EurekaLog 6.0.14 Application: ------------------------------------------------------- 1.1 Start Date : Sun, 27 Sep 2009 10:10:19 +0100 1.2 Name/Description: ModesXML.exe - (ModesXML) 1.3 Version Number : 1.2.0.143 1.4 Parameters : 1.5 Compilation Date: Fri, 4 Sep 2009 18:05:09 +0100 1.6 Up Time : 4 minutes, 58 seconds Exception: -------------------------------------------------------------------------------------------------------------- 2.1 Date : Sun, 27 Sep 2009 10:15:17 +0100 2.2 Address : 0059203E 2.3 Module Name : ModesXML.exe - (ModesXML) 2.4 Module Version: 1.2.0.143 2.5 Type : EAccessViolation 2.6 Message : Access violation at address 0059203E in module 'ModesXML.exe'. Read of address 73206D71. 2.7 ID : 0EDF 2.8 Count : 1 2.9 Status : New 2.10 Note : User: ------------------------------------------------------- 3.1 ID : ajpg 3.2 Name : Andrew Gray 3.3 Email : a.j.gray@durham.ac.uk 3.4 Company : 3.5 Privileges: SeChangeNotifyPrivilege - ON SeSecurityPrivilege - OFF SeBackupPrivilege - OFF SeRestorePrivilege - OFF SeSystemtimePrivilege - OFF SeShutdownPrivilege - OFF SeRemoteShutdownPrivilege - OFF SeTakeOwnershipPrivilege - OFF SeDebugPrivilege - OFF SeSystemEnvironmentPrivilege - OFF SeSystemProfilePrivilege - OFF SeProfileSingleProcessPrivilege - OFF SeIncreaseBasePriorityPrivilege - OFF SeLoadDriverPrivilege - ON SeCreatePagefilePrivilege - OFF SeIncreaseQuotaPrivilege - OFF SeUndockPrivilege - ON SeManageVolumePrivilege - OFF SeImpersonatePrivilege - ON SeCreateGlobalPrivilege - ON Active Controls: --------------------------------------------------------------------------------------------- 4.1 Form Class : TfrmMain.UnicodeClass 4.2 Form Text : ModesXML - [Application: Object records. File: The object tutorial file] 4.3 Control Class: TModesStringGrid.UnicodeClass 4.4 Control Text : Computer: ------------------------------------------------------------------------ 5.1 Name : DELILAH 5.2 Total Memory : 255 Mb 5.3 Free Memory : 55 Mb 5.4 Total Disk : 3.95 Gb 5.5 Free Disk : 0.8 Gb 5.6 System Up Time: 10 minutes, 27 seconds 5.7 Processor : Intel(R) Pentium(R) M processor 1400MHz 5.8 Display Mode : 1024 x 768, 32 bit 5.9 Display DPI : 96 5.10 Video Card : MOBILITY RADEON 9000 (driver 8.20.0.0 - RAM 32 MB) 5.11 Printer : HP Color LaserJet PS (driver 6.0.6000.16386) Operating System: ------------------------------------ 6.1 Type : Microsoft Windows XP 6.2 Build # : 2600 6.3 Update : Service Pack 3 6.4 Language: English 6.5 Charset : 0 Network: --------------------------------- 7.1 IP Address: 192.168.001.003 7.2 Submask : 255.255.255.000 7.3 Gateway : 192.168.001.001 7.4 DNS 1 : 192.168.001.001 7.5 DNS 2 : 000.000.000.000 7.6 DHCP : OFF Custom Information: -------------------------------------------------------------------------------------------------------------------- 8.1 Server Type : Remote 8.2 StyleSheetPath : E:\modesresources\stylesheets\ 8.3 ResourcePath : E:\resources\ 8.4 DataPath : E:\data\ 8.5 DTDPath : E:\modesresources\dtds\ 8.6 ServerName : ModesXML 8.7 ServerPort : 16000 8.8 AppDataFolder : C:\Documents and Settings\ajpg\Application Data\ModesXML\ 8.9 AppTempFolder : C:\Documents and Settings\ajpg\Application Data\ModesXML\Temp\ 8.10 Transport : nxSharedMemoryTransport1 8.11 Logged in user : ajpg 8.12 Server version : 2.0706 (ModesXML) 8.13 Uptime : 0.00:09:47 8.14 Sessions : 10 8.15 Databases : 12 8.16 Transaction Contexts : 12 8.17 Cursors : 69 8.18 Statements : 0 8.19 Folders : 5 8.20 Tables : 30 8.21 Block Cache Available (Recently / Frequently): 130,048 ( 96,948 / 33,100 ) kbyte 8.22 Block Cache Used (Recently / Frequently) : 1,396 ( 1,396 / 0 ) kbyte 8.23 Block Cache Tracked (Recently / Frequently) : 20 ( 20 / 0 ) kbyte 8.24 Block Cache Miss Recently Used : 345 8.25 Block Cache Miss Frequently Used : 0 8.26 Block