Out of memory exception
Posted: Wed Jan 23, 2019 1:29 am
I have spurious out of Memory exceptions in a software that runs 24/7 in a machine.
The bugreport Information is not specific enough the find the cause.
The PC runs Windows10 LTSC.
The Task manager / ressource monitor Shows no problems, there is enough free Memory.
Is it possible to find some Information About the cause of such a problem.
MadExcept Settings are standard.
Here is the bugreport :
The bugreport Information is not specific enough the find the cause.
The PC runs Windows10 LTSC.
The Task manager / ressource monitor Shows no problems, there is enough free Memory.
Is it possible to find some Information About the cause of such a problem.
MadExcept Settings are standard.
Here is the bugreport :
Code: Select all
date/time : 2019-01-22, 05:31:11, 866ms
computer name : DESKTOP-ETTPVLC
user name : PMA776
registered owner : Windows User
operating system : Windows 10 x64 build 14393
system language : German
system up time : 14 hours 39 minutes
program up time : 13 hours 8 minutes
processors : 4x Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
physical memory : 1709/3975 MB (free/total)
free disk space : (C:) 449.48 GB
display mode : 1280x1024, 32 bit
process id : $1704
allocated memory : 1.69 GB
largest free block : 4.75 MB
executable : Pma776_2019.exe
exec. date/time : 2019-01-21 16:16
version : 776.2019.0.176
compiled with : Delphi 10.2 Tokyo
madExcept version : 4.0.17
callstack crc : $0040fcb5, $4f819fa8, $4f819fa8
exception number : 2
exception class : EOutOfMemory
exception message : Zu wenig Arbeitsspeicher.
main thread ($2e0):
0040fcb5 +000 Pma776_2019.exe
749375c4 +1b4 USER32.dll GetWindowLongW
77b40fd4 +034 ntdll.dll KiUserCallbackDispatcher
7492dfdb +00b USER32.dll DispatchMessageW
770262c2 +022 KERNEL32.DLL BaseThreadInitThunk
thread $b3c: <priority:15>
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76a12313 +13 KERNELBASE.dll WaitForMultipleObjects
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
00973bdc +00 Pma776_2019.exe
thread $1494: <priority:2>
7494252d +4d USER32.dll GetMessageA
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
70b930ab +00 winmm.dll
thread $14c0 (TnxSimpleTimerThread): <priority:2>
76a0b5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
76a0b54d +0d KERNELBASE.dll WaitForSingleObject
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
00991370 +00 Pma776_2019.exe
thread $16fc (TReadThread):
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
0071bb50 +00 Pma776_2019.exe
thread $178c (TDispThread):
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
0071bb50 +00 Pma776_2019.exe
thread $1738 (TWriteThread):
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76a12313 +13 KERNELBASE.dll WaitForMultipleObjects
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
0071bb50 +00 Pma776_2019.exe
thread $11bc (TStatusThread):
76a0b5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
76a0b54d +0d KERNELBASE.dll WaitForSingleObject
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
0071bb50 +00 Pma776_2019.exe
thread $1460 (TOmniThread):
76a1241a +0ea KERNELBASE.dll WaitForMultipleObjectsEx
749389d1 +171 USER32.dll MsgWaitForMultipleObjectsEx
770262c2 +022 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
01c24629 +000 Pma776_2019.exe
thread $9cc:
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76a12313 +13 KERNELBASE.dll WaitForMultipleObjects
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
115016dd +00 MscDll.dll
thread $5cc:
76a1241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76a12313 +13 KERNELBASE.dll WaitForMultipleObjects
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($2e0) at:
115016dd +00 MscDll.dll
thread $2b0:
770262c2 +22 KERNEL32.DLL BaseThreadInitThunk
modules:
00400000 Pma776_2019.exe 776.2019.0.176 C:\PMA776_2019\PC\source_D103
0b280000 psapi.dll 10.0.14393.0 C:\Windows\System32
114d0000 MscDll.dll 1.22.0.0 C:\PMA776_2019\PC\source_D103
6d000000 npmproxy.dll 10.0.14393.2457 C:\Windows\System32
6d010000 netprofm.dll 10.0.14393.2457 C:\Windows\System32
6d040000 WindowsCodecs.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6d1b0000 DWrite.dll 10.0.14393.2608 C:\Windows\SYSTEM32
6d3b0000 msimg32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d3c0000 WINSTA.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d410000 wtsapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d420000 ntmarta.dll 10.0.14393.1378 C:\Windows\SYSTEM32
6d450000 oleacc.dll 7.2.14393.2636 C:\Windows\SYSTEM32
6d4b0000 winspool.drv 10.0.14393.2608 C:\Windows\SYSTEM32
6d520000 FONTSUB.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6d540000 usp10.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d560000 SHFolder.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d570000 oledlg.dll 10.0.14393.0 C:\Windows\SYSTEM32
6daa0000 olepro32.dll 10.0.14393.2636 C:\Windows\SYSTEM32
70340000 msxml6.dll 6.30.14393.2636 C:\Windows\System32
70850000 NETUTILS.DLL 10.0.14393.0 C:\Windows\SYSTEM32
70890000 dbgcore.DLL 10.0.14321.1024 C:\Windows\SYSTEM32
708c0000 WINMMBASE.dll 10.0.14393.0 C:\Windows\SYSTEM32
