Hi,
Im developing on D2006 W32 with proper upgrades + madexcept 3.0e +
DevExpress components + kbmMW components. I have a service application that
have a main form with developer express components. Also I made my
application a service with TCiaService. While running the program, sometimes
(for example 2-3 times a day) Im getting an exception but cant find the bug.
Is there anyone can show me direction that what must I do. Here is the
madexcept bug report;
date/time : 2007-06-27, 14:28:14, 494ms
computer name : ***
wts client name : ***
user name : SYSTEM <admin>
registered owner : ***
operating system : Windows 2003 Service Pack 2 build 3790
system language : Turkish
system up time : 1 hour 40 minutes
program up time : 27 minutes 39 seconds
processors : 8x Intel(R) Xeon(TM) CPU 3.20GHz
physical memory : 1990/4095 MB (free/total)
free disk space : (C:) 14,99 GB
display mode : 1600x1200, 16 bit
process id : $1628
allocated memory : 32,58 MB
executable : ESUITE_FP.exe
exec. date/time : 2007-06-27 13:59
version : 1.9.1.3
compiled with : BCB 2006
contact name : ***
contact email : ***
madExcept version : 3.0e
callstack crc : $ace13117, $51bb49f7, $8b6b6e2b
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 004FE0DB in module
'ESUITE_FP.exe'. Read of address 00000004.
Main ($944):
004fe0db +00b ESUITE_FP.exe cxClasses 1327 +2
TcxObjectLinkController.RemoveLink
004fe1df +00b ESUITE_FP.exe cxClasses 1399 +2 cxRemoveObjectLink
00519ad8 +1a0 ESUITE_FP.exe cxControls 2810 +42 TcxControl.WndProc
00404d12 +002 ESUITE_FP.exe System 545 +0 @ClassDestroy
004b68f8 +02c ESUITE_FP.exe Controls
TWinControl.MainWndProc
0047b504 +014 ESUITE_FP.exe Classes StdWndProc
7c828533 +02b ntdll.dll
KiUserCallbackDispatcher
773b045e +016 USER32.dll CallWindowProcA
004b724f +0d7 ESUITE_FP.exe Controls
TWinControl.DefaultHandler
004b78df +033 ESUITE_FP.exe Controls TWinControl.WMPaint
004b7983 +0d7 ESUITE_FP.exe Controls TWinControl.WMPaint
004b3317 +2bb ESUITE_FP.exe Controls TControl.WndProc
004b716d +499 ESUITE_FP.exe Controls TWinControl.WndProc
004981e0 +06c ESUITE_FP.exe StdCtrls TButtonControl.WndProc
004b68f8 +02c ESUITE_FP.exe Controls
TWinControl.MainWndProc
0047b504 +014 ESUITE_FP.exe Classes StdWndProc
7c828533 +02b ntdll.dll
KiUserCallbackDispatcher
773a16e0 +00a USER32.dll DispatchMessageA
004d02fc +0fc ESUITE_FP.exe Forms
TApplication.ProcessMessage
004d0336 +00a ESUITE_FP.exe Forms
TApplication.HandleMessage
00826d6e +182 ESUITE_FP.exe SvcMgr
TServiceApplication.Run
008f3351 +009 ESUITE_FP.exe uCiaServiceTools 49 +0 TCiaService.Run
thread $ff0:
7c8285ec +00 ntdll.dll KiFastSystemCallRet
7c827cf9 +0a ntdll.dll NtWaitForMultipleObjects
77e62026 +cc kernel32.dll WaitForMultipleObjectsEx
7739bbcb +d1 USER32.dll MsgWaitForMultipleObjectsEx
7739ce31 +1a USER32.dll MsgWaitForMultipleObjects
00451989 +0d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by Main ($944) at:
4dd695e7 +00 gdiplus.dll
thread $99c (TServiceStartThread):
7c8285ec +00 ntdll.dll KiFastSystemCallRet
7c827769 +0a ntdll.dll NtReadFile
77e418ac +61 kernel32.dll ReadFile
77fb75aa +8e ADVAPI32.dll StartServiceCtrlDispatcherA
00826bcf +07 ESUITE_FP.exe SvcMgr TServiceStartThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by Main ($944) at:
00826b67 +4f ESUITE_FP.exe SvcMgr TServiceStartThread.Create
