date/time : 2023-07-08, 14:30:37, 738ms

computer name : DESKTOP-555SFPB

user name : user <admin>
registered owner : user
operating system : Windows 10 x64 build 19045
system language : Spanish
system up time : 16 hours 10 minutes
program up time : 11 minutes 42 seconds
processors : 4x Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
physical memory : 5015/8074 MB (free/total)
free disk space : (C:) 166.26 GB
display mode : 1366x768, 32 bit
process id : $2808
allocated memory : 88.19 MB
largest free block : 1.60 GB
executable : itop_isr_installer (1).exe
exec. date/time : 2023-07-08 14:14
version : 4.0.0.90
compiled with : Delphi 2009
madExcept version : 4.0.14
callstack crc : $603c2eae, $984cee6d, $40d00e42
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 0056A821 in module
'itop_isr_installer (1).exe'. Read of address 000001D8.

Main ($211c):
0056a821 +005 itop_isr_installer (1).exe RdImageButton 2418 +1
TRdImageButton.SetButtonState
006b1d8f +2bf itop_isr_installer (1).exe uMain 5119 +64
TfrmISRDownloader.setPage
006b1ea5 +019 itop_isr_installer (1).exe uMain 5190 +6
TfrmISRDownloader.showNextPage
006a50bb +00f itop_isr_installer (1).exe unitAnimatorThread 282 +2
AnimatorThread.NextPage
00499e28 +104 itop_isr_installer (1).exe Classes
CheckSynchronize
0049a73b +087 itop_isr_installer (1).exe Classes
TThread.WaitFor
0049a107 +033 itop_isr_installer (1).exe Classes
TThread.Destroy
006a4226 +012 itop_isr_installer (1).exe RdAnimation 1708 +1
TRdAniThread.Destroy
00404580 +008 itop_isr_installer (1).exe System 977 +0 TObject.Free
006a2d84 +028 itop_isr_installer (1).exe RdAnimation 1001 +7
TRdAnimator.Destroy
0049aa1b +047 itop_isr_installer (1).exe Classes
TComponent.DestroyComponents
0049a80f +04f itop_isr_installer (1).exe Classes
TComponent.Destroy
004f2d6f +0bb itop_isr_installer (1).exe Controls
TControl.Destroy
004f711d +0c9 itop_isr_installer (1).exe Controls
TWinControl.Destroy
0050ce44 +028 itop_isr_installer (1).exe Forms
TScrollingWinControl.Destroy
0050dd7d +0f9 itop_isr_installer (1).exe Forms
TCustomForm.Destroy
0049aa1b +047 itop_isr_installer (1).exe Classes
TComponent.DestroyComponents
0050bc65 +035 itop_isr_installer (1).exe Forms
DoneApplication
00470312 +026 itop_isr_installer (1).exe SysUtils DoExitProc
00405aa1 +065 itop_isr_installer (1).exe System 977 +0 @Halt0
006bb6b3 +0d7 itop_isr_installer (1).exe Setup 53 +17 initialization
764200c7 +017 KERNEL32.DLL
BaseThreadInitThunk

thread $1dac:
776fc797 +47 user32.dll MsgWaitForMultipleObjectsEx
776fc73a +1a user32.dll MsgWaitForMultipleObjects
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
71dd67ca +00 gdiplus.dll

thread $2534 (TRdAniThread): <suspended>

006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $31ec (TRdAniThread): <suspended>

006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $276c (TRdAniThread): <suspended>

006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $332c (TRdAniThread): <suspended>

006a41ef +1b itop_isr_installer (1).exe RdAnimation 1702 +1 TRdAniThread.Create

thread $2dbc:
75ff8e63 +93 KERNELBASE.dll WaitForSingleObjectEx
75ff8dbd +0d KERNELBASE.dll WaitForSingleObject
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
75ced94e +00 WS2_32.dll

thread $2528:
75ff8e63 +93 KERNELBASE.dll WaitForSingleObjectEx
75ff8dbd +0d KERNELBASE.dll WaitForSingleObject
004677b9 +0d itop_isr_installer (1).exe madExcept CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk
>> created by Main ($211c) at:
75ced94e +00 WS2_32.dll

thread $2894 (AnimatorThread):

76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1038 (AnimatorThread):

76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1624 (AnimatorThread):

