date/time : 2019-01-23, 00:26:00, 27ms computer name : EPPLKRAW0363 user name : dmytro_ovdiienko registered owner : Windows User operating system : Windows 10 x64 build 17763 system language : Russian system up time : 12 days 8 hours program up time : 16 seconds processors : 4x Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz physical memory : 5373/16205 MB (free/total) free disk space : (C:) 77.83 GB display mode : 1536x864, 32 bit process id : $2b6c allocated memory : 243.95 MB largest free block : 1.88 GB executable : streamwriter.exe exec. date/time : 2018-08-02 18:27 version : 5.4.2.1 compiled with : Delphi XE madExcept version : 4.0.20 callstack crc : $96b132a2, $b1d98b07, $a0b5b899 exception number : 1 exception class : EAccessViolation exception message : Zugriffsverletzung bei Adresse 007497D1 in Modul 'streamwriter.exe'. Lesen von Adresse 05BA3D93. main thread ($4d74): 007497d1 +041 streamwriter.exe StreamBrowserView 420 +7 TMStreamTree.DoGetImageIndex 0063c3f5 +07d streamwriter.exe VirtualTrees 22245 +11 TBaseVirtualTree.GetImageSize 0062d011 +069 streamwriter.exe VirtualTrees 12569 +13 TBaseVirtualTree.CalculateVerticalAlignments 0064b3d2 +732 streamwriter.exe VirtualTrees 30957 +157 TBaseVirtualTree.PaintTree 0063fcf5 +0bd streamwriter.exe VirtualTrees 24257 +23 TBaseVirtualTree.Paint 0074a1a7 +023 streamwriter.exe StreamBrowserView 659 +1 TMStreamTree.Paint 00464022 +016 streamwriter.exe Graphics TCanvas.SetPenPos 00512b5f +057 streamwriter.exe Controls TCustomControl.PaintWindow 0050d2b9 +055 streamwriter.exe Controls TWinControl.PaintHandler 0050da98 +048 streamwriter.exe Controls TWinControl.WMPaint 00512af9 +011 streamwriter.exe Controls TCustomControl.WMPaint 006352a1 +065 streamwriter.exe VirtualTrees 17966 +8 TBaseVirtualTree.WMPaint 0050883c +2d4 streamwriter.exe Controls TControl.WndProc 0050d100 +568 streamwriter.exe Controls TWinControl.WndProc 0064310c +0e8 streamwriter.exe VirtualTrees 26012 +32 TBaseVirtualTree.WndProc 0074a912 +012 streamwriter.exe StreamBrowserView 816 +1 TMStreamTree.WndProc 0050c7a0 +02c streamwriter.exe Controls TWinControl.MainWndProc 00451430 +014 streamwriter.exe Classes StdWndProc 76fb28eb +04b ntdll.dll KiUserCallbackDispatcher 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk thread $3cdc: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $5bfc: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $3018: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $3df8: 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 501ac38b +000 dsound.DLL thread $51dc: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $1a58: 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 501ac38b +000 dsound.DLL thread $1514: 7479fbc3 +93 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +0d KERNELBASE.dll WaitForSingleObject 0058e4a9 +0d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +37 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 0f821a80 +00 bass.dll thread $6de8: 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 0f844564 +000 bass.dll thread $28d0: 7479fbc3 +93 KERNELBASE.dll WaitForSingleObjectEx 0058e4a9 +0d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +37 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 0f844582 +00 bass.dll thread $5808: 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 501ac38b +000 dsound.DLL thread $4a68 (TSchedulerThread): 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 00728a73 +413 streamwriter.exe Scheduler 228 +73 TSchedulerThread.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 00728518 +018 streamwriter.exe Scheduler 98 +1 TSchedulerThread.Create thread $6798 (TWorkerThread): 7479fbc3 +93 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +0d KERNELBASE.dll WaitForSingleObject 00604b9e +26 streamwriter.exe VirtualTrees.WorkerThread 150 +4 TWorkerThread.Execute 0058e5c7 +2b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +42 streamwriter.exe Classes ThreadProc 004073f4 +28 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +0d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +37 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 00604ab6 +16 streamwriter.exe VirtualTrees.WorkerThread 97 +1 TWorkerThread.Create thread $5074: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $1128: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $300c: 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 76454e57 +000 combase.dll thread $4d00 (TFileWatcher): 747a251d +12d KERNELBASE.dll WaitForMultipleObjectsEx 747a23d3 +013 KERNELBASE.dll WaitForMultipleObjects 0077f7e0 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 