Cache Hit Recently Used : 727,101 8.27 Block Cache Hit Frequently Used : 0 8.28 Block Cache Eviction Recently Used : 0 8.29 Block Cache Eviction Frequently Used : 0 8.30 Transaction Commit : 7 8.31 Transaction Commit Nested : 0 8.32 Transaction Rollback : 0 8.33 Transaction Rollback Nested : 0 8.34 Blocks Read : 345 8.35 Blocks Written : 10 8.36 Temporary Storage in use : 0 kbyte 8.37 Registered User Name : ModesXML testers 8.38 Registered Institution : [various] 8.39 Max. number of screens : 3 8.40 Number of users logged on : 1 8.41 User ajpg : [local connection] Request: ------------------------------------------------------------------------------------------------------------------------------------------------- 8.1 : Second AV immediately following on from the first. If I get more of these I won't bother emailing them unless the error message changes. Call Stack Information: ----------------------------------------------------------------------------------------------------------------- |Address |Module |Unit |Class |Procedure/Method |Line | ----------------------------------------------------------------------------------------------------------------- |*Exception Thread: ID=1352; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |0059203E|ModesXML.exe|XpDOM.pas |TXpNode |noGetLevelCode |3557[6] | |00592000|ModesXML.exe|XpDOM.pas |TXpNode |noGetLevelCode |3551[0] | |00C1EC9B|ModesXML.exe|frXMLEditor.pas |TSre |IndentRank |1259[4] | |00C1EC74|ModesXML.exe|frXMLEditor.pas |TSre |IndentRank |1255[0] | |00C1DED9|ModesXML.exe|frXMLEditor.pas |TSre |GridDrawCell |850[33] | |00ABE17E|ModesXML.exe|TntGrids.pas |TTntStringGrid |DrawCell |620[6] | |7E429C79|user32.dll | | |FillRect | | |77F18232|GDI32.dll | | |RectVisible | | |00554268|ModesXML.exe|TntControls.pas |TWinControlTrap |WindowProc |672[19] | |7C9010E0|ntdll.dll | | |RtlLeaveCriticalSection | | |7E429007|user32.dll | | |EndPaint | | |7E428FFD|user32.dll | | |EndPaint | | |0085A58C|ModesXML.exe|cxControls.pas | |GetDragObject |1656[1] | |0085D51F|ModesXML.exe|cxControls.pas |TcxControl |ShowDragImage |3676[1] | |0085D51C|ModesXML.exe|cxControls.pas |TcxControl |ShowDragImage |3675[0] | |0085B187|ModesXML.exe|cxControls.pas |TcxControl |WMPaint |2380[3] | |00B58CA4|ModesXML.exe|dxBarExtItems.pas |TdxBarControlContainerItem|GetInPlaceControl |5584[3] | |00554268|ModesXML.exe|TntControls.pas |TWinControlTrap |WindowProc |672[19] | |7E42A034|user32.dll | | |CallWindowProcW | | |7E42A01E|user32.dll | | |CallWindowProcW | | |00553EBC|ModesXML.exe|TntControls.pas |TWinControlTrap |Win32Proc |560[12] | |7E4196C2|user32.dll | | |DispatchMessageA | | |7E4196B8|user32.dll | | |DispatchMessageA | | |00C3807D|ModesXML.exe|ModesXML.dpr | | |176[18] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1984; Priority=0; Class= | |---------------------------------------------------------------------------------------------------------------| |7C90DF48|ntdll.dll | | |NtWaitForMultipleObjects | | |7C90DDA8|ntdll.dll | | |ZwSetTimer | | |7C8095D8|kernel32.dll| | |WaitForMultipleObjectsEx | | |7C80A110|kernel32.dll| | |WaitForMultipleObjects | | |7C80A0FD|kernel32.dll| | |WaitForMultipleObjects | | |0060E9CF|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1837[2] | |0060E9BC|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |Wait |1835[0] | |0060E906|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1811[29]| |0060E7E4|ModesXML.exe|nxsrFileImplWin32.pas |TnxFlushThread |DoExecute |1782[0] | |0060E5DB|ModesXML.exe|nxsrFileImplWin32.pas | |FlushThreadProc |1723[17]| |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1352; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |00C37F43|ModesXML.exe|ModesXML.dpr | | |158[0] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=240; Priority=2; Class=TnxSharedMemoryMutexOwner | |---------------------------------------------------------------------------------------------------------------| |7E419416|user32.dll | | |WaitMessage | | |7E41940C|user32.dll | | |WaitMessage | | |005D6FF1|ModesXML.exe|nxllThread.pas |TnxMessageThread |Idle |863[10] | |005D6F94|ModesXML.exe|nxllThread.pas |TnxMessageThread |Idle |853[0] | |005D6F88|ModesXML.exe|nxllThread.pas |TnxMessageThread |HandleMessage |847[1] | |005D6F6C|ModesXML.exe|nxllThread.pas |TnxMessageThread |HandleMessage |846[0] | |005D700A|ModesXML.exe|nxllThread.pas |TnxMessageThread |InnerExecute |869[2] | |005D6D28|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |704[14] | |005D6C98|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |690[0] | |005D6F29|ModesXML.exe|nxllThread.pas |TnxMessageThread |DoExecute |831[2] | |005D6B45|ModesXML.exe|nxllThread.pas |TnxThread |Execute |507[3] | |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1352; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |005971C4|ModesXML.exe|XpDOM.pas |TXpNode |noParsePathExpr |5689[0] | |0059A5BB|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6894[1] | |00590CA8|ModesXML.exe|XpDOM.pas |TXpNodeList |nlGetLength |2797[1] | |0059A5C5|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6898[5] | |0059A590|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6893[0] | |0059A562|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6878[16]| |0059A577|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6878[16]| |0059A4C8|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6862[0] | |00595141|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4774[1] | |005954E1|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4776[3] | |005950F4|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4773[0] | |00594886|ModesXML.exe|XpDOM.pas |TXpNode |noParseAdditiveExpr |4446[1] | |004B754D|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scShouldFollowTransition |1995[6] | |004B6F38|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scDependentStateChange |1843[9] | |004B6CC7|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1763[4] | |004B6C80|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1759[0] | |006A2782|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2019[1] | |004B616B|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcNotifyDependents |1314[10]| |004B7649|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scStateChanging |2050[6] | |004B7173|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1921[14]| |00590E83|ModesXML.exe|XpDOM.pas |TXpNodeList |Destroy |2912[3] | |00492604|ModesXML.exe|nxllUtils.pas | |nxCmpPtr |526[1] | |004906D3|ModesXML.exe|nxllList.pas |TnxSortedList |slCompare |712[1] | |00490666|ModesXML.exe|nxllList.pas |TnxSortedList |Find |689[7] | |00490483|ModesXML.exe|nxllList.pas |TnxSortedList |Add |645[5] | |0048F1B4|ModesXML.exe|nxllSync.pas |TnxPadlock |Unlock |372[1] | |00490A02|ModesXML.exe|nxllList.pas |TnxListPadlock |EndWrite |878[1] | |00490715|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |724[4] | |004906DC|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |720[0] | |004B5D7A|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependent |1189[5] | |005EA14F|ModesXML.exe|nxdb.pas |TnxBaseSession |nxcAddDependent |5135[4] | |004B5E08|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependingOn |1198[5] | |004B6F67|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetActive |1867[2] | |008FB623|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |416[74] | |008FB088|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |342[0] | |008FDD28|ModesXML.exe|dmUser.pas |TuserDm |Login |820[2] | |008FDCF8|ModesXML.exe|dmUser.pas |TuserDm |Login |818[0] | |00C38018|ModesXML.exe|ModesXML.dpr | | |170[12] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | |---------------------------------------------------------------------------------------------------------------| | | |Running Thread: ID=1328; Priority=15; Class=TnxHeartbeatThread | |---------------------------------------------------------------------------------------------------------------| |7C90DF58|ntdll.dll | | |ZwWaitForSingleObject | | |7C802550|kernel32.dll| | |WaitForSingleObjectEx | | |7C80253D|kernel32.dll| | |WaitForSingleObject | | |7C802530|kernel32.dll| | |WaitForSingleObject | | |006A6411|ModesXML.exe|nxptBasePooledTransport.pas|TnxHeartbeatThread |InnerExecute |2218[3] | |005D6D28|ModesXML.exe|nxllThread.pas |TnxInitThread |DoExecute |704[14] | |005D6B45|ModesXML.exe|nxllThread.pas |TnxThread |Execute |507[3] | |---------------------------------------------------------------------------------------------------------------| |Calling Thread: ID=1352; Priority=0; Class=; [Main] | |---------------------------------------------------------------------------------------------------------------| |005971C4|ModesXML.exe|XpDOM.pas |TXpNode |noParsePathExpr |5689[0] | |0059A5BB|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6894[1] | |00590CA8|ModesXML.exe|XpDOM.pas |TXpNodeList |nlGetLength |2797[1] | |0059A5C5|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6898[5] | |0059A590|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnionExpr |6893[0] | |0059A562|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6878[16]| |0059A577|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6878[16]| |0059A4C8|ModesXML.exe|XpDOM.pas |TXpNode |noParseUnaryExpr |6862[0] | |00595141|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4774[1] | |005954E1|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4776[3] | |005950F4|ModesXML.exe|XpDOM.pas |TXpNode |noParseMultiplicativeExpr|4773[0] | |00594886|ModesXML.exe|XpDOM.pas |TXpNode |noParseAdditiveExpr |4446[1] | |004B754D|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scShouldFollowTransition |1995[6] | |004B6F38|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scDependentStateChange |1843[9] | |004B6CC7|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1763[4] | |004B6C80|ModesXML.exe|nxllComponent.pas |TnxStateComponent |nxcNotification |1759[0] | |006A2782|ModesXML.exe|nxllTransport.pas |TnxBaseTransport |nxcNotification |2019[1] | |004B616B|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcNotifyDependents |1314[10]| |004B7649|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scStateChanging |2050[6] | |004B7173|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetState |1921[14]| |00590E83|ModesXML.exe|XpDOM.pas |TXpNodeList |Destroy |2912[3] | |00492604|ModesXML.exe|nxllUtils.pas | |nxCmpPtr |526[1] | |004906D3|ModesXML.exe|nxllList.pas |TnxSortedList |slCompare |712[1] | |00490666|ModesXML.exe|nxllList.pas |TnxSortedList |Find |689[7] | |00490483|ModesXML.exe|nxllList.pas |TnxSortedList |Add |645[5] | |0048F1B4|ModesXML.exe|nxllSync.pas |TnxPadlock |Unlock |372[1] | |00490A02|ModesXML.exe|nxllList.pas |TnxListPadlock |EndWrite |878[1] | |00490715|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |724[4] | |004906DC|ModesXML.exe|nxllList.pas |TnxListSyncAccess |Add |720[0] | |004B5D7A|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependent |1189[5] | |005EA14F|ModesXML.exe|nxdb.pas |TnxBaseSession |nxcAddDependent |5135[4] | |004B5E08|ModesXML.exe|nxllComponent.pas |TnxComponent |nxcAddDependingOn |1198[5] | |004B6F67|ModesXML.exe|nxllComponent.pas |TnxStateComponent |scSetActive |1867[2] | |008FB623|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |416[74] | |008FB088|ModesXML.exe|dmUser.pas |TuserDm |ConnectToServer |342[0] | |008FDD28|ModesXML.exe|dmUser.pas |TuserDm |Login |820[2] | |008FDCF8|ModesXML.exe|dmUser.pas |TuserDm |Login |818[0] | |00C38018|ModesXML.exe|ModesXML.dpr | | |170[12] | |7C90DCB8|ntdll.dll | | |ZwSetInformationThread | | ----------------------------------------------------------------------------------------------------------------- Modules Information: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Handle |Name |Description |Version |Size |Modified |Path | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |00400000|ModesXML.exe |ModesXML |1.2.0.143 |11724288|2009-09-04 18:05:12|E:\bin\Client | |027F0000|xpsp2res.dll |Service Pack 2 Messages |5.1.2600.5512 |2897920 |2008-04-13 18:39:24|C:\WINDOWS\system32 | |02B00000|ModesPDF.dll |WPViewPDF |1.4.1.0 |1108352 |2007-07-13 09:52:24|E:\bin\Client | |02F60000|XfoInterface41.dll |XfoInterface |4.1.2007.704 |225280 |2007-07-04 12:04:30|e:\bin\Client\AHFO4_1 | |02FA0000|pthreadVSE2.dll | |2.2.0.0 |86071 |2005-04-08 14:27:02|e:\bin\Client\AHFO4_1 | |02FC0000|XfoFont41.dll |XfoFont |4.1.2007.704 |147456 |2007-07-04 11:53:46|e:\bin\Client\AHFO4_1 | |02FF0000|XfoText41.dll |XfoText |4.1.2007.704 |86016 |2007-07-04 11:54:00|e:\bin\Client\AHFO4_1 | |03780000|XfoHyphen41.dll |XfoHyphen |4.1.2007.704 |81920 |2007-07-04 12:00:22|e:\bin\Client\AHFO4_1 | |03840000|XfoEngine41.dll |XfoEngine |4.1.2007.704 |1523712 |2007-07-04 12:02:48|e:\bin\Client\AHFO4_1 | |039C0000|XfoDMC41.dll |XfoDMC |4.1.2007.704 |360448 |2007-07-04 11:52:58|e:\bin\Client\AHFO4_1 | |03A20000|XfoTrans41.dll |XfoTrans |4.1.2007.704 |110592 |2007-07-04 12:02:52|e:\bin\Client\AHFO4_1 | |03C40000|AHFont20.dll | | |987136 |2007-07-04 11:53:40|e:\bin\Client\AHFO4_1 | |03D40000|XfoCommon41.dll |XfoCommon |4.1.2007.704 |909312 |2007-07-04 11:53:32|e:\bin\Client\AHFO4_1 | |03E30000|XfoGraphic41.dll |XfoGraphic |4.1.2007.704 |1765376 |2007-07-04 12:00:14|e:\bin\Client\AHFO4_1 | |03FF0000|PDFToolPage10.dll | | |749568 |2007-07-04 11:53:56|e:\bin\Client\AHFO4_1 | |040B0000|AHGraphic20.dll | | |811008 |2007-06-29 20:40:04|e:\bin\Client\AHFO4_1 | |04180000|PDFExplorer21.dll | | |1118208 |2007-07-04 11:54:06|e:\bin\Client\AHFO4_1 | |042A0000|PDFRes10.dll | | |3731456 |2007-07-04 11:54:02|e:\bin\Client\AHFO4_1 | |04630000|XfoHyphenCH41.dll |XfoHyphenCH |4.1.2007.704 |835584 |2007-07-04 12:00:40|e:\bin\Client\AHFO4_1 | |04700000|XfoGdiCtl41.dll |XfoGdiCtl |4.1.2007.704 |266240 |2007-07-04 12:04:22|e:\bin\Client\AHFO4_1 | |04750000|XfoRender41.dll |XfoRender |4.1.2007.704 |2420736 |2007-07-04 12:04:10|e:\bin\Client\AHFO4_1 | |049B0000|PDFCreator25.dll | | |1253376 |2007-07-04 12:03:00|e:\bin\Client\AHFO4_1 | |04AF0000|PDFLinearizer11.dll| | |708608 |2007-07-04 12:03:02|e:\bin\Client\AHFO4_1 | |04BB0000|SVGCreator41.dll |SVGCreator |4.1.2007.704 |434176 |2007-07-04 12:03:06|e:\bin\Client\AHFO4_1 | |10000000|XfoComCtl41.dll |XfoComCtl |4.1.2007.704 |90112 |2007-07-04 12:04:32|e:\bin\Client\AHFO4_1 | |20000000|xpsp3res.dll |Service Pack 3 Messages |5.1.2600.5512 |689152 |2008-04-13 18:39:26|C:\WINDOWS\system32 | |4A800000|icuuc34.dll |IBM ICU Common DLL |3.4.1.0 |819200 |2006-07-18 11:33:22|e:\bin\Client\AHFO4_1 | |4A900000|icuin34.dll |IBM ICU I18N DLL |3.4.1.0 |696320 |2006-07-18 11:33:20|e:\bin\Client\AHFO4_1 | |4AD00000|icudt34.dll |ICU Data DLL |3.4.1.0 |8876032 |2006-07-18 11:33:20|e:\bin\Client\AHFO4_1 | |4EC50000|gdiplus.dll |Microsoft GDI+ |5.1.3102.5581 |1724416 |2008-04-15 18:47:34|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4 | |5AD70000|uxtheme.dll |Microsoft UxTheme Library |6.0.2900.5512 |218624 |2008-04-14 01:12:08|C:\WINDOWS\system32 | |5B860000|NETAPI32.dll |Net Win32 API DLL |5.1.2600.5694 |337408 |2008-10-15 17:34:24|C:\WINDOWS\system32 | |5D090000|comctl32.dll |Common Controls Library |5.82.2900.5512 |617472 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |5EDD0000|olepro32.dll | |5.1.2600.5512 |84992 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |662B0000|hnetcfg.dll |Home Networking Configuration Manager |5.1.2600.5512 |344064 |2008-04-14 01:11:54|C:\WINDOWS\system32 | |71A50000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |5.1.2600.5625 |245248 |2008-06-20 18:46:58|C:\WINDOWS\system32 | |71A90000|wshtcpip.dll |Windows Sockets Helper DLL |5.1.2600.5512 |19456 |2008-04-14 01:12:10|C:\WINDOWS\System32 | |71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.5512 |19968 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.5512 |82432 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.5512 |22528 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |71B20000|mpr.dll |Multiple Provider Router DLL |5.1.2600.5512 |59904 |2008-04-14 01:11:58|C:\WINDOWS\system32 | |72D10000|msacm32.drv |Microsoft Sound Mapper |5.1.2600.0 |20480 |2004-08-04 13:00:00|C:\WINDOWS\system32 | |72D20000|wdmaud.drv |WDM Audio driver mapper |5.1.2600.5512 |23552 |2008-04-14 01:12:46|C:\WINDOWS\system32 | |73000000|winspool.drv |Windows Spooler Driver |5.1.2600.5512 |146432 |2008-04-14 01:12:46|C:\WINDOWS\system32 | |73B30000|mscms.dll |Microsoft Color Matching System DLL |5.1.2600.5627 |74240 |2008-06-24 17:43:16|C:\WINDOWS\system32 | |73B50000|avifil32.dll |Microsoft AVI File support library |5.1.2600.5827 |84992 |2009-06-10 15:13:30|C:\WINDOWS\system32 | |73BC0000|DCIMAN32.DLL |DCI Manager |5.1.2600.5512 |8704 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |74980000|msxml3.dll |MSXML 3.0 SP10 |8.100.1048.0 |1106944 |2008-09-04 18:15:04|C:\WINDOWS\system32 | |74C80000|oleacc.dll |Active Accessibility Core Component |4.2.5406.0 |163328 |2004-08-04 13:00:00|C:\WINDOWS\system32 | |74D90000|USP10.dll |Uniscribe Unicode script processor |1.420.2600.5512 |406016 |2008-04-14 01:12:08|C:\WINDOWS\system32 | |754D0000|CRYPTUI.dll |Microsoft Trust UI Provider |5.131.2600.5512 |512512 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |75A70000|MSVFW32.dll |Microsoft Video for Windows DLL |5.1.2600.5512 |121344 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |76080000|MSVCP60.dll |Microsoft (R) C++ Runtime Library |6.2.3104.0 |413696 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |76380000|msimg32.dll |GDIEXT Client DLL |5.1.2600.5512 |4608 |2008-04-14 01:12:00|C:\WINDOWS\system32 | |763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2900.5512 |276992 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |769C0000|USERENV.dll |Userenv |5.1.2600.5512 |727040 |2008-04-14 01:12:08|C:\WINDOWS\system32 | |76B20000|ATL.DLL |ATL Module for Windows XP (Unicode) |3.5.2284.2 |58880 |2009-07-17 20:01:06|C:\WINDOWS\system32 | |76B40000|winmm.dll |MCI API DLL |5.1.2600.5512 |176128 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.5512 |23040 |2008-04-14 01:12:04|C:\WINDOWS\system32 | |76C30000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.2600.5512 |176640 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.5512 |144384 |2008-04-14 01:11:54|C:\WINDOWS\system32 | |76F20000|DNSAPI.dll |DNS Client API DLL |5.1.2600.5625 |147968 |2008-06-20 18:46:58|C:\WINDOWS\system32 | |76F60000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.5512 |172032 |2008-04-14 01:12:10|C:\WINDOWS\system32 | |76FB0000|winrnr.dll |LDAP RnR Provider DLL |5.1.2600.5512 |16896 |2008-04-14 01:12:10|C:\WINDOWS\System32 | |76FC0000|rasadhlp.dll |Remote Access AutoDial Helper |5.1.2600.5512 |7680 |2008-04-14 01:12:04|C:\WINDOWS\system32 | |76FD0000|CLBCATQ.DLL | |2001.12.4414.700|498688 |2008-04-14 01:11:50|C:\WINDOWS\system32 | |77050000|COMRes.dll | |2001.12.4414.700|792064 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |77120000|oleaut32.dll | |5.1.2600.5512 |551936 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |771B0000|wininet.dll |Internet Extensions for Win32 |6.0.2900.5835 |666624 |2009-06-26 17:50:06|C:\WINDOWS\system32 | |773D0000|comctl32.dll |User Experience Controls Library |6.0.2900.5512 |1054208 |2008-04-14 01:12:52|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83| |774E0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.5512 |1287168 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |77920000|SETUPAPI.dll |Windows Setup API |5.1.2600.5512 |985088 |2008-04-14 05:42:06|C:\WINDOWS\system32 | |77A80000|CRYPT32.dll |Crypto API32 |5.131.2600.5512 |599040 |2008-04-14 01:11:52|C:\WINDOWS\system32 | |77B20000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.5512 |57344 |2008-04-14 01:11:58|C:\WINDOWS\system32 | |77BD0000|midimap.dll |Microsoft MIDI Mapper |5.1.2600.5512 |18944 |2008-04-14 01:11:58|C:\WINDOWS\system32 | |77BE0000|MSACM32.dll |Microsoft ACM Audio Filter |5.1.2600.5512 |71680 |2008-04-14 01:11:58|C:\WINDOWS\system32 | |77C00000|version.dll |Version Checking and File Installation Libraries|5.1.2600.5512 |18944 |2008-04-14 01:12:08|C:\WINDOWS\system32 | |77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.5512 |343040 |2008-04-14 01:12:02|C:\WINDOWS\system32 | |77DD0000|advapi32.dll |Advanced Windows 32 Base API |5.1.2600.5755 |617472 |2009-02-09 13:10:48|C:\WINDOWS\system32 | |77E70000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.5795 |585216 |2009-04-15 15:51:26|C:\WINDOWS\system32 | |77F10000|GDI32.dll |GDI Client DLL |5.1.2600.5698 |286720 |2008-10-23 13:36:14|C:\WINDOWS\system32 | |77F60000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2900.5512 |474112 |2008-04-14 01:12:06|C:\WINDOWS\system32 | |77FE0000|Secur32.dll |Security Support Provider Interface |5.1.2600.5834 |56832 |2009-06-25 09:25:26|C:\WINDOWS\system32 | |7C340000|MSVCR71.dll |Microsoft® C Runtime Library |7.10.3052.4 |348160 |2004-04-20 08:58:04|e:\bin\Client\AHFO4_1 | |7C800000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.5781 |989696 |2009-03-21 15:06:58|C:\WINDOWS\system32 | |7C900000|ntdll.dll |NT Layer DLL |5.1.2600.5755 |714752 |2009-02-09 13:10:48|C:\WINDOWS\system32 | |7C9C0000|shell32.dll |Windows Shell Common Dll |6.0.2900.5622 |8461312 |2008-06-17 20:02:20|C:\WINDOWS\system32 | |7E290000|shdocvw.dll |Shell Doc Object and Control Library |6.0.2900.5848 |1509888 |2009-07-18 17:05:06|C:\WINDOWS\system32 | |7E410000|user32.dll |Windows XP USER API Client DLL |5.1.2600.5512 |578560 |2008-04-14 01:12:08|C:\WINDOWS\system32 | |7E720000|SXS.DLL |Fusion 2.5 |5.1.2600.5512 |713216 |2008-04-14 01:12:08|C:\WINDOWS\system32 | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Processes Information: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |ID |Name |Description |Version |Memory |Priority|Threads|Path | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |4 |System | | |57344 |Normal |59 | | |296 |Explorer.EXE |Windows Explorer |6.0.2900.5512|7614464 |Normal |13 |C:\WINDOWS | |308 |1XConfig.exe |8021XConfig Module |7.1.4.4 |1519616 |Normal |4 |C:\WINDOWS\system32 | |424 |smss.exe | | |110592 |Normal |3 |\SystemRoot\System32 | |716 |winlogon.exe | | |1110016 |High |26 |C:\WINDOWS\system32 | |760 |services.exe |Services and Controller app |5.1.2600.5755|1560576 |Normal |15 |C:\WINDOWS\system32 | |772 |lsass.exe |LSA Shell (Export Version) |5.1.2600.5512|1925120 |Normal |22 |C:\WINDOWS\system32 | |928 |Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4124 |618496 |Normal |5 |C:\WINDOWS\system32 | |940 |svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512|1114112 |Normal |16 |C:\WINDOWS\system32 | |1112|svchost.exe |Generic Host Process for Win32 Services |5.1.2600.5512|9502720 |Normal |79 |C:\WINDOWS\System32 | |1152|S24EvMon.exe |Event Monitor - Supports driver extensions to NIC Driver for wireless adapters.