date/time         : 2009-12-21, 13:06:50, 343ms
computer name     : WWW-4B5F05DACAB
user name         : Administrator <admin>
operating system  : Windows XP Service Pack 2 build 2600
system language   : Chinese
system up time    : 53 minutes 57 seconds
program up time   : 5 minutes 41 seconds
processors        : 2x Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz
physical memory   : 1659/2047 MB (free/total)
free disk space   : (C:) 2.11 GB (D:) 4.49 GB
display mode      : 1024x768, 16 bit
process id        : $9cc
allocated memory  : 12.05 MB
command line      : "D:\Program Files\AMXX-Studio\amxx_studio.exe" "E:\GAME\CS\Դ\Դ\zp_extra_g3sg1_m203.sma"
executable        : amxx_studio.exe
exec. date/time   : 2006-11-22 01:06
version           : 1.4.3.16
madExcept version : 3.0b
callstack crc     : $b1954426, $6f37ef10, $61e14841
exception number  : 1
exception class   : EFCreateError
exception message : Cannot create file "E:\GAME\CS\Դ\Դ\zp_extra_g3sg1_m203.sma". һʹôļ޷ʡ.

main thread ($9ac):
00467e48 +0a4 amxx_studio.exe Classes              TFileStream.Create
00467d80 +020 amxx_studio.exe Classes              TFileStream.Create
00466d41 +015 amxx_studio.exe Classes              TStrings.SaveToFile
005f5c7c +198 amxx_studio.exe UnitCompile   62 +23 DoCompilePAWN
00612906 +0d6 amxx_studio.exe UnitfrmMain 1682  +7 TfrmMain.mnuDoCompileClick
00513525 +095 amxx_studio.exe TB2Item     1499 +22 TTBCustomItem.Click
005542b1 +015 amxx_studio.exe SpTBXItem   4091  +2 TSpTBXCustomItem.Click
0060e1cf +00b amxx_studio.exe UnitfrmMain  685  +1 TfrmMain.mnuTCompileClick
00513525 +095 amxx_studio.exe TB2Item     1499 +22 TTBCustomItem.Click
00513417 +0b3 amxx_studio.exe TB2Item     1449 +27 TTBCustomItem.ClickWndProc
0047123c +014 amxx_studio.exe Classes              StdWndProc
77d196c2 +00a USER32.dll                           DispatchMessageA
004daa93 +083 amxx_studio.exe Forms                TApplication.ProcessMessage
004daaca +00a amxx_studio.exe Forms                TApplication.HandleMessage
004dacea +096 amxx_studio.exe Forms                TApplication.Run
00619b7b +7b7 amxx_studio.exe AMXX_Studio  155 +95 initialization

thread $cb4: <priority:15>
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e9a9 +0a ntdll.dll                 NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll              WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll              WaitForMultipleObjects
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by thread $ca0 at:
72c9328c +00 wdmaud.drv

thread $cb8 (TCodeExplorerUpdater):
7c92eb94 +000 ntdll.dll                                       KiFastSystemCallRet
7c92d85a +00a ntdll.dll                                       NtDelayExecution
7c8023e7 +04b kernel32.dll                                    SleepEx
7c80244c +00a kernel32.dll                                    Sleep
005f9a14 +3bc amxx_studio.exe UnitCodeExplorerUpdater 106 +53 TCodeExplorerUpdater.Execute
0044ce7b +02b amxx_studio.exe madExcept                       HookedTThreadExecute
0046fbd4 +034 amxx_studio.exe Classes                         ThreadProc
00404888 +028 amxx_studio.exe System                          ThreadWrapper
0044cd5d +00d amxx_studio.exe madExcept                       CallThreadProcSafe
0044cdc7 +037 amxx_studio.exe madExcept                       ThreadExceptFrame
>> created by main thread ($9ac) at:
0060e188 +02c amxx_studio.exe UnitfrmMain             661  +2 TfrmMain.FormShow

