date/time

: 2011-03-03, 20:32:58, 739ms

computer name
: PCACER
user name
: gevito
registered owner : Microsoft / Microsoft
operating system : Windows NT New x64 build 7600
system language : Bulgarian
system up time
: 6 hours 3 minutes
program up time : 982 milliseconds
processors
: 2x Celeron(R) Dual-Core CPU T3500 @ 2.10GHz
physical memory : 755/1978 MB (free/total)
free disk space : (C:) 227.25 GB
display mode
: 1366x768, 32 bit
process id
: $14f4
allocated memory : 35.46 MB
command line
: "C:\Users\gevito\Desktop\bsplayer.exe" "C:\Users\gevito\Desk
top\muzika\ ( 2011) + \23. feat. DJ G - .m
executable
: bsplayer.exe
exec. date/time : 2011-01-07 22:36
version
: 2.4.1.1003
compiled with
: Delphi 7
madExcept version : 3.0h
callstack crc
: $14357b33, $8048f6da, $8048f6da
count
: 8
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 00692452 in module 'bsplayer.exe
'. Read of address 00000000.
main thread ($153c):
00692452 +0052 bsplayer.exe
006931fa +0b12 bsplayer.exe
00696429 +0885 bsplayer.exe
00649374 +0d38 bsplayer.exe
00643fb4 +02c8 bsplayer.exe
004cb23f +01df bsplayer.exe
004cee0e +018e bsplayer.exe
004df445 +0421 bsplayer.exe
004ce9e0 +0034 bsplayer.exe
0047cd78 +0014 bsplayer.exe
7512810d +000a USER32.dll
004e59db +0083 bsplayer.exe
004e5a12 +000a bsplayer.exe
004e5c32 +0096 bsplayer.exe
006b1af2 +1306 bsplayer.exe
74f43675 +0010 kernel32.dll

rendereu
rendereu
rendereu
mbsplayu
mbsplayu
Controls
Controls
Forms
Controls
Classes

10608
11039
12429
3793
1188
4667
6364

+2
+353
+174
+334
+49
+53
+33

bsRender.AddBSplitter
bsRender.BuildGraph
bsRender.LoadFile
TMBSPlayer.OpenFile
TMBSPlayer.msgDisp
TControl.WndProc
TWinControl.WndProc
TCustomForm.WndProc
6259 +3 TWinControl.MainWndProc
31881 +0 StdWndProc
DispatchMessageA
Forms
TApplication.ProcessMessage
Forms
TApplication.HandleMessage
Forms
TApplication.Run
bsplayer 627 +405 initialization
BaseThreadInitThunk

thread $304:
74f43675 +10 kernel32.dll BaseThreadInitThunk
thread $1118:
74f43675 +10 kernel32.dll BaseThreadInitThunk
thread $1280:
74f43675 +10 kernel32.dll BaseThreadInitThunk
thread $e3c:
74f43675 +10 kernel32.dll BaseThreadInitThunk
thread $f14:
74f43675 +10 kernel32.dll BaseThreadInitThunk

