[go: up one dir, main page]

0% found this document useful (0 votes)
56 views13 pages

Bugreport

Download as txt, pdf, or txt
Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1/ 13

date/time : 2023-07-08, 14:30:37, 738ms

computer name : DESKTOP-555SFPB


user name : user <admin>
registered owner : user
operating system : Windows 10 x64 build 19045
system language : Spanish
system up time : 16 hours 10 minutes
program up time : 11 minutes 42 seconds
processors : 4x Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
physical memory : 5015/8074 MB (free/total)
free disk space : (C:) 166.26 GB
display mode : 1366x768, 32 bit
process id : $2808
allocated memory : 88.19 MB
largest free block : 1.60 GB
executable : itop_isr_installer (1).exe
exec. date/time : 2023-07-08 14:14
version : 4.0.0.90
compiled with : Delphi 2009
madExcept version : 4.0.14
callstack crc : $603c2eae, $984cee6d, $40d00e42
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 0056A821 in module
'itop_isr_installer (1).exe'. Read of address 000001D8.

Main ($211c):
0056a821 +005 itop_isr_installer (1).exe RdImageButton 2418 +1
TRdImageButton.SetButtonState
006b1d8f +2bf itop_isr_installer (1).exe uMain 5119 +64
TfrmISRDownloader.setPage
006b1ea5 +019 itop_isr_installer (1).exe uMain 5190 +6
TfrmISRDownloader.showNextPage
006a50bb +00f itop_isr_installer (1).exe unitAnimatorThread 282 +2
AnimatorThread.NextPage
00499e28 +104 itop_isr_installer (1).exe Classes
CheckSynchronize
0049a73b +087 itop_isr_installer (1).exe Classes
TThread.WaitFor
0049a107 +033 itop_isr_installer (1).exe Classes
TThread.Destroy
006a4226 +012 itop_isr_installer (1).exe RdAnimation 1708 +1
TRdAniThread.Destroy
00404580 +008 itop_isr_installer (1).exe System 977 +0 TObject.Free
006a2d84 +028 itop_isr_installer (1).exe RdAnimation 1001 +7
TRdAnimator.Destroy
0049aa1b +047 itop_isr_installer (1).exe Classes
TComponent.DestroyComponents
0049a80f +04f itop_isr_installer (1).exe Classes
TComponent.Destroy
004f2d6f +0bb itop_isr_installer (1).exe Controls
TControl.Destroy
004f711d +0c9 itop_isr_installer (1).exe Controls
TWinControl.Destroy
0050ce44 +028 itop_isr_installer (1).exe Forms
TScrollingWinControl.Destroy
0050dd7d +0f9 itop_isr_installer (1).exe Forms
TCustomForm.Destroy
0049aa1b +047 itop_isr_installer (1).exe Classes
TComponent.DestroyComponents
0050bc65 +035 itop_isr_installer (1).exe Forms
DoneApplication
00470312 +026 itop_isr_installer (1).exe SysUtils DoExitProc
00405aa1 +065 itop_isr_installer (1).exe System 977 +0 @Halt0
006bb6b3 +0d7 itop_isr_installer (1).exe Setup 53 +17 initialization
764200c7 +017 KERNEL32.DLL
BaseThreadInitThunk

thread $1dac:
776fc797 +47 user32.dll MsgWaitForMultipleObjectsEx
776fc73a +1a user32.dll MsgWaitForMultipleObjects
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
71dd67ca +00 gdiplus.dll

thread $2534 (TRdAniThread): <suspended>


006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $31ec (TRdAniThread): <suspended>


006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $276c (TRdAniThread): <suspended>


006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $332c (TRdAniThread): <suspended>


006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $2dbc:
75ff8e63 +93 KERNELBASE.dll WaitForSingleObjectEx
75ff8dbd +0d KERNELBASE.dll WaitForSingleObject
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
75ced94e +00 WS2_32.dll

thread $2528:
75ff8e63 +93 KERNELBASE.dll WaitForSingleObjectEx
75ff8dbd +0d KERNELBASE.dll WaitForSingleObject
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
75ced94e +00 WS2_32.dll

thread $2894 (AnimatorThread):