708f0000 mswsock.dll 10.0.14393.0 C:\Windows\system32
70b90000 winmm.dll 10.0.14393.0 C:\Windows\SYSTEM32
70bc0000 mpr.dll 10.0.14393.1613 C:\Windows\SYSTEM32
70be0000 iertutil.dll 11.0.14393.2636 C:\Windows\SYSTEM32
70f10000 netapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
70f50000 dbghelp.dll 10.0.14321.1024 C:\Windows\SYSTEM32
71130000 uxtheme.dll 10.0.14393.2248 C:\Windows\system32
711b0000 dwmapi.dll 10.0.14393.206 C:\Windows\system32
711d0000 gdiplus.dll 10.0.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.2608_none_f672f63af255aa62
71340000 COMCTL32.dll 6.10.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.2608_none_c588035597c33094
72a60000 propsys.DLL 7.0.14393.2457 C:\Windows\SYSTEM32
72d10000 wsock32.dll 10.0.14393.0 C:\Windows\SYSTEM32
72d20000 FaultRep.dll 10.0.14393.2608 C:\Windows\SYSTEM32
72e30000 version.dll 10.0.14393.0 C:\Windows\SYSTEM32
72e40000 URLMON.DLL 11.0.14393.2608 C:\Windows\SYSTEM32
73db0000 bcrypt.dll 10.0.14393.2312 C:\Windows\SYSTEM32
745a0000 CRYPTBASE.dll 10.0.14393.0 C:\Windows\System32
745b0000 SspiCli.dll 10.0.14393.2580 C:\Windows\System32
74740000 gdi32full.dll 10.0.14393.2551 C:\Windows\System32
748a0000 msvcp_win.dll 10.0.14393.2097 C:\Windows\System32
74920000 USER32.dll 10.0.14393.2273 C:\Windows\System32
74a80000 windows.storage.dll 10.0.14393.2636 C:\Windows\System32
74ff0000 ole32.dll 10.0.14393.2608 C:\Windows\System32
750e0000 combase.dll 10.0.14393.2636 C:\Windows\System32
752f0000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32
753e0000 IMM32.DLL 10.0.14393.0 C:\Windows\System32
75410000 bcryptPrimitives.dll 10.0.14393.2457 C:\Windows\System32
75470000 sechost.dll 10.0.14393.2515 C:\Windows\System32
754c0000 oleaut32.dll 10.0.14393.2273 C:\Windows\System32
75560000 SHELL32.dll 10.0.14393.2636 C:\Windows\System32
76940000 KERNELBASE.dll 10.0.14393.2636 C:\Windows\System32
76af0000 comdlg32.dll 10.0.14393.2457 C:\Windows\System32
77010000 KERNEL32.DLL 10.0.14393.2608 C:\Windows\System32
770f0000 MSCTF.dll 10.0.14393.2273 C:\Windows\System32
77230000 shcore.dll 10.0.14393.2636 C:\Windows\System32
772c0000 GDI32.dll 10.0.14393.2608 C:\Windows\System32
77310000 ws2_32.dll 10.0.14393.206 C:\Windows\System32
77420000 ADVAPI32.dll 10.0.14393.2515 C:\Windows\System32
774a0000 msvcrt.dll 7.0.14393.2457 C:\Windows\System32
77560000 ucrtbase.dll 10.0.14393.2636 C:\Windows\System32
77640000 cfgmgr32.dll 10.0.14393.0 C:\Windows\System32
77680000 RPCRT4.dll 10.0.14393.2608 C:\Windows\System32
77810000 profapi.dll 10.0.14393.0 C:\Windows\System32
77a00000 shlwapi.dll 10.0.14393.0 C:\Windows\System32
77a50000 win32u.dll 10.0.14393.51 C:\Windows\System32
77a70000 kernel.appcore.dll 10.0.14393.2312 C:\Windows\System32
77a80000 powrprof.dll 10.0.14393.0 C:\Windows\System32
77ad0000 ntdll.dll 10.0.14393.2608 C:\Windows\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
013c smss.exe 0 0 0
01b8 csrss.exe 0 0 0
020c wininit.exe 0 0 0
0218 csrss.exe 1 0 0
0268 winlogon.exe 1 0 0
0294 services.exe 0 0 0
02a0 lsass.exe 0 0 0
0300 svchost.exe 0 0 0
0344 svchost.exe 0 0 0
03b4 dwm.exe 1 0 0
03c4 svchost.exe 0 0 0
03dc svchost.exe 0 0 0
01d4 svchost.exe 0 0 0
02d8 svchost.exe 0 0 0
040c svchost.exe 0 0 0
0490 svchost.exe 0 0 0
0514 igfxCUIService.exe 0 0 0
05c0 svchost.exe 0 0 0
05ec svchost.exe 0 0 0
0664 spoolsv.exe 0 0 0
0754 armsvc.exe 0 0 0
0780 svchost.exe 0 0 0
078c svchost.exe 0 0 0
0770 Memory Compression 0 0 0
0830 MsMpEng.exe 0 0 0
0bac NisSrv.exe 0 0 0
029c sihost.exe 1 4 12 normal C:\Windows\System32
0a10 svchost.exe 1 4 1 normal C:\Windows\System32
07b8 taskhostw.exe 1 13 14 normal C:\Windows\System32
0c30 igfxEM.exe 1 13 19 normal C:\Windows\System32
0c78 igfxHK.exe 1 13 14 normal C:\Windows\System32
0c94 igfxTray.exe 1 7 4 normal C:\Windows\System32
0d3c ChsIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHS
0d8c ChtIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHT
0e00 explorer.exe 1 229 244 normal C:\Windows
0e1c RuntimeBroker.exe 1 35 4 normal C:\Windows\System32
0f2c SearchIndexer.exe 0 0 0
0f88 ShellExperienceHost.exe 1 6 55 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
0bb4 SearchUI.exe 1 17 49 normal C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy
1100 MSASCuiL.exe 1 389 135 normal C:\Program Files\Windows Defender
1284 OneDrive.exe 1 74 60 normal C:\Users\PMA776\AppData\Local\Microsoft\OneDrive
0370 svchost.exe 0 0 0
0818 ApplicationFrameHost.exe 1 23 11 normal C:\Windows\System32
16b0 fontdrvhost.exe 1 0 0
1710 SystemSettings.exe 1 11 36 normal C:\Windows\ImmersiveControlPanel
097c MpCmdRun.exe 0 0 0
1704 Pma776_2019.exe 1 519 255 normal C:\PMA776_2019\PC\source_D103
17a8 dllhost.exe 1 4 3 normal C:\Windows\System32
072c taskhostw.exe 1 0 0
0c60 AdobeARM.exe 1 4 3 below normal C:\Program Files (x86)\Common Files\Adobe\ARM\1.0
07e0 audiodg.exe 0 0 0
cpu registers:
eax = 0a2099d0
ebx = 0040fcb5
ecx = 004532e0
edx = 0019f648
esi = 0040fcb5
edi = 00000008
eip = 0040fcb5
esp = 0019f678
ebp = 0019f6c0
stack dump:
0019f678 b5 fc 40 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..@.............