thread $8d4:
75127eb8 +26 USER32.dll
GetMessageW
74f43675 +10 kernel32.dll BaseThreadInitThunk
modules:
00400000 bsplayer.exe 2.4.1.1003
C:\Users\gevito\Desktop
10000000 saHook.dll
3.3.0.176
c:\PROGRA~2\mcafee\SITEAD~1
681e0000 quartz.dll
6.6.7600.16490
C:\Windows\SysWOW64
6ad60000 DCIMAN32.dll 6.1.7600.16385
C:\Windows\system32
6bbf0000 ddraw.dll
6.1.7600.16385
C:\Windows\system32
71ca0000 comctl32.dll 6.10.7600.16661
C:\Windows\WinSxS\x86_microsoft.windo
ws.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd
72130000 olepro32.dll 6.1.7600.16385
C:\Windows\system32
72500000 ntmarta.dll
6.1.7600.16385
C:\Windows\system32
729b0000 dwmapi.dll
6.1.7600.16385
C:\Windows\system32
729e0000 uxtheme.dll
6.1.7600.16385
C:\Windows\system32
72b80000 version.dll
6.1.7600.16385
C:\Windows\system32
72ca0000 wsock32.dll
6.1.7600.16385
C:\Windows\system32
733d0000 winspool.drv 6.1.7600.16385
C:\Windows\system32
73530000 winmm.dll
6.1.7600.16385
C:\Windows\system32
735a0000 wtsapi32.dll 6.1.7600.16385
C:\Windows\system32
74320000 propsys.dll
7.0.7600.16385
C:\Windows\system32
74740000 WINSTA.dll
6.1.7600.16385
C:\Windows\system32
74c70000 CRYPTBASE.dll 6.1.7600.16385
C:\Windows\syswow64
74c80000 SspiCli.dll
6.1.7600.16484
C:\Windows\syswow64
74ce0000 NSI.dll
6.1.7600.16385
C:\Windows\syswow64
74cf0000 LPK.dll
6.1.7600.16385
C:\Windows\syswow64
74d00000 GDI32.dll
6.1.7600.16385
C:\Windows\syswow64
74d90000 sechost.dll
6.1.7600.16385
C:\Windows\SysWOW64
74db0000 msvcrt.dll
7.0.7600.16385
C:\Windows\syswow64
74e90000 advapi32.dll 6.1.7600.16385
C:\Windows\syswow64
74f30000 kernel32.dll 6.1.7600.16385
C:\Windows\syswow64
750d0000 WS2_32.dll
6.1.7600.16385
C:\Windows\syswow64
75110000 USER32.dll
6.1.7600.16385
C:\Windows\syswow64
75210000 SHLWAPI.dll
6.1.7600.16385
C:\Windows\syswow64
75270000 oleaut32.dll 6.1.7600.16567
C:\Windows\syswow64
75300000 DEVOBJ.dll
6.1.7600.16385
C:\Windows\syswow64
75350000 CLBCatQ.DLL
2001.12.8530.16385 C:\Windows\syswow64
753e0000 SETUPAPI.dll 6.1.7600.16385
C:\Windows\syswow64
75590000 WLDAP32.dll
6.1.7600.16385
C:\Windows\syswow64
755e0000 ole32.dll
6.1.7600.16624
C:\Windows\syswow64
75740000 CFGMGR32.dll 6.1.7600.16385
C:\Windows\syswow64
75770000 MSCTF.dll
6.1.7600.16385
C:\Windows\syswow64
75960000 SHELL32.dll
6.1.7600.16644
C:\Windows\syswow64
765b0000 IMM32.DLL
6.1.7600.16385
C:\Windows\system32
76610000 KERNELBASE.dll 6.1.7600.16385
C:\Windows\syswow64
76660000 RPCRT4.dll
6.1.7600.16385
C:\Windows\syswow64
76a90000 comdlg32.dll 6.1.7600.16385
C:\Windows\syswow64
76c70000 USP10.dll
1.626.7600.16385 C:\Windows\syswow64
77110000 ntdll.dll
6.1.7600.16695
C:\Windows\SysWOW64
hardware:
+ Batteries
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft Composite Battery
+ Computer
- ACPI x64-based PC
+ Disk drives

- Hitachi HTS545032B9A300
+ Display adapters
- Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.1892)
- Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.1892)
+ DVD/CD-ROM drives
- Optiarc DVD RW AD-7580S
+ IDE ATA/ATAPI controllers
- Intel(R) ICH9M-E/M SATA AHCI Controller (driver 9.6.2.1001)
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- Synaptics PS/2 Port TouchPad (driver 14.0.19.0)
+ Monitors
- Generic PnP Monitor
+ Network adapters
- Broadcom NetLink (TM) Gigabit Ethernet (driver 14.0.1.0)
- Broadcom 802.11n (driver 5.100.249.2)
+ Processors
- Celeron(R) Dual-Core CPU
T3500 @ 2.10GHz
- Celeron(R) Dual-Core CPU
T3500 @ 2.10GHz
+ Sound, video and game controllers
- Intel(R) High Definition Audio HDMI (driver 6.10.1.2077)
- Realtek High Definition Audio (driver 6.0.1.6151)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Lid
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High precision event timer
- Intel(R) 82801 PCI Bridge - 2448
- Intel(R) 82802 Firmware Hub Device
- Intel(R) ICH9 Family PCI Express Root Port 1 - 2940
- Intel(R) ICH9 Family PCI Express Root Port 2 - 2942
- Intel(R) ICH9 Family PCI Express Root Port 3 - 2944
- Intel(R) ICH9 Family SMBus Controller - 2930
- Intel(R) ICH9M LPC Interface Controller - 2919
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Microsoft Windows Management Interface for ACPI
- Microsoft Windows Management Interface for ACPI
- Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40
- Motherboard resources
- Numeric data processor
- PCI bus
- Plug and Play Software Device Enumerator
- Programmable interrupt controller

