EurekaLog 7.8.2.133 RC 16 46D8BA761EE20345B85C77B09510A99F 84AFEEB3EDEDB047B52E6A265E4BC12E DA39A3EE5E6B4B0D3255BFEF95601890AFD80709 03A746F1E6306946A18D3E2A8C5FA433 Application: ------------------------------------------------------- 1.1 Start Date : Wed, 23 Sep 2020 15:15:59 +1000 1.2 Name/Description: Vendor2.exe - (Vendor2) 1.3 Version Number : 1.3.0.327 1.4 Parameters : 1.5 Compilation Date: Wed, 23 Sep 2020 15:15:55 +1000 1.6 Up Time : 13 second(s) Exception: ------------------------------------------------------------------------------------------------------------- 2.1 Date : Wed, 23 Sep 2020 15:16:12 +1000 2.2 Address : 0040AC92 2.3 Module Name : Vendor2.exe - (Vendor2) 2.4 Module Version: 1.3.0.327 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0040AC92 in module 'Vendor2.exe'. Read of address 00002390. 2.7 ID : 960CADA0 2.8 Count : 1 2.11 Sent : 0 User: ----------------------------------------- 3.1 ID : Bill 3.2 Name : Bill 3.3 Email: bzwirs@zdatasolutions.com.au Steps to reproduce: ------------ 8.1 Text: Call Stack Information: --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Methods |Details|Stack |Address |Module |Offset |Source |Unit |Class |Procedure/Method |Line | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=6436; Parent=0; Priority=0 | |Class=; Name=MAIN | |DeadLock=0; Wait Chain= | |Comment= | |-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |7FFFFFFE|03 |00000000|0040AC92|Vendor2.exe |0000AC92|System.pas |System |TObject |Free | | |00000020|04 |0019F1A8|020317C8|Vendor2.exe |01C317C8|fcxSlice.pas |fcxSlice |TfcxSlice |Destroy |2586[10] | |00000020|03 |0019F1B0|0040B2DD|Vendor2.exe |0000B2DD|System.pas |System | |_ClassCreate | | |00000020|04 |0019F1B8|0044089B|Vendor2.exe |0004089B|ELowLevel.pas |ELowLevel | |RestoreFPU |3463[4] | |00000020|04 |0019F1C0|0087EAF3|Vendor2.exe |0047EAF3|EExceptionHook.pas|EExceptionHook| |ExceptObjProcHandler |859[102] | |00000060|03 |0019F1EC|0040B2F2|Vendor2.exe |0000B2F2|System.pas |System | |_ClassCreate | | |00000020|03 |0019F218|77968E70|ntdll.dll |00088E70|ntdll.dll |ntdll | | (possible RtlInterlockedCompareExchange64+480)| | |00000020|03 |0019F23C|77968E3F|ntdll.dll |00088E3F|ntdll.dll |ntdll | | (possible RtlInterlockedCompareExchange64+431)| | |00000020|03 |0019F260|7794820A|ntdll.dll |0006820A|ntdll.dll |ntdll | | (possible RtlUnwind+666) | | |00000020|03 |0019F304|779542D1|ntdll.dll |000742D1|ntdll.dll |ntdll | | (possible KiUserExceptionDispatcher+33) | | |00000020|03 |0019F564|774807AE|kernel32.dll|000107AE|KERNEL32.DLL |KERNEL32 | | (possible GetDynamicTimeZoneInformation+590) | | |00000020|03 |0019F660|004075C0|Vendor2.exe |000075C0|System.pas |System | |_GetMem | | |00000020|03 |0019F664|0040CB86|Vendor2.exe |0000CB86|System.pas |System | |_NewUnicodeString | | |00000020|03 |0019F670|00534EE1|Vendor2.exe |00134EE1|System.Classes.pas|System.Classes|TReader |Read | | |00000020|03 |0019F678|004075C0|Vendor2.exe |000075C0|System.pas |System | |_GetMem | | |00000020|03 |0019F67C|0040CB86|Vendor2.exe |0000CB86|System.pas |System | |_NewUnicodeString | | |00000020|04 |0019F7CC|020318F7|Vendor2.exe |01C318F7|fcxSlice.pas |fcxSlice |TfcxSlice |DestroySlice |2610[13] | |00000020|04 |0019F7E0|02032D9C|Vendor2.exe |01C32D9C|fcxSlice.pas |fcxSlice |TfcxSlice |StopChange |3160[24] | |00000020|04 |0019F804|02032C79|Vendor2.exe |01C32C79|fcxSlice.pas |fcxSlice |TfcxSlice |SetFilterManager |3118[39] | |00000020|04 |0019F818|02031694|Vendor2.exe |01C31694|fcxSlice.pas |fcxSlice |TfcxSlice |Create |2570[27] | |00000020|03 |0019F820|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000060|03 |0019F84C|00535A8D|Vendor2.exe |00135A8D|System.Classes.pas|System.Classes| |CreateComponent | | |00000060|03 |0019F878|00535CB8|Vendor2.exe |00135CB8|System.Classes.pas|System.Classes|TReader |ReadComponent | | |00000020|03 |0019F884|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000020|03 |0019F8A8|004075DC|Vendor2.exe |000075DC|System.pas |System | |_FreeMem | | |00000020|03 |0019F8AC|0040CC40|Vendor2.exe |0000CC40|System.pas |System | |_UStrClr | | |00000060|03 |0019F8E0|00535F8F|Vendor2.exe |00135F8F|System.Classes.pas|System.Classes|TReader |ReadDataInner | | |00000020|03 |0019F8E8|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000060|03 |0019F90C|00535ECC|Vendor2.exe |00135ECC|System.Classes.pas|System.Classes|TReader |ReadData | | |00000020|03 |0019F914|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000060|03 |0019F928|005433BD|Vendor2.exe |001433BD|System.Classes.pas|System.Classes|TComponent |ReadState | | |00000020|03 |0019F92C|00698A27|Vendor2.exe |00298A27|Vcl.Controls.pas |Vcl.Controls |TControl |ReadState | | |00000020|03 |0019F93C|0069D515|Vendor2.exe |0029D515|Vcl.Controls.pas |Vcl.Controls |TWinControl |ReadState | | |00000020|03 |0019F944|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000060|03 |0019F958|007C4F9D|Vendor2.exe |003C4F9D|Vcl.Forms.pas |Vcl.Forms |TCustomForm |ReadState | | |00000020|03 |0019F960|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000060|03 |0019F974|00536E4C|Vendor2.exe |00136E4C|System.Classes.pas|System.Classes|TReader |ReadRootComponent | | |00000020|03 |0019F97C|0040C0FA|Vendor2.exe |0000C0FA|System.pas |System | |_HandleFinally | | |00000020|03 |0019F9E0|0053251B|Vendor2.exe |0013251B|System.Classes.pas|System.Classes|TFiler |Create | | |00000060|03 |0019FA00|00530996|Vendor2.exe |00130996|System.Classes.pas|System.Classes|TStream |ReadComponent | | |00000060|03 |0019FA20|00522E55|Vendor2.exe |00122E55|System.Classes.pas|System.Classes| |InternalReadComponentRes | | |00000060|03 |0019FA48|00529813|Vendor2.exe |00129813|System.Classes.pas|System.Classes| |InitComponent | | |00000060|03 |0019FA68|005298A1|Vendor2.exe |001298A1|System.Classes.pas|System.Classes| |InitInheritedComponent | | |00000060|03 |0019FA98|007C42F6|Vendor2.exe |003C42F6|Vcl.Forms.pas |Vcl.Forms |TCustomForm |Create | | |00000060|04 |0019FAF4|02255388|Vendor2.exe |01E55388|Main.pas |Main |TForm1 |SalesAnalysis1Click |2654[2] | |00000060|03 |0019FB04|007B291A|Vendor2.exe |003B291A|Vcl.Menus.pas |Vcl.Menus |TMenuItem |Click | | |00000020|03 |0019FB10|007B40D3|Vendor2.exe |003B40D3|Vcl.Menus.pas |Vcl.Menus |TMenu |DispatchCommand | | |00000020|03 |0019FB18|007D9063|Vendor2.exe |003D9063|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook.TMainMenuBarStyleHook|TrackMenuFromItem | | |00000020|03 |0019FB5C|007D6366|Vendor2.exe |003D6366|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook.TMainMenuBarStyleHook|ProcessMenuLoop | | |00000030|03 |0019FB6C|00418813|Vendor2.exe |00018813|System.Types.pas |System.Types |TRect |Contains | | |00000020|03 |0019FB74|007D6DBA|Vendor2.exe |003D6DBA|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook.TMainMenuBarStyleHook|ItemFromPoint | | |00000020|03 |0019FB78|76CD2D8A|win32u.dll |00002D8A|win32u.dll |win32u | |NtUserHideCaret | | |00000020|03 |0019FB7C|75D70040|user32.dll |00040040|USER32.dll |USER32 | |HideCaret | | |00000020|03 |0019FB90|007D620C|Vendor2.exe |003D620C|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook.TMainMenuBarStyleHook|MenuEnter | | |00000020|03 |0019FB9C|007D8974|Vendor2.exe |003D8974|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook.TMainMenuBarStyleHook|MouseDown | | |00000030|03 |0019FBA8|007DA6C5|Vendor2.exe |003DA6C5|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook |NormalizePoint | | |00000020|03 |0019FBD8|007DD5B4|Vendor2.exe |003DD5B4|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook |WMNCLButtonDown | | |00000020|03 |0019FBF4|007732EE|Vendor2.exe |003732EE|Vcl.Themes.pas |Vcl.Themes |TStyleHook |WndProc | | |00000020|03 |0019FC0C|007734E4|Vendor2.exe |003734E4|Vcl.Themes.pas |Vcl.Themes |TMouseTrackControlStyleHook |WndProc | | |00000020|03 |0019FC10|007DD2F5|Vendor2.exe |003DD2F5|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook |WndProc | | |00000020|03 |0019FC20|00772B12|Vendor2.exe |00372B12|Vcl.Themes.pas |Vcl.Themes |TStyleHook |HandleMessage | | |00000020|03 |0019FC30|007D935B|Vendor2.exe |003D935B|Vcl.Forms.pas |Vcl.Forms |TFormStyleHook |HandleMessage | | |00000020|03 |0019FC40|008F6B36|Vendor2.exe |004F6B36|Vcl.Styles.pas |Vcl.Styles |TStyleEngine |HandleMessage | | |00000030|03 |0019FC5C|0076FBA0|Vendor2.exe |0036FBA0|Vcl.Themes.pas |Vcl.Themes |TStyleManager |HandleMessage | | |00000030|03 |0019FC78|0069E4B3|Vendor2.exe |0029E4B3|Vcl.Controls.pas |Vcl.Controls |TWinControl |DoHandleStyleMessage | | |00000020|03 |0019FC84|0069FB9E|Vendor2.exe |0029FB9E|Vcl.Controls.pas |Vcl.Controls |TWinControl |WndProc | | |00000020|03 |0019FC90|75D550D7|user32.dll |000250D7|USER32.dll |USER32 | | (possible CallWindowProcW+2855) | | |00000020|03 |0019FCA0|75D5537B|user32.dll |0002537B|USER32.dll |USER32 | | (possible CallWindowProcW+3531) | | |00000020|03 |0019FCA4|75D550FB|user32.dll |000250FB|USER32.dll |USER32 | | (possible CallWindowProcW+2891) | | |00000030|03 |0019FCD8|007C5EBD|Vendor2.exe |003C5EBD|Vcl.Forms.pas |Vcl.Forms |TCustomForm |WndProc | | |00000030|03 |0019FD14|0069F71C|Vendor2.exe |0029F71C|Vcl.Controls.pas |Vcl.Controls |TWinControl |MainWndProc | | |00000030|03 |0019FD44|005453FC|Vendor2.exe |001453FC|System.Classes.pas|System.Classes| |StdWndProc | | |00000030|03 |0019FD5C|75D745C9|user32.dll |000445C9|USER32.dll |USER32 | | (possible AddClipboardFormatListener+73) | | |00000030|03 |0019FD88|75D550D7|user32.dll |000250D7|USER32.dll |USER32 | | (possible CallWindowProcW+2855) | | |00000020|03 |0019FDD4|77951E5A|ntdll.dll |00071E5A|ntdll.dll |ntdll | |NtCallbackReturn | | |00000020|03 |0019FDD8|75D70465|user32.dll |00040465|USER32.dll |USER32 | | (possible ValidateRgn+85) | | |00000020|03 |0019FE04|75D54F25|user32.dll |00024F25|USER32.dll |USER32 | | (possible CallWindowProcW+2421) | | |00000030|03 |0019FE6C|75D54229|user32.dll |00024229|USER32.dll |USER32 | | (possible DispatchMessageW+553) | | |00000020|03 |0019FEA4|75D5AB23|user32.dll |0002AB23|USER32.dll |USER32 | |GetPropW | | |00000030|03 |0019FEE0|75D5400B|user32.dll |0002400B|USER32.dll |USER32 | |DispatchMessageW | | |00000020|03 |0019FEEC|007CFCF3|Vendor2.exe |003CFCF3|Vcl.Forms.pas |Vcl.Forms |TApplication |ProcessMessage | | |00000020|03 |0019FF08|007CFD36|Vendor2.exe |003CFD36|Vcl.Forms.pas |Vcl.Forms |TApplication |HandleMessage | | |00000020|03 |0019FF2C|007D0069|Vendor2.exe |003D0069|Vcl.Forms.pas |Vcl.Forms |TApplication |Run | | |00000030|03 |0019FF34|007D0076|Vendor2.exe |003D0076|Vcl.Forms.pas |Vcl.Forms |TApplication |Run | | |00000030|03 |0019FF40|007D00B1|Vendor2.exe |003D00B1|Vcl.Forms.pas |Vcl.Forms |TApplication |Run | | |00004020|04 |0019FF5C|022D847D|Vendor2.exe |01ED847D|Vendor2.dpr |Vendor2 | |Initialization |181[9] | |7FFF7FFE|03 |0019FF74|77486357|kernel32.dll|00016357|KERNEL32.DLL |KERNEL32 | |BaseThreadInitThunk | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Modules Information: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|Vendor2.exe |Vendor2 |1.3.0.327 |88784896|2020-09-23 15:15:52|E:\Vendor\ | |0AAE0000|ib_util.dll |Firebird SQL Server |3.0.6.33328 |7680 |2020-06-26 11:58:22|C:\Program Files (x86)\Firebird\Firebird_3_0\ | |0AC10000|fbintl.dll |Firebird SQL Server |3.0.6.33328 |949760 |2020-06-26 11:58:42|C:\Program Files (x86)\Firebird\Firebird_3_0\intl\ | |0AD50000|fbtrace.dll |Firebird SQL Server |3.0.6.33328 |504320 |2020-06-26 11:58:38|C:\Program Files (x86)\Firebird\Firebird_3_0\plugins\ | |10000000|lz32.dll |LZ Expand/Compress API DLL |5.0.1.1 |2560 |2019-03-19 14:45:22|C:\Windows\System32\ | |58A70000|engine12.dll |Firebird SQL Server |3.0.6.33328 |5760512 |2020-06-26 12:01:34|C:\Program Files (x86)\Firebird\Firebird_3_0\plugins\ | |597A0000|msftedit.dll |Rich Text Edit Control, v8.5 |10.0.18362.329 |2743808 |2019-09-11 19:09:40|C:\Windows\System32\ | |59A50000|hhctrl.ocx |Microsoft® HTML Help Control |10.0.18362.1 |576512 |2019-03-19 14:46:01|C:\Windows\System32\ | |59AF0000|wer.dll |Windows Error Reporting DLL |10.0.18362.997 |690536 |2020-08-13 13:10:02|C:\Windows\System32\ | |6A2E0000|msls31.dll |Microsoft Line Services library file |3.10.349.0 |183296 |2019-03-19 14:45:32|C:\Windows\System32\ | |6A320000|riched20.dll |Rich Text Edit Control, v3.1 |5.31.23.1231 |488448 |2019-03-19 14:45:32|C:\Windows\System32\ | |6A690000|usp10.dll |Uniscribe Unicode script processor |10.0.18362.476 |77824 |2019-11-15 17:42:28|C:\Windows\System32\ | |6AB30000|apphelp.dll |Application Compatibility Client Library |10.0.18362.1 |635904 |2019-03-19 14:45:19|C:\Windows\System32\ | |6BE70000|CoreUIComponents.dll |Microsoft Core UI Components Dll |10.0.18362.207 |2490712 |2019-07-24 07:07:08|C:\Windows\System32\ | |6C2C0000|WinTypes.dll |Windows Base Types DLL |10.0.18362.1082 |894032 |2020-09-11 18:50:50|C:\Windows\System32\ | |6C3C0000|windowscodecs.dll |Microsoft Windows Codecs Library |10.0.18362.959 |1484384 |2020-07-18 08:46:00|C:\Windows\System32\ | |6C570000|CoreMessaging.dll |Microsoft CoreMessaging Dll |10.0.18362.1049 |553664 |2020-09-11 18:50:50|C:\Windows\System32\ | |6DD80000|TextInputFramework.dll|"TextInputFramework.DYNLINK" |10.0.18362.207 |531464 |2019-07-24 07:07:09|C:\Windows\System32\ | |6E880000|oledlg.dll |OLE User Interface Support |10.0.18362.1 |161280 |2019-03-19 14:45:19|C:\Windows\System32\ | |6E950000|DWrite.dll |Microsoft DirectX Typography Services |10.0.18362.1082 |2576896 |2020-09-11 18:50:47|C:\Windows\System32\ | |6EBD0000|iertutil.dll |Run time utility for Internet Explorer |11.0.18362.1049 |2259680 |2020-09-11 18:50:51|C:\Windows\System32\ | |6EE20000|olepro32.dll |OLEPRO32.DLL |10.0.18362.113 |88064 |2019-06-12 11:29:15|C:\Windows\System32\ | |6FFF0000|wininet.dll |Internet Extensions for Win32 |11.0.18362.1082 |4538368 |2020-09-11 18:50:51|C:\Windows\System32\ | |70450000|oleacc.dll |Active Accessibility Core Component |7.2.18362.1 |320000 |2019-03-19 14:45:30|C:\Windows\System32\ | |707F0000|urlmon.dll |OLE32 Extensions for Win32 |11.0.18362.815 |1686016 |2020-05-15 09:18:07|C:\Windows\System32\ | |71060000|dwmapi.dll |Microsoft Desktop Window Manager API |10.0.18362.267 |135000 |2019-08-16 09:40:43|C:\Windows\System32\ | |72C20000|msimg32.dll |GDIEXT Client DLL |10.0.18362.1082 |7168 |2020-09-11 18:50:51|C:\Windows\System32\ | |72C30000|GdiPlus.dll |Microsoft GDI+ |10.0.18362.1082 |1459200 |2020-09-06 00:27:56|C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1082_none_1719bd9e5369c895\ | |72DA0000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |10.0.18362.1 |185912 |2019-03-19 14:45:22|C:\Windows\System32\ | |73210000|uxtheme.dll |Microsoft UxTheme Library |10.0.18362.449 |477184 |2019-11-15 17:42:18|C:\Windows\System32\ | |734A0000|winsta.dll |Winstation Library |10.0.18362.836 |260328 |2020-05-15 09:17:58|C:\Windows\System32\ | |73500000|dbgcore.dll |Windows Core Debugging Helpers |10.0.18362.1 |132608 |2019-03-19 14:45:22|C:\Windows\System32\ | |73530000|dbghelp.dll |Windows Image Helper |10.0.18362.1049 |1521664 |2020-09-11 18:50:50|C:\Windows\System32\ | |736C0000|ntmarta.dll |Windows NT MARTA provider |10.0.18362.1 |152896 |2019-03-19 14:45:22|C:\Windows\System32\ | |736F0000|Faultrep.dll |Windows User Mode Crash Reporting DLL |10.0.18362.959 |405944 |2020-07-18 08:46:05|C:\Windows\System32\ | |74170000|netutils.dll |Net Win32 API Helpers DLL |10.0.18362.1 |37160 |2019-03-19 14:45:22|C:\Windows\System32\ | |74180000|secur32.dll |Security Support Provider Interface |10.0.18362.1 |23040 |2019-03-19 14:45:30|C:\Windows\System32\ | |744E0000|wsock32.dll |Windows Socket 32-Bit DLL |10.0.18362.1 |16384 |2019-03-19 14:45:12|C:\Windows\System32\ | |744F0000|msvcr100.dll |Microsoft® C Runtime Library |10.0.30319.1 |770384 |2010-03-18 10:15:26|C:\Program Files (x86)\Firebird\Firebird_3_0\ | |745B0000|mpr.dll |Multiple Provider Router DLL |10.0.18362.1 |89856 |2019-03-19 14:45:22|C:\Windows\System32\ | |745D0000|fbclient.dll |Firebird SQL Server |3.0.6.33328 |1387008 |2020-06-26 11:58:32|C:\Program Files (x86)\Firebird\Firebird_3_0\ | |74730000|winhttp.dll |Windows HTTP Services |10.0.18362.778 |768528 |2020-04-19 09:15:11|C:\Windows\System32\ | |747F0000|propsys.dll |Microsoft Property System |7.0.18362.815 |801832 |2020-05-15 09:18:03|C:\Windows\System32\ | |748C0000|WINMMBASE.dll |Base Multimedia Extension API DLL |10.0.18362.1 |131176 |2019-03-19 14:45:07|C:\Windows\System32\ | |74980000|comctl32.dll |User Experience Controls Library |6.10.18362.1082 |2145608 |2020-09-06 00:45:08|C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1082_none_e62ecab8f8d74ec7\| |74EF0000|winmm.dll |MCI API DLL |10.0.18362.1 |134320 |2019-03-19 14:45:07|C:\Windows\System32\ | |74F20000|wtsapi32.dll |Windows Remote Desktop Session Host Server SDK APIs|10.0.18362.1 |52872 |2019-03-19 14:45:10|C:\Windows\System32\ | |74F30000|netapi32.dll |Net Win32 API DLL |10.0.18362.1 |68680 |2019-03-19 14:45:10|C:\Windows\System32\ | |74F50000|IPHLPAPI.DLL |IP Helper API |10.0.18362.1 |196776 |2019-03-19 14:45:20|C:\Windows\System32\ | |74FB0000|winspool.drv |Windows Spooler Driver |10.0.18362.693 |415744 |2020-03-11 18:22:21|C:\Windows\System32\ | |75020000|version.dll |Version Checking and File Installation Libraries |10.0.18362.1 |27328 |2019-03-19 14:45:32|C:\Windows\System32\ | |75090000|CRYPTBASE.dll |Base cryptographic API DLL |10.0.18362.1 |31752 |2019-03-19 14:45:07|C:\Windows\System32\ | |750A0000|sspicli.dll |Security Support Provider Interface |10.0.18362.1049 |146640 |2020-09-11 