thread $c14 (TPAWNCompileThread):
7c92eb94 +000 ntdll.dll                           KiFastSystemCallRet
7c92e286 +00a ntdll.dll                           NtReadFile
7c80186f +061 kernel32.dll                        ReadFile
005f6977 +17f amxx_studio.exe UnitCompile 213 +24 TPAWNCompileThread.Execute
0044ce7b +02b amxx_studio.exe madExcept           HookedTThreadExecute
0046fbd4 +034 amxx_studio.exe Classes             ThreadProc
00404888 +028 amxx_studio.exe System              ThreadWrapper
0044cd5d +00d amxx_studio.exe madExcept           CallThreadProcSafe
0044cdc7 +037 amxx_studio.exe madExcept           ThreadExceptFrame
>> created by main thread ($9ac) at:
005f5cd7 +1f3 amxx_studio.exe UnitCompile  72 +33 DoCompilePAWN

modules:
00400000 amxx_studio.exe 1.4.3.16        D:\Program Files\AMXX-Studio
10000000 scilexer.dll    1.6.6.0         D:\Program Files\AMXX-Studio
5adc0000 uxtheme.dll     6.0.2900.2180   C:\WINDOWS\system32
5d170000 comctl32.dll    5.82.2900.2982  C:\WINDOWS\system32
62c20000 LPK.DLL         5.1.2600.2180   C:\WINDOWS\system32
71a10000 WS2HELP.dll     5.1.2600.2180   C:\WINDOWS\system32
71a20000 WS2_32.dll      5.1.2600.2180   C:\WINDOWS\system32
71a40000 wsock32.dll     5.1.2600.2180   C:\WINDOWS\system32
72c80000 msacm32.drv     5.1.2600.0      C:\WINDOWS\system32
72c90000 wdmaud.drv      5.1.2600.2180   C:\WINDOWS\system32
72f70000 winspool.drv    5.1.2600.2180   C:\WINDOWS\system32
73250000 RICHED32.DLL    5.1.2600.0      C:\WINDOWS\system32
73640000 msctfime.ime    5.1.2600.2180   C:\WINDOWS\system32
73fa0000 USP10.dll       1.420.2600.2180 C:\WINDOWS\system32
74680000 MSCTF.dll       5.1.2600.2180   C:\WINDOWS\system32
74d90000 RICHED20.dll    5.30.23.1228    C:\WINDOWS\system32
762f0000 msimg32.dll     5.1.2600.2180   C:\WINDOWS\system32
76300000 imm32.dll       5.1.2600.2180   C:\WINDOWS\system32
76320000 comdlg32.dll    6.0.2900.2180   C:\WINDOWS\system32
765e0000 CRYPT32.dll     5.131.2600.2180 C:\WINDOWS\system32
76990000 ole32.dll       5.1.2600.2726   C:\WINDOWS\system32
76b10000 winmm.dll       5.1.2600.2180   C:\WINDOWS\system32
76c00000 WINTRUST.dll    5.131.2600.2180 C:\WINDOWS\system32
76c60000 IMAGEHLP.dll    5.1.2600.2180   C:\WINDOWS\system32
76db0000 MSASN1.dll      5.1.2600.2180   C:\WINDOWS\system32
770f0000 oleaut32.dll    5.1.2600.2180   C:\WINDOWS\system32
77180000 comctl32.dll    6.0.2900.2982   C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
77ba0000 midimap.dll     5.1.2600.2180   C:\WINDOWS\system32
77bb0000 MSACM32.dll     5.1.2600.2180   C:\WINDOWS\system32
77bd0000 version.dll     5.1.2600.2180   C:\WINDOWS\system32
77be0000 msvcrt.dll      7.0.2600.2180   C:\WINDOWS\system32
77d10000 USER32.dll      5.1.2600.3099   C:\WINDOWS\system32
77da0000 advapi32.dll    5.1.2600.2180   C:\WINDOWS\system32
77e50000 RPCRT4.dll      5.1.2600.2180   C:\WINDOWS\system32
77ef0000 GDI32.dll       5.1.2600.3099   C:\WINDOWS\system32
77f40000 SHLWAPI.dll     6.0.2900.3086   C:\WINDOWS\system32
77fc0000 Secur32.dll     5.1.2600.2180   C:\WINDOWS\system32
7c800000 kernel32.dll    5.1.2600.2945   C:\WINDOWS\system32
7c920000 ntdll.dll       5.1.2600.2180   C:\WINDOWS\system32
7d590000 SHELL32.dll     6.0.2900.3051   C:\WINDOWS\system32

