date/time : 2014-10-27, 16:14:49, 92ms computer name : user-S621xT user name : user operating system : Windows 7 x64 Service Pack 1 build 7601 system language : German system up time : 3 hours 13 minutes program up time : 19 seconds processors : 4x Intel(R) Pentium(R) 4 CPU 2.40GHz physical memory : 3044/3861 MB (free/total) free disk space : (C:) 425,38 GB display mode : 1366x768, 32 bit process id : $2a allocated memory : 39,51 MB executable : streamwriter.exe exec. date/time : 2014-05-07 17:24 version : 5.0.0.1 compiled with : Delphi XE madExcept version : 4.0.2 callstack crc : $4d2913a4, $5eb55a78, $8d72473d exception number : 1 exception class : EExternalException exception message : Externe Exception C0FB007F. main thread ($2b): 7b83aace +05e KERNEL32.dll RaiseException 7b858428 +098 KERNEL32.dll GetProcAddress 0040b83c +1ea streamwriter.exe System 44 +0 @_delayLoadHelper 0040d291 +005 streamwriter.exe Windows kernel32.dll 004584fb +053 streamwriter.exe DateUtils TLocalTimeZone.GetChangesForYear 004582e7 +063 streamwriter.exe DateUtils TLocalTimeZone.GetCachedChangesForYear 00458241 +01d streamwriter.exe DateUtils TLocalTimeZone.DoGetOffsetsAndType 00458c57 +02f streamwriter.exe DateUtils TTimeZone.GetUtcOffsetInSeconds 006ea8de +036 streamwriter.exe HomeCommunication 775 +3 THomeCommunication.HomeThreadHandshakeReceived 0059d7e3 +00b streamwriter.exe Sockets 521 +1 TSocketThread.Sync2 0044e6d3 +12b streamwriter.exe Classes CheckSynchronize 004f356e +136 streamwriter.exe Forms TApplication.Idle 004f27af +017 streamwriter.exe Forms TApplication.HandleMessage 004ee101 +1a1 streamwriter.exe Forms TCustomForm.ShowModal 00766eff +063 streamwriter.exe Main 714 +14 TfrmStreamWriterMain.AfterShown 00512694 +2d4 streamwriter.exe Controls TControl.WndProc 00516f58 +568 streamwriter.exe Controls TWinControl.WndProc 004e9790 +594 streamwriter.exe Forms TCustomForm.WndProc 005165f8 +02c streamwriter.exe Controls TWinControl.MainWndProc 004514dc +014 streamwriter.exe Classes StdWndProc 7e829420 +0b0 user32.dll DispatchMessageW 004f275f +0f3 streamwriter.exe Forms TApplication.ProcessMessage 004f27a2 +00a streamwriter.exe Forms TApplication.HandleMessage 004f2acd +0c9 streamwriter.exe Forms TApplication.Run 0077cc95 +2b9 streamwriter.exe streamwriter 205 +47 initialization 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $39 (THomeThread): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00424fce +002 streamwriter.exe SysUtils WaitForSyncWaitObj 00425177 +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 44 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 44 +0 TMonitor.Wait 0044f1ed +029 streamwriter.exe Classes TThread.Synchronize 0059d7c4 +028 streamwriter.exe Sockets 513 +6 TSocketThread.Sync 006e984d +029 streamwriter.exe HomeCommunication 288 +4 THomeThread.DoHandshakeReceived 006e997b +07f streamwriter.exe HomeCommunication 340 +5 THomeThread.DoReceivedCommand 006be9c7 +05f streamwriter.exe Communication 201 +8 TCommandThreadBase.DoReceivedData 0059d1d4 +4e8 streamwriter.exe Sockets 429 +109 TSocketThread.Execute 7bc50651 +031 ntdll.dll RtlImageNtHeader 7bc507c5 +045 ntdll.dll RtlImageDirectoryEntryToData 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 0059cad5 +035 streamwriter.exe