date/time computer name user name registered owner operating system system language system up time program up time

processors physical memory free disk space display mode process id allocated memory executable current module module date/time version compiled with madExcept version callstack crc exception number exception class exception message thread $9f4: 00000000 +000 4a426fa5 +145 4a4371d8 +1c8 776cd307 +010

: : : : : : : : : : : : : : : : : : : : : : : :

2012-04-30, 02:03:38, 611ms ZAKIYAH-PC Zakiyah Zakiyah Windows Vista Service Pack 2 build 6002 English 1 hour 26 minutes 5 seconds 2x Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz 1002/3069 MB (free/total) (C:) 7.17 GB 1366x768, 32 bit $1064 328.54 MB mpc-hc.exe MADHCNET.DLL 2012-03-04 10:29 1.0.10.0 Delphi XE 3.0n $00000000, $a8e02060, $429949aa 1 MadException $0Read$0Access Violation.

??? madVR.ax madvr.cpp 612 +31 SeekCallback madVR.ax madvr.cpp 6403 +74 CCustomMemAllocator.GetBuffer kernel32.dll BaseThreadInitThunk

main thread ($8f0): 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1560: 77a24f1e +0a ntdll.dll NtRemoveIoCompletion 776cd338 +23 kernel32.dll GetQueuedCompletionStatus 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $f64: 77a245ee +0a 776c9baa +4c 77681c67 +0a 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtDelayExecution SleepEx Sleep BaseThreadInitThunk

thread $1194: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $10f0: 77a24f1e +0a ntdll.dll NtRemoveIoCompletion 776cd338 +23 kernel32.dll GetQueuedCompletionStatus 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1268: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $9fc:

77a2547e 776ca7f1 776ca90b 776cd307

+0a +ef +13 +10

ntdll.dll kernel32.dll kernel32.dll kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $17a0: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $924: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1628: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $9c8: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 ntdll.dll ntdll.dll kernel32.dll kernel32.dll

thread $1428: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $129c: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $a68: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll

thread $1348: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1474: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $11ac: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $16f4: NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $13cc: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $184: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1430: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1424: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1604: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $9f8: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll

thread $12b8: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $c70: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $165c: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1550: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $424: NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $11c4: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $16c: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $149c: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1300: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $13a0: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $9c: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll

thread $94c: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $2fc: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $10e0: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $c78: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 thread $1278: ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $188: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1684: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $8d8: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 thread $808: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 ntdll.dll ntdll.dll kernel32.dll kernel32.dll ntdll.dll ntdll.dll kernel32.dll kernel32.dll

thread $1398: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1184: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

thread $11a0: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $176c: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1178: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1224: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1488: NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1374: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $164: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1710: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1158: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $14d8: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $b64: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll

thread $798: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $12c4: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1450: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $618: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 thread $1664: ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $16f0: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1030: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $4b0: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 thread $d58: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 thread $c74: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll ntdll.dll kernel32.dll kernel32.dll ntdll.dll ntdll.dll kernel32.dll kernel32.dll <priority:1> ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1314: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

thread $8b4: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $14e8: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $304: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1544: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll KeyboardThread ($1138):

77a2547e 776ca7f1 762f0f87 762e7f55 4a4398a1 776cd307

+0a +ef +00 +1a +91 +10

ntdll.dll NtWaitForMultipleObjects kernel32.dll WaitForMultipleObjectsEx USER32.dll MsgWaitForMultipleObjectsEx USER32.dll MsgWaitForMultipleObjects madVR.ax osd.cpp 647 +8 KeyboardThread kernel32.dll BaseThreadInitThunk

WindowQueueThread ($1310): <priority:15> 762eff1d +026 USER32.dll GetMessageW 4a67abee +10e MADHCNET.DLL madNetTools 1245 +17 WindowQueueThread 776cd307 +010 kernel32.dll BaseThreadInitThunk thread $afc: 77a24f7e +0a ntdll.dll NtReplyWaitReceivePort 4a676204 +30 MADHCNET.DLL madCodeHook LpcPortThread 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $10fc: <priority:1> 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 4a675e86 +12 MADHCNET.DLL madCodeHook 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject LpcDispatchThread BaseThreadInitThunk

thread $1128: <priority:15> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_RenderThread ($778): <priority:2> 77a2547e +00a ntdll.dll NtWaitForMultipleObjects 776ca7f1 +0ef kernel32.dll WaitForMultipleObjectsEx 776ca90b +013 kernel32.dll WaitForMultipleObjects 4a41c453 +393 madVR.ax framequeue.cpp 6622 +120 Queue_RenderThread 776cd307 +010 kernel32.dll BaseThreadInitThunk VSync_CollectThread ($1744): <priority:15> 77a245ee +00a ntdll.dll 4a44ebe3 +063 madVR.ax tools.cpp 694 +9 4a45c6ef +3af madVR.ax vsync.cpp 469 +106 776cd307 +010 kernel32.dll thread $adc: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtDelayExecution SleepMicro VSync_CollectThread BaseThreadInitThunk

NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

VSync_EvaluateThread ($122c): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a45de81 +61 madVR.ax vsync.cpp 882 +8 VSync_EvaluateThread 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $16cc: 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject

776cd307 +10 kernel32.dll BaseThreadInitThunk thread $f20: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

Queue_PresentThread ($454): <priority:2> 77a245ee +0a ntdll.dll NtDelayExecution 776c9baa +4c kernel32.dll SleepEx 77681c67 +0a kernel32.dll Sleep 4a41bdba +8a madVR.ax framequeue.cpp 6413 +17 Queue_PresentThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_IvtcThread ($105c): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a41aec9 +89 madVR.ax framequeue.cpp 6094 +10 Queue_IvtcThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_UploadThread ($c88): <priority:1> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a4147f9 +89 madVR.ax framequeue.cpp 3876 +10 Queue_UploadThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_DeinterlaceThread ($1148): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a415cd9 +89 madVR.ax framequeue.cpp 4238 +10 Queue_DeinterlaceThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Direct3D_ResetThread ($2dc): 77a2548e +00a ntdll.dll NtWaitForSingleObject 776c9a9e +07e kernel32.dll WaitForSingleObjectEx 776c9a0d +00d kernel32.dll WaitForSingleObject 4a409554 +134 madVR.ax direct3d.cpp 1827 +30 Direct3D_ResetThread 776cd307 +010 kernel32.dll BaseThreadInitThunk thread $f5c: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 thread $928: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

