Actually I am dumb... you meant the the "Execute" call for the Handler.
The handler gets called once, and when I spit out the aRequest data out to examine, none of the files and such data is there.
I assume way this is structured maybe, I am missing out on something.
Maybe somewhat related to this?
https://www.atozed.com/forums/post-6078.html
I made a TIDHTTPServer sample and kinda got data, but in this case, the PNG file gets nuked at the end... But this is what spits out in the IDHTTPServer program.
--21249664815111044322705812
Content-Disposition: form-data; name="MailFrom"
Content-Type: text/plain; charset="iso-8859-1"
StevenC@twc.com
--21249664815111044322705812
Content-Disposition: form-data; name="MailSubject"
Content-Type: text/plain; charset="iso-8859-1"
bug report
--21249664815111044322705812
Content-Disposition: form-data; name="MailBody"
Content-Type: text/plain; charset="iso-8859-1"
please find the bug report attached
--21249664815111044322705812
Content-Disposition: form-data; name="MailAddr"
Content-Type: text/plain; charset="iso-8859-1"
stevenc@cp.com
--21249664815111044322705812
Content-Disposition: form-data; name="BugReport"; filename="bugreport.txt"
Content-Type: application/octet-stream
date/time : 2021-05-22, 23:29:02, 947ms
computer name : M4800-PC
wts client name : DESKTOP-6DLKM83
user name : CPStevenC
registered owner : CPStevenC
operating system : Windows 10 x64 build 19042
system language : English
system up time : 12 hours 10 minutes
program up time : 901 milliseconds
processors : 8x Intel® Core™ i7-4900MQ CPU @ 2.80GHz
physical memory : 26251/32673 MB (free/total)
free disk space : (C
348.63 GB
display mode : 1920x1080, 32 bit
process id : $2b10
allocated memory : 47.41 MB
largest free block : 1.97 GB
command line : "C:\delphi projects\CMW\CMW.exe"
executable : CMW.exe
exec. date/time : 2021-05-22 23:28
version : 93.21.0.2
compiled with : Delphi 10.2 Tokyo
contact name : Steven
contact email : StevenC@twc.com
madExcept version : 5.1.0
callstack crc : $d83410d1, $b59fdc9a, $2e146bb1
exception number : 1
exception class : EDivByZero
exception message : Division by zero.
thread $33cc:
022ebdcd +1ed CMW.exe CMW 1451 +30 SetupMadExceptEmail
0235062b +02b CMW.exe CMW 1459 +2 initialization
7609fa27 +017 KERNEL32.DLL BaseThreadInitThunk
thread $1218:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $1b24:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $3774:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $2cdc:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $135c:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $2550:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $29a0:
768304f3 +93 KERNELBASE.dll WaitForSingleObjectEx
7683044d +0d KERNELBASE.dll WaitForSingleObject
006fec31 +0d CMW.exe madExcept 17496 +6 CallThreadProcSafe
006fec96 +32 CMW.exe madExcept 17546 +9 ThreadExceptFrame
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by thread $33cc at:
609355e5 +00 winspool.drv
modules:
00400000 CMW.exe 93.21.0.2 C:\delphi projects\CMW
11000000 LIBEAY32.dll 1.0.2.10 C:\delphi projects\CMW
12000000 ssleay32.dll 1.0.2.10 C:\delphi projects\CMW
46480000 security.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
58370000 windowscodecs.dll 10.0.19041.928 C:\WINDOWS\system32
598d0000 TextShaping.dll C:\WINDOWS\SYSTEM32
59970000 olepro32.dll 10.0.19041.84 C:\WINDOWS\SYSTEM32
59a10000 oledlg.dll 10.0.19041.746 C:\WINDOWS\SYSTEM32
5da10000 oleacc.dll 7.2.19041.746 C:\WINDOWS\SYSTEM32
5da70000 gdiplus.dll 10.0.19041.928 C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.928_none_429ce31a8a8fefd2
60670000 COMCTL32.dll 6.10.19041.844 C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423
60910000 winspool.drv 10.0.19041.746 C:\WINDOWS\SYSTEM32
60980000 mpr.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
60c30000 apphelp.dll 10.0.19041.928 C:\WINDOWS\SYSTEM32
60cd0000 ondemandconnroutehelper.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
60cf0000 wininet.dll 11.0.19041.844 C:\WINDOWS\SYSTEM32
62a60000 propsys.dll 7.0.19041.746 C:\WINDOWS\system32
62bf0000 wintypes.dll 10.0.19041.928 C:\WINDOWS\SYSTEM32
62cd0000 CoreMessaging.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
62d70000 CoreUIComponents.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
62ff0000 textinputframework.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
674e0000 Msftedit.DLL 10.0.19041.789 C:\WINDOWS\SYSTEM32
6ae40000 HHCtrl.OCX 10.0.19041.746 C:\WINDOWS\SYSTEM32
6b120000 FaultRep.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
6b3a0000 WINSTA.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
6b780000 DWMAPI.DLL 10.0.19041.746 C:\WINDOWS\SYSTEM32
6b7b0000 uxtheme.dll 10.0.19041.746 C:\WINDOWS\system32
6bae0000 winmm.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
6bb50000 winmmbase.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bb70000 MSACM32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bb90000 MsVfW32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bbc0000 avifil32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
70470000 WINNSI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
70710000 usp10.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
707b0000 iertutil.dll 11.0.19041.964 C:\WINDOWS\SYSTEM32
71b80000 SHFolder.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
71df0000 IPHLPAPI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
72240000 profapi.dll 10.0.19041.844 C:\WINDOWS\SYSTEM32
72260000 Wldp.dll 10.0.19041.662 C:\WINDOWS\SYSTEM32
73730000 windows.storage.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
73d40000 SSPICLI.DLL 10.0.19041.906 C:\WINDOWS\SYSTEM32
73d70000 SECUR32.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
73e90000 ntmarta.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
746d0000 kernel.appcore.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
74700000 dbgcore.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74800000 NETUTILS.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74910000 DPAPI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74930000 wsock32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
749c0000 netapi32.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
749e0000 ODBC32.DLL 10.0.19041.1 C:\WINDOWS\SYSTEM32
74b00000 winhttp.dll 10.0.19041.906 C:\WINDOWS\SYSTEM32
74cc0000 wtsapi32.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75050000 dbghelp.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
754f0000 version.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75500000 mswsock.dll 10.0.19041.546 C:\WINDOWS\system32
75760000 gdi32full.dll 10.0.19041.928 C:\WINDOWS\System32
75840000 ADVAPI32.dll 10.0.19041.610 C:\WINDOWS\System32
758c0000 msvcp_win.dll 10.0.19041.789 C:\WINDOWS\System32
75940000 RPCRT4.dll 10.0.19041.928 C:\WINDOWS\System32
75a60000 shlwapi.dll 10.0.19041.746 C:\WINDOWS\System32
75ab0000 GDI32.dll 10.0.19041.746 C:\WINDOWS\System32
75ae0000 ucrtbase.dll 10.0.19041.789 C:\WINDOWS\System32
75c00000 crypt32.dll 10.0.19041.844 C:\WINDOWS\System32
75d20000 clbcatq.dll 2001.12.10941.16384 C:\WINDOWS\System32
75df0000 combase.dll 10.0.19041.928 C:\WINDOWS\System32
76080000 KERNEL32.DLL 10.0.19041.928 C:\WINDOWS\System32
76170000 Msctf.dll 10.0.19041.964 C:\WINDOWS\System32
763c0000 oleaut32.dll 10.0.19041.985 C:\WINDOWS\System32
76460000 user32.dll 10.0.19041.906 C:\WINDOWS\System32
76600000 ole32.dll 10.0.19041.746 C:\WINDOWS\System32
766f0000 win32u.dll 10.0.19041.985 C:\WINDOWS\System32