0077f65a +02e streamwriter.exe FileWatcher 68 +1 TFileWatcher.Create thread $2db4 (THomeThread): 7479fbc3 +093 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +00d KERNELBASE.dll WaitForSingleObject 00424fe6 +002 streamwriter.exe SysUtils WaitForSyncWaitObj 0042518f +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 43 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 43 +0 TMonitor.Wait 0044f0ab +13b streamwriter.exe Classes TThread.Synchronize 0044f141 +029 streamwriter.exe Classes TThread.Synchronize 005d086c +028 streamwriter.exe Sockets 682 +6 TSocketThread.Sync 0071460e +44e streamwriter.exe HomeCommunication 521 +64 THomeThread.DoServerDataReceived 0071401b +0bb streamwriter.exe HomeCommunication 387 +11 THomeThread.DoReceivedCommand 0070bf7b +05f streamwriter.exe Communication 198 +8 TCommandThreadBase.DoReceivedData 005cfebf +967 streamwriter.exe Sockets 577 +207 TSocketThread.Execute 76fb5c92 +092 ntdll.dll bsearch 76fb5c5d +05d ntdll.dll bsearch 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 005cf28d +035 streamwriter.exe Sockets 238 +1 TSocketThread.Create thread $2770: 0058e4a9 +0d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +37 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk >> created by thread $57bc at: 737f1bc4 +00 mswsock.dll thread $44c4 (TICEThread): 7479fbc3 +093 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +00d KERNELBASE.dll WaitForSingleObject 00424fe6 +002 streamwriter.exe SysUtils WaitForSyncWaitObj 0042518f +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 43 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 43 +0 TMonitor.Wait 0044f0ab +13b streamwriter.exe Classes TThread.Synchronize 0044f141 +029 streamwriter.exe Classes TThread.Synchronize 005d086c +028 streamwriter.exe Sockets 682 +6 TSocketThread.Sync 005d20c0 +00c streamwriter.exe HTTPThread 241 +0 THTTPThread.DoSpeedChange 00725578 +000 streamwriter.exe ICEThread 591 +0 TICEThread.DoSpeedChange 005d2032 +056 streamwriter.exe HTTPThread 222 +8 THTTPThread.DoReceivedData 00725570 +000 streamwriter.exe ICEThread 585 +0 TICEThread.DoReceivedData 005cfebf +967 streamwriter.exe Sockets 577 +207 TSocketThread.Execute 00725580 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 005cf28d +035 streamwriter.exe Sockets 238 +1 TSocketThread.Create thread $52f0 (TICEThread): 7479fbc3 +093 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +00d KERNELBASE.dll WaitForSingleObject 00424fe6 +002 streamwriter.exe SysUtils WaitForSyncWaitObj 0042518f +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 43 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 43 +0 TMonitor.Wait 0044f0ab +13b streamwriter.exe Classes TThread.Synchronize 0044f141 +029 streamwriter.exe Classes TThread.Synchronize 005d086c +028 streamwriter.exe Sockets 682 +6 TSocketThread.Sync 005d20c0 +00c streamwriter.exe HTTPThread 241 +0 THTTPThread.DoSpeedChange 00725578 +000 streamwriter.exe ICEThread 591 +0 TICEThread.DoSpeedChange 005d2032 +056 streamwriter.exe HTTPThread 222 +8 THTTPThread.DoReceivedData 00725570 +000 streamwriter.exe ICEThread 585 +0 TICEThread.DoReceivedData 005cfebf +967 streamwriter.exe Sockets 577 +207 TSocketThread.Execute 00725580 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 005cf28d +035 streamwriter.exe Sockets 238 +1 TSocketThread.Create thread $5d34 (TICEThread): 7479fbc3 +093 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +00d KERNELBASE.dll WaitForSingleObject 00424fe6 +002 streamwriter.exe SysUtils WaitForSyncWaitObj 0042518f +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 43 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 43 +0 TMonitor.Wait 0044f0ab +13b streamwriter.exe Classes TThread.Synchronize 0044f141 +029 streamwriter.exe Classes TThread.Synchronize 005d086c +028 streamwriter.exe Sockets 682 +6 TSocketThread.Sync 005cf3e1 +00d streamwriter.exe Sockets 288 +1 TSocketThread.DoBeforeEndedEvent 005d018f +c37 streamwriter.exe Sockets 638 +268 TSocketThread.Execute 00725580 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 005cf28d +035 streamwriter.exe Sockets 238 +1 TSocketThread.Create thread $934 (TICEThread): 7479fbc3 +093 KERNELBASE.dll WaitForSingleObjectEx 7479fb1d +00d KERNELBASE.dll WaitForSingleObject 00424fe6 +002 streamwriter.exe SysUtils WaitForSyncWaitObj 0042518f +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 43 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 43 +0 TMonitor.Wait 0044f0ab +13b streamwriter.exe Classes TThread.Synchronize 0044f141 +029 streamwriter.exe Classes TThread.Synchronize 005d086c +028 streamwriter.exe