<priority:-15> ntdll.dll NtWaitForSingleObject kernel32.dll WaitForSingleObjectEx kernel32.dll WaitForSingleObject kernel32.dll BaseThreadInitThunk

thread $1080: <priority:-15> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 776cd307 +10 kernel32.dll BaseThreadInitThunk

modules: 00a60000 idmmkb.dll 6.5.12.1 C:\Program Files\Interne t Download Manager 00b90000 mpc-hc.exe 1.6.1.4074 C:\Program Files\K-Lite Codec Pack\Media Player Classic 02330000 DirectShowSource.dll 2.5.8.6 C:\Program Files\AviSynt h 2.5\plugins 02350000 mkzlib.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 023b0000 splitter.ax 1.11.96.14 C:\Program Files\K-Lite Codec Pack\Filters\Haali 02440000 mkunicode.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 025c0000 mkx.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 03120000 mp4.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 04630000 AviSynth.dll 2.5.8.5 C:\Windows\system32 047b0000 DevIL.dll 0.1.6.5 C:\Windows\system32 04920000 NokiaH264HPMPDecTFilter.dll 2.0.0.9 C:\Program Files\Common Files\Nokia\Codecs 10000000 CLKERN.DLL 3.9.44.0 C:\Program Files\Cracklo ck\Bin 18150000 MVRSETTINGS.DLL 1.0.23.0 C:\Program Files\madVR 4a400000 madVR.ax 0.82.5.0 C:\Program Files\madVR 4a600000 MADHCNET.DLL 1.0.10.0 C:\Program Files\madVR 5e480000 nvd3dum.dll 8.17.12.9573 C:\Windows\system32 60c60000 ffdshow.ax 1.1.4324.0 C:\Program Files\K-Lite Codec Pack\ffdshow 63ad0000 vsfilter.dll 1.6.1.4074 C:\Program Files\K-Lite Codec Pack\Filters 647a0000 quartz.dll 6.6.6002.18533 C:\Windows\system32 64950000 dbghelp.dll 6.12.2.633 C:\Program Files\madVR 65150000 D3DIM700.DLL 6.0.6001.18000 C:\Windows\system32 661a0000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 685b0000 btmmhook.dll 6.5.1.2700 C:\Program Files\WIDCOMM \Bluetooth Software 6c660000 DINPUT.dll 6.0.6000.16386 C:\Windows\system32 6c830000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 6c8f0000 perfos.dll 6.0.6000.16386 C:\Windows\system32 6c920000 DXVA2.DLL 6.0.6001.18000 C:\Windows\system32 6cb00000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 6d000000 ffmpeg.dll C:\Program Files\K-Lite Codec Pack\ffdshow 6d8e0000 devenum.dll 6.6.6001.18000 C:\Windows\system32 6e8d0000 msi.dll 4.5.6002.18005 C:\Windows\system32 70620000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 706f0000 SFC.DLL 6.0.6000.16386 C:\Windows\system32 70850000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 71760000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 71890000 MSVCR80.dll 8.0.50727.6195 C:\Windows\WinSxS\x86_mi crosoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a 74050000 midimap.dll 6.0.6002.18005 C:\Windows\system32 74060000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 74080000 msacm32.drv 6.0.6002.18005 C:\Windows\system32 74190000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 74310000 msiltcfg.dll 4.0.6000.16386 C:\Windows\system32 743f0000 msdmo.dll 6.6.6001.18000 C:\Windows\system32 74400000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32

74470000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 744a0000 wdmaud.drv 6.0.6002.18005 C:\Windows\system32 744f0000 WINTRUST.dll 6.0.6002.18592 C:\Windows\system32 745e0000 MMDevAPI.DLL 6.0.6002.18005 C:\Windows\system32 74610000 ksuser.dll 6.0.6000.16386 C:\Windows\system32 748d0000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 74900000 DDRAW.dll 6.0.6001.18000 C:\Windows\system32 74a20000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 74a80000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 74d90000 oledlg.dll 6.0.6001.18000 C:\Windows\system32 74db0000 WINMM.dll 6.0.6002.18528 C:\Windows\system32 74df0000 OLEACC.dll 7.0.6002.18508 C:\Windows\system32 74e30000 WINSPOOL.DRV 6.0.6002.18392 C:\Windows\system32 74e80000 COMCTL32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_mi crosoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088 b0ed3 750b0000 DCIMAN32.dll 6.0.6002.18051 C:\Windows\system32 75180000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 75190000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 751a0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 753d0000 WINSTA.dll 6.0.6001.18000 C:\Windows\system32 75420000 rsaenh.dll 6.0.6002.18005 C:\Windows\system32 75790000 WTSAPI32.dll 6.0.6001.18000 C:\Windows\system32 75860000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 75890000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 758a0000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 758e0000 iphlpapi.dll 6.0.6002.18005 C:\Windows\system32 75980000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75ae0000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75b10000 netapi32.dll 6.0.6002.18005 C:\Windows\system32 75b90000 dnsapi.dll 6.0.6002.18416 C:\Windows\system32 75ec0000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75ee0000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 75f10000 Secur32.dll 6.0.6002.18541 C:\Windows\system32 75f30000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 75fe0000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 76080000 ole32.dll 6.0.6002.18277 C:\Windows\system32 761d0000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 76220000 USP10.dll 1.626.6002.18244 C:\Windows\system32 762a0000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 762d0000 USER32.dll 6.0.6002.18005 C:\Windows\system32 76370000 msvcrt.dll 7.0.6002.18551 C:\Windows\system32 76420000 imagehlp.dll 6.0.6002.18592 C:\Windows\system32 76450000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 76520000 WININET.dll 9.0.8112.16443 C:\Windows\system32 76640000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 76710000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 767a0000 COMDLG32.dll 6.0.6002.18005 C:\Windows\system32 76820000 SHLWAPI.dll 6.0.6002.18393 C:\Windows\system32 76880000 SHELL32.dll 6.0.6002.18393 C:\Windows\system32 773a0000 urlmon.dll 9.0.8112.16443 C:\Windows\system32 774c0000 iertutil.dll 9.0.8112.16443 C:\Windows\system32 77680000 kernel32.dll 6.0.6002.18449 C:\Windows\system32 77760000 setupapi.dll 6.0.6002.18005 C:\Windows\system32 778f0000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 779c0000 ntdll.dll 6.0.6002.18541 C:\Windows\system32 77af0000 Normaliz.dll 6.0.6000.16386 C:\Windows\system32 77b00000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 77b10000 NSI.dll 6.0.6001.18000 C:\Windows\system32 77b20000 GDI32.dll 6.0.6002.18005 C:\Windows\system32