76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1038 (AnimatorThread):


76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1624 (AnimatorThread):


75ff8e63 +093 KERNELBASE.dll
WaitForSingleObjectEx
75ff8dbd +00d KERNELBASE.dll
WaitForSingleObject
0049a4aa +13a itop_isr_installer (1).exe Classes
TThread.Synchronize
0049a55d +029 itop_isr_installer (1).exe Classes
TThread.Synchronize
006a4f8f +4d3 itop_isr_installer (1).exe unitAnimatorThread 247 +141
AnimatorThread.Execute
00405bc8 +028 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +00d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +037 itop_isr_installer (1).exe madExcept
ThreadExceptFrame
764200c7 +017 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +020 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1388 (AnimatorThread):


76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $2e4c (AnimatorThread):


76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $2440:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $2aa8:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $3140:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

modules:
00400000 itop_isr_installer (1).exe 4.0.0.90 C:\Users\user\Downloads
713e0000 DWrite.dll 10.0.19041.1566 C:\WINDOWS\SYSTEM32
715f0000 CoreMessaging.dll 10.0.19041.2193 C:\WINDOWS\System32
71690000 CoreUIComponents.dll 10.0.19041.546 C:\WINDOWS\System32
71910000 textinputframework.dll 10.0.19041.3031 C:\WINDOWS\SYSTEM32
719d0000 libssl-1_1.dll 1.1.0.5 C:\Users\user\AppData\
Local\Temp
71a30000 libcrypto-1_1.dll 1.1.0.5 C:\Users\user\AppData\
Local\Temp
71be0000 WindowsCodecs.dll 10.0.19041.1706 C:\WINDOWS\SYSTEM32
71d60000 gdiplus.dll 10.0.19041.2251 C:\WINDOWS\WinSxS\
x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.2251_none_d9513b1fe1046fc7
71ed0000 OneCoreUAPCommonProxyStub.dll 10.0.19041.3031 C:\Windows\System32
72290000 OneCoreCommonProxyStub.dll 10.0.19041.2546 C:\Windows\System32
722d0000 sppc.dll 10.0.19041.1682 C:\Windows\System32
722f0000 Bcp47Langs.dll 10.0.19041.1566 C:\Windows\System32
72340000 SLC.dll 10.0.19041.1682 C:\Windows\System32
72360000 appresolver.dll 10.0.19041.1620 C:\Windows\System32
723e0000 wintypes.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
724c0000 FLTLIB.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
724d0000 Windows.StateRepositoryPS.dll 10.0.19041.2673 C:\Windows\System32
72570000 edputil.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
72590000 PROPSYS.dll 7.0.19041.1741 C:\WINDOWS\SYSTEM32
72960000 iertutil.dll 11.0.19041.3086 C:\WINDOWS\SYSTEM32
72b90000 dbgcore.DLL 10.0.19041.2788 C:\WINDOWS\SYSTEM32