Sockets 221 +1 TSocketThread.Create thread $38 (TFileWatcher): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 0074bf60 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 0074bdda +02e streamwriter.exe FileWatcher 68 +1 TFileWatcher.Create thread $37 (TFileWatcher): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 0074bf60 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 0074bdda +02e streamwriter.exe FileWatcher 68 +1 TFileWatcher.Create thread $36: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc43c85 +0f5 ntdll.dll NtFsControlFile 7b8747d0 +090 KERNEL32.dll ConnectNamedPipe 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by thread $35 at: 7e662260 +000 rpcrt4.dll thread $35: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b872495 +025 KERNEL32.dll SetEvent 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 7e65d284 +000 rpcrt4.dll thread $34 (TWorkerThread): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7dcf664d +0cd winex11.drv MsgWaitForMultipleObjectsEx 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00604121 +019 streamwriter.exe VirtualTrees 6332 +3 TWorkerThread.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 00604016 +016 streamwriter.exe VirtualTrees 6275 +1 TWorkerThread.Create thread $33: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc50651 +031 ntdll.dll RtlImageNtHeader 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b8717ce +03e KERNEL32.dll WaitForSingleObjectEx 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 11020df1 +000 bass.dll thread $32: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 11020dd3 +000 bass.dll thread $31: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 11020ecc +000 bass.dll thread $30: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 7d601819 +000 dsound.dll thread $2f: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $2e: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $2d: 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($2b) at: 7d539ad1 +000 winepulse.drv modules: 00400000 streamwriter.exe 5.0.0.1 C:\Program Files (x86)\streamWriter 10000000 bass_aac.dll 2.4.4.2 C:\users\user\Temp\streamWriter 11000000 bass.dll 2.4.10.0 C:\users\user\Temp\streamWriter 7b810000 KERNEL32.dll 5.1.2600.2180 C:\windows\system32 7bc10000 ntdll.dll 5.1.2600.2180 C:\windows\system32 7cb10000 dbghelp.dll 5.1.2600.3264 C:\windows\system32 7d170000 dwmapi.dll 6.0.6000.16386 C:\windows\system32 7d1b0000 psapi.dll 5.1.2600.3264 C:\windows\system32 7d1c0000 usp10.dll C:\windows\system32 7d530000 winepulse.drv C:\windows\system32 7d5d0000 mmdevapi.dll C:\windows\system32 7d5f0000 dsound.dll 5.3.1.904 C:\windows\system32 7d660000 olepro32.dll 5.0.4522.0 C:\windows\system32 7d6b0000 imm32.dll 5.1.2600.2180 C:\windows\system32 7dab0000 faultrep.dll C:\windows\system32 7dad0000 uxtheme.dll 10.0.0.0 C:\windows\system32 7dce0000 winex11.drv 10.0.0.0 C:\windows\system32 7df00000 msacm32.dll C:\windows\system32 7df30000 winmm.dll C:\windows\system32 7dfe0000 oleacc.dll 7.0.0.0 C:\windows\system32 7e010000 msvcrt.dll 7.0.2600.2180 C:\windows\system32 7e0b0000 iphlpapi.dll 5.1.2600.2180 C:\windows\system32 7e0e0000 ws2_32.dll 5.1.2600.5512 C:\windows\system32 7e110000 wsock32.dll 4.0.0.0 C:\windows\system32 