77b70000 OLEAUT32.dll 77c00000 IMM32.DLL

6.0.6002.18508 6.0.6002.18005

C:\Windows\system32 C:\Windows\system32

processes: 0000 Idle 0 0 0 0004 System 0 0 0 02b4 smss.exe 0 0 0 0338 csrss.exe 0 0 0 036c wininit.exe 0 0 0 0378 csrss.exe 1 0 0 0398 services.exe 0 0 0 03a4 lsass.exe 0 0 0 03ac lsm.exe 0 0 0 0414 winlogon.exe 1 0 0 0468 svchost.exe 0 0 0 0498 nvvsvc.exe 0 0 0 04b8 svchost.exe 0 0 0 053c svchost.exe 0 0 0 0570 svchost.exe 0 0 0 057c svchost.exe 0 0 0 05d8 audiodg.exe 0 0 0 05f4 svchost.exe 0 0 0 060c SLsvc.exe 0 0 0 063c svchost.exe 0 0 0 06cc nvxdsync.exe 1 0 0 06d8 nvvsvc.exe 1 0 0 07b0 svchost.exe 0 0 0 0694 spoolsv.exe 0 0 0 070c taskeng.exe 0 0 0 07a8 Dwm.exe 1 6 2 0794 taskeng.exe 1 18 31 0868 svchost.exe 0 0 0 0954 BackupManagerTray.exe 1 34 16 h Infosystems\Acer Backup Manager 095c PLFSetI.exe 1 11 15 0964 SynTPEnh.exe 1 56 33 ics\SynTP 0974 ArcadeDeluxeAgent.exe 1 10 15 rcade Deluxe\Acer Arcade Deluxe 097c CLMLSvc.exe 1 8 10 rcade Deluxe\Acer Arcade Deluxe\Kernel\CLML 0984 RtHDVCpl.exe 1 48 23 k\Audio\HDA 098c avp.exe 1 186 55 sky Lab\Kaspersky Anti-Virus 2012 0994 IDMan.exe 1 100 68 et Download Manager 09cc mf_systray.exe 1 38 42 a\Local\MediaFire Express 09dc wmpnscfg.exe 1 14 11 s Media Player 0a94 BTTray.exe 1 91 18 M\Bluetooth Software 0b68 avp.exe 0 0 0 0b78 svchost.exe 0 0 0 0b8c btwdins.exe 0 0 0 0bb0 DCService.exe 0 0 0 0be8 FileZilla server.exe 0 0 0 0c0c openvpnas.exe 0 0 0 0c3c hsssrv.exe 0 0 0

normal normal normal

C:\Windows\system32 C:\Windows\SYSTEM32 C:\Program Files\NewTec

normal C:\Windows above normal C:\Program Files\Synapt normal normal normal normal normal normal normal normal C:\Program Files\Acer A C:\Program Files\Acer A C:\Program Files\Realte C:\Program Files\Kasper C:\Program Files\Intern C:\Users\Zakiyah\AppDat C:\Program Files\Window C:\Program Files\WIDCOM

0c4c hsswd.exe 0 0c98 DCSHelper.exe 1 Service 0cd8 capiws.exe 0 0cf0 MATLAB.exe 0 0d2c svchost.exe 0 0d74 TuneUpUtilitiesService32.exe 0 0da4 vmware-usbarbitrator.exe 0 0dec vmnat.exe 0 0e08 svchost.exe 0 0e20 vmnetdhcp.exe 0 0f48 vmware-authd.exe 0 0f98 ovpntray.exe 1 N Technologies\OpenVPN Client\core 0828 wmpnetwk.exe 0 08c4 TuneUpUtilitiesApp32.exe 1 Utilities 2012 044c openvpntray.exe 1 t Shield\bin 0880 SynTPHelper.exe 1 0f04 IEMonitor.exe 1 et Download Manager 108c svchost.exe 0 1520 mf_daemon.exe 1 a\Local\MediaFire Express 16b8 mf_status.exe 1 a\Local\MediaFire Express 17bc explorer.exe 1 1004 mf_services.exe 1 a\Local\MediaFire Express 10d4 MeGUI.exe 1 1564 chrome.exe 1 \Chrome\Application 0a04 chrome.exe 1 \Chrome\Application 1414 chrome.exe 1 \Chrome\Application 0b14 chrome.exe 1 \Chrome\Application 11dc chrome.exe 1 \Chrome\Application 07e0 chrome.exe 1 \Chrome\Application 10e4 chrome.exe 1 \Chrome\Application 174c chrome.exe 1 \Chrome\Application 0934 chrome.exe 1 \Chrome\Application 1580 chrome.exe 1 \Chrome\Application 13fc chrome.exe 1 \Chrome\Application 1074 chrome.exe 1 \Chrome\Application 114c chrome.exe 1 \Chrome\Application 161c klwtblfs.exe 1 sky Lab\Kaspersky Anti-Virus 2012 1480 chrome.exe 1

0 8 0 0 0 0 0 0 0 0 0 10

0 14 normal 0 0 0 0 0 0 0 0 0 8

C:\ProgramData\Datacard

normal

C:\Program Files\OpenVP C:\Program Files\TuneUp C:\Program Files\Hotspo C:\Program Files\Intern C:\Users\Zakiyah\AppDat C:\Users\Zakiyah\AppDat C:\Windows C:\Users\Zakiyah\AppDat C:\Program Files\Google

0 0 292 130 normal 117 48 normal 0 0 12 15 normal 0 4 0 21 normal

18 25 normal 628 449 normal 39 31 normal 0 0 100 96 normal 222 1 4 5 5 5 4 5 4 4 5 4 4 4 4 1 1 1 1

below normal C:\Program Files\Google normal normal normal normal C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Kasper C:\Program Files\Google

12 normal 1 1 1 1 1 9 3 9 normal normal normal normal normal normal normal normal

\Chrome\Application 0d64 Everything.exe 1518 chrome.exe \Chrome\Application 14bc taskeng.exe 1064 mpc-hc.exe Codec Pack\Media Player Classic

