date/time : 2019-08-10, 16:09:41, 246ms computer name : ESPRIMO-5730 user name : Yoxhua registered owner : tecxl operating system : Windows 7 x64 Service Pack 1 build 7601 system language : German system up time : 30 days 3 hours program up time : 4 hours 31 minutes processors : 2x Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz physical memory : 3018/7836 MB (free/total) free disk space : (C:) 29,54 GB (F:) 8,43 GB display mode : 1024x768, 32 bit process id : $dfc allocated memory : 279,33 MB largest free block : 1,99 GB executable : streamwriter.exe exec. date/time : 2019-08-09 22:26 version : 5.4.2.1 compiled with : Delphi 10.3 Rio madExcept version : 5.0.0 callstack crc : $dfc2065c, $ce1d8885, $4f378415 exception number : 1 exception class : EAccessViolation exception message : Zugriffsverletzung bei Adresse 008FD6F7 in Modul 'streamwriter.exe'. Lesen von Adresse 00000020. main thread ($20a8): 008fd6f7 +00f streamwriter.exe SetStreamData 158 +1 TfrmSetStreamData.btnRemoveRegExClick 0064f3cf +073 streamwriter.exe Vcl.Controls TControl.Click 0055775e +01e streamwriter.exe Vcl.StdCtrls TCustomButton.Click 00558274 +00c streamwriter.exe Vcl.StdCtrls TCustomButton.CNCommand 0064ee76 +2be streamwriter.exe Vcl.Controls TControl.WndProc 0065392b +63b streamwriter.exe Vcl.Controls TWinControl.WndProc 00557408 +06c streamwriter.exe Vcl.StdCtrls TButtonControl.WndProc 0064eab0 +024 streamwriter.exe Vcl.Controls TControl.Perform 00653a8f +023 streamwriter.exe Vcl.Controls DoControlMsg 00654513 +00b streamwriter.exe Vcl.Controls TWinControl.WMCommand 0061cd5d +045 streamwriter.exe Vcl.Forms TCustomForm.WMCommand 0064ee76 +2be streamwriter.exe Vcl.Controls TControl.WndProc 0065392b +63b streamwriter.exe Vcl.Controls TWinControl.WndProc 006199dd +64d streamwriter.exe Vcl.Forms TCustomForm.WndProc 004d09a4 +014 streamwriter.exe System.Classes StdWndProc 00652ef8 +02c streamwriter.exe Vcl.Controls TWinControl.MainWndProc 004d09a4 +014 streamwriter.exe System.Classes StdWndProc 769096c0 +047 USER32.dll SendMessageW 76910d60 +016 USER32.dll CallWindowProcW 00653a3a +0e6 streamwriter.exe Vcl.Controls TWinControl.DefaultHandler 0064f81c +010 streamwriter.exe Vcl.Controls TControl.WMLButtonUp 0064ee76 +2be streamwriter.exe Vcl.Controls TControl.WndProc 0065392b +63b streamwriter.exe Vcl.Controls TWinControl.WndProc 00557408 +06c streamwriter.exe Vcl.StdCtrls TButtonControl.WndProc 00652ef8 +02c streamwriter.exe Vcl.Controls TWinControl.MainWndProc 004d09a4 +014 streamwriter.exe System.Classes StdWndProc 76907885 +00a USER32.dll DispatchMessageW 006233cb +0f3 streamwriter.exe Vcl.Forms TApplication.ProcessMessage 0062340e +00a streamwriter.exe Vcl.Forms TApplication.HandleMessage 0061e7ae +1aa streamwriter.exe Vcl.Forms TCustomForm.ShowModal 009074a9 +029 streamwriter.exe Main 2290 +3 TfrmStreamWriterMain.tabClientsSetStreamData 008a6a72 +39a streamwriter.exe ClientTab 1674 +52 TClientTab.StreamBrowserAction 0089a6a8 +188 streamwriter.exe StreamBrowserView 739 +44 TMStreamTree.PopupMenuClick 0063a582 +0aa streamwriter.exe Vcl.Menus TMenuItem.Click 0063bcaf +013 streamwriter.exe Vcl.Menus TMenu.DispatchCommand 0063cf3a +082 streamwriter.exe Vcl.Menus TPopupList.WndProc 00652ef8 +02c streamwriter.exe Vcl.Controls TWinControl.MainWndProc 0063ce89 +01d streamwriter.exe Vcl.Menus TPopupList.MainWndProc 004d09a4 +014 streamwriter.exe System.Classes StdWndProc 76907885 +00a USER32.dll DispatchMessageW 006233cb +0f3 streamwriter.exe Vcl.Forms TApplication.ProcessMessage 0062340e +00a streamwriter.exe Vcl.Forms TApplication.HandleMessage 00623741 +0c9 streamwriter.exe Vcl.Forms TApplication.Run 0091df0d +50d streamwriter.exe streamwriter 271 +99 initialization 76d8343b +010 kernel32.dll BaseThreadInitThunk thread $2124: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $1c10: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $133c: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 75b2176f +fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +89 kernel32.dll WaitForMultipleObjectsEx 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 70275ff1 +00 MMDevApi.dll thread $dc4: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $ea4: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 75b2176f +fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +89 kernel32.dll WaitForMultipleObjectsEx 76d82687 +13 kernel32.dll WaitForMultipleObjects 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $ddc: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $115c: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $ee4: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $f1c: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 706b12b5 +00 bass.dll thread $13cc (TSchedulerThread): 77280186 +00e ntdll.dll NtWaitForMultipleObjects 75b2176f +0fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +089 kernel32.dll WaitForMultipleObjectsEx 76d82687 +013 kernel32.dll WaitForMultipleObjects 00871e98 +554 streamwriter.exe Scheduler 228 +73 TSchedulerThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $f04 (TWorkerThread): 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 0075cc2e +26 streamwriter.exe VirtualTrees.WorkerThread 150 +4 TWorkerThread.Execute 006d4e23 +2b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +49 streamwriter.exe System.Classes ThreadProc 0040a76c +28 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +18 streamwriter.exe System.Classes TThread.Create thread $7c8 (TFileWatcher): 77280186 +00e ntdll.dll NtWaitForMultipleObjects 75b2176f +0fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +089 kernel32.dll WaitForMultipleObjectsEx 76d82687 +013 kernel32.dll WaitForMultipleObjects 