Sockets 682 +6 TSocketThread.Sync 005cf3e1 +00d streamwriter.exe Sockets 288 +1 TSocketThread.DoBeforeEndedEvent 005d018f +c37 streamwriter.exe Sockets 638 +268 TSocketThread.Execute 00725580 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 0058e5c7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e76a +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 43 +0 ThreadWrapper 0058e4a9 +00d streamwriter.exe madExcept CallThreadProcSafe 0058e513 +037 streamwriter.exe madExcept ThreadExceptFrame 74d4fe07 +017 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($4d74) at: 005cf28d +035 streamwriter.exe Sockets 238 +1 TSocketThread.Create thread $374c: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk thread $6124: 74d4fe07 +17 KERNEL32.DLL BaseThreadInitThunk modules: 00400000 streamwriter.exe 5.4.2.1 C:\Users\dmytro_ovdiienko\Programs\streamWriter 0e0a0000 tiptsf.dll 6.2.17763.1 C:\Program Files (x86)\Common Files\microsoft shared\ink 0f1c0000 bass_aac.dll 2.4.5.1 C:\Users\dmytro_ovdiienko\AppData\Local\Temp\streamWriter 0f820000 bass.dll 2.4.12.1 C:\Users\dmytro_ovdiienko\AppData\Local\Temp\streamWriter 11000000 libeay32.dll 1.0.2.12 C:\Users\dmytro_ovdiienko\AppData\Local\Temp\streamWriter 12000000 ssleay32.dll 1.0.2.12 C:\Users\dmytro_ovdiienko\AppData\Local\Temp\streamWriter 50160000 dsound.DLL 6.2.17763.1 C:\WINDOWS\SYSTEM32 5b0d0000 mscms.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 60060000 dcomp.dll 6.2.17763.1 C:\WINDOWS\system32 601c0000 dataexchange.dll 6.2.17763.1 C:\WINDOWS\system32 60850000 resourcepolicyclient.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 60a30000 CoreUIComponents.dll 6.2.17763.1 C:\WINDOWS\System32 611b0000 CoreMessaging.dll 6.2.17763.194 C:\WINDOWS\System32 61240000 TextInputFramework.dll 6.2.17763.1 C:\WINDOWS\System32 613c0000 AUDIOSES.DLL 6.2.17763.134 C:\WINDOWS\SYSTEM32 629b0000 RMCLIENT.dll 6.2.17763.194 C:\WINDOWS\system32 629d0000 twinapi.appcore.dll 6.2.17763.168 C:\WINDOWS\system32 641c0000 dxgi.dll 6.2.17763.1 C:\WINDOWS\system32 64270000 d3d11.dll 6.2.17763.1 C:\WINDOWS\system32 64860000 MMDevApi.dll 6.2.17763.1 C:\WINDOWS\System32 69a80000 ColorAdapterClient.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 69d70000 ntmarta.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 69fb0000 WindowsCodecs.dll 6.2.17763.55 C:\WINDOWS\SYSTEM32 6c030000 oleacc.dll 7.2.17763.1 C:\WINDOWS\SYSTEM32 6c0b0000 AVRT.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6c0e0000 olepro32.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6c100000 winspool.drv 6.2.17763.1 C:\WINDOWS\SYSTEM32 6c170000 MSACM32.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6c4d0000 rasadhlp.dll 6.2.17763.1 C:\Windows\System32 6c4e0000 msimg32.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6d120000 wintypes.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6d560000 WINMMBASE.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6d5c0000 winmm.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6ebf0000 wsock32.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6ef30000 dwmapi.dll 6.2.17763.1 C:\WINDOWS\system32 6ef60000 USERENV.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 6ef90000 comctl32.dll 6.10.17763.253 C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.253_none_4d5f6f651b9e27d4 70190000 uxtheme.dll 6.2.17763.1 C:\WINDOWS\system32 70210000 FaultRep.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 70330000 PROPSYS.dll 7.0.17763.1 C:\WINDOWS\SYSTEM32 70780000 wshbth.dll 6.2.17763.1 C:\WINDOWS\system32 70790000 NLAapi.dll 6.2.17763.134 C:\WINDOWS\system32 707b0000 winrnr.dll 6.2.17763.1 C:\WINDOWS\System32 707c0000 pnrpnsp.dll 6.2.17763.1 C:\WINDOWS\system32 707e0000 napinsp.dll 6.2.17763.1 C:\WINDOWS\system32 70830000 fwpuclnt.dll 6.2.17763.1 C:\WINDOWS\System32 70890000 DNSAPI.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 70960000 IPHLPAPI.DLL 6.2.17763.1 C:\WINDOWS\SYSTEM32 709a0000 DEVOBJ.dll 6.2.17763.1 C:\WINDOWS\System32 730e0000 version.