API tools faq
paste
Advertisement
thewintersoldier97

IIOR-UU3B-5M47

thewintersoldier97
Sep 25th, 2021
91
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 205.05 KB | None | 0 0
raw download clone embed print report
  1. EXCEPTION_ACCESS_VIOLATION_WRITE accessing 0x0
  2.  
  3. Thread 0 (crashed):
  4. 0: engine.dll + 0x1939f0
  5. eip: 0x7bb539f0 esp: 0x006fe0e0 ebp: 0x006fe0e8 ebx: 0x7c056350
  6. esi: 0x00817ff0 edi: 0x7c044a54 eax: 0x00000000 ecx: 0x6c2fd1c9
  7. edx: 0x00005ed4 efl: 0x00210212
  8.  
  9. 7bb539df cc int 3
  10. 7bb539e0 68 84 bc d4 7b push dword 0x7bd4bc84
  11. 7bb539e5 ff 15 28 d5 d0 7b call dword [0x7bd0d528]
  12. 7bb539eb 33 c0 xor eax, eax
  13. 7bb539ed 83 c4 04 add esp, 0x4
  14. > 7bb539f0 88 00 mov [eax], al
  15. 7bb539f2 c3 ret
  16. 7bb539f3 cc int 3
  17. 7bb539f4 cc int 3
  18. 7bb539f5 cc int 3
  19. 7bb539f6 cc int 3
  20.  
  21. 006fe0e0 97 19 c4 7b 54 4a 04 7c 10 e1 6f 00 73 f7 74 5b ...{TJ.|..o.s.t[
  22.  
  23. Found via instruction pointer in context
  24.  
  25.  
  26. 1: metamod.2.l4d2.dll!__SourceHook_FHCls_ConCommandDispatchfalse::Func(CCommand const &) [ vsp_bridge.cpp:40 + 0xa3 ]
  27. https://github.com/alliedmodders/metamod-source/blob/0bb53f265f82f4a71c5b99268b2ad1e79d2d9d7d/core/vsp_bridge.cpp#L40
  28. eip: 0x5b74f773 esp: 0x006fe0f0 ebp: 0x006fe110
  29.  
  30. 006fe0f0 54 4a 04 7c 54 4a 04 7c 50 63 05 7c 00 00 00 00 TJ.|TJ.|Pc.|....
  31. 006fe100 80 19 c4 7b 00 00 00 00 00 00 00 00 00 00 00 00 ...{............
  32. 006fe110 28 e1 6f 00 c7 9d b0 7b (.o....{
  33.  
  34. Found via previous frame's frame pointer
  35.  
  36.  
  37. 2: engine.dll + 0x149dc7
  38. eip: 0x7bb09dc7 esp: 0x006fe118 ebp: 0x006fe128
  39.  
  40. 006fe118 54 4a 04 7c 04 00 00 00 54 4a 04 7c 08 2a 04 7c TJ.|....TJ.|.*.|
  41. 006fe128 40 e1 6f 00 ad 9e b0 7b @.o....{
  42.  
  43. Found via call frame info
  44.  
  45.  
  46. 3: engine.dll + 0x149ead
  47. eip: 0x7bb09ead esp: 0x006fe130 ebp: 0x006fe140
  48.  
  49. 006fe130 04 00 00 00 54 4a 04 7c 01 00 00 00 ff ff ff ff ....TJ.|........
  50. 006fe140 80 e1 6f 00 b9 a0 b0 7b ..o....{
  51.  
  52. Found via previous frame's frame pointer
  53.  
  54.  
  55. 4: engine.dll + 0x14a0b9
  56. eip: 0x7bb0a0b9 esp: 0x006fe148 ebp: 0x006fe180
  57.  
  58. 006fe148 04 00 00 00 01 00 00 00 01 00 00 00 03 00 00 00 ................
  59. 006fe158 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  60. 006fe168 4d 9b 28 5a 00 00 00 00 00 00 00 00 00 00 00 00 M.(Z............
  61. 006fe178 17 fb b2 00 f2 00 00 01 e4 e1 6f 00 0a 00 b5 7b ..........o....{
  62.  
  63. Found via previous frame's frame pointer
  64.  
  65.  
  66. 5: engine.dll + 0x19000a
  67. eip: 0x7bb5000a esp: 0x006fe188 ebp: 0x006fe1e4
  68.  
  69. 006fe188 04 00 00 00 88 02 df 7b c8 29 df 7b 00 00 00 00 .......{.).{....
  70. 006fe198 00 00 00 00 00 00 00 00 ec bc b3 77 ff ff ff ff ...........w....
  71. 006fe1a8 08 e2 6f 00 9b bd b3 77 60 a5 71 76 00 00 00 00 ..o....w`.qv....
  72. 006fe1b8 c8 29 df 7b 1c e2 6f 00 9b bd b3 77 00 00 00 00 .).{..o....w....
  73. 006fe1c8 00 00 00 00 9d 42 6b 1c 08 df ae 5d 18 00 77 02 .....Bk....]..w.
  74. 006fe1d8 00 70 2c 39 03 00 00 00 3d 00 00 00 00 e2 6f 00 .p,9....=.....o.
  75. 006fe1e8 f3 08 b5 7b ...{
  76.  
  77. Found via previous frame's frame pointer
  78.  
  79.  
  80. 6: engine.dll + 0x1908f3
  81. eip: 0x7bb508f3 esp: 0x006fe1ec ebp: 0x006fe200
  82.  
  83. 006fe1ec ca d6 47 3e 00 00 00 00 00 00 00 00 c3 d8 00 00 ..G>............
  84. 006fe1fc 45 5f b2 00 10 e2 6f 00 fb ff b5 7b E_....o....{
  85.  
  86. Found via previous frame's frame pointer
  87.  
  88.  
  89. 7: engine.dll + 0x19fffb
  90. eip: 0x7bb5fffb esp: 0x006fe208 ebp: 0x006fe210
  91.  
  92. 006fe208 ca d6 47 3e 88 02 df 7b 28 e2 6f 00 4f 01 b6 7b ..G>...{(.o.O..{
  93.  
  94. Found via previous frame's frame pointer
  95.  
  96.  
  97. 8: engine.dll + 0x1a014f
  98. eip: 0x7bb6014f esp: 0x006fe218 ebp: 0x006fe228
  99.  
  100. 006fe218 ca d6 47 3e af fe 00 00 56 01 d6 fa 88 02 df 7b ..G>....V......{
  101. 006fe228 34 e2 6f 00 f4 01 b6 7b 4.o....{
  102.  
  103. Found via previous frame's frame pointer
  104.  
  105.  
  106. 9: engine.dll + 0x1a01f4
  107. eip: 0x7bb601f4 esp: 0x006fe230 ebp: 0x006fe234
  108.  
  109. 006fe230 ca d6 47 3e 84 e2 6f 00 14 06 bc 7b ..G>..o....{
  110.  
  111. Found via previous frame's frame pointer
  112.  
  113.  
  114. 10: engine.dll + 0x200614
  115. eip: 0x7bbc0614 esp: 0x006fe23c ebp: 0x006fe284
  116.  
  117. 006fe23c ca d6 47 3e 60 a5 71 76 b0 cc 72 76 00 00 00 00 ..G>`.qv..rv....
  118. 006fe24c 00 00 00 00 00 00 00 00 00 00 00 00 4a 01 00 00 ............J...
  119. 006fe25c 00 00 00 00 00 00 00 00 00 00 00 00 88 e2 6f 00 ..............o.
  120. 006fe26c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  121. 006fe27c 94 04 00 00 ca d6 47 3e bc e2 6f 00 31 dc bb 7b ......G>..o.1..{
  122.  
  123. Found via previous frame's frame pointer
  124.  
  125.  
  126. 11: engine.dll + 0x1fdc31
  127. eip: 0x7bbbdc31 esp: 0x006fe28c ebp: 0x006fe2bc
  128.  
  129. 006fe28c 45 36 3a 5a 03 00 00 00 60 17 93 02 60 17 93 02 E6:Z....`...`...
  130. 006fe29c 7c 0d 0b 00 13 01 00 00 00 00 00 00 00 00 00 00 |...............
  131. 006fe2ac 34 cb 37 06 09 0c 00 00 86 02 00 00 7f 02 00 00 4.7.............
  132. 006fe2bc 18 e4 6f 00 ce 31 3a 5a ..o..1:Z
  133.  
  134. Found via previous frame's frame pointer
  135.  
  136.  
  137. 12: dedicated.dll + 0x31ce
  138. eip: 0x5a3a31ce esp: 0x006fe2c4 ebp: 0x006fe418
  139.  
  140. 006fe2c4 00 00 00 00 00 00 00 00 77 ea bb 7b 01 00 00 00 ........w..{....
  141. 006fe2d4 fe 2e bf 7b 60 17 93 02 58 26 df 7b 14 fc bb 7b ...{`...X&.{...{
  142. 006fe2e4 17 f5 5a c2 d4 e4 6f 00 90 1d 28 5a 88 b0 2b 5a ..Z...o...(Z..+Z
  143. 006fe2f4 60 17 93 02 58 26 df 7b d8 f5 d0 7b 01 38 32 36 `...X&.{...{.826
  144. 006fe304 37 00 00 00 b8 74 73 00 87 00 00 00 b8 74 73 00 7....ts......ts.
  145. 006fe314 00 00 01 01 07 00 00 00 07 00 00 00 88 fd 85 02 ................
  146. 006fe324 90 0e 1a 01 f8 e3 6f 00 40 ad b5 77 95 7f 9e 9d ......o.@..w....
  147. 006fe334 fe ff ff ff 94 e3 6f 00 1d 79 b6 77 00 00 00 00 ......o..y.w....
  148. 006fe344 44 79 b6 77 20 ca 7b 00 00 00 73 00 00 00 00 00 Dy.w .{...s.....
  149. 006fe354 00 00 00 00 4f 00 00 00 4f 00 00 00 b4 e3 6f 00 ....O...O.....o.
  150. 006fe364 49 0d b4 77 d0 60 48 5a 4f 00 00 00 90 e3 6f 00 I..w.`HZO.....o.
  151. 006fe374 20 ca 7b 00 6f 0d b4 77 e9 5d 4f ea 00 01 00 00 .{.o..w.]O.....
  152. 006fe384 20 ca 7b 00 00 00 00 00 00 00 73 00 4f 00 00 00 .{.......s.O...
  153. 006fe394 b0 e3 6f 00 16 3c b2 77 00 00 00 00 00 00 00 00 ..o..<.w........
  154. 006fe3a4 00 00 00 00 00 01 00 00 a0 08 6e 77 08 e4 6f 00 ..........nw..o.
  155. 006fe3b4 96 dc 6c 77 00 00 73 00 00 00 00 00 20 ca 7b 00 ..lw..s..... .{.
