EurekaLog 6.0.21 Application: -------------------------------------------------------------- 1.1 Start Date : Sun, 13 Nov 2011 11:53:26 -0700 1.2 Name/Description: MediaMonkey.exe - (MediaMonke) 1.3 Version Number : 4.0.0.1459 1.4 Parameters : /elevate 1.5 Compilation Date: Thu, 10 Nov 2011 12:55:23 -0700 1.6 Up Time : 2 days, 9 hours, 5 minutes, 13 seconds Exception: ---------------------------------------------------------------------------------------------------------- 2.1 Date : Tue, 15 Nov 2011 20:58:39 -0700 2.2 Address : 0D5DAC87 2.3 Module Name : UpNp.dll 2.4 Module Version: 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0D5DAC87 in module 'UpNp.dll'. Read of address 00000000. 2.7 ID : 6B49 2.8 Count : 1 2.9 Status : New 2.10 Note : Ludek User: ------------------------------------------------------- 3.1 ID : Administrator 3.2 Name : Lowlander 3.3 Email : mwarning@hotmail.com 3.4 Company : 3.5 Privileges: SeChangeNotifyPrivilege - ON SeAssignPrimaryTokenPrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeImpersonatePrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - OFF SeCreatePagefilePrivilege - OFF SeUndockPrivilege - OFF SeManageVolumePrivilege - OFF SeCreateGlobalPrivilege - ON Active Controls: --------------------------------- 4.1 Form Class : TFMainWindow 4.2 Form Text : MediaMonkey 4.3 Control Class: 4.4 Control Text : Computer: -------------------------------------------------------------------------------- 5.1 Name : PINTERNET 5.2 Total Memory : 8191 Mb 5.3 Free Memory : 4806 Mb 5.4 Total Disk : 1804.42 Gb 5.5 Free Disk : 100.32 Gb 5.6 System Up Time: 3 days, 22 hours, 36 minutes, 44 seconds 5.7 Processor : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz 5.8 Display Mode : 1920 x 1080, 32 bit 5.9 Display DPI : 96 5.10 Video Card : NVIDIA GeForce 8600 GT (driver 6.14.12.6099 - RAM 1024 MB) 5.11 Printer : Microsoft XPS Document Writer (driver 6.0.6001.22204) Operating System: -------------------------------------- 6.1 Type : Microsoft Windows 2003 6.2 Build # : 3790 6.3 Update : Service Pack 2 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------------------------- 7.1 IP Address: 000.000.000.000 - 192.168.123.061 7.2 Submask : 000.000.000.000 - 255.255.255.000 7.3 Gateway : 000.000.000.000 - 192.168.123.254 7.4 DNS 1 : 000.000.000.000 - 192.168.123.254 7.5 DNS 2 : 000.000.000.000 - 000.000.000.000 7.6 DHCP : ON - ON Request: ------------------------------------------------------------------------------------------------------------------------------- 8.1 : DLNA Samsung MPEG2 Playing a MPEG2 file on the Samsung TV failed. SQL/Out of memory error shown, MM using 1.7GB of memory and 1.7GB of VM. Call Stack Information: ------------------------------------------------------------------------------------------------------------ |Address |Module |Unit |Class |Procedure/Method |Line | ------------------------------------------------------------------------------------------------------------ |Running Thread: ID=2692; Priority=??; Class= | |----------------------------------------------------------------------------------------------------------| |7C81BB85|ntdll.dll | | |ExpInterlockedPopEntrySListResume | | |7C829E40|ntdll.dll | | |RtlGetNtGlobalFlags | | |7C829E1F|ntdll.dll | | |RtlGetNtGlobalFlags | | |00A59EA4|MediaMonkey.exe|SQLiteDB.pas |TSQLiteTable |GetEOF |1290[0] | |00A56530|MediaMonkey.exe|DBPlus.pas |TQueryPlus |EOF |228[1] | |00A5B3A8|MediaMonkey.exe|SQLiteDB.pas |TSQLiteTable |GetFields |1794[0] | |008E4E4F|MediaMonkey.exe|Filters.pas |TFiltersManager|GetFilterID |1359[7] | |7C8275A7|ntdll.dll | | |NtQueryVirtualMemory | | |7C82759D|ntdll.dll | | |NtQueryVirtualMemory | | |77E7690D|kernel32.dll | | |UnhandledExceptionFilter | | |7C8283E9|ntdll.dll | | |KiUserExceptionDispatcher | | |7C81BB85|ntdll.dll | | |ExpInterlockedPopEntrySListResume | | |7C829E40|ntdll.dll | | |RtlGetNtGlobalFlags | | |7C829E1F|ntdll.dll | | |RtlGetNtGlobalFlags | | |7C81BB85|ntdll.dll | | |ExpInterlockedPopEntrySListResume | | |7C829E40|ntdll.dll | | |RtlGetNtGlobalFlags | | |7C829E1F|ntdll.dll | | |RtlGetNtGlobalFlags | | |----------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=3828; Priority=0; Class=TODSThread | |----------------------------------------------------------------------------------------------------------| |7C827B97|ntdll.dll | | |NtWaitForSingleObject | | |77E61C96|kernel32.dll | | |WaitForSingleObjectEx | | |77E61C88|kernel32.dll | | |WaitForSingleObject | | |77E61C7B|kernel32.dll | | |WaitForSingleObject | | |0A7EA91A|d_WMDM.dll |Classes.pas |TThread |Synchronize |11550[38] | |0A7EA7E0|d_WMDM.dll |Classes.pas |TThread |Synchronize |11512[0] | |0A7EA9CD|d_WMDM.dll |Classes.pas |TThread |Synchronize |11579[5] | |0A7EA9A4|d_WMDM.dll |Classes.pas |TThread |Synchronize |11574[0] | |0A7EA701|d_WMDM.dll |Classes.pas |TThread |DoTerminate |11303[1] | |0A7EA45A|d_WMDM.dll |Classes.pas | |ThreadProc |11191[15] | |0A7C6720|d_WMDM.dll |System.pas | |ThreadWrapper |13579[33] | |----------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3396; Priority=0; Class=; [Main] | |----------------------------------------------------------------------------------------------------------| |0A87A237|d_WMDM.dll |_d_WMDM.dpr | | |490[0] | |7C81A1AE|ntdll.dll | | |LdrInitializeThunk | | |7C828A2C|ntdll.dll | | |RtlActivateActivationContextUnsafeFast| | |77E418B0|kernel32.dll | | |ReadFile | | |7C82AF4E|ntdll.dll | | |RtlFreeAnsiString | | |7C81A1D0|ntdll.dll | | |RtlEnterCriticalSection | | |7C82D0CE|ntdll.dll | | |LdrLockLoaderLock | | |7C82D104|ntdll.dll | | |LdrLockLoaderLock | | |00404478|MediaMonkey.exe|System.pas | |_FreeMem |3025[1] | |004071F8|MediaMonkey.exe|System.pas | |_LStrClr |13683[12] | |00402B70|MediaMonkey.exe|GETMEM.INC | |InsertMediumBlockIntoBin |867[1] | |00403412|MediaMonkey.exe|GETMEM.INC | |SysFreeMem |2479[204] | |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |00404478|MediaMonkey.exe|System.pas | |_FreeMem |3025[1] | |004071F8|MediaMonkey.exe|System.pas | |_LStrClr |13683[12] | |7C81A21B|ntdll.dll | | |RtlLeaveCriticalSection | | |0040B81C|MediaMonkey.exe|System.pas | |_IntfClear |21921[1] | |004095C8|MediaMonkey.exe|System.pas | |_FinalizeArray |19005[115]| |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |00404478|MediaMonkey.exe|System.pas | |_FreeMem |3025[1] | |004071F8|MediaMonkey.exe|System.pas | |_LStrClr |13683[12] | |00408548|MediaMonkey.exe|System.pas | |_UStrClr |16849[1] | |00409570|MediaMonkey.exe|System.pas | |_FinalizeArray |18958[68] | |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |00404478|MediaMonkey.exe|System.pas | |_FreeMem |3025[1] | |004071F8|MediaMonkey.exe|System.pas | |_LStrClr |13683[12] | |00408548|MediaMonkey.exe|System.pas | |_UStrClr |16849[1] | |00409570|MediaMonkey.exe|System.pas | |_FinalizeArray |18958[68] | |7C81BB85|ntdll.dll | | |ExpInterlockedPopEntrySListResume | | |7C829E40|ntdll.dll | | |RtlGetNtGlobalFlags | | |7C829E1F|ntdll.dll | | |RtlGetNtGlobalFlags | | |004094E4|MediaMonkey.exe|System.pas | |_FinalizeArray |18891[1] | |004094B8|MediaMonkey.exe|System.pas | |_FinalizeRecord |18803[22] | |00406444|MediaMonkey.exe|System.pas |TMonitor |GetFieldAddress |10615[1] | |00406400|MediaMonkey.exe|System.pas |TMonitor |Destroy |10385[1] | |00405E4F|MediaMonkey.exe|System.pas |TObject |CleanupInstance |9569[17] | |0040447C|MediaMonkey.exe|System.pas | |_FreeMem |3030[6] | |00404478|MediaMonkey.exe|System.pas | |_FreeMem |3025[1] | |00405D8C|MediaMonkey.exe|System.pas |TObject |FreeInstance |9439[2] | |0040B81C|MediaMonkey.exe|System.pas | |_IntfClear |21921[1] | |004095C8|MediaMonkey.exe|System.pas | |_FinalizeArray |19005[115]| |004094E4|MediaMonkey.exe|System.pas | |_FinalizeArray |18891[1] | |004094B8|MediaMonkey.exe|System.pas | |_FinalizeRecord |18803[22] | |7C81A21B|ntdll.dll | | |RtlLeaveCriticalSection | | |77E41BF1|kernel32.dll | | |LoadLibraryExW | | |77E41B10|kernel32.dll | | |LoadLibraryExW | | |00910F2E|MediaMonkey.exe|Devices.pas |TDeviceDLL |Create |577[6] | |00910EBC|MediaMonkey.exe|Devices.pas |TDeviceDLL |Create |571[0] | |00917119|MediaMonkey.exe|Devices.pas |TDevices |ScanLibraries |1919[20] | |00916F74|MediaMonkey.exe|Devices.pas |TDevices |ScanLibraries |1899[0] | |007EA4D2|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |DoPlayerInitialization |11791[110]| |007EA014|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |DoPlayerInitialization |11681[0] | |00B83B05|MediaMonkey.exe|MediaMonkey.dpr| | |470[145] | |----------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1324; Priority=0; Class=TWorkThread | |----------------------------------------------------------------------------------------------------------| |7C827B97|ntdll.dll | | |NtWaitForSingleObject | | |77E61C96|kernel32.dll | | |WaitForSingleObjectEx | | |77E61C88|kernel32.dll | | |WaitForSingleObject | | |77E61C7B|kernel32.dll | | |WaitForSingleObject | | |0A87386C|d_WMDM.dll |DeviceWMDM.pas |TWorkThread |Execute |4891[83] | |0A7EA419|d_WMDM.dll |Classes.pas | |ThreadProc |11184[8] | |0A7C6720|d_WMDM.dll |System.pas | |ThreadWrapper |13579[33] | |----------------------------------------------------------------------------------------------------------| |Calling Thread: ID=3396; Priority=0; Class=; [Main] | |----------------------------------------------------------------------------------------------------------| |0A7EA48C|d_WMDM.dll |Classes.pas |TThread |Create |11215[0] | |0A8732FC|d_WMDM.dll |DeviceWMDM.pas | |InitDevice |4767[12] | |0A873240|d_WMDM.dll |DeviceWMDM.pas | |InitDevice |4755[0] | |0A874FF5|d_WMDM.dll |_d_WMDM.dpr | |DEVICE_Init |51[7] | |00911357|MediaMonkey.exe|Devices.pas |TDeviceDLL |Create |642[71] | |00910EBC|MediaMonkey.exe|Devices.pas |TDeviceDLL |Create |571[0] | |00917119|MediaMonkey.exe|Devices.pas |TDevices |ScanLibraries |1919[20] | |00916F74|MediaMonkey.exe|Devices.pas |TDevices |ScanLibraries |1899[0] | |007EA4D2|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |DoPlayerInitialization |11791[110]| |007EA014|MediaMonkey.exe|MP3Datab.pas |TFMainWindow |DoPlayerInitialization |11681[0] | |00B83B05|MediaMonkey.exe|MediaMonkey.dpr| | |470[145] | ------------------------------------------------------------------------------------------------------------ Modules Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|MediaMonkey.exe |MediaMonke |4.0.0.1459 |11864128|2011-11-10 21:02:42|G:\AppInstall\MediaMonkey4 | |017E0000|WMAFunct.dll | | |223296 |2011-11-10 21:03:00|G:\AppInstall\MediaMonkey4 | |01910000|Gain.dll | | |62528 |2011-11-10 21:02:52|G:\AppInstall\MediaMonkey4 | |01D00000|ID3Lib.dll |ID3lib Dynamic Link Library |3.8.3.0 |500800 |2011-11-10 21:02:54|G:\AppInstall\MediaMonkey4 | |01D80000|LMIRfsClientNP.dll |LogMeIn Rfs Client Network Provider |2.1.3.0 |83360 |2011-10-06 09:04:02|E:\WINDOWS\system32 | |01EF0000|wmploc.dll |Windows Media Player |10.0.0.3997 |3371008 |2007-02-17 04:10:22|E:\WINDOWS\system32 | |02450000|inetres.dll |Microsoft Internet Messaging API Resources |6.0.3790.3959 |48128 |2007-02-17 03:19:50|E:\WINDOWS\system32 | |02540000|Lame_enc.dll | | |970816 |2011-11-10 21:03:34|G:\AppInstall\MediaMonkey4 | |02C10000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |156160 |2009-03-08 05:22:38|E:\WINDOWS\system32 | |03440000|Normaliz.dll |Unicode Normalization DLL |6.0.5441.0 |23552 |2009-01-07 19:20:36|E:\WINDOWS\system32 | |036F0000|xpsp2res.dll |Service Pack 2 Messages |5.2.3790.3959 |2897920 |2007-02-17 04:12:28|E:\WINDOWS\system32 | |05200000|sqlite3MM.dll | | |581632 |2011-11-10 20:57:14|G:\AppInstall\MediaMonkey4 | |056D0000|f_aac.dll | | |543296 |2011-11-10 21:03:12|G:\AppInstall\MediaMonkey4\Plugins | |05780000|f_aac_codec.dll | | |581632 |2011-10-13 21:09:08|G:\AppInstall\MediaMonkey4\Plugins | |05820000|f_ape.dll | | |326720 |2011-11-10 21:03:22|G:\AppInstall\MediaMonkey4\Plugins | |059C0000|f_AVI.dll | | |308800 |2011-11-10 21:03:14|G:\AppInstall\MediaMonkey4\Plugins | |05B60000|f_flac.dll | | |154176 |2011-11-10 21:03:24|G:\AppInstall\MediaMonkey4\Plugins | |05CE0000|f_flac_codec.dll | | |410776 |2011-11-10 21:03:14|G:\AppInstall\MediaMonkey4\Plugins | |05D60000|f_FLV.dll | | |261696 |2011-11-10 21:03:14|G:\AppInstall\MediaMonkey4\Plugins | |05EF0000|f_mkv.dll | | |1528896 |2011-11-10 21:03:14|G:\AppInstall\MediaMonkey4\Plugins | |06120000|f_MP4.dll | | |385088 |2011-11-10 21:03:14|G:\AppInstall\MediaMonkey4\Plugins | |062D0000|f_mpc.dll | | |869440 |2011-11-10 21:03:24|G:\AppInstall\MediaMonkey4\Plugins | |06B50000|f_MPG.dll | | |267328 |2011-11-10 21:03:16|G:\AppInstall\MediaMonkey4\Plugins | |06CE0000|f_ogg.dll | | |246848 |2011-11-10 21:03:28|G:\AppInstall\MediaMonkey4\Plugins | |06D30000|f_video.dll | | |708160 |2011-11-10 21:03:16|G:\AppInstall\MediaMonkey4\Plugins | |06E10000|f_wave.dll | | |333888 |2011-11-10 21:03:28|G:\AppInstall\MediaMonkey4\Plugins | |06FB0000|f_WMV.dll | | |367616 |2011-11-10 20:57:48|G:\AppInstall\MediaMonkey4\Plugins | |07410000|dsp_DeFX.dll |DeFX multi effects processor for Winamp 2.x |1.0.0.1 |62976 |2011-10-25 21:56:10|G:\AppInstall\MediaMonkey4\Plugins | |07440000|gen_LastFMScrobbler.dll| | |958464 |2011-10-13 15:58:12|G:\AppInstall\MediaMonkey4\Plugins | |07690000|in_ape.dll |in_APE |3.9.9.0 |200704 |2011-10-25 