76720000 KERNELBASE.dll 10.0.19041.964 C:\WINDOWS\System32
76940000 shcore.dll 10.0.19041.964 C:\WINDOWS\System32
769d0000 WS2_32.dll 10.0.19041.546 C:\WINDOWS\System32
76a40000 NSI.dll 10.0.19041.610 C:\WINDOWS\System32
76a50000 comdlg32.dll 10.0.19041.906 C:\WINDOWS\System32
76b90000 sechost.dll 10.0.19041.906 C:\WINDOWS\System32
76c10000 SHELL32.dll 10.0.19041.964 C:\WINDOWS\System32
771d0000 CFGMGR32.dll 10.0.19041.546 C:\WINDOWS\System32
77270000 bcrypt.dll 10.0.19041.546 C:\WINDOWS\System32
77290000 bcryptPrimitives.dll 10.0.19041.662 C:\WINDOWS\System32
772f0000 IMM32.DLL 10.0.19041.546 C:\WINDOWS\System32
777e0000 msvcrt.dll 7.0.19041.546 C:\WINDOWS\System32
778b0000 ntdll.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
007c Registry 0 0 0
024c smss.exe 0 0 0
02a4 csrss.exe 0 0 0
03f8 wininit.exe 0 0 0
0054 csrss.exe 1 0 0
02dc winlogon.exe 1 0 0
030c services.exe 0 0 0
033c lsass.exe 0 0 0
02a8 svchost.exe 0 0 0
0390 fontdrvhost.exe 1 0 0
0374 fontdrvhost.exe 0 0 0
0448 svchost.exe 0 0 0
0474 svchost.exe 0 0 0
04ac WUDFHost.exe 0 0 0
04f0 LogonUI.exe 1 0 0
04f8 dwm.exe 1 0 0
0550 svchost.exe 0 0 0
0574 svchost.exe 0 0 0
057c svchost.exe 0 0 0
0584 svchost.exe 0 0 0
0590 svchost.exe 0 0 0
0648 svchost.exe 0 0 0
0650 svchost.exe 0 0 0
06ac svchost.exe 0 0 0
0708 svchost.exe 0 0 0
0720 svchost.exe 0 0 0
0734 svchost.exe 0 0 0
073c svchost.exe 0 0 0
07bc svchost.exe 0 0 0
07d8 svchost.exe 0 0 0
0440 svchost.exe 0 0 0
082c svchost.exe 0 0 0
0870 svchost.exe 0 0 0
08f0 svchost.exe 0 0 0
08f8 igfxCUIService.exe 0 0 0
0908 svchost.exe 0 0 0
099c svchost.exe 0 0 0
09d8 NVDisplay.Container.exe 0 0 0
09ec nvwmi64.exe 0 0 0
09f8 svchost.exe 0 0 0
0a2c dasHost.exe 0 0 0
0a40 svchost.exe 0 0 0
0ad8 svchost.exe 0 0 0
0b5c svchost.exe 0 0 0
0b84 svchost.exe 0 0 0
0b8c svchost.exe 0 0 0
0bac svchost.exe 0 0 0
0bf8 svchost.exe 0 0 0
05f8 svchost.exe 0 0 0
0af0 Memory Compression 0 0 0
0c44 svchost.exe 0 0 0
0c5c svchost.exe 0 0 0
0cc0 svchost.exe 0 0 0
0d50 svchost.exe 0 0 0
0d70 NVDisplay.Container.exe 1 0 0
0dc8 svchost.exe 0 0 0
0ecc svchost.exe 0 0 0
1030 svchost.exe 0 0 0
1114 RtkAudioService64.exe 0 0 0
115c svchost.exe 0 0 0
11a4 svchost.exe 0 0 0
11e0 svchost.exe 0 0 0
1250 svchost.exe 0 0 0
125c svchost.exe 0 0 0
12d8 dasHost.exe 0 0 0
13ac svchost.exe 0 0 0
13c4 WmiPrvSE.exe 0 0 0
109c svchost.exe 0 0 0
1394 svchost.exe 0 0 0
1414 svchost.exe 0 0 0
144c svchost.exe 0 0 0
1458 svchost.exe 0 0 0
1460 svchost.exe 0 0 0
1480 svchost.exe 0 0 0
14d8 svchost.exe 0 0 0
1560 spoolsv.exe 0 0 0
1630 HidMonitorSvc.exe 0 0 0
1638 ibtsiva.exe 0 0 0
1650 svchost.exe 0 0 0
1660 svchost.exe 0 0 0
1668 IpOverUsbSvc.exe 0 0 0
1678 dcagentservice.exe 0 0 0
1680 svchost.exe 0 0 0
16a4 DbgSvc.exe 0 0 0
16ac OfficeClickToRun.exe 0 0 0
16cc nd2svc.exe 0 0 0
16e4 o2flash.exe 0 0 0
16ec capiws.exe 0 0 0
1700 NvTelemetryContainer.exe 0 0 0
1758 svchost.exe 0 0 0
1760 svchost.exe 0 0 0
1770 RstMwService.exe 0 0 0
1778 svchost.exe 0 0 0
178c svchost.exe 0 0 0
1794 ss_conn_service.exe 0 0 0
17a8 sqlwriter.exe 0 0 0
17b0 svchost.exe 0 0 0
17d8 MsMpEng.exe 0 0 0
17f0 svchost.exe 0 0 0
1478 ss_conn_service2.exe 0 0 0
1570 svchost.exe 0 0 0
18b0 RAVBg64.exe 1 0 0
18b8 svchost.exe 0 0 0
19c8 svchost.exe 0 0 0
1bb4 dllhost.exe 0 0 0
1ecc msdtc.exe 0 0 0
1bd0 NisSrv.exe 0 0 0
1e04 dcondemand.exe 0 0 0
1db4 conhost.exe 0 0 0
203c SecureDCProcess.exe 0 0 0
2070 conhost.exe 0 0 0
2134 unsecapp.exe 0 0 0
22ec dllhost.exe 0 0 0
22c8 svchost.exe 0 0 0
1d70 svchost.exe 0 0 0
2340 svchost.exe 0 0 0
0618 printfilterpipelinesvc.exe 0 0 0
0cd8 DDVRulesProcessor.exe 0 0 0
1420 Dsapi.exe 0 0 0
1bac ServiceShell.exe 0 0 0
113c svchost.exe 0 0 0
235c SearchIndexer.exe 0 0 0
0338 WmiPrvSE.exe 0 0 0
1d4c svchost.exe 0 0 0
1424 jhi_service.exe 0 0 0
236c LMS.exe 0 0 0
1cd0 SgrmBroker.exe 0 0 0
23d8 SupportAssistAgent.exe 0 0 0
05d4 DDVDataCollector.exe 0 0 0
1fe4 DDVCollectorSvcApi.exe 0 0 0
0e7c isa.exe 0 0 0
02b0 SupportAssistOsRecovery.exe 0 0 0
1c24 csrss.exe 2 0 0
05ac winlogon.exe 2 0 0
0e28 WUDFHost.exe 0 0 0
19ec fontdrvhost.exe 2 0 0
12d4 dwm.exe 2 0 0
09b8 nvwmi64.exe 2 0 0
0c28 NVDisplay.Container.exe 2 0 0
23c8 svchost.exe 0 0 0
13e0 rdpclip.exe 2 4 31 normal C:\Windows\System32
1078 sihost.exe 2 0 10 normal C:\Windows\System32
1ce0 svchost.exe 2 0 1 normal C:\Windows\System32
1488 svchost.exe 2 0 4 normal C:\Windows\System32
1590 svchost.exe 0 0 0
16d4 taskhostw.exe 2 8 6 normal C:\Windows\System32
06cc svchost.exe 0 0 0
137c svchost.exe 0 0 0
22fc ctfmon.exe 2 0 0
1e2c PresentationFontCache.exe 0 0 0
17d4 explorer.exe 2 302 308 normal C:\Windows
0e2c svchost.exe 0 0 0
2560 svchost.exe 2 0 10 normal C:\Windows\System32
26dc StartMenuExperienceHost.exe 2 7 21 normal C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
2734 RuntimeBroker.exe 2 40 2 normal C:\Windows\System32
2798 SearchApp.exe 2 21 63 normal C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy
0664 RuntimeBroker.exe 2 36 7 normal C:\Windows\System32
21c4 svchost.exe 0 0 0
1824 YourPhone.exe 2 0 8 normal C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21042.110.0_x64__8wekyb3d8bbwe
2a2c SettingSyncHost.exe 2 0 4 below normal C:\Windows\System32
2920 svchost.exe 2 0 1 normal C:\Windows\System32
2a10 RuntimeBroker.exe 2 0 2 normal C:\Windows\System32
2d18 TextInputHost.exe 2 0 25 normal C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
2d98 RuntimeBroker.exe 2 0 2 normal C:\Windows\System32
2dc8 SecurityHealthSystray.exe 2 7 6 normal C:\Windows\System32
2de8 SecurityHealthService.exe 0 0 0
2e40 Apoint.exe 2 13 14 normal C:\Program Files\DellTPad
2e98 ApMsgFwd.exe 2 0 0
2ec4 hidfind.exe 2 0 3 normal C:\Program Files\DellTPad
2ee0 ApntEx.exe 2 8 5 normal C:\Program Files\DellTPad
2efc conhost.exe 2 14 11 normal C:\Windows\System32
2f50 RtkNGUI64.exe 2 13 28 normal C:\Program Files\Realtek\Audio\HDA
2f90 RAVBg64.exe 2 5 15 normal C:\Program Files\Realtek\Audio\HDA
2fec WavesSvc64.exe 2 0 2 normal C:\Program Files\Waves\MaxxAudio
0ef4 TortoiseProc.exe 2 191 96 normal C:\Program Files\TortoiseSVN\bin
1b30 NetDrive2.exe 2 0 1 normal C:\Program Files\NetDrive2
1334 NetDrive2.exe 2 247 100 normal C:\PROGRA~1\NETDRI~1
2e3c AppleMobileDeviceProcess.exe 2 0 4 normal C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64
2f48 cefs.exe 2 21 2 normal C:\PROGRA~1\NETDRI~1
345c Telegram.exe 2 93 79 normal C:\Users\CPStevenC\AppData\Roaming\Telegram Desktop
3648 RAVBg64.exe 2 5 13 below normal C:\Program Files\Realtek\Audio\HDA
1b98 IAStorIcon.exe 2 30 24 normal C:\Program Files\Intel\Intel® Rapid Storage Technology
36e0 ShellExperienceHost.exe 2 0 25 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
0ab8 RuntimeBroker.exe 2 0 4 normal C:\Windows\System32
32bc dcagenttrayicon.exe 2 41 19 normal C:\Program Files (x86)\DesktopCentral_Agent\bin
2218 UserOOBEBroker.exe 2 0 1 normal C:\Windows\System32\oobe
35d8 svchost.exe 0 0 0
19b8 Video.UI.exe 2 0 8 normal C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21021.10311.0_x64__8wekyb3d8bbwe
2e18 Microsoft.Photos.exe 2 0 10 normal C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20120.4004.0_x64__8wekyb3d8bbwe
32c4 RuntimeBroker.exe 2 0 1 normal C:\Windows\System32
2d60 RuntimeBroker.exe 2 37 13 normal C:\Windows\System32
21c8 svchost.exe 0 0 0
2dbc adb.exe 2 0 5 normal C:\Users\Public\Documents\Embarcadero\Studio\19.0\PlatformSDKs\android-sdk-windows\platform-tools
1de4 msedge.exe 2 135 96 normal C:\Program Files (x86)\Microsoft\Edge\Application
37dc msedge.exe 2 0 3 normal C:\Program Files (x86)\Microsoft\Edge\Application