  156. 006fe3c4 6e dc 6c 77 e5 25 a0 14 d4 e4 6f 00 d4 e4 6f 00 n.lw.%....o...o.
  157. 006fe3d4 88 b0 2b 5a 4f 00 00 01 e0 b0 2b 5a 13 00 00 00 ..+ZO.....+Z....
  158. 006fe3e4 00 e4 6f 00 81 21 28 5a 94 5c 45 5a 68 89 4e 02 ..o..!(Z.\EZh.N.
  159. 006fe3f4 00 00 00 00 88 b0 2b 5a 88 b0 2b 5a 00 e4 6f 00 ......+Z..+Z..o.
  160. 006fe404 04 00 00 00 17 f5 5a c2 f8 e7 6f 00 09 60 cf 7b ......Z...o..`.{
  161. 006fe414 ff ff ff ff 44 e4 6f 00 06 39 3a 5a ....D.o..9:Z
  162.  
  163. Found via previous frame's frame pointer
  164.  
  165.  
  166. 13: dedicated.dll + 0x3906
  167. eip: 0x5a3a3906 esp: 0x006fe420 ebp: 0x006fe444
  168.  
  169. 006fe420 2c e4 6f 00 d4 e4 6f 00 88 b0 2b 5a 00 00 e3 00 ,.o...o...+Z....
  170. 006fe430 d8 61 48 5a 40 87 4e 02 38 56 45 5a d4 e4 6f 00 .aHZ@.N.8VEZ..o.
  171. 006fe440 00 e7 6f 00 34 e7 6f 00 ae 7d 3c 5a ..o.4.o..}<Z
  172.  
  173. Found via previous frame's frame pointer
  174.  
  175.  
  176. 14: dedicated.dll + 0x27dae
  177. eip: 0x5a3c7dae esp: 0x006fe44c ebp: 0x006fe734
  178.  
  179. 006fe44c 88 b0 2b 5a 70 e4 6f 00 ae 7d 3c 5a 88 b0 2b 5a ..+Zp.o..}<Z..+Z
  180. 006fe45c c4 04 2b 5a 61 43 3a 5a 88 b0 2b 5a c4 04 2b 5a ..+ZaC:Z..+Z..+Z
  181. 006fe46c e0 d7 74 00 58 5d 45 5a 30 82 80 02 03 00 00 00 ..t.X]EZ0.......
  182. 006fe47c 00 00 00 00 02 00 00 00 30 82 80 02 60 02 80 02 ........0...`...
  183. 006fe48c 08 00 00 00 00 00 00 00 02 00 00 00 60 02 80 02 ............`...
  184. 006fe49c d0 5b 3a 5a 00 c2 83 02 10 00 00 00 00 00 00 00 .[:Z............
  185. 006fe4ac 00 00 02 00 ff ff 01 00 00 c2 83 02 00 00 00 00 ................
  186. 006fe4bc 08 00 00 00 98 68 48 5a d4 e4 6f 00 00 24 a0 14 .....hHZ..o..$..
  187. 006fe4cc 7f 02 61 02 00 00 00 00 7c 5d 45 5a 00 00 87 02 ..a.....|]EZ....
  188. 006fe4dc 0c 00 00 00 00 00 00 00 09 00 00 00 00 00 87 02 ................
  189. 006fe4ec 40 c8 7f 02 10 00 00 00 00 00 00 00 0c 00 00 00 @...............
  190. 006fe4fc 40 c8 7f 02 d0 5b 3a 5a 00 c1 83 02 10 00 00 00 @....[:Z........
  191. 006fe50c 00 00 00 00 03 00 0c 00 ff ff 0b 00 00 c1 83 02 ................
  192. 006fe51c 70 e4 6f 00 08 00 00 00 98 68 48 5a 00 00 3a 00 p.o......hHZ..:.
  193. 006fe52c 5c 00 47 00 41 00 4d 00 45 00 53 00 5c 00 53 00 \.G.A.M.E.S.\.S.
  194. 006fe53c 74 00 65 00 61 00 6d 00 4c 00 69 00 62 00 72 00 t.e.a.m.L.i.b.r.
  195. 006fe54c 61 00 72 00 79 00 5c 00 73 00 74 00 65 00 61 00 a.r.y.\.s.t.e.a.
  196. 006fe55c 6d 00 61 00 70 00 70 00 73 00 5c 00 63 00 6f 00 m.a.p.p.s.\.c.o.
  197. 006fe56c 6d 00 6d 00 6f 00 6e 00 5c 00 4c 00 65 00 66 00 m.m.o.n.\.L.e.f.
  198. 006fe57c 74 00 20 00 34 00 20 00 44 00 65 00 61 00 64 00 t. .4. .D.e.a.d.
  199. 006fe58c 20 00 32 00 20 00 44 00 65 00 64 00 69 00 63 00 .2. .D.e.d.i.c.
  200. 006fe59c 61 00 74 00 65 00 64 00 20 00 53 00 65 00 72 00 a.t.e.d. .S.e.r.
  201. 006fe5ac 76 00 65 00 72 00 5c 00 73 00 72 00 63 00 64 00 v.e.r.\.s.r.c.d.
  202. 006fe5bc 73 00 2e 00 65 00 78 00 65 00 00 00 04 00 00 00 s...e.x.e.......
  203. 006fe5cc 04 00 00 00 01 00 00 00 00 00 00 00 08 01 3a 5a ..............:Z
  204. 006fe5dc f4 e5 6f 00 1d 4e 6c 77 48 4e 6c 77 9c 00 00 00 ..o..NlwHNlw....
  205. 006fe5ec 5c e7 6f 00 00 00 00 00 38 e7 6f 00 53 4d 6c 77 \.o.....8.o.SMlw
  206. 006fe5fc 18 e6 6f 00 a5 24 61 02 a6 4d 6c 77 d8 b6 47 5a ..o..$a..Mlw..GZ
  207. 006fe60c 65 c6 b1 77 90 5f 73 00 00 00 00 00 1c 01 00 00 e..w._s.........
  208. 006fe61c 06 00 00 00 02 00 00 00 f0 23 00 00 02 00 00 00 .........#......
  209. 006fe62c 64 3a 5c 67 61 6d 65 73 5c 73 74 65 61 6d 6c 69 d:\games\steamli
  210. 006fe63c 62 72 61 72 79 5c 73 74 65 61 6d 61 70 70 73 5c brary\steamapps\
  211. 006fe64c 63 6f 6d 6d 6f 6e 5c 6c 65 66 74 20 34 20 64 65 common\left 4 de
  212. 006fe65c 61 64 20 32 20 64 65 64 69 63 61 74 65 64 20 73 ad 2 dedicated s
  213. 006fe66c 65 72 76 65 72 00 00 72 63 64 73 2e 65 78 65 00 erver..rcds.exe.
  214. 006fe67c fd 58 4f ea 00 00 00 00 a8 e6 6f 00 00 00 00 00 .XO.......o.....
  215. 006fe68c 00 00 00 00 f0 e6 6f 00 40 ad b5 77 a5 7d 9e 9d ......o.@..w.}..
  216. 006fe69c fe ff ff ff 00 e7 6f 00 fb cb b2 77 d0 c8 73 00 ......o....w..s.
  217. 006fe6ac 10 3d 4d 76 00 00 90 76 d0 c8 73 00 09 cc b2 77 .=Mv...v..s....w
  218. 006fe6bc ad cb b2 77 5d 59 4f ea a5 24 61 02 00 00 e3 00 ...w]YO..$a.....
  219. 006fe6cc 00 00 00 00 00 00 00 00 00 00 00 00 d0 c8 73 00 ..............s.
  220. 006fe6dc 00 00 00 00 10 3d 4d 76 f6 d9 a7 76 00 00 00 00 .....=Mv...v....
  221. 006fe6ec 00 00 00 00 f8 e7 6f 00 89 ab b3 77 d5 7c 9e 9d ......o....w.|..
  222. 006fe6fc 14 e7 6f 00 9b 2e 6c 77 09 00 00 00 10 e7 6f 00 ..o...lw......o.
  223. 006fe70c a5 58 4f ea c0 06 7f 02 38 e7 6f 00 22 f7 43 5a .XO.....8.o.".CZ
  224. 006fe71c 00 00 00 00 88 b0 2b 5a 00 00 00 00 2f f7 43 5a ......+Z..../.CZ
  225. 006fe72c 00 00 00 00 73 0a 6c 32 04 e8 6f 00 76 49 3a 5a ....s.l2..o.vI:Z
  226.  
  227. Found via previous frame's frame pointer
  228.  
  229.  
  230. 15: dedicated.dll + 0x4976
  231. eip: 0x5a3a4976 esp: 0x006fe73c ebp: 0x006fe804
  232.  
  233. 006fe73c 12 00 00 00 e0 d7 74 00 43 05 6c 32 a5 24 61 02 ......t.C.l2.$a.
  234. 006fe74c 00 00 e3 00 00 00 00 00 44 79 b6 77 12 00 00 00 ........Dy.w....
  235. 006fe75c 94 00 00 00 06 00 00 00 02 00 00 00 f0 23 00 00 .............#..
  236. 006fe76c 02 00 00 00 00 00 00 00 78 01 74 00 04 02 74 00 ........x.t...t.
  237. 006fe77c 66 02 74 00 6a 02 74 00 08 08 74 00 00 00 00 00 f.t.j.t...t.....
  238. 006fe78c 05 00 00 00 e0 06 00 00 08 5a 73 00 11 00 00 00 .........Zs.....
  239. 006fe79c 00 00 73 00 e0 e7 6f 00 c4 e7 6f 00 16 3c b2 77 ..s...o...o..<.w
  240. 006fe7ac 00 00 00 00 00 00 00 00 00 00 00 00 a5 24 61 02 .............$a.
  241. 006fe7bc 00 e8 6f 00 99 59 4f ea f8 e7 6f 00 ad 80 6c 77 ..o..YO...o...lw
  242. 006fe7cc 00 00 3a 5a ec e7 6f 00 00 00 00 00 f4 e7 6f 00 ..:Z..o.......o.
  243. 006fe7dc 00 00 00 00 ee 11 e3 00 a5 24 61 02 00 00 00 00 .........$a.....
  244. 006fe7ec 0d 00 0e 00 43 05 6c 32 44 e7 6f 00 b4 fd 6f 00 ....C.l2D.o...o.
  245. 006fe7fc 00 35 45 5a 00 00 00 00 34 fd 6f 00 fd 11 e3 00 .5EZ....4.o.....
  246.  
  247. Found via previous frame's frame pointer
  248.  
  249.  
  250. 16: srcds.exe + 0x11fd
  251. eip: 0x00e311fd esp: 0x006fe80c ebp: 0x006ffd34
  252.  
  253. 006fe80c 00 00 e3 00 00 00 00 00 f7 48 73 00 0a 00 00 00 .........Hs.....