21:56:10|G:\AppInstall\MediaMonkey4\Plugins | |076E0000|in_mfaudio.dll | | |489536 |2011-11-10 21:03:16|G:\AppInstall\MediaMonkey4\Plugins | |077B0000|in_mpc.dll | | |77824 |2011-10-25 21:56:10|G:\AppInstall\MediaMonkey4\Plugins | |077F0000|in_vorbis.dll | | |164928 |2011-11-10 21:03:30|G:\AppInstall\MediaMonkey4\Plugins | |07820000|in_wav.dll | | |686144 |2011-11-10 21:03:16|G:\AppInstall\MediaMonkey4\Plugins | |07930000|in_wma.dll | | |222272 |2011-11-10 21:03:32|G:\AppInstall\MediaMonkey4\Plugins | |07980000|in_wmp3.dll | | |353424 |2011-11-10 21:03:16|G:\AppInstall\MediaMonkey4\Plugins | |079F0000|out_MMDS.dll | | |886848 |2011-11-10 21:03:18|G:\AppInstall\MediaMonkey4\Plugins | |083C0000|out_WASAPI.dll | | |924224 |2011-11-10 21:03:18|G:\AppInstall\MediaMonkey4\Plugins | |08D90000|out_wave.dll | | |13824 |2011-10-25 21:56:10|G:\AppInstall\MediaMonkey4\Plugins | |08DA0000|Equalize.dll | | |103488 |2011-11-10 21:02:52|G:\AppInstall\MediaMonkey4 | |09560000|d_iPhone.dll | | |1140288 |2011-11-10 21:03:12|G:\AppInstall\MediaMonkey4\Plugins | |09690000|iPhoneCalc.dll | | |671744 |2011-11-10 20:57:48|G:\AppInstall\MediaMonkey4 | |09890000|d_iRiverH.dll | | |399424 |2011-11-10 21:03:18|G:\AppInstall\MediaMonkey4\Plugins | |09900000|d_USBMass1.dll | | |300096 |2011-11-10 21:03:20|G:\AppInstall\MediaMonkey4\Plugins | |09960000|WMAuth.dll | | |132160 |2011-11-10 21:03:02|G:\AppInstall\MediaMonkey4 | |09990000|d_iPod.dll | | |1600064 |2011-11-10 21:03:12|G:\AppInstall\MediaMonkey4\Plugins | |0A7C0000|d_WMDM.dll | | |1006144 |2011-11-10 21:03:12|G:\AppInstall\MediaMonkey4\Plugins | |0B2B0000|msvcp60.dll |Windows NT C++ Runtime Library DLL |7.0.3790.3959 |402944 |2007-02-17 03:36:50|E:\WINDOWS\system32 | |0B8F0000|odbcint.dll |Microsoft Data Access - ODBC Resources |3.526.3959.0 |94208 |2007-02-17 03:42:58|E:\WINDOWS\system32 | |0C1C0000|ws03res.dll |Service Pack Messages |5.2.3790.3959 |812544 |2007-02-17 04:11:36|E:\WINDOWS\system32 | |0D5B0000|UpNp.dll | | |843776 |2011-11-10 20:58:14|G:\AppInstall\MediaMonkey4 | |0ED40000|mp3gain.dll |Replay Gain DLL |1.3.1.0 |62600 |2011-11-10 21:02:58|G:\AppInstall\MediaMonkey4 | |10000000|MMHelper.dll | | |54336 |2011-11-10 21:03:02|G:\AppInstall\MediaMonkey4 | |1B000000|ImgUtil.dll |IE plugin image decoder support DLL |8.0.6001.18702 |34816 |2009-03-08 05:31:38|E:\WINDOWS\system32 | |1B060000|pngfilt.dll |IE PNG plugin image decoder |8.0.6001.18702 |46592 |2009-03-08 05:31:36|E:\WINDOWS\system32 | |3F9A0000|mshtml.dll |Microsoft (R) HTML Viewer |8.0.6001.19154 |5971456 |2011-10-02 20:32:28|E:\WINDOWS\system32 | |40220000|jscript.dll |Microsoft (R) JScript |5.8.6001.23141 |726528 |2011-03-03 16:58:28|E:\WINDOWS\system32 | |403F0000|wininet.dll |Internet Extensions for Win32 |8.0.6001.19131 |916480 |2011-08-22 16:11:06|E:\WINDOWS\system32 | |40A90000|iertutil.dll |Run time utility for Internet Explorer |8.0.6001.19131 |2000384 |2011-08-22 16:11:06|E:\WINDOWS\system32 | |40C80000|ieframe.dll |Internet Explorer |8.0.6001.19131 |11081728|2011-10-03 08:13:12|E:\WINDOWS\system32 | |49EC0000|cewmdm.dll |Windows CE WMDM Service Provider |10.0.3790.3997 |222720 |2007-02-17 02:23:54|E:\WINDOWS\system32 | |4B3C0000|MSCTF.dll |MSCTF Server DLL |5.2.3790.3959 |316416 |2007-02-17 03:34:28|E:\WINDOWS\system32 | |4BF70000|ODBC32.dll |Microsoft Data Access - ODBC Driver Manager |3.526.4795.0 |249856 |2010-11-04 06:05:30|E:\WINDOWS\system32 | |4DC30000|msctfime.ime |Microsoft Text Frame Work Service IME |5.2.3790.3959 |177152 |2007-02-17 03:34:28|E:\WINDOWS\system32 | |4DD60000|gdiplus.dll |Microsoft GDI+ |5.2.6002.22507 |1748992 |2010-10-22 17:34:28|E:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22507_x-ww_C7DAD021 | |4EA20000|WMVCore.DLL |Windows Media Playback/Authoring DLL |10.0.0.4007 |2334720 |2010-04-06 05:59:46|E:\WINDOWS\system32 | |4F580000|wmp.dll |Windows Media Player Core |10.0.0.4008 |6057984 |2010-08-30 03:43:44|E:\WINDOWS\system32 | |57250000|wshom.ocx |Windows Script Host Runtime Library |5.6.0.8832 |98304 |2007-02-17 04:11:46|E:\WINDOWS\system32 | |57380000|msscript.ocx |Microsoft (r) Script Control |1.0.0.8832 |98304 |2007-02-17 03:36:32|E:\WINDOWS\system32 | |58800000|msxml6.dll |MSXML 6.0 SP2 |6.20.2003.0 |1415000 |2009-08-19 18:07:18|E:\WINDOWS\system32 | |58DC0000|wmdmlog.dll |Windows Media Device Manager Logger |10.0.3790.3997 |29184 |2007-02-17 04:09:34|E:\WINDOWS\system32 | |58DD0000|WMASF.DLL |Windows Media ASF DLL |10.0.0.4000 |228864 |2007-10-23 15:32:30|E:\WINDOWS\system32 | |5A060000|wbemdisp.dll |WMI Scripting |5.2.3790.3959 |181760 |2007-02-17 04:08:28|E:\WINDOWS\system32\wbem | |5DEF0000|PSTOREC.DLL |Protected Storage COM interfaces |5.2.3790.3959 |45056 |2007-02-17 03:52:54|E:\WINDOWS\system32 | |5E8D0000|opengl32.dll |OpenGL Client DLL |5.2.3790.3959 |714240 |2007-02-17 03:43:18|E:\WINDOWS\system32 | |5E9A0000|olepro32.dll | |5.2.3790.3959 |84480 |2007-02-17 03:43:16|E:\WINDOWS\system32 | |5F120000|ntlanman.dll |MicrosoftR Lan Manager |5.2.3790.3959 |44032 |2007-02-17 03:42:06|E:\WINDOWS\System32 | |5F270000|hnetcfg.dll |Home Networking Configuration Manager |5.2.3790.3959 |355328 |2007-02-17 03:14:26|E:\WINDOWS\system32 | |5F860000|NETUI1.dll |NT LM UI Common Code - Networking classes |5.2.3790.0 |188416 |2005-11-30 05:00:00|E:\WINDOWS\System32 | |5F8A0000|NETUI0.dll |NT LM UI Common Code - GUI Classes |5.2.3790.0 |77312 |2005-11-30 05:00:00|E:\WINDOWS\System32 | |603B0000|mspmsp.dll |Microsoft Media Device Service Provider |10.0.3790.3997 |171008 |2007-02-17 03:36:18|E:\WINDOWS\system32 | |60BE0000|msidntld.dll |Microsoft Identity Manager |6.0.3790.0 |14848 |2005-11-30 05:00:00|E:\WINDOWS\system32 | |60BF0000|msident.dll |Microsoft Identity Manager |6.0.3790.3959 |49152 |2007-02-17 03:35:30|E:\WINDOWS\system32 | |61880000|oleacc.dll |Active Accessibility Core Component |7.0.3790.4909 |223744 |2011-09-26 11:10:44|E:\WINDOWS\system32 | |68720000|GLU32.dll |OpenGL Utility Library DLL |5.2.3790.3959 |123392 |2007-02-17 03:07:08|E:\WINDOWS\system32 | |6CED0000|directdb.dll |Microsoft Direct Database API |6.0.3790.3959 |88576 |2007-02-17 02:50:24|E:\Program Files\Common Files\System | |6F200000|mswmdm.dll |Windows Media Device Manager Core |10.0.3790.3997 |312320 |2007-02-17 03:36:56|E:\WINDOWS\system32 | |6F350000|urlmon.dll |OLE32 Extensions for Win32 |8.0.6001.19131 |1212416 |2011-08-22 16:11:06|E:\WINDOWS\system32 | |71AE0000|wshtcpip.dll |Windows Sockets Helper DLL |5.2.3790.3959 |18944 |2007-02-17 04:11:46|E:\WINDOWS\System32 | |71B20000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |5.2.3790.4318 |256000 |2008-06-20 11:32:38|E:\WINDOWS\system32 | |71B70000|uxtheme.dll |Microsoft UxTheme Library |6.0.3790.3959 |206848 |2007-02-17 04:07:46|E:\WINDOWS\system32 | |71BB0000|wsock32.dll |Windows Socket 32-Bit DLL |5.2.3790.0 |22528 |2005-11-30 05:00:00|E:\WINDOWS\system32 | |71BD0000|mpr.dll |Multiple Provider Router DLL |5.2.3790.3959 |57856 |2007-02-17 03:33:32|E:\WINDOWS\system32 | |71BF0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.2.3790.3959 |19456 |2007-02-17 04:11:36|E:\WINDOWS\system32 | |71C00000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.2.3790.3959 |83456 |2007-02-17 04:11:36|E:\WINDOWS\system32 | |71C40000|NETAPI32.dll |Net Win32 API DLL |5.2.3790.4392 |345088 |2008-10-16 15:18:44|E:\WINDOWS\system32 | |722F0000|sensapi.dll |SENS Connectivity API DLL |5.2.3790.3959 |6656 |2007-02-17 03:58:56|E:\WINDOWS\system32 | |72470000|mydocs.dll |My Documents Folder UI |6.0.3790.3959 |92160 |2007-02-17 03:37:12|E:\WINDOWS\system32 | |72D60000|msacm32.drv |Microsoft Sound Mapper |5.2.3790.3959 |22528 |2007-02-17 03:34:08|E:\WINDOWS\system32 | |72D70000|wdmaud.drv |WDM Audio driver mapper |5.2.3790.3959 |23552 |2007-02-17 05:08:34|E:\WINDOWS\system32 | |72E50000|msxml3.dll |MSXML 3.0 SP10 |8.100.1051.0 |1187840 |2010-06-09 01:11:58|E:\WINDOWS\system32 | |73070000|winspool.drv |Windows Spooler Driver |5.2.3790.3959 |150528 |2007-02-17 04:09:14|E:\WINDOWS\system32 | |73460000|vbscript.dll |Microsoft (R) VBScript |5.8.6001.23141 |420864 |2011-03-03 16:58:28|E:\WINDOWS\system32 | |736F0000|scrrun.dll |Microsoft (r) Script Runtime |5.6.0.8832 |151552 |2007-02-17 03:58:40|E:\WINDOWS\system32 | |73860000|DDRAW.dll |Microsoft DirectDraw |5.3.3790.3959 |276480 |2007-02-17 02:49:26|E:\WINDOWS\system32 | |73B30000|DCIMAN32.dll |DCI Manager |5.2.3790.0 |8704 |2005-11-30 05:00:00|E:\WINDOWS\system32 | |73E20000|KsUser.dll |User CSA Library |5.3.3790.3959 |4096 |2007-02-17 04:30:54|E:\WINDOWS\system32 | |73E50000|dsound.dll |DirectSound |5.3.3790.3959 |360960 |2007-02-17 02:51:38|E:\WINDOWS\system32 | |73EB0000|MFC42.dll |MFCDLL Shared Library - Retail Version |6.6.8064.0 |1163264 |2011-03-11 00:56:32|E:\WINDOWS\system32 | |744C0000|msimtf.dll |Active IMM Server DLL |5.2.3790.3959 |162816 |2007-02-17 