API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Oct 9th, 2015
83
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 97.36 KB | None | 0 0
raw download clone embed print report
  1. GMER 2.1.19357 - http://www.gmer.net
  2. Rootkit scan 2015-10-09 21:28:24
  3. Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 INTEL_SS rev.DC12 167.68GB
  4. Running: gmer.exe; Driver: C:\Users\admin\AppData\Local\Temp\pxldapog.sys
  5.  
  6.  
  7. ---- User code sections - GMER 2.1 ----
  8.  
  9. .text ... * 9
  10. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  11. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  12. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  13. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  14. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  15. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  16. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  17. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  18. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  19. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  20. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  21. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  22. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  23. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  24. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  25. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  26. .text E:\Program Files (x86)\Steam\Steam.exe[1164] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  27. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  28. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  29. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  30. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  31. .text ... * 9
  32. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  33. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  34. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  35. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  36. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  37. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  38. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  39. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  40. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  41. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  42. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  43. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  44. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3580] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  45. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  46. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  47. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  48. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  49. .text ... * 9
  50. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  51. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  52. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  53. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  54. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  55. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  56. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  57. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  58. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  59. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  60. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  61. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  62. .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[4536] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  63. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationThread + 5 00000000773ff9f1 7 bytes {MOV EDX, 0xd8e2e8; JMP RDX}
  64. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenKey + 5 00000000773ffa6d 7 bytes {MOV EDX, 0xd8e1a8; JMP RDX}
  65. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtCreateKey + 5 00000000773ffb85 7 bytes {MOV EDX, 0xd8e168; JMP RDX}
  66. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadToken + 5 00000000773ffc35 7 bytes {MOV EDX, 0xd8e328; JMP RDX}
  67. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcess + 5 00000000773ffc65 7 bytes {MOV EDX, 0xd8e268; JMP RDX}
  68. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationFile + 5 00000000773ffc7d 7 bytes {MOV EDX, 0xd8e128; JMP RDX}
  69. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtMapViewOfSection + 5 00000000773ffc95 7 bytes {MOV EDX, 0xd8e3e8; JMP RDX}
  70. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtUnmapViewOfSection + 5 00000000773ffcc5 7 bytes {MOV EDX, 0xd8e428; JMP RDX}
  71. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadTokenEx + 5 00000000773ffd45 7 bytes {MOV EDX, 0xd8e3a8; JMP RDX}
  72. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessTokenEx + 5 00000000773ffd5d 7 bytes {MOV EDX, 0xd8e368; JMP RDX}
  73. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenFile + 5 00000000773ffda9 7 bytes {MOV EDX, 0xd8e068; JMP RDX}
  74. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtQueryAttributesFile + 5 00000000773ffea1 7 bytes {MOV EDX, 0xd8e0a8; JMP RDX}
  75. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtCreateFile + 5 00000000774000f9 7 bytes {MOV EDX, 0xd8e028; JMP RDX}
  76. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenKeyEx + 5 000000007740105d 7 bytes {MOV EDX, 0xd8e1e8; JMP RDX}
  77. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessToken + 5 0000000077401105 7 bytes {MOV EDX, 0xd8e2a8; JMP RDX}
  78. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtOpenThread + 5 000000007740117d 7 bytes {MOV EDX, 0xd8e228; JMP RDX}
  79. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\SysWOW64\ntdll.dll!NtQueryFullAttributesFile + 5 0000000077401381 7 bytes {MOV EDX, 0xd8e0e8; JMP RDX}
  80. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  81. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  82. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  83. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  84. .text ... * 9