- System CMOS/real time clock

- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB Universal
- Intel(R) ICH9 Family USB2 Enhanced
- Intel(R) ICH9 Family USB2 Enhanced
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
cpu
eax
ebx
ecx
edx
esi
edi
eip
esp
ebp

Host
Host
Host
Host
Host
Host
Host
Host

Controller
Controller
Controller
Controller
Controller
Controller
Controller
Controller

2934
2935
2936
2937
2938
2939
293A
293C

registers:
= 00000000
= 00000000
= 028fc678
= 00000000
= 00ae0fd5
= 00000000
= 00692452
= 0018ed94
= 0018edc4

stack dump:
0018ed94 00
0018eda4 cc
0018edb4 00
0018edc4 b4
0018edd4 b4
0018ede4 00
0018edf4 00
0018ee04 00
0018ee14 00
0018ee24 00
0018ee34 00
0018ee44 55
0018ee54 76
0018ee64 6b
0018ee74 69
0018ee84 31
0018ee94 45
0018eea4 33
0018eeb4 00
0018eec4 00

00
4c
00
f6
f6
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

disassembling:
[...]
00692447
00692448
0069244d
0069244e

00
40
00
18
18
00
00
00
00
00
00
73
69
74
6b
29
41
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

push
mov
push
mov

2c
c4
00
ff
00
00
00
00
00
00
00
65
74
6f
61
7e
54
00
00
00

7f
ed
00
31
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

6c
18
00
69
00
00
00
00
00
00
00
72
6f
70
5c
31
7e
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

b0
c8
01
bc
d5
00
00
00
00
00
00
73
5c
5c
28
5c
31
00
00
00

eax
eax, [$6c8c0c]
eax
eax, [ebp-$10]

ed
fc
00
f6
0f
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

18
18
00
18
ae
00
00
00
00
00
43
5c
44
6d
32
32
2e
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

cc
00
e0
cc
c8
00
00
00
00
00
3a
67
65
75
30
33
4d
00
00
00

ed
00
d2
4c
fc
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

18
00
90
40
18
00
00
00
00
00
5c
65
73
7a
31
46
50
00
00
00

00
00
02
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

....,.l.........
.L@.............
................
.....1i......L@.
................
................
................
................
................
................
..........C.:.\.
U.s.e.r.s.\.g.e.
v.i.t.o.\.D.e.s.
k.t.o.p.\.m.u.z.
i.k.a.\.(.2.0.1.
1.).~.1.\.2.3.F.
E.A.T.~.1...M.P.
3...............
................
................

00692451
push
00692452
> mov
00692454
call
00692456 10609 mov
00692459
push
0069245a
push
0069245c
mov
[...]
date/time
computer name
user name
registered owner
operating system
system language
system up time
program up time
processors
physical memory
free disk space
display mode
process id
allocated memory
executable
exec. date/time
version
compiled with
madExcept version
callstack crc
count
exception number
exception class
exception message

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

eax
eax, [eax]
dword ptr [eax]
eax, [ebp-8]
eax
1
eax, [ebp-$14]

2011-04-16, 21:58:29, 671ms

PCACER
gevito
Microsoft / Microsoft
Windows NT New x64 build 7600
Bulgarian
1 hour 44 minutes
1 minute 25 seconds
2x Celeron(R) Dual-Core CPU T3500 @ 2.10GHz
1104/1978 MB (free/total)
(C:) 215.30 GB
1366x768, 32 bit
$1524
54.41 MB
bsplayer.exe
2011-01-07 23:36
2.4.1.1003
Delphi 7
3.0h
$efa914b6, $90919f45, $90919f45
21
1
EInOutError
File not found.

main thread ($668):