03:35:34|E:\WINDOWS\system32 | |74540000|MLANG.dll |Multi Language Support DLL |6.0.3790.3959 |589824 |2007-02-17 03:32:54|E:\WINDOWS\system32 | |748D0000|cfgmgr32.dll |Configuration Manager Forwarder DLL |5.2.3790.0 |17920 |2005-11-30 05:00:00|E:\WINDOWS\system32 | |74CE0000|wbemsvc.dll |WMI |5.2.3790.0 |43520 |2005-11-30 05:00:00|E:\WINDOWS\system32\wbem | |74CF0000|wbemprox.dll |WMI |5.2.3790.3959 |20992 |2007-02-17 04:08:30|E:\WINDOWS\system32\wbem | |74E60000|wmiutils.dll |WMI |5.2.3790.3959 |95744 |2007-02-17 04:09:54|E:\WINDOWS\system32\wbem | |750F0000|wbemcomn.dll |WMI |5.2.3790.3959 |225792 |2007-02-17 04:08:26|E:\WINDOWS\system32\wbem | |75360000|CRYPTUI.dll |Microsoft Trust UI Provider |5.131.3790.3959 |506880 |2007-02-17 02:35:08|E:\WINDOWS\system32 | |75490000|USP10.dll |Uniscribe Unicode script processor |1.422.3790.4695 |379904 |2010-04-20 00:10:20|E:\WINDOWS\system32 | |75550000|fastprox.dll |WMI |5.2.3790.4455 |483840 |2009-02-09 04:02:58|E:\WINDOWS\system32\wbem | |75CB0000|INETCOMM.dll |Microsoft Internet Messaging API |6.0.3790.4913 |695808 |2011-10-10 09:27:04|E:\WINDOWS\system32 | |75DA0000|SXS.DLL |Fusion 2.5 |5.2.3790.3959 |762368 |2007-02-17 04:04:28|E:\WINDOWS\system32 | |75E60000|apphelp.dll |Application Compatibility Client Library |5.2.3790.3959 |148992 |2007-02-17 02:17:04|E:\WINDOWS\system32 | |75E90000|drprov.dll |Microsoft Terminal Server Network Provider |5.2.3790.3959 |14336 |2007-02-17 02:51:18|E:\WINDOWS\System32 | |75EA0000|davclnt.dll |Web DAV Client DLL |5.2.3790.3959 |26112 |2007-02-17 02:38:36|E:\WINDOWS\System32 | |75FC0000|MSVFW32.dll |Microsoft Video for Windows DLL |5.2.3790.3959 |119808 |2007-02-17 03:36:50|E:\WINDOWS\system32 | |76190000|MSASN1.dll |ASN.1 Runtime APIs |5.2.3790.4584 |58880 |2009-09-04 14:28:00|E:\WINDOWS\system32 | |761B0000|CRYPT32.dll |Crypto API32 |5.131.3790.4905 |595456 |2011-09-08 04:18:46|E:\WINDOWS\system32 | |76280000|msimg32.dll |GDIEXT Client DLL |5.2.3790.0 |4608 |2005-11-30 05:00:00|E:\WINDOWS\system32 | |76290000|imm32.dll |Windows IMM32 API Client DLL |5.2.3790.3959 |110592 |2007-02-17 03:19:36|E:\WINDOWS\system32 | |762B0000|comdlg32.dll |Common Dialogs DLL |6.0.3790.3959 |273408 |2007-02-17 02:31:40|E:\WINDOWS\system32 | |764D0000|MSOERT2.dll |Microsoft Outlook Express RT Lib |6.0.3790.3959 |108544 |2007-02-17 03:36:12|E:\WINDOWS\system32 | |766E0000|cryptdll.dll |Cryptography Manager |5.2.3790.3959 |33280 |2007-02-17 02:35:06|E:\WINDOWS\system32 | |766F0000|NTDSAPI.dll |NT5DS |5.2.3790.3959 |71680 |2007-02-17 03:41:48|E:\WINDOWS\system32 | |768F0000|ntshrui.dll |Shell extensions for sharing |6.0.3790.3959 |142848 |2007-02-17 03:42:32|E:\WINDOWS\system32 | |76920000|USERENV.dll |Userenv |5.2.3790.3959 |780800 |2007-02-17 04:07:44|E:\WINDOWS\system32 | |76A80000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.2 |62976 |2009-07-17 11:46:28|E:\WINDOWS\system32 | |76AA0000|winmm.dll |MCI API DLL |5.2.3790.3959 |174080 |2007-02-17 04:09:08|E:\WINDOWS\system32 | |76B70000|PSAPI.DLL |Process Status Helper |5.2.3790.3959 |20480 |2007-02-17 03:52:44|E:\WINDOWS\system32 | |76B80000|credui.dll |Credential Manager User Interface |5.2.3790.3959 |165888 |2007-02-17 02:34:58|E:\WINDOWS\system32 | |76BB0000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.3790.4642 |169472 |2009-12-23 23:59:38|E:\WINDOWS\system32 | |76C10000|imagehlp.dll |Windows NT Image Helper |5.2.3790.3959 |147968 |2007-02-18 00:29:54|E:\WINDOWS\system32 | |76C90000|msv1_0.dll |Microsoft Authentication Package v1.0 |5.2.3790.4587 |146432 |2009-09-11 03:38:18|E:\WINDOWS\system32 | |76CD0000|MPRAPI.dll |Windows NT MP Router Administration DLL |5.2.3790.3959 |90624 |2007-02-17 03:33:34|E:\WINDOWS\system32 | |76CF0000|iphlpapi.dll |IP Helper API |5.2.3790.3959 |95232 |2007-02-17 03:20:22|E:\WINDOWS\system32 | |76DC0000|adsldpc.dll |ADs LDAP Provider C DLL |5.2.3790.3959 |153088 |2007-02-17 02:16:32|E:\WINDOWS\system32 | |76DF0000|ACTIVEDS.dll |ADs Router Layer DLL |5.2.3790.3959 |200192 |2007-02-17 02:16:16|E:\WINDOWS\system32 | |76E30000|rtutils.dll |Routing Utilities |5.2.3790.3959 |34816 |2007-02-17 03:56:00|E:\WINDOWS\system32 | |76E40000|rasman.dll |Remote Access Connection Manager |5.2.3790.3959 |62976 |2007-02-17 03:55:12|E:\WINDOWS\system32 | |76E60000|tapi32.dll |MicrosoftR Windows(TM) Telephony API Client DLL |5.2.3790.3959 |183808 |2007-02-17 04:04:42|E:\WINDOWS\system32 | |76E90000|RASAPI32.dll |Remote Access API |5.2.3790.3959 |246272 |2007-02-17 03:55:10|E:\WINDOWS\system32 | |76ED0000|DNSAPI.dll |DNS Client API DLL |5.2.3790.4840 |161792 |2011-03-03 00:06:04|E:\WINDOWS\system32 | |76F10000|WLDAP32.dll |Win32 LDAP API DLL |5.2.3790.3959 |179712 |2007-02-17 04:09:28|E:\WINDOWS\system32 | |76F50000|Secur32.dll |Security Support Provider Interface |5.2.3790.4530 |65536 |2009-06-15 23:59:00|E:\WINDOWS\system32 | |76F70000|winrnr.dll |LDAP RnR Provider DLL |5.2.3790.3959 |17408 |2007-02-17 04:09:14|E:\WINDOWS\System32 | |76F80000|rasadhlp.dll |Remote Access AutoDial Helper |5.2.3790.3959 |7680 |2007-02-17 03:55:08|E:\WINDOWS\system32 | |77010000|COMRes.dll |COM+ Resources |2001.12.4720.3959|797184 |2007-02-17 02:31:50|E:\WINDOWS\system32 | |770E0000|setupapi.dll |Windows Setup API |5.2.3790.3959 |1069568 |2007-02-17 03:59:06|E:\WINDOWS\system32 | |77380000|USER32.dll |Windows USER API Client DLL |5.2.3790.4033 |583680 |2007-03-01 23:38:46|E:\WINDOWS\system32 | |77420000|comctl32.dll |User Experience Controls Library |6.0.3790.4770 |1051648 |2010-09-07 05:08:32|E:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.4770_x-ww_05FDF087| |77670000|ole32.dll |Microsoft OLE for Windows |5.2.3790.4750 |1267712 |2010-07-26 03:01:18|E:\WINDOWS\system32 | |777B0000|CLBCatQ.DLL |COM+ Configuration Catalog |2001.12.4720.3959|510976 |2007-02-17 02:30:58|E:\WINDOWS\system32 | |77980000|shdocvw.dll |Shell Doc Object and Control Library |6.0.3790.4795 |1519616 |2010-11-05 10:53:20|E:\WINDOWS\system32 | |77B60000|midimap.dll |Microsoft MIDI Mapper |5.2.3790.3959 |18944 |2007-02-17 03:32:36|E:\WINDOWS\system32 | |77B70000|MSACM32.dll |Microsoft ACM Audio Filter |5.2.3790.3959 |71168 |2007-02-17 03:34:08|E:\WINDOWS\system32 | |77B90000|version.dll |Version Checking and File Installation Libraries|5.2.3790.3959 |18432 |2007-02-17 04:07:52|E:\WINDOWS\system32 | |77BA0000|msvcrt.dll |Windows NT CRT DLL |7.0.3790.3959 |348672 |2007-02-17 03:36:50|E:\WINDOWS\system32 | |77C00000|GDI32.dll |GDI Client DLL |5.2.3790.4396 |284672 |2008-10-23 04:43:54|E:\WINDOWS\system32 | |77C50000|RPCRT4.dll |Remote Procedure Call Runtime |5.2.3790.4759 |647168 |2010-08-18 02:27:26|E:\WINDOWS\system32 | |77E40000|kernel32.dll |Windows NT BASE API Client DLL |5.2.3790.4480 |1038336 |2009-03-21 10:08:28|E:\WINDOWS\system32 | |7C800000|ntdll.dll |NT Layer DLL |5.2.3790.4789 |777216 |2010-10-22 05:27:14|E:\WINDOWS\system32 | |7C8D0000|shell32.dll |Windows Shell Common Dll |6.0.3790.4822 |8361984 |2011-01-21 14:59:50|E:\WINDOWS\system32 | |7D0E0000|oleaut32.dll | |5.2.3790.4807 |553984 |2010-12-20 12:03:08|E:\WINDOWS\system32 | |7D180000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.3790.4603 |320000 |2009-10-15 13:19:54|E:\WINDOWS\system32 | |7D1E0000|ADVAPI32.dll |Advanced Windows 32 Base API |5.2.3790.4555 |619008 |2009-07-18 08:58:24|E:\WINDOWS\system32 | |7E020000|SAMLIB.dll |SAM Library DLL |5.2.3790.3959 |47104 |2007-02-17 03:58:04|E:\WINDOWS\system32 | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority|Threads|Path | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |4 |System | | |258048 |Normal |87 | | |184 |plugin-container.exe|Plugin Container for Firefox |8.0.0.4325 |48717824 |Normal |3 |G:\AppInstall\Mozilla Firefox | |332 |smss.exe | | |528384 |Normal |3 |\SystemRoot\System32 | |360 |LogMeIn.exe |LogMeIn |4.1.0.1560 |14868480 |Normal |23 |G:\AppInstall\LogMeIn\x86 | |404 |winlogon.exe | | |5586944 |High |21 |E:\WINDOWS\system32 | |452 |services.exe |Services and Controller app |5.2.3790.4455 |4423680 |Normal |16 |E:\WINDOWS\system32 | |464 |lsass.exe |LSA Shell |5.2.3790.0 |11976704 |Normal |31 |E:\WINDOWS\system32 | |644 |nvsvc32.exe |NVIDIA Driver Helper Service, Version 260.99|4.0.1382.6099 |5427200 |Normal |4 |E:\WINDOWS\system32 | |660 |MediaMonkey.exe |MediaMonke |4.0.0.1459 |1817776128|Normal |56 |G:\AppInstall\MediaMonkey4 | |684 |svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |3121152 |Normal |5 |E:\WINDOWS\system32 | |860 |svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |41275392 |Normal |64 |E:\WINDOWS\System32 | |1020|spoolsv.exe |Spooler SubSystem App |5.2.3790.4759 |5500928 |Normal |13 |E:\WINDOWS\system32 | |1212|svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |2347008 |Normal |2 |E:\WINDOWS\System32 | |1224|w3wp.exe |IIS Worker Process |6.0.3790.3959 |22650880 |Normal |33 |e:\windows\system32\inetsrv | |1316|inetinfo.exe |Internet Information Services |6.0.3790.3959 |9297920 |Normal |11 |E:\WINDOWS\system32\inetsrv | |1440|LMIGuardianSvc.exe |LMIGuardianSvc |10.1.0.1586 |5177344 |Normal |7 |G:\AppInstall\LogMeIn\x86 | |1476|RaMaint.exe |LogMeIn Maintenance Service |4.1.0.1890 |4014080 |Normal |2 |G:\AppInstall\LogMeIn\x86 | |1600|notepad.exe |Notepad |5.2.3790.3959 |1986560 |Normal |1 |E:\WINDOWS\system32 | |2084|sqlwriter.exe |SQL Server VSS Writer |2009.100.1600.1|3895296 |Normal |3 |E:\Program Files\Microsoft SQL Server\90\Shared| |2236|firefox.exe |Firefox |8.0.0.4325 |322244608 |Normal |40 |G:\AppInstall\Mozilla Firefox | |2252|DynUpSvc.exe |DynDNSR Updater Service |4.1.6.0 |5726208 |Normal |7 |G:\AppInstall\DynDNS Updater | |2392|svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |8544256 |Normal |15 |E:\WINDOWS\System32 | |2720|Dbgview.exe |DebugView |4.76.0.0 |337580032 |Normal |3 |G:\AppInstall\DBGView | |2804|svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |4321280 |Normal |16 |E:\WINDOWS\System32 | |2832|svchost.exe |Generic Host Process for Win32 Services |5.2.3790.3959 |4276224 |Normal |17 |E:\WINDOWS\System32 | |3064|taskmgr.exe |Windows TaskManager |5.2.3790.3959 |5824512 |High |3 |E:\WINDOWS\system32 | |3464|Explorer.EXE |Windows Explorer |6.0.3790.3959 |37179392 |Normal |17 |E:\WINDOWS | |3536|RUNDLL32.EXE |Run a DLL as an App |5.2.3790.3959 |5160960 |Normal |1 |E:\WINDOWS\system32 | |3564|smax4pnp.exe |SMax4PNP |6.0.6000.81 |5787648 |Normal |3 |E:\Program Files\Analog Devices\Core | |3580|Smax4.exe |Audio Control Panel |5.2.0.30 |4108288 |Normal |2 |E:\Program Files\Analog Devices\SoundMAX | |3612|LogMeInSystray.exe |LogMeIn Desktop Application |3.0.0.596 |7032832 |Normal |4 |G:\AppInstall\LogMeIn\x86 | |3664|ClamTray.exe |ClamWin Antivirus |0.97.3.0 |19697664 |Normal |5 |G:\AppInstall\ClamWin\bin | |3672|ctfmon.exe |CTF Loader |5.2.3790.3959 |4317184 |Normal |1 |E:\WINDOWS\system32 | |3684|DynTray.exe |DynDNSR Notification Icon |4.1.6.0 |548864 |Normal |2 |G:\AppInstall\DynDNS Updater | |4748|FSCapture.exe | | |671744 |Normal |7 |G:\AppInstall\FastStone Capture | |5728|%APPNAME%.EXE | | |241549312 |Low |15 |G:\AppInstall\DVD2VOB | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------- 0D5DAC69 mov ecx, [ebp-$20] 0D5DAC6C mov [ebp-$10], ecx 0D5DAC6F push $00000800 ; ''... 0D5DAC74 mov ecx, [ebp+$10] 0D5DAC77 call -$0002468C 0D5DAC7C mov edx, [ebp+$10] 0D5DAC7F push edx 0D5DAC80 mov eax, [ebp-$10] 0D5DAC83 push eax 0D5DAC84 mov ecx, [ebp+$08] 0D5DAC87 mov edx, [ecx] ; <-- EXCEPTION 0D5DAC89 mov ecx, [ebp+$08] 0D5DAC8C mov eax, [edx+$08] 0D5DAC8F call eax 0D5DAC91 mov [ebp-$18], eax 0D5DAC94 mov dword ptr [ebp-$04], $FFFFFFFF ; ''... Registers: ----------------------------- EAX: 00000000 EDI: 00000000 EBX: 00000000 ESI: 00000000 ECX: 00000000 ESP: 00000000 EDX: 00000000 EIP: 00000000 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 1B16F214: 1B16F4A4 0D5DAC87: 8B 11 8B 4D 08 8B 42 08 FF D0 89 45 E8 C7 45 FC ...M..B....E..E. 1B16F218: 0A84D805 0D5DAC97: FF FF FF FF 8D 4D 0C E8 1D 70 FD FF 8B 45 E8 8B .....M...p...E.. 1B16F21C: 1B16F23C 0D5DACA7: 4D F4 64 89 0D 00 00 00 00 59 8B E5 5D C3 CC CC M.d......Y..]... 1B16F220: 1B16F4DC 0D5DACB7: CC CC CC CC CC CC CC CC CC 55 8B EC 6A FF 68 9E .........U..j.h. 1B16F224: 017FFF16 0D5DACC7: BC 62 0D 64 A1 00 00 00 00 50 81 EC 94 00 00 00 .b.d.....P...... 1B16F228: 0AA34E34 0D5DACD7: A1 20 42 67 0D 33 C5 50 8D 45 F4 64 A3 00 00 00 . Bg.3.P.E.d.... 1B16F22C: 0A9B71AC 0D5DACE7: 00 8D 4D D0 E8 10 63 FD FF C7 45 FC 00 00 00 00 ..M...c...E..... 1B16F230: 00000000 0D5DACF7: C7 45 D8 00 00 00 00 C7 45 D4 00 00 00 00 C7 45 .E......E......E 1B16F234: 00000000 0D5DAD07: DC 00 00 00 00 6A 01 8D 4D E0 E8 DA C9 04 00 C6 .....j..M....... 1B16F238: 00000000 0D5DAD17: 45 FC 01 83 3D 94 10 66 0D 00 75 13 A1 98 10 66 E...=..f..u....f 1B16F23C: 1B16F25C 0D5DAD27: 0D 50 E8 72 BC FE FF 83 C4 04 A3 94 10 66 0D 83 .P.r.........f.. 1B16F240: 01D39A22 0D5DAD37: 3D 94 10 66 0D 00 74 3A 8B 0D 94 10 66 0D E8 06 =..f..t:....f... 1B16F244: 1B16F4DC 0D5DAD47: 73 FE FF 3D 2C 01 00 00 7F 28 68 3C 90 63 0D 68 s..=,....(h<.c.h 1B16F248: 01D399E4 0D5DAD57: 4C 90 63 0D 68 44 01 00 00 68 60 90 63 0D 68 2C L.c.hD...h`.c.h, 1B16F24C: 017FFF7D 0D5DAD67: 01 00 00 8B 0D 94 10 66 0D 51 E8 FA A3 FE FF 83 .......f.Q...... 1B16F250: 1B16F4DC 0D5DAD77: C4 18 33 D2 75 9D 6A 00 8D 45 D4 50 8B 4D 08 51 ..3.u.j..E.P.M.