processes:
000 Idle
004 System          normal
2c0 smss.exe        normal C:\WINDOWS\system32
300 csrss.exe
320 winlogon.exe    high   C:\WINDOWS\system32
34c services.exe    normal C:\WINDOWS\system32
358 lsass.exe       normal C:\WINDOWS\system32
3e8 svchost.exe     normal C:\WINDOWS\system32
43c svchost.exe
49c svchost.exe     normal C:\WINDOWS\System32
4e8 svchost.exe
54c svchost.exe
558 RavMonD.exe     normal D:\Program Files\Rising\Rav
644 spoolsv.exe     normal C:\WINDOWS\system32
720 Explorer.EXE    normal C:\WINDOWS
790 RsTray.exe      normal D:\Program Files\Rising\Rav
7a0 ctfmon.exe      normal C:\WINDOWS\system32
7d8 alg.exe
598 360SE.exe       normal D:\Program Files\360\360se3
5b8 360SE.exe       normal D:\Program Files\360\360se3
8ac QQ.exe          normal D:\Program Files\Tencent\qq
8d0 TXPlatform.exe  normal E:\\QQ2008
63c NOTEPAD.EXE     normal C:\WINDOWS\system32
c00 360SE.exe       normal D:\Program Files\360\360se3
20c cstrike.exe     normal E:\GAME\CS˿
9cc amxx_studio.exe normal D:\Program Files\AMXX-Studio
68c NOTEPAD.EXE     normal C:\WINDOWS\system32
428 amxxpc.exe      normal D:\Program Files\AMXX-Studio

hardware:
+ DVD/CD-ROM 
  - PIONEER DVD-ROM DVD-130P
+ IDE ATA/ATAPI 
  - ׼˫ͨ PCI IDE 
  - ׼˫ͨ PCI IDE 
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
+ 
  - Intel(R) Pentium(R) Dual  CPU  E2160  @ 1.80GHz
  - Intel(R) Pentium(R) Dual  CPU  E2160  @ 1.80GHz
+ 
  - ST380815AS
+ ˿ (COM  LPT)
  - ECP ӡ˿ (LPT1)
  - ͨѶ˿ (COM1)
+ 
  - Ĭϼ
+ 
  - ACPI Multiprocessor PC
+ 
  - ׼ 101/102  Microsoft Ȼ PS/2 
+ ƵϷ
  - ATI Function Driver for High Definition Audio - ATI AA01 (driver 5.0.40001.8)
  - Realtek High Definition Audio (driver 5.10.0.5519)
  - ͳƵ׽豸
  - ͳƵ
  - ý豸
  - Ƶ
  - Ƶ
+ ָ豸
  - Microsoft PS/2 Mouse
+ ͨô߿
  - Standard Enhanced PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
+ 
  - Realtek RTL8139/810x Family Fast Ethernet NIC #2 (driver 5.680.1023.2007)
+ ϵͳ豸
  - ACPI Fixed Feature Button
  - ACPI Power Button
  - Direct memory access controller
  - Intel(R) 82801 PCI Bridge - 244E
  - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA (driver 7.0.0.1020)
  - Intel(R) 82802 Firmware Hub Device
  - ISAPNP Read Data Port
  - Logical Disk Manager
  - Microcode Update Device
  - Microsoft ACPI-Compliant System
  - Microsoft System Management BIOS Driver
  - Microsoft UAA Bus Driver for High Definition Audio
  - Microsoft UAA Bus Driver for High Definition Audio
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Numeric data processor
  - PCI bus
  - PCI standard host CPU bridge
  - PCI standard ISA bridge
  - PCI standard PCI-to-PCI bridge
  - PCI standard PCI-to-PCI bridge
  - PCI standard PCI-to-PCI bridge
  - Plug and Play Software Device Enumerator
  - Printer Port Logical Interface
  - Programmable interrupt controller
  - System board
  - System board
  - System CMOS/real time clock
  - System speaker
  - System timer
  - Terminal Server Device Redirector
  - Terminal Server Keyboard Driver
  - Terminal Server Mouse Driver
  - Volume Manager
  - ̨ȫʾƵ
+ ʾ
  - ATI Radeon HD 2600 XT (driver 8.451.0.0)