72bc0000 dbghelp.dll 10.0.19041.1052 C:\WINDOWS\SYSTEM32
72dd0000 wininet.dll 11.0.19041.3031 C:\WINDOWS\SYSTEM32
73230000 uxtheme.dll 10.0.19041.2193 C:\WINDOWS\system32
732b0000 virtdisk.dll 10.0.19041.2311 C:\WINDOWS\SYSTEM32
732c0000 srvcli.dll 10.0.19041.1645 C:\WINDOWS\SYSTEM32
732e0000 urlmon.dll 11.0.19041.3031 C:\WINDOWS\SYSTEM32
734b0000 comctl32.dll 6.10.19041.1110 C:\WINDOWS\WinSxS\
x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
73700000 TextShaping.dll C:\WINDOWS\SYSTEM32
73940000 sfc_os.dll 10.0.19041.2311 C:\WINDOWS\System32
73950000 pcacli.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
73970000 explorerframe.dll 10.0.19041.1949 C:\WINDOWS\system32
73b20000 FaultRep.dll 10.0.19041.2546 C:\WINDOWS\SYSTEM32
73b90000 wsock32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
73ba0000 msimg32.dll 10.0.19041.1466 C:\WINDOWS\SYSTEM32
73c80000 windows.storage.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
74290000 ntmarta.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
742c0000 netutils.dll 10.0.19041.1466 C:\WINDOWS\SYSTEM32
742d0000 version.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
743d0000 mswsock.dll 10.0.19041.546 C:\WINDOWS\System32
749a0000 kernel.appcore.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
74ae0000 rasadhlp.dll 10.0.19041.546 C:\Windows\System32
74af0000 fwpuclnt.dll 10.0.19041.2913 C:\WINDOWS\System32
74e30000 profapi.dll 10.0.19041.844 C:\WINDOWS\SYSTEM32
74e50000 Wldp.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
74e90000 winrnr.dll 10.0.19041.546 C:\WINDOWS\System32
74ec0000 DNSAPI.dll 10.0.19041.3031 C:\WINDOWS\SYSTEM32
74f80000 NLAapi.dll 10.0.19041.546 C:\WINDOWS\system32
74fa0000 wshbth.dll 10.0.19041.546 C:\WINDOWS\system32
74fb0000 pnrpnsp.dll 10.0.19041.546 C:\WINDOWS\system32
74ff0000 napinsp.dll 10.0.19041.546 C:\WINDOWS\system32
752f0000 DWMAPI.DLL 10.0.19041.746 C:\WINDOWS\SYSTEM32
75410000 MPR.dll 10.0.19041.1806 C:\WINDOWS\SYSTEM32
75430000 USERENV.dll 10.0.19041.572 C:\Windows\System32
75590000 SspiCli.dll 10.0.19041.2130 C:\WINDOWS\SYSTEM32
755c0000 winmm.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75610000 IPHLPAPI.DLL 10.0.19041.2788 C:\WINDOWS\SYSTEM32
756d0000 apphelp.dll 10.0.19041.2913 C:\WINDOWS\SYSTEM32
75770000 msvcp_win.dll 10.0.19041.789 C:\WINDOWS\System32
75800000 ole32.dll 10.0.19041.2965 C:\WINDOWS\System32
758f0000 win32u.dll 10.0.19041.3086 C:\WINDOWS\System32
75920000 gdi32full.dll 10.0.19041.2965 C:\WINDOWS\System32
75a70000 clbcatq.dll 2001.12.10941.16384 C:\WINDOWS\System32
75af0000 ucrtbase.dll 10.0.19041.789 C:\WINDOWS\System32