2aac msedge.exe 2 8 11 above normal C:\Program Files (x86)\Microsoft\Edge\Application
22d8 msedge.exe 2 0 1 normal C:\Program Files (x86)\Microsoft\Edge\Application
0eac msedge.exe 2 0 1 normal C:\Program Files (x86)\Microsoft\Edge\Application
23a4 msedge.exe 2 0 0 normal C:\Program Files (x86)\Microsoft\Edge\Application
1888 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
0a38 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
2e08 dllhost.exe 2 0 3 normal C:\Windows\System32
3044 svchost.exe 0 0 0
19d8 bds.exe 2 1893 759 normal C:\Program Files (x86)\Embarcadero\Studio\19.0\bin
2d28 svchost.exe 0 0 0
29e8 svchost.exe 0 0 0
2128 svchost.exe 0 0 0
2680 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
3060 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
0cec svchost.exe 0 0 0
3724 svchost.exe 0 0 0
3414 svchost.exe 0 0 0
10cc svchost.exe 0 0 0
06fc smartscreen.exe 2 0 4 normal C:\Windows\System32
3048 bds.exe 2 1822 690 normal C:\Program Files (x86)\Embarcadero\Studio\19.0\bin
2b10 CMW.exe 2 77 67 normal C:\delphi projects\CMW
1ebc PostDataDemo.exe 2 76 50 normal C:\Software\intraweb demos\IntraWeb-master\XIV\Delphi\PostDataDemo\Win32\Debug
10bc splwow64.exe 2 0 2 normal C:\Windows
14b0 GameBarPresenceWriter.exe 2 0 1 normal C:\Windows\System32
28a4 audiodg.exe 0 0 0
2ce0 svchost.exe 0 0 0
hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Fax
- HP LaserJet P2015 PCL6 Class Driver
- HPBFA384 (HP ENVY Pro 6400 series)
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote (Desktop)
- Root Print Queue
+ {36fc9e60-c465-11cf-8056-444553540000}
- Generic SuperSpeed USB Hub
- Generic USB Hub
- Generic USB Hub
- Generic USB Hub
- Generic USB Hub
- Intel® 8 Series/C220 Series USB EHCI #1 - 8C26 (driver 9.4.0.1017)
- Intel® 8 Series/C220 Series USB EHCI #2 - 8C2D (driver 9.4.0.1017)
- Intel® USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub (USB 3.0)
+ {4d36e965-e325-11ce-bfc1-08002be10318}
- HL-DT-ST DVD+-RW GS40N
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- ACPI x64-based PC
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- Samsung SSD 850 EVO 1TB
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel® HD Graphics 4600 (driver 20.19.15.5063)
- Microsoft Remote Display Adapter
- NVIDIA Quadro K1100M (driver 24.21.14.1163)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Remote Desktop Keyboard Device
- Standard PS/2 Keyboard
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Intel® Display Audio (driver 6.16.0.3208)
- Jam Classic Hands-Free AG Audio
- Jam Classic Stereo
- Realtek High Definition Audio (driver 6.0.1.6098)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Generic Non-PnP Monitor
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Dell Touchpad (driver 10.3201.101.121)
- Remote Desktop Mouse Device
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network) #3
- Intel® Dual Band Wireless-AC 7260 (driver 18.33.11.2)
- Intel® Ethernet Connection I217-LM (driver 12.18.9.10)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #11
- Microsoft Wi-Fi Direct Virtual Adapter #12
- TAP Adapter OAS NDIS 6.0 (driver 9.0.0.21)
- TAP-Windows Adapter V9 (driver 9.0.0.21)
- VirtualBox Host-Only Ethernet Adapter #3 (driver 6.1.16.40961)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e978-e325-11ce-bfc1-08002be10318}
- Communications Port (COM1)
- ECP Printer Port (LPT1)
- Standard Serial over Bluetooth link (COM4)
- Standard Serial over Bluetooth link (COM4)
+ {4d36e979-e325-11ce-bfc1-08002be10318}
- HP ENVY Pro 6400 series PCL-3 (driver 31.1.2001.7898)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- BayHubTech/O2Micro Integrated MMC/SD controller (driver 2.2.2.1076)
- Intel® Chipset SATA/PCIe RST Premium Controller (driver 17.5.3.1026)
- Microsoft iSCSI Initiator
- Microsoft Storage Spaces Controller
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- ACPI Fixed Feature Button
- ACPI Lid
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone
- Charge Arbitration Driver
- Composite Bus Enumerator
- Dell Data Vault Control Device (driver 2.0.5.0)
- Direct memory access controller
- High Definition Audio Controller
- High Definition Audio Controller
- High precision event timer
- Intel® 8 Series/C220 Series PCI Express Root Port #1 - 8C10 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #3 - 8C14 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #4 - 8C16 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #5 - 8C18 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #7 - 8C1C (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #8 - 8C1E (driver 10.1.1.38)
- Intel® 8 Series/C220 Series SMBus Controller - 8C22 (driver 10.1.1.38)
- Intel® Management Engine Interface (driver 11.7.0.1032)
- Intel® QM87 LPC Controller - 8C4F (driver 10.1.1.38)
- Intel® Xeon® processor E3 - 1200 v3/4th Gen Core processor DRAM Controller - 0C04 (driver 10.1.1.38)
- Intel® Xeon® processor E3 - 1200 v3/4th Gen Core processor PCI Express x16 Controller - 0C01 (driver 10.1.1.38)
- Jam Classic Hands-Free AG
- Legacy device
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft Basic Display Driver
- Microsoft Basic Render Driver
- Microsoft Hyper-V Virtualization Infrastructure Driver
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator
- Microsoft Windows Management Interface for ACPI
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- NDIS Virtual Network Adapter Enumerator
- Numeric data processor
- PCI Express Root Complex
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Camera Bus
- Remote Desktop Device Redirector Bus
- Remote Desktop USB Hub
- STMicroelectronics 3-Axis Digital Accelerometer (driver 2.2.3.13)
- System board
- System CMOS/real time clock
- System timer
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
+ {50dd5230-ba8a-11d1-bf5d-0000f805f530}
- Microsoft Usbccid Smartcard Reader (WUDF)
+ {5175d334-c371-4806-b3ba-71fd53c9258d}
- Microsoft Visual Studio Location Simulator Sensor (driver 11.0.0.0)
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Generic volume shadow copy
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- HP ENVY Pro 6400 series [BFA384]
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Passport Container Enumeration Bus
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Smart Card Device Enumeration Bus
- Wi-Fi 3
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft ACPI-Compliant Control Method Battery
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- Airplane Mode Switch (driver 17.38.40.165)
- Airplane Mode Switch Collection (driver 17.38.40.165)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Remote Audio
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {db4f6ddd-9c0e-45e4-9597-78dbbad0f412}
- Smart card filter driver
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Intel® Wireless Bluetooth® (driver 20.60.0.4)
- Jam Classic
- Jam Classic Avrcp Transport
- Microsoft Bluetooth Enumerator
- Microsoft Bluetooth LE Enumerator
+ {e0def58b-33e8-4ff0-a75d-f20e1f68e5d7}
- DBUtilDrv2 Device (driver 0.0.2.6)
cpu registers:
eax = 00000000
ebx = 00274000
ecx = 00000000
edx = 00000000
esi = 02350600
edi = 02350600
eip = 022ebdcd
esp = 0019fc80
ebp = 0019fcd4
stack dump:
0019fc80 dc fc 19 00 3c b8 40 00 - d4 fc 19 00 00 00 00 00 ....<.@.........
0019fc90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fca0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcd0 00 00 00 00 70 ff 19 00 - 30 06 35 02 60 ff 19 00 ....p...0.5.`...
