EurekaLog 6.0.21 Application: ---------------------------------------------------------------------- 1.1 Start Date : Wed, 27 Oct 2010 23:26:08 -0400 1.2 Name/Description: MediaMonkey.exe - (MediaMonkey - Audio Librar) 1.3 Version Number : 4.0.0.1318 1.4 Parameters : 1.5 Compilation Date: Sat, 23 Oct 2010 19:14:03 -0400 1.6 Up Time : 14 hours, 21 minutes, 1 second Exception: ---------------------------------------------------------------------------------------------------------- 2.1 Date : Thu, 28 Oct 2010 13:47:09 -0400 2.2 Address : 0A0E5ECF 2.3 Module Name : UpNp.dll 2.4 Module Version: 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0A0E5ECF in module 'UpNp.dll'. Read of address 00007530. 2.7 ID : 6313 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.1 ID : Rusty 3.2 Name : 3.3 Email : rs@mediamonkey.com 3.4 Company : 3.5 Privileges: SeShutdownPrivilege - OFF SeChangeNotifyPrivilege - ON SeUndockPrivilege - OFF SeIncreaseWorkingSetPrivilege - OFF SeTimeZonePrivilege - OFF Active Controls: ---------------------------------------------------------------------------------------------------------------- 4.1 Form Class : OpusApp 4.2 Form Text : Platinum Software License Agreement-1.doc (Read-Only) [Compatibility Mode] - Microsoft Word 4.3 Control Class: 4.4 Control Text : Computer: ---------------------------------------------------------------------------- 5.1 Name : PUZZLE30 5.2 Total Memory : 3967 Mb 5.3 Free Memory : 1298 Mb 5.4 Total Disk : 292.97 Gb 5.5 Free Disk : 165.22 Gb 5.6 System Up Time: 1 day, 3 hours, 49 seconds 5.7 Processor : AMD Athlon(tm) Dual Core Processor 5050e 5.8 Display Mode : 1920 x 1200, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce 6150 (driver 8.17.12.5896 - RAM 128 MB) 5.11 Printer : Brother MFC-7440N Printer (driver 1.08) Operating System: -------------------------------------------- 6.1 Type : Microsoft Windows 7 (64 bit) 6.2 Build # : 7600 6.3 Update : 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------------------------- 7.1 IP Address: 192.168.000.118 - 192.168.056.001 7.2 Submask : 255.255.255.000 - 255.255.255.000 7.3 Gateway : 192.168.000.001 - 000.000.000.000 7.4 DNS 1 : 192.168.000.001 - 000.000.000.000 7.5 DNS 2 : 000.000.000.000 - 000.000.000.000 7.6 DHCP : ON - OFF Request: ----------------------------------------------------------------------------- 8.1 : Build 1318. MediaMonkey was running in the background (not Playing). Call Stack Information: --------------------------------------------------------------- |Address |Module |Unit|Class|Procedure/Method |Line| --------------------------------------------------------------- |Running Thread: ID=1376; Priority=??; Class= | |-------------------------------------------------------------| |75864861|WS2_32.dll | | |recv | | |754714CB|kernel32.dll | | |TlsSetValue | | |76E50315|KERNELBASE.dll| | |ReleaseMutex | | |76E5077E|KERNELBASE.dll| | |WaitForSingleObjectEx| | |7547117F|kernel32.dll | | |WaitForSingleObjectEx| | |75473675|kernel32.dll | | |BaseThreadInitThunk | | --------------------------------------------------------------- Modules Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00030000|MMHelper.dll | | |53904 |2010-10-24 01:17:30|C:\Program Files (x86)\MediaMonkey4 | |00400000|MediaMonkey.exe |MediaMonkey - Audio Librar |4.0.0.1318 |11016336|2010-10-24 01:17:12|C:\Program Files (x86)\MediaMonkey4 | |05200000|sqlite3MM.dll | | |794624 |2010-10-24 01:15:28|C:\Program Files (x86)\MediaMonkey4 | |09D70000|Cabinet.dll |MicrosoftR Cabinet File API |6.1.7600.16385 |72704 |2009-07-13 21:15:02|C:\Windows\system32 | |0A0B0000|UpNp.dll | | |672768 |2010-10-24 01:16:12|C:\Program Files (x86)\MediaMonkey4 | |10000000|UNZIP32.DLL |Info-ZIP's UnZip DLL for Win32 |1.1.0.0 |143360 |2010-06-17 16:13:50|C:\Program Files (x86)\MediaMonkey4 | |12E10000|GPAPI.dll |Group Policy Client API |6.1.7600.16385 |79872 |2009-07-13 21:15:24|C:\Windows\system32 | |12EE0000|cryptnet.dll |Crypto Network Related API |6.1.7600.16385 |103424 |2009-07-13 21:15:08|C:\Windows\system32 | |136B0000|RASAPI32.dll |Remote Access API |6.1.7600.16385 |325120 |2009-07-13 21:16:14|C:\Windows\system32 | |13710000|in_vorbis.dll | | |164496 |2010-10-24 01:17:50|C:\Program Files (x86)\MediaMonkey4\Plugins | |13750000|in_ape.dll |in_APE |3.9.9.0 |200704 |2010-06-17 16:13:16|C:\Program Files (x86)\MediaMonkey4\Plugins | |13790000|in_mpc.dll | | |77824 |2010-06-17 16:13:16|C:\Program Files (x86)\MediaMonkey4\Plugins | |137F0000|in_wav.dll | | |82576 |2010-10-24 01:17:50|C:\Program Files (x86)\MediaMonkey4\Plugins | |13810000|in_wma.dll | | |221840 |2010-10-24 01:17:52|C:\Program Files (x86)\MediaMonkey4\Plugins | |13890000|in_wmp3.dll | | |348896 |2010-10-24 01:17:38|C:\Program Files (x86)\MediaMonkey4\Plugins | |138F0000|out_wave.dll | | |13824 |2010-06-17 16:13:16|C:\Program Files (x86)\MediaMonkey4\Plugins | |13970000|dsp_DeFX.dll |DeFX multi effects processor for Winamp 2.x |1.0.0.1 |62976 |2010-06-17 16:13:16|C:\Program Files (x86)\MediaMonkey4\Plugins | |139A0000|Equalize.dll | | |103056 |2010-10-24 01:17:20|C:\Program Files (x86)\MediaMonkey4 | |13A70000|f_aac.dll | | |840408 |2010-10-24 01:17:36|C:\Program Files (x86)\MediaMonkey4\Plugins | |13B40000|f_ape.dll | | |326800 |2010-10-24 01:17:42|C:\Program Files (x86)\MediaMonkey4\Plugins | |13DF0000|f_AVI.dll | | |315904 |2010-10-24 01:15:50|C:\Program Files (x86)\MediaMonkey4\Plugins | |13F90000|f_flac.dll | | |151184 |2010-10-24 01:17:42|C:\Program Files (x86)\MediaMonkey4\Plugins | |14110000|f_flac_codec.dll | | |184976 |2010-10-24 01:17:44|C:\Program Files (x86)\MediaMonkey4\Plugins | |14310000|f_mkv.dll | | |1493136 |2010-10-24 01:17:36|C:\Program Files (x86)\MediaMonkey4\Plugins | |14510000|f_mpc.dll | | |868496 |2010-10-24 01:17:44|C:\Program Files (x86)\MediaMonkey4\Plugins | |14640000|f_ogg.dll | | |242320 |2010-10-24 01:17:48|C:\Program Files (x86)\MediaMonkey4\Plugins | |163C0000|f_wave.dll | | |333456 |2010-10-24 01:17:48|C:\Program Files (x86)\MediaMonkey4\Plugins | |16420000|f_WMV.dll | | |309760 |2010-10-24 01:15:50|C:\Program Files (x86)\MediaMonkey4\Plugins | |191D0000|libdispatch.dll |Dispatch Runtime Library |1.109.4.1 |42272 |2010-06-03 13:45:46|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |193D0000|iPhoneCalc.dll | | |671744 |2010-10-24 01:15:50|C:\Program Files (x86)\MediaMonkey4 | |1C860000|out_MMDS.dll | | |885392 |2010-10-24 01:17:38|C:\Program Files (x86)\MediaMonkey4\Plugins | |21460000|d_iPhone.dll | | |1086096 |2010-10-24 01:17:34|C:\Program Files (x86)\MediaMonkey4\Plugins | |21880000|hpCDBurn.dll | | |1049232 |2010-10-24 01:17:58|C:\Program Files (x86)\MediaMonkey4 | |227C0000|d_iPod.dll | | |1533072 |2010-10-24 01:17:34|C:\Program Files (x86)\MediaMonkey4\Plugins | |25280000|d_iRiverH.dll | | |359568 |2010-10-24 01:17:38|C:\Program Files (x86)\MediaMonkey4\Plugins | |252F0000|d_USBMass1.dll | | |248976 |2010-10-24 01:17:40|C:\Program Files (x86)\MediaMonkey4\Plugins | |27CD0000|d_WMDM.dll | | |1087632 |2010-10-24 01:17:36|C:\Program Files (x86)\MediaMonkey4\Plugins | |27E30000|WMAuth.dll | | |131728 |2010-10-24 01:17:28|C:\Program Files (x86)\MediaMonkey4 | |2E9E0000|QuickTimeMPEG4.qtx |QuickTime MPEG4 |7.66.71.0 |360448 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |2EA50000|QuickTimeMPEG.qtx |QuickTime MPEG |7.66.71.0 |491520 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |2EB30000|QuickTimeImage.qtx |QuickTime Image |7.66.71.0 |987136 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |31600000|CoreGraphics.dll |CoreGraphics DLL |1.0.83.0 |3904304 |2010-06-03 13:45:38|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |31D40000|CoreAudioToolbox.dll |CoreAudio |7.9.3.0 |3715888 |2010-06-03 13:45:34|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |32280000|QuickTimeAuthoring.qtx |QuickTime Authoring |7.66.71.0 |2269184 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |656C0000|nvd3dum.dll |NVIDIA Compatible Vista WDDM D3D Driver, Version 258.96 |8.17.12.5896 |9818728 |2010-07-10 05:38:00|C:\Windows\system32 | |66030000|Flash10c.ocx |Adobe Flash Player 10.0 r32 |10.0.32.18 |3979680 |2009-07-17 23:12:12|C:\Windows\SysWow64\Macromed\Flash | |66F40000|WINHTTP.dll |Windows HTTP Services |6.1.7600.16385 |348672 |2009-07-13 21:16:20|C:\Windows\system32 | |66FA0000|msxml3.dll |MSXML 3.0 SP11 |8.110.7600.16605 |1233920 |2010-06-08 02:02:08|C:\Windows\System32 | |670E0000|Dxtmsft.dll |DirectX Media -- Image DirectX Transforms |8.0.7600.16385 |346112 |2009-07-13 21:15:14|C:\Windows\SysWOW64 | |67140000|D3DIM700.DLL |Microsoft Direct3D |6.1.7600.16385 |817664 |2009-07-13 21:15:10|C:\Windows\system32 | |67210000|mshtml.dll |Microsoft (R) HTML Viewer |8.0.7600.16671 |5977600 |2010-09-08 00:28:46|C:\Windows\SysWOW64 | |67B00000|D3D9.DLL |Direct3D 9 Runtime |6.1.7600.16385 |1826816 |2009-07-13 21:15:10|C:\Windows\system32 | |682E0000|QuickTimeVR.qtx |QuickTime VR |7.66.71.0 |888832 |2010-03-17 21:53:36|C:\Program Files (x86)\QuickTime\QTSystem | |683C0000|QuickTimeStreamingAuthoring.qtx|QuickTime Streaming Authoring |7.66.71.0 |368640 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |68420000|QuickTimeStreaming.qtx |QuickTime Streaming |7.66.71.0 |905216 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |68500000|QuickTimeMusic.qtx |QuickTime Music |7.66.71.0 |524288 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |68590000|QuickTimeMPEG4Authoring.qtx |QuickTime MPEG4Authoring |7.66.71.0 |589824 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |68630000|QuickTimeH264.qtx |QuickTimeH264 |7.66.71.0 |3272704 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |68970000|webio.dll |Web Transfer Protocols API |6.1.7600.16385 |313856 |2009-07-13 21:16:20|C:\Windows\system32 | |689C0000|vbscript.dll |Microsoft R VBScript |5.8.7600.16546 |427520 |2010-03-08 17:33:58|C:\Windows\SysWOW64 | |69340000|QuickTimeInternetExtras.qtx |QuickTime Internet Extras |7.66.71.0 |839680 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |69500000|nvoglv32.DLL |NVIDIA Compatible OpenGL ICD |8.17.12.5896 |14092904|2010-07-10 05:38:00|C:\Windows\system32 | |6AA00000|ncrypt.dll |Windows cryptographic library |6.1.7600.16385 |219136 |2009-07-13 21:16:04|C:\Windows\system32 | |6AA40000|QuickTimeEssentials.qtx |QuickTime Essentials |7.66.71.0 |335872 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6AAB0000|QuickTimeEffects.qtx |QuickTime Effects |7.66.71.0 |585728 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6AB50000|QuickTimeCapture.qtx |QuickTime Capture |7.66.71.0 |331776 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6ABB0000|QuickTime3GPPAuthoring.qtx |QuickTime 3GPP Authoring |7.66.71.0 |507904 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6AC30000|QuickTime3GPP.qtx |QuickTime 3GPP |7.66.71.0 |364544 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6AC90000|in_mfaudio.dll | | |486032 |2010-10-24 01:17:36|C:\Program Files (x86)\MediaMonkey4\Plugins | |6AD40000|WMVCore.DLL |Windows Media Playback/Authoring DLL |12.0.7600.16385 |2504192 |2009-07-13 21:16:14|C:\Windows\system32 | |6BB00000|sensapi.dll |SENS Connectivity API DLL |6.1.7600.16385 |10752 |2009-07-13 21:16:14|C:\Windows\system32 | |6BB20000|CoreVideo.dll |CoreVideo |1.0.1.0 |340784 |2010-06-03 13:45:42|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |6BB80000|mf.dll |Media Foundation DLL |12.0.7600.16385 |3177984 |2009-07-13 21:15:40|C:\Windows\system32 | |6BEA0000|Dxtrans.dll |DirectX Media -- DirectX Transform Core |8.0.7600.16385 |215552 |2009-07-13 21:15:14|C:\Windows\SysWOW64 | |6C4E0000|QuickTimeStreamingExtras.qtx |QuickTime Streaming Extras |7.66.71.0 |184320 |2010-03-17 21:53:36|C:\Program Files (x86)\QuickTime\QTSystem | |6C510000|mswmdm.dll |Windows Media Device Manager Core |12.0.7600.16385 |296960 |2009-07-13 21:15:52|C:\Windows\System32 | |6C560000|f_video.dll | | |929424 |2010-10-24 01:17:36|C:\Program Files (x86)\MediaMonkey4\Plugins | |6C650000|opengl32.dll |OpenGL Client DLL |6.1.7600.16385 |791552 |2009-07-13 21:16:14|C:\Windows\system32 | |6C720000|DEVRTL.dll |Device Management Run Time Library |6.1.7600.16385 |44544 |2009-07-13 21:15:12|C:\Windows\system32 | |6C730000|qtmlClient.dll |QuickTime Client DLL |7.66.71.0 |348160 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6C790000|MFPlat.DLL |Media Foundation Platform DLL |12.0.7600.16385 |352768 |2009-07-13 21:15:40|C:\Windows\system32 | |6C990000|CoreVideo.qtx |CoreVideo |7.66.71.0 |221184 |2010-03-17 21:53:32|C:\Program Files (x86)\QuickTime\QTSystem | |6CB30000|rasman.dll |Remote Access Connection Manager |6.1.7600.16385 |76800 |2009-07-13 21:16:14|C:\Windows\system32 | |6CB50000|ddrawex.dll |Direct Draw Ex |6.1.7600.16385 |30208 |2009-07-13 21:15:12|C:\Windows\SysWOW64 | |6CB60000|cewmdm.dll |Windows CE WMDM Service Provider |12.0.7600.16385 |210432 |2009-07-13 21:15:04|C:\Windows\System32 | |6CC20000|bcryptprimitives.dll |Windows Cryptographic Primitives Library |6.1.7600.16385 |249680 |2009-07-13 21:17:56|C:\Windows\SysWOW64 | |6CC80000|bcrypt.dll |Windows Cryptographic Primitives Library (Wow64) |6.1.7600.16385 |80896 |2009-07-13 21:11:22|C:\Windows\system32 | |6CD90000|schannel.dll |TLS / SSL Security Provider |6.1.7600.16661 |224256 |2010-08-21 01:36:26|C:\Windows\SysWOW64 | |6CDD0000|MLANG.dll |Multi Language Support DLL |6.1.7600.16385 |177664 |2009-07-13 21:15:42|C:\Windows\system32 | |6CE00000|DUI70.dll |Windows DirectUI Engine |6.1.7600.16385 |717824 |2009-07-13 21:15:14|C:\Windows\system32 | |6CEC0000|explorerframe.dll |ExplorerFrame |6.1.7600.16385 |1495040 |2009-07-13 21:15:20|C:\Windows\system32 | |6D030000|pngfilt.dll |IE PNG plugin image decoder |8.0.7600.16385 |46592 |2009-07-13 21:16:14|C:\Windows\SysWOW64 | |6D040000|jscript.dll |Microsoft R JScript |5.8.7600.16475 |716800 |2009-12-02 04:17:16|C:\Windows\SysWOW64 | |6D100000|resampledmo.dll |Windows Media Resampler |6.1.7600.16385 |206848 |2009-07-13 21:16:14|C:\Windows\SysWOW64 | |6DB20000|msdmo.dll |DMO Runtime |6.6.7600.16385 |30208 |2009-07-13 21:15:44|C:\Windows\SysWOW64 | |6DB30000|Secur32.dll |Security Support Provider Interface |6.1.7600.16484 |22016 |2009-12-11 03:39:08|C:\Windows\system32 | |6DB40000|rtutils.dll |Routing Utilities |6.1.7600.16617 |37376 |2010-06-19 02:23:52|C:\Windows\system32 | |6DBF0000|Mfreadwrite.dll |Media Foundation ReadWrite DLL |12.0.7600.16385 |195072 |2009-07-13 21:15:40|C:\Windows\system32 | |6DC30000|WMASF.DLL |Windows Media ASF DLL |12.0.7600.16385 |237568 |2009-07-13 21:16:20|C:\Windows\system32 | |6E0C0000|ImgUtil.dll |IE plugin image decoder support DLL |8.0.7600.16385 |34304 |2009-07-13 21:15:34|C:\Windows\system32 | |6E1D0000|ieframe.dll |Internet Browser |8.0.7600.16671 |10988544|2010-09-08 00:28:02|C:\Windows\SysWOW64 | |6ED80000|DUser.dll |Windows DirectUser Engine |6.1.7600.16385 |181248 |2009-07-13 21:15:14|C:\Windows\system32 | |6EDC0000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.0 |70144 |2009-07-13 21:14:58|C:\Windows\system32 | |6EE40000|msimtf.dll |Active IMM Server DLL |6.1.7600.16385 |31232 |2009-07-13 21:15:46|C:\Windows\system32 | |6EE50000|mp3dmod.dll |Microsoft MP3 Decoder DMO |6.1.7600.16385 |79872 |2009-07-13 21:15:42|C:\Windows\SysWOW64 | |6EE70000|mp4sdecd.dll |Windows Media MPEG-4 S Video Decoder |6.1.7600.16385 |415744 |2009-07-13 21:15:42|C:\Windows\SysWOW64 | |6EEE0000|colorcnv.dll |Windows Media Color Conversion |6.1.7600.16385 |153600 |2009-07-13 21:15:08|C:\Windows\SysWOW64 | |6EF10000|DXVA2.DLL |DirectX Video Acceleration 2.0 DLL |6.1.7600.16385 |88064 |2009-07-13 21:15:14|C:\Windows\system32 | |6EF30000|EVR.dll |Enhanced Video Renderer DLL |6.1.7600.16385 |488448 |2009-07-13 21:15:20|C:\Windows\system32 | |6F000000|tapi32.dll |MicrosoftR Windows(TM) Telephony API Client DLL |6.1.7600.16385 |192000 |2009-07-13 21:16:16|C:\Windows\system32 | |6F040000|GLU32.dll |OpenGL Utility Library DLL |6.1.7600.16385 |130048 |2009-07-13 21:15:24|C:\Windows\system32 | |6F070000|d3d8thk.dll |Microsoft Direct3D OS Thunk Layer |6.1.7600.16385 |11264 |2009-07-13 21:15:10|C:\Windows\system32 | |6F080000|QuickTimeAudioSupport.qtx |QuickTime Audio Support |7.9.2.0 |122880 |2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |6F0E0000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |157184 |2009-07-13 21:15:46|C:\Windows\SysWOW64 | |6F1B0000|credssp.dll |Credential Delegation Security Package |6.1.7600.16385 |16896 |2009-07-13 21:15:08|C:\Windows\system32 | |6F690000|oleacc.dll |Active Accessibility Core Component |7.0.0.0 |233472 |2009-07-13 21:16:14|C:\Windows\system32 | |6F6D0000|midimap.dll |Microsoft MIDI Mapper |6.1.7600.16385 |16896 |2009-07-13 21:15:42|C:\Windows\system32 | |6F6E0000|MSACM32.dll |Microsoft ACM Audio Filter |6.1.7600.16385 |72192 |2009-07-13 21:15:44|C:\Windows\system32 | |6F700000|msacm32.drv |Microsoft Sound Mapper |6.1.7600.16385 |20992 |2009-07-13 21:14:10|C:\Windows\system32 | |6F710000|AUDIOSES.DLL |Audio Session |6.1.7600.16385 |195584 |2009-07-13 21:14:58|C:\Windows\system32 | |6F750000|AVRT.dll |Multimedia Realtime Runtime |6.1.7600.16385 |14336 |2009-07-13 21:15:00|C:\Windows\system32 | |6F760000|ksuser.dll |User CSA Library |6.1.7600.16385 |4608 |2009-07-13 21:15:36|C:\Windows\system32 | |6F770000|wdmaud.drv |Winmm audio system driver |6.1.7600.16385 |172032 |2009-07-13 21:14:10|C:\Windows\system32 | |6F7A0000|MMDevAPI.DLL |MMDevice API |6.1.7600.16385 |213504 |2009-07-13 21:15:42|C:\Windows\system32 | |6F950000|slc.dll |Software Licensing Client Dll |6.1.7600.16385 |27136 |2009-07-13 21:16:16|C:\Windows\system32 | |6F960000|EhStorShell.dll |Windows Enhanced Storage Shell Extension DLL |6.1.7600.16385 |189952 |2009-07-13 21:15:16|C:\Windows\system32 | |6FD40000|ntshrui.dll |Shell extensions for sharing |6.1.7600.16385 |442880 |2009-07-13 21:16:12|C:\Windows\system32 | |6FF30000|mscms.dll |Microsoft Color Matching System DLL |6.1.7600.16385 |481280 |2009-07-13 21:15:44|C:\Windows\system32 | |70090000|fwpuclnt.dll |FWP/IPsec User-Mode API |6.1.7600.16385 |216576 |2009-07-13 