1 0 0 1 42 1

below normal C:\Program Files\Google C:\Program Files\K-Lite

1 0 0 1 180 367 normal

hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery + Computer - ACPI x86-based PC + Disk drives - Hitachi HTS545032B9A300 + Display adapters - NVIDIA GeForce G 105M (driver 8.17.12.9573) + DVD/CD-ROM drives - TSSTcorp CDDVDW TS-L633B + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - USB Human Interface Device - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - Intel(R) ICH9M-E/M SATA AHCI Controller (driver 8.7.0.1007) + Imaging devices - Video WebCam + Keyboards - HID Keyboard Device - Launch Manager (driver 2.0.0.119) + Memory technology driver - JMB38X MS Host Controller (driver 1.0.25.4) - JMB38X SD Host Controller (driver 1.0.25.4) - JMB38X SD/MMC Host Controller (driver 1.0.25.4) - JMB38X xD Host Controller (driver 1.0.25.4) + Mice and other pointing devices - HID-compliant mouse - Synaptics PS/2 Port TouchPad (driver 12.2.2.0) + Monitors - Generic PnP Monitor + Network adapters - Atheros AR8131 PCI-E Gigabit Ethernet Controller (driver 2.0.11.12) - Intel(R) WiFi Link 5100 AGN (driver 13.5.0.6) - TAP-Win32 Adapter OAS (driver 9.0.0.7) - VMware Virtual Ethernet Adapter for VMnet1 (driver 4.1.2.0) - VMware Virtual Ethernet Adapter for VMnet8 (driver 4.1.2.0) + Processors - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz + Sound, video and game controllers - NVIDIA High Definition Audio (driver 1.3.12.0) - Realtek High Definition Audio (driver 6.0.1.6602) + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy

- Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Sleep Button - ACPI Thermal Zone - Direct memory access controller - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) 82802 Firmware Hub Device - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 (driver 8.6.1.1002) - Intel(R) ICH9 Family SMBus Controller - 2930 (driver 8.6.1.1001) - Intel(R) ICH9 Family Thermal Subsystem - 2932 (driver 8.6.1.1002) - Intel(R) ICH9M LPC Interface Controller - 2919 (driver 8.6.1.1002) - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft Composite Battery - Microsoft System Management BIOS Driver - Microsoft Windows Management Interface for ACPI - Microsoft Windows Management Interface for ACPI - Mobile Intel(R) 4 Series Chipset PCI Express Root Port - 2A41 (driver 9.1.0. 1003) - Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 (driver 9.1.0.1003) - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Root Bus Enumerator - VMware VMCI Host Device (driver 9.1.54.0) - Volume Manager + Universal Serial Bus controllers - Generic USB Hub - HUAWEI Mobile Connect - Bus Enumerate Device (driver 2.6.2.1203) - Intel(R) ICH9 Family USB Universal Host Controller - 2934 - Intel(R) ICH9 Family USB Universal Host Controller - 2935 - Intel(R) ICH9 Family USB Universal Host Controller - 2936 - Intel(R) ICH9 Family USB Universal Host Controller - 2937 - Intel(R) ICH9 Family USB Universal Host Controller - 2938 - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C - USB Composite Device - USB Composite Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub

- USB Root Hub - USB Root Hub cpu eax ebx ecx edx esi edi eip esp ebp registers: = 0093cf60 = 1c3ff4cc = 009eafe0 = 1c3ff4cc = 0037d374 = 00000000 = 00000000 = 1c3ff4a4 = 1c3ff4bc 80 00 d3 00 53 00 b2 b0 52 00 00 00 00 00 00 93 f5 e1 b2 00 7f 00 37 00 7b 00 9e 9e 7b 00 00 00 00 00 00 93 3f cb 9e 00 64 00 00 00 64 00 00 00 64 00 00 00 00 00 00 00 1c 7a 00 00 60 38 00 68 74 00 68 00 38 10 5c cc 00 38 12 e4 cc 00 38 00 cf f6 00 b2 d3 00 b2 00 f6 9c c3 02 00 f6 af f5 f0 00 f6 00 93 3f 00 9e 37 00 9e 00 3f 6c 93 00 00 3f bf 3f 3f 00 3f 00 00 1c 00 00 00 00 00 00 1c 77 00 00 00 1c 2c 1c 1c 00 1c 00 cc e0 1c 44 30 1c 68 00 01 5b f4 5c bc 01 10 d4 24 30 01 60 f4 f4 f5 f2 c4 f5 b2 00 00 46 09 c3 f5 00 9c f5 f6 f6 00 93 3f 3f 3f 7c 7a 3f 9e 00 00 38 00 93 3f 00 6c 3f 3f 3f 00 93 1c 1c 1c 0f 64 1c 00 00 00 76 00 00 1c 00 77 1c 1c 1c 00 00 74 37 00 20 68 06 00 6c 00 78 00 00 ab 00 5b 00 d0 0a 00 f3 d3 81 00 f5 b2 c6 00 f5 00 93 4f 00 6f 00 46 00 e7 00 00 ec 37 7f 00 3f 9e 7a 00 3f 00 93 a2 00 42 00 38 00 45 a9 00 1e 00 64 00 1c 00 64 00 1c 00 00 77 00 4a 00 76 00 4a 71 00 7d ...d`.....?.t.7. ....8.?...?.7..d t.7.......?..... ....h...D.|...?. 4S{dt.7.0.zdh... ..........?...zd (...h...h....... ............l.?. .R{d8.?......... ......lw[F8vx... ....\........O.w ........\....... ..........?..oBJ ....8.?......... .......,..lw[F8v x.....?...?..... ..?...?.$.?...EJ ...z....0.?....q h...8.?......... ........`......}

stack dump: 1c3ff4a4 8b 1c3ff4b4 00 1c3ff4c4 74 1c3ff4d4 00 1c3ff4e4 34 1c3ff4f4 00 1c3ff504 28 1c3ff514 cc 1c3ff524 8b 1c3ff534 00 1c3ff544 01 1c3ff554 00 1c3ff564 00 1c3ff574 00 1c3ff584 00 1c3ff594 78 1c3ff5a4 88 1c3ff5b4 9e 1c3ff5c4 68 1c3ff5d4 00

disassembling: [...] 4a426f9c 4a426f9d 4a426fa0 4a426fa1 4a426fa4 4a426fa5 > 4a426fab 4a426fae 615 4a426fb5 4a426fce 617 4a426fd1 618 [...]

push mov push mov push call mov mov jmp mov mov : : : : : : : : :

edx eax, [ebp+$c] eax ecx, [ebp+8] ecx dword ptr [$4a4d21d4] [ebp-$1c], eax dword ptr [ebp-4], $fffffffe loc_4a426fce eax, [ebp-$1c] ecx, [ebp-$10] 2012-04-30, 02:13:28, 286ms ZAKIYAH-PC Zakiyah Zakiyah Windows Vista Service Pack 2 build 6002 English 1 hour 36 minutes 15 seconds 2x Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz

date/time computer name user name registered owner operating system system language system up time program up time processors

physical memory free disk space display mode process id allocated memory executable current module module date/time version compiled with madExcept version callstack crc exception number exception class exception message thread $1a0c: 8b53ec8b +000 4a426fa5 +145 4a4371d8 +1c8 776cd307 +010

: : : : : : : : : : : : : : :

1483/3069 MB (free/total) (C:) 7.17 GB 1366x768, 32 bit $c6c 336.08 MB mpc-hc.exe MADHCNET.DLL 2012-03-04 10:29 1.0.10.0 Delphi XE 3.0n $8b53ec8b, $22b97937, $1637aa10 1 MadException $8b53ec8bRead$8b53ec8bAccess Violation.