0019fce0 3c b8 40 00 70 ff 19 00 - 00 06 35 02 00 06 35 02 <.@.p.....5...5.
0019fcf0 00 40 27 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .@'.............
0019fd00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd20 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fda0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fdb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
disassembling:
022ebbe0 public CMW.SetupMadExceptEmail: ; function entry point
022ebbe0 1421 push ebp
022ebbe1 mov ebp, esp
022ebbe3 mov ecx, 9
022ebbe8 push 0
022ebbea push 0
022ebbec dec ecx
022ebbed jnz loc_22ebbe8
022ebbef xor eax, eax
022ebbf1 push ebp
022ebbf2 push $22ebdf3 ; System.@HandleFinally
022ebbf7 push dword ptr fs:[eax]
022ebbfa mov fs:[eax], esp
022ebbfd 1423 push $22ebe0c
022ebc02 mov ecx, $22ebe3c
022ebc07 mov edx, $22ebe64
022ebc0c mov eax, $80000001
022ebc11 call -$1c28b02 ($6c3114) ; madExcept.RegWriteStr
022ebc16 1424 push $22ebea8
022ebc1b mov ecx, $22ebee4
022ebc20 mov edx, $22ebe64
022ebc25 mov eax, $80000001
022ebc2a call -$1c28b1b ($6c3114) ; madExcept.RegWriteStr
022ebc2f 1427 lea eax, [ebp-8]
022ebc32 call -$1c1487b ($6d73bc) ; madExcept.MESettings
022ebc37 mov eax, [ebp-8]
022ebc3a mov dl, 1
022ebc3c mov ecx, [eax]
022ebc3e call dword ptr [ecx+$fc]
022ebc44 1428 lea eax, [ebp-$c]
022ebc47 call -$1c14890 ($6d73bc) ; madExcept.MESettings
022ebc4c mov eax, [ebp-$c]
022ebc4f mov edx, $22ebf0c ; 'chesser.wtf/MadExcept'
022ebc54 mov ecx, [eax]
022ebc56 call dword ptr [ecx+$104]
022ebc5c 1429 lea eax, [ebp-$10]
022ebc5f call -$1c148a8 ($6d73bc) ; madExcept.MESettings
022ebc64 mov eax, [ebp-$10]
022ebc67 mov edx, $22b8
022ebc6c mov ecx, [eax]
022ebc6e call dword ptr [ecx+$114]
022ebc74 1430 lea eax, [ebp-$14]
022ebc77 call -$1c148c0 ($6d73bc) ; madExcept.MESettings
022ebc7c mov eax, [ebp-$14]
022ebc7f xor edx, edx
022ebc81 mov ecx, [eax]
022ebc83 call dword ptr [ecx+$10c]
022ebc89 1431 lea eax, [ebp-$18]
022ebc8c call -$1c148d5 ($6d73bc) ; madExcept.MESettings
022ebc91 mov eax, [ebp-$18]
022ebc94 mov edx, $22ebf30
022ebc99 mov ecx, [eax]
022ebc9b call dword ptr [ecx+$11c]
022ebca1 1432 lea eax, [ebp-$1c]
022ebca4 call -$1c148ed ($6d73bc) ; madExcept.MESettings
022ebca9 mov eax, [ebp-$1c]
022ebcac mov edx, $22ebf30
022ebcb1 mov ecx, [eax]
022ebcb3 call dword ptr [ecx+$124]
022ebcb9 1435 lea eax, [ebp-$20]
022ebcbc call -$1c14905 ($6d73bc) ; madExcept.MESettings
022ebcc1 mov eax, [ebp-$20]
022ebcc4 mov edx, $22ebf44
022ebcc9 mov ecx, [eax]
022ebccb call dword ptr [ecx+$dc]
022ebcd1 1436 lea eax, [ebp-$24]
022ebcd4 call -$1c1491d ($6d73bc) ; madExcept.MESettings
022ebcd9 mov eax, [ebp-$24]
022ebcdc mov edx, $22ebf7c
022ebce1 mov ecx, [eax]
022ebce3 call dword ptr [ecx+$1a4]
022ebce9 1437 lea eax, [ebp-$28]
022ebcec call -$1c14935 ($6d73bc) ; madExcept.MESettings
022ebcf1 mov eax, [ebp-$28]
022ebcf4 xor edx, edx
022ebcf6 mov ecx, [eax]
022ebcf8 call dword ptr [ecx+$194]
022ebcfe 1438 lea eax, [ebp-$2c]
022ebd01 call -$1c1494a ($6d73bc) ; madExcept.MESettings
022ebd06 mov eax, [ebp-$2c]
022ebd09 xor edx, edx
022ebd0b mov ecx, [eax]
022ebd0d call dword ptr [ecx+$19c]
022ebd13 1439 lea eax, [ebp-$30]
022ebd16 call -$1c1495f ($6d73bc) ; madExcept.MESettings
022ebd1b mov eax, [ebp-$30]
022ebd1e xor edx, edx
022ebd20 mov ecx, [eax]
022ebd22 call dword ptr [ecx+$15c]
022ebd28 1441 mov eax, [$23c3874]
022ebd2d mov edx, $22ebf7c
022ebd32 call -$1edf5f3 ($40c744) ; System.@UStrAsg
022ebd37 1443 lea eax, [ebp-$34]
022ebd3a call -$1c14983 ($6d73bc) ; madExcept.MESettings
022ebd3f mov eax, [ebp-$34]
022ebd42 mov edx, $22ebfb8 ; 'mail.twc.com'
022ebd47 mov ecx, [eax]
022ebd49 call dword ptr [ecx+$164]
022ebd4f 1444 lea eax, [ebp-$38]
022ebd52 call -$1c1499b ($6d73bc) ; madExcept.MESettings
022ebd57 mov eax, [ebp-$38]
022ebd5a xor edx, edx
022ebd5c mov ecx, [eax]
022ebd5e call dword ptr [ecx+$16c]
022ebd64 1445 lea eax, [ebp-$3c]
022ebd67 call -$1c149b0 ($6d73bc) ; madExcept.MESettings
022ebd6c mov eax, [ebp-$3c]
022ebd6f mov dl, 1
022ebd71 mov ecx, [eax]
022ebd73 call dword ptr [ecx+$174]
022ebd79 1446 lea eax, [ebp-$40]
022ebd7c call -$1c149c5 ($6d73bc) ; madExcept.MESettings
022ebd81 mov eax, [ebp-$40]
022ebd84 mov edx, $24b
022ebd89 mov ecx, [eax]
022ebd8b call dword ptr [ecx+$17c]
022ebd91 1447 lea eax, [ebp-$44]
022ebd94 call -$1c149dd ($6d73bc) ; madExcept.MESettings
022ebd99 mov eax, [ebp-$44]
022ebd9c mov edx, $22ebf7c
022ebda1 mov ecx, [eax]
022ebda3 call dword ptr [ecx+$184]
022ebda9 1448 lea eax, [ebp-$48]
022ebdac call -$1c149f5 ($6d73bc) ; madExcept.MESettings
022ebdb1 mov eax, [ebp-$48]
022ebdb4 mov edx, $22ebfd4
022ebdb9 mov ecx, [eax]
022ebdbb call dword ptr [ecx+$18c]
022ebdc1 1450 xor eax, eax
022ebdc3 mov [ebp-4], eax
022ebdc6 1451 mov ecx, [ebp-4]
022ebdc9 mov eax, [ebp-4]
022ebdcc cdq
022ebdcd > idiv ecx
022ebdcf mov [ebp-4], eax
022ebdd2 1452 xor eax, eax
022ebdd4 pop edx
022ebdd5 pop ecx
022ebdd6 pop ecx
022ebdd7 mov fs:[eax], edx
022ebdda push $22ebdfa
022ebddf lea eax, [ebp-$48]
022ebde2 mov edx, [$6c1474]
022ebde8 mov ecx, $11
022ebded call -$1eddb22 ($40e2d0) ; System.@FinalizeArray
022ebdf2 ret
022ebdf3 jmp -$1ee063c ($40b7bc) ; System.@HandleFinally
022ebdf8 jmp loc_22ebddf
022ebdfa mov esp, ebp
022ebdfc pop ebp
022ebdfd ret
error details:
this is a madexcept test
--21249664815111044322705812
Content-Disposition: form-data; name="ScreenShot"; filename="screenshot.png"
Content-Type: application/octet-stream
?PNG
^^^--- PNG file but it gets clobbered I guess... not even really show how this works as the code just seems to convert a stream into a String and dumps it...
not even sure how one would pull files out.
The handler gets called once, and when I spit out the aRequest data out to examine, none of the files and such data is there.
I assume way this is structured maybe, I am missing out on something.
Maybe somewhat related to this?
https://www.atozed.com/forums/post-6078.html
I made a TIDHTTPServer sample and kinda got data, but in this case, the PNG file gets nuked at the end... But this is what spits out in the IDHTTPServer program.