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 737b0000 rsaenh.dll 6.2.17763.1 C:\WINDOWS\system32 737e0000 mswsock.dll 6.2.17763.1 C:\WINDOWS\System32 73840000 dbgcore.DLL 6.2.17763.1 C:\WINDOWS\SYSTEM32 73870000 dbghelp.dll 6.2.17763.1 C:\WINDOWS\SYSTEM32 745a0000 CRYPTBASE.dll 6.2.17763.1 C:\WINDOWS\System32 745b0000 SspiCli.dll 6.2.17763.1 C:\WINDOWS\System32 745d0000 RPCRT4.dll 6.2.17763.194 C:\WINDOWS\System32 74690000 KERNELBASE.dll 6.2.17763.134 C:\WINDOWS\System32 74890000 shcore.dll 6.2.17763.1 C:\WINDOWS\System32 74920000 user32.dll 6.2.17763.168 C:\WINDOWS\System32 74ac0000 bcryptPrimitives.dll 6.2.17763.1 C:\WINDOWS\System32 74b90000 GDI32.dll 6.2.17763.1 C:\WINDOWS\System32 74d30000 KERNEL32.DLL 6.2.17763.1 C:\WINDOWS\System32 74e10000 win32u.dll 6.2.17763.1 C:\WINDOWS\System32 74e30000 powrprof.dll 6.2.17763.1 C:\WINDOWS\System32 74e90000 MSASN1.dll 6.2.17763.1 C:\WINDOWS\System32 74ea0000 msvcp_win.dll 6.2.17763.1 C:\WINDOWS\System32 74f20000 clbcatq.dll 2001.12.10941.16384 C:\WINDOWS\System32 75000000 shlwapi.dll 6.2.17763.1 C:\WINDOWS\System32 75050000 cfgmgr32.dll 6.2.17763.1 C:\WINDOWS\System32 750a0000 IMM32.DLL 6.2.17763.1 C:\WINDOWS\System32 750f0000 shell32.dll 6.2.17763.168 C:\WINDOWS\System32 75640000 sechost.dll 6.2.17763.1 C:\WINDOWS\System32 756c0000 WS2_32.dll 6.2.17763.1 C:\WINDOWS\System32 75720000 CRYPT32.dll 6.2.17763.1 C:\WINDOWS\System32 75950000 gdi32full.dll 6.2.17763.194 C:\WINDOWS\System32 75ac0000 profapi.dll 6.2.17763.1 C:\WINDOWS\System32 75ae0000 oleaut32.dll 6.2.17763.1 C:\WINDOWS\System32 75b80000 NSI.dll 6.2.17763.1 C:\WINDOWS\System32 75ff0000 ucrtbase.dll 6.2.17763.1 C:\WINDOWS\System32 76120000 advapi32.dll 6.2.17763.1 C:\WINDOWS\System32 761a0000 msvcrt.dll 7.0.17763.1 C:\WINDOWS\System32 762c0000 ole32.dll 6.2.17763.134 C:\WINDOWS\System32 763c0000 combase.dll 6.2.17763.253 C:\WINDOWS\System32 76640000 MSCTF.dll 6.2.17763.1 C:\WINDOWS\System32 76780000 cryptsp.dll 6.2.17763.1 C:\WINDOWS\System32 76800000 kernel.appcore.dll 6.2.17763.1 C:\WINDOWS\System32 76810000 comdlg32.dll 6.2.17763.1 C:\WINDOWS\System32 76910000 bcrypt.dll 6.2.17763.1 C:\WINDOWS\System32 76930000 windows.storage.dll 6.2.17763.168 C:\WINDOWS\System32 76f40000 ntdll.dll 6.2.17763.194 C:\WINDOWS\SYSTEM32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0060 Registry 0 0 0 0180 smss.exe 0 0 0 0220 csrss.exe 0 0 0 0274 wininit.exe 0 0 0 02c0 services.exe 0 0 0 02d0 lsass.exe 0 0 0 0340 svchost.exe 0 0 0 0384 fontdrvhost.exe 0 0 0 038c svchost.exe 0 0 0 03d0 WUDFHost.exe 0 0 0 0224 svchost.exe 0 0 0 0284 svchost.exe 0 0 0 0498 svchost.exe 0 0 0 04ac svchost.exe 0 0 0 0504 svchost.exe 0 0 0 052c svchost.exe 0 0 0 0574 svchost.exe 0 0 0 057c svchost.exe 0 0 0 0594 svchost.exe 0 0 0 05e4 svchost.exe 0 0 0 0638 svchost.exe 0 0 0 06a4 svchost.exe 0 0 0 06b4 svchost.exe 0 0 0 075c svchost.exe 0 0 0 07ac svchost.exe 0 0 0 07b4 svchost.exe 0 0 0 07f8 svchost.exe 0 0 0 0808 svchost.exe 0 0 0 0874 svchost.exe 0 0 0 087c svchost.exe 0 0 0 088c svchost.exe 0 0 0 0894 svchost.exe 0 0 0 0910 svchost.exe 0 0 0 0928 igfxCUIService.exe 0 0 0 0954 svchost.exe 0 0 0 095c svchost.exe 0 0 0 0990 dasHost.exe 0 0 0 09d8 svchost.exe 0 0 0 09fc svchost.exe 0 0 0 0a3c svchost.exe 0 0 0 0a70 svchost.exe 0 0 0 0abc svchost.exe 0 0 0 0ac8 RtkAudioService64.exe 0 0 0 0b3c svchost.exe 0 0 0 0b44 svchost.exe 0 0 0 0b50 svchost.exe 0 0 0 0b5c vpnagent.exe 0 0 0 0988 svchost.exe 0 0 0 0c04 svchost.exe 0 0 0 0c68 svchost.exe 0 0 0 0d64 svchost.exe 0 0 0 0d98 wlanext.exe 0 0 0 0da4 spoolsv.exe 0 0 0 0dac conhost.exe 0 0 0 0df4 svchost.exe 0 0 0 0e30 svchost.exe 0 0 0 0e7c svchost.exe 0 0 0 0e94 svchost.exe 0 0 0 0ea4 WmiPrvSE.exe 0 0 0 1058 HidMonitorSvc.exe 0 0 0 1064 svchost.exe 0 0 0 1070 IntelCpHDCPSvc.exe 0 0 0 10a0 DellRctlService.exe 0 0 0 10a8 svchost.exe 0 0 0 10b4 esif_uf.exe 0 0 0 10bc svchost.exe 0 0 0 10d0 ibtsiva.exe 0 0 0 10d8 svchost.exe 0 0 0 10fc IpOverUsbSvc.exe 0 0 0 1160 svchost.exe 0 0 0 1168 svchost.exe 0 0 0 1178 svchost.exe 0 0 0 1190 MsMpEng.exe 0 0 0 11a4 WavesSysSvc64.exe 0 0 0 11c4 svchost.exe 0 0 0 127c svchost.exe 0 0 0 12bc svchost.exe 0 0 0 1394 svchost.exe 0 0 0 14d0 NisSrv.exe 0 0 0 17f0 svchost.exe 0 0 0 17f8 svchost.exe 0 0 0 1540 PresentationFontCache.exe 0 0 0 10c4 svchost.exe 0 0 0 1820 svchost.exe 0 0 0 19b4 svchost.exe 0 0 0 1a9c svchost.exe 0 0 0 1eec SearchIndexer.exe 0 0 0 18e0 svchost.exe 0 0 0 23c0 svchost.exe 0 0 0 2404 SecurityHealthService.exe 0 0 0 27f4 svchost.exe 0 0 0 2f50 svchost.exe 0 0 0 34b4 svchost.exe 0 0 0 1dc0 SgrmBroker.exe 0 0 0 1ce8 svchost.exe 0 0 0 2108 svchost.exe 0 0 0 0bf8 svchost.exe 0 0 0 3c4c svchost.exe 0 0 0 078c svchost.exe 0 0 0 6c98 svchost.exe 0 0 0 2220 svchost.exe 0 0 0 6b10 csrss.exe 2 0 0 6944 winlogon.exe 2 0 0 5860 fontdrvhost.exe 2 0 0 6fdc dwm.exe 2 0 0 6110 Apoint.exe 2 107 47 normal C:\Program Files\DellTPad 04fc RAVBg64.exe 2 0 0 4fa4 RAVBg64.exe 2 0 0 30a0 esif_assist_64.exe 2 0 2 normal C:\Windows\Temp\DPTF 55f8 sihost.exe 2 0 20 normal C:\Windows\System32 2364 svchost.exe 2 0 1 normal C:\Windows\System32 651c svchost.exe 2 4 11 normal C:\Windows\System32 5218 taskhostw.exe 2 10 6 normal C:\Windows\System32 56c8 unsecapp.exe 2 0 0 6468 igfxEM.exe 