7e130000 comdlg32.dll 4.0.0.950 C:\windows\system32 7e220000 shlwapi.dll 6.0.2800.1692 C:\windows\system32 7e290000 shell32.dll 5.0.3900.6975 C:\windows\system32 7e4c0000 winspool.drv 5.1.2600.2180 C:\windows\system32 7e500000 comctl32.dll 5.81.4704.1100 C:\windows\system32 7e600000 msimg32.dll C:\windows\system32 7e620000 rpcrt4.dll 5.1.2600.2180 C:\windows\system32 7e6a0000 gdi32.dll 10.0.0.0 C:\windows\system32 7e7c0000 user32.dll 5.1.2600.2180 C:\windows\system32 7e920000 advapi32.dll 5.1.2600.2180 C:\windows\system32 7e990000 ole32.dll 10.0.0.0 C:\windows\system32 7ead0000 oleaut32.dll 6.0.6001.18000 C:\windows\system32 7eff0000 version.dll 5.1.2600.2180 C:\windows\system32 processes: 0e services.exe 0 0 normal 12 winedevice.exe 0 0 normal 1a plugplay.exe 0 0 normal 21 explorer.exe 0 0 normal 2a streamwriter.exe 0 0 normal C:\Program Files (x86)\streamWriter cpu registers: eax = 7b82695d ebx = 7b8b5000 ecx = 0033f6b4 edx = 0033f638 esi = c0fb007f edi = 00000000 eip = 7b83aace esp = 0033f614 ebp = 0033f688 stack dump: 0033f614 d8 f6 33 00 04 00 00 00 - 24 02 c4 7b 7f 00 fb c0 ..3.....$..{.... 0033f624 02 00 00 00 00 00 00 00 - ce aa 83 7b 01 00 00 00 ...........{.... 0033f634 b4 f6 33 00 88 f6 33 00 - 2d 84 85 7b 00 00 81 7b ..3...3.-..{...{ 0033f644 00 00 81 7b e5 68 82 7b - 2d 84 85 7b 7a 00 00 c0 ...{.h.{-..{z... 0033f654 68 f6 33 00 00 00 00 00 - 64 f6 33 00 40 00 00 00 h.3.....d.3.@... 0033f664 08 00 00 00 1d 00 1e 00 - ea 62 7a 00 8c f6 33 00 .........bz...3. 0033f674 00 00 81 7b 9c f6 33 00 - 98 f6 33 00 00 00 81 7b ...{..3...3....{ 0033f684 20 60 7a 00 e4 f6 33 00 - 3c b8 40 00 a4 f6 33 00 `z...3.<.@...3. 0033f694 3c b8 40 00 7f 00 fb c0 - 00 00 00 00 01 00 00 00 <.@............. 0033f6a4 d8 f6 33 00 10 f7 33 00 - de 07 00 00 d8 5a bc 00 ..3...3......Z.. 0033f6b4 24 00 00 00 20 60 7a 00 - f4 60 7a 00 c6 62 7a 00 $... `z..`z..bz. 0033f6c4 01 00 00 00 ea 62 7a 00 - 00 00 81 7b 00 00 00 00 .....bz....{.... 0033f6d4 7f 00 00 00 b4 f6 33 00 - b3 5f 40 00 01 00 00 00 ......3.._@..... 0033f6e4 e8 f7 33 00 96 d2 40 00 - 20 60 7a 00 f4 60 7a 00 ..3...@. `z..`z. 0033f6f4 f8 ff ff ff 00 00 00 00 - 01 00 00 00 00 85 45 00 ..............E. 0033f704 de 07 00 00 00 00 00 00 - 10 f7 33 00 00 00 00 00 ..........3..... 0033f714 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f724 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f734 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f744 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ disassembling: [...] 0040b7aa cmp dword ptr [esi+$14], 0 0040b7ae jz loc_40b7f2 0040b7b0 cmp dword ptr [esi+$1c], 0 0040b7b4 jz loc_40b7f2 0040b7b6 push ebx 0040b7b7 call -$1c2 ($40b5fa) 0040b7bc mov edi, eax 0040b7be cmp dword ptr [edi], $4550 0040b7c4 jnz loc_40b7f2 0040b7c6 push edi 0040b7c7 call -$1a2 ($40b62a) 0040b7cc cmp eax, [esi+$1c] 0040b7cf jnz loc_40b7f2 0040b7d1 push ebx 0040b7d2 push edi 0040b7d3 call -$1a1 ($40b637) 0040b7d8 test eax, eax 0040b7da jz loc_40b7f2 0040b7dc push dword ptr [esi+$14] 0040b7df push dword ptr [esi+$c] 0040b7e2 call -$1e0 ($40b607) 0040b7e7 mov eax, [esi+$c] 0040b7ea mov edx, [ebp-4] 0040b7ed mov edi, [eax+edx*4] 0040b7f0 jmp loc_40b844 0040b7f2 push dword ptr [ebp-$1c] 0040b7f5 push ebx 0040b7f6 call -$8da3 ($402a58) ; System.GetProcAddress 0040b7fb mov edi, eax 0040b7fd test edi, edi 0040b7ff jnz loc_40b83f 0040b801 call -$8dd6 ($402a30) ; System.GetLastError 0040b806 mov [ebp-$10], eax 0040b809 cmp dword ptr [$77d9ec], 0 0040b810 jz loc_40b820 0040b812 lea eax, [ebp-$30] 0040b815 push eax 0040b816 push 4 0040b818 call dword ptr [$77d9ec] 0040b81e mov edi, eax 0040b820 test edi, edi 0040b822 jnz loc_40b83f 0040b824 lea eax, [ebp-$30] 0040b827 mov [ebp-$c], eax 0040b82a lea edx, [ebp-$c] 0040b82d push edx 0040b82e push 1 0040b830 push 0 0040b832 push $c0fb007f 0040b837 call -$8e9c ($4029a0) ; System.RaiseException 0040b83c > mov edi, [ebp-$14] 0040b83f mov eax, [ebp+$c] 0040b842 mov [eax], edi 0040b844 cmp dword ptr [$77d9f0], 0 0040b84b jz loc_40b864 0040b84d xor edx, edx 0040b84f mov [ebp-$10], edx 0040b852 mov [ebp-$18], ebx 0040b855 mov [ebp-$14], edi 0040b858 lea ecx, [ebp-$30] 0040b85b push ecx 0040b85c push 5 0040b85e call dword ptr [$77d9f0] 0040b864 mov eax, edi 0040b866 pop edi 0040b867 pop esi 0040b868 pop ebx 0040b869 mov esp, ebp 0040b86b pop ebp 0040b86c ret 8 date/time : 2014-10-27, 16:15:37, 71ms computer name : user-S621xT user name : user operating system : Windows 7 x64 Service Pack 1 build 7601 system language : German system up time : 3 hours 14 minutes program up time : 5 seconds processors : 4x Intel(R) Pentium(R) 4 CPU 2.40GHz physical memory : 3054/3861 MB (free/total) free disk space : (C:) 425,38 GB display mode : 1366x768, 32 bit process id : $25 allocated memory : 39,51 MB executable : streamwriter.exe exec. date/time : 2014-05-07 17:24 version : 5.0.0.1 compiled with : Delphi XE madExcept version : 4.0.2 callstack crc : $4d2913a4, $e7e60929, $0f4bbc15 exception number : 1 exception class : EExternalException exception message : Externe Exception C0FB007F. main thread ($26): 7b83aace +05e KERNEL32.dll RaiseException 7b858428 +098 KERNEL32.dll GetProcAddress 0040b83c +1ea streamwriter.exe System 44 +0 @_delayLoadHelper 0040d291 +005 streamwriter.exe Windows kernel32.dll 004584fb +053 streamwriter.exe DateUtils TLocalTimeZone.GetChangesForYear 004582e7 +063 streamwriter.exe DateUtils TLocalTimeZone.GetCachedChangesForYear 00458241 +01d streamwriter.exe DateUtils TLocalTimeZone.DoGetOffsetsAndType 00458c57 +02f streamwriter.exe DateUtils TTimeZone.GetUtcOffsetInSeconds 006ea8de +036 streamwriter.exe HomeCommunication 775 +3 THomeCommunication.HomeThreadHandshakeReceived 0059d7e3 +00b streamwriter.exe Sockets 521 +1 TSocketThread.Sync2 0044e6d3 +12b streamwriter.exe Classes CheckSynchronize 004f1f12 +76a streamwriter.exe Forms TApplication.WndProc 7bc77dfa +10a ntdll.dll wine_server_call 004514dc +014 streamwriter.exe Classes StdWndProc 7e832420 +0b0 user32.dll DispatchMessageW 004f275f +0f3 streamwriter.exe Forms TApplication.ProcessMessage 004f27a2 +00a streamwriter.exe Forms TApplication.HandleMessage 004ee101 +1a1 streamwriter.exe Forms TCustomForm.ShowModal 00766eff +063 streamwriter.exe Main 714 +14 TfrmStreamWriterMain.AfterShown 00512694 +2d4 streamwriter.exe Controls TControl.WndProc 00516f58 +568 streamwriter.exe Controls TWinControl.WndProc 004e9790 +594 streamwriter.exe Forms TCustomForm.WndProc 005165f8 +02c streamwriter.exe Controls TWinControl.MainWndProc 