cpu registers:
eax = 02d7efe8
ebx = 02d2b1e0
ecx = 00000000
edx = 00467e4d
esi = 0118a804
edi = 02d2ffff
eip = 00467e4d
esp = 0012fc14
ebp = 0012fc80

stack dump:
0012fc14  4d 7e 46 00 de fa ed 0e - 01 00 00 00 07 00 00 00  M~F.............
0012fc24  28 fc 12 00 4d 7e 46 00 - e8 ef d7 02 e0 b1 d2 02  (...M~F.........
0012fc34  04 a8 18 01 ff ff d2 02 - 80 fc 12 00 44 fc 12 00  ............D...
0012fc44  90 fc 12 00 94 41 40 00 - 80 fc 12 00 48 95 20 01  .....A@.....H...
0012fc54  e0 b1 d2 02 01 a8 18 01 - 00 00 00 00 00 00 00 00  ................
0012fc64  00 00 00 00 00 00 00 00 - a4 ef d7 02 0b 28 46 00  .............(F.
0012fc74  04 f0 d3 02 0b 6d 11 01 - 3e 3d 40 00 a8 fc 12 00  .....m..>=@.....
0012fc84  85 7d 46 00 00 00 00 00 - ff ff d2 02 c4 fc 12 00  .}F.............
0012fc94  d3 42 40 00 a8 fc 12 00 - e0 b1 d2 02 70 4c 13 01  .B@.........pL..
0012fca4  5c 6d 11 01 bc fc 12 00 - 46 6d 46 00 ff ff 00 00  \m......FmF.....
0012fcb4  00 00 00 00 88 1b 4e 00 - 20 fd 12 00 7f 5c 5f 00  ......N......\_.
0012fcc4  28 fd 12 00 94 41 40 00 - 20 fd 12 00 00 00 00 00  (....A@.........
0012fcd4  5c 6d 11 01 00 00 00 00 - 00 00 00 00 00 00 00 00  \m..............
0012fce4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fcf4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd04  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd14  00 00 00 00 00 00 00 00 - 00 00 00 00 50 fd 12 00  ............P...
0012fd24  0b 29 61 00 88 fd 12 00 - 94 41 40 00 50 fd 12 00  .)a......A@.P...
0012fd34  fc 0b 12 01 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd44  00 00 00 00 00 00 00 00 - 00 00 00 00 a4 fd 12 00  ................

disassembling:
[...]
005f5c62
005f5c62    ; ---------------------------------------------------------
005f5c62
005f5c64    loc_5f5c64:
005f5c64 62   mov     eax, [$621cf0]
005f5c69      mov     eax, [eax]
005f5c6b      mov     eax, [eax+$60c]
005f5c71      mov     eax, [eax+$2e0]
005f5c77      mov     edx, [ebp-8]
005f5c7a      mov     ecx, [eax]
005f5c7c    > call    dword ptr [ecx+$74]
005f5c7c
005f5c7f    loc_5f5c7f:
005f5c7f 65   mov     dl, 1
005f5c81      xor     eax, eax
005f5c83      call    +$26a8 ($5f8330)       ; UnitPlugins.Plugin_VisibleControlChange
005f5c83
005f5c88      test    al, al
005f5c8a      jz      loc_5f5cce
005f5c8a
005f5c8c 66   mov     eax, [$621cf0]
[...]

date/time         : 2010-03-14, 15:34:43, 15ms
computer name     : WWW-4B5F05DACAB
user name         : Administrator <admin>
operating system  : Windows XP Service Pack 2 build 2600
system language   : Chinese
system up time    : 4 hours 35 minutes
program up time   : 4 hours 9 minutes
processors        : 2x Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz
physical memory   : 1473/2047 MB (free/total)
free disk space   : (C:) 3.95 GB (D:) 12.13 GB
display mode      : 1024x768, 16 bit
process id        : $404
allocated memory  : 22.32 MB
executable        : amxx_studio.exe
exec. date/time   : 2006-11-22 01:06
version           : 1.4.3.16
madExcept version : 3.0b
callstack crc     : $b1954426, $037e6e97, $dd5bad21
count             : 6
exception number  : 1
exception class   : EFCreateError
exception message : Cannot create file "E:\GAME\CS\Դ\Դ\xm8_AB_mode.sma". һʹôļ޷ʡ.