??? madVR.ax madvr.cpp 612 +31 SeekCallback madVR.ax madvr.cpp 6403 +74 CCustomMemAllocator.GetBuffer kernel32.dll BaseThreadInitThunk

main thread ($e5c): 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $5b4: 77a24f1e +0a ntdll.dll NtRemoveIoCompletion 776cd338 +23 kernel32.dll GetQueuedCompletionStatus 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $109c: 77a245ee +0a ntdll.dll 776c9baa +4c kernel32.dll 77681c67 +0a kernel32.dll 776cd307 +10 kernel32.dll NtDelayExecution SleepEx Sleep BaseThreadInitThunk

thread $b60: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1aac: 77a24f1e +0a ntdll.dll NtRemoveIoCompletion 776cd338 +23 kernel32.dll GetQueuedCompletionStatus 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $13a4: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1388: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $1834: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk

thread $15b4: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1484: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $18f0: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1e78: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1db8: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1308: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1cb8: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1a14: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $c78: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1c28: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $424: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $1684: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1958: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1f14: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $8dc: 77a2547e +0a 776ca7f1 +ef 776ca90b +13 776cd307 +10 <priority:1> ntdll.dll kernel32.dll kernel32.dll kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1390: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

thread $13cc: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1320: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1c0c: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1248: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $8b4: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1d48: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $1d78: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $c74: 77a2553e +0a 77a539da +b1 77716d14 +1b 776cd307 +10 ntdll.dll ntdll.dll kernel32.dll kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1d04: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1d68: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1154: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

thread $ea8: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1c54: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1d6c: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $654: 77a2548e +0a 776c9a9e +7e 776c9a0d +0d 776cd307 +10 ntdll.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1db4: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $130c: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $1bc8: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1d58: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1d50: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1df4: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1eec: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1424: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1c58: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1a3c: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $17c8: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1d84: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1d64: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $1914: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $16e0: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1cb0: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1858: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $10e8: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $100c: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1c18: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $149c: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1050: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $600: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1010: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk

thread $18b4: 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1784: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $102c: 77a2553e +0a ntdll.dll 77a539da +b1 ntdll.dll 77716d14 +1b kernel32.dll 776cd307 +10 kernel32.dll thread $1d28: <priority:1> 77a2547e +0a ntdll.dll 776ca7f1 +ef kernel32.dll 776ca90b +13 kernel32.dll 776cd307 +10 kernel32.dll thread $1870: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll

NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForKeyedEvent RtlSleepConditionVariableCS SleepConditionVariableCS BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjects BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1a90: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1a74: 762eff1d +26 USER32.dll GetMessageW 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1ac8: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $18b8: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

KeyboardThread ($1378): 77a2547e +0a ntdll.dll NtWaitForMultipleObjects 776ca7f1 +ef kernel32.dll WaitForMultipleObjectsEx 762f0f87 +00 USER32.dll MsgWaitForMultipleObjectsEx 762e7f55 +1a USER32.dll MsgWaitForMultipleObjects 4a4398a1 +91 madVR.ax osd.cpp 647 +8 KeyboardThread 776cd307 +10 kernel32.dll BaseThreadInitThunk WindowQueueThread ($12f0): <priority:15> 762eff1d +026 USER32.dll GetMessageW

4a67abee +10e MADHCNET.DLL madNetTools 1245 +17 WindowQueueThread 776cd307 +010 kernel32.dll BaseThreadInitThunk thread $1970: 77a24f7e +0a ntdll.dll NtReplyWaitReceivePort 4a676204 +30 MADHCNET.DLL madCodeHook LpcPortThread 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1b70: <priority:1> 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 4a675e86 +12 MADHCNET.DLL madCodeHook 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject LpcDispatchThread BaseThreadInitThunk

thread $19a0: <priority:15> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_RenderThread ($1820): <priority:2> 77a2547e +00a ntdll.dll NtWaitForMultipleObjects 776ca7f1 +0ef kernel32.dll WaitForMultipleObjectsEx 776ca90b +013 kernel32.dll WaitForMultipleObjects 4a41c453 +393 madVR.ax framequeue.cpp 6622 +120 Queue_RenderThread 776cd307 +010 kernel32.dll BaseThreadInitThunk VSync_CollectThread ($1b5c): <priority:15> 77a245ee +00a ntdll.dll 4a44ebe3 +063 madVR.ax tools.cpp 694 +9 4a45c6ef +3af madVR.ax vsync.cpp 469 +106 776cd307 +010 kernel32.dll thread $1b38: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtDelayExecution SleepMicro VSync_CollectThread BaseThreadInitThunk

NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

VSync_EvaluateThread ($c80): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a45de81 +61 madVR.ax vsync.cpp 882 +8 VSync_EvaluateThread 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1874: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll thread $1ebc: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

Queue_PresentThread ($1f5c): <priority:2>

77a245ee 776c9baa 77681c67 4a41bdba 776cd307

+0a +4c +0a +8a +10

ntdll.dll NtDelayExecution kernel32.dll SleepEx kernel32.dll Sleep madVR.ax framequeue.cpp 6413 +17 Queue_PresentThread kernel32.dll BaseThreadInitThunk