006aab72 +007a bsplayer.exe
006aaefe +00ce bsplayer.exe
006912ba +0266 bsplayer.exe
006934a2 +0dba bsplayer.exe
00696429 +0885 bsplayer.exe
00649374 +0d38 bsplayer.exe
00643fb4 +02c8 bsplayer.exe
004cb23f +01df bsplayer.exe
004cee0e +018e bsplayer.exe
004df445 +0421 bsplayer.exe
004ce9e0 +0034 bsplayer.exe
0047cd78 +0014 bsplayer.exe
7722810d +000a USER32.dll
004e59db +0083 bsplayer.exe
004e5a12 +000a bsplayer.exe
004e5c32 +0096 bsplayer.exe
006b1af2 +1306 bsplayer.exe
778f3675 +0010 kernel32.dll

bscommon
bscommon
rendereu
rendereu
rendereu
mbsplayu
mbsplayu
Controls
Controls
Forms
Controls
Classes

1882
1998
10095
11095
12429
3793
1188
4667
6364

+7
+25
+29
+409
+174
+334
+49
+53
+33

InitDllData
dynLoadFilter
bsRender.Build_VMR
bsRender.BuildGraph
bsRender.LoadFile
TMBSPlayer.OpenFile
TMBSPlayer.msgDisp
TControl.WndProc
TWinControl.WndProc
TCustomForm.WndProc
6259 +3 TWinControl.MainWndProc
31881 +0 StdWndProc
DispatchMessageA
Forms
TApplication.ProcessMessage
Forms
TApplication.HandleMessage
Forms
TApplication.Run
bsplayer 627 +405 initialization
BaseThreadInitThunk

thread $12e0:
778f3675 +10 kernel32.dll BaseThreadInitThunk
thread $148c:
778f3675 +10 kernel32.dll BaseThreadInitThunk

thread $1070:
778f3675 +10 kernel32.dll BaseThreadInitThunk
thread $1330:
778f3675 +10 kernel32.dll BaseThreadInitThunk
thread $3e4:
77227eb8 +26 USER32.dll
GetMessageW
778f3675 +10 kernel32.dll BaseThreadInitThunk
thread $748:
759e095c +fa
778f1628 +89
778f191c +13
778f3675 +10

<priority:-4>
KERNELBASE.dll
kernel32.dll
kernel32.dll
kernel32.dll

WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

modules:
00400000 bsplayer.exe 2.4.1.1003
C:\Users\gevito\Desktop
10000000 saHook.dll
3.3.1.129
c:\PROGRA~2\mcafee\SITEAD~1
6a7e0000 quartz.dll
6.6.7600.16490
C:\Windows\SysWOW64
6b040000 MFPlat.DLL
12.0.7600.16385
C:\Windows\SysWOW64
6b0a0000 evr.dll
6.1.7600.20574
C:\Windows\SysWOW64
6b3a0000 ddraw.dll
6.1.7600.16385
C:\Windows\system32
6de70000 DCIMAN32.dll 6.1.7600.16385
C:\Windows\system32
71a70000 propsys.dll
7.0.7600.16385
C:\Windows\system32
72160000 POWRPROF.dll 6.1.7600.16385
C:\Windows\SysWOW64
72210000 AVRT.dll
6.1.7600.16385
C:\Windows\SysWOW64
72b00000 comctl32.dll 6.10.7600.16661
C:\Windows\WinSxS\x86_microsoft.windo
ws.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd
72ca0000 rasadhlp.dll 6.1.7600.16385
C:\Windows\system32
72cb0000 DNSAPI.dll
6.1.7600.16772
C:\Windows\system32
72ed0000 WINSTA.dll
6.1.7600.16385
C:\Windows\system32
72f20000 olepro32.dll 6.1.7600.16385
C:\Windows\system32
731d0000 ntmarta.dll
6.1.7600.16385
C:\Windows\system32
73700000 wsock32.dll
6.1.7600.16385
C:\Windows\system32
73ad0000 WINNSI.DLL
6.1.7600.16385
C:\Windows\system32
73ae0000 IPHLPAPI.DLL 6.1.7600.16385
C:\Windows\system32
73bf0000 mswsock.dll
6.1.7600.16385
C:\Windows\system32
73d70000 dwmapi.dll
6.1.7600.16385
C:\Windows\system32
73d90000 uxtheme.dll
6.1.7600.16385
C:\Windows\system32
73ef0000 version.dll
6.1.7600.16385
C:\Windows\system32
740a0000 winspool.drv 6.1.7600.16385
C:\Windows\system32
74200000 winmm.dll
6.1.7600.16385
C:\Windows\system32
74270000 wtsapi32.dll 6.1.7600.16385
C:\Windows\system32
75940000 CRYPTBASE.dll 6.1.7600.16385
C:\Windows\syswow64
75950000 SspiCli.dll
6.1.7600.16484
C:\Windows\syswow64
759b0000 DEVOBJ.dll
6.1.7600.16385
C:\Windows\syswow64
759d0000 KERNELBASE.dll 6.1.7600.16385
C:\Windows\syswow64
75a20000 NSI.dll
6.1.7600.16385
C:\Windows\syswow64
75a30000 RPCRT4.dll
6.1.7600.16385
C:\Windows\syswow64
75c60000 WLDAP32.dll
6.1.7600.16385
C:\Windows\syswow64
75cb0000 SETUPAPI.dll 6.1.7600.16385
C:\Windows\syswow64
75e50000 SHELL32.dll
6.1.7600.16644
C:\Windows\syswow64
76aa0000 SHLWAPI.dll
6.1.7600.16385
C:\Windows\syswow64
76b00000 GDI32.dll
6.1.7600.16385
C:\Windows\syswow64
76e30000 CLBCatQ.DLL
2001.12.8530.16385 C:\Windows\syswow64
76ec0000 LPK.dll
6.1.7600.16385
C:\Windows\syswow64
76f00000 USP10.dll
1.626.7600.16385 C:\Windows\syswow64
76fd0000 MSCTF.dll
6.1.7600.16385
C:\Windows\syswow64
77210000 USER32.dll
6.1.7600.16385
C:\Windows\syswow64