2 13 15 normal C:\Windows\System32\DriverStore\FileRepository\ki125177.inf_amd64_d9d520fc51d8a7f4 5ee8 ApMsgFwd.exe 2 0 0 1cd0 svchost.exe 2 0 12 normal C:\Windows\System32 5bf4 hidfind.exe 2 0 3 normal C:\Program Files\DellTPad 62c8 ApntEx.exe 2 10 5 normal C:\Program Files\DellTPad 5d50 conhost.exe 2 20 11 normal C:\Windows\System32 015c taskhostw.exe 2 0 0 5ebc svchost.exe 2 0 2 normal C:\Windows\System32 6a94 RuntimeBroker.exe 2 43 9 normal C:\Windows\System32 2678 RuntimeBroker.exe 2 42 14 normal C:\Windows\System32 2b30 YourPhone.exe 2 0 7 normal C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20094.0_x64__8wekyb3d8bbwe 3418 ctfmon.exe 2 0 0 6708 SettingSyncHost.exe 2 3 7 below normal C:\Windows\System32 1cc4 RuntimeBroker.exe 2 0 1 normal C:\Windows\System32 6a24 RuntimeBroker.exe 2 40 4 normal C:\Windows\System32 54ec smartscreen.exe 2 0 5 normal C:\Windows\System32 3974 SecurityHealthSystray.exe 2 7 5 normal C:\Windows\System32 604c RtkNGUI64.exe 2 18 26 normal C:\Program Files\Realtek\Audio\HDA 0164 RAVBg64.exe 2 13 17 normal C:\Program Files\Realtek\Audio\HDA 57fc WavesSvc64.exe 2 0 2 normal C:\Program Files\Waves\MaxxAudio 66ac ApplicationFrameHost.exe 2 54 32 normal C:\Windows\System32 31c8 Skype.exe 2 198 183 normal C:\Program Files (x86)\Skype\Phone 5ad0 lync.exe 2 291 250 normal C:\Program Files\MSOffice\Office16 0620 dllhost.exe 2 0 3 normal C:\Windows\System32 337c RAVBg64.exe 2 5 12 below normal C:\Program Files\Realtek\Audio\HDA 4320 KeyboardLeds.exe 2 110 93 normal C:\Program Files (x86)\Keyboard LEDs 6848 vpnui.exe 2 123 98 normal C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client 5c94 chrome.exe 2 134 114 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 2abc chrome.exe 2 2 4 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 2c04 chrome.exe 2 2 4 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6d08 chrome.exe 2 18 20 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6460 chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 5cbc chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 413c UcMapi.exe 2 44 27 normal C:\Program Files\MSOffice\Office16 2b04 RuntimeBroker.exe 2 36 5 normal C:\Windows\System32 3364 svchost.exe 2 0 1 normal C:\Windows\System32 5104 WINWORD.EXE 2 478 160 normal C:\Program Files\MSOffice\Office16 40c4 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6334 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 08a8 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6554 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 1928 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 19e8 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 62b4 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 55d0 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6cfc chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 3e5c CompPkgSrv.exe 2 0 1 normal C:\Windows\System32 54d8 lynchtmlconv.exe 2 72 14 normal C:\Program Files\MSOffice\Office16 497c Video.UI.exe 2 0 7 normal C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe 6e3c RuntimeBroker.exe 2 0 1 normal C:\Windows\System32 5734 svchost.exe 2 0 1 normal C:\Windows\System32 62dc svchost.exe 2 0 1 normal C:\Windows\System32 08c4 svchost.exe 0 0 0 2304 RuntimeBroker.exe 2 36 8 normal C:\Windows\System32 64f4 Far.exe 2 13 5 normal C:\Users\dmytro_ovdiienko\Programs\far21 466c conhost.exe 2 23 21 normal C:\Windows\System32 4590 explorer.exe 2 613 666 normal C:\Windows 5f5c ShellExperienceHost.exe 2 14 103 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy 171c SearchUI.exe 2 23 65 normal C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy 1c84 Microsoft.Notes.exe 2 13 48 normal C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.1.46.0_x64__8wekyb3d8bbwe 5208 Microsoft.Notes.DesktopBridge.exe 2 0 1 normal C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.1.46.0_x64__8wekyb3d8bbwe 5248 LockApp.exe 2 6 44 normal C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy 6cc4 RuntimeBroker.exe 2 0 134 normal C:\Windows\System32 3c08 Far.exe 2 13 5 normal C:\Users\dmytro_ovdiienko\Programs\far21 2f4c conhost.exe 2 28 22 normal C:\Windows\System32 60dc chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 1dd4 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6e68 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 0748 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 3194 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 0454 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 46a8 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 4c58 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 