21:15:22|C:\Windows\System32 | |700D0000|mdnsNSP.dll |Bonjour Namespace Provider |2.0.2.0 |152864 |2010-05-18 16:35:14|C:\Program Files (x86)\Bonjour | |70100000|QuickTime.qts |QuickTime |7.66.71.0 |12115968|2010-03-17 21:53:34|C:\Program Files (x86)\QuickTime\QTSystem | |718E0000|icudt40.dll |ICU Data DLL |4.0.0.3204 |14013728|2010-06-03 13:45:44|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |72640000|LINKINFO.dll |Windows Volume Tracking |6.1.7600.16385 |22016 |2009-07-13 21:15:38|C:\Windows\system32 | |72650000|RpcRtRemote.dll |Remote RPC Extension |6.1.7600.16385 |45568 |2009-07-13 21:16:14|C:\Windows\system32 | |726F0000|dwmapi.dll |Microsoft Desktop Window Manager API |6.1.7600.16385 |67072 |2009-07-13 21:15:14|C:\Windows\system32 | |72710000|MSVCR80.dll |MicrosoftR C Runtime Library |8.0.50727.4927 |632656 |2009-06-10 17:23:12|C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5 | |72820000|CoreFoundation.dll |CoreFoundation |1.550.26.13 |828208 |2010-06-03 13:45:38|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |72B70000|PROPSYS.dll |Microsoft Property System |7.0.7600.16385 |988160 |2009-07-13 21:16:14|C:\Windows\system32 | |72CB0000|uxtheme.dll |Microsoft UxTheme Library |6.1.7600.16385 |245760 |2009-07-13 21:11:26|C:\Windows\system32 | |72D30000|winspool.drv |Windows Spooler Driver |6.1.7600.16385 |319488 |2009-07-13 21:14:10|C:\Windows\system32 | |72D90000|winmm.dll |MCI API DLL |6.1.7600.16385 |194048 |2009-07-13 21:16:20|C:\Windows\system32 | |72DD0000|version.dll |Version Checking and File Installation Libraries |6.1.7600.16385 |21504 |2009-07-13 21:16:18|C:\Windows\system32 | |72DE0000|apphelp.dll |Application Compatibility Client Library |6.1.7600.16385 |292352 |2009-07-13 21:14:54|C:\Windows\system32 | |72E30000|comctl32.dll |User Experience Controls Library |6.10.7600.16661 |1680896 |2010-08-21 01:21:34|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd| |73120000|dhcpcsvc.DLL |DHCP Client Service |6.1.7600.16385 |61952 |2009-07-13 21:15:12|C:\Windows\system32 | |73140000|dhcpcsvc6.DLL |DHCPv6 Client |6.1.7600.16385 |43008 |2009-07-13 21:15:12|C:\Windows\system32 | |73150000|dnsapi.DLL |DNS Client API DLL |6.1.7600.16385 |269824 |2009-07-13 21:15:14|C:\Windows\system32 | |73320000|wship6.dll |Winsock2 Helper DLL (TL/IPv6) |6.1.7600.16385 |10752 |2009-07-13 21:16:22|C:\Windows\System32 | |73330000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |6.1.7600.16385 |242936 |2009-07-13 21:17:56|C:\Windows\system32 | |73370000|CRYPTSP.dll |Cryptographic Service Provider API |6.1.7600.16385 |78848 |2009-07-13 21:15:08|C:\Windows\system32 | |73390000|POWRPROF.dll |Power Profile Helper DLL |6.1.7600.16385 |145408 |2009-07-13 21:16:14|C:\Windows\system32 | |733D0000|srvcli.dll |Server Service Client DLL |6.1.7600.16385 |90112 |2009-07-13 21:16:16|C:\Windows\system32 | |73420000|WINNSI.DLL |Network Store Information RPC interface |6.1.7600.16385 |16896 |2009-07-13 21:16:20|C:\Windows\system32 | |73430000|iphlpapi.DLL |IP Helper API |6.1.7600.16385 |103936 |2009-07-13 21:15:34|C:\Windows\system32 | |73450000|wshtcpip.dll |Winsock2 Helper DLL (TL/IPv4) |6.1.7600.16385 |9216 |2009-07-13 21:16:22|C:\Windows\System32 | |73460000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |6.1.7600.16385 |232448 |2009-07-13 21:15:52|C:\Windows\system32 | |734A0000|ntmarta.dll |Windows NT MARTA provider |6.1.7600.16385 |121856 |2009-07-13 21:16:12|C:\Windows\system32 | |734D0000|profapi.dll |User Profile Basic API |6.1.7600.16385 |31744 |2009-07-13 21:16:14|C:\Windows\system32 | |734E0000|USERENV.dll |Userenv |6.1.7600.16385 |79360 |2009-07-13 21:16:18|C:\Windows\system32 | |73510000|wsock32.dll |Windows Socket 32-Bit DLL |6.1.7600.16385 |15360 |2009-07-13 21:16:22|C:\Windows\system32 | |735D0000|pnrpnsp.dll |PNRP Name Space Provider |6.1.7600.16385 |65024 |2009-07-13 21:16:14|C:\Windows\system32 | |736E0000|napinsp.dll |E-mail Naming Shim Provider |6.1.7600.16385 |52224 |2009-07-13 21:16:04|C:\Windows\system32 | |736F0000|winrnr.dll |LDAP RnR Provider DLL |6.1.7600.16385 |20992 |2009-07-13 21:16:20|C:\Windows\System32 | |73760000|NLAapi.dll |Network Location Awareness 2 |6.1.7600.16385 |51712 |2009-07-13 21:16:04|C:\Windows\system32 | |737B0000|msimg32.dll |GDIEXT Client DLL |6.1.7600.16385 |4608 |2009-07-13 21:15:46|C:\Windows\system32 | |738A0000|cscapi.dll |Offline Files Win32 API |6.1.7600.16385 |34816 |2009-07-13 21:15:08|C:\Windows\system32 | |73920000|WindowsCodecs.dll |Microsoft Windows Codecs