0019f688 8c f6 19 00 b5 fc 40 00 - d0 99 20 0a b5 fc 40 00 ......@... ...@.
0019f698 b5 fc 40 00 08 00 00 00 - c0 f6 19 00 a8 f6 19 00 ..@.............
0019f6a8 01 00 00 00 70 76 40 00 - 18 00 00 00 02 00 00 00 ....pv@.........
0019f6b8 b3 76 40 00 d4 f6 19 01 - f8 f6 19 00 b5 fc 40 00 .v@...........@.
0019f6c8 50 f7 19 00 34 30 8d 0c - 43 0e 01 1b 58 53 bc 11 P...40..C...XS..
0019f6d8 58 53 bc 11 00 00 00 00 - b1 e3 db 01 01 00 00 00 XS..............
0019f6e8 f0 02 a1 0b 01 00 00 00 - 5c 93 db 01 a8 50 a1 0b ........\....P..
0019f6f8 30 f7 19 00 f6 fd 40 00 - 08 f7 19 00 61 93 23 02 0.....@.....a.#.
0019f708 02 00 00 00 43 0e 01 1b - 01 00 00 00 60 53 bc 11 ....C.......`S..
0019f718 01 00 00 00 a8 50 a1 0b - 01 00 00 00 00 00 00 00 .....P..........
0019f728 5c f7 19 00 f0 02 a1 0b - 88 f7 19 00 42 56 33 02 \...........BV3.
0019f738 b8 f7 19 00 a8 f7 19 00 - 01 00 00 00 e8 02 00 00 ................
0019f748 4e 00 00 00 07 03 00 00 - 00 00 00 00 13 00 00 00 N...............
0019f758 10 00 00 00 00 00 27 00 - 00 00 f0 02 f0 02 00 00 ......'.........
0019f768 00 00 36 00 00 00 ff 02 - 36 00 00 00 27 00 00 00 ..6.....6...'...
0019f778 ff 02 00 00 0f 00 00 00 - e0 f6 8e 0c 90 2c 8d 0c .............,..
0019f788 bc f7 19 00 eb 54 33 02 - 00 00 00 00 90 2c 8d 0c .....T3......,..
0019f798 06 00 00 00 e6 02 00 00 - 49 00 00 00 e6 02 00 00 ........I.......
0019f7a8 06 00 00 00 e6 02 00 00 - 49 00 00 00 e6 02 00 00 ........I.......
disassembling:
[...]
749375bc jns loc_749375d6
749375be push ebx
749375bf push esi
749375c0 xor edx, edx
749375c2 mov ecx, edi
749375c4 > call +$87 ($74937650)
749375c9 mov edi, eax
749375cb jmp loc_74937589
749375cd test edi, edi
749375cf js loc_749375be
749375d1 jmp loc_74959fff
[...]
date/time : 2019-01-23, 03:08:50, 689ms
computer name : DESKTOP-ETTPVLC
user name : PMA776
registered owner : Windows User
operating system : Windows 10 x64 build 14393
system language : German
system up time : 19 hours 52 minutes
program up time : 4 hours 27 minutes
processors : 4x Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
physical memory : 1256/3975 MB (free/total)
free disk space : (C:) 449.43 GB
display mode : 1280x1024, 32 bit
process id : $1090
allocated memory : 1.72 GB
largest free block : 1.18 MB
executable : Pma776_2019.exe
exec. date/time : 2019-01-22 16:26
version : 776.2019.0.178
compiled with : Delphi 10.2 Tokyo
madExcept version : 4.0.17
callstack crc : $022375ad, $72a0c614, $72a0c614
count : 2
exception number : 2
exception class : EOutOfMemory
exception message : Zu wenig Arbeitsspeicher.