thread $135c:
7c8285ec +00 ntdll.dll KiFastSystemCallRet
7c827d09 +0a ntdll.dll NtWaitForSingleObject
77e61d18 +82 kernel32.dll WaitForSingleObjectEx
77e61c88 +0d kernel32.dll WaitForSingleObject
00479e10 +7c ESUITE_FP.exe Classes TThread.WaitFor
00825fe1 +75 ESUITE_FP.exe SvcMgr TService.DoStart
00825f10 +90 ESUITE_FP.exe SvcMgr TService.Main
00826467 +eb ESUITE_FP.exe SvcMgr TServiceApplication.DispatchServiceMain
00826216 +0e ESUITE_FP.exe SvcMgr ServiceMain
00451989 +0d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by thread $99c (TServiceStartThread) at:
77f66085 +00 ADVAPI32.dll
thread $14d4 (TServiceThread):
7c8285ec +00 ntdll.dll KiFastSystemCallRet
77393d2a +3b USER32.dll GetMessageA
00825780 +48 ESUITE_FP.exe SvcMgr TServiceThread.ProcessRequests
008255fd +f1 ESUITE_FP.exe SvcMgr TServiceThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by thread $135c at:
008254eb +1b ESUITE_FP.exe SvcMgr TServiceThread.Create
thread $1474:
7c8285ec +000 ntdll.dll KiFastSystemCallRet
7c827cf9 +00a ntdll.dll NtWaitForMultipleObjects
00451989 +00d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by Main ($944) at:
71c5102d +261 netapi32.dll Netbios
thread $13f0 (TkbmMWPooledGarbageThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c827d09 +0a ntdll.dll
NtWaitForSingleObject
77e61d18 +82 kernel32.dll
WaitForSingleObjectEx
77e61c88 +0d kernel32.dll
WaitForSingleObject
00816983 +13 ESUITE_FP.exe kbmMWCustomConnectionPool 4432 +3
TkbmMWPooledGarbageThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00813d4c +a0 ESUITE_FP.exe kbmMWCustomConnectionPool 2389 +26
TkbmMWCustomConnectionPool.Create
thread $1788 (TkbmMWPooledDatasetRefreshSchedulerThread): <suspended>
77e617ec +00 kernel32.dll
>> created by Main ($944) at:
008138a7 +1b ESUITE_FP.exe kbmMWCustomConnectionPool 2190 +1
TkbmMWPooledDatasetRefreshSchedulerThread.Create
thread $1464 (TkbmMWTCPIPIndyMessagingClientTransportWorkThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c826f49 +0a ntdll.dll
NtDelayExecution
77e41ecb +47 kernel32.dll
SleepEx
77e424e8 +0a kernel32.dll
Sleep
0087264d +01 ESUITE_FP.exe IdGlobal
Sleep
0088821c +90 ESUITE_FP.exe kbmMWTCPIPIndyMessagingClientTransport 211 +30
TkbmMWTCPIPIndyMessagingClientTransportWorkThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes
ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00888670 +48 ESUITE_FP.exe kbmMWTCPIPIndyMessagingClientTransport 370 +15
TkbmMWCustomTCPIPIndyMessagingClientTransport.Connect
thread $b0c (TkbmMWSAFClientSingleEndpointDeliveryThread):
7c8285ec +000 ntdll.dll
KiFastSystemCallRet
7c826f49 +00a ntdll.dll
NtDelayExecution
77e41ecb +047 kernel32.dll SleepEx
77e424e8 +00a kernel32.dll Sleep
0080be51 +2cd ESUITE_FP.exe kbmMWCustomMessagingTransport 3162 +73
TkbmMWSAFClientSingleEndpointDeliveryThread.Deliver
0080bb80 +008 ESUITE_FP.exe kbmMWCustomMessagingTransport 3079 +0
TkbmMWCustomSAFClientDeliveryThread.Execute
00451aa7 +02b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +034 ESUITE_FP.exe Classes
ThreadProc
004058f0 +028 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +00d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
0080bb2b +01b ESUITE_FP.exe kbmMWCustomMessagingTransport 3068 +1
TkbmMWCustomSAFClientDeliveryThread.Create
thread $ebc (TkbmMWPooledGarbageThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c827d09 +0a ntdll.dll
NtWaitForSingleObject
77e61d18 +82 kernel32.dll
WaitForSingleObjectEx
77e61c88 +0d kernel32.dll
WaitForSingleObject
00816983 +13 ESUITE_FP.exe kbmMWCustomConnectionPool 4432 +3
TkbmMWPooledGarbageThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00813d4c +a0 ESUITE_FP.exe kbmMWCustomConnectionPool 2389 +26
TkbmMWCustomConnectionPool.Create
thread $3a0 (TkbmMWPooledDatasetRefreshSchedulerThread): <suspended>
77e617ec +00 kernel32.dll
>> created by Main ($944) at:
008138a7 +1b ESUITE_FP.exe kbmMWCustomConnectionPool 2190 +1
TkbmMWPooledDatasetRefreshSchedulerThread.Create
thread $1138 (TkbmMWPooledGarbageThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c827d09 +0a ntdll.dll
NtWaitForSingleObject
77e61d18 +82 kernel32.dll
WaitForSingleObjectEx
77e61c88 +0d kernel32.dll
WaitForSingleObject
00816983 +13 ESUITE_FP.exe kbmMWCustomConnectionPool 4432 +3
TkbmMWPooledGarbageThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00813d4c +a0 ESUITE_FP.exe kbmMWCustomConnectionPool 2389 +26
TkbmMWCustomConnectionPool.Create
thread $157c (TkbmMWPooledDatasetRefreshSchedulerThread): <suspended>
77e617ec +00 kernel32.dll
>> created by Main ($944) at:
008138a7 +1b ESUITE_FP.exe kbmMWCustomConnectionPool 2190 +1
TkbmMWPooledDatasetRefreshSchedulerThread.Create
thread $13d4 (TkbmMWPooledGarbageThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c827d09 +0a ntdll.dll
NtWaitForSingleObject
77e61d18 +82 kernel32.dll
WaitForSingleObjectEx
77e61c88 +0d kernel32.dll
WaitForSingleObject
00816983 +13 ESUITE_FP.exe kbmMWCustomConnectionPool 4432 +3
TkbmMWPooledGarbageThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00813d4c +a0 ESUITE_FP.exe kbmMWCustomConnectionPool 2389 +26
TkbmMWCustomConnectionPool.Create
thread $16f0 (TkbmMWPooledDatasetRefreshSchedulerThread): <suspended>
77e617ec +00 kernel32.dll
>> created by Main ($944) at:
008138a7 +1b ESUITE_FP.exe kbmMWCustomConnectionPool 2190 +1
TkbmMWPooledDatasetRefreshSchedulerThread.Create
thread $10d4 (TkbmMWPooledGarbageThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c827d09 +0a ntdll.dll
NtWaitForSingleObject
77e61d18 +82 kernel32.dll
WaitForSingleObjectEx
77e61c88 +0d kernel32.dll
WaitForSingleObject
00816983 +13 ESUITE_FP.exe kbmMWCustomConnectionPool 4432 +3
TkbmMWPooledGarbageThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00813d4c +a0 ESUITE_FP.exe kbmMWCustomConnectionPool 2389 +26
TkbmMWCustomConnectionPool.Create
thread $fe8 (TkbmMWPooledDatasetRefreshSchedulerThread): <suspended>
77e617ec +00 kernel32.dll
>> created by Main ($944) at:
008138a7 +1b ESUITE_FP.exe kbmMWCustomConnectionPool 2190 +1
TkbmMWPooledDatasetRefreshSchedulerThread.Create
thread $13c4 (TkbmMWTCPIPIndyMessagingClientTransportWorkThread):
7c8285ec +00 ntdll.dll
KiFastSystemCallRet
7c826f49 +0a ntdll.dll
NtDelayExecution
77e41ecb +47 kernel32.dll
SleepEx
77e424e8 +0a kernel32.dll
Sleep
0087264d +01 ESUITE_FP.exe IdGlobal
Sleep
0088821c +90 ESUITE_FP.exe kbmMWTCPIPIndyMessagingClientTransport 211 +30
TkbmMWTCPIPIndyMessagingClientTransportWorkThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes
ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
00888670 +48 ESUITE_FP.exe kbmMWTCPIPIndyMessagingClientTransport 370 +15
TkbmMWCustomTCPIPIndyMessagingClientTransport.Connect
