date/time          : 2017-12-10, 15:33:44, 432ms
computer name      : FHPC
user name          : futh
registered owner   : Пользователь Windows
operating system   : Windows 10 x64 build 14393
system language    : Russian
system up time     : 2 days 19 hours
program up time    : 3 seconds
processors         : 4x Intel(R) Core(TM) i3-8100 CPU @ 3.60GHz
physical memory    : 9954/16339 MB (free/total)
free disk space    : (C:) 181,36 GB
display mode       : 1920x1080, 32 bit
process id         : $fd8
allocated memory   : 28,86 MB
largest free block : 1,26 GB
executable         : madTraceProcess32(1).exe
exec. date/time    : 2017-12-10 15:33
compiled with      : Delphi 4
madExcept version  : 4.0.12
callstack crc      : $1a0c2036, $fa070505, $fa070505

main thread ($e14): <priority:15>
7787b2d2 +2222 user32.dll                                        SoftModalMessageBox
77878b49 +0079 user32.dll                                        MessageBoxTimeoutW
77878a96 +0076 user32.dll                                        MessageBoxTimeoutA
77878876 +0016 user32.dll                                        MessageBoxExA
77878843 +0013 user32.dll                                        MessageBoxA
004c0188 +09dc madTraceProcess32(1).exe madTraceProcess 457 +185 DoTrace
004c0845 +0051 madTraceProcess32(1).exe madTraceProcess 466   +5 initialization
747962c2 +0022 KERNEL32.DLL                                      BaseThreadInitThunk

thread $2408:
747962c2 +22 KERNEL32.DLL  BaseThreadInitThunk

thread $2390:
747962c2 +22 KERNEL32.DLL  BaseThreadInitThunk

thread $20f0:
747962c2 +22 KERNEL32.DLL  BaseThreadInitThunk

thread $2ec4:
747962c2 +22 KERNEL32.DLL  BaseThreadInitThunk

thread $e8c:
747962c2 +22 KERNEL32.DLL  BaseThreadInitThunk

disassembling:
[...]
004c0178       jmp     loc_4c018d
004c017a 457   push    $40
004c017c       push    $4c059c                ; 'Information...'
004c0181       push    $4c05e4                ; 'No 32bit process found, which uses madExcept.'
004c0186       push    0
004c0188     > call    -$b8f21 ($40726c)      ; Windows.MessageBox
004c018d       xor     eax, eax
004c018f       pop     edx
004c0190       pop     ecx
004c0191       pop     ecx
004c0192       mov     fs:[eax], edx
[...]