main thread ($b24):
022375ad +000 Pma776_2019.exe
746675c4 +1b4 USER32.dll GetWindowLongW
77900fd4 +034 ntdll.dll KiUserCallbackDispatcher
7465dfdb +00b USER32.dll DispatchMessageW
749662c2 +022 KERNEL32.DLL BaseThreadInitThunk
thread $a34: <priority:15>
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
00973bdc +00 Pma776_2019.exe
thread $1088: <priority:2>
7467252d +4d USER32.dll GetMessageA
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
709530ab +00 winmm.dll
thread $111c (TnxSimpleTimerThread): <priority:2>
765fb5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
765fb54d +0d KERNELBASE.dll WaitForSingleObject
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
00991370 +00 Pma776_2019.exe
thread $930 (TReadThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
0071bb50 +00 Pma776_2019.exe
thread $11dc (TDispThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
0071bb50 +00 Pma776_2019.exe
thread $83c (TWriteThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
0071bb50 +00 Pma776_2019.exe
thread $270 (TStatusThread):
765fb5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
765fb54d +0d KERNELBASE.dll WaitForSingleObject
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
0071bb50 +00 Pma776_2019.exe
thread $b40 (TOmniThread):
7660241a +0ea KERNELBASE.dll WaitForMultipleObjectsEx
746689d1 +171 USER32.dll MsgWaitForMultipleObjectsEx
749662c2 +022 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
01c245c1 +000 Pma776_2019.exe
thread $1168:
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
10bf16dd +00 MscDll.dll
thread $110:
76034ef9 +c9 ws2_32.dll sendto
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($b24) at:
10bf16dd +00 MscDll.dll
modules:
001d0000 WINMMBASE.dll 10.0.14393.0 C:\Windows\SYSTEM32
00400000 Pma776_2019.exe 776.2019.0.178 C:\PMA776_2019\PC\source_D103
10bc0000 MscDll.dll 1.22.0.0 C:\PMA776_2019\PC\source_D103
6cc70000 DUser.dll 10.0.14393.0 C:\Windows\SYSTEM32
6ccf0000 WindowsCodecs.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6ce80000 DWrite.dll 10.0.14393.2608 C:\Windows\SYSTEM32
6d080000 msimg32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d090000 WINSTA.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d0e0000 wtsapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d0f0000 ntmarta.dll 10.0.14393.1378 C:\Windows\SYSTEM32
6d120000 winspool.drv 10.0.14393.2608 C:\Windows\SYSTEM32
6d190000 FONTSUB.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6d1b0000 oleacc.dll 7.2.14393.2636 C:\Windows\SYSTEM32
6d210000 usp10.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d230000 SHFolder.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d240000 oledlg.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d770000 olepro32.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6fd00000 atlthunk.dll 10.0.14393.2457 C:\Windows\SYSTEM32
70100000 msxml6.dll 6.30.14393.2636 C:\Windows\System32
70610000 NETUTILS.DLL 10.0.14393.0 C:\Windows\SYSTEM32
707d0000 dbgcore.DLL 10.0.14321.1024 C:\Windows\SYSTEM32
70900000 mswsock.dll 10.0.14393.0 C:\Windows\system32
70950000 winmm.dll 10.0.14393.0 C:\Windows\SYSTEM32
70980000 mpr.dll 10.0.14393.1613 C:\Windows\SYSTEM32
70b20000 iertutil.dll 11.0.14393.2636 C:\Windows\SYSTEM32
70d60000 netapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
70da0000 dbghelp.dll 10.0.14321.1024 C:\Windows\SYSTEM32
71d10000 propsys.DLL 7.0.14393.2457 C:\Windows\SYSTEM32
72430000 COMCTL32.dll 6.10.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.2608_none_c588035597c33094
72830000 uxtheme.dll 10.0.14393.2248 C:\Windows\system32
728b0000 dwmapi.dll 10.0.14393.206 C:\Windows\system32
728f0000 wsock32.dll 10.0.14393.0 C:\Windows\SYSTEM32
72970000 FaultRep.dll 10.0.14393.2608 C:\Windows\SYSTEM32
729e0000 URLMON.DLL 11.0.14393.2608 C:\Windows\SYSTEM32
72c20000 gdiplus.dll 10.0.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.2608_none_f672f63af255aa62
72d90000 version.dll 10.0.14393.0 C:\Windows\SYSTEM32
73b70000 bcrypt.dll 10.0.14393.2312 C:\Windows\SYSTEM32
74360000 CRYPTBASE.dll 10.0.14393.0 C:\Windows\System32
74370000 SspiCli.dll 10.0.14393.2580 C:\Windows\System32
74390000 ucrtbase.dll 10.0.14393.2636 C:\Windows\System32
745f0000 bcryptPrimitives.dll 10.0.14393.2457 C:\Windows\System32
74650000 USER32.dll 10.0.14393.2273 C:\Windows\System32
747b0000 powrprof.dll 10.0.14393.0 C:\Windows\System32
74800000 shcore.dll 10.0.14393.2636 C:\Windows\System32
