date/time : 2009-10-15 10:46 computer name : WWWCNAAACOM user name : Cnaaa operating system : Windows XP Service Pack 3 build 2600 system language : Chinese system up time : 1 hour 43 minutes program up time : 1 second processors : 2x Intel(R) Pentium(R) D CPU 3.00GHz physical memory : 583/1023 MB (空闲/总计) free disk space : (C:) 11.88 GB (D:) 38.86 GB display mode : 1440x900, 32 bit monitors : 1 process id : $5a8 allocated memory : 9.33 MB executable : flashfxp.exe executable hash : 1106AE93A939F45F361A58C980BF0463 executable size : 3040768 exec. date/time : 2009-10-14 14:46 version : 3.6.0.1240 madExcept version : 2.7k exception class : ERegistryException exception message : 无法设置数据为“ControlSet”. main thread ($bdc): 00432136 flashfxp.exe Registry 611 +4 TRegistry.PutData 00431f5c flashfxp.exe Registry 469 +1 TRegistry.WriteString 005ce800 flashfxp.exe FrmMain1 2639 +53 TFrmMain.WMScroll 004768e1 flashfxp.exe Controls 4233 +37 TControl.WndProc 00479116 flashfxp.exe Controls 5698 +42 TWinControl.WndProc 004699dd flashfxp.exe Forms 3190 +139 TCustomForm.WndProc 004c449e flashfxp.exe ThemeMgr 591 +10 TWindowProcList.DispatchMessage 004c4df4 flashfxp.exe ThemeMgr 1149 +38 TThemeManager.FormWindowProc 004c62f8 flashfxp.exe ThemeMgr 2056 +2 TThemeManager.PreFormWindowProc 00478da0 flashfxp.exe Controls 5571 +3 TWinControl.MainWndProc 00466aac flashfxp.exe Forms 1484 +8 StdWndProc 77d196c2 user32.dll DispatchMessageA 0046f6a3 flashfxp.exe Forms 6898 +34 TApplication.ProcessMessage 0046f6da flashfxp.exe Forms 6936 +1 TApplication.HandleMessage 0046f8fa flashfxp.exe Forms 7026 +21 TApplication.Run 00624e6c flashfxp.exe FlashFXP 671 +503 initialization thread $708: 7c92e514 ntdll.dll KiFastSystemCallRet 7c92df48 ntdll.dll NtWaitForMultipleObjects 0044bc01 flashfxp.exe madExcept CallThreadProc 0044bc43 flashfxp.exe madExcept ThreadExceptFrame >> created by main thread ($bdc) at: 77dc8c8c advapi32.dll 组件: 00400000 flashfxp.exe 3.6.0.1240 D:\FlashFXP 01820000 ssleay32.dll 0.9.8.7 D:\FlashFXP 07160000 audiodev.dll 5.2.5721.5145 C:\WINDOWS\system32 10000000 libeay32.dll 0.9.8.7 D:\FlashFXP 10930000 portabledeviceapi.dll 5.2.5721.5145 C:\WINDOWS\system32 11c70000 WMASF.DLL 11.0.5721.5238 C:\WINDOWS\system32 15110000 WMVCore.DLL 11.0.5721.5265 C:\WINDOWS\system32 16210000 wpdshext.dll 5.2.5721.5145 C:\WINDOWS\system32 1f840000 odbcint.dll 3.525.1117.0 C:\WINDOWS\system32 4ae90000 gdiplus.dll 5.2.6001.22319 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df 5adc0000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 5fdd0000 NETAPI32.dll 5.1.2600.5694 C:\WINDOWS\system32 62c20000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 71a10000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71a20000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71a40000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 71a90000 MPR.dll 5.1.2600.5512 C:\WINDOWS\system32 71b70000 SAMLIB.dll 5.1.2600.5512 C:\WINDOWS\System32 71b90000 ntlanman.dll 5.1.2600.5512 C:\WINDOWS\System32 71c00000 NETRAP.dll 5.1.2600.5512 C:\WINDOWS\System32 71c10000 NETUI1.dll 5.1.2600.5512 C:\WINDOWS\System32 71c50000 NETUI0.dll 5.1.2600.5512 C:\WINDOWS\System32 72f70000 winspool.drv 5.1.2600.5512 