75ff8e63 +093 KERNELBASE.dll
WaitForSingleObjectEx
75ff8dbd +00d KERNELBASE.dll
WaitForSingleObject
0049a4aa +13a itop_isr_installer (1).exe Classes
TThread.Synchronize
0049a55d +029 itop_isr_installer (1).exe Classes
TThread.Synchronize
006a4f8f +4d3 itop_isr_installer (1).exe unitAnimatorThread 247 +141
AnimatorThread.Execute
00405bc8 +028 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +00d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +037 itop_isr_installer (1).exe madExcept
ThreadExceptFrame
764200c7 +017 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +020 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $1388 (AnimatorThread):

76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $2e4c (AnimatorThread):

76016fa5 +45 KERNELBASE.dll SleepEx
76016f4a +0a KERNELBASE.dll Sleep
006a4aec +30 itop_isr_installer (1).exe unitAnimatorThread 114 +8
AnimatorThread.Execute
00405bc8 +28 itop_isr_installer (1).exe System 977 +0 ThreadWrapper
004677b9 +0d itop_isr_installer (1).exe madExcept
CallThreadProcSafe
00467823 +37 itop_isr_installer (1).exe madExcept ThreadExceptFrame
764200c7 +17 KERNEL32.DLL
BaseThreadInitThunk
>> created by Main ($211c) at:
006a499c +20 itop_isr_installer (1).exe unitAnimatorThread 71 +1
AnimatorThread.Create

thread $2440:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $2aa8:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