008d84c4 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $da4 (THomeThread): 7727f8fa +0e ntdll.dll NtWaitForSingleObject 76582f7b +5b WS2_32.dll WahReferenceContextByHandle 7658673b +9c WS2_32.dll select 006e0046 +16 streamwriter.exe IdGlobal TIdUTF16LittleEndianEncoding.GetChars 006d4e23 +2b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +49 streamwriter.exe System.Classes ThreadProc 0040a76c +28 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +18 streamwriter.exe System.Classes TThread.Create thread $1be8 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $190c (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $ec4 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $16fc (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $bd0 (TICEThread): 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1f58 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $ab8 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $eac (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 00716e01 +c05 streamwriter.exe Sockets 616 +245 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($20a8) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1234: 77281f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 76d8343b +10 kernel32.dll BaseThreadInitThunk modules: 00350000 RocketDock.dll C:\Program Files (x86)\RocketDock 00400000 streamwriter.exe 5.4.2.1 F:\PROGRAMME\(Portable)\[Audio]\streamWriter 10000000 DockShellHook.dll C:\Program Files (x86)\Stardock\ObjectDockFree 11000000 libeay32.dll 1.0.2.15 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 12000000 ssleay32.dll 1.0.2.15 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 67100000 olepro32.dll 6.1.7601.23452 C:\Windows\system32 6c650000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 6cc00000 apphelp.dll 6.1.7601.19050 C:\Windows\system32 6cc50000 winmm.dll 6.1.7601.17514 C:\Windows\system32 6e440000 PROPSYS.dll 7.0.7601.17514 C:\Windows\System32 6f350000 mscms.dll 6.1.7601.23971 C:\Windows\system32 6f6e0000 ClassicExplorer32.dll 4.3.0.0 C:\Program Files\Classic Shell 6fba0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 70010000 bass_aac.dll 2.4.5.8 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 70080000 EhStorShell.dll 6.1.7600.16385 C:\Windows\system32 700f0000 WindowsCodecs.dll 6.2.9200.22551 C:\Windows\system32 70230000 AUDIOSES.DLL 6.1.7601.24499 C:\Windows\system32 70270000 MMDevApi.dll 6.1.7601.17514 C:\Windows\System32 705f0000 MSACM32.dll 6.1.7600.16385 C:\Windows\system32 70650000 FaultRep.dll 6.1.7601.24392 C:\Windows\system32 706b0000 bass.dll 2.4.13.8 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 71bb0000 ntshrui.dll 6.1.7601.17755 C:\Windows\system32 71d70000 slc.dll 6.1.7600.16385 C:\Windows\system32 71d80000 cscapi.dll 6.1.7601.24197 C:\Windows\system32 71dd0000 dwmapi.dll 6.1.7601.18917 C:\Windows\system32 71df0000 oleacc.dll 7.0.0.0 C:\Windows\system32 71fd0000 winspool.drv 6.1.7601.24383 C:\Windows\system32 72030000 avrt.dll 6.1.7600.16385 C:\Windows\system32 726e0000 fwpuclnt.dll 6.1.7601.24000 C:\Windows\System32 72720000 winrnr.dll 6.1.7600.16385 C:\Windows\System32 72730000 pnrpnsp.dll 6.1.7600.16385 C:\Windows\system32 72750000 DNSAPI.dll 6.1.7601.24168 C:\Windows\system32 72b60000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 72ba0000 CRYPTSP.dll 6.1.7601.24499 C:\Windows\system32 73130000 napinsp.dll 6.1.7600.16385 C:\Windows\system32 73140000 NLAapi.dll 6.1.7601.24000 C:\Windows\system32 73150000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32 73160000 WINSTA.dll 6.1.7601.18540 C:\Windows\system32 73450000 RpcRtRemote.dll 6.1.7601.17514 C:\Windows\system32 73460000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 73520000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32 73b10000 mswsock.dll 6.1.7601.23451 C:\Windows\System32 74040000 wkscli.dll 6.1.7601.17514 C:\Windows\system32 74050000 srvcli.dll 6.1.7601.17514 C:\Windows\system32 74070000 netutils.dll 6.1.7601.17514 C:\Windows\system32 74080000 netapi32.dll 6.1.7601.17887 C:\Windows\system32 740a0000 WINNSI.DLL 6.1.7601.23889 C:\Windows\system32 740b0000 IPHLPAPI.DLL 6.1.7601.17514 C:\Windows\system32 74100000 wtsapi32.dll 6.1.7601.17514 C:\Windows\system32 745d0000 version.dll 6.1.7600.16385 C:\Windows\system32 747a0000 COMCTL32.dll 6.10.7601.24483 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b 74970000 CRYPTBASE.dll 6.1.7601.24499 C:\Windows\syswow64 74980000 SspiCli.dll 6.1.7601.24499 C:\Windows\syswow64 749e0000 IMM32.DLL 6.1.7601.17514 C:\Windows\system32 74a40000 MSCTF.dll 6.1.7601.23915 C:\Windows\syswow64 74b10000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64 74ba0000 sechost.dll 6.1.7601.18869 C:\Windows\SysWOW64 74bc0000 ole32.dll 6.1.7601.24486 C:\Windows\syswow64 74e70000 SHELL32.dll 6.1.7601.24468 C:\Windows\syswow64 75ac0000 WINTRUST.dll 6.1.7601.24499 C:\Windows\syswow64 75af0000 LPK.dll 6.1.7601.24439 C:\Windows\syswow64 75b00000 MSASN1.dll 6.1.7601.17514 C:\Windows\syswow64 75b10000 KERNELBASE.dll 6.1.7601.24499 C:\Windows\syswow64 75b60000 ADVAPI32.dll 6.1.7601.24499 C:\Windows\syswow64 75c10000 comdlg32.dll 6.1.7601.17514 C:\Windows\syswow64 75d20000 msvcrt.dll 7.0.7601.17744 C:\Windows\syswow64 75dd0000 USERENV.dll 6.1.7601.24453 C:\Windows\syswow64 75df0000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75e10000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75e20000 iertutil.dll 11.0.9600.19400 C:\Windows\syswow64 76060000 CFGMGR32.dll 6.1.7601.17621 C:\Windows\syswow64 76090000 NSI.dll 6.1.7601.23889 C:\Windows\syswow64 760a0000 WININET.dll 11.0.9600.19400 C:\Windows\syswow64 764e0000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 