  254. 006fe81c 7c 19 e3 00 00 00 00 00 00 50 45 00 f7 48 73 00 |........PE..Hs.
  255. 006fe82c 50 41 54 48 3d 44 3a 5c 47 41 4d 45 53 5c 53 74 PATH=D:\GAMES\St
  256. 006fe83c 65 61 6d 4c 69 62 72 61 72 79 5c 73 74 65 61 6d eamLibrary\steam
  257. 006fe84c 61 70 70 73 5c 63 6f 6d 6d 6f 6e 5c 4c 65 66 74 apps\common\Left
  258. 006fe85c 20 34 20 44 65 61 64 20 32 20 44 65 64 69 63 61 4 Dead 2 Dedica
  259. 006fe86c 74 65 64 20 53 65 72 76 65 72 5c 62 69 6e 5c 3b ted Server\bin\;
  260. 006fe87c 43 3a 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 C:\Program Files
  261. 006fe88c 20 28 78 38 36 29 5c 43 6f 6d 6d 6f 6e 20 46 69 (x86)\Common Fi
  262. 006fe89c 6c 65 73 5c 49 6e 74 65 6c 5c 53 68 61 72 65 64 les\Intel\Shared
  263. 006fe8ac 20 4c 69 62 72 61 72 69 65 73 5c 72 65 64 69 73 Libraries\redis
  264. 006fe8bc 74 5c 69 6e 74 65 6c 36 34 5c 63 6f 6d 70 69 6c t\intel64\compil
  265. 006fe8cc 65 72 3b 43 3a 5c 57 69 6e 64 6f 77 73 5c 73 79 er;C:\Windows\sy
  266. 006fe8dc 73 74 65 6d 33 32 3b 43 3a 5c 57 69 6e 64 6f 77 stem32;C:\Window
  267. 006fe8ec 73 3b 43 3a 5c 57 69 6e 64 6f 77 73 5c 53 79 73 s;C:\Windows\Sys
  268. 006fe8fc 74 65 6d 33 32 5c 57 62 65 6d 3b 43 3a 5c 57 69 tem32\Wbem;C:\Wi
  269. 006fe90c 6e 64 6f 77 73 5c 53 79 73 74 65 6d 33 32 5c 57 ndows\System32\W
  270. 006fe91c 69 6e 64 6f 77 73 50 6f 77 65 72 53 68 65 6c 6c indowsPowerShell
  271. 006fe92c 5c 76 31 2e 30 5c 3b 43 3a 5c 57 69 6e 64 6f 77 \v1.0\;C:\Window
  272. 006fe93c 73 5c 53 79 73 74 65 6d 33 32 5c 4f 70 65 6e 53 s\System32\OpenS
  273. 006fe94c 53 48 5c 3b 43 3a 5c 50 72 6f 67 72 61 6d 20 46 SH\;C:\Program F
  274. 006fe95c 69 6c 65 73 5c 4e 56 49 44 49 41 20 43 6f 72 70 iles\NVIDIA Corp
  275. 006fe96c 6f 72 61 74 69 6f 6e 5c 4e 56 49 44 49 41 20 4e oration\NVIDIA N
  276. 006fe97c 76 44 4c 49 53 52 3b 43 3a 5c 50 72 6f 67 72 61 vDLISR;C:\Progra
  277. 006fe98c 6d 20 46 69 6c 65 73 20 28 78 38 36 29 5c 4e 56 m Files (x86)\NV
  278. 006fe99c 49 44 49 41 20 43 6f 72 70 6f 72 61 74 69 6f 6e IDIA Corporation
  279. 006fe9ac 5c 50 68 79 73 58 5c 43 6f 6d 6d 6f 6e 3b 43 3a \PhysX\Common;C:
  280. 006fe9bc 5c 57 49 4e 44 4f 57 53 5c 73 79 73 74 65 6d 33 \WINDOWS\system3
  281. 006fe9cc 32 3b 43 3a 5c 57 49 4e 44 4f 57 53 3b 43 3a 5c 2;C:\WINDOWS;C:\
  282. 006fe9dc 57 49 4e 44 4f 57 53 5c 53 79 73 74 65 6d 33 32 WINDOWS\System32
  283. 006fe9ec 5c 57 62 65 6d 3b 43 3a 5c 57 49 4e 44 4f 57 53 \Wbem;C:\WINDOWS
  284. 006fe9fc 5c 53 79 73 74 65 6d 33 32 5c 57 69 6e 64 6f 77 \System32\Window
  285. 006fea0c 73 50 6f 77 65 72 53 68 65 6c 6c 5c 76 31 2e 30 sPowerShell\v1.0
  286. 006fea1c 5c 3b 43 3a 5c 57 49 4e 44 4f 57 53 5c 53 79 73 \;C:\WINDOWS\Sys
  287. 006fea2c 74 65 6d 33 32 5c 4f 70 65 6e 53 53 48 5c 3b 43 tem32\OpenSSH\;C
  288. 006fea3c 3a 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 5c :\Program Files\
  289. 006fea4c 43 6f 6d 6d 6f 6e 20 46 69 6c 65 73 5c 41 75 74 Common Files\Aut
  290. 006fea5c 6f 64 65 73 6b 20 53 68 61 72 65 64 5c 3b 43 3a odesk Shared\;C:
  291. 006fea6c 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 5c 4d \Program Files\M
  292. 006fea7c 69 63 72 6f 73 6f 66 74 20 53 51 4c 20 53 65 72 icrosoft SQL Ser
  293. 006fea8c 76 65 72 5c 31 32 30 5c 54 6f 6f 6c 73 5c 42 69 ver\120\Tools\Bi
  294. 006fea9c 6e 6e 5c 3b 43 3a 5c 50 72 6f 67 72 61 6d 20 46 nn\;C:\Program F
  295. 006feaac 69 6c 65 73 20 28 78 38 36 29 5c 41 75 74 6f 64 iles (x86)\Autod
  296. 006feabc 65 73 6b 5c 42 61 63 6b 62 75 72 6e 65 72 5c 3b esk\Backburner\;
  297. 006feacc 43 3a 5c 55 73 65 72 73 5c 6b 61 69 69 6e 5c 41 C:\Users\kaiin\A
  298. 006feadc 70 70 44 61 74 61 5c 4c 6f 63 61 6c 5c 4d 69 63 ppData\Local\Mic
  299. 006feaec 72 6f 73 6f 66 74 5c 57 69 6e 64 6f 77 73 41 70 rosoft\WindowsAp
  300. 006feafc 70 73 3b 00 80 f6 0d 77 00 00 00 00 00 00 00 00 ps;....w........
  301. 006feb0c 98 02 73 00 00 00 73 00 30 dd 0d 77 d0 40 10 77 ..s...s.0..w.@.w
  302. 006feb1c 80 00 00 00 18 00 00 00 a4 eb 6f 00 30 08 33 00 ..........o.0.3.
  303. 006feb2c 04 00 00 00 04 92 78 77 03 00 00 00 94 eb 6f 00 ......xw......o.
  304. 006feb3c a8 eb 6f 00 01 00 00 00 00 00 00 00 e0 07 33 00 ..o...........3.
  305. 006feb4c 10 00 00 00 00 00 00 00 80 91 78 77 b4 91 78 77 ..........xw..xw
  306. 006feb5c b7 85 b1 77 00 00 00 00 00 00 00 00 00 00 00 00 ...w............
  307. 006feb6c 05 00 00 00 44 9d 78 77 b4 91 78 77 00 00 00 00 ....D.xw..xw....
  308. 006feb7c 50 10 5b 77 d0 62 87 88 04 ec 6f 00 30 08 33 00 P.[w.b....o.0.3.
  309. 006feb8c 04 00 00 00 e4 99 78 77 03 00 00 00 f4 eb 6f 00 ......xw......o.
  310. 006feb9c 08 ec 6f 00 95 86 b1 77 e4 99 78 77 f4 eb 6f 00 ..o....w..xw..o.
  311. 006febac 10 00 00 00 00 00 00 00 60 99 78 77 94 99 78 77 ........`.xw..xw
  312. 006febbc b7 85 b1 77 00 00 00 00 60 9d 78 77 2a 86 b1 77 ...w....`.xw*..w
  313. 006febcc 01 00 00 00 74 9d 78 77 94 99 78 77 00 00 00 00 ....t.xw..xw....
  314. 006febdc 30 10 5b 77 90 62 87 88 60 9d 78 77 01 00 00 00 0.[w.b..`.xw....
  315. 006febec 00 00 00 00 00 00 00 00 60 9d 78 77 60 99 78 77 ........`.xw`.xw
  316. 006febfc a5 fe 00 8d ee e3 d3 f0 00 00 00 00 11 84 b1 77 ...............w
  317. 006fec0c 20 ed 6f 00 00 00 00 00 30 00 00 00 00 00 00 00 .o.....0.......
  318. 006fec1c 03 00 00 00 68 84 b1 77 b8 ed 6f 00 ec 00 00 00 ....h..w..o.....
  319. 006fec2c 00 00 00 00 00 00 6f 00 94 99 78 77 00 00 00 00 ......o...xw....
  320. 006fec3c 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 ................
  321. 006fec4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  322. 006fec5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  323. 006fec6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  324. 006fec7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  325. 006fec8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  326. 006fec9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  327. 006fecac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  328. 006fecbc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  329. 006feccc 00 00 00 00 00 00 00 00 35 2d a0 14 40 ed 6f 00 ........5-..@.o.
  330. 006fecdc 23 52 6b 77 1c ed 6f 00 b8 ed 6f 00 20 ed 6f 00 #Rkw..o...o. .o.
  331. 006fecec 18 ed 6f 00 ad 2c a0 14 b8 ed 6f 00 bc ed 6f 00 ..o..,....o...o.
  332. 006fecfc 10 00 00 00 20 00 22 00 28 49 85 77 00 00 00 00 .... .".(I.w....
  333. 006fed0c fe ff ff ff 00 00 00 00 00 00 00 00 04 00 00 00 ................
  334. 006fed1c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  335. 006fed2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  336. 006fed3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  337. 006fed4c 00 00 00 00 9c 2b b5 77 71 6a 6b 77 ff ff ff ff .....+.wqjkw....
  338. 006fed5c 47 00 00 00 68 ed 6f 00 04 00 00 00 ac 2a b5 77 G...h.o......*.w
  339. 006fed6c 4b 69 6b 77 ec 00 00 00 41 2c a0 14 00 00 00 00 Kikw....A,......
  340. 006fed7c 03 00 00 00 00 60 45 00 bc ed 6f 00 04 00 00 00 .....`E...o.....
  341. 006fed8c 70 ed 6f 00 00 00 00 00 74 ed 6f 00 91 00 7f 77 p.o.....t.o....w
  342. 006fed9c 48 f0 6f 00 70 07 6e 77 8d a1 b8 63 fe ff ff ff H.o.p.nw...c....