thread $3140:
764200c7 +17 KERNEL32.DLL BaseThreadInitThunk

modules:
00400000 itop_isr_installer (1).exe 4.0.0.90 C:\Users\user\Downloads
713e0000 DWrite.dll 10.0.19041.1566 C:\WINDOWS\SYSTEM32
715f0000 CoreMessaging.dll 10.0.19041.2193 C:\WINDOWS\System32
71690000 CoreUIComponents.dll 10.0.19041.546 C:\WINDOWS\System32
71910000 textinputframework.dll 10.0.19041.3031 C:\WINDOWS\SYSTEM32
719d0000 libssl-1_1.dll 1.1.0.5 C:\Users\user\AppData\
Local\Temp
71a30000 libcrypto-1_1.dll 1.1.0.5 C:\Users\user\AppData\
Local\Temp
71be0000 WindowsCodecs.dll 10.0.19041.1706 C:\WINDOWS\SYSTEM32
71d60000 gdiplus.dll 10.0.19041.2251 C:\WINDOWS\WinSxS\
x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.2251_none_d9513b1fe1046fc7
71ed0000 OneCoreUAPCommonProxyStub.dll 10.0.19041.3031 C:\Windows\System32
72290000 OneCoreCommonProxyStub.dll 10.0.19041.2546 C:\Windows\System32
722d0000 sppc.dll 10.0.19041.1682 C:\Windows\System32
722f0000 Bcp47Langs.dll 10.0.19041.1566 C:\Windows\System32
72340000 SLC.dll 10.0.19041.1682 C:\Windows\System32
72360000 appresolver.dll 10.0.19041.1620 C:\Windows\System32
723e0000 wintypes.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
724c0000 FLTLIB.DLL 10.0.19041.546 C:\WINDOWS\SYSTEM32
724d0000 Windows.StateRepositoryPS.dll 10.0.19041.2673 C:\Windows\System32
72570000 edputil.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
72590000 PROPSYS.dll 7.0.19041.1741 C:\WINDOWS\SYSTEM32
72960000 iertutil.dll 11.0.19041.3086 C:\WINDOWS\SYSTEM32
72b90000 dbgcore.DLL 10.0.19041.2788 C:\WINDOWS\SYSTEM32
72bc0000 dbghelp.dll 10.0.19041.1052 C:\WINDOWS\SYSTEM32
72dd0000 wininet.dll 11.0.19041.3031 C:\WINDOWS\SYSTEM32
73230000 uxtheme.dll 10.0.19041.2193 C:\WINDOWS\system32
732b0000 virtdisk.dll 10.0.19041.2311 C:\WINDOWS\SYSTEM32
732c0000 srvcli.dll 10.0.19041.1645 C:\WINDOWS\SYSTEM32
732e0000 urlmon.dll 11.0.19041.3031 C:\WINDOWS\SYSTEM32
734b0000 comctl32.dll 6.10.19041.1110 C:\WINDOWS\WinSxS\
x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
73700000 TextShaping.dll C:\WINDOWS\SYSTEM32
73940000 sfc_os.dll 10.0.19041.2311 C:\WINDOWS\System32
73950000 pcacli.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
73970000 explorerframe.dll 10.0.19041.1949 C:\WINDOWS\system32
73b20000 FaultRep.dll 10.0.19041.2546 C:\WINDOWS\SYSTEM32
73b90000 wsock32.dll 10.0.19041.1 C:\WINDOWS\SYSTEM32
73ba0000 msimg32.dll 10.0.19041.1466 C:\WINDOWS\SYSTEM32
73c80000 windows.storage.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
74290000 ntmarta.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
742c0000 netutils.dll 10.0.19041.1466 C:\WINDOWS\SYSTEM32
742d0000 version.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