--21249664815111044322705812
Content-Disposition: form-data; name="MailFrom"
Content-Type: text/plain; charset="iso-8859-1"
StevenC@twc.com
--21249664815111044322705812
Content-Disposition: form-data; name="MailSubject"
Content-Type: text/plain; charset="iso-8859-1"
bug report
--21249664815111044322705812
Content-Disposition: form-data; name="MailBody"
Content-Type: text/plain; charset="iso-8859-1"
please find the bug report attached
--21249664815111044322705812
Content-Disposition: form-data; name="MailAddr"
Content-Type: text/plain; charset="iso-8859-1"
stevenc@cp.com
--21249664815111044322705812
Content-Disposition: form-data; name="BugReport"; filename="bugreport.txt"
Content-Type: application/octet-stream
date/time : 2021-05-22, 23:29:02, 947ms
computer name : M4800-PC
wts client name : DESKTOP-6DLKM83
user name : CPStevenC
registered owner : CPStevenC
operating system : Windows 10 x64 build 19042
system language : English
system up time : 12 hours 10 minutes
program up time : 901 milliseconds
processors : 8x Intel® Core™ i7-4900MQ CPU @ 2.80GHz
physical memory : 26251/32673 MB (free/total)
free disk space : (C
348.63 GBdisplay mode : 1920x1080, 32 bit
process id : $2b10
allocated memory : 47.41 MB
largest free block : 1.97 GB
command line : "C:\delphi projects\CMW\CMW.exe"
executable : CMW.exe
exec. date/time : 2021-05-22 23:28
version : 93.21.0.2
compiled with : Delphi 10.2 Tokyo
contact name : Steven
contact email : StevenC@twc.com
madExcept version : 5.1.0
callstack crc : $d83410d1, $b59fdc9a, $2e146bb1
exception number : 1
exception class : EDivByZero
exception message : Division by zero.
thread $33cc:
022ebdcd +1ed CMW.exe CMW 1451 +30 SetupMadExceptEmail
0235062b +02b CMW.exe CMW 1459 +2 initialization
7609fa27 +017 KERNEL32.DLL BaseThreadInitThunk
thread $1218:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $1b24:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $3774:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $2cdc:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $135c:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $2550:
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
thread $29a0:
768304f3 +93 KERNELBASE.dll WaitForSingleObjectEx
7683044d +0d KERNELBASE.dll WaitForSingleObject
006fec31 +0d CMW.exe madExcept 17496 +6 CallThreadProcSafe
006fec96 +32 CMW.exe madExcept 17546 +9 ThreadExceptFrame
7609fa27 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by thread $33cc at:
609355e5 +00 winspool.drv
modules:
00400000 CMW.exe 93.21.0.2 C:\delphi projects\CMW
11000000 LIBEAY32.dll 1.0.2.10 C:\delphi projects\CMW
12000000 ssleay32.dll 1.0.2.10 C:\delphi projects\CMW
46480000 security.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
58370000 windowscodecs.dll 10.0.19041.928 C:\WINDOWS\system32
598d0000 TextShaping.dll C:\WINDOWS\SYSTEM32
59970000 olepro32.dll 10.0.19041.84 C:\WINDOWS\SYSTEM32
59a10000 oledlg.dll 10.0.19041.746 C:\WINDOWS\SYSTEM32
5da10000 oleacc.dll 7.2.19041.746 C:\WINDOWS\SYSTEM32
5da70000 gdiplus.dll 10.0.19041.928 C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.928_none_429ce31a8a8fefd2
60670000 COMCTL32.dll 6.10.19041.844 C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423
60910000 winspool.drv 10.0.19041.746 C:\WINDOWS\SYSTEM32
60980000 mpr.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
60c30000 apphelp.dll 10.0.19041.928 C:\WINDOWS\SYSTEM32
60cd0000 ondemandconnroutehelper.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
60cf0000 wininet.dll 11.0.19041.844 C:\WINDOWS\SYSTEM32
62a60000 propsys.dll 7.0.19041.746 C:\WINDOWS\system32
62bf0000 wintypes.dll 10.0.19041.928 C:\WINDOWS\SYSTEM32
62cd0000 CoreMessaging.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
62d70000 CoreUIComponents.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
62ff0000 textinputframework.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
674e0000 Msftedit.DLL 10.0.19041.789 C:\WINDOWS\SYSTEM32
6ae40000 HHCtrl.OCX 10.0.19041.746 C:\WINDOWS\SYSTEM32
6b120000 FaultRep.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
6b3a0000 WINSTA.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
6b780000 DWMAPI.DLL 10.0.19041.746 C:\WINDOWS\SYSTEM32
6b7b0000 uxtheme.dll 10.0.19041.746 C:\WINDOWS\system32
6bae0000 winmm.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
6bb50000 winmmbase.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bb70000 MSACM32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bb90000 MsVfW32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
6bbc0000 avifil32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
70470000 WINNSI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
70710000 usp10.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
707b0000 iertutil.dll 11.0.19041.964 C:\WINDOWS\SYSTEM32
71b80000 SHFolder.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
71df0000 IPHLPAPI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
72240000 profapi.dll 10.0.19041.844 C:\WINDOWS\SYSTEM32
72260000 Wldp.dll 10.0.19041.662 C:\WINDOWS\SYSTEM32
73730000 windows.storage.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
73d40000 SSPICLI.DLL 10.0.19041.906 C:\WINDOWS\SYSTEM32
73d70000 SECUR32.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
73e90000 ntmarta.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
746d0000 kernel.appcore.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
74700000 dbgcore.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74800000 NETUTILS.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74910000 DPAPI.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
74930000 wsock32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
749c0000 netapi32.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
749e0000 ODBC32.DLL 10.0.19041.1 C:\WINDOWS\SYSTEM32
74b00000 winhttp.dll 10.0.19041.906 C:\WINDOWS\SYSTEM32
74cc0000 wtsapi32.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75050000 dbghelp.dll 10.0.19041.867 C:\WINDOWS\SYSTEM32
754f0000 version.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75500000 mswsock.dll 10.0.19041.546 C:\WINDOWS\system32
75760000 gdi32full.dll 10.0.19041.928 C:\WINDOWS\System32
75840000 ADVAPI32.dll 10.0.19041.610 C:\WINDOWS\System32
758c0000 msvcp_win.dll 10.0.19041.789 C:\WINDOWS\System32
75940000 RPCRT4.dll 10.0.19041.928 C:\WINDOWS\System32
75a60000 shlwapi.dll 10.0.19041.746 C:\WINDOWS\System32
75ab0000 GDI32.dll 10.0.19041.746 C:\WINDOWS\System32
75ae0000 ucrtbase.dll 10.0.19041.789 C:\WINDOWS\System32
75c00000 crypt32.dll 10.0.19041.844 C:\WINDOWS\System32
75d20000 clbcatq.dll 2001.12.10941.16384 C:\WINDOWS\System32
75df0000 combase.dll 10.0.19041.928 C:\WINDOWS\System32
76080000 KERNEL32.DLL 10.0.19041.928 C:\WINDOWS\System32
76170000 Msctf.dll 10.0.19041.964 C:\WINDOWS\System32
763c0000 oleaut32.dll 10.0.19041.985 C:\WINDOWS\System32
76460000 user32.dll 10.0.19041.906 C:\WINDOWS\System32
76600000 ole32.dll 10.0.19041.746 C:\WINDOWS\System32
766f0000 win32u.dll 10.0.19041.985 C:\WINDOWS\System32
76720000 KERNELBASE.dll 10.0.19041.964 C:\WINDOWS\System32
76940000 shcore.dll 10.0.19041.964 C:\WINDOWS\System32
769d0000 WS2_32.dll 10.0.19041.546 C:\WINDOWS\System32
76a40000 NSI.dll 10.0.19041.610 C:\WINDOWS\System32
76a50000 comdlg32.dll 10.0.19041.906 C:\WINDOWS\System32
76b90000 sechost.dll 10.0.19041.906 C:\WINDOWS\System32