main thread ($b3c):
00467e48 +0a4 amxx_studio.exe Classes              TFileStream.Create
00467d80 +020 amxx_studio.exe Classes              TFileStream.Create
00466d41 +015 amxx_studio.exe Classes              TStrings.SaveToFile
005f5c56 +172 amxx_studio.exe UnitCompile   58 +19 DoCompilePAWN
00612906 +0d6 amxx_studio.exe UnitfrmMain 1682  +7 TfrmMain.mnuDoCompileClick
00513525 +095 amxx_studio.exe TB2Item     1499 +22 TTBCustomItem.Click
005542b1 +015 amxx_studio.exe SpTBXItem   4091  +2 TSpTBXCustomItem.Click
0060e1cf +00b amxx_studio.exe UnitfrmMain  685  +1 TfrmMain.mnuTCompileClick
00513525 +095 amxx_studio.exe TB2Item     1499 +22 TTBCustomItem.Click
00513417 +0b3 amxx_studio.exe TB2Item     1449 +27 TTBCustomItem.ClickWndProc
0047123c +014 amxx_studio.exe Classes              StdWndProc
77d196c2 +00a USER32.dll                           DispatchMessageA
004daa93 +083 amxx_studio.exe Forms                TApplication.ProcessMessage
004daaca +00a amxx_studio.exe Forms                TApplication.HandleMessage
004dacea +096 amxx_studio.exe Forms                TApplication.Run
00619b7b +7b7 amxx_studio.exe AMXX_Studio  155 +95 initialization

thread $d6c: <priority:15>
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e9a9 +0a ntdll.dll                 NtWaitForMultipleObjects
7c8094dc +00 kernel32.dll              WaitForMultipleObjectsEx
7c80a070 +13 kernel32.dll              WaitForMultipleObjects
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by thread $c6c at:
72c9328c +00 wdmaud.drv

thread $c38 (TCodeExplorerUpdater):
7c92eb94 +00 ntdll.dll                          KiFastSystemCallRet
0044ce7b +2b amxx_studio.exe madExcept          HookedTThreadExecute
0046fbd4 +34 amxx_studio.exe Classes            ThreadProc
00404888 +28 amxx_studio.exe System             ThreadWrapper
0044cd5d +0d amxx_studio.exe madExcept          CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept          ThreadExceptFrame
>> created by main thread ($b3c) at:
0060e188 +2c amxx_studio.exe UnitfrmMain 661 +2 TfrmMain.FormShow

thread $eb4:
7c92eb94 +0 ntdll.dll  KiFastSystemCallRet
7c92d85a +a ntdll.dll  NtDelayExecution

thread $ac0:
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e397 +0a ntdll.dll                 NtReplyWaitReceivePortEx
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by thread $668 at:
77e6760d +00 RPCRT4.dll

thread $fbc:
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e9be +0a ntdll.dll                 NtWaitForSingleObject
7c8025c5 +85 kernel32.dll              WaitForSingleObjectEx
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by main thread ($b3c) at:
769bcc4a +00 ole32.dll

thread $e20:
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e397 +0a ntdll.dll                 NtReplyWaitReceivePortEx
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by thread $ac0 at:
77e6760d +00 RPCRT4.dll

thread $444:
7c92eb94 +00 ntdll.dll                 KiFastSystemCallRet
7c92e397 +0a ntdll.dll                 NtReplyWaitReceivePortEx
0044cd5d +0d amxx_studio.exe madExcept CallThreadProcSafe
0044cdc7 +37 amxx_studio.exe madExcept ThreadExceptFrame
>> created by thread $e20 at:
77e6760d +00 RPCRT4.dll