764f0000 shlwapi.dll 6.1.7601.17514 C:\Windows\syswow64 76550000 profapi.dll 6.1.7600.16385 C:\Windows\syswow64 76560000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64 76570000 normaliz.DLL 6.1.7600.16385 C:\Windows\syswow64 76580000 WS2_32.dll 6.1.7601.23451 C:\Windows\syswow64 765f0000 RPCRT4.dll 6.1.7601.24499 C:\Windows\syswow64 766e0000 DEVOBJ.dll 6.1.7601.17621 C:\Windows\syswow64 76700000 GDI32.dll 6.1.7601.24467 C:\Windows\syswow64 767f0000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76800000 USP10.dll 1.626.7601.24494 C:\Windows\syswow64 768a0000 WLDAP32.dll 6.1.7601.23889 C:\Windows\syswow64 768f0000 USER32.dll 6.1.7601.23594 C:\Windows\syswow64 769f0000 CRYPT32.dll 6.1.7601.24499 C:\Windows\syswow64 76b20000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76b30000 oleaut32.dll 6.1.7601.24440 C:\Windows\syswow64 76bd0000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76d70000 kernel32.dll 6.1.7601.24499 C:\Windows\syswow64 77260000 ntdll.dll 6.1.7601.24499 C:\Windows\SysWOW64 processes: 0000 Idle 0 0 0 0004 System 0 0 0 01a0 smss.exe 0 0 0 02a4 csrss.exe 0 0 0 02e0 wininit.exe 0 0 0 02fc csrss.exe 1 0 0 032c winlogon.exe 1 0 0 035c services.exe 0 0 0 0364 lsass.exe 0 0 0 036c lsm.exe 0 0 0 03c8 svchost.exe 0 0 0 0130 svchost.exe 0 0 0 02e8 svchost.exe 0 0 0 0414 svchost.exe 0 0 0 0440 svchost.exe 0 0 0 0458 svchost.exe 0 0 0 0588 svchost.exe 0 0 0 0604 spoolsv.exe 0 0 0 0628 svchost.exe 0 0 0 068c avp.exe 0 0 0 072c svchost.exe 0 0 0 0490 PsiService_2.exe 0 0 0 064c PsiService_2.exe 0 0 0 0534 svchost.exe 0 0 0 06b0 ULCDRSvr.exe 0 0 0 08ec alg.exe 0 0 0 0a44 svchost.exe 0 0 0 0af8 svchost.exe 0 0 0 0cb0 taskhost.exe 1 72 39 normal 040c dwm.exe 1 6 2 normal 0e48 explorer.exe 1 753 327 normal 0cb8 RAVCpl64.exe 1 64 24 normal 08dc explorer.exe 1 965 568 normal 0fa0 igfxpers.exe 1 4 4 normal 0a88 ClassicStartMenu.exe 1 4 4 normal 0f6c RocketDock.exe 1 16 33 normal C:\Program Files (x86)\RocketDock 1004 KeePass.exe 1 150 99 normal 1020 MailCheck.exe 1 183 47 normal F:\PROGRAMME\(Portable)\[Netzwerk]\Mailing (MailCheck) 1094 ObjectDock.exe 1 102 71 normal C:\Program Files (x86)\Stardock\ObjectDockFree 12a8 Dock64.exe 1 10 10 normal 1448 WUDFHost.exe 0 0 0 1eb8 taskhost.exe 1 0 0 2050 firefox.exe 1 120 142 normal 08fc firefox.exe 1 39 9 normal 23b4 firefox.exe 1 6 6 normal 1538 firefox.exe 1 6 6 normal 1a9c firefox.exe 1 6 6 normal 0d20 firefox.exe 1 6 5 normal 1a68 firefox.exe 1 6 7 normal 02b4 firefox.exe 1 6 6 normal 0f7c firefox.exe 1 6 6 normal 168c firefox.exe 1 4 0 normal 1184 plugin-container.exe 1 4 8 normal 1a54 firefox.exe 1 6 6 normal 05b4 taskeng.exe 1 4 3 normal 1334 VSNotification.exe 1 4 8 below normal 204c Magnify.exe 1 0 0 0dfc streamwriter.exe 1 1272 329 normal F:\PROGRAMME\(Portable)\[Audio]\streamWriter 0ff0 audiodg.exe 0 0 0 1534 Audition.exe 1 661 344 normal C:\Program Files (x86)\Adobe\Adobe Audition 3.0 1ae8 Mp3tag.exe 1 151 107 normal F:\PROGRAMME\(Portable)\[Audio]\Mp3tag 19d0 firefox.exe 1 6 5 normal 1750 avp.exe 0 0 0 0c7c taskhost.exe 0 0 0 hardware: + Batteries - Microsoft Composite Battery + Computer - ACPI x64-based PC + Disk drives - Hitachi HDT721016SLA380 ATA Device - Kingston DataTraveler 2.0 USB Device - WDC WD2500AAKX-00ERMA0 ATA Device + Display adapters - Intel(R) Q45/Q43 Express Chipset (driver 8.15.10.2869) - Intel(R) Q45/Q43 Express Chipset (driver 8.15.10.2869) + DVD/CD-ROM drives - ELBY CLONEDRIVE SCSI CdRom Device - HL-DT-ST DVD-ROM DH10N ATA Device + Floppy drive controllers - Standard-Diskettenlaufwerkcontroller + Human Interface Devices - HID-konformes Benutzersteuergerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - USB-Eingabegerät - USB-Eingabegerät - USB-Eingabegerät + IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 0 - ATA Channel 0 - ATA Channel 1 - ATA Channel 1 - ATA Channel 1 - Standard-Zweikanal-PCI-IDE-Controller - Standard-Zweikanal-PCI-IDE-Controller - Standard-Zweikanal-PCI-IDE-Controller + Keyboards - HID-Tastatur + Mice and other pointing devices - HID-konforme Maus + Monitors - PnP-Monitor (Standard) + Network adapters - Gigabit PCI Express Network Adapter (driver 7.50.1123.2011) - Intel(R) 82567LF-3-Gigabit-Netzwerkverbindung - Kaspersky Security Data Escort Adapter (driver 15.59.41.347) - Microsoft-6zu4-Adapter - Microsoft-ISATAP-Adapter - Microsoft-ISATAP-Adapter #2 - Microsoft-ISATAP-Adapter #3 - Microsoft-ISATAP-Adapter #4 - Microsoft-Teredo-Tunneling-Adapter - VirtualBox Host-Only Ethernet Adapter (driver 5.2.12.0) - WAN Miniport (IKEv2) - WAN-Miniport (IP) - WAN-Miniport (IPv6) - WAN-Miniport (L2TP) - WAN-Miniport (Netzwerkmonitor) - WAN-Miniport (PPPOE) - WAN-Miniport (PPTP) - WAN-Miniport (SSTP) + Portable Devices - Kingston 64G + Ports (COM & LPT) - Kommunikationsanschluss (COM1) - Kommunikationsanschluss (COM2) + Processors - Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz - Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz + Security Devices - Trusted Platform Module 1.2 + Sound, video and game controllers - Intel(R) High Definition Audio HDMI (driver 6.10.1.2089) - Realtek High Definition Audio (driver 6.0.1.7541) + Storage controllers - Virtual CloneDrive (driver 5.4.7.0) + Storage volume shadow copies - Standard-Volumeschattenkopie - Standard-Volumeschattenkopie + System devices - ACPI-Einschaltknopf - ACPI-Schalter - Busenumerator für Verbundgeräte - DMA-Controller - Enumerator-Treiber für Microsoft Virtual Drive - Hauptplatinenressourcen - Hauptplatinenressourcen - Hauptplatinenressourcen - High Definition Audio-Controller - Hochpräzisionsereigniszeitgeber - Intel(R) 4 Series Chipset Processor to I/O Controller - 2E10 - Intel(R) 82801 PCI-Brücke - 244E - Intel(R) 82802 Firmwarehub - Intel(R) ICH10 Family PCI Express Root Port 1 - 3A70 - Intel(R) ICH10 Family PCI Express Root Port 5 - 3A78 - Intel(R) ICH10 Family SMBus Controller - 3A60 - Intel(R) ICH10D LPC Interface Controller - 3A1A - Intel(R) Management Engine Interface (driver 1.0.0.0) - Intel(R) Management Engine Interface - Kaspersky Lab power events provider (driver 20.0.122.0) - Microsoft ACPI-konformes System - Microsoft-Systemverwaltungs-BIOS-Treiber - Numerischer Coprozessor - PCI-Bus - PnP-Softwaregeräte-Enumerator - Programmierbarer Interruptcontroller - Remote Desktop Device Redirector Bus - Standardbus - System CMOS/Echtzeituhr - Systemlautsprecher - Systemzeitgeber - Terminalserver-Maustreiber - Terminalserver-Tastaturtreiber - Treiber für Datei-als-Volume - UMBus-Stamm-Busenumerator - UMBusenumerator - UMBusenumerator - Volume-Verwaltung + Universal Serial Bus controllers - Intel(R) ICH10-Familie, erweiterter USB-Hostcontroller - 3A6A - Intel(R) ICH10-Familie, erweiterter USB-Hostcontroller - 3A6C - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A64 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A65 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A66 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A67 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A68 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A69 - USB-Massenspeichergerät - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Verbundgerät cpu registers: eax = 00000000 ebx = 028406e0 ecx = 04780bee edx = 00000030 esi = 00557740 edi = 0018f394 eip = 008fd6f7 esp = 0018f1e0 ebp = 0018f32c stack dump: 0018f1e0 40 77 55 00 c0 5c a9 0b - d5 f3 64 00 40 77 55 00 @wU..\....d.@wU. 0018f1f0 c0 5c a9 0b 63 77 55 00 - 94 f3 18 00 79 82 55 00 .\..cwU.....y.U. 0018f200 c0 5c a9 0b 79 ee 64 00 - 94 f3 18 00 ac f5 18 00 .\..y.d......... 0018f210 c0 5c a9 0b b6 a6 96 76 - 7d 3a 11 f6 fe ff ff ff .\.....v}:...... 0018f220 38 70 90 76 05 b5 7c 74 - e4 08 85 00 00 00 00 00 8p.v..|t........ 0018f230 00 00 00 00 d1 b4 7c 74 - b1 b5 7c 74 40 c8 47 01 ......|t..|t@.G. 0018f240 80 f2 18 00 00 00 00 00 - 40 c8 47 01 00 00 00 00 ........@.G..... 0018f250 00 00 00 00 00 00 00 00 - 00 00 00 00 d1 b4 7c 74 ..............|t 0018f260 01 00 00 00 fc f2 18 00 - 00 00 00 00 78 f2 18 00 ............x... 0018f270 e4 08 85 00 00 00 00 00 - 00 00 00 00 0c bf 99 80 ................ 0018f280 ac f2 18 00 fa 62 90 76 - e4 08 85 00 15 02 00 00 .....b.v........ 0018f290 00 00 00 00 00 00 00 00 - d1 b4 7c 74 cd ab ba dc ..........|t.... 0018f2a0 00 00 00 00 00 00 00 00 - d1 b4 7c 74 24 f3 18 00 ..........|t$... 0018f2b0 d8 f2 18 00 d1 b4 7c 74 - e4 08 85 00 24 f3 18 00 ......|t....$... 0018f2c0 91 6d 90 76 51 6d 90 76 - 19 b9 99 80 15 02 00 00 .m.vQm.v........ 0018f2d0 d1 b4 7c 74 64 f5 18 00 - 24 00 00 00 01 00 00 00 ..|td...$....... 0018f2e0 00 00 00 00 00 00 00 00 - 70 00 00 00 ff ff ff ff ........p....... 0018f2f0 ff ff ff ff e9 6c 90 76 - 91 6d 90 76 cd ab ba dc .....l.v.m.v.... 0018f300 00 00 00 00 00 00 00 00 - 00 00 00 00 c8 f2 18 00 ................ 0018f310 38 f3 18 00 34 f5 18 00 - b6 a6 96 76 65 27 11 f6 8...4......ve'.. disassembling: 008fd6e8 public SetStreamData.TfrmSetStreamData.btnRemoveRegExClick: ; function entry point 008fd6e8 157 push ebx 008fd6e9 push esi 008fd6ea mov ebx, eax 008fd6ec 158 mov eax, [ebx+$3f0] 008fd6f2 call -$376fc7 ($586730) ; Vcl.ComCtrls.TCustomListView.GetSelected 008fd6f7 > mov edx, [eax+$20] 008fd6fa mov eax, [ebx+$3e4] 008fd700 call -$2b00f5 ($64d610) ; Vcl.Controls.TControl.SetText 008fd705 159 mov esi, [ebx+$3f0] 008fd70b mov eax, esi 008fd70d call -$376fe2 ($586730) ; Vcl.ComCtrls.TCustomListView.GetSelected 008fd712 call -$37c117 ($581600) ; Vcl.ComCtrls.TListItem.GetIndex 008fd717 mov edx, eax 008fd719 mov eax, [esi+$2cc] 008fd71f call -$37adbc ($582968) ; Vcl.ComCtrls.TListItems.Delete 008fd724 160 mov eax, ebx 008fd726 call +$411 ($8fdb3c) ; SetStreamData.TfrmSetStreamData.InvalidateTree 008fd72b 161 pop esi 008fd72c pop ebx 008fd72d ret date/time : 2019-08-10, 16:15:28, 768ms computer name : ESPRIMO-5730 user name : Yoxhua registered owner : tecxl operating system : Windows 7 x64 Service Pack 1 build 7601 system language : German system up time : 30 days 3 hours program up time : 14 seconds processors : 2x Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz physical memory : 3118/7836 MB (free/total) free disk space : (C:) 29,54 GB (F:) 8,43 GB display mode : 1024x768, 32 bit process id : $2280 allocated memory : 192,48 MB largest free block : 1,92 GB executable : streamwriter.exe exec. date/time : 2019-08-09 22:26 version : 5.4.2.1 compiled with : Delphi 10.3 Rio madExcept version : 5.0.0 callstack crc : $ff281e3b, $d8895e57, $c74fdbb5 exception number : 1 exception class : EIdURIException exception message : Protokollfeld ist leer. main thread ($195c): 00710f7d +04d streamwriter.exe IdURI TIdURI.GetFullURI 007107a9 +025 streamwriter.exe IdURI TIdURI.GetURI 007115c0 +050 streamwriter.exe Functions 142 +3 ParseURL 00719217 +053 streamwriter.exe HTTPThread 143 +2 THTTPThread.Create 0086dec9 +071 streamwriter.exe ICEThread 639 +1 TICEThread.Create 0087e43b +053 streamwriter.exe ICEClient 442 +9 TICEClient.Start 0087f885 +18d streamwriter.exe ICEClient 992 +43 TICEClient.ThreadTerminated 004cd3eb +00f streamwriter.exe System.Classes TThread.CallOnTerminate 004ccebd +131 streamwriter.exe System.Classes CheckSynchronize 006229f7 +76b streamwriter.exe Vcl.Forms TApplication.WndProc 004d09a4 +014 streamwriter.exe System.Classes StdWndProc 76907885 +00a USER32.dll DispatchMessageW 006233cb +0f3 streamwriter.exe Vcl.Forms TApplication.ProcessMessage 0062340e +00a streamwriter.exe