76c10000 SHELL32.dll 10.0.19041.964 C:\WINDOWS\System32
771d0000 CFGMGR32.dll 10.0.19041.546 C:\WINDOWS\System32
77270000 bcrypt.dll 10.0.19041.546 C:\WINDOWS\System32
77290000 bcryptPrimitives.dll 10.0.19041.662 C:\WINDOWS\System32
772f0000 IMM32.DLL 10.0.19041.546 C:\WINDOWS\System32
777e0000 msvcrt.dll 7.0.19041.546 C:\WINDOWS\System32
778b0000 ntdll.dll 10.0.19041.964 C:\WINDOWS\SYSTEM32
processes:
0000 Idle 0 0 0
0004 System 0 0 0
007c Registry 0 0 0
024c smss.exe 0 0 0
02a4 csrss.exe 0 0 0
03f8 wininit.exe 0 0 0
0054 csrss.exe 1 0 0
02dc winlogon.exe 1 0 0
030c services.exe 0 0 0
033c lsass.exe 0 0 0
02a8 svchost.exe 0 0 0
0390 fontdrvhost.exe 1 0 0
0374 fontdrvhost.exe 0 0 0
0448 svchost.exe 0 0 0
0474 svchost.exe 0 0 0
04ac WUDFHost.exe 0 0 0
04f0 LogonUI.exe 1 0 0
04f8 dwm.exe 1 0 0
0550 svchost.exe 0 0 0
0574 svchost.exe 0 0 0
057c svchost.exe 0 0 0
0584 svchost.exe 0 0 0
0590 svchost.exe 0 0 0
0648 svchost.exe 0 0 0
0650 svchost.exe 0 0 0
06ac svchost.exe 0 0 0
0708 svchost.exe 0 0 0
0720 svchost.exe 0 0 0
0734 svchost.exe 0 0 0
073c svchost.exe 0 0 0
07bc svchost.exe 0 0 0
07d8 svchost.exe 0 0 0
0440 svchost.exe 0 0 0
082c svchost.exe 0 0 0
0870 svchost.exe 0 0 0
08f0 svchost.exe 0 0 0
08f8 igfxCUIService.exe 0 0 0
0908 svchost.exe 0 0 0
099c svchost.exe 0 0 0
09d8 NVDisplay.Container.exe 0 0 0
09ec nvwmi64.exe 0 0 0
09f8 svchost.exe 0 0 0
0a2c dasHost.exe 0 0 0
0a40 svchost.exe 0 0 0
0ad8 svchost.exe 0 0 0
0b5c svchost.exe 0 0 0
0b84 svchost.exe 0 0 0
0b8c svchost.exe 0 0 0
0bac svchost.exe 0 0 0
0bf8 svchost.exe 0 0 0
05f8 svchost.exe 0 0 0
0af0 Memory Compression 0 0 0
0c44 svchost.exe 0 0 0
0c5c svchost.exe 0 0 0
0cc0 svchost.exe 0 0 0
0d50 svchost.exe 0 0 0
0d70 NVDisplay.Container.exe 1 0 0
0dc8 svchost.exe 0 0 0
0ecc svchost.exe 0 0 0
1030 svchost.exe 0 0 0
1114 RtkAudioService64.exe 0 0 0
115c svchost.exe 0 0 0
11a4 svchost.exe 0 0 0
11e0 svchost.exe 0 0 0
1250 svchost.exe 0 0 0
125c svchost.exe 0 0 0
12d8 dasHost.exe 0 0 0
13ac svchost.exe 0 0 0
13c4 WmiPrvSE.exe 0 0 0
109c svchost.exe 0 0 0
1394 svchost.exe 0 0 0
1414 svchost.exe 0 0 0
144c svchost.exe 0 0 0
1458 svchost.exe 0 0 0
1460 svchost.exe 0 0 0
1480 svchost.exe 0 0 0
14d8 svchost.exe 0 0 0
1560 spoolsv.exe 0 0 0
1630 HidMonitorSvc.exe 0 0 0
1638 ibtsiva.exe 0 0 0
1650 svchost.exe 0 0 0
1660 svchost.exe 0 0 0
1668 IpOverUsbSvc.exe 0 0 0
1678 dcagentservice.exe 0 0 0
1680 svchost.exe 0 0 0
16a4 DbgSvc.exe 0 0 0
16ac OfficeClickToRun.exe 0 0 0
16cc nd2svc.exe 0 0 0
16e4 o2flash.exe 0 0 0
16ec capiws.exe 0 0 0
1700 NvTelemetryContainer.exe 0 0 0
1758 svchost.exe 0 0 0
1760 svchost.exe 0 0 0
1770 RstMwService.exe 0 0 0
1778 svchost.exe 0 0 0
178c svchost.exe 0 0 0
1794 ss_conn_service.exe 0 0 0
17a8 sqlwriter.exe 0 0 0
17b0 svchost.exe 0 0 0
17d8 MsMpEng.exe 0 0 0
17f0 svchost.exe 0 0 0
1478 ss_conn_service2.exe 0 0 0
1570 svchost.exe 0 0 0
18b0 RAVBg64.exe 1 0 0
18b8 svchost.exe 0 0 0
19c8 svchost.exe 0 0 0
1bb4 dllhost.exe 0 0 0
1ecc msdtc.exe 0 0 0
1bd0 NisSrv.exe 0 0 0
1e04 dcondemand.exe 0 0 0
1db4 conhost.exe 0 0 0
203c SecureDCProcess.exe 0 0 0
2070 conhost.exe 0 0 0
2134 unsecapp.exe 0 0 0
22ec dllhost.exe 0 0 0
22c8 svchost.exe 0 0 0
1d70 svchost.exe 0 0 0
2340 svchost.exe 0 0 0
0618 printfilterpipelinesvc.exe 0 0 0
0cd8 DDVRulesProcessor.exe 0 0 0
1420 Dsapi.exe 0 0 0
1bac ServiceShell.exe 0 0 0
113c svchost.exe 0 0 0
235c SearchIndexer.exe 0 0 0
0338 WmiPrvSE.exe 0 0 0
1d4c svchost.exe 0 0 0
1424 jhi_service.exe 0 0 0
236c LMS.exe 0 0 0
1cd0 SgrmBroker.exe 0 0 0
23d8 SupportAssistAgent.exe 0 0 0
05d4 DDVDataCollector.exe 0 0 0
1fe4 DDVCollectorSvcApi.exe 0 0 0
0e7c isa.exe 0 0 0
02b0 SupportAssistOsRecovery.exe 0 0 0
1c24 csrss.exe 2 0 0
05ac winlogon.exe 2 0 0
0e28 WUDFHost.exe 0 0 0
19ec fontdrvhost.exe 2 0 0
12d4 dwm.exe 2 0 0
09b8 nvwmi64.exe 2 0 0
0c28 NVDisplay.Container.exe 2 0 0
23c8 svchost.exe 0 0 0
13e0 rdpclip.exe 2 4 31 normal C:\Windows\System32
1078 sihost.exe 2 0 10 normal C:\Windows\System32
1ce0 svchost.exe 2 0 1 normal C:\Windows\System32
1488 svchost.exe 2 0 4 normal C:\Windows\System32
1590 svchost.exe 0 0 0
16d4 taskhostw.exe 2 8 6 normal C:\Windows\System32
06cc svchost.exe 0 0 0
137c svchost.exe 0 0 0
22fc ctfmon.exe 2 0 0
1e2c PresentationFontCache.exe 0 0 0
17d4 explorer.exe 2 302 308 normal C:\Windows
0e2c svchost.exe 0 0 0
2560 svchost.exe 2 0 10 normal C:\Windows\System32
26dc StartMenuExperienceHost.exe 2 7 21 normal C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
2734 RuntimeBroker.exe 2 40 2 normal C:\Windows\System32
2798 SearchApp.exe 2 21 63 normal C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy
0664 RuntimeBroker.exe 2 36 7 normal C:\Windows\System32
21c4 svchost.exe 0 0 0
1824 YourPhone.exe 2 0 8 normal C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21042.110.0_x64__8wekyb3d8bbwe
2a2c SettingSyncHost.exe 2 0 4 below normal C:\Windows\System32
2920 svchost.exe 2 0 1 normal C:\Windows\System32
2a10 RuntimeBroker.exe 2 0 2 normal C:\Windows\System32
2d18 TextInputHost.exe 2 0 25 normal C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
2d98 RuntimeBroker.exe 2 0 2 normal C:\Windows\System32
2dc8 SecurityHealthSystray.exe 2 7 6 normal C:\Windows\System32
2de8 SecurityHealthService.exe 0 0 0
2e40 Apoint.exe 2 13 14 normal C:\Program Files\DellTPad
2e98 ApMsgFwd.exe 2 0 0
2ec4 hidfind.exe 2 0 3 normal C:\Program Files\DellTPad
2ee0 ApntEx.exe 2 8 5 normal C:\Program Files\DellTPad
2efc conhost.exe 2 14 11 normal C:\Windows\System32
2f50 RtkNGUI64.exe 2 13 28 normal C:\Program Files\Realtek\Audio\HDA
2f90 RAVBg64.exe 2 5 15 normal C:\Program Files\Realtek\Audio\HDA
2fec WavesSvc64.exe 2 0 2 normal C:\Program Files\Waves\MaxxAudio
0ef4 TortoiseProc.exe 2 191 96 normal C:\Program Files\TortoiseSVN\bin
1b30 NetDrive2.exe 2 0 1 normal C:\Program Files\NetDrive2
1334 NetDrive2.exe 2 247 100 normal C:\PROGRA~1\NETDRI~1
2e3c AppleMobileDeviceProcess.exe 2 0 4 normal C:\Program Files\WindowsApps\AppleInc.iTunes_12113.17.53090.0_x64__nzyj5cx40ttqa\AMDS64
2f48 cefs.exe 2 21 2 normal C:\PROGRA~1\NETDRI~1
345c Telegram.exe 2 93 79 normal C:\Users\CPStevenC\AppData\Roaming\Telegram Desktop
3648 RAVBg64.exe 2 5 13 below normal C:\Program Files\Realtek\Audio\HDA
1b98 IAStorIcon.exe 2 30 24 normal C:\Program Files\Intel\Intel® Rapid Storage Technology
36e0 ShellExperienceHost.exe 2 0 25 normal C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
0ab8 RuntimeBroker.exe 2 0 4 normal C:\Windows\System32
32bc dcagenttrayicon.exe 2 41 19 normal C:\Program Files (x86)\DesktopCentral_Agent\bin
2218 UserOOBEBroker.exe 2 0 1 normal C:\Windows\System32\oobe
35d8 svchost.exe 0 0 0
19b8 Video.UI.exe 2 0 8 normal C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21021.10311.0_x64__8wekyb3d8bbwe
2e18 Microsoft.Photos.exe 2 0 10 normal C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20120.4004.0_x64__8wekyb3d8bbwe
32c4 RuntimeBroker.exe 2 0 1 normal C:\Windows\System32
2d60 RuntimeBroker.exe 2 37 13 normal C:\Windows\System32
21c8 svchost.exe 0 0 0
2dbc adb.exe 2 0 5 normal C:\Users\Public\Documents\Embarcadero\Studio\19.0\PlatformSDKs\android-sdk-windows\platform-tools
1de4 msedge.exe 2 135 96 normal C:\Program Files (x86)\Microsoft\Edge\Application
37dc msedge.exe 2 0 3 normal C:\Program Files (x86)\Microsoft\Edge\Application
2aac msedge.exe 2 8 11 above normal C:\Program Files (x86)\Microsoft\Edge\Application