74890000 msvcrt.dll 7.0.14393.2457 C:\Windows\System32
74950000 KERNEL32.DLL 10.0.14393.2608 C:\Windows\System32
74a30000 RPCRT4.dll 10.0.14393.2608 C:\Windows\System32
74b00000 oleaut32.dll 10.0.14393.2273 C:\Windows\System32
74ba0000 SHELL32.dll 10.0.14393.2636 C:\Windows\System32
76030000 ws2_32.dll 10.0.14393.206 C:\Windows\System32
760a0000 ADVAPI32.dll 10.0.14393.2515 C:\Windows\System32
76290000 gdi32full.dll 10.0.14393.2551 C:\Windows\System32
763f0000 sechost.dll 10.0.14393.2515 C:\Windows\System32
76440000 ole32.dll 10.0.14393.2608 C:\Windows\System32
76530000 KERNELBASE.dll 10.0.14393.2636 C:\Windows\System32
76790000 cfgmgr32.dll 10.0.14393.0 C:\Windows\System32
767d0000 kernel.appcore.dll 10.0.14393.2312 C:\Windows\System32
767e0000 win32u.dll 10.0.14393.51 C:\Windows\System32
76800000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32
76890000 psapi.dll 10.0.14393.0 C:\Windows\System32
768a0000 MSCTF.dll 10.0.14393.2273 C:\Windows\System32
769e0000 comdlg32.dll 10.0.14393.2457 C:\Windows\System32
76ad0000 windows.storage.dll 10.0.14393.2636 C:\Windows\System32
77100000 IMM32.DLL 10.0.14393.0 C:\Windows\System32
77140000 combase.dll 10.0.14393.2636 C:\Windows\System32
77350000 GDI32.dll 10.0.14393.2608 C:\Windows\System32
77380000 profapi.dll 10.0.14393.0 C:\Windows\System32
777b0000 shlwapi.dll 10.0.14393.0 C:\Windows\System32
77800000 msvcp_win.dll 10.0.14393.2097 C:\Windows\System32
77890000 ntdll.dll 10.0.14393.2608 C:\Windows\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
0130 smss.exe 0 0 0
01a0 csrss.exe 0 0 0
01f4 wininit.exe 0 0 0
0200 csrss.exe 1 0 0
0250 winlogon.exe 1 0 0
0274 services.exe 0 0 0
028c lsass.exe 0 0 0
02f0 svchost.exe 0 0 0
0338 svchost.exe 0 0 0
039c svchost.exe 0 0 0
03c4 dwm.exe 1 0 0
03e0 svchost.exe 0 0 0
044c svchost.exe 0 0 0
0448 svchost.exe 0 0 0
0490 svchost.exe 0 0 0
04e8 igfxCUIService.exe 0 0 0
0534 svchost.exe 0 0 0
0560 svchost.exe 0 0 0
05e0 svchost.exe 0 0 0
066c spoolsv.exe 0 0 0
0780 svchost.exe 0 0 0
07c8 svchost.exe 0 0 0
07f0 Memory Compression 0 0 0
077c MsMpEng.exe 0 0 0
08bc armsvc.exe 0 0 0
0a40 sihost.exe 1 4 12 normal C:\Windows\System32
09fc NisSrv.exe 0 0 0
0208 svchost.exe 1 4 1 normal C:\Windows\System32
091c taskhostw.exe 1 13 15 normal C:\Windows\System32
0cb4 igfxEM.exe 1 13 19 normal C:\Windows\System32
0cf0 igfxHK.exe 1 13 14 normal C:\Windows\System32
0d04 igfxTray.exe 1 7 4 normal C:\Windows\System32
0d74 ChsIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHS
0db0 ChtIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHT
0e24 explorer.exe 1 285 244 normal C:\Windows
0e40 RuntimeBroker.exe 1 35 3 normal C:\Windows\System32
0f5c SearchIndexer.exe 0 0 0
0f74 ShellExperienceHost.exe 1 4 47 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
0aa8 SearchUI.exe 1 19 48 normal C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy
1258 MSASCuiL.exe 1 389 135 normal C:\Program Files\Windows Defender
1280 OneDrive.exe 1 74 60 normal C:\Users\PMA776\AppData\Local\Microsoft\OneDrive
1388 fontdrvhost.exe 1 0 0
1194 svchost.exe 0 0 0
117c svchost.exe 0 0 0
03dc ApplicationFrameHost.exe 1 20 10 normal C:\Windows\System32
0544 SystemSettings.exe 1 11 36 normal C:\Windows\ImmersiveControlPanel
133c TOTALCMD64.EXE 1 462 339 normal C:\totalcmd
0390 dllhost.exe 1 4 3 normal C:\Windows\System32
06c0 TOTALCMD64.EXE 1 383 305 normal C:\totalcmd
0570 MpCmdRun.exe 0 0 0
1090 Pma776_2019.exe 1 494 250 normal C:\PMA776_2019\PC\source_D103
128c audiodg.exe 0 0 0
cpu registers:
eax = 08b099d0
ebx = 022375ad
ecx = 004532e0
edx = 001800bc
esi = 022375ad
edi = 00180310
eip = 022375ad
esp = 001800ec
ebp = 00180134
stack dump:
001800ec ad 75 23 02 de fa ed 0e - 01 00 00 00 07 00 00 00 .u#.............
001800fc 00 01 18 00 ad 75 23 02 - d0 99 b0 08 ad 75 23 02 .....u#......u#.
0018010c ad 75 23 02 10 03 18 00 - 34 01 18 00 1c 01 18 00 .u#.....4.......
0018011c 01 00 00 00 70 76 40 00 - 34 21 fd 0b 00 00 00 00 ....pv@.4!......
0018012c b3 76 40 00 70 50 f6 01 - 50 01 18 00 ad 75 23 02 .v@.pP..P....u#.
0018013c 6c 50 f6 0b 00 00 00 00 - 24 02 18 00 ff 02 00 00 lP......$.......
0018014c 00 36 00 80 98 01 18 00 - 88 76 23 02 ff ff ff ff .6.......v#.....
0018015c b8 4f f6 0b 0f 00 00 00 - 00 00 00 00 ff ff ff ff .O..............
0018016c ff ff ff ff 0f 00 00 00 - 00 0f 00 00 72 c5 32 76 ............r.2v
0018017c 00 00 00 00 ff 02 00 00 - 00 36 00 00 ff ff ff ff .........6......