75c10000 advapi32.dll 10.0.19041.2913 C:\WINDOWS\System32
75c90000 GDI32.dll 10.0.19041.2913 C:\WINDOWS\System32
75cc0000 WS2_32.dll 10.0.19041.546 C:\WINDOWS\System32
75e50000 CFGMGR32.dll 10.0.19041.1620 C:\WINDOWS\System32
75ee0000 KERNELBASE.dll 10.0.19041.3086 C:\WINDOWS\System32
76290000 comdlg32.dll 10.0.19041.1806 C:\WINDOWS\System32
76340000 RPCRT4.dll 10.0.19041.2965 C:\WINDOWS\System32
76400000 KERNEL32.DLL 10.0.19041.3031 C:\WINDOWS\System32
764f0000 combase.dll 10.0.19041.2788 C:\WINDOWS\System32
76770000 shell32.dll 10.0.19041.3031 C:\WINDOWS\System32
76d90000 msvcrt.dll 7.0.19041.546 C:\WINDOWS\System32
76e50000 SETUPAPI.dll 10.0.19041.2193 C:\WINDOWS\System32
772f0000 sechost.dll 10.0.19041.2913 C:\WINDOWS\System32
77370000 MSCTF.dll 10.0.19041.2673 C:\WINDOWS\System32
77450000 SHLWAPI.dll 10.0.19041.2075 C:\WINDOWS\System32
774a0000 bcrypt.dll 10.0.19041.2486 C:\WINDOWS\System32
774c0000 shcore.dll 10.0.19041.1645 C:\WINDOWS\System32
77550000 NSI.dll 10.0.19041.610 C:\WINDOWS\System32
775f0000 oleaut32.dll 10.0.19041.985 C:\WINDOWS\System32
77690000 IMM32.DLL 10.0.19041.2673 C:\WINDOWS\System32
776c0000 user32.dll 10.0.19041.3086 C:\WINDOWS\System32
77860000 bcryptPrimitives.dll 10.0.19041.2486 C:\WINDOWS\System32
778d0000 ntdll.dll 10.0.19041.3086 C:\WINDOWS\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
0064 Registry 0 0 0
0218 smss.exe 0 0 0
0268 csrss.exe 0 0 0
02c4 wininit.exe 0 0 0
02cc csrss.exe 1 0 0
032c winlogon.exe 1 0 0
0358 services.exe 0 0 0
036c lsass.exe 0 0 0
03e8 svchost.exe 0 0 0
0144 fontdrvhost.exe 0 0 0
0048 fontdrvhost.exe 1 0 0
023c WUDFHost.exe 0 0 0
040c svchost.exe 0 0 0
043c svchost.exe 0 0 0
04a0 dwm.exe 1 0 0
04d4 svchost.exe 0 0 0
052c svchost.exe 0 0 0
0578 svchost.exe 0 0 0
0638 svchost.exe 0 0 0
064c svchost.exe 0 0 0
0660 svchost.exe 0 0 0
069c svchost.exe 0 0 0
06a4 svchost.exe 0 0 0
06dc svchost.exe 0 0 0
0770 svchost.exe 0 0 0
06d4 svchost.exe 0 0 0
082c svchost.exe 0 0 0
0858 svchost.exe 0 0 0
0864 svchost.exe 0 0 0
0884 svchost.exe 0 0 0
089c svchost.exe 0 0 0
08b8 svchost.exe 0 0 0
08d4 svchost.exe 0 0 0
0960 svchost.exe 0 0 0
0968 svchost.exe 0 0 0
0970 svchost.exe 0 0 0
0990 Memory Compression 0 0 0
09f8 dasHost.exe 0 0 0
0a2c svchost.exe 0 0 0
0a34 svchost.exe 0 0 0
0a5c svchost.exe 0 0 0
0a64 svchost.exe 0 0 0
0a98 svchost.exe 0 0 0
0ad8 svchost.exe 0 0 0
0b80 svchost.exe 0 0 0
0bd0 RtkAudioService64.exe 0 0 0
0810 svchost.exe 0 0 0
0c08 svchost.exe 0 0 0
0c10 svchost.exe 0 0 0
0c18 svchost.exe 0 0 0
0c60 RAVBg64.exe 1 0 0
0c70 RAVBg64.exe 1 0 0
0ce0 svchost.exe 0 0 0
0d58 unsecapp.exe 1 0 0
