date/time         : 2015-01-23 01:48
computer name     : WWW-B24D268FC88
user name         : Administrator
operating system  : Windows XP Service Pack 3 build 2600
system language   : Chinese
system up time    : 53 minutes 18 seconds 
program up time   : 39 seconds 
physical memory   : 1250/2008 MB (/ܼ)
free disk space   : (C:) 4.55 GB
display mode      : 1280x800, 32 bit
monitors          : 1
process id        : $dac
allocated memory  : 13.52 MB
executable        : flashfxp.exe
executable hash   : 63735479F3BB81B334A879202768CF0A
madExcept version : 2.7k
exception class   : EAccessViolation
exception message : ȡڵַ 7C930C8E ģ顰ntdll.dllȡ ַ 00000000.

main thread ($1674):
7c930c8e ntdll.dll                        RtlAllocateHeap
004768e1 flashfxp.exe Controls  4233  +37 TControl.WndProc
00479116 flashfxp.exe Controls  5698  +42 TWinControl.WndProc
004699dd flashfxp.exe Forms     3190 +139 TCustomForm.WndProc
004c449e flashfxp.exe ThemeMgr   591  +10 TWindowProcList.DispatchMessage
004c4df4 flashfxp.exe ThemeMgr  1149  +38 TThemeManager.FormWindowProc
004c62f8 flashfxp.exe ThemeMgr  2056   +2 TThemeManager.PreFormWindowProc
00478da0 flashfxp.exe Controls  5571   +3 TWinControl.MainWndProc
00466aac flashfxp.exe Forms     1484   +8 StdWndProc
77d2f406 user32.dll                       SendMessageA
0060efbe flashfxp.exe FrmMain1 25719 +114 TFrmMain.FormClose
0046907f flashfxp.exe Forms     2888   +1 TCustomForm.DoClose
0046c4c5 flashfxp.exe Forms     4622  +12 TCustomForm.Close
0046b9a8 flashfxp.exe Forms     4251   +0 TCustomForm.WMClose
004768e1 flashfxp.exe Controls  4233  +37 TControl.WndProc
00479116 flashfxp.exe Controls  5698  +42 TWinControl.WndProc
004699dd flashfxp.exe Forms     3190 +139 TCustomForm.WndProc
004c449e flashfxp.exe ThemeMgr   591  +10 TWindowProcList.DispatchMessage
004c4df4 flashfxp.exe ThemeMgr  1149  +38 TThemeManager.FormWindowProc
004c62f8 flashfxp.exe ThemeMgr  2056   +2 TThemeManager.PreFormWindowProc
00478da0 flashfxp.exe Controls  5571   +3 TWinControl.MainWndProc
00466aac flashfxp.exe Forms     1484   +8 StdWndProc
7c92e470 ntdll.dll                        KiUserCallbackDispatcher
77d2f156 user32.dll                       DefWindowProcA
77d2a993 user32.dll                       CallWindowProcA
0047920b flashfxp.exe Controls  5720  +18 TWinControl.DefaultHandler
0046ac6a flashfxp.exe Forms     3807   +7 TCustomForm.DefaultHandler
0047a78f flashfxp.exe Controls  6550  +16 TWinControl.WMSysCommand
0046ba87 flashfxp.exe Forms     4282   +7 TCustomForm.WMSysCommand
00618468 flashfxp.exe FrmMain1 29299  +37 TFrmMain.WMSyscommand
004768e1 flashfxp.exe Controls  4233  +37 TControl.WndProc
00479116 flashfxp.exe Controls  5698  +42 TWinControl.WndProc
004699dd flashfxp.exe Forms     3190 +139 TCustomForm.WndProc
004c449e flashfxp.exe ThemeMgr   591  +10 TWindowProcList.DispatchMessage
004c4df4 flashfxp.exe ThemeMgr  1149  +38 TThemeManager.FormWindowProc
004c62f8 flashfxp.exe ThemeMgr  2056   +2 TThemeManager.PreFormWindowProc
00478da0 flashfxp.exe Controls  5571   +3 TWinControl.MainWndProc
00466aac flashfxp.exe Forms     1484   +8 StdWndProc
77d292de user32.dll                       SendMessageW
77d2f156 user32.dll                       DefWindowProcA
77d2a993 user32.dll                       CallWindowProcA
0047920b flashfxp.exe Controls  5720  +18 TWinControl.DefaultHandler
0046ac6a flashfxp.exe Forms     3807   +7 TCustomForm.DefaultHandler
00476b7d flashfxp.exe Controls  4329   +2 TControl.WMNCLButtonDown
0046b754 flashfxp.exe Forms     4143  +12 TCustomForm.WMNCLButtonDown
004768e1 flashfxp.exe Controls  4233  +37 TControl.WndProc
00479116 flashfxp.exe Controls  5698  +42 TWinControl.WndProc
004699dd flashfxp.exe Forms     3190 +139 TCustomForm.WndProc
004c449e flashfxp.exe ThemeMgr   591  +10 TWindowProcList.DispatchMessage
004c4df4 flashfxp.exe ThemeMgr  1149  +38 TThemeManager.FormWindowProc
004c62f8 flashfxp.exe ThemeMgr  2056   +2 TThemeManager.PreFormWindowProc
00478da0 flashfxp.exe Controls  5571   +3 TWinControl.MainWndProc
00466aac flashfxp.exe Forms     1484   +8 StdWndProc
77d196c2 user32.dll                       DispatchMessageA
0046f6a3 flashfxp.exe Forms     6898  +34 TApplication.ProcessMessage
0046f6da flashfxp.exe Forms     6936   +1 TApplication.HandleMessage
0046f8fa flashfxp.exe Forms     7026  +21 TApplication.Run
00624e6c flashfxp.exe FlashFXP   671 +503 initialization