Queue_IvtcThread ($778): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a41aec9 +89 madVR.ax framequeue.cpp 6094 +10 Queue_IvtcThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_UploadThread ($187c): <priority:1> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a4147f9 +89 madVR.ax framequeue.cpp 3876 +10 Queue_UploadThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Queue_DeinterlaceThread ($1b84): 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 4a415cd9 +89 madVR.ax framequeue.cpp 4238 +10 Queue_DeinterlaceThread 776cd307 +10 kernel32.dll BaseThreadInitThunk Direct3D_ResetThread ($1da4): 77a2548e +00a ntdll.dll NtWaitForSingleObject 776c9a9e +07e kernel32.dll WaitForSingleObjectEx 776c9a0d +00d kernel32.dll WaitForSingleObject 4a409554 +134 madVR.ax direct3d.cpp 1827 +30 Direct3D_ResetThread 776cd307 +010 kernel32.dll BaseThreadInitThunk thread $1ad8: 77a2548e +0a ntdll.dll 776c9a9e +7e kernel32.dll 776c9a0d +0d kernel32.dll 776cd307 +10 kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1f2c: <priority:-15> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 776cd307 +10 kernel32.dll BaseThreadInitThunk thread $1a40: <priority:-15> 77a2548e +0a ntdll.dll NtWaitForSingleObject 776c9a9e +7e kernel32.dll WaitForSingleObjectEx 776c9a0d +0d kernel32.dll WaitForSingleObject 776cd307 +10 kernel32.dll BaseThreadInitThunk modules: 00ad0000 idmmkb.dll t Download Manager 00b90000 mpc-hc.exe Codec Pack\Media Player Classic 023f0000 DirectShowSource.dll h 2.5\plugins 02410000 splitter.ax 6.5.12.1 1.6.1.4074 2.5.8.6 1.11.96.14 C:\Program Files\Interne C:\Program Files\K-Lite C:\Program Files\AviSynt C:\Program Files\K-Lite

Codec Pack\Filters\Haali 024a0000 mkzlib.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 025e0000 mkunicode.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 02600000 mkx.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 02640000 mp4.dll C:\Program Files\K-Lite Codec Pack\Filters\Haali 02b10000 NokiaH264HPMPDecTFilter.dll 2.0.0.9 C:\Program Files\Common Files\Nokia\Codecs 04990000 AviSynth.dll 2.5.8.5 C:\Windows\system32 04b10000 DevIL.dll 0.1.6.5 C:\Windows\system32 10000000 CLKERN.DLL 3.9.44.0 C:\Program Files\Cracklo ck\Bin 10bf0000 MVRSETTINGS.DLL 1.0.23.0 C:\Program Files\madVR 4a400000 madVR.ax 0.82.5.0 C:\Program Files\madVR 4a600000 MADHCNET.DLL 1.0.10.0 C:\Program Files\madVR 63680000 nvd3dum.dll 8.17.12.9573 C:\Windows\system32 644f0000 ffdshow.ax 1.1.4324.0 C:\Program Files\K-Lite Codec Pack\ffdshow 64b70000 vsfilter.dll 1.6.1.4074 C:\Program Files\K-Lite Codec Pack\Filters 651b0000 quartz.dll 6.6.6002.18533 C:\Windows\system32 65360000 dbghelp.dll 6.12.2.633 C:\Program Files\madVR 66f70000 D3DIM700.DLL 6.0.6001.18000 C:\Windows\system32 685b0000 btmmhook.dll 6.5.1.2700 C:\Program Files\WIDCOMM \Bluetooth Software 6c650000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 6c830000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 6c8f0000 perfos.dll 6.0.6000.16386 C:\Windows\system32 6c920000 DXVA2.DLL 6.0.6001.18000 C:\Windows\system32 6d000000 ffmpeg.dll C:\Program Files\K-Lite Codec Pack\ffdshow 6e8d0000 msi.dll 4.5.6002.18005 C:\Windows\system32 70620000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 706f0000 SFC.DLL 6.0.6000.16386 C:\Windows\system32 70850000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 71220000 DINPUT.dll 6.0.6000.16386 C:\Windows\system32 71250000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 71390000 devenum.dll 6.6.6001.18000 C:\Windows\system32 71760000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 71890000 MSVCR80.dll 8.0.50727.6195 C:\Windows\WinSxS\x86_mi crosoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a 74050000 midimap.dll 6.0.6002.18005 C:\Windows\system32 74060000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 74080000 msacm32.drv 6.0.6002.18005 C:\Windows\system32 74190000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 74310000 msiltcfg.dll 4.0.6000.16386 C:\Windows\system32 743f0000 msdmo.dll 6.6.6001.18000 C:\Windows\system32 74400000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 74470000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 744a0000 wdmaud.drv 6.0.6002.18005 C:\Windows\system32 744f0000 WINTRUST.dll 6.0.6002.18592 C:\Windows\system32 745e0000 MMDevAPI.DLL 6.0.6002.18005 C:\Windows\system32 74610000 ksuser.dll 6.0.6000.16386 C:\Windows\system32 748d0000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 74900000 DDRAW.dll 6.0.6001.18000 C:\Windows\system32 74a20000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 74a80000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32

74d90000 oledlg.dll 6.0.6001.18000 C:\Windows\system32 74db0000 WINMM.dll 6.0.6002.18528 C:\Windows\system32 74df0000 OLEACC.dll 7.0.6002.18508 C:\Windows\system32 74e30000 WINSPOOL.DRV 6.0.6002.18392 C:\Windows\system32 74e80000 COMCTL32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_mi crosoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088 b0ed3 750b0000 DCIMAN32.dll 6.0.6002.18051 C:\Windows\system32 75180000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 75190000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 751a0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 753d0000 WINSTA.dll 6.0.6001.18000 C:\Windows\system32 75420000 rsaenh.dll 6.0.6002.18005 C:\Windows\system32 75790000 WTSAPI32.dll 6.0.6001.18000 C:\Windows\system32 75860000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 75890000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 758a0000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 758e0000 iphlpapi.dll 6.0.6002.18005 C:\Windows\system32 75980000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75ae0000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75b10000 netapi32.dll 6.0.6002.18005 C:\Windows\system32 75b90000 dnsapi.dll 6.0.6002.18416 C:\Windows\system32 75ec0000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75ee0000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 75f10000 Secur32.dll 6.0.6002.18541 C:\Windows\system32 75f30000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 75fe0000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 76080000 ole32.dll 6.0.6002.18277 C:\Windows\system32 761d0000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 76220000 USP10.dll 1.626.6002.18244 C:\Windows\system32 762a0000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 762d0000 USER32.dll 6.0.6002.18005 C:\Windows\system32 76370000 msvcrt.dll 7.0.6002.18551 C:\Windows\system32 76420000 imagehlp.dll 6.0.6002.18592 C:\Windows\system32 76450000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 76520000 WININET.dll 9.0.8112.16443 C:\Windows\system32 76640000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 76710000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 767a0000 COMDLG32.dll 6.0.6002.18005 C:\Windows\system32 76820000 SHLWAPI.dll 6.0.6002.18393 C:\Windows\system32 76880000 SHELL32.dll 6.0.6002.18393 C:\Windows\system32 773a0000 urlmon.dll 9.0.8112.16443 C:\Windows\system32 774c0000 iertutil.dll 9.0.8112.16443 C:\Windows\system32 77680000 kernel32.dll 6.0.6002.18449 C:\Windows\system32 77760000 setupapi.dll 6.0.6002.18005 C:\Windows\system32 778f0000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 779c0000 ntdll.dll 6.0.6002.18541 C:\Windows\system32 77af0000 Normaliz.dll 6.0.6000.16386 C:\Windows\system32 77b00000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 77b10000 NSI.dll 6.0.6001.18000 C:\Windows\system32 77b20000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 77b70000 OLEAUT32.dll 6.0.6002.18508 C:\Windows\system32 77c00000 IMM32.DLL 6.0.6002.18005 C:\Windows\system32 processes: 0000 Idle 0004 System 02b4 smss.exe 0338 csrss.exe 036c wininit.exe 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