modules:
00400000 amxx_studio.exe 1.4.3.16         D:\Program Files\AMXX-Studio
10000000 scilexer.dll    1.6.6.0          D:\Program Files\AMXX-Studio
20000000 xpsp2res.dll    5.1.2600.2180    C:\WINDOWS\system32
5adc0000 uxtheme.dll     6.0.2900.2180    C:\WINDOWS\system32
5d170000 comctl32.dll    5.82.2900.2982   C:\WINDOWS\system32
5fdd0000 NETAPI32.dll    5.1.2600.2976    C:\WINDOWS\system32
62c20000 LPK.DLL         5.1.2600.2180    C:\WINDOWS\system32
71a10000 WS2HELP.dll     5.1.2600.2180    C:\WINDOWS\system32
71a20000 WS2_32.dll      5.1.2600.2180    C:\WINDOWS\system32
71a40000 wsock32.dll     5.1.2600.2180    C:\WINDOWS\system32
72c80000 msacm32.drv     5.1.2600.0       C:\WINDOWS\system32
72c90000 wdmaud.drv      5.1.2600.2180    C:\WINDOWS\system32
72f70000 winspool.drv    5.1.2600.2180    C:\WINDOWS\system32
73250000 RICHED32.DLL    5.1.2600.0       C:\WINDOWS\system32
73640000 msctfime.ime    5.1.2600.2180    C:\WINDOWS\system32
73fa0000 USP10.dll       1.420.2600.2180  C:\WINDOWS\system32
74680000 MSCTF.dll       5.1.2600.2180    C:\WINDOWS\system32
74d90000 RICHED20.dll    5.30.23.1228     C:\WINDOWS\system32
75430000 CRYPTUI.dll     5.131.2600.2180  C:\WINDOWS\system32
759d0000 USERENV.dll     5.1.2600.2180    C:\WINDOWS\system32
75ef0000 browseui.dll    6.0.2900.3086    C:\WINDOWS\system32
76060000 SETUPAPI.dll    5.1.2600.2180    C:\WINDOWS\system32
762f0000 msimg32.dll     5.1.2600.2180    C:\WINDOWS\system32
76300000 imm32.dll       5.1.2600.2180    C:\WINDOWS\system32
76320000 comdlg32.dll    6.0.2900.2180    C:\WINDOWS\system32
76570000 CSCDLL.dll      5.1.2600.2180    C:\WINDOWS\System32
76590000 cscui.dll       5.1.2600.2180    C:\WINDOWS\System32
765e0000 CRYPT32.dll     5.131.2600.2180  C:\WINDOWS\system32
76680000 WININET.dll     6.0.2900.3086    C:\WINDOWS\system32
76960000 ntshrui.dll     5.1.2600.2180    C:\WINDOWS\system32
76990000 ole32.dll       5.1.2600.2726    C:\WINDOWS\system32
76af0000 ATL.DLL         3.5.2284.0       C:\WINDOWS\system32
76b10000 winmm.dll       5.1.2600.2180    C:\WINDOWS\system32
76c00000 WINTRUST.dll    5.131.2600.2180  C:\WINDOWS\system32
76c60000 IMAGEHLP.dll    5.1.2600.2180    C:\WINDOWS\system32
76d70000 appHelp.dll     5.1.2600.2180    C:\WINDOWS\system32
76db0000 MSASN1.dll      5.1.2600.2180    C:\WINDOWS\system32
76f30000 WLDAP32.dll     5.1.2600.2180    C:\WINDOWS\system32
76fa0000 CLBCATQ.DLL     2001.12.4414.308 C:\WINDOWS\system32
77020000 COMRes.dll      2001.12.4414.258 C:\WINDOWS\system32
770f0000 oleaut32.dll    5.1.2600.2180    C:\WINDOWS\system32
77180000 comctl32.dll    6.0.2900.2982    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
77ba0000 midimap.dll     5.1.2600.2180    C:\WINDOWS\system32
77bb0000 MSACM32.dll     5.1.2600.2180    C:\WINDOWS\system32
77bd0000 version.dll     5.1.2600.2180    C:\WINDOWS\system32
77be0000 msvcrt.dll      7.0.2600.2180    C:\WINDOWS\system32
77d10000 USER32.dll      5.1.2600.3099    C:\WINDOWS\system32
77da0000 advapi32.dll    5.1.2600.2180    C:\WINDOWS\system32
77e50000 RPCRT4.dll      5.1.2600.2180    C:\WINDOWS\system32
77ef0000 GDI32.dll       5.1.2600.3099    C:\WINDOWS\system32
77f40000 SHLWAPI.dll     6.0.2900.3086    C:\WINDOWS\system32
77fc0000 Secur32.dll     5.1.2600.2180    C:\WINDOWS\system32
7c800000 kernel32.dll    5.1.2600.2945    C:\WINDOWS\system32
7c920000 ntdll.dll       5.1.2600.2180    C:\WINDOWS\system32
7d590000 SHELL32.dll     6.0.2900.3051    C:\WINDOWS\system32
7e550000 shdocvw.dll     6.0.2900.3086    C:\WINDOWS\system32