  85. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  86. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  87. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  88. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  89. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  90. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  91. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  92. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  93. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  94. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  95. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  96. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  97. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  98. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  99. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  100. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  101. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  102. .text ... * 9
  103. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  104. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  105. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  106. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  107. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  108. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  109. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  110. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  111. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  112. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  113. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  114. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  115. .text E:\Program Files (x86)\Steam\GameOverlayUI.exe[6544] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  116. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!CreateProcessW 0000000074de103d 5 bytes JMP 0000000174d2020a
  117. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!CreateProcessA 0000000074de1072 5 bytes JMP 0000000174d2024a
  118. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!FreeLibrary 0000000074de3468 5 bytes JMP 0000000174d2010a
  119. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!LoadLibraryExA 0000000074de48b3 5 bytes JMP 0000000174d2004a
  120. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!LoadLibraryW 0000000074de48cb 5 bytes JMP 0000000174d2008a
  121. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!LoadLibraryExW 0000000074de48fd 5 bytes JMP 0000000174d2000a
  122. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\kernel32.dll!LoadLibraryA 0000000074de4977 5 bytes JMP 0000000174d200ca
  123. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000076fa2ab1 5 bytes JMP 0000000174d2014a
  124. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExA 0000000076fa2cdf 5 bytes JMP 0000000174d2018a
  125. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000076fa2d1d 5 bytes JMP 0000000174d201ca
  126. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\GDI32.dll!SetDeviceGammaRamp 00000000763bdf2e 5 bytes JMP 0000000174d2088a
  127. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!DispatchMessageW 00000000766b787b 5 bytes JMP 0000000174d2050a
  128. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetMessageW 00000000766b78e2 5 bytes JMP 0000000174d2058a
  129. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!DispatchMessageA 00000000766b7bbb 5 bytes JMP 0000000174d204ca
  130. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetMessageA 00000000766b7bd3 5 bytes JMP 0000000174d2054a
  131. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!PeekMessageW 00000000766c05ba 5 bytes JMP 0000000174d2060a
  132. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetCursorPos 00000000766c1218 5 bytes JMP 0000000174d202ca
  133. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetKeyState 00000000766c291f 5 bytes JMP 0000000174d2044a
  134. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!SetCursor 00000000766c41f6 5 bytes JMP 0000000174d2034a
  135. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!PeekMessageA 00000000766c5f74 5 bytes JMP 0000000174d205ca
  136. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!ClipCursor 00000000766d1353 5 bytes JMP 0000000174d2064a
  137. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetAsyncKeyState 00000000766deb96 5 bytes JMP 0000000174d2040a
  138. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetKeyboardState 00000000766dec68 5 bytes JMP 0000000174d2048a
  139. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!ReleaseCapture 00000000766ded49 5 bytes JMP 0000000174d203cc
  140. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!SetCapture 00000000766ded56 5 bytes JMP 0000000174d2038a
  141. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!ShowCursor 00000000766df670 5 bytes JMP 0000000174d2030a
  142. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!SetCursorPos 00000000766f9cfd 5 bytes JMP 0000000174d2028a
  143. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoW 00000000766fc1a9 5 bytes JMP 0000000174d2074a
  144. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRawInputBuffer 000000007670816c 5 bytes JMP 0000000174d2084a
  145. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoA 000000007671690b 5 bytes JMP 0000000174d2070a
  146. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetClipCursor 00000000767180f1 5 bytes JMP 0000000174d2068a
  147. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRawInputData 000000007671836f 5 bytes JMP 0000000174d2080a
  148. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceList 00000000767183af 5 bytes JMP 0000000174d206ca
  149. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!GetRegisteredRawInputDevices 00000000767183cf 5 bytes JMP 0000000174d207ca
  150. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\USER32.dll!RegisterRawInputDevices 00000000767188eb 5 bytes JMP 0000000174d2078a