004514dc +014 streamwriter.exe Classes StdWndProc 7e832420 +0b0 user32.dll DispatchMessageW 004f275f +0f3 streamwriter.exe Forms TApplication.ProcessMessage 004f27a2 +00a streamwriter.exe Forms TApplication.HandleMessage 004f2acd +0c9 streamwriter.exe Forms TApplication.Run 0077cc95 +2b9 streamwriter.exe streamwriter 205 +47 initialization 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $34 (THomeThread): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00424fce +002 streamwriter.exe SysUtils WaitForSyncWaitObj 00425177 +01f streamwriter.exe SysUtils WaitOrSignalObj 00406675 +065 streamwriter.exe System 44 +0 TMonitor.Wait 004066e4 +020 streamwriter.exe System 44 +0 TMonitor.Wait 0044f1ed +029 streamwriter.exe Classes TThread.Synchronize 0059d7c4 +028 streamwriter.exe Sockets 513 +6 TSocketThread.Sync 006e984d +029 streamwriter.exe HomeCommunication 288 +4 THomeThread.DoHandshakeReceived 006e997b +07f streamwriter.exe HomeCommunication 340 +5 THomeThread.DoReceivedCommand 006be9c7 +05f streamwriter.exe Communication 201 +8 TCommandThreadBase.DoReceivedData 0059d1d4 +4e8 streamwriter.exe Sockets 429 +109 TSocketThread.Execute 7bc50651 +031 ntdll.dll RtlImageNtHeader 7bc507c5 +045 ntdll.dll RtlImageDirectoryEntryToData 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 0059cad5 +035 streamwriter.exe Sockets 221 +1 TSocketThread.Create thread $33 (TFileWatcher): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 0074bf60 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 0074bdda +02e streamwriter.exe FileWatcher 68 +1 TFileWatcher.Create thread $32 (TFileWatcher): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc77dfa +10a ntdll.dll wine_server_call 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 0074bf60 +124 streamwriter.exe FileWatcher 113 +26 TFileWatcher.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 0074bdda +02e streamwriter.exe FileWatcher 68 +1 TFileWatcher.Create thread $31: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc43c85 +0f5 ntdll.dll NtFsControlFile 7b8747d0 +090 KERNEL32.dll ConnectNamedPipe 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by thread $30 at: 7e66b260 +000 rpcrt4.dll thread $30: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b872495 +025 KERNEL32.dll SetEvent 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 7e666284 +000 rpcrt4.dll thread $2f (TWorkerThread): 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7dbd964d +0cd winex11.drv MsgWaitForMultipleObjectsEx 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00604121 +019 streamwriter.exe VirtualTrees 6332 +3 TWorkerThread.Execute 005952b7 +02b streamwriter.exe madExcept HookedTThreadExecute 0044e816 +042 streamwriter.exe Classes ThreadProc 004073f4 +028 streamwriter.exe System 44 +0 ThreadWrapper 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 00604016 +016 streamwriter.exe VirtualTrees 6275 +1 TWorkerThread.Create thread $2e: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc50651 +031 ntdll.dll RtlImageNtHeader 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b8717ce +03e KERNEL32.dll WaitForSingleObjectEx 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 11020df1 +000 bass.dll thread $2d: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b871830 +040 KERNEL32.dll WaitForMultipleObjects 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 11020dd3 +000 bass.dll thread $2c: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 11020ecc +000 bass.dll thread $2b: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7b87171b +05b KERNEL32.dll WaitForMultipleObjectsEx 7b87176f +03f KERNEL32.dll WaitForSingleObject 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 7d3e4819 +000 dsound.dll thread $2a: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $29: 7bc80793 +073 ntdll.dll NtWaitForMultipleObjects 7bc807f1 +041 ntdll.dll NtWaitForSingleObject 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace thread $28: 00595199 +00d streamwriter.exe madExcept CallThreadProcSafe 00595203 +037 streamwriter.exe madExcept ThreadExceptFrame 7bc7c938 +1b8 ntdll.dll RtlCaptureStackBackTrace >> created by main thread ($26) at: 7d392ad1 +000 winepulse.drv modules: 00400000 streamwriter.exe 5.0.0.1 C:\Program Files (x86)\streamWriter 10000000 bass_aac.dll 2.4.4.2 C:\users\user\Temp\streamWriter 11000000 bass.dll 2.4.10.0 C:\users\user\Temp\streamWriter 7b810000 KERNEL32.dll 5.1.2600.2180 C:\windows\system32 7bc10000 ntdll.dll 5.1.2600.2180 C:\windows\system32 7c990000 dbghelp.dll 5.1.2600.3264 C:\windows\system32 7ce30000 psapi.dll 5.1.2600.3264 C:\windows\system32 7ced0000 usp10.dll C:\windows\system32 7d020000 dwmapi.dll 6.0.6000.16386 C:\windows\system32 7d380000 winepulse.drv C:\windows\system32 7d3b0000 mmdevapi.dll C:\windows\system32 7d3d0000 dsound.dll 5.3.1.904 C:\windows\system32 7d420000 olepro32.dll 5.0.4522.0 C:\windows\system32 7d570000 imm32.dll 5.1.2600.2180 C:\windows\system32 7d990000 faultrep.dll C:\windows\system32 7d9b0000 uxtheme.dll 10.0.0.0 C:\windows\system32 7dbc0000 winex11.drv 10.0.0.0 C:\windows\system32 7ded0000 winmm.dll C:\windows\system32 7df90000 msvcrt.dll 7.0.2600.2180 C:\windows\system32 7e070000 msacm32.dll C:\windows\system32 7e090000 oleacc.dll 7.0.0.0 C:\windows\system32 7e0c0000 iphlpapi.dll 5.1.2600.2180 C:\windows\system32 7e0e0000 ws2_32.dll 5.1.2600.5512 C:\windows\system32 7e110000 wsock32.dll 4.0.0.0 C:\windows\system32 7e130000 comdlg32.dll 4.0.0.950 C:\windows\system32 7e220000 shlwapi.dll 6.0.2800.1692 C:\windows\system32 7e2a0000 shell32.dll 5.0.3900.6975 C:\windows\system32 7e4d0000 winspool.drv 5.1.2600.2180 C:\windows\system32 7e510000 comctl32.dll 5.81.4704.1100 C:\windows\system32 7e610000 msimg32.dll C:\windows\system32 7e630000 rpcrt4.dll 5.1.2600.2180 C:\windows\system32 7e6b0000 gdi32.dll 10.0.0.0 C:\windows\system32 7e7d0000 user32.dll 5.1.2600.2180 C:\windows\system32 7e920000 advapi32.dll 5.1.2600.2180 C:\windows\system32 7e9a0000 ole32.dll 10.0.0.0 C:\windows\system32 7eae0000 oleaut32.dll 6.0.6001.18000 C:\windows\system32 7eff0000 version.dll 5.1.2600.2180 C:\windows\system32 processes: 0e services.exe 0 0 normal 12 winedevice.exe 0 0 normal 1b plugplay.exe 0 0 normal 22 explorer.exe 0 0 normal 25 streamwriter.exe 0 0 normal C:\Program Files (x86)\streamWriter cpu registers: eax = 7b82695d ebx = 7b8b5000 ecx = 0033f474 edx = 0033f3f4 esi = c0fb007f edi = 00000000 eip = 7b83aace esp = 0033f3d4 ebp = 0033f448 stack dump: 0033f3d4 98 f4 33 00 04 00 00 00 - 24 02 c4 7b 7f 00 fb c0 ..3.....