4120 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 31c4 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 29c4 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 2600 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 5c1c SystemSettingsBroker.exe 2 2 11 normal C:\Windows\System32 1040 chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 4508 Far.exe 2 13 5 normal C:\Users\dmytro_ovdiienko\Programs\far21 4b0c conhost.exe 2 24 22 normal C:\Windows\System32 35b8 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 3820 slack.exe 2 51 54 normal C:\Users\dmytro_ovdiienko\AppData\Local\slack\app-3.3.6 157c slack.exe 2 5 11 normal C:\Users\dmytro_ovdiienko\AppData\Local\slack\app-3.3.6 3be0 slack.exe 2 2 3 normal C:\Users\dmytro_ovdiienko\AppData\Local\slack\app-3.3.6 5b30 slack.exe 2 0 1 normal C:\Users\dmytro_ovdiienko\AppData\Local\slack\app-3.3.6 6fd8 slack.exe 2 0 1 normal C:\Users\dmytro_ovdiienko\AppData\Local\slack\app-3.3.6 5f14 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 5c48 chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 6ad8 chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 2804 DismHost.exe 2 0 0 45f4 OneDrive.exe 2 52 44 normal C:\Users\dmytro_ovdiienko\AppData\Local\Microsoft\OneDrive 4440 OneDrive.exe 2 55 47 normal C:\Users\dmytro_ovdiienko\AppData\Local\Microsoft\OneDrive 2910 IntelCpHeciSvc.exe 0 0 0 5d10 OUTLOOK.EXE 2 686 733 normal C:\Program Files\MSOffice\Office16 4d10 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 2050 svchost.exe 0 0 0 6ffc Far.exe 2 11 5 normal C:\Users\dmytro_ovdiienko\Programs\far21 5b20 conhost.exe 2 24 21 normal C:\Windows\System32 42b8 MicrosoftEdge.exe 2 11 59 normal C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe 5928 browser_broker.exe 2 0 3 normal C:\Windows\System32 0844 MicrosoftEdgeSH.exe 2 0 10 normal C:\Windows\System32 6458 MicrosoftEdgeCP.exe 2 0 51 normal C:\Windows\System32 3bdc chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 3070 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 1908 Microsoft.Photos.exe 2 0 7 normal C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18112.20010.0_x64__8wekyb3d8bbwe 0b90 RuntimeBroker.exe 2 37 17 normal C:\Windows\System32 4fc4 devenv.exe 2 310 111 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE 4204 PerfWatson2.exe 2 3 11 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE 43f0 ServiceHub.Host.Node.x86.exe 2 0 3 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\ServiceHub\Hosts\ServiceHub.Host.Node.x86 3eb8 conhost.exe 2 10 3 normal C:\Windows\System32 66f0 VcxprojReader.exe 2 0 2 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE 3998 VcxprojReader.exe 2 0 2 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE 6b60 VcxprojReader.exe 2 0 2 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE 4a28 conhost.exe 2 0 1 normal C:\Windows\System32 0b68 conhost.exe 2 0 1 normal C:\Windows\System32 32cc conhost.exe 2 0 1 normal C:\Windows\System32 4ad4 ServiceHub.Host.CLR.x86.exe 2 1 9 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86 2fc0 ServiceHub.VSDetouredHost.exe 2 0 4 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86 3384 ServiceHub.IdentityHost.exe 2 0 2 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86 5c38 ServiceHub.SettingsHost.exe 2 0 3 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\ServiceHub\Hosts\ServiceHub.Host.CLR.x86 5c50 Microsoft.Alm.Shared.Remoting.RemoteContainer.dll 2 0 2 below normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\PrivateAssemblies 6700 vcpkgsrv.exe 2 0 1 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\VC\vcpackages 3604 vcpkgsrv.exe 2 0 1 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\VC\vcpackages 61e4 vcpkgsrv.exe 2 0 1 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\VC\vcpackages 6c68 vcpkgsrv.exe 2 0 2 normal C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\Common7\IDE\VC\vcpackages 26cc svchost.exe 0 0 0 1318 SkypeBrowserHost.exe 2 2 15 normal C:\Program Files (x86)\Skype\Browser 0774 chrome.exe 2 0 0 normal C:\Users\dmytro_ovdiienko\Programs\chrome-win32 3358 HxOutlook.exe 2 13 34 normal C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11029.20108.0_x64__8wekyb3d8bbwe 4b14 RuntimeBroker.exe 2 0 1 normal C:\Windows\System32 2a54 HxTsr.exe 2 0 4 normal C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11029.20108.0_x64__8wekyb3d8bbwe 4c30 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 23c8 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 19a4 GoldenDict.exe 2 49 26 normal C:\Users\dmytro_ovdiienko\Programs\GoldenDict 