  151. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\ole32.dll!CoCreateInstance 0000000076099d0b 5 bytes JMP 0000000174d208ca
  152. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetState 0000000000402980 5 bytes JMP 0000000074d2098a
  153. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputSetState 0000000000402b60 5 bytes JMP 0000000074d209ca
  154. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetCapabilities 0000000000402cd0 5 bytes JMP 0000000074d2090a
  155. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetDSoundAudioDeviceGuids 0000000000402ea0 5 bytes JMP 0000000074d2094a
  156. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  157. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  158. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  159. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  160. .text ... * 9
  161. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  162. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  163. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  164. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  165. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  166. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  167. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  168. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  169. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  170. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  171. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  172. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  173. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  174. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 972 0000000063492a9c 4 bytes [20, 8D, F6, 6C]
  175. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 987 0000000063492aab 4 bytes [20, 8D, F6, 6C]
  176. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 289 0000000063493151 4 bytes [20, 8D, F6, 6C]
  177. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 299 000000006349315b 4 bytes [20, 8D, F6, 6C]
  178. .text ... * 7
  179. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_chroma_sub_sample + 13 00000000634dfced 4 bytes [40, 9D, F6, 6C]
  180. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!ff_is_hwaccel_pix_fmt + 10 00000000634dfd2a 4 bytes [47, 9D, F6, 6C]
  181. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 85 00000000634dfef5 4 bytes [44, 9D, F6, 6C]
  182. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 115 00000000634dff13 4 bytes [48, 9D, F6, 6C]
  183. .text ... * 3
  184. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 108 00000000634e00ac 4 bytes [40, 9D, F6, 6C]
  185. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 114 00000000634e00b2 4 bytes [40, 9D, F6, 6C]
  186. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 90 00000000634e025a 4 bytes [44, 9D, F6, 6C]
  187. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 107 00000000634e026b 4 bytes [46, 9D, F6, 6C]
  188. .text ... * 2
  189. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_crop + 51 00000000634e0823 4 bytes [40, 9D, F6, 6C]
  190. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_pad + 750 00000000634e0bfe 4 bytes [40, 9D, F6, 6C]
  191. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_pix_fmt_to_codec_tag + 497 00000000634e7121 4 bytes [47, 9D, F6, 6C]
  192. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_align_dimensions + 30 00000000634eaabe 4 bytes [45, 9D, F6, 6C]
  193. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[5912] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_default_get_buffer + 796 00000000634ece5c 4 bytes [48, 9D, F6, 6C]
  194. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!CreateProcessW 0000000074de103d 5 bytes JMP 0000000174d2020a
  195. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!CreateProcessA 0000000074de1072 5 bytes JMP 0000000174d2024a
  196. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!FreeLibrary 0000000074de3468 5 bytes JMP 0000000174d2010a
  197. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!LoadLibraryExA 0000000074de48b3 5 bytes JMP 0000000174d2004a
  198. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!LoadLibraryW 0000000074de48cb 5 bytes JMP 0000000174d2008a
  199. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!LoadLibraryExW 0000000074de48fd 5 bytes JMP 0000000174d2000a
  200. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\kernel32.dll!LoadLibraryA 0000000074de4977 5 bytes JMP 0000000174d200ca
  201. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000076fa2ab1 5 bytes JMP 0000000174d2014a
  202. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExA 0000000076fa2cdf 5 bytes JMP 0000000174d2018a
  203. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000076fa2d1d 5 bytes JMP 0000000174d201ca
  204. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\GDI32.dll!SetDeviceGammaRamp 00000000763bdf2e 5 bytes JMP 0000000174d2088a
  205. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!DispatchMessageW 00000000766b787b 5 bytes JMP 0000000174d2050a
  206. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetMessageW 00000000766b78e2 5 bytes JMP 0000000174d2058a
  207. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!DispatchMessageA 00000000766b7bbb 5 bytes JMP 0000000174d204ca
  208. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetMessageA 00000000766b7bd3 5 bytes JMP 0000000174d2054a
  209. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!PeekMessageW 00000000766c05ba 5 bytes JMP 0000000174d2060a
  210. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetCursorPos 00000000766c1218 5 bytes JMP 0000000174d202ca
  211. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetKeyState 00000000766c291f 5 bytes JMP 0000000174d2044a
  212. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!SetCursor 00000000766c41f6 5 bytes JMP 0000000174d2034a
  213. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!PeekMessageA 00000000766c5f74 5 bytes JMP 0000000174d205ca
  214. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!ClipCursor 00000000766d1353 5 bytes JMP 0000000174d2064a