22d8 msedge.exe 2 0 1 normal C:\Program Files (x86)\Microsoft\Edge\Application
0eac msedge.exe 2 0 1 normal C:\Program Files (x86)\Microsoft\Edge\Application
23a4 msedge.exe 2 0 0 normal C:\Program Files (x86)\Microsoft\Edge\Application
1888 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
0a38 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
2e08 dllhost.exe 2 0 3 normal C:\Windows\System32
3044 svchost.exe 0 0 0
19d8 bds.exe 2 1893 759 normal C:\Program Files (x86)\Embarcadero\Studio\19.0\bin
2d28 svchost.exe 0 0 0
29e8 svchost.exe 0 0 0
2128 svchost.exe 0 0 0
2680 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
3060 msedge.exe 2 0 0 idle C:\Program Files (x86)\Microsoft\Edge\Application
0cec svchost.exe 0 0 0
3724 svchost.exe 0 0 0
3414 svchost.exe 0 0 0
10cc svchost.exe 0 0 0
06fc smartscreen.exe 2 0 4 normal C:\Windows\System32
3048 bds.exe 2 1822 690 normal C:\Program Files (x86)\Embarcadero\Studio\19.0\bin
2b10 CMW.exe 2 77 67 normal C:\delphi projects\CMW
1ebc PostDataDemo.exe 2 76 50 normal C:\Software\intraweb demos\IntraWeb-master\XIV\Delphi\PostDataDemo\Win32\Debug
10bc splwow64.exe 2 0 2 normal C:\Windows
14b0 GameBarPresenceWriter.exe 2 0 1 normal C:\Windows\System32
28a4 audiodg.exe 0 0 0
2ce0 svchost.exe 0 0 0
hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Fax
- HP LaserJet P2015 PCL6 Class Driver
- HPBFA384 (HP ENVY Pro 6400 series)
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote (Desktop)
- Root Print Queue
+ {36fc9e60-c465-11cf-8056-444553540000}
- Generic SuperSpeed USB Hub
- Generic USB Hub
- Generic USB Hub
- Generic USB Hub
- Generic USB Hub
- Intel® 8 Series/C220 Series USB EHCI #1 - 8C26 (driver 9.4.0.1017)
- Intel® 8 Series/C220 Series USB EHCI #2 - 8C2D (driver 9.4.0.1017)
- Intel® USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub (USB 3.0)
+ {4d36e965-e325-11ce-bfc1-08002be10318}
- HL-DT-ST DVD+-RW GS40N
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- ACPI x64-based PC
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- Samsung SSD 850 EVO 1TB
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel® HD Graphics 4600 (driver 20.19.15.5063)
- Microsoft Remote Display Adapter
- NVIDIA Quadro K1100M (driver 24.21.14.1163)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Remote Desktop Keyboard Device
- Standard PS/2 Keyboard
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Intel® Display Audio (driver 6.16.0.3208)
- Jam Classic Hands-Free AG Audio
- Jam Classic Stereo
- Realtek High Definition Audio (driver 6.0.1.6098)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Generic Non-PnP Monitor
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Dell Touchpad (driver 10.3201.101.121)
- Remote Desktop Mouse Device
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network) #3
- Intel® Dual Band Wireless-AC 7260 (driver 18.33.11.2)
- Intel® Ethernet Connection I217-LM (driver 12.18.9.10)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #11
- Microsoft Wi-Fi Direct Virtual Adapter #12
- TAP Adapter OAS NDIS 6.0 (driver 9.0.0.21)
- TAP-Windows Adapter V9 (driver 9.0.0.21)
- VirtualBox Host-Only Ethernet Adapter #3 (driver 6.1.16.40961)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e978-e325-11ce-bfc1-08002be10318}
- Communications Port (COM1)
- ECP Printer Port (LPT1)
- Standard Serial over Bluetooth link (COM4)
- Standard Serial over Bluetooth link (COM4)
+ {4d36e979-e325-11ce-bfc1-08002be10318}
- HP ENVY Pro 6400 series PCL-3 (driver 31.1.2001.7898)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- BayHubTech/O2Micro Integrated MMC/SD controller (driver 2.2.2.1076)
- Intel® Chipset SATA/PCIe RST Premium Controller (driver 17.5.3.1026)
- Microsoft iSCSI Initiator
- Microsoft Storage Spaces Controller
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- ACPI Fixed Feature Button
- ACPI Lid
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone
- Charge Arbitration Driver
- Composite Bus Enumerator
- Dell Data Vault Control Device (driver 2.0.5.0)
- Direct memory access controller
- High Definition Audio Controller
- High Definition Audio Controller
- High precision event timer
- Intel® 8 Series/C220 Series PCI Express Root Port #1 - 8C10 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #3 - 8C14 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #4 - 8C16 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #5 - 8C18 (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #7 - 8C1C (driver 10.1.1.38)
- Intel® 8 Series/C220 Series PCI Express Root Port #8 - 8C1E (driver 10.1.1.38)
- Intel® 8 Series/C220 Series SMBus Controller - 8C22 (driver 10.1.1.38)
- Intel® Management Engine Interface (driver 11.7.0.1032)
- Intel® QM87 LPC Controller - 8C4F (driver 10.1.1.38)
- Intel® Xeon® processor E3 - 1200 v3/4th Gen Core processor DRAM Controller - 0C04 (driver 10.1.1.38)
- Intel® Xeon® processor E3 - 1200 v3/4th Gen Core processor PCI Express x16 Controller - 0C01 (driver 10.1.1.38)
- Jam Classic Hands-Free AG
- Legacy device
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft Basic Display Driver
- Microsoft Basic Render Driver
- Microsoft Hyper-V Virtualization Infrastructure Driver
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator
- Microsoft Windows Management Interface for ACPI
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- NDIS Virtual Network Adapter Enumerator
- Numeric data processor
- PCI Express Root Complex
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Camera Bus
- Remote Desktop Device Redirector Bus
- Remote Desktop USB Hub
- STMicroelectronics 3-Axis Digital Accelerometer (driver 2.2.3.13)
- System board
- System CMOS/real time clock
- System timer
- UMBus Enumerator
- UMBus Enumerator
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
- Intel® Core™ i7-4900MQ CPU @ 2.80GHz
+ {50dd5230-ba8a-11d1-bf5d-0000f805f530}
- Microsoft Usbccid Smartcard Reader (WUDF)
+ {5175d334-c371-4806-b3ba-71fd53c9258d}
- Microsoft Visual Studio Location Simulator Sensor (driver 11.0.0.0)
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Generic volume shadow copy
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- HP ENVY Pro 6400 series [BFA384]
- Microsoft Device Association Root Enumerator
- Microsoft GS Wavetable Synth
- Microsoft Passport Container Enumeration Bus
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Smart Card Device Enumeration Bus
- Wi-Fi 3
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
- Microsoft ACPI-Compliant Control Method Battery
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- Airplane Mode Switch (driver 17.38.40.165)
- Airplane Mode Switch Collection (driver 17.38.40.165)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Remote Audio
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {db4f6ddd-9c0e-45e4-9597-78dbbad0f412}
- Smart card filter driver
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Intel® Wireless Bluetooth® (driver 20.60.0.4)
- Jam Classic
- Jam Classic Avrcp Transport
- Microsoft Bluetooth Enumerator
- Microsoft Bluetooth LE Enumerator
+ {e0def58b-33e8-4ff0-a75d-f20e1f68e5d7}
- DBUtilDrv2 Device (driver 0.0.2.6)
cpu registers:
eax = 00000000
ebx = 00274000
ecx = 00000000
edx = 00000000
esi = 02350600
edi = 02350600
eip = 022ebdcd
esp = 0019fc80
ebp = 0019fcd4
stack dump:
0019fc80 dc fc 19 00 3c b8 40 00 - d4 fc 19 00 00 00 00 00 ....<.@.........