2c84 chrome.exe 2 0 0 idle C:\Users\dmytro_ovdiienko\Programs\chrome-win32 527c svchost.exe 0 0 0 2adc audiodg.exe 0 0 0 2e98 svchost.exe 0 0 0 0650 svchost.exe 0 0 0 391c svchost.exe 0 0 0 3470 backgroundTaskHost.exe 2 0 10 normal C:\Windows\System32 59bc RuntimeBroker.exe 2 0 5 normal C:\Windows\System32 21e0 svchost.exe 0 0 0 4568 WmiPrvSE.exe 0 0 0 52a0 svchost.exe 0 0 0 2b6c streamwriter.exe 2 843 280 normal C:\Users\dmytro_ovdiienko\Programs\streamWriter hardware: + {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc} - Fax - HP LaserJet 500 MFP M525 (EPPLKRANP0006) - Microsoft Print to PDF - Root Print Queue + {36fc9e60-c465-11cf-8056-444553540000} - Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft) - USB Composite Device - USB Root Hub (USB 3.0) + {4d36e966-e325-11ce-bfc1-08002be10318} - ACPI x64-based PC + {4d36e967-e325-11ce-bfc1-08002be10318} - Samsung SSD 960 EVO 500GB + {4d36e968-e325-11ce-bfc1-08002be10318} - Intel(R) HD Graphics 520 (driver 22.20.16.4836) + {4d36e96b-e325-11ce-bfc1-08002be10318} - Standard PS/2 Keyboard + {4d36e96c-e325-11ce-bfc1-08002be10318} - Intel(R) Display Audio (driver 10.23.0.567) - Realtek Audio (driver 6.0.1.6122) + {4d36e96e-e325-11ce-bfc1-08002be10318} - Generic PnP Monitor + {4d36e96f-e325-11ce-bfc1-08002be10318} - Dell Touchpad (driver 10.2207.101.108) + {4d36e970-e325-11ce-bfc1-08002be10318} - Realtek PCIE CardReader (driver 10.0.14393.21292) + {4d36e972-e325-11ce-bfc1-08002be10318} - Bluetooth Device (Personal Area Network) - Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 (driver 4.5.4025.0) - Intel(R) Dual Band Wireless-AC 8260 - Intel(R) Ethernet Connection I219-LM (driver 12.13.17.4) - Microsoft Kernel Debug Network Adapter - Microsoft Wi-Fi Direct Virtual Adapter - Microsoft Wi-Fi Direct Virtual Adapter #2 - WAN Miniport (IKEv2) - WAN Miniport (IP) - WAN Miniport (IPv6) - WAN Miniport (L2TP) - WAN Miniport (Network Monitor) - WAN Miniport (PPPOE) - WAN Miniport (PPTP) - WAN Miniport (SSTP) + {4d36e978-e325-11ce-bfc1-08002be10318} - ECP Printer Port (LPT1) - Standard Serial over Bluetooth link (COM3) - Standard Serial over Bluetooth link (COM4) + {4d36e97b-e325-11ce-bfc1-08002be10318} - Intel Chipset SATA RAID Controller (driver 15.44.0.1010) - Microsoft Storage Spaces Controller - Standard NVM Express Controller + {4d36e97d-e325-11ce-bfc1-08002be10318} - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Processor Aggregator - ACPI Sleep Button - ACPI Thermal Zone - Bluetooth Hands-Free Audio Profile - Charge Arbitration Driver - Composite Bus Enumerator - High Definition Audio Controller - High precision event timer - Intel(R) Management Engine Interface (driver 11.7.0.1045) - Intel(R) Power Engine Plug-in - Legacy device - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft Basic Display Driver - Microsoft Basic Render Driver - Microsoft Hyper-V Virtualization Infrastructure Driver - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator - Microsoft Windows Management Interface for ACPI - Microsoft Windows Management Interface for ACPI - Mobile 6th/7th Generation Intel(R) Processor Family I/O LPC Controller (U Premium SKU) - 9D48 (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O PCI Express Root Port #11 - 9D1A (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O PCI Express Root Port #5 - 9D14 (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O PCI Express Root Port #9 - 9D18 (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O PMC - 9D21 (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O SMBUS - 9D23 (driver 10.1.1.38) - Mobile 6th/7th Generation Intel(R) Processor Family I/O Thermal subsystem - 9D31 (driver 10.1.1.38) - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - NDIS Virtual Network Adapter Enumerator - PCI Express Root Complex - PCI standard host CPU bridge - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - Remote Desktop Device Redirector Bus - STMicroelectronics 3-Axis Digital Accelerometer (driver 2.2.3.13) - System CMOS/real time clock - System timer - UMBus Root Bus Enumerator - Volume Manager + {50127dc3-0f36-415e-a6cc-4cb3be910b65} - Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz - Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz - Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz - Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz + {533c5b84-ec70-11d2-9505-00c04f79deaf} - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + {62f9c741-b25a-46ce-b54c-9bccce08b6f2} - Bluetooth - Microsoft Device Association Root Enumerator - Microsoft GS Wavetable Synth - Microsoft Radio Device