  215. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetAsyncKeyState 00000000766deb96 5 bytes JMP 0000000174d2040a
  216. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetKeyboardState 00000000766dec68 5 bytes JMP 0000000174d2048a
  217. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!ReleaseCapture 00000000766ded49 5 bytes JMP 0000000174d203cc
  218. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!SetCapture 00000000766ded56 5 bytes JMP 0000000174d2038a
  219. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!ShowCursor 00000000766df670 5 bytes JMP 0000000174d2030a
  220. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!SetCursorPos 00000000766f9cfd 5 bytes JMP 0000000174d2028a
  221. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoW 00000000766fc1a9 5 bytes JMP 0000000174d2074a
  222. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRawInputBuffer 000000007670816c 5 bytes JMP 0000000174d2084a
  223. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoA 000000007671690b 5 bytes JMP 0000000174d2070a
  224. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetClipCursor 00000000767180f1 5 bytes JMP 0000000174d2068a
  225. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRawInputData 000000007671836f 5 bytes JMP 0000000174d2080a
  226. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceList 00000000767183af 5 bytes JMP 0000000174d206ca
  227. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!GetRegisteredRawInputDevices 00000000767183cf 5 bytes JMP 0000000174d207ca
  228. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\USER32.dll!RegisterRawInputDevices 00000000767188eb 5 bytes JMP 0000000174d2078a
  229. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\ole32.dll!CoCreateInstance 0000000076099d0b 5 bytes JMP 0000000174d208ca
  230. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetState 0000000000402980 5 bytes JMP 0000000074d2098a
  231. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputSetState 0000000000402b60 5 bytes JMP 0000000074d209ca
  232. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetCapabilities 0000000000402cd0 5 bytes JMP 0000000074d2090a
  233. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetDSoundAudioDeviceGuids 0000000000402ea0 5 bytes JMP 0000000074d2094a
  234. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  235. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  236. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  237. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  238. .text ... * 9
  239. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  240. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  241. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  242. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  243. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  244. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  245. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  246. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  247. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  248. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  249. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  250. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  251. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  252. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 972 0000000063492a9c 4 bytes [20, 8D, F6, 6C]
  253. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 987 0000000063492aab 4 bytes [20, 8D, F6, 6C]
  254. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 289 0000000063493151 4 bytes [20, 8D, F6, 6C]
  255. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 299 000000006349315b 4 bytes [20, 8D, F6, 6C]
  256. .text ... * 7
  257. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_chroma_sub_sample + 13 00000000634dfced 4 bytes [40, 9D, F6, 6C]
  258. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!ff_is_hwaccel_pix_fmt + 10 00000000634dfd2a 4 bytes [47, 9D, F6, 6C]
  259. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 85 00000000634dfef5 4 bytes [44, 9D, F6, 6C]
  260. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 115 00000000634dff13 4 bytes [48, 9D, F6, 6C]
  261. .text ... * 3
  262. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 108 00000000634e00ac 4 bytes [40, 9D, F6, 6C]
  263. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 114 00000000634e00b2 4 bytes [40, 9D, F6, 6C]
  264. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 90 00000000634e025a 4 bytes [44, 9D, F6, 6C]
  265. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 107 00000000634e026b 4 bytes [46, 9D, F6, 6C]
  266. .text ... * 2
  267. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_crop + 51 00000000634e0823 4 bytes [40, 9D, F6, 6C]
  268. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_pad + 750 00000000634e0bfe 4 bytes [40, 9D, F6, 6C]
  269. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_pix_fmt_to_codec_tag + 497 00000000634e7121 4 bytes [47, 9D, F6, 6C]
  270. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_align_dimensions + 30 00000000634eaabe 4 bytes [45, 9D, F6, 6C]
  271. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[6844] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_default_get_buffer + 796 00000000634ece5c 4 bytes [48, 9D, F6, 6C]
  272. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!CreateProcessW 0000000074de103d 5 bytes JMP 0000000174d2020a
  273. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!CreateProcessA 0000000074de1072 5 bytes JMP 0000000174d2024a
  274. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!FreeLibrary 0000000074de3468 5 bytes JMP 0000000174d2010a
  275. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!LoadLibraryExA 0000000074de48b3 5 bytes JMP 0000000174d2004a
  276. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!LoadLibraryW 0000000074de48cb 5 bytes JMP 0000000174d2008a
  277. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!LoadLibraryExW 0000000074de48fd 5 bytes JMP 0000000174d2000a