thread $c54 (TkbmMWSAFClientThread):
7c8285ec +000 ntdll.dll
KiFastSystemCallRet
7c827d09 +00a ntdll.dll
NtWaitForSingleObject
77e61d18 +082 kernel32.dll
WaitForSingleObjectEx
77e61c88 +00d kernel32.dll
WaitForSingleObject
0043604c +0cc ESUITE_FP.exe madExcept
PauseMeEventually
004523eb +003 ESUITE_FP.exe madExcept
PeekMessageCallbackA
004d0214 +014 ESUITE_FP.exe Forms
TApplication.ProcessMessage
004d031e +00a ESUITE_FP.exe Forms
TApplication.ProcessMessages
008f5fc5 +0c1 ESUITE_FP.exe u_fp_main 166 +24
WinExecAndWait32V2
008f99f5 +3c1 ESUITE_FP.exe u_fp_main 866 +64
Tf_fp_main.Process_Pages
008f6181 +115 ESUITE_FP.exe u_fp_main 198 +12
Tf_fp_main.ServerMessagingMessage
007da13a +00e ESUITE_FP.exe kbmMWCustomTransport 1720 +9
TkbmMWCustomBinaryTransportStreamFormatter.ReadInteger
0080c725 +029 ESUITE_FP.exe kbmMWCustomMessagingTransport 3445 +3
TkbmMWCustomSAFClientTransport.DoOnMessage
0080b97b +553 ESUITE_FP.exe kbmMWCustomMessagingTransport 3031 +160
TkbmMWSAFClientThread.Serve
0080bb0a +006 ESUITE_FP.exe kbmMWCustomMessagingTransport 3061 +0
TkbmMWSAFClientThread.Execute
00451aa7 +02b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +034 ESUITE_FP.exe Classes
ThreadProc
004058f0 +028 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +00d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
0080b3bb +01b ESUITE_FP.exe kbmMWCustomMessagingTransport 2850 +1
TkbmMWSAFClientThread.Create
thread $151c (TkbmMWSAFClientSingleEndpointDeliveryThread):
7c8285ec +000 ntdll.dll
KiFastSystemCallRet
7c826f49 +00a ntdll.dll
NtDelayExecution
77e41ecb +047 kernel32.dll SleepEx
77e424e8 +00a kernel32.dll Sleep
0080be51 +2cd ESUITE_FP.exe kbmMWCustomMessagingTransport 3162 +73
TkbmMWSAFClientSingleEndpointDeliveryThread.Deliver
0080bb80 +008 ESUITE_FP.exe kbmMWCustomMessagingTransport 3079 +0
TkbmMWCustomSAFClientDeliveryThread.Execute
00451aa7 +02b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +034 ESUITE_FP.exe Classes
ThreadProc
004058f0 +028 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +00d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by Main ($944) at:
0080bb2b +01b ESUITE_FP.exe kbmMWCustomMessagingTransport 3068 +1
TkbmMWCustomSAFClientDeliveryThread.Create
IdThread (unknown) ($1770):
7c8285ec +00 ntdll.dll KiFastSystemCallRet
7c827d09 +0a ntdll.dll NtWaitForSingleObject
71bf150e +5e WS2HELP.dll WahReferenceContextByHandle
71c02839 +9e WS2_32.dll select
008784d3 +63 ESUITE_FP.exe IdStackWindows
TIdSocketListWindows.FDSelect
00878458 +20 ESUITE_FP.exe IdStackWindows
TIdSocketListWindows.SelectRead
008f14bc +30 ESUITE_FP.exe IdUDPServer TIdUDPListenerThread.Run
00873168 +f0 ESUITE_FP.exe IdThread TIdThread.Execute
00451aa7 +2b ESUITE_FP.exe madExcept HookedTThreadExecute
004797c4 +34 ESUITE_FP.exe Classes ThreadProc
004058f0 +28 ESUITE_FP.exe System 545 +0 ThreadWrapper
00451989 +0d ESUITE_FP.exe madExcept CallThreadProcSafe
004519f3 +37 ESUITE_FP.exe madExcept ThreadExceptFrame
>> created by thread $c54 (TkbmMWSAFClientThread) at:
00873368 +68 ESUITE_FP.exe IdThread TIdThread.Create
thread $298 (TkbmMWSAFServerThread):
7c8285ec +000 ntdll.dll
KiFastSystemCallRet
7c826f49 +00a ntdll.dll
NtDelayExecution
77e41ecb +047 kernel32.dll SleepEx
77e424e8 +00a kernel32.dll Sleep
00808fbd +335 ESUITE_FP.exe kbmMWCustomMessagingTransport 1359 +99