0019fc90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fca0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcc0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fcd0 00 00 00 00 70 ff 19 00 - 30 06 35 02 60 ff 19 00 ....p...0.5.`...
0019fce0 3c b8 40 00 70 ff 19 00 - 00 06 35 02 00 06 35 02 <.@.p.....5...5.
0019fcf0 00 40 27 00 00 00 00 00 - 00 00 00 00 00 00 00 00 .@'.............
0019fd00 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd10 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd20 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd30 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd40 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd50 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd60 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd70 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd80 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fd90 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fda0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0019fdb0 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
disassembling:
022ebbe0 public CMW.SetupMadExceptEmail: ; function entry point
022ebbe0 1421 push ebp
022ebbe1 mov ebp, esp
022ebbe3 mov ecx, 9
022ebbe8 push 0
022ebbea push 0
022ebbec dec ecx
022ebbed jnz loc_22ebbe8
022ebbef xor eax, eax
022ebbf1 push ebp
022ebbf2 push $22ebdf3 ; System.@HandleFinally
022ebbf7 push dword ptr fs:[eax]
022ebbfa mov fs:[eax], esp
022ebbfd 1423 push $22ebe0c
022ebc02 mov ecx, $22ebe3c
022ebc07 mov edx, $22ebe64
022ebc0c mov eax, $80000001
022ebc11 call -$1c28b02 ($6c3114) ; madExcept.RegWriteStr
022ebc16 1424 push $22ebea8
022ebc1b mov ecx, $22ebee4
022ebc20 mov edx, $22ebe64
022ebc25 mov eax, $80000001
022ebc2a call -$1c28b1b ($6c3114) ; madExcept.RegWriteStr
022ebc2f 1427 lea eax, [ebp-8]
022ebc32 call -$1c1487b ($6d73bc) ; madExcept.MESettings
022ebc37 mov eax, [ebp-8]
022ebc3a mov dl, 1
022ebc3c mov ecx, [eax]
022ebc3e call dword ptr [ecx+$fc]
022ebc44 1428 lea eax, [ebp-$c]
022ebc47 call -$1c14890 ($6d73bc) ; madExcept.MESettings
022ebc4c mov eax, [ebp-$c]
022ebc4f mov edx, $22ebf0c ; 'chesser.wtf/MadExcept'
022ebc54 mov ecx, [eax]
022ebc56 call dword ptr [ecx+$104]
022ebc5c 1429 lea eax, [ebp-$10]
022ebc5f call -$1c148a8 ($6d73bc) ; madExcept.MESettings
022ebc64 mov eax, [ebp-$10]
022ebc67 mov edx, $22b8
022ebc6c mov ecx, [eax]
022ebc6e call dword ptr [ecx+$114]
022ebc74 1430 lea eax, [ebp-$14]
022ebc77 call -$1c148c0 ($6d73bc) ; madExcept.MESettings
022ebc7c mov eax, [ebp-$14]
022ebc7f xor edx, edx
022ebc81 mov ecx, [eax]
022ebc83 call dword ptr [ecx+$10c]
022ebc89 1431 lea eax, [ebp-$18]
022ebc8c call -$1c148d5 ($6d73bc) ; madExcept.MESettings
022ebc91 mov eax, [ebp-$18]
022ebc94 mov edx, $22ebf30
022ebc99 mov ecx, [eax]
022ebc9b call dword ptr [ecx+$11c]
022ebca1 1432 lea eax, [ebp-$1c]
022ebca4 call -$1c148ed ($6d73bc) ; madExcept.MESettings
022ebca9 mov eax, [ebp-$1c]
022ebcac mov edx, $22ebf30
022ebcb1 mov ecx, [eax]
022ebcb3 call dword ptr [ecx+$124]
022ebcb9 1435 lea eax, [ebp-$20]
022ebcbc call -$1c14905 ($6d73bc) ; madExcept.MESettings
022ebcc1 mov eax, [ebp-$20]
022ebcc4 mov edx, $22ebf44
022ebcc9 mov ecx, [eax]
022ebccb call dword ptr [ecx+$dc]
022ebcd1 1436 lea eax, [ebp-$24]
022ebcd4 call -$1c1491d ($6d73bc) ; madExcept.MESettings
022ebcd9 mov eax, [ebp-$24]
022ebcdc mov edx, $22ebf7c
022ebce1 mov ecx, [eax]
022ebce3 call dword ptr [ecx+$1a4]
022ebce9 1437 lea eax, [ebp-$28]
022ebcec call -$1c14935 ($6d73bc) ; madExcept.MESettings
022ebcf1 mov eax, [ebp-$28]
022ebcf4 xor edx, edx
022ebcf6 mov ecx, [eax]
022ebcf8 call dword ptr [ecx+$194]
022ebcfe 1438 lea eax, [ebp-$2c]
022ebd01 call -$1c1494a ($6d73bc) ; madExcept.MESettings
022ebd06 mov eax, [ebp-$2c]
022ebd09 xor edx, edx
022ebd0b mov ecx, [eax]
022ebd0d call dword ptr [ecx+$19c]
022ebd13 1439 lea eax, [ebp-$30]
022ebd16 call -$1c1495f ($6d73bc) ; madExcept.MESettings
022ebd1b mov eax, [ebp-$30]
022ebd1e xor edx, edx
022ebd20 mov ecx, [eax]
022ebd22 call dword ptr [ecx+$15c]
022ebd28 1441 mov eax, [$23c3874]
022ebd2d mov edx, $22ebf7c
022ebd32 call -$1edf5f3 ($40c744) ; System.@UStrAsg
022ebd37 1443 lea eax, [ebp-$34]
022ebd3a call -$1c14983 ($6d73bc) ; madExcept.MESettings
022ebd3f mov eax, [ebp-$34]
022ebd42 mov edx, $22ebfb8 ; 'mail.twc.com'
022ebd47 mov ecx, [eax]
022ebd49 call dword ptr [ecx+$164]
022ebd4f 1444 lea eax, [ebp-$38]
022ebd52 call -$1c1499b ($6d73bc) ; madExcept.MESettings
022ebd57 mov eax, [ebp-$38]
022ebd5a xor edx, edx
022ebd5c mov ecx, [eax]
022ebd5e call dword ptr [ecx+$16c]
022ebd64 1445 lea eax, [ebp-$3c]
022ebd67 call -$1c149b0 ($6d73bc) ; madExcept.MESettings
022ebd6c mov eax, [ebp-$3c]
022ebd6f mov dl, 1
022ebd71 mov ecx, [eax]
022ebd73 call dword ptr [ecx+$174]
022ebd79 1446 lea eax, [ebp-$40]
022ebd7c call -$1c149c5 ($6d73bc) ; madExcept.MESettings
022ebd81 mov eax, [ebp-$40]
022ebd84 mov edx, $24b
022ebd89 mov ecx, [eax]
022ebd8b call dword ptr [ecx+$17c]
022ebd91 1447 lea eax, [ebp-$44]
022ebd94 call -$1c149dd ($6d73bc) ; madExcept.MESettings
022ebd99 mov eax, [ebp-$44]
022ebd9c mov edx, $22ebf7c
022ebda1 mov ecx, [eax]
022ebda3 call dword ptr [ecx+$184]
022ebda9 1448 lea eax, [ebp-$48]
022ebdac call -$1c149f5 ($6d73bc) ; madExcept.MESettings
022ebdb1 mov eax, [ebp-$48]
022ebdb4 mov edx, $22ebfd4
022ebdb9 mov ecx, [eax]
022ebdbb call dword ptr [ecx+$18c]
022ebdc1 1450 xor eax, eax
022ebdc3 mov [ebp-4], eax
022ebdc6 1451 mov ecx, [ebp-4]
022ebdc9 mov eax, [ebp-4]
022ebdcc cdq
022ebdcd > idiv ecx
022ebdcf mov [ebp-4], eax
022ebdd2 1452 xor eax, eax
022ebdd4 pop edx
022ebdd5 pop ecx
022ebdd6 pop ecx
022ebdd7 mov fs:[eax], edx
022ebdda push $22ebdfa
022ebddf lea eax, [ebp-$48]
022ebde2 mov edx, [$6c1474]
022ebde8 mov ecx, $11
022ebded call -$1eddb22 ($40e2d0) ; System.@FinalizeArray
022ebdf2 ret
022ebdf3 jmp -$1ee063c ($40b7bc) ; System.@HandleFinally
022ebdf8 jmp loc_22ebddf
022ebdfa mov esp, ebp
022ebdfc pop ebp
022ebdfd ret
error details:
this is a madexcept test
--21249664815111044322705812
Content-Disposition: form-data; name="ScreenShot"; filename="screenshot.png"
Content-Type: application/octet-stream
?PNG
^^^--- PNG file but it gets clobbered I guess... not even really show how this works as the code just seems to convert a stream into a String and dumps it...
not even sure how one would pull files out.