thread $188c:
7c92e514 ntdll.dll              KiFastSystemCallRet
7c92daa8 ntdll.dll              NtReplyWaitReceivePortEx
0044bc01 flashfxp.exe madExcept CallThreadProc
0044bc43 flashfxp.exe madExcept ThreadExceptFrame
>> created by main thread ($1674) at:
77e5d14a RPCRT4.dll             

thread $1e68:
7c92e514 ntdll.dll              KiFastSystemCallRet
7c92d218 ntdll.dll              NtDelayExecution
7c8023eb kernel32.dll           SleepEx
7c802450 kernel32.dll           Sleep
0044bc01 flashfxp.exe madExcept CallThreadProc
0044bc43 flashfxp.exe madExcept ThreadExceptFrame
>> created by main thread ($1674) at:
769e0a23 ole32.dll              

thread $1f88:
7c92e514 ntdll.dll              KiFastSystemCallRet
7c92daa8 ntdll.dll              NtReplyWaitReceivePortEx
0044bc01 flashfxp.exe madExcept CallThreadProc
0044bc43 flashfxp.exe madExcept ThreadExceptFrame
>> created by thread $188c at:
77e5d14a RPCRT4.dll             

thread $eec (TChangeHandlerThread):
7c92e514 ntdll.dll                              KiFastSystemCallRet
7c92df48 ntdll.dll                              NtWaitForMultipleObjects
7c80958a kernel32.dll                           WaitForMultipleObjectsEx
7c80a110 kernel32.dll                           WaitForMultipleObjects
00507339 flashfxp.exe UPTShellControls 4021 +11 TChangeHandlerThread.Execute
0044bcce flashfxp.exe madExcept                 HookedTThreadExecute
0041b104 flashfxp.exe Classes          6898  +1 ThreadProc
00403f38 flashfxp.exe System                    ThreadWrapper
0044bc01 flashfxp.exe madExcept                 CallThreadProc
0044bc43 flashfxp.exe madExcept                 ThreadExceptFrame
>> created by main thread ($1674) at:
00506fff flashfxp.exe UPTShellControls 3916  +2 TChangeHandlerThread.Create

thread $1f6c: <priority:1>
7c92e514 ntdll.dll  KiFastSystemCallRet
7c92da48 ntdll.dll  NtRemoveIoCompletion

:
>> internal error in GetModuleReport:
7c930c8e ???

disassembling:
[...]
7c930c3e   jmp     loc_7c931023
7c930c43   mov     [ebp-$28], edx
7c930c46   mov     ecx, eax
7c930c48   test    ax, $ffff
7c930c4c   jnz     loc_7c930ce9
7c930c52   shr     ecx, $10
7c930c55   and     ecx, $ff
7c930c5b   jz      loc_7c93126b
7c930c61   movsx   eax, byte ptr [ecx+$7c930b08]
7c930c68   add     eax, $10
7c930c6b   lea     eax, [edx+eax*8]
7c930c6e   mov     [ebp-$28], eax
7c930c71   mov     esi, [eax+4]
7c930c74   sub     esi, 8
7c930c77   mov     [ebp-$38], esi
7c930c7a   lea     ecx, [esi+8]
7c930c7d   mov     edi, [ecx]
7c930c7f   mov     [ebp-$f4], edi
7c930c85   mov     eax, [esi+$c]
7c930c88   mov     [ebp-$98], eax
7c930c8e > mov     edx, [eax]
7c930c90   cmp     edx, [edi+4]
7c930c93   jnz     loc_7c956b7d
7c930c99   cmp     edx, ecx
7c930c9b   jnz     loc_7c956b7d
7c930ca1   mov     [eax], edi
7c930ca3   mov     [edi+4], eax
7c930ca6   cmp     edi, eax
7c930ca8   jnz     loc_7c930ef6
7c930cae   movzx   ecx, word ptr [esi]
7c930cb1   mov     eax, ecx
7c930cb3   shr     eax, 3
7c930cb6   mov     [ebp-$d8], eax
7c930cbc   and     ecx, 7
7c930cbf   xor     edx, edx
7c930cc1   inc     edx
7c930cc2   shl     edx, cl
7c930cc4   mov     [ebp-$fc], edx
7c930cca   lea     eax, [eax+ebx+$158]
7c930cd1   xor     ecx, ecx
7c930cd3   mov     cl, [eax]
[...]