0378 csrss.exe 1 0 0 0398 services.exe 0 0 0 03a4 lsass.exe 0 0 0 03ac lsm.exe 0 0 0 0414 winlogon.exe 1 0 0 0468 svchost.exe 0 0 0 0498 nvvsvc.exe 0 0 0 04b8 svchost.exe 0 0 0 053c svchost.exe 0 0 0 0570 svchost.exe 0 0 0 057c svchost.exe 0 0 0 05d8 audiodg.exe 0 0 0 05f4 svchost.exe 0 0 0 060c SLsvc.exe 0 0 0 063c svchost.exe 0 0 0 06cc nvxdsync.exe 1 0 0 06d8 nvvsvc.exe 1 0 0 07b0 svchost.exe 0 0 0 0694 spoolsv.exe 0 0 0 070c taskeng.exe 0 0 0 07a8 Dwm.exe 1 6 2 0794 taskeng.exe 1 18 32 0868 svchost.exe 0 0 0 0954 BackupManagerTray.exe 1 34 16 h Infosystems\Acer Backup Manager 095c PLFSetI.exe 1 11 15 0964 SynTPEnh.exe 1 56 33 ics\SynTP 0974 ArcadeDeluxeAgent.exe 1 10 15 rcade Deluxe\Acer Arcade Deluxe 097c CLMLSvc.exe 1 8 10 rcade Deluxe\Acer Arcade Deluxe\Kernel\CLML 0984 RtHDVCpl.exe 1 48 23 k\Audio\HDA 098c avp.exe 1 195 68 sky Lab\Kaspersky Anti-Virus 2012 0994 IDMan.exe 1 100 68 et Download Manager 09cc mf_systray.exe 1 38 42 a\Local\MediaFire Express 09dc wmpnscfg.exe 1 14 11 s Media Player 0a94 BTTray.exe 1 91 18 M\Bluetooth Software 0b68 avp.exe 0 0 0 0b78 svchost.exe 0 0 0 0b8c btwdins.exe 0 0 0 0bb0 DCService.exe 0 0 0 0be8 FileZilla server.exe 0 0 0 0c0c openvpnas.exe 0 0 0 0c3c hsssrv.exe 0 0 0 0c4c hsswd.exe 0 0 0 0c98 DCSHelper.exe 1 8 14 Service 0cd8 capiws.exe 0 0 0 0cf0 MATLAB.exe 0 0 0 0d2c svchost.exe 0 0 0 0d74 TuneUpUtilitiesService32.exe 0 0 0 0da4 vmware-usbarbitrator.exe 0 0 0 0dec vmnat.exe 0 0 0

normal normal normal

C:\Windows\system32 C:\Windows\SYSTEM32 C:\Program Files\NewTec

normal C:\Windows above normal C:\Program Files\Synapt normal normal normal normal normal normal normal normal C:\Program Files\Acer A C:\Program Files\Acer A C:\Program Files\Realte C:\Program Files\Kasper C:\Program Files\Intern C:\Users\Zakiyah\AppDat C:\Program Files\Window C:\Program Files\WIDCOM

normal

C:\ProgramData\Datacard

0e08 svchost.exe 0 0e20 vmnetdhcp.exe 0 0f48 vmware-authd.exe 0 0f98 ovpntray.exe 1 N Technologies\OpenVPN Client\core 0828 wmpnetwk.exe 0 08c4 TuneUpUtilitiesApp32.exe 1 Utilities 2012 044c openvpntray.exe 1 t Shield\bin 0880 SynTPHelper.exe 1 0f04 IEMonitor.exe 1 et Download Manager 108c svchost.exe 0 1520 mf_daemon.exe 1 a\Local\MediaFire Express 16b8 mf_status.exe 1 a\Local\MediaFire Express 17bc explorer.exe 1 1004 mf_services.exe 1 a\Local\MediaFire Express 1564 chrome.exe 1 \Chrome\Application 0a04 chrome.exe 1 \Chrome\Application 1414 chrome.exe 1 \Chrome\Application 0b14 chrome.exe 1 \Chrome\Application 11dc chrome.exe 1 \Chrome\Application 07e0 chrome.exe 1 \Chrome\Application 10e4 chrome.exe 1 \Chrome\Application 174c chrome.exe 1 \Chrome\Application 0934 chrome.exe 1 \Chrome\Application 1580 chrome.exe 1 \Chrome\Application 13fc chrome.exe 1 \Chrome\Application 1074 chrome.exe 1 \Chrome\Application 114c chrome.exe 1 \Chrome\Application 161c klwtblfs.exe 1 sky Lab\Kaspersky Anti-Virus 2012 1480 chrome.exe 1 \Chrome\Application 0d64 Everything.exe 1 1518 chrome.exe 1 \Chrome\Application 0730 taskeng.exe 1 18d4 explorer.exe 1 0c6c mpc-hc.exe 1 Codec Pack\Media Player Classic hardware:

0 0 0 10

0 0 0 8

normal

C:\Program Files\OpenVP C:\Program Files\TuneUp C:\Program Files\Hotspo C:\Program Files\Intern C:\Users\Zakiyah\AppDat C:\Users\Zakiyah\AppDat C:\Windows C:\Users\Zakiyah\AppDat C:\Program Files\Google

0 0 313 137 normal 124 49 normal 0 0 12 15 normal 0 4 0 21 normal

18 25 normal 701 504 normal 39 31 normal 100 97 normal 222 1 4 5 5 5 4 5 4 4 5 4 4 4 4 1 1 1 1

below normal C:\Program Files\Google normal normal normal normal C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Google C:\Program Files\Kasper C:\Program Files\Google