  343. 006fedac c8 ed 6f 00 a7 00 7f 77 00 00 00 00 00 00 00 00 ..o....w........
  344. 006fedbc 04 00 00 00 ec 00 00 00 00 00 00 00 34 f0 6f 00 ............4.o.
  345. 006fedcc 38 1b 73 76 00 00 00 00 00 00 00 00 01 00 00 00 8.sv............
  346. 006feddc 44 ee 6f 00 c8 15 ae 77 08 15 ae 77 48 14 ae 77 D.o....w...wH..w
  347. 006fedec 01 00 00 00 59 00 73 76 7a 00 7c 00 48 43 6f 76 ....Y.svz.|.HCov
  348. 006fedfc 18 00 00 00 00 00 00 00 f4 ed 6f 00 40 02 00 00 ..........o.@...
  349. 006fee0c 00 00 00 00 00 00 00 00 44 00 4f 00 00 00 73 00 ........D.O...s.
  350. 006fee1c 5c 00 73 00 79 00 73 00 ff 07 00 00 c4 00 00 00 \.s.y.s.........
  351. 006fee2c 9e 00 a0 00 48 ee 6f 00 00 00 00 00 32 00 2e 00 ....H.o.....2...
  352. 006fee3c 00 00 00 00 00 00 00 00 00 00 00 00 44 00 3a 00 ............D.:.
  353. 006fee4c 5c 00 47 00 41 00 4d 00 45 00 53 00 5c 00 53 00 \.G.A.M.E.S.\.S.
  354. 006fee5c 74 00 65 00 61 00 6d 00 4c 00 69 00 62 00 72 00 t.e.a.m.L.i.b.r.
  355. 006fee6c 94 ee 6f 00 25 82 b5 77 dc ee 6f 00 c4 00 32 00 ..o.%..w..o...2.
  356. 006fee7c a4 ee 6f 00 25 82 b5 77 ec ee 6f 00 c4 00 32 00 ..o.%..w..o...2.
  357. 006fee8c 00 00 32 00 0a 00 00 00 06 00 00 00 01 00 00 00 ..2.............
  358. 006fee9c 00 00 00 00 b4 00 32 00 04 ef 6f 00 0e a7 b2 77 ......2...o....w
  359. 006feeac ec ee 6f 00 74 00 32 00 06 00 00 00 10 00 00 00 ..o.t.2.........
  360. 006feebc 50 c3 b3 77 00 00 00 00 00 00 00 00 69 a7 b2 77 P..w........i..w
  361. 006feecc 28 ef 6f 00 30 ef 6f 00 fc ee 6f 00 25 82 b5 77 (.o.0.o...o.%..w
  362. 006feedc 44 ef 6f 00 c4 00 32 00 00 00 32 00 0a 00 00 00 D.o...2...2.....
  363. 006feeec 06 00 00 00 01 00 00 00 00 00 00 00 b4 00 32 00 ..............2.
  364. 006feefc 5c ef 6f 00 0e a7 b2 77 44 ef 6f 00 74 00 32 00 \.o....wD.o.t.2.
  365. 006fef0c 06 00 00 00 10 00 00 00 50 c3 b3 77 00 00 00 00 ........P..w....
  366. 006fef1c 00 00 00 00 69 a7 b2 77 80 ef 6f 00 88 ef 6f 00 ....i..w..o...o.
  367. 006fef2c 00 00 00 00 d4 00 00 00 ff ff ff ff 94 03 00 00 ................
  368. 006fef3c 74 00 00 00 2c 2b b5 77 0a 00 00 00 04 00 00 00 t...,+.w........
  369. 006fef4c 25 51 4f ea 04 00 00 00 01 51 4f ea 00 00 00 00 %QO......QO.....
  370. 006fef5c d8 ef 6f 00 27 43 b1 77 0a 00 00 00 88 ef 6f 00 ..o.'C.w......o.
  371. 006fef6c 80 ef 6f 00 03 00 00 00 00 00 00 00 00 00 00 00 ..o.............
  372. 006fef7c 40 ad b5 77 00 00 00 00 00 00 32 00 98 ef 6f 00 @..w......2...o.
  373. 006fef8c ff ff ff ff b7 36 00 00 00 00 00 00 f4 ef 6f 00 .....6........o.
  374. 006fef9c 83 b8 7e 77 08 00 15 c0 00 00 00 00 00 00 00 00 ..~w............
  375. 006fefac 92 b8 7e 77 03 00 00 00 bd 51 4f ea 03 00 00 00 ..~w.....QO.....
  376. 006fefbc 00 00 00 00 00 00 00 00 89 ab b3 77 b4 ef 6f 00 ...........w..o.
  377. 006fefcc e8 ef 6f 00 b0 f7 6f 00 40 ad b5 77 f5 7b 9e 9d ..o...o.@..w.{..
  378. 006fefdc 95 51 4f ea f0 ef 6f 00 38 bd 7e 77 b7 36 00 00 .QO...o.8.~w.6..
  379. 006fefec 00 00 00 00 4c f0 6f 00 83 b8 7e 77 08 00 15 c0 ....L.o...~w....
  380. 006feffc 00 00 00 00 00 00 00 00 92 b8 7e 77 6a 00 6c 00 ..........~wj.l.
  381. 006ff00c 20 51 6f 76 6a 00 6c 00 80 40 85 77 00 00 00 00 Qovj.l..@.w....
  382. 006ff01c 28 f3 6f 00 ec 50 6f 76 20 51 6f 76 d0 41 85 77 (.o..Pov Qov.A.w
  383. 006ff02c 60 41 85 77 f0 40 85 77 80 40 85 77 10 40 85 77 `A.w.@.w.@.w.@.w
  384. 006ff03c a0 3f 85 77 30 3f 85 77 c0 3e 85 77 19 92 2c fa .?.w0?.w.>.w..,.
  385. 006ff04c 48 f7 6f 00 57 fb 72 76 00 00 00 00 00 00 00 00 H.o.W.rv........
  386. 006ff05c 20 51 6f 76 ec 50 6f 76 28 f3 6f 00 08 00 00 00 Qov.Pov(.o.....
  387. 006ff06c 00 00 00 00 70 f4 72 76 68 f7 6f 00 8e fb 72 76 ....p.rvh.o...rv
  388. 006ff07c 2b 01 00 00 00 00 00 00 00 00 6f 76 07 00 00 00 +.........ov....
  389. 006ff08c ac 02 00 00 b8 74 73 00 2b 01 00 00 b8 74 73 00 .....ts.+....ts.
  390. 006ff09c 00 00 01 01 24 05 83 0d 00 00 00 00 40 10 29 00 ....$.......@.).
  391. 006ff0ac 00 00 00 00 00 00 e6 00 00 00 00 00 20 00 00 00 ............ ...
  392. 006ff0bc 00 00 00 00 00 2c 29 00 00 00 00 00 00 00 29 00 .....,).......).
  393. 006ff0cc 00 00 00 00 18 03 00 00 00 00 00 00 e0 2d 29 00 .............-).
  394. 006ff0dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  395. 006ff0ec 00 00 00 00 18 03 00 00 00 00 00 00 60 2e 29 00 ............`.).
  396. 006ff0fc 00 00 00 00 14 00 00 00 00 00 00 00 e0 2e 29 00 ..............).
  397. 006ff10c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  398. 006ff11c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  399. 006ff12c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  400. 006ff13c 00 00 00 00 18 03 00 00 00 00 00 00 80 2f 29 00 ............./).
  401. 006ff14c 00 00 00 00 18 03 00 00 00 00 00 00 80 30 29 00 .............0).
  402. 006ff15c 00 00 00 00 18 03 00 00 00 00 00 00 00 31 29 00 .............1).
  403. 006ff16c 00 00 00 00 02 04 00 00 00 00 00 00 40 2d 29 00 ............@-).
  404. 006ff17c 00 00 00 00 18 03 00 00 00 00 00 00 80 31 29 00 .............1).
  405. 006ff18c 00 00 00 00 18 03 00 00 00 00 00 00 00 30 29 00 .............0).
  406. 006ff19c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  407. 006ff1ac 00 00 00 00 18 03 00 00 00 00 00 00 00 2f 29 00 ............./).
  408. 006ff1bc 00 00 00 00 88 02 00 00 00 00 00 00 00 32 29 00 .............2).
  409. 006ff1cc 00 00 00 00 82 00 00 00 00 00 00 00 70 32 29 00 ............p2).
  410. 006ff1dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  411. 006ff1ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  412. 006ff1fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  413. 006ff20c 00 00 00 00 00 00 00 00 00 00 00 00 c8 f2 6f 00 ..............o.
  414. 006ff21c 00 01 00 00 31 8b 6b 77 00 00 00 00 00 00 00 00 ....1.kw........
  415. 006ff22c 00 01 00 00 a0 4d 73 00 01 00 00 00 e8 f2 6f 00 .....Ms.......o.
  416. 006ff23c 00 02 00 00 31 8b 6b 77 00 01 00 00 00 00 00 00 ....1.kw........
  417. 006ff24c 00 01 00 00 a0 4d 73 00 01 00 00 00 fc ff ff ff .....Ms.........
  418. 006ff25c 01 00 00 00 00 00 00 00 00 01 00 00 22 02 e9 7f ............"...
  419. 006ff26c a0 fa 6f 00 a0 4d 73 00 70 0e 7f 77 b8 f2 6f 00 ..o..Ms.p..w..o.
  420. 006ff27c 13 38 6c 77 e8 f4 6f 00 a0 f9 6f 00 00 01 00 00 .8lw..o...o.....
  421. 006ff28c 00 00 00 00 e8 f2 6f 00 70 0e 7f 77 00 00 00 00 ......o.p..w....
  422. 006ff29c f8 f4 6f 00 00 01 00 00 00 00 00 00 00 01 00 00 ..o.............
  423. 006ff2ac 00 00 00 00 01 00 00 00 00 00 00 00 18 f7 6f 00 ..............o.
  424. 006ff2bc e3 7e e3 00 e4 04 00 00 00 00 00 00 e8 f2 6f 00 .~............o.
  425. 006ff2cc 00 01 00 00 a0 f9 6f 00 18 f7 6f 00 f5 7e e3 00 ......o...o..~..
  426. 006ff2dc f8 f4 6f 00 cc cc 00 00 0e 00 0f 00 20 00 01 00 ..o......... ...
  427. 006ff2ec 02 00 03 00 04 00 05 00 06 00 07 00 08 00 09 00 ................
  428. 006ff2fc 0a 00 0b 00 0c 00 0d 00 0e 00 0f 00 10 00 11 00 ................
  429. 006ff30c 12 00 13 00 14 00 15 00 16 00 17 00 18 00 19 00 ................