0d78 svchost.exe 0 0 0
0db0 svchost.exe 0 0 0
0e0c spoolsv.exe 0 0 0
0e20 WmiPrvSE.exe 0 0 0
0e68 svchost.exe 0 0 0
0f18 IntelCpHDCPSvc.exe 0 0 0
0f20 IntelCpHeciSvc.exe 0 0 0
0f30 CLHNServiceForPowerDVD.exe 0 0 0
0f38 CLMSMonitorService.exe 0 0 0
0f48 OfficeClickToRun.exe 0 0 0
0f50 svchost.exe 0 0 0
0f74 CLMSServer.exe 0 0 0
0fc4 esif_uf.exe 0 0 0
0fcc svchost.exe 0 0 0
1010 svchost.exe 0 0 0
103c LMS.exe 0 0 0
1044 svchost.exe 0 0 0
106c WavesSysSvc64.exe 0 0 0
10c0 svchost.exe 0 0 0
1140 jhi_service.exe 0 0 0
03bc dllhost.exe 0 0 0
0fe8 dllhost.exe 0 0 0
058c svchost.exe 0 0 0
0a14 GoogleCrashHandler.exe 0 0 0
0a40 GoogleCrashHandler64.exe 0 0 0
0fa8 SgrmBroker.exe 0 0 0
10fc svchost.exe 0 0 0
13e4 svchost.exe 0 0 0
0348 svchost.exe 0 0 0
0c3c svchost.exe 0 0 0
10d0 svchost.exe 0 0 0
0f80 svchost.exe 0 0 0
1268 svchost.exe 0 0 0
0840 SearchIndexer.exe 0 0 0
12b4 svchost.exe 0 0 0
08dc svchost.exe 0 0 0
141c svchost.exe 0 0 0
144c svchost.exe 0 0 0
1484 svchost.exe 0 0 0
1568 svchost.exe 0 0 0
0474 MsMpEng.exe 0 0 0
1758 svchost.exe 0 0 0
19fc svchost.exe 0 0 0
1a44 svchost.exe 0 0 0
1b94 dptf_helper.exe 1 0 2 normal C:\Windows\System32\Intel\
DPTF
168c sihost.exe 1 0 8 normal C:\Windows\System32
14b4 svchost.exe 1 0 1 normal C:\Windows\System32
00c4 svchost.exe 1 0 1 normal C:\Windows\System32
0c84 svchost.exe 1 4 4 normal C:\Windows\System32
1c88 svchost.exe 0 0 0
1d58 svchost.exe 0 0 0
1d98 ctfmon.exe 1 2 28 high C:\Windows\System32
1e50 igfxEM.exe 1 10 15 normal C:\Windows\System32
1ef8 igfxHK.exe 1 10 14 normal C:\Windows\System32
1f08 svchost.exe 0 0 0
1f2c explorer.exe 1 307 308 normal C:\Windows
1ff4 svchost.exe 0 0 0
1a7c taskhostw.exe 1 8 6 normal C:\Windows\System32
2190 dllhost.exe 1 0 3 normal C:\Windows\System32
23dc dllhost.exe 1 0 3 normal C:\Windows\System32
1bd4 svchost.exe 1 0 1 normal C:\Windows\System32
12d4 svchost.exe 1 0 8 normal C:\Windows\System32
2af4 TextInputHost.exe 1 0 25 normal C:\Windows\SystemApps\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
1f8c StartMenuExperienceHost.exe 1 7 32 normal C:\Windows\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
238c RuntimeBroker.exe 1 41 1 normal C:\Windows\System32
2870 SearchApp.exe 1 21 78 normal C:\Windows\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy
26d4 RuntimeBroker.exe 1 42 11 normal C:\Windows\System32
12d0 svchost.exe 0 0 0
1be0 Microsoft.Photos.exe 1 0 11 normal C:\Program Files\
WindowsApps\Microsoft.Windows.Photos_2023.10030.27002.0_x64__8wekyb3d8bbwe
2560 svchost.exe 0 0 0
2e30 SecurityHealthSystray.exe 1 10 6 normal C:\Windows\System32
2844 SecurityHealthService.exe 0 0 0