0018018c 24 02 18 00 c8 01 18 00 - d0 01 18 00 e4 01 18 00 $...............
0018019c 7e 7b 23 02 b8 4f f6 0b - 03 00 00 00 03 00 00 00 ~{#..O..........
001801ac 03 00 00 00 02 00 00 00 - 01 00 00 00 c8 01 18 00 ................
001801bc 38 77 23 02 00 55 5c 0b - 01 00 00 00 00 27 00 00 8w#..U\......'..
001801cc f0 02 00 00 00 36 00 00 - ff 02 00 00 88 02 18 00 .....6..........
001801dc 24 02 18 00 f8 54 5c 0b - a8 02 18 00 59 8f 23 02 $....T\.....Y.#.
001801ec 00 00 00 00 05 00 00 00 - 84 03 18 00 f4 c2 40 00 ..............@.
001801fc a8 02 18 00 b6 0e 01 92 - 3c 02 18 00 4c 1a dc 01 ........<...L...
0018020c bc a9 da 01 4d 00 00 00 - e9 02 00 00 4e 00 00 00 ....M.......N...
0018021c 05 03 00 00 00 00 00 80 - 00 00 00 00 f0 02 00 00 ................
disassembling:
[...]
746675bc jns loc_746675d6
746675be push ebx
746675bf push esi
746675c0 xor edx, edx
746675c2 mov ecx, edi
746675c4 > call +$87 ($74667650)
746675c9 mov edi, eax
746675cb jmp loc_74667589
746675cd test edi, edi
746675cf js loc_746675be
746675d1 jmp loc_74689fff
[...]
date/time : 2019-01-23, 06:22:34, 784ms
computer name : DESKTOP-ETTPVLC
user name : PMA776
registered owner : Windows User
operating system : Windows 10 x64 build 14393
system language : German
system up time : 23 hours 6 minutes
program up time : 3 hours 12 minutes
processors : 4x Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
physical memory : 1235/3975 MB (free/total)
free disk space : (C:) 449.43 GB
display mode : 1280x1024, 32 bit
process id : $2a8
allocated memory : 1.72 GB
largest free block : 1.18 MB
executable : Pma776_2019.exe
exec. date/time : 2019-01-22 16:26
version : 776.2019.0.178
compiled with : Delphi 10.2 Tokyo
madExcept version : 4.0.17
callstack crc : $0040acdf, $0cea4c31, $0cea4c31
count : 3
exception number : 2
exception class : EOutOfMemory
exception message : Zu wenig Arbeitsspeicher.
main thread ($e60):
0040acdf +000 Pma776_2019.exe
746675c4 +1b4 USER32.dll GetWindowLongW
77900fd4 +034 ntdll.dll KiUserCallbackDispatcher
7465dfdb +00b USER32.dll DispatchMessageW
749662c2 +022 KERNEL32.DLL BaseThreadInitThunk
thread $6e4: <priority:15>
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
00973bdc +00 Pma776_2019.exe
thread $1104: <priority:2>
7467252d +4d USER32.dll GetMessageA
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
709530ab +00 winmm.dll
thread $11f0 (TnxSimpleTimerThread): <priority:2>
765fb5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
765fb54d +0d KERNELBASE.dll WaitForSingleObject
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
00991370 +00 Pma776_2019.exe
thread $b2c (TReadThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
0071bb50 +00 Pma776_2019.exe
thread $13dc (TDispThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
0071bb50 +00 Pma776_2019.exe
thread $688 (TWriteThread):
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
0071bb50 +00 Pma776_2019.exe
thread $b70 (TStatusThread):
765fb5f3 +93 KERNELBASE.dll WaitForSingleObjectEx
765fb54d +0d KERNELBASE.dll WaitForSingleObject
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
0071bb50 +00 Pma776_2019.exe
thread $13d8 (TOmniThread):
7660241a +0ea KERNELBASE.dll WaitForMultipleObjectsEx
746689d1 +171 USER32.dll MsgWaitForMultipleObjectsEx
749662c2 +022 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
01c245c1 +000 Pma776_2019.exe
thread $c78:
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
10bf16dd +00 MscDll.dll
thread $1b4:
7660241a +ea KERNELBASE.dll WaitForMultipleObjectsEx
76602313 +13 KERNELBASE.dll WaitForMultipleObjects
749662c2 +22 KERNEL32.DLL BaseThreadInitThunk
>> created by main thread ($e60) at:
10bf16dd +00 MscDll.dll
modules:
001d0000 WINMMBASE.dll 10.0.14393.0 C:\Windows\SYSTEM32
00400000 Pma776_2019.exe 776.2019.0.178 C:\PMA776_2019\PC\source_D103
10bc0000 MscDll.dll 1.22.0.0 C:\PMA776_2019\PC\source_D103
6cc90000 DUser.dll 10.0.14393.0 C:\Windows\SYSTEM32