TkbmMWSAFServerThread.Serve
008090ca +006 ESUITE_FP.exe kbmMWCustomMessagingTransport 1372 +0
TkbmMWSAFServerThread.Execute
00451aa7 +02b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +034 ESUITE_FP.exe Classes
ThreadProc
004058f0 +028 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +00d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by thread $c54 (TkbmMWSAFClientThread) at:
00808c3b +01b ESUITE_FP.exe kbmMWCustomMessagingTransport 1246 +1
TkbmMWSAFServerThread.Create
thread $12fc (TkbmMWSAFServerSingleEndpointDeliveryThread):
7c8285ec +000 ntdll.dll
KiFastSystemCallRet
7c826f49 +00a ntdll.dll
NtDelayExecution
77e41ecb +047 kernel32.dll SleepEx
77e424e8 +00a kernel32.dll Sleep
00809411 +2cd ESUITE_FP.exe kbmMWCustomMessagingTransport 1472 +73
TkbmMWSAFServerSingleEndpointDeliveryThread.Deliver
00809140 +008 ESUITE_FP.exe kbmMWCustomMessagingTransport 1390 +0
TkbmMWCustomSAFServerDeliveryThread.Execute
00451aa7 +02b ESUITE_FP.exe madExcept
HookedTThreadExecute
004797c4 +034 ESUITE_FP.exe Classes
ThreadProc
004058f0 +028 ESUITE_FP.exe System 545 +0
ThreadWrapper
00451989 +00d ESUITE_FP.exe madExcept
CallThreadProcSafe
004519f3 +037 ESUITE_FP.exe madExcept
ThreadExceptFrame
>> created by thread $c54 (TkbmMWSAFClientThread) at:
008090eb +01b ESUITE_FP.exe kbmMWCustomMessagingTransport 1379 +1
TkbmMWCustomSAFServerDeliveryThread.Create
modules:
00400000 ESUITE_FP.exe 1.9.1.3 C:\ESUITE
00be0000 pwimages.dll 1.9.1.3 C:\ESUITE
00e30000 pwdjvu.dll 1.9.1.3 C:\ESUITE
03070000 msvcp60.dll 7.0.3790.3959 C:\WINDOWS\system32
4dd60000 gdiplus.dll 5.2.3790.3959
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.3790.3959_x-ww_8251BDDE
57b80000 Wship6.dll 5.2.3790.3959 C:\WINDOWS\system32
5e9a0000 olepro32.dll 5.2.3790.3959 C:\WINDOWS\system32
5f270000 hnetcfg.dll 5.2.3790.3959 C:\WINDOWS\system32
71ae0000 wshtcpip.dll 5.2.3790.3959 C:\WINDOWS\System32
71b20000 mswsock.dll 5.2.3790.3959 C:\WINDOWS\System32
71b70000 UxTheme.dll 6.0.3790.3959 C:\WINDOWS\system32
71bb0000 wsock32.dll 5.2.3790.0 C:\WINDOWS\system32
71bc0000 rdpsnd.dll 5.2.3790.0 C:\WINDOWS\system32
71bf0000 WS2HELP.dll 5.2.3790.3959 C:\WINDOWS\system32
71c00000 WS2_32.dll 5.2.3790.3959 C:\WINDOWS\system32
71c40000 netapi32.dll 5.2.3790.3959 C:\WINDOWS\system32
73070000 winspool.drv 5.2.3790.3959 C:\WINDOWS\system32
76280000 msimg32.dll 5.2.3790.0 C:\WINDOWS\system32
762b0000 comdlg32.dll 6.0.3790.3959 C:\WINDOWS\system32
76aa0000 winmm.dll 5.2.3790.3959 C:\WINDOWS\system32
76b70000 PSAPI.DLL 5.2.3790.3959 C:\WINDOWS\system32
76ed0000 DNSAPI.dll 5.2.3790.3959 C:\WINDOWS\system32
76f00000 wtsapi32.dll 5.2.3790.3959 C:\WINDOWS\system32
76f10000 WLDAP32.dll 5.2.3790.3959 C:\WINDOWS\system32
76f50000 Secur32.dll 5.2.3790.3959 C:\WINDOWS\system32
76f70000 winrnr.dll 5.2.3790.3959 C:\WINDOWS\System32
76f80000 rasadhlp.dll 5.2.3790.3959 C:\WINDOWS\system32
770e0000 SETUPAPI.dll 5.2.3790.3959 C:\WINDOWS\system32
771f0000 WINSTA.dll 5.2.3790.3959 C:\WINDOWS\system32
77380000 USER32.dll 5.2.3790.4033 C:\WINDOWS\system32
77420000 comctl32.dll 6.0.3790.3959
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.3959_x-ww_D8713E55
77530000 comctl32.dll 5.82.3790.3959
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0
77670000 ole32.dll 5.2.3790.3959 C:\WINDOWS\system32