C:\WINDOWS\system32 73540000 ODBC32.dll 3.525.1132.0 C:\WINDOWS\system32 73640000 msctfime.ime 5.1.2600.5768 C:\WINDOWS\system32 73ce0000 shgina.dll 6.0.2900.5512 C:\WINDOWS\system32 73fa0000 USP10.dll 1.420.2600.5512 C:\WINDOWS\system32 74680000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 758d0000 MSGINA.dll 5.1.2600.5512 C:\WINDOWS\system32 759d0000 USERENV.dll 5.1.2600.5512 C:\WINDOWS\system32 75ed0000 drprov.dll 5.1.2600.5512 C:\WINDOWS\System32 75ee0000 davclnt.dll 5.1.2600.5512 C:\WINDOWS\System32 76060000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 762d0000 WINSTA.dll 5.1.2600.5512 C:\WINDOWS\system32 76300000 IMM32.DLL 5.1.2600.5512 C:\WINDOWS\system32 76320000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76570000 CSCDLL.dll 5.1.2600.5512 C:\WINDOWS\System32 76590000 cscui.dll 5.1.2600.5512 C:\WINDOWS\System32 765e0000 crypt32.dll 5.131.2600.5512 C:\WINDOWS\system32 76960000 ntshrui.dll 5.1.2600.5512 C:\WINDOWS\system32 76990000 ole32.dll 5.1.2600.5512 C:\WINDOWS\system32 76af0000 ATL.DLL 3.5.2284.2 C:\WINDOWS\system32 76b10000 winmm.dll 5.1.2600.5512 C:\WINDOWS\system32 76c00000 WINTRUST.dll 5.131.2600.5512 C:\WINDOWS\system32 76c60000 IMAGEHLP.dll 5.1.2600.5512 C:\WINDOWS\system32 76d70000 appHelp.dll 5.1.2600.5512 C:\WINDOWS\system32 76db0000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 76fa0000 CLBCATQ.DLL 2001.12.4414.700 C:\WINDOWS\system32 77020000 COMRes.dll 2001.12.4414.700 C:\WINDOWS\system32 770f0000 oleaut32.dll 5.1.2600.5512 C:\WINDOWS\system32 77180000 comctl32.dll 6.0.2900.5512 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 77bd0000 version.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77d10000 user32.dll 5.1.2600.5512 C:\WINDOWS\system32 77da0000 advapi32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e50000 RPCRT4.dll 5.1.2600.5795 C:\WINDOWS\system32 77ef0000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f40000 SHLWAPI.dll 6.0.2900.5512 C:\WINDOWS\system32 77fc0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c920000 ntdll.dll 5.1.2600.5755 C:\WINDOWS\system32 7d590000 shell32.dll 6.0.2900.5686 C:\WINDOWS\system32 disassembling: [...] 004320f8 mov eax, edi 004320fa call -$2dd2b ($4043d4) ; System.@LStrToPChar 004320ff push eax 00432100 mov eax, [ebx+4] 00432103 push eax 00432104 call -$2b181 ($406f88) ; Windows.RegSetValueEx 00432109 test eax, eax 0043210b jz loc_43213b 0043210d 611 mov [ebp-$c], edi 00432110 mov byte ptr [ebp-8], $b 00432114 lea eax, [ebp-$c] 00432117 push eax 00432118 push 0 0043211a lea edx, [ebp-$10] 0043211d mov eax, [$637660] 00432122 call -$2c13b ($405fec) ; System.LoadResString 00432127 mov ecx, [ebp-$10] 0043212a mov dl, 1 0043212c mov eax, [$431784] 00432131 call -$23e9e ($40e298) ; SysUtils.Exception.CreateFmt 00432136 > call -$2e733 ($403a08) ; System.@RaiseExcept 0043213b xor eax, eax 0043213d pop edx 0043213e pop ecx 0043213f pop ecx 00432140 mov fs:[eax], edx 00432143 push $432158 00432148 lea eax, [ebp-$10] 0043214b call -$2e1bc ($403f94) ; System.@LStrClr 00432150 ret 00432151 jmp -$2e806 ($403950) ; System.@HandleFinally 00432156 jmp loc_432148 00432158 612 pop edi 00432159 pop esi 0043215a pop ebx 0043215b mov esp, ebp 0043215d pop ebp 0043215e ret 8