12 normal 1 1 1 1 1 9 3 9 normal normal normal normal normal normal normal normal

0 0 42 1

below normal C:\Program Files\Google C:\Windows C:\Program Files\K-Lite

0 0 188 105 normal 180 367 normal

+ Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery + Computer - ACPI x86-based PC + Disk drives - Hitachi HTS545032B9A300 + Display adapters - NVIDIA GeForce G 105M (driver 8.17.12.9573) + DVD/CD-ROM drives - TSSTcorp CDDVDW TS-L633B + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - USB Human Interface Device - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - Intel(R) ICH9M-E/M SATA AHCI Controller (driver 8.7.0.1007) + Imaging devices - Video WebCam + Keyboards - HID Keyboard Device - Launch Manager (driver 2.0.0.119) + Memory technology driver - JMB38X MS Host Controller (driver 1.0.25.4) - JMB38X SD Host Controller (driver 1.0.25.4) - JMB38X SD/MMC Host Controller (driver 1.0.25.4) - JMB38X xD Host Controller (driver 1.0.25.4) + Mice and other pointing devices - HID-compliant mouse - Synaptics PS/2 Port TouchPad (driver 12.2.2.0) + Monitors - Generic PnP Monitor + Network adapters - Atheros AR8131 PCI-E Gigabit Ethernet Controller (driver 2.0.11.12) - Intel(R) WiFi Link 5100 AGN (driver 13.5.0.6) - TAP-Win32 Adapter OAS (driver 9.0.0.7) - VMware Virtual Ethernet Adapter for VMnet1 (driver 4.1.2.0) - VMware Virtual Ethernet Adapter for VMnet8 (driver 4.1.2.0) + Processors - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz + Sound, video and game controllers - NVIDIA High Definition Audio (driver 1.3.12.0) - Realtek High Definition Audio (driver 6.0.1.6602) + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Sleep Button - ACPI Thermal Zone - Direct memory access controller

- High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) 82802 Firmware Hub Device - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 (driver 8.6.1.1002) - Intel(R) ICH9 Family SMBus Controller - 2930 (driver 8.6.1.1001) - Intel(R) ICH9 Family Thermal Subsystem - 2932 (driver 8.6.1.1002) - Intel(R) ICH9M LPC Interface Controller - 2919 (driver 8.6.1.1002) - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft Composite Battery - Microsoft System Management BIOS Driver - Microsoft Windows Management Interface for ACPI - Microsoft Windows Management Interface for ACPI - Mobile Intel(R) 4 Series Chipset PCI Express Root Port - 2A41 (driver 9.1.0. 1003) - Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 (driver 9.1.0.1003) - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Root Bus Enumerator - VMware VMCI Host Device (driver 9.1.54.0) - Volume Manager + Universal Serial Bus controllers - Generic USB Hub - HUAWEI Mobile Connect - Bus Enumerate Device (driver 2.6.2.1203) - Intel(R) ICH9 Family USB Universal Host Controller - 2934 - Intel(R) ICH9 Family USB Universal Host Controller - 2935 - Intel(R) ICH9 Family USB Universal Host Controller - 2936 - Intel(R) ICH9 Family USB Universal Host Controller - 2937 - Intel(R) ICH9 Family USB Universal Host Controller - 2938 - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C - USB Composite Device - USB Composite Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu eax ebx ecx edx esi registers: = 06e13968 = 2415f7e0 = 651cffff = 2415f7e0 = 002ed374

edi eip esp ebp

= = = =

00000000 8b53ec8b 2415f7b8 2415f7d0 80 00 d3 00 53 00 b2 b0 52 00 00 00 00 00 00 93 f8 06 b2 00 20 00 2e 00 1c 00 95 95 1c 00 00 00 00 00 00 8a 15 1e 95 00 65 00 00 00 65 00 00 00 65 00 00 00 00 00 00 00 24 b7 00 00 68 4c 00 68 74 00 68 00 4c 10 5c c8 00 4c 52 f8 e0 00 4c 00 39 f9 00 b2 d3 00 b2 00 f9 9c c3 02 00 f9 45 f8 f3 00 f9 00 e1 15 00 95 2e 00 95 00 15 6c 8a 00 00 15 40 15 15 00 15 00 06 24 00 00 00 00 00 00 24 77 00 00 00 24 d9 24 24 00 24 00 e0 f4 30 65 30 30 68 00 01 5b 0c 5c d0 01 10 e8 38 44 01 60 f7 f7 f8 dc c4 f8 b2 00 00 46 1a c3 f8 00 9c f8 f9 f9 00 93 15 15 15 e4 1b 15 95 00 00 38 00 8a 15 00 6c 15 15 15 00 8a 24 24 24 a2 65 24 00 00 00 76 00 00 24 00 77 24 24 24 00 00 74 37 00 34 68 06 00 80 00 78 00 00 ab 00 5b 00 d0 0a 00 00 d3 81 00 f8 b2 c6 00 f8 00 93 4f 00 6f 00 46 00 e7 00 00 00 2e 20 00 15 95 1b 00 15 00 8a a2 00 42 00 38 00 45 a9 00 00 00 65 00 24 00 65 00 24 00 00 77 00 4a 00 76 00 4a 71 00 00 ...eh9.....$t... ....L..$...$7..e t.......0..$.... ....h...e...4..$ 4S.et...0..eh... ........0..$...e (...h...h....... ...............$ .R.eL..$........ ......lw[F8vx... ....\........O.w ........\....... ...........$.oBJ ....L..$........ [email protected][F8v x......$...$.... ...$...$8..$..EJ ........D..$...q h...L..$........ ........`.......

stack dump: 2415f7b8 8b 2415f7c8 00 2415f7d8 74 2415f7e8 00 2415f7f8 34 2415f808 00 2415f818 28 2415f828 cc 2415f838 8b 2415f848 00 2415f858 01 2415f868 00 2415f878 00 2415f888 00 2415f898 00 2415f8a8 78 2415f8b8 9c 2415f8c8 b2 2415f8d8 68 2415f8e8 00

disassembling: [...] 4a426f9c 4a426f9d 4a426fa0 4a426fa1 4a426fa4 4a426fa5 > 4a426fab 4a426fae 615 4a426fb5 4a426fce 617 4a426fd1 618 [...]

push mov push mov push call mov mov jmp mov mov

edx eax, [ebp+$c] eax ecx, [ebp+8] ecx dword ptr [$4a4d21d4] [ebp-$1c], eax dword ptr [ebp-4], $fffffffe loc_4a426fce eax, [ebp-$1c] ecx, [ebp-$10]