77b90000 version.dll 5.2.3790.3959 C:\WINDOWS\system32
77ba0000 msvcrt.dll 7.0.3790.3959 C:\WINDOWS\system32
77c00000 GDI32.dll 5.2.3790.4033 C:\WINDOWS\system32
77c50000 RPCRT4.dll 5.2.3790.3959 C:\WINDOWS\system32
77d00000 oleaut32.dll 5.2.3790.3959 C:\WINDOWS\system32
77da0000 SHLWAPI.dll 6.0.3790.3959 C:\WINDOWS\system32
77e40000 kernel32.dll 5.2.3790.4062 C:\WINDOWS\system32
77f50000 ADVAPI32.dll 5.2.3790.3959 C:\WINDOWS\system32
7c800000 ntdll.dll 5.2.3790.3959 C:\WINDOWS\system32
7c8d0000 shell32.dll 6.0.3790.3959 C:\WINDOWS\system32
7fe00000 oleacc.dll 4.2.5406.0 C:\WINDOWS\system32
processes:
0000 Idle 0
0004 System 0 normal
012c smss.exe 0 normal C:\WINDOWS\system32
015c csrss.exe 0 normal C:\WINDOWS\system32
0178 winlogon.exe 0 high C:\WINDOWS\system32
01a8 services.exe 0 normal C:\WINDOWS\system32
01b4 lsass.exe 0 normal C:\WINDOWS\system32
0254 svchost.exe 0 normal C:\WINDOWS\system32
02ac svchost.exe 0 normal C:\WINDOWS\system32
02ec svchost.exe 0 normal C:\WINDOWS\system32
0314 svchost.exe 0 normal C:\WINDOWS\system32
0324 agent.exe 0 normal C:\Program Files\Cisco
Systems\SSL VPN Client
0348 svchost.exe 0 normal C:\WINDOWS\System32
03d0 spoolsv.exe 0 normal C:\WINDOWS\system32
03e8 msdtc.exe 0 normal C:\WINDOWS\system32
0450 cisvc.exe 0 normal C:\WINDOWS\system32
0470 svchost.exe 0 normal C:\WINDOWS\System32
04dc inetinfo.exe 0 normal C:\WINDOWS\system32\inetsrv
0520 CrmDeletionService.exe 0 normal D:\Program Files\Microsoft
CRM\Server\bin
05b0 CrmWorkflowService.exe 0 normal D:\Program Files\Microsoft
CRM\Server\bin
05dc MsDtsSrvr.exe 0 normal C:\Program Files\Microsoft SQL
Server\90\DTS\Binn
0638 msftesql.exe 0 normal C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\Binn
0648 sqlservr.exe 0 normal C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\Binn
066c msmdsrv.exe 0 normal C:\Program Files\Microsoft SQL
Server\MSSQL.2\OLAP\bin
082c svchost.exe 0 normal C:\WINDOWS\system32
083c ReportingServicesService.exe 0 normal C:\Program Files\Microsoft SQL
Server\MSSQL.3\Reporting Services\ReportServer\bin
08c8 r_server.exe 0 normal C:\WINDOWS\system32
08e4 snmp.exe 0 normal C:\WINDOWS\System32
0934 vmh.exe 0 normal C:\Program Files\Microsoft
Virtual Server
0988 vssrvc.exe 0 normal C:\Program Files\Microsoft
Virtual Server
09c0 svchost.exe 0 normal C:\WINDOWS\System32
0c7c SQLAGENT90.EXE 0 normal C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\Binn
0f70 wmiprvse.exe 0 normal C:\WINDOWS\system32\wbem
0ba0 svchost.exe 0 normal C:\WINDOWS\System32
0a60 cidaemon.exe 0 idle C:\WINDOWS\system32
0558 cidaemon.exe 0 idle C:\WINDOWS\system32
05f4 cidaemon.exe 0 idle C:\WINDOWS\system32
0d40 csrss.exe 2 normal C:\WINDOWS\system32
0458 winlogon.exe 2 high C:\WINDOWS\system32
033c rdpclip.exe 0 normal C:\WINDOWS\system32
0364 Explorer.EXE 0 normal C:\WINDOWS
1078 taskmgr.exe 0 high C:\WINDOWS\system32
1200 logon.scr 2 idle C:\WINDOWS\system32
11e8 ESUITE_Server.exe 0 normal C:\ESUITE
15fc mmc.exe 0 normal C:\WINDOWS\system32
1628 ESUITE_FP.exe 0 normal C:\ESUITE
0f04 ESUITE_IPREC.EXE 0 normal C:\ESUITE
cpu registers:
eax = 00000000
ebx = 01cbb4e0
ecx = 0012f6d0
edx = 01cbb4e0
esi = 03030f1f
edi = 0012f790
eip = 004fe0db
esp = 0012f69c
ebp = 0012f6d0
stack dump:
0012f69c 35 01 00 00 e4 e1 4f 00 - dd 9a 51 00 e8 9a 51 00
5.....O...Q...Q.