2898 RtkNGUI64.exe 1 17 26 normal C:\Program Files\Realtek\
Audio\HDA
0f68 RAVBg64.exe 1 5 13 normal C:\Program Files\Realtek\
Audio\HDA
21ac WavesSvc64.exe 1 30 53 normal C:\Program Files\Waves\
MaxxAudio
162c OneDrive.exe 1 236 95 normal C:\Users\user\AppData\
Local\Microsoft\OneDrive
2760 PDVD11Serv.exe 1 0 15 normal C:\Program Files (x86)\
CyberLink\PowerDVD11
2684 jusched.exe 1 0 2 normal C:\Program Files (x86)\
Common Files\Java\Java Update
31f4 CompPkgSrv.exe 1 0 1 normal C:\Windows\System32
3210 RuntimeBroker.exe 1 0 4 normal C:\Windows\System32
2b84 svchost.exe 0 0 0
1700 jucheck.exe 1 9 6 normal C:\Program Files (x86)\
Common Files\Java\Java Update
225c ShellExperienceHost.exe 1 6 51 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
16a0 RuntimeBroker.exe 1 40 6 normal C:\Windows\System32
31c0 ApplicationFrameHost.exe 1 12 2 normal C:\Windows\System32
15bc igfxCUIService.exe 0 0 0
2f18 QcomWlanSrvx64.exe 0 0 0
05b8 HidMonitorSvc.exe 0 0 0
29e0 Apoint.exe 1 42 28 normal C:\Windows\System32\
DellTPad
32c4 ApMsgFwd.exe 1 0 7 normal C:\Windows\System32\
DellTPad
1bf8 ApRemote.exe 1 0 1 normal C:\Windows\System32\
DellTPad
05dc hidfind.exe 1 0 3 normal C:\Windows\System32\
DellTPad
2330 ApntEx.exe 1 8 5 normal C:\Windows\System32\
DellTPad
0d28 conhost.exe 1 14 11 normal C:\Windows\System32
1350 AdminService.exe 0 0 0
13c0 MusNotifyIcon.exe 1 8 4 below normal C:\Windows\System32
2d5c RuntimeBroker.exe 1 2 12 normal C:\Windows\System32
05fc svchost.exe 0 0 0
1ca8 taskhostw.exe 1 0 2 normal C:\Windows\System32
2ef0 msedge.exe 1 19 61 normal C:\Program Files (x86)\
Microsoft\Edge\Application
198c msedge.exe 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b38 msedge.exe 1 7 11 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
2f80 msedge.exe 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
30cc msedge.exe 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
1d44 svchost.exe 0 0 0
29ec svchost.exe 0 0 0
05cc taskhostw.exe 1 0 2 normal C:\Windows\System32
08f8 svchost.exe 0 0 0
18c4 WmiPrvSE.exe 0 0 0
32d0 Video.UI.exe 1 0 8 normal C:\Program Files\
WindowsApps\Microsoft.ZuneVideo_10.22091.10041.0_x64__8wekyb3d8bbwe
12fc RuntimeBroker.exe 1 1 1 normal C:\Windows\System32
1534 NisSrv.exe 0 0 0
2808 itop_isr_installer (1).exe 1 91 66 normal C:\Users\user\Downloads
0a80 ISR_Setup.exe 1 0 4 normal C:\ProgramData\iTop Screen
Recorder\Downloader
17ac ISR_Setup.tmp 1 68 63 normal C:\Users\user\AppData\
Local\Temp\is-B43PG.tmp
19d8 audiodg.exe 0 0 0
04c4 WMIC.exe 0 0 0
306c WMIC.exe 0 0 0
2b8c conhost.exe 0 0 0
1138 conhost.exe 0 0 0
1830 sppsvc.exe 0 0 0