|7.1.4.4 |688128 |Normal |5 |C:\WINDOWS\system32 | |1432|ZCfgSvc.exe |ZeroCfgSvc MFC Application |7.1.4.4 |2252800 |Normal |7 |C:\WINDOWS\system32 | |1596|spoolsv.exe |Spooler SubSystem App |5.1.2600.5512|1634304 |Normal |14 |C:\WINDOWS\system32 | |1728|abyssws.exe |Abyss Web Server X1 |2.4.0.3 |786432 |Normal |2 |C:\Program Files\Abyss Web Server | |1740|abyssws.exe |Abyss Web Server X1 |2.4.0.3 |376832 |Normal |3 |C:\Program Files\Abyss Web Server | |1832|RegSrvc.exe |RegSrvc Module |7.1.4.4 |970752 |Normal |4 |C:\WINDOWS\system32 | |1884|ModesXML.exe |ModesXML |1.2.0.143 |53612544|Normal |14 |E:\bin\Client | |1912|Ati2evxx.exe |ATI External Event Utility EXE Module |6.14.10.4124 |942080 |Normal |6 |C:\WINDOWS\system32 | |2072|SynTPEnh.exe |Synaptics TouchPad Enhancements |8.3.4.0 |806912 |Normal |4 |C:\Program Files\Synaptics\SynTP | |2084|realsched.exe|RealNetworks Scheduler |0.1.1.68 |188416 |Normal |5 |C:\Program Files\Common Files\Real\Update_OB| |2472|conkeror.exe | |1.9.0.3319 |26050560|Normal |13 |C:\Program Files\conkeror | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Assembler Information: --------------------------------------------------------------------------- ; XpDOM.TXpNode.noGetLevelCode (Line=3553 - Offset=2) ; --------------------------------------------------- 0059201E call -$0018BF8F 00592023 jmp XpDOM.TXpNode.noGetLevelCode (Line=3554) ; ; Line=3555 - Offset=4 ; -------------------- 00592025 mov eax, [esi] 00592027 xor edx, edx 00592029 call -$0018BC0E 0059202E jz XpDOM.TXpNode.noGetLevelCode (Line=3557) ; ; Line=3556 - Offset=5 ; -------------------- 00592030 mov ecx, [esi] 00592032 mov eax, esi 00592034 mov edx, $005920A4 ; '.' 00592039 call -$0018BCCE ; ; Line=3557 - Offset=6 ; -------------------- 0059203E mov eax, [edi+$10] ; <-- EXCEPTION 00592041 mov edx, ebx 00592043 call XpDOM.TXpNodeList.IndexOf 00592048 inc eax 00592049 lea edx, [ebp-$08] 0059204C call -$0017FC35 00592051 mov edx, [ebp-$08] 00592054 lea eax, [ebp-$04] 00592057 call -$0018BDE4 0059205C mov edx, [ebp-$04] 0059205F mov ecx, [esi] Registers: ----------------------------- EAX: 00000000 EDI: 73206D61 EBX: 7EC38360 ESI: 0012F68C ECX: 00000003 ESP: 0012F650 EDX: 00000000 EIP: 0059203E Stack: Memory Dump: ------------------ --------------------------------------------------------------------------- 0012F650: 0012F678 0059203E: 8B 47 10 8B D3 E8 80 EE FF FF 40 8D 55 F8 E8 CB .G........@.U... 0012F654: 004051A8 0059204E: 03 E8 FF 8B 55 F8 8D 45 FC E8 1C 42 E7 FF 8B 55 ....U..E...B...U 0012F658: 0012F670 0059205E: FC 8B 0E 8B C6 E8 08 43 E7 FF 8B 5B 34 8B 7B 34 .......C...[4.{4 0012F65C: 7EC38360 0059206E: 85 FF 75 B3 33 C0 5A 59 59 64 89 10 68 97 20 59 ..u.3.ZYYd..h. Y 0012F660: 00000001 0059207E: 00 8D 45 F8 E8 99 38 E7 FF 8D 45 FC E8 05 40 E7 ..E...8...E...@. 0012F664: 7EC38360 0059208E: FF C3 E9 E3 30 E7 FF EB E8 5F 5E 5B 59 59 5D C3 ....0...._^[YY]. 0012F668: 00000000 0059209E: 00 00 02 00 00 00 2E 00 00 00 55 8B EC 53 56 57 ..........U..SVW 0012F66C: 00000000 005920AE: 8B FA 8B D8 8B C7 8B 53 24 E8 14 40 E7 FF 8B 53 .......S$..@...S 0012F670: 0012F694 005920BE: 24 B8 F0 20 59 00 E8 33 7A FC FF 8B F0 85 F6 7E $.. Y..3z......~ 0012F674: 00C1ECA0 005920CE: 16 57 8B 43 24 E8 2C 42 E7 FF 8B C8 8D 56 01 8B .W.C$.,B.....V.. 0012F678: 0012F69C 005920DE: 43 24 E8 C7 53 FC FF 5F 5E 5B 5D C3 00 00 02 00 C$..S.._^[]..... 0012F67C: 004051A8 005920EE: 00 00 3A 00 00 00 55 8B EC 6A 00 53 56 8B F2 8B ..:...U..j.SV... 0012F680: 0012F694 005920FE: D8 33 C0 55 68 39 21 59 00 64 FF 30 64 89 20 8D .3.Uh9!Y.d.0d. . 0012F684: 0012F6D0 0059210E: 55 FC 8B C3 E8 35 02 00 00 8B 55 FC 8B CE 8B C3 U....5....U..... 0012F688: 7F9E09F0 0059211E: E8 49 99 00 00 33 C0 5A 59 59 64 89 10 68 40 21 .I...3.ZYYd..h@! 0012F68C: 00000000 0059212E: 59 00 8D 45 FC E8 5C 3F E7 FF C3 E9 3A 30 E7 FF Y..E..\?....:0..