Library |6.1.7600.16385 |1011200 |2009-07-13 21:16:20|C:\Windows\system32 | |73B80000|SXS.DLL |Fusion 2.5 |6.1.7600.16385 |380416 |2009-07-13 21:16:16|C:\Windows\system32 | |73BE0000|iTunesMobileDevice.dll |iTunesMobileDevice |392.8.0.1 |1217328 |2010-06-10 21:03:28|C:\Program Files (x86)\Common Files\Apple\Mobile Device Support | |73D10000|DDRAW.dll |Microsoft DirectDraw |6.1.7600.16385 |531968 |2009-07-13 21:15:12|C:\Windows\system32 | |73E00000|SQLite3.dll |SQLite3 Dynamic Link Library |3.6.12.74 |406816 |2009-09-04 23:14:58|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |73E70000|CFNetwork.DLL |CFNetwork |1.454.10.13 |627504 |2010-06-03 13:45:34|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |73F10000|dsound.dll |DirectSound |6.1.7600.16385 |453632 |2009-07-13 21:15:14|C:\Windows\system32 | |74080000|icuuc40.dll |IBM ICU Common DLL |4.0.0.3204 |922912 |2010-06-03 13:45:44|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |74170000|olepro32.dll | |6.1.7600.16385 |90112 |2009-07-13 21:16:14|C:\Windows\system32 | |74190000|mpr.dll |Multiple Provider Router DLL |6.1.7600.16385 |64000 |2009-07-13 21:15:42|C:\Windows\system32 | |741B0000|icuin40.dll |IBM ICU I18N DLL |4.0.0.3204 |1041696 |2010-06-03 13:45:44|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |742B0000|rasadhlp.dll |Remote Access AutoDial Helper |6.1.7600.16385 |11776 |2009-07-13 21:16:14|C:\Windows\system32 | |742E0000|zlib1.dll |zlib data compression library |1.2.3.0 |67872 |2009-09-04 23:15:06|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |74300000|QTCF.dll |QuickTime CoreFoundation |7.66.71.0 |180224 |2010-03-17 21:53:32|C:\Program Files (x86)\QuickTime\QTSystem | |74340000|DCIMAN32.dll |DCI Manager |6.1.7600.16385 |10240 |2009-07-13 21:15:10|C:\Windows\system32 | |74350000|MSVCP80.dll |MicrosoftR C++ Runtime Library |8.0.50727.4927 |554816 |2009-06-10 17:23:12|C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5 | |743E0000|objc.dll |Objective-C Runtime Library |1.435.14.16 |120096 |2010-06-03 13:45:46|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |74410000|ASL.dll |Apple System Log |1.0.0.20 |75040 |2010-06-03 13:45:34|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |74510000|gdiplus.dll |Microsoft GDI+ |6.1.7600.16385 |1624576 |2009-07-13 21:03:52|C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca | |74920000|pthreadVC2.dll |POSIX Threads for Windows32 Library |2.7.0.11200 |53024 |2009-09-04 23:14:56|C:\Program Files (x86)\Common Files\Apple\Apple Application Support | |75340000|CRYPTBASE.dll |Base cryptographic API DLL |6.1.7600.16385 |36864 |2009-07-13 21:15:08|C:\Windows\syswow64 | |75350000|SspiCli.dll |Security Support Provider Interface |6.1.7600.16484 |96768 |2009-12-11 03:36:34|C:\Windows\syswow64 | |753B0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.8530.16385|522240 |2009-07-13 21:15:04|C:\Windows\syswow64 | |75440000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |6.1.7600.16385 |92160 |2009-07-13 21:16:14|C:\Windows\SysWOW64 | |75460000|kernel32.dll |Windows NT BASE API Client DLL |6.1.7600.16385 |836608 |2009-07-13 21:11:24|C:\Windows\syswow64 | |75560000|ole32.dll |Microsoft OLE for Windows |6.1.7600.16624 |1413632 |2010-06-29 01:02:04|C:\Windows\syswow64 | |756C0000|SETUPAPI.dll |Windows Setup API |6.1.7600.16385 |1668608 |2009-07-13 21:16:16|C:\Windows\syswow64 | |75860000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |6.1.7600.16385 |206336 |2009-07-13 21:16:22|C:\Windows\syswow64 | |758A0000|Normaliz.dll |Unicode Normalization DLL |6.1.7600.16385 |2048 |2009-07-13 21:09:02|C:\Windows\syswow64 | |758B0000|urlmon.dll |OLE32 Extensions for Win32 |8.0.7600.16671 |1226752 |2010-09-08 00:30:02|C:\Windows\syswow64 | |759F0000|MSCTF.dll |MSCTF Server DLL |6.1.7600.16385 |828928 |2009-07-13 21:15:44|C:\Windows\syswow64 | |75AC0000|WLDAP32.dll |Win32 LDAP API DLL |6.1.7600.16385 |268800 |2009-07-13 21:16:20|C:\Windows\syswow64 | |75B10000|comdlg32.dll |Common Dialogs DLL |6.1.7600.16385 |486912 |2009-07-13 21:15:08|C:\Windows\syswow64 | |75B90000|oleaut32.dll | |6.1.7600.16567 |571904 |2010-04-07 03:10:38|C:\Windows\syswow64 | |75C20000|shell32.dll |Windows Shell Common Dll |6.1.7600.16644 |12867584|2010-07-27 10:03:26|C:\Windows\syswow64 | |76870000|WINTRUST.dll |Microsoft Trust Verification APIs |6.1.7600.16493 |172032 |2009-12-29 02:55:36|C:\Windows\syswow64 | |768A0000|DEVOBJ.dll |Device Information Set DLL |6.1.7600.16385 |64512 |2009-07-13 21:15:12|C:\Windows\syswow64 | |768C0000|NSI.dll |NSI User-mode interface DLL |6.1.7600.16385 |8704 |2009-07-13 21:16:12|C:\Windows\syswow64 | |768D0000|USER32.dll |Multi-User Windows USER API Client DLL |6.1.7600.16385 |833024 |2009-07-13 21:11:26|C:\Windows\syswow64 | |769D0000|ADVAPI32.dll |Advanced Windows 32 Base API |6.1.7600.16385 |640000 |2009-07-13 21:14:54|C:\Windows\syswow64 | |76A70000|wininet.dll |Internet Extensions for Win32 |8.0.7600.16671 |978432 |2010-09-08 00:30:06|C:\Windows\syswow64 | |76C00000|CRYPT32.dll |Crypto API32 |6.1.7600.16385 |1151488 |2009-07-13 21:15:08|C:\Windows\syswow64 | |76D50000|USP10.dll |Uniscribe Unicode script processor |1.626.7600.16385 |627200 |2009-07-13 21:16:18|C:\Windows\syswow64 | |76DF0000|CFGMGR32.dll |Configuration Manager DLL |6.1.7600.16385 |145920 |2009-07-13 21:15:04|C:\Windows\syswow64 | |76E20000|LPK.dll |Language Pack |6.1.7600.16385 |25600 |2009-07-13 21:11:24|C:\Windows\syswow64 | |76E30000|MSASN1.dll |ASN.1 Runtime APIs |6.1.7600.16415 |34816 |2009-08-29 02:57:32|C:\Windows\syswow64 | |76E40000|KERNELBASE.dll |Windows NT BASE API Client DLL |6.1.7600.16385 |269824 |2009-07-13 21:11:24|C:\Windows\syswow64 | |76E90000|GDI32.dll |GDI Client DLL |6.1.7600.16385 |310784 |2009-07-13 21:11:22|C:\Windows\syswow64 | |76F20000|iertutil.dll |Run time utility for Internet Explorer |8.0.7600.16671 |2058752 |2010-09-08 00:28:02|C:\Windows\syswow64 | |77120000|msvcrt.dll |Windows NT CRT DLL |7.0.7600.16385 |690688 |2009-07-13 21:15:52|C:\Windows\syswow64 | |771D0000|RPCRT4.dll |Remote Procedure Call Runtime |6.1.7600.16385 |662528 |2009-07-13 21:11:24|C:\Windows\syswow64 | |77320000|imm32.dll |Multi-User Windows IMM32 API Client DLL |6.1.7600.16385 |119808 |2009-07-13 21:11:22|C:\Windows\syswow64 | |77380000|SHLWAPI.dll |Shell Light-weight Utility Library |6.1.7600.16385 |350208 |2009-07-13 21:16:16|C:\Windows\syswow64 | |777B0000|PSAPI.DLL |Process Status Helper |6.1.7600.16385 |6144 |2009-07-13 21:16:14|C:\Windows\syswow64 | |777E0000|ntdll.dll |NT Layer DLL |6.1.7600.16559 |1289528 |2010-03-24 02:37:06|C:\Windows\SysWOW64 | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory|Priority |Threads|Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |0 |[System Process] | | |0 | |2 | | |4 |System | | |0 |Normal |106 | | |108 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |35 | | |272 |smss.exe | | |0 |Above-Normal|2 | | |380 |csrss.exe | | |0 |High |9 | | |400 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |22 | | |452 |wininit.exe |Windows Start-Up Application |6.1.7600.16385|0 |High |3 | | |460 |csrss.exe | | |0 |High |10 | | |508 |winlogon.exe | | |0 |High |3 | | |556 |services.exe | | |0 |Normal |7 | | |564 |lsass.exe | | |0 |Normal |7 | | |568 |BrMfcWnd.exe |Brother Status Monitor MFC Application |2.2.0.16 |0 |Normal |3 |C:\Program Files (x86)\Brother\Brmfcmon | |572 |lsm.exe | | |0 |Normal |10 | | |656 |splwow64.exe |Print driver host for 32bit applications |6.1.7600.16385|0 |Normal |6 | | |684 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |11 | | |712 |firefox.exe |Firefox |1.9.2.3937 |0 |Normal |34 |K:\Apps\FirefoxPortable\App\firefox | |748 |nvvsvc.exe | | |0 |Normal |5 | | |788 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |7 | | |856 |MsMpEng.exe | | |0 |Normal |31 | | |948 |svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |22 | | |1000|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |32 | | |1052|audiodg.exe | | |0 |Normal |4 | | |1136|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |22 | | |1296|MediaMonkey.exe |MediaMonkey - Audio Librar |4.0.0.1318 |0 |Normal |48 |C:\Program Files (x86)\MediaMonkey4 | |1320|spoolsv.exe | | |0 |Normal |19 | | |1356|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |19 | | |1392|nvvsvc.exe | | |0 |Normal |5 | | |1524|AppleMobileDeviceService.exe| | |0 |Normal |5 | | |1588|mDNSResponder.exe | | |0 |Normal |4 | | |1596|texter.exe | |1.0.46.5 |0 |Normal |6 |K:\Apps\Texter | |1620|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |25 | | |1660|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |5 | | |1672|MSCamS64.exe | | |0 |Normal |6 | | |1772|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |12 | | |1800|TeamViewer_Service.exe | | |0 |Normal |4 | | |1928|VBoxSVC.exe | | |0 |Normal |9 | | |2096|SearchIndexer.exe |Microsoft Windows Search Indexer |7.0.7600.16385|0 |Normal |11 | | |2108|iTunesHelper.exe |iTunesHelper |9.2.1.4 |0 |Normal |12 |C:\Program Files (x86)\iTunes | |2144|brccMCtl.exe |Control Center 3 