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Cola de impresión raíz
- Fax
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote (Desktop)
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Concentrador raíz USB (USB 3.0)
- Controlador de host eXtensible Intel(R) USB 3.0 - 1.0 (Microsoft)
- Dispositivo compuesto USB
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- Equipo basado en x64 ACPI
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- X BIOS
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel(R) HD Graphics 520 (driver 27.20.100.9171)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Dispositivo de teclado HID
- Dispositivo de teclado HID
- Dispositivo de teclado HID
- Teclado PS/2 estándar
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Realtek Audio (driver 6.0.1.8569)
- Sonido Intel(R) para pantallas (driver 10.26.0.9)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Monitor PnP genérico
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Mouse compatible con HID
- Mouse compatible con HID
+ {4d36e970-e325-11ce-bfc1-08002be10318}
- Realtek PCIE CardReader (driver 10.0.10586.21291)
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network)
- Intel(R) Ethernet Connection (4) I219-LM (driver 12.19.0.16)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #2
- Qualcomm QCA61x4A 802.11ac Wireless Adapter (driver 12.0.0.1118)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Controladora de espacios de almacenamiento de Microsoft
- Intel(R) Chipset SATA/PCIe RST Premium Controller (driver 16.8.4.1011)
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Administrador de volúmenes
- Agregador de procesador ACPI
- Botón de característica fija ACPI
- Botón de inicio/apagado ACPI
- Botón de suspensión ACPI
- Bus del Redirector de dispositivos de Escritorio remoto
- Complejo raíz PCI Express
- Complemento de motor de energía Intel(R)
- Controlador BIOS de Microsoft System Management
- Controlador de arbitraje de carga
- Controlador de infraestructura de virtualización de Microsoft Hyper-V
- Controlador de pantalla básica de Microsoft
- Controlador de representación básica de Microsoft
- Controladora de High Definition Audio
- Controladora de host de Intel(R) Serial IO I2C: 9D60 (driver 30.100.1816.3)
- Controladora de host de Intel(R) Serial IO I2C: 9D61 (driver 30.100.1816.3)
- Controladora integrada compatible con Microsoft ACPI
- Controladora programable de interrupciones
- Dispositivo heredado
- Enumerador de adaptador de red virtual NDIS
- Enumerador de bus compuesto
- Enumerador de bus raíz de UMBus
- Enumerador de dispositivos de software Plug and Play
- Enumerador de unidades virtuales de Microsoft
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Manager (driver 8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Processor Participant (driver
8.3.10209.6897)
- Intel(R) Management Engine Interface #1 (driver 2102.100.0.1044)
- Interfaz de administración para ACPI de Microsoft Windows
- Interfaz de administración para ACPI de Microsoft Windows
- Mobile 6th Generation Intel(R) Processor Family I/O LPC Controller (Premium
SKU) - 9D48 (driver 10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O PCI Express Root Port #1 -
9D10 (driver 10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O PCI Express Root Port #3 -
9D12 (driver 10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O PMC - 9D21 (driver
10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O SMBUS - 9D23 (driver
10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O Thermal subsystem - 9D31
(driver 10.1.1.13)
- Puente PCI de CPU host estándar
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Sistema CMOS/reloj en tiempo real
- Sistema compatible con Microsoft UEFI
- Sistema Microsoft compatible con ACPI
- Tapa ACPI
- Temporizador de eventos de alta precisión
- Temporizador del sistema
- Zona térmica ACPI
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Instantánea de volumen genérico
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Intel(R) Dynamic Application Loader Host Interface (driver 1908.12.0.1228)
- Intel(R) Dynamic Application Loader Host Interface (driver 1908.12.0.1228)
- Intel(R) iCLS Client (driver 1.63.1155.1)
- Intel(R) iCLS Client (driver 1.63.1155.1)
- Intel(R) Management and Security Application Local Management (driver
1914.12.0.1254)
- Intel(R) Management and Security Application Local Management (driver
1914.12.0.1254)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- MAURICCIGOMEZ
- Microsoft Device Association Root Enumerator
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Sintetizador por software GS de tabla de onda de
- Wi-Fi
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Adaptador de CA de Microsoft
- Batería con método de control compatible con ACPI de Microsoft
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- AlpsAlpine Virtual HID Device (driver 10.0.0.126)
- Controlador del sistema compatible con HID
- Controles de radio inalámbrica compatibles con HID
- Dell Touchpad (driver 10.3201.101.216)
- Dispositivo de control de dispositivo portátil
- Dispositivo de control de dispositivo portátil convertido
- Dispositivo de control del consumidor compatible con HID
- Dispositivo definido por el proveedor compatible con HID
- Dispositivo HID I2C
- Intel(R) HID Event Filter (driver 2.2.1.377)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Altavoces / Auriculares (Realtek Audio)
- Varios micrófonos (Realtek Audio)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
- Módulo de plataforma segura 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Enumerador de Bluetooth LE de Microsoft
- Microsoft Bluetooth Enumerator
- Qualcomm QCA61x4A Bluetooth (driver 10.0.0.1238)
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
- Firmware de sistema