processes:
000 Idle
004 System          normal
2a0 smss.exe        normal C:\WINDOWS\system32
2e0 csrss.exe
300 winlogon.exe    high   C:\WINDOWS\system32
32c services.exe    normal C:\WINDOWS\system32
338 lsass.exe       normal C:\WINDOWS\system32
3d4 svchost.exe     normal C:\WINDOWS\system32
418 svchost.exe
490 svchost.exe     normal C:\WINDOWS\System32
4c0 svchost.exe
50c svchost.exe
518 RavMonD.exe     normal D:\Program Files\Rising\Rav
5b4 spoolsv.exe     normal C:\WINDOWS\system32
6d4 Explorer.EXE    normal C:\WINDOWS
758 alg.exe
1d8 RsTray.exe      normal D:\Program Files\Rising\Rav
1e8 ctfmon.exe      normal C:\WINDOWS\system32
290 QQ.exe          normal D:\Program Files\Tencent\qq\Bin
09c TXPlatform.exe  normal D:\Program Files\Tencent\qq\Bin
404 amxx_studio.exe normal D:\Program Files\AMXX-Studio
97c 360SE.exe       normal D:\Program Files\360\360se3
0f8 360SE.exe       normal D:\Program Files\360\360se3
f1c 360SE.exe       normal D:\Program Files\360\360se3

hardware:
+ DVD/CD-ROM 
  - PIONEER DVD-ROM DVD-130P
+ IDE ATA/ATAPI 
  - ׼˫ͨ PCI IDE 
  - ׼˫ͨ PCI IDE 
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
  - Ҫ IDE ͨ
+ 
  - Intel(R) Pentium(R) Dual  CPU  E2160  @ 1.80GHz
  - Intel(R) Pentium(R) Dual  CPU  E2160  @ 1.80GHz
+ 
  - Kingston DataTraveler G2 USB Device
  - Maxtor 6L160P0
+ ˿ (COM  LPT)
  - ECP ӡ˿ (LPT1)
  - ͨѶ˿ (COM1)
+ 
  - Ĭϼ
+ 
  - ACPI Multiprocessor PC
+ 
  - ׼ 101/102  Microsoft Ȼ PS/2 
+ ƵϷ
  - ATI Function Driver for High Definition Audio - ATI AA01 (driver 5.0.40001.8)
  - Realtek High Definition Audio (driver 5.10.0.5519)
  - ͳƵ׽豸
  - ͳƵ
  - ý豸
  - Ƶ
  - Ƶ
+ ָ豸
  - Microsoft PS/2 Mouse
+ ͨô߿
  - Standard Enhanced PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - Standard Universal PCI to USB Host Controller
  - USB Mass Storage Device
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
  - USB Root Hub
+ 
  - Realtek RTL8139/810x Family Fast Ethernet NIC #2 (driver 5.680.1023.2007)
+ ϵͳ豸
  - ACPI Fixed Feature Button
  - ACPI Power Button
  - Direct memory access controller
  - Intel(R) 82801 PCI Bridge - 244E
  - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA (driver 7.0.0.1020)
  - Intel(R) 82802 Firmware Hub Device
  - ISAPNP Read Data Port
  - Logical Disk Manager
  - Microcode Update Device
  - Microsoft ACPI-Compliant System
  - Microsoft System Management BIOS Driver
  - Microsoft UAA Bus Driver for High Definition Audio
  - Microsoft UAA Bus Driver for High Definition Audio
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Motherboard resources
  - Numeric data processor
  - PCI bus
  - PCI standard host CPU bridge
  - PCI standard ISA bridge
  - PCI standard PCI-to-PCI bridge
  - PCI standard PCI-to-PCI bridge
  - PCI standard PCI-to-PCI bridge
  - Plug and Play Software Device Enumerator
  - Printer Port Logical Interface
  - Programmable interrupt controller
  - System board
  - System board
  - System CMOS/real time clock
  - System speaker
  - System timer
  - Terminal Server Device Redirector
  - Terminal Server Keyboard Driver
  - Terminal Server Mouse Driver
  - Volume Manager
  - ̨ȫʾƵ
+ ʾ
  - ATI Radeon HD 2600 XT (driver 8.451.0.0)