  430. 006ff31c 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 ............ .!.
  431. 006ff32c 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 ".#.$.%.&.'.(.).
  432. 006ff33c 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 *.+.,.-.../.0.1.
  433. 006ff34c 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 2.3.4.5.6.7.8.9.
  434. 006ff35c 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 :.;.<.=.>.?.@.A.
  435. 006ff36c 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 B.C.D.E.F.G.H.I.
  436. 006ff37c 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 J.K.L.M.N.O.P.Q.
  437. 006ff38c 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 R.S.T.U.V.W.X.Y.
  438. 006ff39c 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 41 00 Z.[.\.].^._.`.A.
  439. 006ff3ac 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 B.C.D.E.F.G.H.I.
  440. 006ff3bc 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 J.K.L.M.N.O.P.Q.
  441. 006ff3cc 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 R.S.T.U.V.W.X.Y.
  442. 006ff3dc 5a 00 7b 00 7c 00 7d 00 7e 00 7f 00 ac 20 81 00 Z.{.|.}.~.... ..
  443. 006ff3ec 1a 20 91 01 1e 20 26 20 20 20 21 20 c6 02 30 20 . ... & ! ..0
  444. 006ff3fc 60 01 39 20 52 01 8d 00 7d 01 8f 00 90 00 18 20 `.9 R...}......
  445. 006ff40c 19 20 1c 20 1d 20 22 20 13 20 14 20 dc 02 22 21 . . . " . . .."!
  446. 006ff41c 60 01 3a 20 52 01 9d 00 7d 01 78 01 a0 00 a1 00 `.: R...}.x.....
  447. 006ff42c a2 00 a3 00 a4 00 a5 00 a6 00 a7 00 a8 00 a9 00 ................
  448. 006ff43c aa 00 ab 00 ac 00 ad 00 ae 00 af 00 b0 00 b1 00 ................
  449. 006ff44c b2 00 b3 00 b4 00 b5 00 b6 00 b7 00 b8 00 b9 00 ................
  450. 006ff45c ba 00 bb 00 bc 00 bd 00 be 00 bf 00 c0 00 c1 00 ................
  451. 006ff46c c2 00 c3 00 c4 00 c5 00 c6 00 c7 00 c8 00 c9 00 ................
  452. 006ff47c ca 00 cb 00 cc 00 cd 00 ce 00 cf 00 d0 00 d1 00 ................
  453. 006ff48c d2 00 d3 00 d4 00 d5 00 d6 00 d7 00 d8 00 d9 00 ................
  454. 006ff49c da 00 db 00 dc 00 dd 00 de 00 df 00 c0 00 c1 00 ................
  455. 006ff4ac c2 00 c3 00 c4 00 c5 00 c6 00 c7 00 c8 00 c9 00 ................
  456. 006ff4bc ca 00 cb 00 cc 00 cd 00 ce 00 cf 00 d0 00 d1 00 ................
  457. 006ff4cc d2 00 d3 00 d4 00 d5 00 d6 00 f7 00 d8 00 d9 00 ................
  458. 006ff4dc da 00 db 00 dc 00 dd 00 de 00 78 01 00 04 00 00 ..........x.....
  459. 006ff4ec 7f 7e e3 00 cc cc 00 00 0e 00 0f 00 20 00 01 00 .~.......... ...
  460. 006ff4fc 02 00 03 00 04 00 05 00 06 00 07 00 08 00 09 00 ................
  461. 006ff50c 0a 00 0b 00 0c 00 0d 00 0e 00 0f 00 10 00 11 00 ................
  462. 006ff51c 12 00 13 00 14 00 15 00 16 00 17 00 18 00 19 00 ................
  463. 006ff52c 1a 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 ............ .!.
  464. 006ff53c 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 ".#.$.%.&.'.(.).
  465. 006ff54c 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 *.+.,.-.../.0.1.
  466. 006ff55c 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 2.3.4.5.6.7.8.9.
  467. 006ff56c 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 :.;.<.=.>.?.@.A.
  468. 006ff57c 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 B.C.D.E.F.G.H.I.
  469. 006ff58c 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 J.K.L.M.N.O.P.Q.
  470. 006ff59c 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 R.S.T.U.V.W.X.Y.
  471. 006ff5ac 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 Z.[.\.].^._.`.a.
  472. 006ff5bc 62 00 63 00 64 00 65 00 66 00 67 00 68 00 69 00 b.c.d.e.f.g.h.i.
  473. 006ff5cc 6a 00 6b 00 6c 00 6d 00 6e 00 6f 00 70 00 71 00 j.k.l.m.n.o.p.q.
  474. 006ff5dc 72 00 73 00 74 00 75 00 76 00 77 00 78 00 79 00 r.s.t.u.v.w.x.y.
  475. 006ff5ec 7a 00 7b 00 7c 00 7d 00 7e 00 7f 00 ac 20 81 00 z.{.|.}.~.... ..
  476. 006ff5fc 1a 20 92 01 1e 20 26 20 20 20 21 20 c6 02 30 20 . ... & ! ..0
  477. 006ff60c 60 01 39 20 52 01 8d 00 7d 01 8f 00 90 00 18 20 `.9 R...}......
  478. 006ff61c 19 20 1c 20 1d 20 22 20 13 20 14 20 dc 02 22 21 . . . " . . .."!
  479. 006ff62c 61 01 3a 20 53 01 9d 00 7e 01 78 01 a0 00 a1 00 a.: S...~.x.....
  480. 006ff63c a2 00 a3 00 a4 00 a5 00 a6 00 a7 00 a8 00 a9 00 ................
  481. 006ff64c aa 00 ab 00 ac 00 ad 00 ae 00 af 00 b0 00 b1 00 ................
  482. 006ff65c b2 00 b3 00 b4 00 b5 00 b6 00 b7 00 b8 00 b9 00 ................
  483. 006ff66c ba 00 bb 00 bc 00 bd 00 be 00 bf 00 c0 00 c1 00 ................
  484. 006ff67c c2 00 c3 00 c4 00 c5 00 c6 00 c7 00 c8 00 c9 00 ................
  485. 006ff68c ca 00 cb 00 cc 00 cd 00 ce 00 cf 00 d0 00 d1 00 ................
  486. 006ff69c d2 00 d3 00 d4 00 d5 00 d6 00 d7 00 d8 00 d9 00 ................
  487. 006ff6ac da 00 db 00 dc 00 dd 00 de 00 df 00 e0 00 e1 00 ................
  488. 006ff6bc e2 00 e3 00 e4 00 e5 00 e6 00 e7 00 e8 00 e9 00 ................
  489. 006ff6cc ea 00 eb 00 ec 00 ed 00 ee 00 ef 00 f0 00 f1 00 ................
  490. 006ff6dc f2 00 f3 00 f4 00 f5 00 f6 00 f7 00 f8 00 f9 00 ................
  491. 006ff6ec fa 00 fb 00 fc 00 fd 00 fe 00 ff 00 c5 7d e3 00 .............}..
  492. 006ff6fc 00 01 00 00 48 1b 61 02 09 7f e3 00 00 01 00 00 ....H.a.........
  493. 006ff70c f8 f4 6f 00 00 01 00 00 ca c6 c8 d4 54 f7 6f 00 ..o.........T.o.
  494. 006ff71c 3f 7f e3 00 44 f7 6f 00 00 00 00 00 00 02 00 00 ?...D.o.........
  495. 006ff72c a0 fb 6f 00 00 01 00 00 a0 f9 6f 00 00 01 00 00 ..o.......o.....
  496. 006ff73c e4 04 00 00 00 00 00 00 50 dc e3 00 c0 d5 e3 00 ........P.......
  497. 006ff74c b8 05 61 02 01 fa 6f 00 a4 fc 6f 00 aa 61 e3 00 ..a...o...o..a..
  498. 006ff75c 00 00 00 00 00 00 00 00 00 02 00 00 a0 fb 6f 00 ..............o.
  499. 006ff76c 00 01 00 00 a0 f9 6f 00 00 01 00 00 e4 04 00 00 ......o.........
  500. 006ff77c 00 00 00 00 64 1b 61 02 50 62 e3 00 40 00 00 00 ....d.a.Pb..@...
  501. 006ff78c 01 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 ....?...........
  502. 006ff79c 00 00 00 00 48 02 20 02 20 02 20 02 20 02 20 02 ....H. . . . . .
  503. 006ff7ac 20 02 20 02 20 02 68 02 28 02 28 02 28 02 28 02 . . .h.(.(.(.(.
  504. 006ff7bc 20 02 20 02 20 02 20 02 20 02 20 02 20 02 20 02 . . . . . . . .
  505. 006ff7cc 20 02 20 02 20 02 20 02 20 02 20 02 20 02 20 02 . . . . . . . .
  506. 006ff7dc 20 02 20 02 48 02 10 02 10 02 10 02 10 02 10 02 . .H...........
  507. 006ff7ec 10 02 10 02 10 02 10 02 10 02 10 02 10 02 10 02 ................
  508. 006ff7fc 10 02 10 02 84 02 84 02 84 02 84 02 84 02 84 02 ................
  509. 006ff80c 84 02 84 02 84 02 84 02 10 02 10 02 10 02 10 02 ................
  510. 006ff81c 10 02 10 02 10 02 81 03 81 03 81 03 81 03 81 03 ................
  511. 006ff82c 81 03 01 03 01 03 01 03 01 03 01 03 01 03 01 03 ................
  512. 006ff83c 01 03 01 03 01 03 01 03 01 03 01 03 01 03 01 03 ................
  513. 006ff84c 01 03 01 03 01 03 01 03 01 03 10 02 10 02 10 02 ................
  514. 006ff85c 10 02 10 02 10 02 82 03 82 03 82 03 82 03 82 03 ................
  515. 006ff86c 82 03 02 03 1c fa 6f 00 92 71 b2 77 7b 8c b2 77 ......o..q.w{..w
  516. 006ff87c 41 44 4f ea 00 00 73 00 40 04 00 00 b8 fa 6f 00 ADO...s.@.....o.
  517. 006ff88c 02 03 02 03 02 03 02 03 02 03 10 02 10 02 10 02 ................
  518. 006ff89c 10 02 20 02 00 02 20 02 28 00 00 28 10 02 10 02 .. ... .(..(....
  519. 006ff8ac 10 02 10 02 00 02 10 02 01 03 10 02 01 03 20 02 .............. .
  520. 006ff8bc 02 00 00 02 20 02 10 02 00 06 00 06 10 02 10 02 .... ...........
  521. 006ff8cc 10 02 10 02 00 02 00 02 02 03 10 02 02 03 20 02 .............. .
  522. 006ff8dc 02 03 01 03 48 02 10 02 10 02 10 02 10 02 10 02 ....H...........