6cd10000 WindowsCodecs.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6ce80000 DWrite.dll 10.0.14393.2608 C:\Windows\SYSTEM32
6d080000 msimg32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d090000 WINSTA.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d0e0000 wtsapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d0f0000 ntmarta.dll 10.0.14393.1378 C:\Windows\SYSTEM32
6d120000 winspool.drv 10.0.14393.2608 C:\Windows\SYSTEM32
6d190000 FONTSUB.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6d1b0000 oleacc.dll 7.2.14393.2636 C:\Windows\SYSTEM32
6d210000 usp10.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d230000 SHFolder.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d240000 oledlg.dll 10.0.14393.0 C:\Windows\SYSTEM32
6d770000 olepro32.dll 10.0.14393.2636 C:\Windows\SYSTEM32
6fd00000 atlthunk.dll 10.0.14393.2457 C:\Windows\SYSTEM32
70100000 msxml6.dll 6.30.14393.2636 C:\Windows\System32
70610000 NETUTILS.DLL 10.0.14393.0 C:\Windows\SYSTEM32
707d0000 dbgcore.DLL 10.0.14321.1024 C:\Windows\SYSTEM32
70900000 mswsock.dll 10.0.14393.0 C:\Windows\system32
70950000 winmm.dll 10.0.14393.0 C:\Windows\SYSTEM32
70980000 mpr.dll 10.0.14393.1613 C:\Windows\SYSTEM32
70b20000 iertutil.dll 11.0.14393.2636 C:\Windows\SYSTEM32
70d60000 netapi32.dll 10.0.14393.0 C:\Windows\SYSTEM32
70da0000 dbghelp.dll 10.0.14321.1024 C:\Windows\SYSTEM32
71d10000 propsys.DLL 7.0.14393.2457 C:\Windows\SYSTEM32
72430000 COMCTL32.dll 6.10.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.2608_none_c588035597c33094
72830000 uxtheme.dll 10.0.14393.2248 C:\Windows\system32
728b0000 dwmapi.dll 10.0.14393.206 C:\Windows\system32
728f0000 wsock32.dll 10.0.14393.0 C:\Windows\SYSTEM32
72970000 FaultRep.dll 10.0.14393.2608 C:\Windows\SYSTEM32
729e0000 URLMON.DLL 11.0.14393.2608 C:\Windows\SYSTEM32
72c20000 gdiplus.dll 10.0.14393.2608 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.2608_none_f672f63af255aa62
72d90000 version.dll 10.0.14393.0 C:\Windows\SYSTEM32
73b70000 bcrypt.dll 10.0.14393.2312 C:\Windows\SYSTEM32
74360000 CRYPTBASE.dll 10.0.14393.0 C:\Windows\System32
74370000 SspiCli.dll 10.0.14393.2580 C:\Windows\System32
74390000 ucrtbase.dll 10.0.14393.2636 C:\Windows\System32
745f0000 bcryptPrimitives.dll 10.0.14393.2457 C:\Windows\System32
74650000 USER32.dll 10.0.14393.2273 C:\Windows\System32
747b0000 powrprof.dll 10.0.14393.0 C:\Windows\System32
74800000 shcore.dll 10.0.14393.2636 C:\Windows\System32
74890000 msvcrt.dll 7.0.14393.2457 C:\Windows\System32
74950000 KERNEL32.DLL 10.0.14393.2608 C:\Windows\System32
74a30000 RPCRT4.dll 10.0.14393.2608 C:\Windows\System32
74b00000 oleaut32.dll 10.0.14393.2273 C:\Windows\System32
74ba0000 SHELL32.dll 10.0.14393.2636 C:\Windows\System32
76030000 ws2_32.dll 10.0.14393.206 C:\Windows\System32
760a0000 ADVAPI32.dll 10.0.14393.2515 C:\Windows\System32
76290000 gdi32full.dll 10.0.14393.2551 C:\Windows\System32
763f0000 sechost.dll 10.0.14393.2515 C:\Windows\System32
76440000 ole32.dll 10.0.14393.2608 C:\Windows\System32
76530000 KERNELBASE.dll 10.0.14393.2636 C:\Windows\System32
76790000 cfgmgr32.dll 10.0.14393.0 C:\Windows\System32
767d0000 kernel.appcore.dll 10.0.14393.2312 C:\Windows\System32
767e0000 win32u.dll 10.0.14393.51 C:\Windows\System32
76800000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32
76890000 psapi.dll 10.0.14393.0 C:\Windows\System32
768a0000 MSCTF.dll 10.0.14393.2273 C:\Windows\System32
769e0000 comdlg32.dll 10.0.14393.2457 C:\Windows\System32
76ad0000 windows.storage.dll 10.0.14393.2636 C:\Windows\System32
77100000 IMM32.DLL 10.0.14393.0 C:\Windows\System32
77140000 combase.dll 10.0.14393.2636 C:\Windows\System32
77350000 GDI32.dll 10.0.14393.2608 C:\Windows\System32
77380000 profapi.dll 10.0.14393.0 C:\Windows\System32
777b0000 shlwapi.dll 10.0.14393.0 C:\Windows\System32
77800000 msvcp_win.dll 10.0.14393.2097 C:\Windows\System32
77890000 ntdll.dll 10.0.14393.2608 C:\Windows\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
0130 smss.exe 0 0 0
01a0 csrss.exe 0 0 0
01f4 wininit.exe 0 0 0