$..{.... 0033f3e4 02 00 00 00 00 00 00 00 - ce aa 83 7b 01 00 00 00 ...........{.... 0033f3f4 74 f4 33 00 48 f4 33 00 - 2d 84 85 7b 00 00 81 7b t.3.H.3.-..{...{ 0033f404 00 00 81 7b e5 68 82 7b - 2d 84 85 7b 7a 00 00 c0 ...{.h.{-..{z... 0033f414 28 f4 33 00 00 00 00 00 - 24 f4 33 00 40 00 00 00 (.3.....$.3.@... 0033f424 08 00 00 00 1d 00 1e 00 - ea 62 7a 00 4c f4 33 00 .........bz.L.3. 0033f434 00 00 81 7b 5c f4 33 00 - 58 f4 33 00 00 00 81 7b ...{\.3.X.3....{ 0033f444 20 60 7a 00 a4 f4 33 00 - 3c b8 40 00 64 f4 33 00 `z...3.<.@.d.3. 0033f454 3c b8 40 00 7f 00 fb c0 - 00 00 00 00 01 00 00 00 <.@............. 0033f464 98 f4 33 00 d0 f4 33 00 - de 07 00 00 d8 5a bc 00 ..3...3......Z.. 0033f474 24 00 00 00 20 60 7a 00 - f4 60 7a 00 c6 62 7a 00 $... `z..`z..bz. 0033f484 01 00 00 00 ea 62 7a 00 - 00 00 81 7b 00 00 00 00 .....bz....{.... 0033f494 7f 00 00 00 74 f4 33 00 - b3 5f 40 00 01 00 00 00 ....t.3.._@..... 0033f4a4 a8 f5 33 00 96 d2 40 00 - 20 60 7a 00 f4 60 7a 00 ..3...@. `z..`z. 0033f4b4 f8 ff ff ff 00 00 00 00 - 01 00 00 00 00 85 45 00 ..............E. 0033f4c4 de 07 00 00 00 00 00 00 - d0 f4 33 00 00 00 00 00 ..........3..... 0033f4d4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f4e4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f4f4 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ 0033f504 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................ disassembling: [...] 0040b7aa cmp dword ptr [esi+$14], 0 0040b7ae jz loc_40b7f2 0040b7b0 cmp dword ptr [esi+$1c], 0 0040b7b4 jz loc_40b7f2 0040b7b6 push ebx 0040b7b7 call -$1c2 ($40b5fa) 0040b7bc mov edi, eax 0040b7be cmp dword ptr [edi], $4550 0040b7c4 jnz loc_40b7f2 0040b7c6 push edi 0040b7c7 call -$1a2 ($40b62a) 0040b7cc cmp eax, [esi+$1c] 0040b7cf jnz loc_40b7f2 0040b7d1 push ebx 0040b7d2 push edi 0040b7d3 call -$1a1 ($40b637) 0040b7d8 test eax, eax 0040b7da jz loc_40b7f2 0040b7dc push dword ptr [esi+$14] 0040b7df push dword ptr [esi+$c] 0040b7e2 call -$1e0 ($40b607) 0040b7e7 mov eax, [esi+$c] 0040b7ea mov edx, [ebp-4] 0040b7ed mov edi, [eax+edx*4] 0040b7f0 jmp loc_40b844 0040b7f2 push dword ptr [ebp-$1c] 0040b7f5 push ebx 0040b7f6 call -$8da3 ($402a58) ; System.GetProcAddress 0040b7fb mov edi, eax 0040b7fd test edi, edi 0040b7ff jnz loc_40b83f 0040b801 call -$8dd6 ($402a30) ; System.GetLastError 0040b806 mov [ebp-$10], eax 0040b809 cmp dword ptr [$77d9ec], 0 0040b810 jz loc_40b820 0040b812 lea eax, [ebp-$30] 0040b815 push eax 0040b816 push 4 0040b818 call dword ptr [$77d9ec] 0040b81e mov edi, eax 0040b820 test edi, edi 0040b822 jnz loc_40b83f 0040b824 lea eax, [ebp-$30] 0040b827 mov [ebp-$c], eax 0040b82a lea edx, [ebp-$c] 0040b82d push edx 0040b82e push 1 0040b830 push 0 0040b832 push $c0fb007f 0040b837 call -$8e9c ($4029a0) ; System.RaiseException 0040b83c > mov edi, [ebp-$14] 0040b83f mov eax, [ebp+$c] 0040b842 mov [eax], edi 0040b844 cmp dword ptr [$77d9f0], 0 0040b84b jz loc_40b864 0040b84d xor edx, edx 0040b84f mov [ebp-$10], edx 0040b852 mov [ebp-$18], ebx 0040b855 mov [ebp-$14], edi 0040b858 lea ecx, [ebp-$30] 0040b85b push ecx 0040b85c push 5 0040b85e call dword ptr [$77d9f0] 0040b864 mov eax, edi 0040b866 pop edi 0040b867 pop esi 0040b868 pop ebx 0040b869 mov esp, ebp 0040b86b pop ebp 0040b86c ret 8