  278. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\kernel32.dll!LoadLibraryA 0000000074de4977 5 bytes JMP 0000000174d200ca
  279. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000076fa2ab1 5 bytes JMP 0000000174d2014a
  280. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExA 0000000076fa2cdf 5 bytes JMP 0000000174d2018a
  281. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\KERNELBASE.dll!FreeLibrary 0000000076fa2d1d 5 bytes JMP 0000000174d201ca
  282. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\GDI32.dll!SetDeviceGammaRamp 00000000763bdf2e 5 bytes JMP 0000000174d2088a
  283. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!DispatchMessageW 00000000766b787b 5 bytes JMP 0000000174d2050a
  284. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetMessageW 00000000766b78e2 5 bytes JMP 0000000174d2058a
  285. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!DispatchMessageA 00000000766b7bbb 5 bytes JMP 0000000174d204ca
  286. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetMessageA 00000000766b7bd3 5 bytes JMP 0000000174d2054a
  287. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!PeekMessageW 00000000766c05ba 5 bytes JMP 0000000174d2060a
  288. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetCursorPos 00000000766c1218 5 bytes JMP 0000000174d202ca
  289. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetKeyState 00000000766c291f 5 bytes JMP 0000000174d2044a
  290. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!SetCursor 00000000766c41f6 5 bytes JMP 0000000174d2034a
  291. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!PeekMessageA 00000000766c5f74 5 bytes JMP 0000000174d205ca
  292. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!ClipCursor 00000000766d1353 5 bytes JMP 0000000174d2064a
  293. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetAsyncKeyState 00000000766deb96 5 bytes JMP 0000000174d2040a
  294. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetKeyboardState 00000000766dec68 5 bytes JMP 0000000174d2048a
  295. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!ReleaseCapture 00000000766ded49 5 bytes JMP 0000000174d203cc
  296. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!SetCapture 00000000766ded56 5 bytes JMP 0000000174d2038a
  297. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!ShowCursor 00000000766df670 5 bytes JMP 0000000174d2030a
  298. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!SetCursorPos 00000000766f9cfd 5 bytes JMP 0000000174d2028a
  299. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoW 00000000766fc1a9 5 bytes JMP 0000000174d2074a
  300. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRawInputBuffer 000000007670816c 5 bytes JMP 0000000174d2084a
  301. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceInfoA 000000007671690b 5 bytes JMP 0000000174d2070a
  302. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetClipCursor 00000000767180f1 5 bytes JMP 0000000174d2068a
  303. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRawInputData 000000007671836f 5 bytes JMP 0000000174d2080a
  304. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRawInputDeviceList 00000000767183af 5 bytes JMP 0000000174d206ca
  305. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!GetRegisteredRawInputDevices 00000000767183cf 5 bytes JMP 0000000174d207ca
  306. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\USER32.dll!RegisterRawInputDevices 00000000767188eb 5 bytes JMP 0000000174d2078a
  307. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\ole32.dll!CoCreateInstance 0000000076099d0b 5 bytes JMP 0000000174d208ca
  308. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetState 0000000000402980 5 bytes JMP 0000000074d2098a
  309. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputSetState 0000000000402b60 5 bytes JMP 0000000074d209ca
  310. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetCapabilities 0000000000402cd0 5 bytes JMP 0000000074d2090a
  311. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\XINPUT9_1_0.dll!XInputGetDSoundAudioDeviceGuids 0000000000402ea0 5 bytes JMP 0000000074d2094a
  312. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  313. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  314. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  315. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  316. .text ... * 9
  317. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  318. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  319. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  320. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  321. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  322. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  323. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  324. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  325. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  326. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  327. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  328. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  329. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  330. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 972 0000000063492a9c 4 bytes [20, 8D, F6, 6C]
  331. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_packet_split_side_data + 987 0000000063492aab 4 bytes [20, 8D, F6, 6C]
  332. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 289 0000000063493151 4 bytes [20, 8D, F6, 6C]
  333. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!init_vlc_sparse + 299 000000006349315b 4 bytes [20, 8D, F6, 6C]
  334. .text ... * 7
  335. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_chroma_sub_sample + 13 00000000634dfced 4 bytes [40, 9D, F6, 6C]
  336. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!ff_is_hwaccel_pix_fmt + 10 00000000634dfd2a 4 bytes [47, 9D, F6, 6C]
  337. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 85 00000000634dfef5 4 bytes [44, 9D, F6, 6C]