743d0000 mswsock.dll 10.0.19041.546 C:\WINDOWS\System32
749a0000 kernel.appcore.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
74ae0000 rasadhlp.dll 10.0.19041.546 C:\Windows\System32
74af0000 fwpuclnt.dll 10.0.19041.2913 C:\WINDOWS\System32
74e30000 profapi.dll 10.0.19041.844 C:\WINDOWS\SYSTEM32
74e50000 Wldp.dll 10.0.19041.2788 C:\WINDOWS\SYSTEM32
74e90000 winrnr.dll 10.0.19041.546 C:\WINDOWS\System32
74ec0000 DNSAPI.dll 10.0.19041.3031 C:\WINDOWS\SYSTEM32
74f80000 NLAapi.dll 10.0.19041.546 C:\WINDOWS\system32
74fa0000 wshbth.dll 10.0.19041.546 C:\WINDOWS\system32
74fb0000 pnrpnsp.dll 10.0.19041.546 C:\WINDOWS\system32
74ff0000 napinsp.dll 10.0.19041.546 C:\WINDOWS\system32
752f0000 DWMAPI.DLL 10.0.19041.746 C:\WINDOWS\SYSTEM32
75410000 MPR.dll 10.0.19041.1806 C:\WINDOWS\SYSTEM32
75430000 USERENV.dll 10.0.19041.572 C:\Windows\System32
75590000 SspiCli.dll 10.0.19041.2130 C:\WINDOWS\SYSTEM32
755c0000 winmm.dll 10.0.19041.546 C:\WINDOWS\SYSTEM32
75610000 IPHLPAPI.DLL 10.0.19041.2788 C:\WINDOWS\SYSTEM32
756d0000 apphelp.dll 10.0.19041.2913 C:\WINDOWS\SYSTEM32
75770000 msvcp_win.dll 10.0.19041.789 C:\WINDOWS\System32
75800000 ole32.dll 10.0.19041.2965 C:\WINDOWS\System32
758f0000 win32u.dll 10.0.19041.3086 C:\WINDOWS\System32
75920000 gdi32full.dll 10.0.19041.2965 C:\WINDOWS\System32
75a70000 clbcatq.dll 2001.12.10941.16384 C:\WINDOWS\System32
75af0000 ucrtbase.dll 10.0.19041.789 C:\WINDOWS\System32
75c10000 advapi32.dll 10.0.19041.2913 C:\WINDOWS\System32
75c90000 GDI32.dll 10.0.19041.2913 C:\WINDOWS\System32
75cc0000 WS2_32.dll 10.0.19041.546 C:\WINDOWS\System32
75e50000 CFGMGR32.dll 10.0.19041.1620 C:\WINDOWS\System32
75ee0000 KERNELBASE.dll 10.0.19041.3086 C:\WINDOWS\System32
76290000 comdlg32.dll 10.0.19041.1806 C:\WINDOWS\System32
76340000 RPCRT4.dll 10.0.19041.2965 C:\WINDOWS\System32
76400000 KERNEL32.DLL 10.0.19041.3031 C:\WINDOWS\System32
764f0000 combase.dll 10.0.19041.2788 C:\WINDOWS\System32
76770000 shell32.dll 10.0.19041.3031 C:\WINDOWS\System32
76d90000 msvcrt.dll 7.0.19041.546 C:\WINDOWS\System32
76e50000 SETUPAPI.dll 10.0.19041.2193 C:\WINDOWS\System32
772f0000 sechost.dll 10.0.19041.2913 C:\WINDOWS\System32
77370000 MSCTF.dll 10.0.19041.2673 C:\WINDOWS\System32
77450000 SHLWAPI.dll 10.0.19041.2075 C:\WINDOWS\System32
774a0000 bcrypt.dll 10.0.19041.2486 C:\WINDOWS\System32
774c0000 shcore.dll 10.0.19041.1645 C:\WINDOWS\System32
77550000 NSI.dll 10.0.19041.610 C:\WINDOWS\System32
775f0000 oleaut32.dll 10.0.19041.985 C:\WINDOWS\System32
77690000 IMM32.DLL 10.0.19041.2673 C:\WINDOWS\System32
776c0000 user32.dll 10.0.19041.3086 C:\WINDOWS\System32
77860000 bcryptPrimitives.dll 10.0.19041.2486 C:\WINDOWS\System32
778d0000 ntdll.dll 10.0.19041.3086 C:\WINDOWS\SYSTEM32