0012f6ac 1f 0f 03 03 a0 64 64 03 - 62 30 40 00 21 49 40 00
.....dd.b0@.!I@.
0012f6bc 01 e9 cb 01 15 4d 40 00 - e0 b4 cb 01 08 f7 12 00
.....M@.........
0012f6cc a0 64 64 03 00 f7 12 00 - fb 68 4b 00 e4 f6 12 00
.dd......hK.....
0012f6dc b0 51 40 00 00 f7 12 00 - ac f7 12 00 80 4f 40 00
.Q@..........O@.
0012f6ec 00 f7 12 00 90 f7 12 00 - 1f 0f 03 03 00 00 00 00
................
0012f6fc a0 64 64 03 18 f7 12 00 - 06 b5 47 00 35 01 00 00
.dd.......G.5...
0012f70c f4 06 01 ad 40 02 34 05 - 84 04 10 14 44 f7 12 00
....@.4.....D...
0012f71c e3 b6 39 77 1c 02 85 01 - 35 01 00 00 f4 06 01 ad
..9w....5.......
0012f72c 40 02 34 05 1f 0f 03 03 - cd ab ba dc 00 00 00 00
@.4.............
0012f73c 90 f7 12 00 1f 0f 03 03 - bc f7 12 00 74 b8 39 77
............t.9w
0012f74c 1f 0f 03 03 1c 02 85 01 - 35 01 00 00 f4 06 01 ad
........5.......
0012f75c 40 02 34 05 00 00 00 00 - 1c 02 85 01 0b 06 01 ad
@.4.............
0012f76c 24 00 00 00 01 00 00 00 - 00 00 00 00 00 00 00 00
$...............
0012f77c 30 00 00 00 ff ff ff ff - ff ff ff ff 2a b8 39 77
0...........*.9w
0012f78c 00 00 00 00 00 00 00 00 - e9 8e 52 00 00 00 00 00
..........R.....
0012f79c 00 00 00 00 00 00 00 00 - 60 f7 12 00 f4 06 1a 00
........`.......
0012f7ac 08 f8 12 00 18 af 3a 77 - 90 b8 39 77 00 00 00 00
......:w..9w....
0012f7bc 18 f8 12 00 b8 c8 39 77 - 00 00 00 00 1f 0f 03 03
......9w........
0012f7cc 1c 02 85 01 35 01 00 00 - f4 06 01 ad 40 02 34 05
....5.......@.4.
disassembling:
004fe0d0 public cxClasses.TcxObjectLinkController.RemoveLink: ;
function entry point
004fe0d0 1325 push ebx
004fe0d1 mov ebx, edx
004fe0d3 1326 cmp dword ptr [ebx+4], 0
004fe0d7 jz loc_4fe0e3
004fe0d9 1327 mov edx, ebx
004fe0db > mov eax, [eax+4]
004fe0de call -$8e36f ($46fd74) ; Classes.TList.Remove
004fe0e3 1328 mov eax, ebx
004fe0e5 call -$f978e ($40495c) ; System.TObject.Free
004fe0ea 1329 pop ebx
004fe0eb ret
error details:
qq
Thanks.
--
Open your mind
Deny ignorance
Demand truth