Vcl.Forms TApplication.HandleMessage 00623741 +0c9 streamwriter.exe Vcl.Forms TApplication.Run 0091df0d +50d streamwriter.exe streamwriter 271 +99 initialization 76d8343b +010 kernel32.dll BaseThreadInitThunk thread $1b34: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $1aa0: 77281f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $f60: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $18f8: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 75b2176f +fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +89 kernel32.dll WaitForMultipleObjectsEx 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 70275ff1 +00 MMDevApi.dll thread $5fc: 77281f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $1510: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $d04: 77280186 +0e ntdll.dll NtWaitForMultipleObjects 75b2176f +fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +89 kernel32.dll WaitForMultipleObjectsEx 76d82687 +13 kernel32.dll WaitForMultipleObjects 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $2220: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $f8c: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $1338: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $1b30: 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 706512b5 +00 bass.dll thread $1e20 (TSchedulerThread): 77280186 +00e ntdll.dll NtWaitForMultipleObjects 75b2176f +0fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +089 kernel32.dll WaitForMultipleObjectsEx 76d82687 +013 kernel32.dll WaitForMultipleObjects 00871e98 +554 streamwriter.exe Scheduler 228 +73 TSchedulerThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $2048 (TWorkerThread): 7727f8fa +0e ntdll.dll NtWaitForSingleObject 75b21623 +92 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +3e kernel32.dll WaitForSingleObjectEx 76d81143 +0d kernel32.dll WaitForSingleObject 0075cc2e +26 streamwriter.exe VirtualTrees.WorkerThread 150 +4 TWorkerThread.Execute 006d4e23 +2b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +49 streamwriter.exe System.Classes ThreadProc 0040a76c +28 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +18 streamwriter.exe System.Classes TThread.Create thread $15d0: 77281e47 +0b ntdll.dll NtTraceControl 772ba06d +40 ntdll.dll EtwpNotificationThread 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $de4: 77281f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 76d8343b +10 kernel32.dll BaseThreadInitThunk thread $944 (TFileWatcher): 77280186 +00e ntdll.dll NtWaitForMultipleObjects 75b2176f +0fa KERNELBASE.dll WaitForMultipleObjectsEx 76d819f7 +089 kernel32.dll WaitForMultipleObjectsEx 76d82687 +013 kernel32.dll WaitForMultipleObjects 008d84c4 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1a50 (THomeThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 00408990 +008 streamwriter.exe System 10 +0 TObject.Free 004cdad1 +189 streamwriter.exe System.Classes TThread.Synchronize 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1824: 7727f982 +0e ntdll.dll NtRemoveIoCompletion 006d4d09 +0d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +32 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +10 kernel32.dll BaseThreadInitThunk >> created by thread $1a50 (THomeThread) at: 73b1a337 +00 mswsock.dll thread $171c (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $166c (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1294 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1c58 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $fc8 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $2284 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $218c (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 75b21623 +092 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +03e kernel32.dll WaitForSingleObjectEx 76d81143 +00d kernel32.dll WaitForSingleObject 0042e362 +002 streamwriter.exe System.SysUtils WaitForSyncWaitObj 0042e4ab +01f streamwriter.exe System.SysUtils WaitOrSignalObj 00409971 +065 streamwriter.exe System 10 +0 TMonitor.Wait 00409a17 +02b streamwriter.exe System 10 +0 TMonitor.Wait 004cda94 +14c streamwriter.exe System.Classes TThread.Synchronize 004cdb61 +04d streamwriter.exe System.Classes TThread.Synchronize 004cdb09 +009 streamwriter.exe System.Classes TThread.Synchronize 004cd3fd +00d streamwriter.exe System.Classes TThread.DoTerminate 004cd06e +08a streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1890 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $15c8 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $388 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1b98 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 004be13a +07a streamwriter.exe System.Classes TStream.Seek 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $2274 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $11ac (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1290 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $bfc (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 004099aa +09e streamwriter.exe System 10 +0 TMonitor.Wait 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $f84 (TICEThread): 7727f8fa +00e ntdll.dll NtWaitForSingleObject 76582f7b +05b WS2_32.dll WahReferenceContextByHandle 7658673b +09c WS2_32.dll select 0071696e +772 streamwriter.exe Sockets 532 +161 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $1bb4 (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $9fc: 7727f8fa +00e ntdll.dll NtWaitForSingleObject 75b21623 +092 KERNELBASE.dll WaitForSingleObjectEx 76d8118f +03e kernel32.dll WaitForSingleObjectEx 76d81143 +00d kernel32.dll WaitForSingleObject 0042e362 +002 streamwriter.exe System.SysUtils WaitForSyncWaitObj 0042e4ab +01f streamwriter.exe System.SysUtils WaitOrSignalObj 00409971 +065 streamwriter.exe System 10 +0 TMonitor.Wait 00409a17 +02b streamwriter.exe System 10 +0 TMonitor.Wait 004cda94 +14c streamwriter.exe System.Classes TThread.Synchronize 004cdb61 +04d streamwriter.exe System.Classes TThread.Synchronize 004cdb09 +009 streamwriter.exe System.Classes TThread.Synchronize 004cd3fd +00d streamwriter.exe System.Classes TThread.DoTerminate 004cd06e +08a streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk thread $70c (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $122c (TICEThread): 7727fdba +00e ntdll.dll NtDelayExecution 75b23d91 +05f KERNELBASE.dll SleepEx 75b24662 +00a KERNELBASE.dll Sleep 004cddb9 +001 streamwriter.exe System.Classes TThread.Sleep 0086d90b +0e7 streamwriter.exe ICEThread 457 +31 TICEThread.DoEnded 00716ed9 +cdd streamwriter.exe Sockets 639 +268 TSocketThread.Execute 0086dd88 +000 streamwriter.exe ICEThread 597 +0 TICEThread.Execute 006d4e23 +02b streamwriter.exe madExcept HookedTThreadExecute 004cd02d +049 streamwriter.exe System.Classes ThreadProc 0040a76c +028 streamwriter.exe System 10 +0 ThreadWrapper 006d4d09 +00d streamwriter.exe madExcept CallThreadProcSafe 006d4d6e +032 streamwriter.exe madExcept ThreadExceptFrame 76d8343b +010 kernel32.dll BaseThreadInitThunk >> created by main thread ($195c) at: 004cd0f0 +018 streamwriter.exe System.Classes TThread.Create thread $19dc: 77281f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 76d8343b +10 kernel32.dll BaseThreadInitThunk modules: 002c0000 RocketDock.dll C:\Program Files (x86)\RocketDock 00400000 streamwriter.exe 5.4.2.1 F:\PROGRAMME\(Portable)\[Audio]\streamWriter 10000000 DockShellHook.dll C:\Program Files (x86)\Stardock\ObjectDockFree 11000000 libeay32.dll 1.0.2.15 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 12000000 ssleay32.dll 1.0.2.15 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 67100000 olepro32.dll 6.1.7601.23452 C:\Windows\system32 6c650000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 6cc00000 apphelp.dll 6.1.7601.19050 C:\Windows\system32 6cc50000 winmm.dll 6.1.7601.17514 C:\Windows\system32 6e440000 PROPSYS.dll 7.0.7601.17514 C:\Windows\System32 6f350000 mscms.dll 6.1.7601.23971 C:\Windows\system32 6f6e0000 ClassicExplorer32.dll 4.3.0.0 C:\Program Files\Classic Shell 6fba0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 70010000 bass_aac.dll 2.4.5.8 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 70080000 EhStorShell.dll 6.1.7600.16385 C:\Windows\system32 700f0000 WindowsCodecs.dll 6.2.9200.22551 C:\Windows\system32 70230000 AUDIOSES.DLL 6.1.7601.24499 C:\Windows\system32 70270000 MMDevApi.dll 6.1.7601.17514 C:\Windows\System32 705f0000 MSACM32.dll 6.1.7600.16385 C:\Windows\system32 70650000 bass.dll 2.4.13.8 C:\Users\Yoxhua\AppData\Local\Temp\streamWriter 706b0000 FaultRep.dll 6.1.7601.24392 C:\Windows\system32 71bb0000 ntshrui.dll 6.1.7601.17755 C:\Windows\system32 71d70000 slc.dll 6.1.7600.16385 C:\Windows\system32 71d80000 cscapi.dll 6.1.7601.24197 C:\Windows\system32 71dd0000 dwmapi.dll 6.1.7601.18917 C:\Windows\system32 71df0000 oleacc.dll 7.0.0.0 C:\Windows\system32 71fd0000 winspool.drv 6.1.7601.24383 C:\Windows\system32 72030000 avrt.dll 6.1.7600.16385 C:\Windows\system32 726e0000 fwpuclnt.dll 6.1.7601.24000 C:\Windows\System32 72720000 winrnr.dll 6.1.7600.16385 C:\Windows\System32 72730000 pnrpnsp.dll 6.1.7600.16385 C:\Windows\system32 72750000 DNSAPI.dll 6.1.7601.24168 C:\Windows\system32 72b60000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 72ba0000 CRYPTSP.dll 6.1.7601.24499 C:\Windows\system32 73130000 napinsp.dll 6.1.7600.16385 C:\Windows\system32 73140000 NLAapi.dll 6.1.7601.24000 C:\Windows\system32 73150000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32 73160000 WINSTA.dll 6.1.7601.18540 C:\Windows\system32 73460000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 73520000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32 73b10000 mswsock.dll 6.1.7601.23451 C:\Windows\System32 74040000 wkscli.dll 6.1.7601.17514 C:\Windows\system32 74050000 srvcli.dll 6.1.7601.17514 C:\Windows\system32 74070000 netutils.dll 6.1.7601.17514 C:\Windows\system32 74080000 netapi32.dll 6.1.7601.17887 C:\Windows\system32 740a0000 WINNSI.DLL 6.1.7601.23889 C:\Windows\system32 740b0000 IPHLPAPI.DLL 6.1.7601.17514 C:\Windows\system32 74100000 wtsapi32.dll 6.1.7601.17514 C:\Windows\system32 745d0000 version.dll 6.1.7600.16385 C:\Windows\system32 747a0000 COMCTL32.dll 6.10.7601.24483 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b 74970000 CRYPTBASE.dll 6.1.7601.24499 C:\Windows\syswow64 74980000 SspiCli.dll 6.1.7601.24499 C:\Windows\syswow64 749e0000 IMM32.DLL 6.1.7601.17514 C:\Windows\system32 74a40000 MSCTF.dll 6.1.7601.23915 C:\Windows\syswow64 74b10000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64 74ba0000 sechost.dll 6.1.7601.18869 C:\Windows\SysWOW64 74bc0000 ole32.dll 6.1.7601.24486 C:\Windows\syswow64 74e70000 SHELL32.dll 6.1.7601.24468 C:\Windows\syswow64 75ac0000 WINTRUST.dll 6.1.7601.24499 C:\Windows\syswow64 75af0000 LPK.dll 6.1.7601.24439 C:\Windows\syswow64 75b00000 MSASN1.dll 6.1.7601.17514 C:\Windows\syswow64 75b10000 KERNELBASE.dll 6.1.7601.24499 C:\Windows\syswow64 75b60000 ADVAPI32.dll 6.1.7601.24499 C:\Windows\syswow64 75c10000 comdlg32.dll 6.1.7601.17514 C:\Windows\syswow64 75d20000 msvcrt.dll 7.0.7601.17744 C:\Windows\syswow64 75dd0000 USERENV.dll 6.1.7601.24453 C:\Windows\syswow64 75df0000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75e10000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75e20000 iertutil.dll 11.0.9600.19400 C:\Windows\syswow64 76060000 CFGMGR32.dll 6.1.7601.17621 