processes:
0000 Idle 0 0 0
0004 System 0 0 0
0064 Registry 0 0 0
0218 smss.exe 0 0 0
0268 csrss.exe 0 0 0
02c4 wininit.exe 0 0 0
02cc csrss.exe 1 0 0
032c winlogon.exe 1 0 0
0358 services.exe 0 0 0
036c lsass.exe 0 0 0
03e8 svchost.exe 0 0 0
0144 fontdrvhost.exe 0 0 0
0048 fontdrvhost.exe 1 0 0
023c WUDFHost.exe 0 0 0
040c svchost.exe 0 0 0
043c svchost.exe 0 0 0
04a0 dwm.exe 1 0 0
04d4 svchost.exe 0 0 0
052c svchost.exe 0 0 0
0578 svchost.exe 0 0 0
0638 svchost.exe 0 0 0
064c svchost.exe 0 0 0
0660 svchost.exe 0 0 0
069c svchost.exe 0 0 0
06a4 svchost.exe 0 0 0
06dc svchost.exe 0 0 0
0770 svchost.exe 0 0 0
06d4 svchost.exe 0 0 0
082c svchost.exe 0 0 0
0858 svchost.exe 0 0 0
0864 svchost.exe 0 0 0
0884 svchost.exe 0 0 0
089c svchost.exe 0 0 0
08b8 svchost.exe 0 0 0
08d4 svchost.exe 0 0 0
0960 svchost.exe 0 0 0
0968 svchost.exe 0 0 0
0970 svchost.exe 0 0 0
0990 Memory Compression 0 0 0
09f8 dasHost.exe 0 0 0
0a2c svchost.exe 0 0 0
0a34 svchost.exe 0 0 0
0a5c svchost.exe 0 0 0
0a64 svchost.exe 0 0 0
0a98 svchost.exe 0 0 0
0ad8 svchost.exe 0 0 0
0b80 svchost.exe 0 0 0
0bd0 RtkAudioService64.exe 0 0 0
0810 svchost.exe 0 0 0
0c08 svchost.exe 0 0 0
0c10 svchost.exe 0 0 0
0c18 svchost.exe 0 0 0
0c60 RAVBg64.exe 1 0 0
0c70 RAVBg64.exe 1 0 0
0ce0 svchost.exe 0 0 0
0d58 unsecapp.exe 1 0 0
0d78 svchost.exe 0 0 0
0db0 svchost.exe 0 0 0
0e0c spoolsv.exe 0 0 0
0e20 WmiPrvSE.exe 0 0 0
0e68 svchost.exe 0 0 0
0f18 IntelCpHDCPSvc.exe 0 0 0
0f20 IntelCpHeciSvc.exe 0 0 0
0f30 CLHNServiceForPowerDVD.exe 0 0 0
0f38 CLMSMonitorService.exe 0 0 0
0f48 OfficeClickToRun.exe 0 0 0
0f50 svchost.exe 0 0 0
0f74 CLMSServer.exe 0 0 0
0fc4 esif_uf.exe 0 0 0
0fcc svchost.exe 0 0 0
1010 svchost.exe 0 0 0
103c LMS.exe 0 0 0
1044 svchost.exe 0 0 0
106c WavesSysSvc64.exe 0 0 0
10c0 svchost.exe 0 0 0
1140 jhi_service.exe 0 0 0
03bc dllhost.exe 0 0 0
0fe8 dllhost.exe 0 0 0
058c svchost.exe 0 0 0
0a14 GoogleCrashHandler.exe 0 0 0
0a40 GoogleCrashHandler64.exe 0 0 0
0fa8 SgrmBroker.exe 0 0 0
10fc svchost.exe 0 0 0
13e4 svchost.exe 0 0 0
0348 svchost.exe 0 0 0
0c3c svchost.exe 0 0 0
10d0 svchost.exe 0 0 0
0f80 svchost.exe 0 0 0
1268 svchost.exe 0 0 0
0840 SearchIndexer.exe 0 0 0
12b4 svchost.exe 0 0 0
08dc svchost.exe 0 0 0
141c svchost.exe 0 0 0
144c svchost.exe 0 0 0
1484 svchost.exe 0 0 0
1568 svchost.exe 0 0 0
0474 MsMpEng.exe 0 0 0
1758 svchost.exe 0 0 0
19fc svchost.exe 0 0 0
1a44 svchost.exe 0 0 0
1b94 dptf_helper.exe 1 0 2 normal C:\Windows\System32\Intel\
DPTF
168c sihost.exe 1 0 8 normal C:\Windows\System32
14b4 svchost.exe 1 0 1 normal C:\Windows\System32
00c4 svchost.exe 1 0 1 normal C:\Windows\System32
0c84 svchost.exe 1 4 4 normal C:\Windows\System32
1c88 svchost.exe 0 0 0
1d58 svchost.exe 0 0 0
1d98 ctfmon.exe 1 2 28 high C:\Windows\System32
1e50 igfxEM.exe 1 10 15 normal C:\Windows\System32
1ef8 igfxHK.exe 1 10 14 normal C:\Windows\System32
1f08 svchost.exe 0 0 0
1f2c explorer.exe 1 307 308 normal C:\Windows
1ff4 svchost.exe 0 0 0
1a7c taskhostw.exe 1 8 6 normal C:\Windows\System32
2190 dllhost.exe 1 0 3 normal C:\Windows\System32
23dc dllhost.exe 1 0 3 normal C:\Windows\System32
1bd4 svchost.exe 1 0 1 normal C:\Windows\System32
12d4 svchost.exe 1 0 8 normal C:\Windows\System32
2af4 TextInputHost.exe 1 0 25 normal C:\Windows\SystemApps\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy
1f8c StartMenuExperienceHost.exe 1 7 32 normal C:\Windows\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
238c RuntimeBroker.exe 1 41 1 normal C:\Windows\System32
2870 SearchApp.exe 1 21 78 normal C:\Windows\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy
26d4 RuntimeBroker.exe 1 42 11 normal C:\Windows\System32
12d0 svchost.exe 0 0 0
1be0 Microsoft.Photos.exe 1 0 11 normal C:\Program Files\
WindowsApps\Microsoft.Windows.Photos_2023.10030.27002.0_x64__8wekyb3d8bbwe
2560 svchost.exe 0 0 0
2e30 SecurityHealthSystray.exe 1 10 6 normal C:\Windows\System32
2844 SecurityHealthService.exe 0 0 0
2898 RtkNGUI64.exe 1 17 26 normal C:\Program Files\Realtek\
Audio\HDA
0f68 RAVBg64.exe 1 5 13 normal C:\Program Files\Realtek\
Audio\HDA
21ac WavesSvc64.exe 1 30 53 normal C:\Program Files\Waves\
MaxxAudio
162c OneDrive.exe 1 236 95 normal C:\Users\user\AppData\
Local\Microsoft\OneDrive
2760 PDVD11Serv.exe 1 0 15 normal C:\Program Files (x86)\
CyberLink\PowerDVD11
2684 jusched.exe 1 0 2 normal C:\Program Files (x86)\
Common Files\Java\Java Update
31f4 CompPkgSrv.exe 1 0 1 normal C:\Windows\System32
3210 RuntimeBroker.exe 1 0 4 normal C:\Windows\System32
2b84 svchost.exe 0 0 0
1700 jucheck.exe 1 9 6 normal C:\Program Files (x86)\
Common Files\Java\Java Update
225c ShellExperienceHost.exe 1 6 51 normal C:\Windows\SystemApps\
ShellExperienceHost_cw5n1h2txyewy
16a0 RuntimeBroker.exe 1 40 6 normal C:\Windows\System32
31c0 ApplicationFrameHost.exe 1 12 2 normal C:\Windows\System32
15bc igfxCUIService.exe 0 0 0
2f18 QcomWlanSrvx64.exe 0 0 0
05b8 HidMonitorSvc.exe 0 0 0
29e0 Apoint.exe 1 42 28 normal C:\Windows\System32\
DellTPad
32c4 ApMsgFwd.exe 1 0 7 normal C:\Windows\System32\
DellTPad
1bf8 ApRemote.exe 1 0 1 normal C:\Windows\System32\
DellTPad
05dc hidfind.exe 1 0 3 normal C:\Windows\System32\
DellTPad
2330 ApntEx.exe 1 8 5 normal C:\Windows\System32\
DellTPad
0d28 conhost.exe 1 14 11 normal C:\Windows\System32
1350 AdminService.exe 0 0 0
13c0 MusNotifyIcon.exe 1 8 4 below normal C:\Windows\System32
2d5c RuntimeBroker.exe 1 2 12 normal C:\Windows\System32
05fc svchost.exe 0 0 0
1ca8 taskhostw.exe 1 0 2 normal C:\Windows\System32
2ef0 msedge.exe 1 19 61 normal C:\Program Files (x86)\
Microsoft\Edge\Application
198c msedge.exe 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
2b38 msedge.exe 1 7 11 above normal C:\Program Files (x86)\
Microsoft\Edge\Application
2f80 msedge.exe 1 0 3 normal C:\Program Files (x86)\
Microsoft\Edge\Application
30cc msedge.exe 1 0 0 normal C:\Program Files (x86)\
Microsoft\Edge\Application
1d44 svchost.exe 0 0 0
29ec svchost.exe 0 0 0
05cc taskhostw.exe 1 0 2 normal C:\Windows\System32
08f8 svchost.exe 0 0 0
18c4 WmiPrvSE.exe 0 0 0
32d0 Video.UI.exe 1 0 8 normal C:\Program Files\
WindowsApps\Microsoft.ZuneVideo_10.22091.10041.0_x64__8wekyb3d8bbwe
12fc RuntimeBroker.exe 1 1 1 normal C:\Windows\System32
1534 NisSrv.exe 0 0 0
2808 itop_isr_installer (1).exe 1 91 66 normal C:\Users\user\Downloads
0a80 ISR_Setup.exe 1 0 4 normal C:\ProgramData\iTop Screen
Recorder\Downloader
17ac ISR_Setup.tmp 1 68 63 normal C:\Users\user\AppData\
Local\Temp\is-B43PG.tmp
19d8 audiodg.exe 0 0 0
04c4 WMIC.exe 0 0 0
306c WMIC.exe 0 0 0
2b8c conhost.exe 0 0 0
1138 conhost.exe 0 0 0
1830 sppsvc.exe 0 0 0