77310000
77330000
773b0000
77410000
77440000
774f0000
776a0000
776e0000
77840000
778e0000
77de0000

sechost.dll
comdlg32.dll
IMM32.DLL
CFGMGR32.dll
msvcrt.dll
oleaut32.dll
WS2_32.dll
ole32.dll
advapi32.dll
kernel32.dll
ntdll.dll

6.1.7600.16385
6.1.7600.16385
6.1.7600.16385
6.1.7600.16385
7.0.7600.16385
6.1.7600.16567
6.1.7600.16385
6.1.7600.16624
6.1.7600.16385
6.1.7600.16385
6.1.7600.16695

C:\Windows\SysWOW64
C:\Windows\syswow64
C:\Windows\system32
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\syswow64
C:\Windows\SysWOW64

hardware:
+ Batteries
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft Composite Battery
+ Computer
- ACPI x64-based PC
+ Disk drives
- Hitachi HTS545032B9A300
+ Display adapters
- Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.1892)
- Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.1892)
+ DVD/CD-ROM drives
- Optiarc DVD RW AD-7580S
+ IDE ATA/ATAPI controllers
- Intel(R) ICH9M-E/M SATA AHCI Controller (driver 9.6.2.1001)
+ Imaging devices
- 1.3M WebCam
+ Keyboards
- Standard PS/2 Keyboard
+ Mice and other pointing devices
- Synaptics PS/2 Port TouchPad (driver 14.0.19.0)
+ Monitors
- Generic PnP Monitor
+ Network adapters
- Broadcom NetLink (TM) Gigabit Ethernet (driver 14.0.1.0)
- Broadcom 802.11n (driver 5.100.249.2)
+ Processors
- Celeron(R) Dual-Core CPU
T3500 @ 2.10GHz
- Celeron(R) Dual-Core CPU
T3500 @ 2.10GHz
+ Sound, video and game controllers
- Intel(R) High Definition Audio HDMI (driver 6.10.1.2077)
- Realtek High Definition Audio (driver 6.0.1.6151)
+ Storage volume shadow copies
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
- Generic volume shadow copy
+ System devices
- ACPI Fixed Feature Button
- ACPI Lid
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone

- Composite Bus Enumerator

- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High precision event timer
- Intel(R) 82801 PCI Bridge - 2448
- Intel(R) 82802 Firmware Hub Device
- Intel(R) ICH9 Family PCI Express Root Port 1 - 2940
- Intel(R) ICH9 Family PCI Express Root Port 2 - 2942
- Intel(R) ICH9 Family PCI Express Root Port 3 - 2944
- Intel(R) ICH9 Family SMBus Controller - 2930
- Intel(R) ICH9M LPC Interface Controller - 2919
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Microsoft Windows Management Interface for ACPI
- Microsoft Windows Management Interface for ACPI
- Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40
- Motherboard resources
- Numeric data processor
- PCI bus
- Plug and Play Software Device Enumerator
- Programmable interrupt controller
- System CMOS/real time clock
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) ICH9 Family USB Universal Host Controller - 2934
- Intel(R) ICH9 Family USB Universal Host Controller - 2935
- Intel(R) ICH9 Family USB Universal Host Controller - 2936
- Intel(R) ICH9 Family USB Universal Host Controller - 2937
- Intel(R) ICH9 Family USB Universal Host Controller - 2938
- Intel(R) ICH9 Family USB Universal Host Controller - 2939
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A
- Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
cpu
eax
ebx
ecx
edx
esi
edi
eip
esp
ebp

registers:
= 02841590
= 006aab72
= 00000003
= 006aab72
= 006aab72
= 00000000
= 006aab72
= 0018e8c8
= 0018ea7c

stack dump:
0018e8c8 72
0018e8d8 dc
0018e8e8 72
0018e8f8 00
0018e908 72
0018e918 00
0018e928 00
0018e938 f8
0018e948 00
0018e958 00
0018e968 73
0018e978 74
0018e988 00
0018e998 00
0018e9a8 00
0018e9b8 00
0018e9c8 00
0018e9d8 00
0018e9e8 00
0018e9f8 00

ab
e8
ab
00
ab
00
00
31
00
00
65
6f
00
00
00
00
00
00
00
00

disassembling:
[...]
006aab58
006aab5d 1881
006aab62
006aab68
006aab6d
006aab72 1882 >
006aab78
006aab7d
006aab82
006aab84
006aab87
[...]

6a
18
6a
00
6a
00
00
40
00
00
72
70
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
73
5c
00
00
00
00
00
00
00
00

call
mov
lea
call
call
lea
call
call
mov
sub
lea

de
72
00
40
84
00
00
00
00
00
5c
62
00
00
00
00
00
00
00
00

fa
ab
00
2c
ea
00
00
00
00
00
67
73
00
00
00
00
00
00
00
00

ed
6a
00
40
18
00
00
00
00
00
65
72
00
00
00
00
00
00
00
00

0e
00
00
00
00
00
00
00
00
00
76
65
00
00
00
00
00
00
00
00

01
90
7c
d5
cc
b0
68
74
00
00
69
6e
00
00
00
00
00
00
00
00

00
15
ea
0f
4c
d7
ea
3a
00
00
74
64
00
00
00
00
00
00
00
00

-$2a7749 ($403414)
edx, 1
eax, [ebp-$160]
-$2a6ff1 ($403b7c)
-$2a7ef6 ($402c7c)
eax, [ebp-$160]
-$2a7361 ($40381c)
-$2a7f06 ($402c7c)
edx, eax
edx, 4
eax, [ebp-$160]

00
84
18
34
40
01
18
40
00
00
6f
76
00
00
00
00
00
00
00
00

00
02
00
00
00
00
00
00
00
00
5c
32
00
00
00
00
00
00
00
00

07
72
f8
00
7c
01
68
00
00
43
44
2e
00
00
00
00
00
00
00
00

00
ab
e8
00
ea
00
32
00
00
3a
65
64
00
00
00
00
00
00
00
00

00
6a
18
00
18
00
40
00
00
5c
73
6c
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
55
6b
6c
00
00
00
00
00
00
00
00

r.j.............
....r.j.....r.j.
r.j.....|.......
....@,@...4.....
r.j......L@.|...
................
........h...h2@.
.1@.....t:@.....
................
............C:\U
sers\gevito\Desk
top\bsrendv2.dll
................
................
................
................
................
................
................
................

; System.@Assign
; System.@ResetFile
; System.@_IOTest
; System.@FileSize
; System.@_IOTest