  523. 006ff8ec 10 02 10 02 10 02 10 02 4f 05 00 00 77 05 00 00 ........O...w...
  524. 006ff8fc 10 02 10 02 e8 df 73 00 14 02 14 02 87 00 00 00 ......s.........
  525. 006ff90c 89 fa ff ff 10 02 14 02 12 03 10 02 ba 65 73 00 .............es.
  526. 006ff91c 10 02 10 02 01 03 01 03 01 03 01 03 01 03 01 03 ................
  527. 006ff92c 01 03 01 03 01 03 01 03 01 03 01 03 77 05 00 00 ............w...
  528. 006ff93c 01 03 01 03 00 00 73 00 01 03 01 03 01 03 01 03 ......s.........
  529. 006ff94c ff 07 00 00 00 06 00 00 c0 00 73 00 8c 75 73 00 ..........s..us.
  530. 006ff95c 01 03 02 03 02 03 02 03 00 00 00 00 00 00 00 00 ................
  531. 006ff96c 02 03 02 03 89 00 00 00 02 03 02 03 02 03 02 03 ................
  532. 006ff97c 77 05 00 00 02 03 02 03 80 05 00 00 00 00 00 00 w...............
  533. 006ff98c 02 03 10 02 b8 d5 73 00 48 04 00 00 02 03 02 03 ......s.H.......
  534. 006ff99c 02 03 02 03 c0 00 73 00 00 00 73 00 02 00 2c 00 ......s...s...,.
  535. 006ff9ac 01 00 00 00 10 01 00 01 77 05 00 00 e0 df 73 00 ........w.....s.
  536. 006ff9bc 1c 1d 1e 1f f7 04 00 00 e0 df 73 00 e8 df 73 00 ..........s...s.
  537. 006ff9cc 2c 2d 2e 2f 00 00 00 00 34 35 36 37 dc 13 00 00 ,-./....4567....
  538. 006ff9dc 00 00 00 00 40 41 42 43 00 00 01 02 b8 74 73 00 ....@ABC.....ts.
  539. 006ff9ec 00 00 61 00 28 00 00 28 00 00 00 00 77 05 00 00 ..a.(..(....w...
  540. 006ff9fc b8 74 73 00 e7 df 73 00 00 00 61 02 00 00 61 02 .ts...s...a...a.
  541. 006ffa0c b4 fd 6f 00 40 ad b5 77 b5 7f 9e 9d fe ff ff ff ..o.@..w........
  542. 006ffa1c b0 fa 6f 00 3c 6e b2 77 40 04 00 00 48 04 00 00 ..o.<n.w@...H...
  543. 006ffa2c f0 75 73 00 80 fa 6f 00 7c 19 e3 00 00 00 73 00 .us...o.|.....s.
  544. 006ffa3c 7f 00 00 00 03 02 00 00 c8 1f 61 02 00 00 61 02 ..........a...a.
  545. 006ffa4c 00 00 00 00 f0 1f 61 02 03 02 00 00 00 00 61 02 ......a.......a.
  546. 006ffa5c 00 00 00 00 0c 2c b5 77 48 04 00 00 ff ff ff ff .....,.wH.......
  547. 006ffa6c 4e 44 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 ND..............
  548. 006ffa7c 0c 2c b5 77 7c 19 e3 00 4e 44 e3 00 e8 df 73 00 .,.w|...ND....s.
  549. 006ffa8c 02 00 00 00 04 fb 6f 00 00 00 2c 00 40 04 00 00 ......o...,.@...
  550. 006ffa9c 7c 19 e3 00 4e 44 e3 00 00 00 00 00 00 00 e3 00 |...ND..........
  551. 006ffaac 80 00 00 00 d4 fa 6f 00 de 5d b2 77 00 00 00 00 ......o..].w....
  552. 006ffabc de 5d b2 77 00 00 2c 00 00 00 00 00 4e 44 e3 00 .].w..,.....ND..
  553. 006ffacc 00 00 68 7e 08 e2 73 00 20 00 00 00 01 00 00 00 ..h~..s. .......
  554. 006ffadc 1c fd 6f 00 e8 62 6d 77 e0 4c 76 ae 7c 19 e3 00 ..o..bmw.Lv.|...
  555. 006ffaec 3c a1 e3 00 00 50 45 00 ae 08 95 ae 00 00 e3 00 <....PE.........
  556. 006ffafc 00 10 02 00 00 00 00 01 c8 00 ca 00 0c fb 6f 00 ..............o.
  557. 006ffb0c 5c 00 44 00 65 00 76 00 69 00 63 00 65 00 5c 00 \.D.e.v.i.c.e.\.
  558. 006ffb1c 48 00 61 00 72 00 64 00 64 00 69 00 73 00 6b 00 H.a.r.d.d.i.s.k.
  559. 006ffb2c 56 00 6f 00 6c 00 75 00 6d 00 65 00 35 00 5c 00 V.o.l.u.m.e.5.\.
  560. 006ffb3c 47 00 41 00 4d 00 45 00 53 00 5c 00 53 00 74 00 G.A.M.E.S.\.S.t.
  561. 006ffb4c 65 00 61 00 6d 00 4c 00 69 00 62 00 72 00 61 00 e.a.m.L.i.b.r.a.
  562. 006ffb5c 72 00 79 00 5c 00 73 00 74 00 65 00 61 00 6d 00 r.y.\.s.t.e.a.m.
  563. 006ffb6c 61 00 70 00 70 00 73 00 5c 00 63 00 6f 00 6d 00 a.p.p.s.\.c.o.m.
  564. 006ffb7c 6d 00 6f 00 6e 00 5c 00 4c 00 65 00 66 00 74 00 m.o.n.\.L.e.f.t.
  565. 006ffb8c 20 00 34 00 20 00 44 00 65 00 61 00 64 00 20 00 .4. .D.e.a.d. .
  566. 006ffb9c 32 00 20 00 44 00 65 00 64 00 69 00 63 00 61 00 2. .D.e.d.i.c.a.
  567. 006ffbac 74 00 65 00 64 00 20 00 53 00 65 00 72 00 76 00 t.e.d. .S.e.r.v.
  568. 006ffbbc 65 00 72 00 5c 00 73 00 72 00 63 00 64 00 73 00 e.r.\.s.r.c.d.s.
  569. 006ffbcc 2e 00 65 00 78 00 65 00 00 00 61 02 b0 2c 61 02 ..e.x.e...a..,a.
  570. 006ffbdc 67 00 00 00 00 00 00 00 c0 00 73 00 58 01 00 00 g.........s.X...
  571. 006ffbec 00 00 00 00 90 2c 61 02 e0 00 01 02 70 02 61 02 .....,a.....p.a.
  572. 006ffbfc c0 00 01 00 6b 00 00 6b 00 00 00 00 56 00 00 00 ....k..k....V...
  573. 006ffc0c 70 02 61 02 af 2c 61 02 7f 00 00 00 67 00 00 00 p.a..,a.....g...
  574. 006ffc1c b4 fd 6f 00 40 ad b5 77 b5 7f 9e 9d fe ff ff ff ..o.@..w........
  575. 006ffc2c 44 3a 5c 47 41 4d 45 53 5c 53 74 65 61 6d 4c 69 D:\GAMES\SteamLi
  576. 006ffc3c 62 72 61 72 79 5c 73 74 65 61 6d 61 70 70 73 5c brary\steamapps\
  577. 006ffc4c 63 6f 6d 6d 6f 6e 5c 4c 65 66 74 20 34 20 44 65 common\Left 4 De
  578. 006ffc5c 61 64 20 32 20 44 65 64 69 63 61 74 65 64 20 53 ad 2 Dedicated S
  579. 006ffc6c 65 72 76 65 72 5c 73 72 63 64 73 2e 65 78 65 00 erver\srcds.exe.
  580. 006ffc7c e8 00 01 01 7f 00 00 00 00 00 00 00 00 00 00 00 ................
  581. 006ffc8c 20 00 00 00 03 00 00 00 40 ad b5 77 11 00 00 00 .......@..w....
  582. 006ffc9c fe ff ff ff fc fc 6f 00 08 00 00 00 00 00 00 00 ......o.........
  583. 006ffcac b0 2c 61 02 b0 2c 61 02 20 00 00 00 7c 19 e3 00 .,a..,a. ...|...
  584. 006ffcbc 89 ab b3 77 00 50 45 00 dc fc 6f 00 9b 2e 6c 77 ...w.PE...o...lw
  585. 006ffccc 04 00 00 00 d8 fc 6f 00 9d 42 4f ea b8 05 61 02 ......o..BO...a.
  586. 006ffcdc 00 fd 6f 00 59 50 e3 00 00 00 00 00 00 00 00 00 ..o.YP..........
  587. 006ffcec 0c fd 6f 00 66 50 e3 00 0c fd 6f 00 50 26 e3 00 ..o.fP....o.P&..
  588. 006ffcfc f4 48 73 00 1c fd 6f 00 57 85 e3 00 00 00 00 00 .Hs...o.W.......
  589. 006ffd0c 50 dc e3 00 48 1b 61 02 b8 05 61 02 01 8c 44 d4 P...H.a...a...D.
  590. 006ffd1c 34 fd 6f 00 aa 85 e3 00 00 00 00 00 73 00 00 00 4.o.........s...
  591. 006ffd2c 0a 00 00 00 e6 cc c8 d4 c4 fd 6f 00 29 19 e3 00 ..........o.)...
  592.  
  593. Found via previous frame's frame pointer
  594.  
  595.  
  596. 17: srcds.exe + 0x1929
  597. eip: 0x00e31929 esp: 0x006ffd3c ebp: 0x006ffdc4
  598.  
  599. 006ffd3c 00 00 e3 00 00 00 00 00 f7 48 73 00 0a 00 00 00 .........Hs.....
  600. 006ffd4c 16 cc c8 d4 7c 19 e3 00 7c 19 e3 00 00 50 45 00 ....|...|....PE.
  601. 006ffd5c 44 00 00 00 54 28 73 00 34 28 73 00 32 28 73 00 D...T(s.4(s.2(s.
  602. 006ffd6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  603. 006ffd7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  604. 006ffd8c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  605. 006ffd9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  606. 006ffdac 4c fd 6f 00 00 00 00 00 20 fe 6f 00 c0 2b e3 00 L.o..... .o..+..
  607. 006ffdbc c2 8d 44 d4 00 00 00 00 d4 fd 6f 00 29 fa 7e 77 ..D.......o.).~w
  608.  
  609. Found via previous frame's frame pointer
  610.  
  611.  
  612. 18: kernel32.dll!BaseThreadInitThunk + 0x19
  613. eip: 0x777efa29 esp: 0x006ffdcc ebp: 0x006ffdd4
  614.  
  615. 006ffdcc 00 50 45 00 10 fa 7e 77 30 fe 6f 00 9e 7a b4 77 .PE...~w0.o..z.w
  616.  