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
- Cola de impresión raíz
- Fax
- Microsoft Print to PDF
- Microsoft XPS Document Writer
- OneNote (Desktop)
- OneNote for Windows 10
+ {36fc9e60-c465-11cf-8056-444553540000}
- Concentrador raíz USB (USB 3.0)
- Controlador de host eXtensible Intel(R) USB 3.0 - 1.0 (Microsoft)
- Dispositivo compuesto USB
+ {4d36e966-e325-11ce-bfc1-08002be10318}
- Equipo basado en x64 ACPI
+ {4d36e967-e325-11ce-bfc1-08002be10318}
- X BIOS
+ {4d36e968-e325-11ce-bfc1-08002be10318}
- Intel(R) HD Graphics 520 (driver 27.20.100.9171)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
- Dispositivo de teclado HID
- Dispositivo de teclado HID
- Dispositivo de teclado HID
- Teclado PS/2 estándar
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
- Realtek Audio (driver 6.0.1.8569)
- Sonido Intel(R) para pantallas (driver 10.26.0.9)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
- Monitor PnP genérico
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
- Mouse compatible con HID
- Mouse compatible con HID
+ {4d36e970-e325-11ce-bfc1-08002be10318}
- Realtek PCIE CardReader (driver 10.0.10586.21291)
+ {4d36e972-e325-11ce-bfc1-08002be10318}
- Bluetooth Device (Personal Area Network)
- Intel(R) Ethernet Connection (4) I219-LM (driver 12.19.0.16)
- Microsoft Kernel Debug Network Adapter
- Microsoft Wi-Fi Direct Virtual Adapter
- Microsoft Wi-Fi Direct Virtual Adapter #2
- Qualcomm QCA61x4A 802.11ac Wireless Adapter (driver 12.0.0.1118)
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
- Controladora de espacios de almacenamiento de Microsoft
- Intel(R) Chipset SATA/PCIe RST Premium Controller (driver 16.8.4.1011)
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
- Administrador de volúmenes
- Agregador de procesador ACPI
- Botón de característica fija ACPI
- Botón de inicio/apagado ACPI
- Botón de suspensión ACPI
- Bus del Redirector de dispositivos de Escritorio remoto
- Complejo raíz PCI Express
- Complemento de motor de energía Intel(R)
- Controlador BIOS de Microsoft System Management
- Controlador de arbitraje de carga
- Controlador de infraestructura de virtualización de Microsoft Hyper-V
- Controlador de pantalla básica de Microsoft
- Controlador de representación básica de Microsoft
- Controladora de High Definition Audio
- Controladora de host de Intel(R) Serial IO I2C: 9D60 (driver 30.100.1816.3)
- Controladora de host de Intel(R) Serial IO I2C: 9D61 (driver 30.100.1816.3)
- Controladora integrada compatible con Microsoft ACPI
- Controladora programable de interrupciones
- Dispositivo heredado
- Enumerador de adaptador de red virtual NDIS
- Enumerador de bus compuesto
- Enumerador de bus raíz de UMBus
- Enumerador de dispositivos de software Plug and Play
- Enumerador de unidades virtuales de Microsoft
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Generic Participant (driver
8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Manager (driver 8.3.10209.6897)
- Intel(R) Dynamic Platform and Thermal Framework Processor Participant (driver
8.3.10209.6897)
- Intel(R) Management Engine Interface #1 (driver 2102.100.0.1044)
- Interfaz de administración para ACPI de Microsoft Windows
- Interfaz de administración para ACPI de Microsoft Windows
- Mobile 6th Generation Intel(R) Processor Family I/O LPC Controller (Premium
SKU) - 9D48 (driver 10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O PCI Express Root Port #1 -
9D10 (driver 10.1.1.13)
 - Mobile 6th Generation Intel(R) Processor Family I/O PCI Express Root Port #3 -
9D12 (driver 10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O PMC - 9D21 (driver
10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O SMBUS - 9D23 (driver
10.1.1.13)
- Mobile 6th Generation Intel(R) Processor Family I/O Thermal subsystem - 9D31
(driver 10.1.1.13)
- Puente PCI de CPU host estándar
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Recursos de la placa base
- Sistema CMOS/reloj en tiempo real
- Sistema compatible con Microsoft UEFI
- Sistema Microsoft compatible con ACPI
- Tapa ACPI
- Temporizador de eventos de alta precisión
- Temporizador del sistema
- Zona térmica ACPI
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
- Intel(R) Core(TM) i5-6300U CPU @ 2.40GHz
+ {533c5b84-ec70-11d2-9505-00c04f79deaf}
- Instantánea de volumen genérico
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
- Intel(R) Dynamic Application Loader Host Interface (driver 1908.12.0.1228)
- Intel(R) Dynamic Application Loader Host Interface (driver 1908.12.0.1228)
- Intel(R) iCLS Client (driver 1.63.1155.1)
- Intel(R) iCLS Client (driver 1.63.1155.1)
- Intel(R) Management and Security Application Local Management (driver
1914.12.0.1254)
- Intel(R) Management and Security Application Local Management (driver
1914.12.0.1254)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
- Bluetooth
- MAURICCIGOMEZ
- Microsoft Device Association Root Enumerator
- Microsoft Radio Device Enumeration Bus
- Microsoft RRAS Root Enumerator
- Sintetizador por software GS de tabla de onda de
- Wi-Fi
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
- Adaptador de CA de Microsoft
- Batería con método de control compatible con ACPI de Microsoft
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
- AlpsAlpine Virtual HID Device (driver 10.0.0.126)
- Controlador del sistema compatible con HID
- Controles de radio inalámbrica compatibles con HID
- Dell Touchpad (driver 10.3201.101.216)
- Dispositivo de control de dispositivo portátil
- Dispositivo de control de dispositivo portátil convertido
- Dispositivo de control del consumidor compatible con HID
- Dispositivo definido por el proveedor compatible con HID
 - Dispositivo HID I2C
- Intel(R) HID Event Filter (driver 2.2.1.377)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
- Altavoces / Auriculares (Realtek Audio)
- Varios micrófonos (Realtek Audio)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
- Integrated Webcam
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
- Módulo de plataforma segura 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
- Bluetooth Device (RFCOMM Protocol TDI)
- Enumerador de Bluetooth LE de Microsoft
- Microsoft Bluetooth Enumerator
- Qualcomm QCA61x4A Bluetooth (driver 10.0.0.1238)
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
- Firmware de sistema