0200 csrss.exe 1 0 0
0250 winlogon.exe 1 0 0
0274 services.exe 0 0 0
028c lsass.exe 0 0 0
02f0 svchost.exe 0 0 0
0338 svchost.exe 0 0 0
039c svchost.exe 0 0 0
03c4 dwm.exe 1 0 0
03e0 svchost.exe 0 0 0
044c svchost.exe 0 0 0
0448 svchost.exe 0 0 0
0490 svchost.exe 0 0 0
04e8 igfxCUIService.exe 0 0 0
0534 svchost.exe 0 0 0
0560 svchost.exe 0 0 0
05e0 svchost.exe 0 0 0
066c spoolsv.exe 0 0 0
0780 svchost.exe 0 0 0
07c8 svchost.exe 0 0 0
07f0 Memory Compression 0 0 0
077c MsMpEng.exe 0 0 0
08bc armsvc.exe 0 0 0
0a40 sihost.exe 1 4 12 normal C:\Windows\System32
09fc NisSrv.exe 0 0 0
0208 svchost.exe 1 4 1 normal C:\Windows\System32
091c taskhostw.exe 1 13 15 normal C:\Windows\System32
0cb4 igfxEM.exe 1 13 19 normal C:\Windows\System32
0cf0 igfxHK.exe 1 13 14 normal C:\Windows\System32
0d04 igfxTray.exe 1 7 4 normal C:\Windows\System32
0d74 ChsIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHS
0db0 ChtIME.exe 1 4 4 normal C:\Windows\System32\InputMethod\CHT
0e24 explorer.exe 1 288 249 normal C:\Windows
0e40 RuntimeBroker.exe 1 35 4 normal C:\Windows\System32
0f5c SearchIndexer.exe 0 0 0
0f74 ShellExperienceHost.exe 1 4 47 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
0aa8 SearchUI.exe 1 19 48 normal C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy
1258 MSASCuiL.exe 1 389 135 normal C:\Program Files\Windows Defender
1280 OneDrive.exe 1 74 60 normal C:\Users\PMA776\AppData\Local\Microsoft\OneDrive
1388 fontdrvhost.exe 1 0 0
1194 svchost.exe 0 0 0
117c svchost.exe 0 0 0
03dc ApplicationFrameHost.exe 1 20 10 normal C:\Windows\System32
0544 SystemSettings.exe 1 11 36 normal C:\Windows\ImmersiveControlPanel
133c TOTALCMD64.EXE 1 462 339 normal C:\totalcmd
0390 dllhost.exe 1 4 3 normal C:\Windows\System32
06c0 TOTALCMD64.EXE 1 383 305 normal C:\totalcmd
0570 MpCmdRun.exe 0 0 0
02a8 Pma776_2019.exe 1 477 243 normal C:\PMA776_2019\PC\source_D103
03f0 AdobeARM.exe 1 4 3 below normal C:\Program Files (x86)\Common Files\Adobe\ARM\1.0
0644 audiodg.exe 0 0 0
cpu registers:
eax = 0a2a99d0
ebx = 0040acdf
ecx = 004532e0
edx = 00182be0
esi = 0040acdf
edi = 00182cc0
eip = 0040acdf
esp = 00182c10
ebp = 00182c58
stack dump:
00182c10 df ac 40 00 de fa ed 0e - 01 00 00 00 07 00 00 00 ..@.............
00182c20 24 2c 18 00 df ac 40 00 - d0 99 2a 0a df ac 40 00 $,....@...*...@.
00182c30 df ac 40 00 c0 2c 18 00 - 58 2c 18 00 40 2c 18 00 ..@..,..X,..@,..
00182c40 01 00 00 00 70 76 40 00 - b4 28 08 0c b8 62 23 02 ....pv@..(...b#.
00182c50 b3 76 40 00 82 7a 9d 01 - 70 2c 18 00 df ac 40 00 .v@..z..p,....@.
00182c60 9d 0b 01 7a f9 e3 db 01 - 28 2d 18 00 b8 62 23 02 ...z....(-...b#.
00182c70 a0 2c 18 00 fe b4 40 00 - 9d 0b 01 7a e0 98 09 0c .,....@....z....
00182c80 01 2b 18 00 1a 9b 23 02 - 09 00 00 00 00 00 00 ff .+....#.........
00182c90 00 00 00 ff e0 98 09 0c - 10 25 08 0c f8 2c 18 00 .........%...,..
00182ca0 f8 2c 18 00 2f 59 33 02 - 28 2d 18 00 18 2d 18 00 .,../Y3.(-...-..
00182cb0 01 00 00 00 e8 02 00 00 - 4e 00 00 00 07 03 00 00 ........N.......
00182cc0 00 00 00 00 13 00 00 00 - 10 00 00 00 13 00 00 00 ................
00182cd0 10 00 00 00 0d 00 00 00 - 14 00 00 00 27 00 00 00 ............'...
00182ce0 08 00 00 00 27 00 00 00 - ff 02 00 00 0f 00 00 00 ....'...........
00182cf0 e0 98 09 0c 10 25 08 0c - 2c 2d 18 00 47 58 33 02 .....%..,-..GX3.
00182d00 00 00 00 00 10 25 08 0c - 06 00 00 00 20 02 00 00 .....%...... ...
00182d10 49 00 00 00 e6 02 00 00 - 06 00 00 00 20 02 00 00 I........... ...
00182d20 49 00 00 00 e6 02 00 00 - 10 25 08 0c 58 2d 18 00 I........%..X-..
00182d30 73 25 dd 01 60 2d 18 00 - f4 c2 40 00 58 2d 18 00 s%..`-....@.X-..
00182d40 9d 0b 01 7a 00 00 00 00 - 00 00 00 00 00 00 00 00 ...z............
disassembling:
[...]
746675bc jns loc_746675d6
746675be push ebx
746675bf push esi
746675c0 xor edx, edx
746675c2 mov ecx, edi
746675c4 > call +$87 ($74667650)
746675c9 mov edi, eax
746675cb jmp loc_74667589
746675cd test edi, edi
746675cf js loc_746675be
746675d1 jmp loc_74689fff
[...]