handler (driver 5.0.0.37)
- Aladdin IFD Handler (driver 5.0.0.37)
- Aladdin VR Handler (driver 5.0.0.37)
+ Sound, video and game controllers
- ATI High Definition Audio Device (driver 7.11.0.7708)
- USB2.0 Camera Audio
+ Storage controllers
- AB9LAEO3 IDE Controller
- Intel(R) RAID Controller SRCS28X (driver 6.51.3.64)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
- NVIDIA nForce Serial ATA Controller (driver 10.6.0.16)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- AMD Address Map Configuration
- AMD Address Map Configuration
- AMD DRAM and HyperTransport(tm) Trace Mode Configuration
- AMD DRAM and HyperTransport(tm) Trace Mode Configuration
- AMD HyperTransport(tm) Configuration
- AMD HyperTransport(tm) Configuration
- AMD Miscellaneous Configuration
- AMD Miscellaneous Configuration
- Composite Bus Enumerator
- Direct memory access controller
- Extended IO Bus
- File as Volume Driver
- High Definition Audio Controller
- High precision event timer
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- NVIDIA nForce PCI System Management
- NVIDIA nForce PCI System Management
- PCI bus
- PCI bus
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI Express standard Root Port
- PCI standard ISA bridge
- PCI standard PCI Express to PCI/PCI-X Bridge
- PCI standard PCI Express to PCI/PCI-X Bridge
- PCI standard PCI-to-PCI bridge
- PCI standard PCI-to-PCI bridge
- PCI standard RAM Controller
- PCI standard RAM Controller
- PCI standard RAM Controller
- Plug and Play Software Device Enumerator
- Programmable interrupt controller
- RAID Virtual Device
- Remote Desktop Device Redirector Bus
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Standard Enhanced PCI to USB Host Controller
- Standard OpenHCD USB Host Controller
- USB Composite Device
- USB Mass Storage Device
- USB Root Hub
- USB Root Hub
cpu registers:
eax = 023420b0
ebx = 00000000
ecx = 00000002
edx = 0040fcdf
esi = 00000000
edi = 004128c0
eip = 0040fcdf
esp = 0018f970
ebp = 0018f9c8
stack dump:
0018f970 df fc 40 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..@.............
0018f980 84 f9 18 00 df fc 40 00 - b0 20 34 02 00 00 00 00 ......@...4.....
0018f990 00 00 00 00 c0 28 41 00 - c8 f9 18 00 a0 f9 18 00 .....(A.........
0018f9a0 d0 f9 18 00 48 3a 40 00 - c8 f9 18 00 e0 38 2b 02 ....H:@......8+.
0018f9b0 00 00 00 00 00 00 00 00 - 00 00 00 00 a0 fa 18 00 ................
0018f9c0 1e 60 45 00 00 00 40 00 - a0 fa 18 00 8a 60 45 00 .`E...@......`E.
0018f9d0 ec fa 18 00 48 3a 40 00 - a0 fa 18 00 e0 38 2b 02 ....H:@......8+.
0018f9e0 00 00 00 00 c8 fa 18 00 - d0 40 e8 00 08 28 00 00 .........@...(..
0018f9f0 c0 ff 44 00 00 00 00 00 - 00 00 00 00 00 00 40 00 ..D...........@.
0018fa00 00 00 00 00 05 00 01 00 - 00 00 00 00 00 00 00 00 ................
0018fa10 60 fa 18 00 00 00 00 00 - 00 00 c8 86 01 01 00 00 `...............
0018fa20 43 03 00 00 ca 01 00 00 - fa 00 00 00 87 00 00 00 C...............
0018fa30 aa 05 05 00 00 00 00 00 - 08 28 00 00 24 7e 40 00 .........(..$~@.
0018fa40 00 00 00 00 00 00 00 00 - 00 00 40 00 00 00 00 00 ..........@.....
0018fa50 05 00 01 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa60 54 46 72 6d 4c 61 6e 67 - 53 65 6c 00 00 00 00 00 TFrmLangSel.....
0018fa70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018fa90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0018faa0 38 fb 18 00 c2 51 44 00 - e0 38 2b 02 0e 7e 44 00 8....QD..8+..~D.
disassembling:
[...]
00724226 mov ecx, [eax]
00724228 call dword ptr [ecx+$34]
0072422b 2977 lea edx, [ebp-$28]
0072422e mov eax, [ebp-$18]
00724231 call -$3194aa ($40ad8c) ; SysUtils.LowerCase
00724236 mov eax, [ebp-$28]
00724239 mov edx, $7246b4 ; 'english'
0072423e call -$31fe2b ($404418) ; System.@LStrCmp
00724243 jnz loc_724259
00724245 2978 mov eax, [$7aeaf0]
0072424a mov eax, [eax]
0072424c mov eax, [eax+$2cc]
00724252 mov edx, ebx
00724254 call -$2e6899 ($43d9c0) ; StdCtrls.TCustomComboBox.SetItemIndex
00724259 2979 inc ebx
0072425a 2972 dec esi
0072425b jnz loc_7241a6
00724261 2982 mov eax, [$7aeaf0]
00724266 mov eax, [eax]
00724268 mov edx, [eax]
0072426a > call dword ptr [edx+$d0]
00724270 dec eax
00724271 jnz loc_7242d1
00724273 2984 mov eax, [$7aeaf0]
00724278 mov eax, [eax]
0072427a mov eax, [eax+$2cc]
00724280 call -$2e68e5 ($43d9a0) ; StdCtrls.TCustomComboBox.GetItemIndex
00724285 mov edx, eax
00724287 lea ecx, [ebp-$28]
0072428a mov eax, [ebp-$20]
0072428d mov ebx, [eax]
0072428f call dword ptr [ebx+$c]
00724292 mov eax, [ebp-$28]
00724295 push eax
00724296 mov edx, $72466c ; 'main'
0072429b mov ecx, $72465c ; 'Lang'
007242a0 mov eax, [$7b7ca4]
007242a5 call -$25c002 ($4c82a8) ; IniFiles32.TIniFile32.WriteString
007242aa 2985 push 0
007242ac lea eax, [ebp-$28]
007242af push eax
[...]