cpu registers:
eax = 0336edf0
ebx = 011370ac
ecx = 00000000
edx = 00467e4d
esi = 04314580
edi = 0113ffff
eip = 00467e4d
esp = 0012fc14
ebp = 0012fc80

stack dump:
0012fc14  4d 7e 46 00 de fa ed 0e - 01 00 00 00 07 00 00 00  M~F.............
0012fc24  28 fc 12 00 4d 7e 46 00 - f0 ed 36 03 ac 70 13 01  (...M~F...6..p..
0012fc34  80 45 31 04 ff ff 13 01 - 80 fc 12 00 44 fc 12 00  .E1.........D...
0012fc44  90 fc 12 00 94 41 40 00 - 80 fc 12 00 40 ef e9 02  .....A@.....@...
0012fc54  ac 70 13 01 01 45 31 04 - 00 00 00 00 00 00 00 00  .p...E1.........
0012fc64  00 00 00 00 00 00 00 00 - 7c ed 36 03 0b 28 46 00  ........|.6..(F.
0012fc74  c0 ed 36 03 0b a1 20 04 - 3e 3d 40 00 a8 fc 12 00  ..6.....>=@.....
0012fc84  85 7d 46 00 00 00 00 00 - ff ff 13 01 c4 fc 12 00  .}F.............
0012fc94  d3 42 40 00 a8 fc 12 00 - ac 70 13 01 28 a1 20 04  .B@......p..(...
0012fca4  28 a1 20 04 bc fc 12 00 - 46 6d 46 00 ff ff 00 00  (.......FmF.....
0012fcb4  00 00 00 00 98 26 46 00 - 20 fd 12 00 59 5c 5f 00  .....&F.....Y\_.
0012fcc4  28 fd 12 00 94 41 40 00 - 20 fd 12 00 00 00 00 00  (....A@.........
0012fcd4  5c 6d 11 01 00 00 00 00 - 00 00 00 00 00 00 00 00  \m..............
0012fce4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fcf4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd04  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd14  00 00 00 00 00 00 00 00 - 00 00 00 00 50 fd 12 00  ............P...
0012fd24  0b 29 61 00 88 fd 12 00 - 94 41 40 00 50 fd 12 00  .)a......A@.P...
0012fd34  fc 0b 12 01 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012fd44  00 00 00 00 00 00 00 00 - 00 00 00 00 a4 fd 12 00  ................

disassembling:
[...]
005f5c40      call    -$2cbf5 ($5c9050)      ; UnitCodeUtils.TranslateString
005f5c40
005f5c45      mov     edx, [ebp-$24]
005f5c48      mov     eax, ebx
005f5c4a      mov     ecx, [eax]
005f5c4c      call    dword ptr [ecx+$2c]
005f5c4c
005f5c4f 58   mov     edx, [ebp-8]
005f5c52      mov     eax, ebx
005f5c54      mov     ecx, [eax]
005f5c56    > call    dword ptr [ecx+$74]
005f5c56
005f5c59 59   mov     dl, 1
005f5c5b      mov     eax, ebx
005f5c5d      mov     ecx, [eax]
005f5c5f      call    dword ptr [ecx-4]
005f5c5f
005f5c62      jmp     loc_5f5c7f
005f5c62
005f5c62    ; ---------------------------------------------------------
005f5c62
[...]