  617. Found via previous frame's frame pointer
  618.  
  619.  
  620. 19: ntdll.dll!__RtlUserThreadStart + 0x2f
  621. eip: 0x77b47a9e esp: 0x006ffddc ebp: 0x006ffe30
  622.  
  623. 006ffddc 00 50 45 00 6d 40 4f ea 00 00 00 00 00 00 00 00 .PE.m@O.........
  624. 006ffdec 00 50 45 00 00 00 00 00 00 00 00 00 00 00 00 00 .PE.............
  625. 006ffdfc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  626. 006ffe0c 00 00 00 00 00 00 00 00 00 00 00 00 e0 fd 6f 00 ..............o.
  627. 006ffe1c 00 00 00 00 38 fe 6f 00 40 ad b5 77 3d 76 9e 9d ....8.o.@..w=v..
  628. 006ffe2c 00 00 00 00 40 fe 6f 00 6e 7a b4 77 ....@.o.nz.w
  629.  
  630. Found via call frame info
  631.  
  632.  
  633. 20: ntdll.dll!_RtlUserThreadStart + 0x1b
  634. eip: 0x77b47a6e esp: 0x006ffe38 ebp: 0x006ffe40
  635.  
  636. Found via call frame info
  637.  
  638.  
  639. Thread 1:
  640. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  641. eip: 0x77b52f8c esp: 0x0271f784 ebp: 0x0271f914 ebx: 0x00000000
  642. esi: 0x00000003 edi: 0x00000003 eax: 0x5a29face ecx: 0x00000000
  643. edx: 0x00000000 efl: 0x00000206
  644.  
  645. 77b52f7c c2 04 00 ret 0x4
  646. 77b52f7f 90 nop
  647. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  648. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  649. 77b52f8a ff d2 call edx
  650. > 77b52f8c c2 14 00 ret 0x14
  651. 77b52f8f 90 nop
  652. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  653. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  654. 77b52f9a ff d2 call edx
  655. 77b52f9c c2 10 00 ret 0x10
  656.  
  657. 0271f784 53 b2 6c 77 S.lw
  658.  
  659. Found via instruction pointer in context
  660.  
  661.  
  662. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  663. eip: 0x776cb253 esp: 0x0271f788 ebp: 0x0271f914 ebx: 0x00000000
  664.  
  665. 0271f788 03 00 00 00 64 f9 71 02 01 00 00 00 00 00 00 00 ....d.q.........
  666. 0271f798 00 00 00 00 f9 38 be 16 00 00 00 00 00 80 84 02 .....8..........
  667. 0271f7a8 00 00 00 00 00 00 00 00 24 00 00 00 01 00 00 00 ........$.......
  668. 0271f7b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  669. 0271f7c8 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  670. 0271f7d8 00 50 45 00 ff ff ff ff 40 ad b5 77 00 00 00 00 .PE.....@..w....
  671. 0271f7e8 64 f9 71 02 0c f8 71 02 00 00 00 00 00 00 00 00 d.q...q.........
  672. 0271f7f8 00 00 00 00 00 00 00 00 0c f8 71 02 00 00 ae 77 ..........q....w
  673. 0271f808 00 00 00 00 3f 00 01 00 00 00 00 00 00 00 00 00 ....?...........
  674. 0271f818 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  675. 0271f828 7f 02 00 00 00 00 00 00 ff ff 00 00 3a 50 b2 77 ............:P.w
  676. 0271f838 d5 47 51 e8 b8 7a 4e 02 00 00 4e 02 00 00 00 00 .GQ..zN...N.....
  677. 0271f848 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  678. 0271f858 00 00 00 00 00 00 00 00 1d 00 00 1d 00 00 00 00 ................
  679. 0271f868 00 00 00 00 00 00 00 00 44 00 01 45 00 00 00 00 ........D..E....
  680. 0271f878 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  681. 0271f888 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  682. 0271f898 27 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 '...S...+...+...
  683. 0271f8a8 00 00 00 00 00 00 00 00 c0 7a 4e 02 00 00 4e 02 .........zN...N.
  684. 0271f8b8 44 00 00 00 ce fa 29 5a fc 29 b5 77 a9 11 6c 77 D.....)Z.).w..lw
  685. 0271f8c8 d4 01 00 00 00 00 00 00 c6 11 6c 77 d9 38 be 16 ..........lw.8..
  686. 0271f8d8 00 00 00 00 00 80 84 02 00 00 00 00 24 00 00 00 ............$...
  687. 0271f8e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  688. 0271f8f8 f9 38 be 16 00 00 00 00 00 00 00 00 08 fa 71 02 .8............q.
  689. 0271f908 70 07 6e 77 75 a5 b8 63 00 00 00 00 30 f9 71 02 p.nwu..c....0.q.
  690. 0271f918 38 b1 6c 77 8.lw
  691.  
  692. Found via call frame info
  693.  
  694.  
  695. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  696. eip: 0x776cb138 esp: 0x0271f91c ebp: 0x0271f930
  697.  
  698. 0271f91c 03 00 00 00 64 f9 71 02 00 00 00 00 ff ff ff ff ....d.q.........
  699. 0271f92c 00 00 00 00 78 f9 71 02 1e ab 30 5a ....x.q...0Z
  700.  
  701. Found via call frame info
  702.  
  703.  
  704. 3: vstdlib.dll + 0xab1e
  705. eip: 0x5a30ab1e esp: 0x0271f938 ebp: 0x0271f978
  706.  
  707. 0271f938 03 00 00 00 64 f9 71 02 00 00 00 00 ff ff ff ff ....d.q.........
  708. 0271f948 00 00 00 00 00 80 84 02 00 00 00 00 9c 2a b5 77 .............*.w
  709. 0271f958 00 00 00 00 9c 45 b5 77 23 76 76 77 d4 01 00 00 .....E.w#vvw....
  710. 0271f968 cc 01 00 00 dc 01 00 00 00 00 00 00 00 00 00 00 ................
  711. 0271f978 e4 f9 71 02 cd ab 30 5a ..q...0Z
  712.  
  713. Found via call frame info
  714.  
  715.  
  716. 4: vstdlib.dll + 0xabcd
  717. eip: 0x5a30abcd esp: 0x0271f980 ebp: 0x0271f9e4
  718.  
  719. 0271f980 ff ff ff ff 00 76 4e 02 01 7a 4e 02 1d 79 b6 77 .....vN..zN..y.w
  720. 0271f990 00 00 00 00 44 79 b6 77 c0 7a 4e 02 00 00 00 00 ....Dy.w.zN.....
  721. 0271f9a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  722. 0271f9b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  723. 0271f9c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  724. 0271f9d0 00 00 00 00 a0 ef 6c 77 00 00 00 00 18 81 84 02 ......lw........
  725. 0271f9e0 d6 9c 00 5a 14 fa 71 02 0d db 28 5a ...Z..q...(Z
  726.  
  727. Found via previous frame's frame pointer
  728.  
  729.  
  730. 5: tier0.dll + 0xdb0d
  731. eip: 0x5a28db0d esp: 0x0271f9ec ebp: 0x0271fa14
  732.  
  733. 0271f9ec dd 2b 5e 6e ce fa 29 5a ce fa 29 5a c0 7a 4e 02 .+^n..)Z..)Z.zN.
  734. 0271f9fc 00 80 84 02 4c fa 71 01 ec f9 71 02 3c fa 71 02 ....L.q...q.<.q.
  735. 0271fa0c c0 f3 2a 5a ff ff ff ff 4c fa 71 02 a8 fa 29 5a ..*Z....L.q...)Z
  736.  
  737. Found via previous frame's frame pointer
  738.  
  739.  
  740. 6: tier0.dll + 0x1faa8
  741. eip: 0x5a29faa8 esp: 0x0271fa1c ebp: 0x0271fa4c
  742.  
  743. 0271fa1c 00 76 4e 02 85 2b 5e 6e ce fa 29 5a ce fa 29 5a .vN..+^n..)Z..)Z
  744. 0271fa2c c0 7a 4e 02 20 fa 71 02 20 fa 71 02 b4 fa 71 02 .zN. .q. .q...q.
  745. 0271fa3c b4 fa 71 02 20 d6 29 5a 81 89 04 36 00 00 00 00 ..q. .)Z...6....
  746. 0271fa4c 58 fa 71 02 32 fb 29 5a X.q.2.)Z
  747.  
  748. Found via previous frame's frame pointer
  749.  
  750.  
  751. 7: tier0.dll + 0x1fb32
  752. eip: 0x5a29fb32 esp: 0x0271fa54 ebp: 0x0271fa58
  753.  
  754. 0271fa54 ce fa 29 5a 68 fa 71 02 29 fa 7e 77 ..)Zh.q.).~w
  755.  
  756. Found via previous frame's frame pointer
  757.  
  758.  
  759. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  760. eip: 0x777efa29 esp: 0x0271fa60 ebp: 0x0271fa68
  761.  
  762. 0271fa60 c0 7a 4e 02 10 fa 7e 77 c4 fa 71 02 9e 7a b4 77 .zN...~w..q..z.w
  763.  
  764. Found via previous frame's frame pointer
  765.  
  766.  
  767. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  768. eip: 0x77b47a9e esp: 0x0271fa70 ebp: 0x0271fac4
  769.  
  770. 0271fa70 c0 7a 4e 02 99 44 51 e8 00 00 00 00 00 00 00 00 .zN..DQ.........
  771. 0271fa80 c0 7a 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 .zN.............
  772. 0271fa90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  773. 0271faa0 00 00 00 00 00 00 00 00 00 00 00 00 74 fa 71 02 ............t.q.
  774. 0271fab0 00 00 00 00 cc fa 71 02 40 ad b5 77 3d 76 9e 9d ......q.@..w=v..
  775. 0271fac0 00 00 00 00 d4 fa 71 02 6e 7a b4 77 ......q.nz.w
  776.  
  777. Found via call frame info
  778.  
  779.  
  780. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  781. eip: 0x77b47a6e esp: 0x0271facc ebp: 0x0271fad4
  782.  
  783. Found via call frame info
  784.  
  785.  
  786. Thread 2:
  787. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  788. eip: 0x77b52f8c esp: 0x0a0ff710 ebp: 0x0a0ff8a0 ebx: 0x00000000
  789. esi: 0x00000003 edi: 0x00000003 eax: 0x5a29face ecx: 0x00000000
  790. edx: 0x00000000 efl: 0x00000212
  791.  
  792. 77b52f7c c2 04 00 ret 0x4
  793. 77b52f7f 90 nop
  794. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  795. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  796. 77b52f8a ff d2 call edx
  797. > 77b52f8c c2 14 00 ret 0x14
  798. 77b52f8f 90 nop
  799. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  800. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  801. 77b52f9a ff d2 call edx
  802. 77b52f9c c2 10 00 ret 0x10
  803.  