C:\Windows\syswow64 76090000 NSI.dll 6.1.7601.23889 C:\Windows\syswow64 760a0000 WININET.dll 11.0.9600.19400 C:\Windows\syswow64 764e0000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 764f0000 shlwapi.dll 6.1.7601.17514 C:\Windows\syswow64 76550000 profapi.dll 6.1.7600.16385 C:\Windows\syswow64 76560000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64 76570000 normaliz.DLL 6.1.7600.16385 C:\Windows\syswow64 76580000 WS2_32.dll 6.1.7601.23451 C:\Windows\syswow64 765f0000 RPCRT4.dll 6.1.7601.24499 C:\Windows\syswow64 766e0000 DEVOBJ.dll 6.1.7601.17621 C:\Windows\syswow64 76700000 GDI32.dll 6.1.7601.24467 C:\Windows\syswow64 767f0000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76800000 USP10.dll 1.626.7601.24494 C:\Windows\syswow64 768a0000 WLDAP32.dll 6.1.7601.23889 C:\Windows\syswow64 768f0000 USER32.dll 6.1.7601.23594 C:\Windows\syswow64 769f0000 CRYPT32.dll 6.1.7601.24499 C:\Windows\syswow64 76b20000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76b30000 oleaut32.dll 6.1.7601.24440 C:\Windows\syswow64 76bd0000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76d70000 kernel32.dll 6.1.7601.24499 C:\Windows\syswow64 77260000 ntdll.dll 6.1.7601.24499 C:\Windows\SysWOW64 processes: 0000 Idle 0 0 0 0004 System 0 0 0 01a0 smss.exe 0 0 0 02a4 csrss.exe 0 0 0 02e0 wininit.exe 0 0 0 02fc csrss.exe 1 0 0 032c winlogon.exe 1 0 0 035c services.exe 0 0 0 0364 lsass.exe 0 0 0 036c lsm.exe 0 0 0 03c8 svchost.exe 0 0 0 0130 svchost.exe 0 0 0 02e8 svchost.exe 0 0 0 0414 svchost.exe 0 0 0 0440 svchost.exe 0 0 0 0458 svchost.exe 0 0 0 0588 svchost.exe 0 0 0 0604 spoolsv.exe 0 0 0 0628 svchost.exe 0 0 0 068c avp.exe 0 0 0 072c svchost.exe 0 0 0 0490 PsiService_2.exe 0 0 0 064c PsiService_2.exe 0 0 0 0534 svchost.exe 0 0 0 06b0 ULCDRSvr.exe 0 0 0 08ec alg.exe 0 0 0 0a44 svchost.exe 0 0 0 0af8 svchost.exe 0 0 0 0cb0 taskhost.exe 1 72 42 normal 040c dwm.exe 1 6 2 normal 0e48 explorer.exe 1 753 336 normal 0cb8 RAVCpl64.exe 1 64 24 normal 08dc explorer.exe 1 952 568 normal 0fa0 igfxpers.exe 1 4 4 normal 0a88 ClassicStartMenu.exe 1 4 4 normal 0f6c RocketDock.exe 1 16 33 normal C:\Program Files (x86)\RocketDock 1004 KeePass.exe 1 150 99 normal 1020 MailCheck.exe 1 183 47 normal F:\PROGRAMME\(Portable)\[Netzwerk]\Mailing (MailCheck) 1094 ObjectDock.exe 1 102 71 normal C:\Program Files (x86)\Stardock\ObjectDockFree 12a8 Dock64.exe 1 10 10 normal 1448 WUDFHost.exe 0 0 0 1eb8 taskhost.exe 1 0 0 2050 firefox.exe 1 120 156 normal 08fc firefox.exe 1 39 9 normal 23b4 firefox.exe 1 6 6 normal 1538 firefox.exe 1 6 6 normal 1a9c firefox.exe 1 6 6 normal 0d20 firefox.exe 1 6 5 normal 1a68 firefox.exe 1 6 7 normal 02b4 firefox.exe 1 6 6 normal 0f7c firefox.exe 1 6 6 normal 168c firefox.exe 1 4 0 normal 1184 plugin-container.exe 1 4 8 normal 1a54 firefox.exe 1 6 6 normal 05b4 taskeng.exe 1 4 3 normal 1334 VSNotification.exe 1 4 8 below normal 204c Magnify.exe 1 0 0 1534 Audition.exe 1 661 348 normal C:\Program Files (x86)\Adobe\Adobe Audition 3.0 1ae8 Mp3tag.exe 1 151 109 normal F:\PROGRAMME\(Portable)\[Audio]\Mp3tag 19d0 firefox.exe 1 6 5 normal 2280 streamwriter.exe 1 838 319 normal F:\PROGRAMME\(Portable)\[Audio]\streamWriter 1ad4 audiodg.exe 0 0 0 hardware: + Batteries - Microsoft Composite Battery + Computer - ACPI x64-based PC + Disk drives - Hitachi HDT721016SLA380 ATA Device - Kingston DataTraveler 2.0 USB Device - WDC WD2500AAKX-00ERMA0 ATA Device + Display adapters - Intel(R) Q45/Q43 Express Chipset (driver 8.15.10.2869) - Intel(R) Q45/Q43 Express Chipset (driver 8.15.10.2869) + DVD/CD-ROM drives - ELBY CLONEDRIVE SCSI CdRom Device - HL-DT-ST DVD-ROM DH10N ATA Device + Floppy drive controllers - Standard-Diskettenlaufwerkcontroller + Human Interface Devices - HID-konformes Benutzersteuergerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - HID-konformes Gerät - USB-Eingabegerät - USB-Eingabegerät - USB-Eingabegerät + IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 0 - ATA Channel 0 - ATA Channel 1 - ATA Channel 1 - ATA Channel 1 - Standard-Zweikanal-PCI-IDE-Controller - Standard-Zweikanal-PCI-IDE-Controller - Standard-Zweikanal-PCI-IDE-Controller + Keyboards - HID-Tastatur + Mice and other pointing devices - HID-konforme Maus + Monitors - PnP-Monitor (Standard) + Network adapters - Gigabit PCI Express Network Adapter (driver 7.50.1123.2011) - Intel(R) 82567LF-3-Gigabit-Netzwerkverbindung - Kaspersky Security Data Escort Adapter (driver 15.59.41.347) - Microsoft-6zu4-Adapter - Microsoft-ISATAP-Adapter - Microsoft-ISATAP-Adapter #2 - Microsoft-ISATAP-Adapter #3 - Microsoft-ISATAP-Adapter #4 - Microsoft-Teredo-Tunneling-Adapter - VirtualBox Host-Only Ethernet Adapter (driver 5.2.12.0) - WAN Miniport (IKEv2) - WAN-Miniport (IP) - WAN-Miniport (IPv6) - WAN-Miniport (L2TP) - WAN-Miniport (Netzwerkmonitor) - WAN-Miniport (PPPOE) - WAN-Miniport (PPTP) - WAN-Miniport (SSTP) + Portable Devices - Kingston 64G + Ports (COM & LPT) - Kommunikationsanschluss (COM1) - Kommunikationsanschluss (COM2) + Processors - Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz - Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz + Security Devices - Trusted Platform Module 1.2 + Sound, video and game controllers - Intel(R) High Definition Audio HDMI (driver 6.10.1.2089) - Realtek High Definition Audio (driver 6.0.1.7541) + Storage controllers - Virtual CloneDrive (driver 5.4.7.0) + Storage volume shadow copies - Standard-Volumeschattenkopie - Standard-Volumeschattenkopie + System devices - ACPI-Einschaltknopf - ACPI-Schalter - Busenumerator für Verbundgeräte - DMA-Controller - Enumerator-Treiber für Microsoft Virtual Drive - Hauptplatinenressourcen - Hauptplatinenressourcen - Hauptplatinenressourcen - High