18:50:46|C:\Windows\System32\ | |750D0000|cryptsp.dll |Cryptographic Service Provider API |10.0.18362.1 |68192 |2019-03-19 14:45:20|C:\Windows\System32\ | |75180000|gdi32full.dll |GDI Client DLL |10.0.18362.1082 |1421392 |2020-09-11 18:50:51|C:\Windows\System32\ | |752E0000|imagehlp.dll |Windows NT Image Helper |10.0.18362.1 |97816 |2019-03-19 14:44:36|C:\Windows\System32\ | |75300000|bcrypt.dll |Windows Cryptographic Primitives Library |10.0.18362.267 |96032 |2019-08-16 09:40:43|C:\Windows\System32\ | |75320000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |10.0.18362.959 |478296 |2020-07-18 08:45:57|C:\Windows\System32\ | |753A0000|SHCore.dll |SHCORE |10.0.18362.959 |538664 |2020-07-18 08:46:04|C:\Windows\System32\ | |75490000|ole32.dll |Microsoft OLE for Windows |10.0.18362.1082 |1009200 |2020-09-11 18:50:50|C:\Windows\System32\ | |75590000|shlwapi.dll |Shell Light-weight Utility Library |10.0.18362.1 |275240 |2019-03-19 14:45:32|C:\Windows\System32\ | |755E0000|windows.storage.dll |Microsoft WinRT Storage API |10.0.18362.1082 |6069360 |2020-09-11 18:50:49|C:\Windows\System32\ | |75BB0000|gdi32.dll |GDI Client DLL |10.0.18362.1 |127552 |2019-03-19 14:45:16|C:\Windows\System32\ | |75BE0000|oleaut32.dll |OLEAUT32.DLL |10.0.18362.959 |593408 |2020-07-18 08:46:05|C:\Windows\System32\ | |75CF0000|cfgmgr32.dll |Configuration Manager DLL |10.0.18362.387 |236520 |2019-10-05 09:27:30|C:\Windows\System32\ | |75D30000|user32.dll |Multi-User Windows USER API Client DLL |10.0.18362.997 |1669344 |2020-08-13 13:09:58|C:\Windows\System32\ | |76040000|advapi32.dll |Advanced Windows 32 Base API |10.0.18362.752 |487784 |2020-04-19 09:15:07|C:\Windows\System32\ | |760C0000|psapi.dll |Process Status Helper |10.0.18362.1 |17008 |2019-03-19 14:45:19|C:\Windows\System32\ | |760D0000|umpdc.dll | | |46656 |2019-03-19 14:45:16|C:\Windows\System32\ | |760E0000|shell32.dll |Windows Shell Common Dll |10.0.18362.1049 |5767744 |2020-09-11 18:50:53|C:\Windows\System32\ | |76660000|imm32.dll |Multi-User Windows IMM32 API Client DLL |10.0.18362.387 |143808 |2019-10-05 09:27:30|C:\Windows\System32\ | |76690000|powrprof.dll |Power Profile Helper DLL |10.0.18362.1 |267528 |2019-03-19 14:45:22|C:\Windows\System32\ | |766E0000|msctf.dll |MSCTF Server DLL |10.0.18362.1082 |1054160 |2020-09-11 18:50:46|C:\Windows\System32\ | |767F0000|msasn1.dll |ASN.1 Runtime APIs |10.0.18362.1 |50608 |2019-03-19 14:45:22|C:\Windows\System32\ | |76800000|msvcp_win.dll |Microsoft® C Runtime Library |10.0.18362.815 |501200 |2020-05-15 09:18:05|C:\Windows\System32\ | |76CD0000|win32u.dll |Win32u |10.0.18362.1082 |89344 |2020-09-11 18:50:50|C:\Windows\System32\ | |76CF0000|comdlg32.dll |Common Dialogs DLL |10.0.18362.900 |692224 |2020-06-12 13:21:09|C:\Windows\System32\ | |76DA0000|combase.dll |Microsoft COM for Windows |10.0.18362.1082 |2585032 |2020-09-11 18:50:50|C:\Windows\System32\ | |77070000|clbcatq.dll |COM+ Configuration Catalog |2001.12.10941.16384|512304 |2019-03-19 14:45:19|C:\Windows\System32\ | |770F0000|profapi.dll |User Profile Basic API |10.0.18362.693 |102760 |2020-03-11 18:22:21|C:\Windows\System32\ | |77110000|kernel.appcore.dll |AppModel API Host |10.0.18362.1 |51336 |2019-03-19 14:45:16|C:\Windows\System32\ | |77120000|ucrtbase.dll |Microsoft® C Runtime Library |10.0.18362.815 |1178608 |2020-05-15 09:18:05|C:\Windows\System32\ | |77250000|crypt32.dll |Crypto API32 |10.0.18362.592 |1020032 |2020-01-18 08:30:36|C:\Windows\System32\ | |77350000|ws2_32.dll |Windows Socket 2.0 32-Bit DLL |10.0.18362.387 |379840 |2019-10-05 09:27:26|C:\Windows\System32\ | |773B0000|rpcrt4.dll |Remote Procedure Call Runtime |10.0.18362.1082 |768504 |2020-09-11 18:50:46|C:\Windows\System32\ | |77470000|kernel32.dll |Windows NT BASE API Client DLL |10.0.18362.1082 |628400 |2020-09-11 18:50:46|C:\Windows\System32\ | |77550000|msvcrt.dll |Windows NT CRT DLL |7.0.18362.1 |776472 |2019-03-19 14:45:07|C:\Windows\System32\ | |77670000|KERNELBASE.dll |Windows NT BASE API Client DLL |10.0.18362.1049 |2090280 |2020-09-11 18:50:37|C:\Windows\System32\ | |77870000|bcryptPrimitives.dll |Windows Cryptographic Primitives Library |10.0.18362.836 |386320 |2020-05-15 09:17:52|C:\Windows\System32\ | |778E0000|ntdll.dll |NT Layer DLL |10.0.18362.1049 |1664696 |2020-09-11 18:50:46|C:\Windows\System32\ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |ID |Name |Description |Version |Memory |Priority |Threads|Path |User |Session| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |792 |NVDisplay.Container.exe |NVIDIA Container |1.2.0.0 |24399872 |Normal |11 |C:\Program Files\NVIDIA Corporation\Display.NvContainer\ |SYSTEM |13 | |940 |ApplicationFrameHost.exe |Application Frame Host |10.0.18362.1 |26075136 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |1220 |RemindersServer.exe |Reminders WinRT OOP Server |10.0.18362.1049 |21831680 |Normal |8 |C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ |Bill |13 | |1424 |FTBCheckUpdates.exe |MyHeritage Family Tree Builder check for updates |8.0.0.8571 |16142336 |Normal |7 |E:\MyHeritage\Bin\ |Bill |13 | |2228 |FUFAXRCV.exe |Fax Reception |2.5.4.1 |18337792 |Normal |5 |C:\Program Files (x86)\Epson Software\FAX Utility\ |Bill |13 | |2560 |igfxEM.exe |igfxEM Module |6.15.10.4624 |12656640 |Normal |4 |C:\Windows\SysNative\ |Bill |13 | |2844 |node.exe |Node.js: Server-side JavaScript |12.14.0.0 |83922944 |Normal |27 |C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\ |Bill |13 | |2956 |AdobeCollabSync.exe |Adobe Collaboration Synchronizer 20.12 |20.12.20043.3217 |12447744 |Normal |4 |C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\ |Bill |13 | |3432 |ShellExperienceHost.exe |Windows Shell Experience Host |10.0.18362.997 |51200000 |Normal |12 |C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ |Bill |13 | |3476 |AdobeCollabSync.exe |Adobe Collaboration Synchronizer 20.12 |20.12.20043.3217 |20058112 |Normal |14 |C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\ |Bill |13 | |3504 |svchost.exe |Host Process for Windows Services |10.0.18362.1 |26996736 |Normal |9 |C:\Windows\System32\ |Bill |13 | |3884 |RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |30633984 |Normal |12 |C:\Windows\SysNative\ |Bill |13 | |4456 |Adobe CEF Helper.exe |Adobe CEF Helper |5.3.0.468 |63520768 |Low |15 |C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\ |Bill |13 | |5308 |node.exe |Node.js: Server-side JavaScript |12.14.0.0 |101912576|Normal |26 |C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ |Bill |13 | |5376 |Adobe Installer.exe |Adobe Installer |5.3.0.468 |11616256 |Normal |3 |C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\ |Bill |13 | |5456 |fontdrvhost.exe |Usermode Font Driver Host |10.0.18362.1082 |14082048 |Normal |5 |C:\Windows\System32\ |UMFD-13|13 | |5480 |ctfmon.exe |CTF Loader |10.0.18362.1 |16396288 |High |9 |C:\Windows\System32\ |Bill |13 | |5712 |conhost.exe |Console Window Host |10.0.18362.1 |6111232 |Normal |2 |C:\Windows\SysNative\ |Bill |13 | |5716 |DelphiLSP.exe |Embarcadero LSP Server for Delphi |27.0.38860.1461 |15523840 |Normal |11 |C:\Program Files (x86)\Embarcadero\Studio\21.0\bin\ |Bill |13 | |5744 |crssl-client.exe |Cyberoam SSL VPN Client |1.3.1.10 |18382848 |Normal |7 |C:\Program Files (x86)\CrSSL\bin\ |Bill |13 | |6016 |jusched.exe |Java Update Scheduler |2.8.261.12 |15638528 |Normal |2 |C:\Program Files (x86)\Common Files\Java\Java Update\ |Bill |13 | |6284 |Creative Cloud.exe |Creative Cloud Desktop |5.3.0.468 |85712896 |Normal |28 |C:\Program Files\Adobe\Adobe Creative Cloud\ACC\ |Bill |13 | |6612 |RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |31674368 |Normal |5 |C:\Windows\SysNative\ |Bill |13 | |7056 |RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |27668480 |Normal |2 |C:\Windows\SysNative\ |Bill |13 | |7088 |CCXProcess.exe |CCXProcess |3.8.1.1 |2990080 |Normal |1 |C:\Program Files\Adobe\Adobe Creative Cloud Experience\ |Bill |13 | |7104 |csrss.exe |Client Server Runtime Process |10.0.18362.1 |6602752 |Normal |14 |C:\Windows\SysNative\ |SYSTEM |13 | |7344 |bds.exe |Embarcadero RAD Studio for Windows |27.0.38860.1461 |745189376|Normal |44 |C:\Program Files (x86)\Embarcadero\Studio\21.0\bin\ |Bill |13 | |7784 |AdobeNotificationClient.exe |Adobe Notification Client |5.2.0.121 |1269760 |Normal |13 |C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\ |Bill |13 | |8132 |DelphiLSP.exe |Embarcadero LSP Server for Delphi |27.0.38860.1461 |517644288|Normal |8 |C:\Program Files (x86)\Embarcadero\Studio\21.0\bin\ |Bill |13 | |8608 |svchost.exe |Host Process for Windows Services |10.0.18362.1 |22536192 |Normal |3 |C:\Windows\System32\ |Bill |13 | |8780 |ApCent.exe |ApCent |1.0.0.0 |77123584 |Normal |13 |C:\Program Files (x86)\GIGABYTE\AppCenter\ |Bill |13 | |8896 |SettingSyncHost.exe |Host Process for Setting Synchronization |10.0.18362.239 |7303168 |Below-Normal|3 |C:\Windows\System32\ |Bill |13 | |8968 |IDMan.exe |Internet Download Manager (IDM) |6.38.2.3 |28315648 |Normal |3 |C:\Program Files (x86)\Internet Download Manager\ |Bill |13 | |9292 |RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |18497536 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |9444 |DelphiLSP.exe |Embarcadero LSP Server for Delphi |27.0.38860.1461 |546152448|Normal |7 |C:\Program Files (x86)\Embarcadero\Studio\21.0\bin\ |Bill |13 | |9684 |Adobe CEF Helper.exe |Adobe CEF Helper |5.3.0.468 |202854400|Normal |35 |C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\ |Bill |13 | |9808 |conhost.exe |Console Window Host |10.0.18362.1 |6180864 |Normal |2 |C:\Windows\SysNative\ |Bill |13 | |9912 |crssl.exe |CrSSL Daemon |2.3.2.0 |9256960 |Normal |1 |C:\Program Files (x86)\CrSSL\bin\ |Bill |13 | |9992 |splwow64.exe |Print driver host for applications |10.0.18362.959 |10780672 |Normal |4 |C:\Windows\ |Bill |13 | |10256|svchost.exe |Host Process for Windows Services |10.0.18362.1 |22016000 |Normal |4 |C:\Windows\System32\ |Bill |13 | |10260|AdobeIPCBroker.exe |Adobe IPC Broker |6.5.0.190 |20819968 |Normal |26 |C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\ |Bill |13 | |10268|GraphicsCardEngine.exe |GraphicsCardEngine |8.0.0.8 |2056192 |Below-Normal|7 |C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\ |Bill |13 | |10272|SecurityHealthSystray.exe |Windows Security notification icon |10.0.18362.628 |9764864 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |10348|Creative Cloud Helper.exe |Creative Cloud Helper |5.3.0.468 |26247168 |Normal |10 |C:\Program Files\Adobe\Adobe Creative Cloud\ACC\ |Bill |13 | |10424|FUFAXSTM.exe |Fax Transmission |2.5.4.1 |20369408 |Normal |3 |C:\Program Files (x86)\Epson Software\FAX Utility\ |Bill |13 | |10768|bdagent.exe |Bitdefender agent |24.0.26.135 |11952128 |Below-Normal|67 |C:\Program Files\Bitdefender\Bitdefender Security\ |Bill |13 | |11376|YourPhone.exe |YourPhone |1.20082.141.0 |7716864 |Normal |16 |C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20082.141.0_x64__8wekyb3d8bbwe\ |Bill |13 | |11792|taskhostw.exe |Host Process for Windows Tasks |10.0.18362.387 |19705856 |Normal |8 |C:\Windows\SysNative\ |Bill |13 | |12092|iTunesHelper.exe |iTunesHelper |12.6.3.6 |17035264 |Normal |7 |C:\Program Files\iTunes\ |Bill |13 | |12136|Microsoft.Photos.exe | |2020.20090.1002.0|1286144 |Normal |18 |C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20090.1002.0_x64__8wekyb3d8bbwe\|Bill |13 | |12192|CCLibrary.exe |CCLibraries |3.9.23.84 |3080192 |Normal |1 |C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\ |Bill |13 | |12340|SearchUI.exe |Search and Cortana application |10.0.18362.1049 |169115648|Normal |40 |C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ |Bill |13 | |12564|explorer.exe |Windows Explorer |10.0.18362.997 |153260032|Normal |74 |C:\Windows\ |Bill |13 | |12572|EEventManager.exe |EEventManager Application |3.2.0.0 |12275712 |Normal |4 |C:\Program Files (x86)\Epson Software\Event Manager\ |Bill |13 | |12652|svchost.exe |Host Process for Windows Services |10.0.18362.1 |39534592 |Normal |14 |C:\Windows\System32\ |Bill |13 | |12692|conhost.exe |Console Window Host |10.0.18362.1 |8126464 |Normal |3 |C:\Windows\SysNative\ |Bill |13 | |12908|dwm.exe |Desktop Window Manager |10.0.18362.387 |71311360 |High |14 |C:\Windows\SysNative\ |DWM-13 |13 | |12920|Adobe Desktop Service.exe |Creative Cloud |5.3.0.468 |205729792|Normal |43 |C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\ |Bill |13 | |13296|RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |7372800 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |13676|dllhost.exe |COM Surrogate |10.0.18362.1 |11796480 |Normal |5 |C:\Windows\System32\ |Bill |13 | |13884|RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |19476480 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |14156|conhost.exe |Console Window Host |10.0.18362.1 |6107136 |Normal |2 |C:\Windows\SysNative\ |Bill |13 | |14216|Vendor2.exe |Vendor2 |1.3.0.327 |145813504|Normal |13 |E:\Vendor\ |Bill |13 | |14308|Adobe CEF Helper.exe |Adobe CEF Helper |5.3.0.468 |29745152 |Low |15 |C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\ |Bill |13 | |14600|winlogon.exe |Windows Logon Application |10.0.18362.693 |10928128 |High |6 |C:\Windows\SysNative\ |SYSTEM |13 | |14756|RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |14647296 |Normal |1 |C:\Windows\SysNative\ |Bill |13 | |14924|acrotray.exe |AcroTray |20.12.20043.3217 |12939264 |Normal |4 |C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\ |Bill |13 | |15104|Adobe CEF Helper.exe |Adobe CEF Helper |5.3.0.468 |30916608 |Normal |10 |C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\ |Bill |13 | |15180|StartMenuExperienceHost.exe | | |81633280 |Normal |8 |C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\ |Bill |13 | |15648|WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe|WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe|10.0.18362.1049 |45731840 |Normal |9 |C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\ |Bill |13 | |16168|AcrobatNotificationClient.exe | | |6041600 |Normal |14 |C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\ |Bill |13 | |16180|sihost.exe |Shell Infrastructure Host |10.0.18362.1 |26734592 |Normal |8 |C:\Windows\SysNative\ |Bill |13 | |16264|CoreSync.exe |Core Sync |4.3.57.2 |38330368 |Normal |54 |C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\ |Bill |13 | |16372|RuntimeBroker.exe |Runtime Broker |10.0.18362.1 |17362944 |Normal |2 |C:\Windows\SysNative\ |Bill |13 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Assembler Information: ----------------------------------------------------------------------------------------------- ; Base Address: $40A000, Allocation Base: $400000, Region Size: 32305152 ; Allocation Protect: PAGE_EXECUTE_WRITECOPY, Protect: PAGE_EXECUTE_READ ; State: MEM_COMMIT, Type: MEM_IMAGE ; ; ; System.TObject.Create (Line=0 - Offset=12) ; ------------------------------------------ 0040AC68 84D2 TEST DL, DL 0040AC6A 740F JZ +$0F ; ($0040AC7B) System.TObject.Create (Line=0) 0040AC6C E89B060000 CALL +$069B ; ($0040B30C) System._AfterConstruction 0040AC71 648F0500000000 POP DWORD PTR FS:[0] 0040AC78 83C40C ADD ESP, $0C 0040AC7B C3 RET 0040AC7C E8DB060000 CALL +$06DB ; ($0040B35C) System._BeforeDestruction 0040AC81 84D2 TEST DL, DL 0040AC83 7E05 JLE +5 ; ($0040AC8A) System.TObject.Destroy (Line=0) 0040AC85 E87A060000 CALL +$067A ; ($0040B304) System._ClassDestroy 0040AC8A C3 RET 0040AC8B 90 NOP 0040AC8C 85C0 TEST EAX, EAX 0040AC8E 7407 JZ +7 ; ($0040AC97) System.TObject.Free (Line=0) 0040AC90 B201 MOV DL, 1 ; ; System.TObject.Free (Line=0 - Offset=6) ; --------------------------------------- 0040AC92 8B08 MOV ECX, [EAX] ; <-- EXCEPTION 0040AC94 FF51FC CALL DWORD PTR [ECX-4] Registers: ----------------------------- EAX: 00002390 EDI: 0019F828 EBX: 1126E900 ESI: 10F3DAC8 ECX: 00000000 EBP: 0019F184 EDX: 10F3DA01 ESP: 0019F174 EIP: 0040AC92 FLG: 00010206 EXP: 0040AC92 STK: 0019F174 Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0019F1B0: 0040B2E2 0040AC92: 8B 08 FF 51 FC C3 E8 EF FF FF FF C3 8B C0 83 C0 ...Q............ 0019F1AC: 00000000 0040ACA2: AC 8B 00 C3 8B C0 53 56 57 89 C3 89 D7 AB 8B 4B ......SVW......K 0019F1A8: 020317CD 0040ACB2: CC 31 C0 51 C1 E9 02 49 F3 AB 59 83 E1 03 F3 AA .1.Q...I..Y..... 0019F1A4: 0040AC97 0040ACC2: 89 D0 89 E2 8B 4B AC 85 C9 74 01 51 8B 5B D0 85 .....K...t.Q.[.. 0019F1A0: 0019F1E8 0040ACD2: DB 74 04 8B 1B EB ED 39 D4 74 1D 5B 8B 0B 83 C3 .t.....9.t.[.... 0019F19C: 10F3DAD6 0040ACE2: 04 8B 73 10 85 F6 74 06 8B 7B 14 89 34 07 83 C3 ..s...t..{..4... 0019F198: 10F3DADE 0040ACF2: 1C 49 75 ED 39 D4 75 E3 89 C3 89 C6 89 E7 8B 1B .Iu.9.u......... 0019F194: 10F3DADA 0040AD02: 8B 53 B4 8B 5B D0 85 D2 74 27 0F B6 0A 80 F9 16 .S..[...t'...... 0019F190: 05D0BB81 0040AD12: 75 1F 0F B6 4A 01 8D 44 11 0A 8B 4C 11 06 8D 0C u...J..D...L.... 0019F18C: 10F50A40 0040AD22: C8 80 39 03 76 0B 8B 41 0D A9 01 00 00 00 74 01 ..9.v..A......t. 0019F188: 0203C932 0040AD32: 52 85 DB 75 C9 89 F0 39 FC 74 0C 5A E8 85 4B 00 R..u...9.t.Z..K. 0019F184: 0019F1A0 0040AD42: 00 89 F0 39 FC 75 F4 5F 5E 5B C3 8D 40 00 53 56 ...9.u._^[..@.SV 0019F180: 10F3DAD4 0040AD52: 57 89 C3 89 C6 89 C7 E8 B6 89 00 00 89 F0 8B 36 W..............6 0019F17C: 10F50A01 0040AD62: 8B 56 B4 8B 76 D0 85 D2 74 07 E8 CF 3E 00 00 89 .V..v...t...>... 0019F178: 10F3DAC8 0040AD72: D8 85 F6 75 E9 89 D8 E8 1E 08 00 00 5F 5E 5B C3 ...u........_^[. 0019F174: 02064346 0040AD82: 8B C0 87 D1 81 F9 00 00 00 FF 73 11 81 F9 00 00 ..........s.....