cpu registers:
eax = 00000000
ebx = 0288d1c0
ecx = 00000003
edx = 00000000
esi = 00000000
edi = 028c00f8
eip = 0056a821
esp = 0019fdd8
ebp = 0019fe4c

stack dump:
0019fdd8 03 00 00 00 40 cb be 05 - c0 d1 88 02 94 1d 6b 00 ....@.........k.
0019fde8 00 8d 99 02 aa 1e 6b 00 - be 50 6a 00 20 8d 99 02 ......k..Pj. ...
0019fdf8 2b 9e 49 00 08 fe 19 00 - bc 50 40 00 4c fe 19 00 +.I......P@.L...
0019fe08 14 fe 19 00 89 9e 49 00 - 4c fe 19 00 20 fe 19 00 ......I.L... ...
0019fe18 e7 9e 49 00 4c fe 19 00 - 10 ff 19 00 06 9f 49 00 ..I.L.........I.
0019fe28 4c fe 19 00 f8 00 8c 02 - 40 cb be 05 01 00 00 00 L.......@.......
0019fe38 c0 d1 88 02 25 a7 49 00 - 88 5d fb 06 5c fe 69 08 ....%.I..]..\.i.
0019fe48 00 00 00 01 c0 d1 88 02 - 40 a7 49 00 7c fe 19 00 ........@.I.|...
0019fe58 98 03 00 00 7c 02 00 00 - 4a 06 09 00 00 00 00 00 ....|...J.......
0019fe68 00 00 00 00 00 00 00 00 - 5e 27 78 03 b9 03 00 00 ........^'x.....
0019fe78 a7 01 00 00 40 cb be 05 - 00 cb be 05 0c a1 49 00 ....@.........I.
0019fe88 40 cb be 05 01 cb be 05 - 2b 42 6a 00 f8 00 8c 02 @.......+Bj.....
0019fe98 01 00 8c 02 83 45 40 00 - 89 2d 6a 00 c0 d1 88 02 .....E@..-j.....
0019fea8 e8 9b 98 02 1e aa 49 00 - c0 d1 88 02 00 00 00 00 ......I.........
0019feb8 c0 d1 88 02 14 a8 49 00 - 00 ec 99 02 00 00 00 00 ......I.........
0019fec8 00 00 00 00 74 2d 4f 00 - d0 ec 99 02 98 75 46 00 ....t-O......uF.
0019fed8 01 0f a6 02 e1 f4 48 00 - 90 12 91 02 00 00 00 00 ......H.........
0019fee8 00 00 00 00 22 71 4f 00 - 24 ff 19 00 c0 d1 88 02 ...."qO.$.......
0019fef8 c0 d1 88 02 00 00 00 00 - 49 ce 50 00 20 8e 91 02 ........I.P. ...
0019ff08 48 df 97 02 82 dd 50 00 - 60 ff 19 00 9c dd 50 00 H.....P.`.....P.

disassembling:
0056a81c public RdImageButton.TRdImageButton.SetButtonState: ; function entry
point
0056a81c 2417 push ebx
0056a81d push esi
0056a81e push ecx
0056a81f mov esi, eax
0056a821 2418 > movzx eax, byte ptr [esi+$1d8]
0056a828 mov [esp], al
0056a82b 2419 cmp dl, al
0056a82d setnz bl
0056a830 2420 mov eax, edx
0056a832 mov [esi+$1d8], al
[...]

You might also like