Main Program |3.4.16.7 |0 |Normal |3 |C:\Program Files (x86)\Brother\ControlCenter3 | |2200|jusched.exe |Java(TM) Update Scheduler |2.0.2.4 |0 |Normal |1 |C:\Program Files (x86)\Common Files\Java\Java Update | |2288|EditPadLite.exe |EditPad Lite |6.6.3.0 |0 |Normal |3 |K:\Apps\EditPadLite | |2380|PStart.exe |PStart personal start menu |2.11.0.5 |0 |Normal |4 |K:\ | |2412|taskhost.exe | | |0 |Normal |10 | | |2496|taskeng.exe |Task Scheduler Engine |6.1.7600.16385|0 |Below-Normal|7 | | |2524|dwm.exe | | |0 |High |5 | | |2564|explorer.exe |Windows Explorer |6.1.7600.16450|0 |Normal |23 | | |2608|FirefoxPortable.exe |Mozilla Firefox, Portable Edition |1.6.6.0 |0 |Normal |3 |K:\Apps\FirefoxPortable | |2616|wmpnetwk.exe | | |0 |Normal |15 | | |2648|WINWORD.EXE |Microsoft Office Word |12.0.6545.5000|0 |Normal |7 |C:\Program Files (x86)\Microsoft Office\Office12 | |2668|BrMfimon.exe |Brother Status Monitor (Network) |2.2.0.5 |0 |Normal |6 |C:\Program Files (x86)\Brother\Brmfcmon | |2876|msseces.exe | | |0 |Normal |9 | | |2892|jusched.exe | | |0 |Normal |1 | | |2920|sidebar.exe | | |0 |Normal |11 | | |3028|plugin-container.exe |Plugin Container for Firefox |1.9.2.3937 |0 |Normal |11 |K:\Apps\FirefoxPortable\App\firefox | |3076|VirtualBox.exe | | |0 |Normal |5 | | |3152|iPodService.exe | | |0 |Normal |12 | | |3248|Launchy.exe | | |0 |Normal |5 |K:\Apps\Launchy | |3292|PidginPortable.exe |Pidgin Portable |1.6.9.0 |0 |Normal |3 |Q:\Apps\PidginPortable | |3464|svchost.exe |Host Process for Windows Services |6.1.7600.16385|0 |Normal |8 | | |3492|procexp.exe | | |0 |Normal |1 | | |3636|pidgin-portable.exe |Pidgin |2.7.4.0 |0 |Normal |13 |Q:\Apps\PidginPortable\App\Pidgin | |3728|thunderbird.exe |Thunderbird |1.9.2.3938 |0 |Normal |22 |Q:\Apps\ThunderbirdPortable\App\thunderbird | |3772|TrueCrypt.exe | | |0 |Normal |4 | | |3788|procexp64.exe | | |0 |High |5 | | |3900|googletalkplugin.exe |Google Talk Plugin |1.0.0.0 |0 |Normal |7 |C:\Users\Rusty\AppData\Local\Google\Google Talk Plugin| |3920|KeePass.exe |KeePass Password Safe 1.17 |1.1.7.0 |0 |Normal |3 |K:\Apps\Keepass | |3988|ThunderbirdPortable.exe |Mozilla Thunderbird, Portable Edition |1.6.9.0 |0 |Normal |3 |Q:\Apps\ThunderbirdPortable | |4344|Foxit Reader.exe |Foxit Reader 3.1, Best Reader for Everyday Use!|3.1.1.901 |0 |Normal |6 |C:\Program Files (x86)\Foxit Software\Foxit Reader | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: --------------------------------------------------- 0A0E5EB2 mov eax, [ebp-$04] 0A0E5EB5 add eax, +$01 0A0E5EB8 mov [ebp-$04], eax 0A0E5EBB mov ecx, [ebp-$08] 0A0E5EBE mov edx, [ebp-$04] 0A0E5EC1 cmp edx, [ecx+$04] 0A0E5EC4 jnb +$17 0A0E5EC6 mov eax, [ebp-$08] 0A0E5EC9 mov ecx, [eax+$08] 0A0E5ECC mov edx, [ebp-$04] 0A0E5ECF mov eax, [ecx+edx*4] ; <-- EXCEPTION 0A0E5ED2 push eax 0A0E5ED3 mov ecx, [ebp+$08] 0A0E5ED6 call +$00000215 0A0E5EDB jmp -$2B 0A0E5EDD xor eax, eax 0A0E5EDF mov esp, ebp 0A0E5EE1 pop ebp 0A0E5EE2 ret $04 Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 3964F710: 3964F7C0 0A0E5ECF: 8B 04 91 50 8B 4D 08 E8 15 02 00 00 EB D5 33 C0 ...P.M........3. 3964F714: 27D70CCD 0A0E5EDF: 8B E5 5D C2 04 00 CC CC CC CC CC CC CC CC CC CC ..]............. 3964F718: 3964F738 0A0E5EEF: CC 55 8B EC 83 EC 08 89 4D F8 8B 45 F8 8B 48 04 .U......M..E..H. 3964F71C: 27D70BC0 0A0E5EFF: 89 4D FC 83 7D FC 00 74 19 8B 55 FC 8B 42 08 50 .M..}..t..U..B.P 3964F720: 3964F800 0A0E5F0F: 8B 4D 08 E8 19 02 00 00 8B 4D FC 8B 11 89 55 FC .M.......M....U. 3964F724: 28074FD4 0A0E5F1F: EB E1 33 C0 8B E5 5D C2 04 00 CC CC CC CC CC CC ..3...]......... 3964F728: 27FF71AC 0A0E5F2F: CC 55 8B EC 83 EC 0C 89 4D F4 C7 45 FC 00 00 00 .U......M..E.... 3964F72C: 00000000 0A0E5F3F: 00 EB 09 8B 45 FC 83 C0 01 89 45 FC 8B 4D F4 8B ....E.....E..M.. 3964F730: 00000000 0A0E5F4F: 55 FC 3B 51 04 73 3C 8D 45 F8 50 8B 4D F4 8B 51 U.;Q.s<.E.P.M..Q 3964F734: 00000000 0A0E5F5F: 08 8B 45 FC 8D 0C 82 51 8B 4D 08 E8 01 02 00 00 ..E....Q.M...... 3964F738: 3964F7D0 0A0E5F6F: 50 8B 4D 0C E8 78 FA FE FF 0F B6 D0 85 D2 74 11 P.M..x........t. 3964F73C: 21915E64 0A0E5F7F: 83 7D 10 00 74 06 8B 45 10 C6 00 01 8B 45 F8 EB .}..t..E.....E.. 3964F740: 3964F800 0A0E5F8F: 10 EB B0 83 7D 10 00 74 06 8B 4D 10 C6 01 00 33 ....}..t..M....3 3964F744: 7553030C 0A0E5F9F: C0 8B E5 5D C2 0C 00 CC CC CC CC CC CC CC CC CC ...]............ 3964F748: 21915E01 0A0E5FAF: CC 55 8B EC 83 EC 0C 89 4D F4 8B 45 F4 8B 48 04 .U......M..E..H. 3964F74C: 75499D57 0A0E5FBF: 89 4D FC 83 7D FC 00 74 3E 8D 55 F8 52 8B 45 FC .M..}..t>.U.R.E.