Enumeration Bus - Microsoft RRAS Root Enumerator - Wi-Fi + {72631e54-78a4-11d0-bcf7-00aa00b7b32a} - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery + {745a17a0-74d3-11d0-b6fe-00a0c90f57da} - Airplane Mode Switch (driver 17.38.40.165) - Airplane Mode Switch Collection (driver 17.38.40.165) - Dell Radio Control Device (driver 1.0.0.9) + {c166523c-fe0c-4a94-a586-f1a80cfbbf3e} - Microphone Array (Realtek Audio) - Speakers / Headphones (Realtek Audio) + {c3077fcd-9c3c-482f-9317-460712f23efd} - Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver 8.2.10900.330) - Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver 8.2.10900.330) - Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver 8.2.10900.330) - Intel(R) Dynamic Platform and Thermal Framework Manager (driver 8.2.10900.330) - Intel(R) Dynamic Platform and Thermal Framework Processor Participant (driver 8.2.10900.330) + {ca3e7ab9-b4c3-4ae6-8251-579ef933890f} - Integrated Webcam + {d94ee5d8-d189-4994-83d2-f68d7d41b0e6} - Trusted Platform Module 1.2 + {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} - Audio Source Service - Bluetooth Device (RFCOMM Protocol TDI) - Galaxy A3 (2017) - Galaxy A3 (2017) Avrcp Transport - Headset Audio Gateway Service - Intel(R) Wireless Bluetooth(R) (driver 20.10.0.5) - Microsoft Bluetooth Enumerator - Microsoft Bluetooth LE Enumerator - Object Push Service - Personal Area Network NAP Service - Personal Area Network Service - Phonebook Access Pse Service - Sim Access Service cpu registers: eax = 0a86177e ebx = 00000000 ecx = 05ba3d70 edx = 0a861750 esi = 0894d280 edi = 0a861750 eip = 007497d1 esp = 0019f5c0 ebp = 0019f5d0 stack dump: 0019f5c0 1c f6 19 00 80 d2 94 08 - 10 84 74 00 f0 94 37 0a ..........t...7. 0019f5d0 fc f5 19 00 fb c3 63 00 - f0 f5 19 00 f6 f5 19 00 ......c......... 0019f5e0 00 00 00 00 10 84 74 00 - 4c f8 19 00 80 d2 94 08 ......t.L....... 0019f5f0 ff ff ff ff 00 00 00 00 - 50 17 86 0a 28 f6 19 00 ........P...(... 0019f600 17 d0 62 00 1c f6 19 00 - 01 00 00 00 00 00 00 00 ..b............. 0019f610 00 00 00 00 dc 01 00 00 - 10 84 74 00 dc 01 00 00 ..........t..... 0019f620 60 09 d6 07 7c f8 00 01 - 7c f8 19 00 d7 b3 64 00 `...|...|.....d. 0019f630 40 f8 19 00 4c f8 19 00 - 50 17 86 0a 48 f6 19 00 @...L...P...H... 0019f640 28 6b 40 00 7c f8 19 00 - 54 f6 19 00 28 6b 40 00 (k@.|...T...(k@. 0019f650 7c f8 19 00 c0 f8 19 00 - 28 6b 40 00 7c f8 19 00 |.......(k@.|... 0019f660 80 d2 94 08 00 00 00 00 - 10 84 74 00 0c 2e e1 74 ..........t....t 0019f670 f8 83 9f 75 75 19 01 9e - a7 1e 04 94 09 00 00 00 ...uu........... 0019f680 12 00 00 00 4c f8 19 00 - a7 1e 04 94 90 89 9f 75 ....L..........u 0019f690 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0019f6a0 00 00 00 00 00 00 00 00 - 2a 01 00 00 20 00 00 00 ........*... ... 0019f6b0 60 09 d6 07 00 00 00 00 - 50 17 86 0a 00 00 00 00 `.......P....... 0019f6c0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0019f6d0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0019f6e0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0019f6f0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ disassembling: 00749790 public StreamBrowserView.TMStreamTree.DoGetImageIndex: ; function entry point 00749790 413 push ebp 00749791 mov ebp, esp 00749793 push ecx 00749794 push ebx 00749795 push esi 00749796 push edi 00749797 mov ebx, ecx 00749799 mov edi, edx 0074979b mov esi, eax 0074979d 414 mov eax, [ebp+$10] 007497a0 push eax 007497a1 mov eax, [ebp+$c] 007497a4 push eax 007497a5 mov eax, [ebp+8] 007497a8 push eax 007497a9 mov ecx, ebx 007497ab mov edx, edi 007497ad mov eax, esi 007497af call -$110130 ($639684) ; VirtualTrees.TBaseVirtualTree.DoGetImageIndex 007497b4 mov [ebp-4], eax 007497b7 416 mov edx, edi 007497b9 mov eax, esi 007497bb call -$1016e8 ($6480d8) ; VirtualTrees.TBaseVirtualTree.GetNodeData 007497c0 418 test bl, bl 007497c2 jz loc_7497c9 007497c4 cmp bl, 1 007497c7 jnz loc_749804 007497c9 cmp dword ptr [ebp+$10], 0 007497cd jnz loc_749804 007497cf 420 mov ecx, [eax] 007497d1 > movzx edx, byte ptr [ecx+$23] 007497d5 test dl, dl 007497d7 jbe loc_7497e6 007497d9 421 movzx eax, dl 007497dc add eax, $3b 007497df mov edx, [ebp+8] 007497e2 mov [edx], eax 007497e4 jmp loc_749804 007497e6 423 movzx edx, byte ptr [ecx+$24] 007497ea test dl, dl 007497ec jbe loc_7497fb 007497ee 424 movzx eax, dl 007497f1 add eax, $27 007497f4 mov edx, [ebp+8] 007497f7 mov [edx], eax 007497f9 jmp loc_749804 007497fb 426 mov eax, [ebp+8] 007497fe mov dword ptr [eax], $10 00749804 428 mov eax, [ebp-4] 00749807 pop edi 00749808 pop esi 00749809 pop ebx 0074980a pop ecx 0074980b pop ebp 0074980c ret $c