cpu registers:
eax = 00000000
ebx = 0288d1c0
ecx = 00000003
edx = 00000000
esi = 00000000
edi = 028c00f8
eip = 0056a821
esp = 0019fdd8
ebp = 0019fe4c

stack dump:
0019fdd8 03 00 00 00 40 cb be 05 - c0 d1 88 02 94 1d 6b 00 [email protected].
0019fde8 00 8d 99 02 aa 1e 6b 00 - be 50 6a 00 20 8d 99 02 ......k..Pj. ...
0019fdf8 2b 9e 49 00 08 fe 19 00 - bc 50 40 00 4c fe 19 00 [email protected]...
0019fe08 14 fe 19 00 89 9e 49 00 - 4c fe 19 00 20 fe 19 00 ......I.L... ...
0019fe18 e7 9e 49 00 4c fe 19 00 - 10 ff 19 00 06 9f 49 00 ..I.L.........I.
0019fe28 4c fe 19 00 f8 00 8c 02 - 40 cb be 05 01 00 00 00 L.......@.......
0019fe38 c0 d1 88 02 25 a7 49 00 - 88 5d fb 06 5c fe 69 08 ....%.I..]..\.i.
0019fe48 00 00 00 01 c0 d1 88 02 - 40 a7 49 00 7c fe 19 00 [email protected].|...
0019fe58 98 03 00 00 7c 02 00 00 - 4a 06 09 00 00 00 00 00 ....|...J.......
0019fe68 00 00 00 00 00 00 00 00 - 5e 27 78 03 b9 03 00 00 ........^'x.....
0019fe78 a7 01 00 00 40 cb be 05 - 00 cb be 05 0c a1 49 00 [email protected].
0019fe88 40 cb be 05 01 cb be 05 - 2b 42 6a 00 f8 00 8c 02 @.......+Bj.....
0019fe98 01 00 8c 02 83 45 40 00 - 89 2d 6a 00 c0 d1 88 02 [email protected].....
0019fea8 e8 9b 98 02 1e aa 49 00 - c0 d1 88 02 00 00 00 00 ......I.........
0019feb8 c0 d1 88 02 14 a8 49 00 - 00 ec 99 02 00 00 00 00 ......I.........
0019fec8 00 00 00 00 74 2d 4f 00 - d0 ec 99 02 98 75 46 00 ....t-O......uF.
0019fed8 01 0f a6 02 e1 f4 48 00 - 90 12 91 02 00 00 00 00 ......H.........
0019fee8 00 00 00 00 22 71 4f 00 - 24 ff 19 00 c0 d1 88 02 ...."qO.$.......
0019fef8 c0 d1 88 02 00 00 00 00 - 49 ce 50 00 20 8e 91 02 ........I.P. ...
0019ff08 48 df 97 02 82 dd 50 00 - 60 ff 19 00 9c dd 50 00 H.....P.`.....P.

disassembling:
0056a81c public RdImageButton.TRdImageButton.SetButtonState: ; function entry
point
0056a81c 2417 push ebx
0056a81d push esi
0056a81e push ecx
0056a81f mov esi, eax
0056a821 2418 > movzx eax, byte ptr [esi+$1d8]
0056a828 mov [esp], al
0056a82b 2419 cmp dl, al
0056a82d setnz bl
0056a830 2420 mov eax, edx
0056a832 mov [esi+$1d8], al
[...]