  338. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avpicture_layout + 115 00000000634dff13 4 bytes [48, 9D, F6, 6C]
  339. .text ... * 3
  340. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 108 00000000634e00ac 4 bytes [40, 9D, F6, 6C]
  341. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_get_pix_fmt_loss + 114 00000000634e00b2 4 bytes [40, 9D, F6, 6C]
  342. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 90 00000000634e025a 4 bytes [44, 9D, F6, 6C]
  343. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_find_best_pix_fmt + 107 00000000634e026b 4 bytes [46, 9D, F6, 6C]
  344. .text ... * 2
  345. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_crop + 51 00000000634e0823 4 bytes [40, 9D, F6, 6C]
  346. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!av_picture_pad + 750 00000000634e0bfe 4 bytes [40, 9D, F6, 6C]
  347. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_pix_fmt_to_codec_tag + 497 00000000634e7121 4 bytes [47, 9D, F6, 6C]
  348. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_align_dimensions + 30 00000000634eaabe 4 bytes [45, 9D, F6, 6C]
  349. .text E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\awesomium_process.exe[724] E:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\avcodec-53.dll!avcodec_default_get_buffer + 796 00000000634ece5c 4 bytes [48, 9D, F6, 6C]
  350. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationThread + 5 00000000773ff9f1 7 bytes {MOV EDX, 0xd76ae8; JMP RDX}
  351. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenKey + 5 00000000773ffa6d 7 bytes {MOV EDX, 0xd769a8; JMP RDX}
  352. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtCreateKey + 5 00000000773ffb85 7 bytes {MOV EDX, 0xd76968; JMP RDX}
  353. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadToken + 5 00000000773ffc35 7 bytes {MOV EDX, 0xd76b28; JMP RDX}
  354. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcess + 5 00000000773ffc65 7 bytes {MOV EDX, 0xd76a68; JMP RDX}
  355. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationFile + 5 00000000773ffc7d 7 bytes {MOV EDX, 0xd76928; JMP RDX}
  356. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtMapViewOfSection + 5 00000000773ffc95 7 bytes {MOV EDX, 0xd76be8; JMP RDX}
  357. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtUnmapViewOfSection + 5 00000000773ffcc5 7 bytes {MOV EDX, 0xd76c28; JMP RDX}
  358. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadTokenEx + 5 00000000773ffd45 7 bytes {MOV EDX, 0xd76ba8; JMP RDX}
  359. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessTokenEx + 5 00000000773ffd5d 7 bytes {MOV EDX, 0xd76b68; JMP RDX}
  360. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenFile + 5 00000000773ffda9 7 bytes {MOV EDX, 0xd76868; JMP RDX}
  361. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtQueryAttributesFile + 5 00000000773ffea1 7 bytes {MOV EDX, 0xd768a8; JMP RDX}
  362. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtCreateFile + 5 00000000774000f9 7 bytes {MOV EDX, 0xd76828; JMP RDX}
  363. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenKeyEx + 5 000000007740105d 7 bytes {MOV EDX, 0xd769e8; JMP RDX}
  364. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessToken + 5 0000000077401105 7 bytes {MOV EDX, 0xd76aa8; JMP RDX}
  365. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtOpenThread + 5 000000007740117d 7 bytes {MOV EDX, 0xd76a28; JMP RDX}
  366. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\SysWOW64\ntdll.dll!NtQueryFullAttributesFile + 5 0000000077401381 7 bytes {MOV EDX, 0xd768e8; JMP RDX}
  367. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076021401 2 bytes JMP 74e0b20b C:\Windows\syswow64\kernel32.dll
  368. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076021419 2 bytes JMP 74e0b336 C:\Windows\syswow64\kernel32.dll
  369. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076021431 2 bytes JMP 74e88f39 C:\Windows\syswow64\kernel32.dll
  370. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007602144a 2 bytes CALL 74de4885 C:\Windows\syswow64\kernel32.dll
  371. .text ... * 9
  372. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000760214dd 2 bytes JMP 74e88832 C:\Windows\syswow64\kernel32.dll
  373. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000760214f5 2 bytes JMP 74e88a08 C:\Windows\syswow64\kernel32.dll
  374. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007602150d 2 bytes JMP 74e88728 C:\Windows\syswow64\kernel32.dll
  375. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076021525 2 bytes JMP 74e88af2 C:\Windows\syswow64\kernel32.dll
  376. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007602153d 2 bytes JMP 74dffc98 C:\Windows\syswow64\kernel32.dll
  377. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076021555 2 bytes JMP 74e068df C:\Windows\syswow64\kernel32.dll
  378. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007602156d 2 bytes JMP 74e88ff1 C:\Windows\syswow64\kernel32.dll
  379. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076021585 2 bytes JMP 74e88b52 C:\Windows\syswow64\kernel32.dll
  380. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007602159d 2 bytes JMP 74e886ec C:\Windows\syswow64\kernel32.dll
  381. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000760215b5 2 bytes JMP 74dffd31 C:\Windows\syswow64\kernel32.dll
  382. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000760215cd 2 bytes JMP 74e0b2cc C:\Windows\syswow64\kernel32.dll
  383. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000760216b2 2 bytes JMP 74e88eb4 C:\Windows\syswow64\kernel32.dll
  384. .text E:\Program Files (x86)\Steam\bin\steamwebhelper.exe[6264] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000760216bd 2 bytes JMP 74e88681 C:\Windows\syswow64\kernel32.dll
  385.  
  386. ---- Threads - GMER 2.1 ----
  387.  
  388. Thread C:\Windows\system32\svchost.exe [1304:1348] 000007fef82dbd70
  389. Thread C:\Windows\system32\svchost.exe [1304:2152] 000007fef7385170
  390. Thread C:\Windows\system32\svchost.exe [1304:3932] 000007fef7f95124
  391.  
  392. ---- EOF - GMER 2.1 ----
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!