Definition Audio-Controller - Hochpräzisionsereigniszeitgeber - Intel(R) 4 Series Chipset Processor to I/O Controller - 2E10 - Intel(R) 82801 PCI-Brücke - 244E - Intel(R) 82802 Firmwarehub - Intel(R) ICH10 Family PCI Express Root Port 1 - 3A70 - Intel(R) ICH10 Family PCI Express Root Port 5 - 3A78 - Intel(R) ICH10 Family SMBus Controller - 3A60 - Intel(R) ICH10D LPC Interface Controller - 3A1A - Intel(R) Management Engine Interface (driver 1.0.0.0) - Intel(R) Management Engine Interface - Kaspersky Lab power events provider (driver 20.0.122.0) - Microsoft ACPI-konformes System - Microsoft-Systemverwaltungs-BIOS-Treiber - Numerischer Coprozessor - PCI-Bus - PnP-Softwaregeräte-Enumerator - Programmierbarer Interruptcontroller - Remote Desktop Device Redirector Bus - Standardbus - System CMOS/Echtzeituhr - Systemlautsprecher - Systemzeitgeber - Terminalserver-Maustreiber - Terminalserver-Tastaturtreiber - Treiber für Datei-als-Volume - UMBus-Stamm-Busenumerator - UMBusenumerator - UMBusenumerator - Volume-Verwaltung + Universal Serial Bus controllers - Intel(R) ICH10-Familie, erweiterter USB-Hostcontroller - 3A6A - Intel(R) ICH10-Familie, erweiterter USB-Hostcontroller - 3A6C - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A64 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A65 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A66 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A67 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A68 - Intel(R) ICH10-Familie, universeller USB-Hostcontroller - 3A69 - USB-Massenspeichergerät - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Root-Hub - USB-Verbundgerät cpu registers: eax = 0ffa9c10 ebx = 0ed9c500 ecx = 00000000 edx = 00ed2930 esi = 0018fb78 edi = 00000000 eip = 00710f82 esp = 0018faf8 ebp = 0018fb5c stack dump: 0018faf8 82 0f 71 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..q............. 0018fb08 0c fb 18 00 82 0f 71 00 - 10 9c fa 0f 00 c5 d9 0e ......q......... 0018fb18 78 fb 18 00 00 00 00 00 - 5c fb 18 00 28 fb 18 00 x.......\...(... 0018fb28 64 fb 18 00 58 9e 40 00 - 5c fb 18 00 a8 fb 18 00 d...X.@.\....... 0018fb38 00 c5 d9 0e 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0018fb48 88 90 40 00 00 00 00 00 - 00 00 00 00 68 fb 18 03 ..@.........h... 0018fb58 00 00 00 00 7c fb 18 00 - ae 07 71 00 84 fb 18 00 ....|.....q..... 0018fb68 58 9e 40 00 7c fb 18 00 - a0 14 f0 0c 00 00 00 00 X.@.|........... 0018fb78 00 00 00 00 b8 fb 18 00 - c5 15 71 00 90 fb 18 00 ..........q..... 0018fb88 58 9e 40 00 b8 fb 18 00 - c0 fb 18 00 58 9e 40 00 X.@.........X.@. 0018fb98 b8 fb 18 00 00 00 00 00 - a0 14 f0 0c 00 00 00 00 ................ 0018fba8 00 00 00 00 00 c5 d9 0e - d4 fb 18 00 00 00 00 00 ................ 0018fbb8 ec fb 18 00 1c 92 71 00 - fc fb 18 00 58 9e 40 00 ......q.....X.@. 0018fbc8 ec fb 18 00 a0 f8 ef 0c - 00 00 00 00 00 00 00 00 ................ 0018fbd8 00 00 00 00 fc fb 18 00 - 00 00 00 00 5c fc 18 00 ............\... 0018fbe8 00 00 00 00 5c fc 18 00 - ce de 86 00 00 00 00 00 ....\........... 0018fbf8 70 bd ef 0c 08 fc 18 00 - 58 9e 40 00 5c fc 18 00 p.......X.@.\... 0018fc08 64 fc 18 00 37 a0 40 00 - 5c fc 18 00 a0 14 f0 0c d...7.@.\....... 0018fc18 40 7a d7 0e 00 00 00 00 - 00 00 00 00 00 00 00 00 @z.............. 0018fc28 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ disassembling: 00711570 public Functions.ParseURL: ; function entry point 00711570 139 push ebp 00711571 mov ebp, esp 00711573 add esp, -$10 00711576 push ebx 00711577 push esi 00711578 push edi 00711579 xor ecx, ecx 0071157b mov [ebp-$10], ecx 0071157e mov [ebp-8], edx 00711581 mov [ebp-4], eax 00711584 mov eax, [ebp-4] 00711587 call -$306bec ($40a9a0) ; System.@UStrAddRef 0071158c xor eax, eax 0071158e push ebp 0071158f push $711749 ; System.@HandleFinally 00711594 push dword ptr fs:[eax] 00711597 mov fs:[eax], esp 0071159a 140 mov ecx, [ebp-4] 0071159d mov dl, 1 0071159f mov eax, [$70fac0] 007115a4 call -$1419 ($710190) ; IdURI.TIdURI.Create 007115a9 mov [ebp-$c], eax 007115ac 141 xor edx, edx 007115ae push ebp 007115af push $711724 ; System.@HandleFinally 007115b4 push dword ptr fs:[edx] 007115b7 mov fs:[edx], esp 007115ba 142 lea edx, [ebp-$10] 007115bd mov eax, [ebp-$c] 007115c0 > call -$e41 ($710784) ; IdURI.TIdURI.GetURI 007115c5 mov edx, [ebp-$10] 007115c8 mov eax, [ebp-8] 007115cb call -$306934 ($40ac9c) ; System.@UStrAsg 007115d0 143 mov eax, [ebp-8] 007115d3 add eax, 4 007115d6 mov edx, [ebp-$c] 007115d9 mov edx, [edx+$18] 007115dc call -$306945 ($40ac9c) ; System.@UStrAsg 007115e1 144 mov eax, [ebp-$c] 007115e4 mov ecx, [eax+4] 007115e7 mov eax, [ebp-$c] 007115ea mov edx, [eax+$14] 007115ed mov eax, [ebp-8] 007115f0 add eax, $c 007115f3 call -$305cbc ($40b93c) ; System.@UStrCat3 007115f8 145 mov eax, [ebp-$c] 007115fb mov eax, [eax+$28] 007115fe test eax, eax 00711600 jz loc_711607 00711602 sub eax, 4 00711605 mov eax, [eax] 00711607 test eax, eax 00711609 jle loc_71162c 0071160b 146 mov eax, [ebp-8] 0071160e push dword ptr [eax+$c] 00711611 push $711764 00711616 mov eax, [ebp-$c] 00711619 push dword ptr [eax+$28] 0071161c mov eax, [ebp-8] 0071161f add eax, $c 00711622 mov edx, 3 00711627 call -$305c68 ($40b9c4) ; System.@UStrCatN 0071162c 147 mov eax, [ebp-$c] 0071162f mov eax, [eax+8] 00711632 mov edx, $711774 00711637 call -$305bc8 ($40ba74) ; System.@UStrEqual 0071163c setz al 0071163f mov edx, [ebp-8] 00711642 mov [edx+$11], al 00711645 149 mov eax, [ebp-8] 00711648 xor edx, edx 0071164a mov [eax+8], edx 0071164d 150 mov eax, [ebp-$c] 00711650 mov eax, [eax+$10] 00711653 test eax, eax 00711655 jz loc_71165c 00711657 sub eax, 4 0071165a mov eax, [eax] 0071165c test eax, eax 0071165e jle loc_71169c [...]