  804. 0a0ff710 53 b2 6c 77 S.lw
  805.  
  806. Found via instruction pointer in context
  807.  
  808.  
  809. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  810. eip: 0x776cb253 esp: 0x0a0ff714 ebp: 0x0a0ff8a0 ebx: 0x00000000
  811.  
  812. 0a0ff714 03 00 00 00 f0 f8 0f 0a 01 00 00 00 00 00 00 00 ................
  813. 0a0ff724 00 00 00 00 4d 39 c0 1e 00 00 00 00 40 81 84 02 ....M9......@...
  814. 0a0ff734 00 00 00 00 00 00 00 00 24 00 00 00 01 00 00 00 ........$.......
  815. 0a0ff744 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  816. 0a0ff754 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  817. 0a0ff764 00 50 45 00 ff ff ff ff 40 ad b5 77 00 00 00 00 .PE.....@..w....
  818. 0a0ff774 f0 f8 0f 0a 98 f7 0f 0a 00 00 00 00 00 00 00 00 ................
  819. 0a0ff784 00 00 00 00 00 00 00 00 98 f7 0f 0a 00 00 ae 77 ...............w
  820. 0a0ff794 00 00 00 00 3f 00 01 00 00 00 00 00 00 00 00 00 ....?...........
  821. 0a0ff7a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  822. 0a0ff7b4 7f 02 00 00 00 00 00 00 3a 50 b2 77 4d 47 2f e0 ........:P.wMG/.
  823. 0a0ff7c4 b8 7a 4e 02 00 00 4e 02 00 00 00 00 00 00 00 00 .zN...N.........
  824. 0a0ff7d4 00 00 00 00 00 00 00 00 00 00 00 00 ce 01 00 cf ................
  825. 0a0ff7e4 00 00 00 00 ce 01 00 cf 00 00 00 00 00 00 00 00 ................
  826. 0a0ff7f4 00 00 00 00 44 00 01 45 00 00 00 00 00 00 00 00 ....D..E........
  827. 0a0ff804 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  828. 0a0ff814 00 00 00 00 00 00 00 00 76 fe ff ff 76 fe ff ff ........v...v...
  829. 0a0ff824 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  830. 0a0ff834 00 00 00 00 00 00 00 00 00 00 4e 02 44 00 00 00 ..........N.D...
  831. 0a0ff844 00 00 00 00 44 00 00 00 fc 29 b5 77 a9 11 6c 77 ....D....).w..lw
  832. 0a0ff854 ec 01 00 00 00 00 00 00 c6 11 6c 77 2d 39 c0 1e ..........lw-9..
  833. 0a0ff864 00 00 00 00 40 81 84 02 00 00 00 00 24 00 00 00 ....@.......$...
  834. 0a0ff874 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  835. 0a0ff884 4d 39 c0 1e 00 00 00 00 00 00 00 00 94 f9 0f 0a M9..............
  836. 0a0ff894 70 07 6e 77 75 a5 b8 63 00 00 00 00 bc f8 0f 0a p.nwu..c........
  837. 0a0ff8a4 38 b1 6c 77 8.lw
  838.  
  839. Found via call frame info
  840.  
  841.  
  842. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  843. eip: 0x776cb138 esp: 0x0a0ff8a8 ebp: 0x0a0ff8bc
  844.  
  845. 0a0ff8a8 03 00 00 00 f0 f8 0f 0a 00 00 00 00 ff ff ff ff ................
  846. 0a0ff8b8 00 00 00 00 04 f9 0f 0a 1e ab 30 5a ..........0Z
  847.  
  848. Found via call frame info
  849.  
  850.  
  851. 3: vstdlib.dll + 0xab1e
  852. eip: 0x5a30ab1e esp: 0x0a0ff8c4 ebp: 0x0a0ff904
  853.  
  854. 0a0ff8c4 03 00 00 00 f0 f8 0f 0a 00 00 00 00 ff ff ff ff ................
  855. 0a0ff8d4 00 00 00 00 40 81 84 02 00 00 00 00 9c 2a b5 77 ....@........*.w
  856. 0a0ff8e4 00 00 00 00 9c 45 b5 77 23 76 76 77 ec 01 00 00 .....E.w#vvw....
  857. 0a0ff8f4 cc 01 00 00 f4 01 00 00 00 00 00 00 00 00 00 00 ................
  858. 0a0ff904 70 f9 0f 0a cd ab 30 5a p.....0Z
  859.  
  860. Found via call frame info
  861.  
  862.  
  863. 4: vstdlib.dll + 0xabcd
  864. eip: 0x5a30abcd esp: 0x0a0ff90c ebp: 0x0a0ff970
  865.  
  866. 0a0ff90c ff ff ff ff f0 76 4e 02 01 7a 4e 02 00 00 00 00 .....vN..zN.....
  867. 0a0ff91c 00 00 00 00 c0 7a 4e 02 00 00 4e 02 00 00 00 00 .....zN...N.....
  868. 0a0ff92c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  869. 0a0ff93c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  870. 0a0ff94c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  871. 0a0ff95c 00 00 00 00 a0 ef 6c 77 00 00 00 00 58 82 84 02 ......lw....X...
  872. 0a0ff96c d6 9c 00 5a a0 f9 0f 0a 0d db 28 5a ...Z......(Z
  873.  
  874. Found via previous frame's frame pointer
  875.  
  876.  
  877. 5: tier0.dll + 0xdb0d
  878. eip: 0x5a28db0d esp: 0x0a0ff978 ebp: 0x0a0ff9a0
  879.  
  880. 0a0ff978 69 28 20 66 ce fa 29 5a ce fa 29 5a c0 7a 4e 02 i( f..)Z..)Z.zN.
  881. 0a0ff988 40 81 84 02 d8 f9 0f 01 78 f9 0f 0a c8 f9 0f 0a @.......x.......
  882. 0a0ff998 c0 f3 2a 5a ff ff ff ff d8 f9 0f 0a a8 fa 29 5a ..*Z..........)Z
  883.  
  884. Found via previous frame's frame pointer
  885.  
  886.  
  887. 6: tier0.dll + 0x1faa8
  888. eip: 0x5a29faa8 esp: 0x0a0ff9a8 ebp: 0x0a0ff9d8
  889.  
  890. 0a0ff9a8 f0 76 4e 02 11 28 20 66 ce fa 29 5a ce fa 29 5a .vN..( f..)Z..)Z
  891. 0a0ff9b8 c0 7a 4e 02 ac f9 0f 0a ac f9 0f 0a 40 fa 0f 0a .zN.........@...
  892. 0a0ff9c8 40 fa 0f 0a 20 d6 29 5a 81 89 04 36 00 00 00 00 @... .)Z...6....
  893. 0a0ff9d8 e4 f9 0f 0a 32 fb 29 5a ....2.)Z
  894.  
  895. Found via previous frame's frame pointer
  896.  
  897.  
  898. 7: tier0.dll + 0x1fb32
  899. eip: 0x5a29fb32 esp: 0x0a0ff9e0 ebp: 0x0a0ff9e4
  900.  
  901. 0a0ff9e0 ce fa 29 5a f4 f9 0f 0a 29 fa 7e 77 ..)Z....).~w
  902.  
  903. Found via previous frame's frame pointer
  904.  
  905.  
  906. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  907. eip: 0x777efa29 esp: 0x0a0ff9ec ebp: 0x0a0ff9f4
  908.  
  909. 0a0ff9ec c0 7a 4e 02 10 fa 7e 77 50 fa 0f 0a 9e 7a b4 77 .zN...~wP....z.w
  910.  
  911. Found via previous frame's frame pointer
  912.  
  913.  
  914. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  915. eip: 0x77b47a9e esp: 0x0a0ff9fc ebp: 0x0a0ffa50
  916.  
  917. 0a0ff9fc c0 7a 4e 02 0d 44 2f e0 00 00 00 00 00 00 00 00 .zN..D/.........
  918. 0a0ffa0c c0 7a 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 .zN.............
  919. 0a0ffa1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  920. 0a0ffa2c 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 0f 0a ................
  921. 0a0ffa3c 00 00 00 00 58 fa 0f 0a 40 ad b5 77 3d 76 9e 9d ....X...@..w=v..
  922. 0a0ffa4c 00 00 00 00 60 fa 0f 0a 6e 7a b4 77 ....`...nz.w
  923.  
  924. Found via call frame info
  925.  
  926.  
  927. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  928. eip: 0x77b47a6e esp: 0x0a0ffa58 ebp: 0x0a0ffa60
  929.  
  930. Found via call frame info
  931.  
  932.  
  933. Thread 3:
  934. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  935. eip: 0x77b52f8c esp: 0x0a1ff534 ebp: 0x0a1ff6c4 ebx: 0x00000000
  936. esi: 0x00000003 edi: 0x00000003 eax: 0x5a29face ecx: 0x00000000
  937. edx: 0x00000000 efl: 0x00000202
  938.  
  939. 77b52f7c c2 04 00 ret 0x4
  940. 77b52f7f 90 nop
  941. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  942. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  943. 77b52f8a ff d2 call edx
  944. > 77b52f8c c2 14 00 ret 0x14
  945. 77b52f8f 90 nop
  946. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  947. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  948. 77b52f9a ff d2 call edx
  949. 77b52f9c c2 10 00 ret 0x10
  950.  
  951. 0a1ff534 53 b2 6c 77 S.lw
  952.  
  953. Found via instruction pointer in context
  954.  
  955.  
  956. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  957. eip: 0x776cb253 esp: 0x0a1ff538 ebp: 0x0a1ff6c4 ebx: 0x00000000
  958.  
  959. 0a1ff538 03 00 00 00 14 f7 1f 0a 01 00 00 00 00 00 00 00 ................
  960. 0a1ff548 00 00 00 00 29 37 d0 1e 00 00 00 00 80 82 84 02 ....)7..........
  961. 0a1ff558 00 00 00 00 00 00 00 00 24 00 00 00 01 00 00 00 ........$.......
  962. 0a1ff568 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  963. 0a1ff578 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  964. 0a1ff588 00 50 45 00 ff ff ff ff 40 ad b5 77 00 00 00 00 .PE.....@..w....
  965. 0a1ff598 14 f7 1f 0a bc f5 1f 0a 00 00 00 00 00 00 00 00 ................
  966. 0a1ff5a8 00 00 00 00 00 00 00 00 bc f5 1f 0a 00 00 ae 77 ...............w
  967. 0a1ff5b8 00 00 00 00 3f 00 01 00 00 00 00 00 00 00 00 00 ....?...........
  968. 0a1ff5c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  969. 0a1ff5d8 7f 02 00 00 00 00 00 00 ff ff 00 00 3a 50 b2 77 ............:P.w
  970. 0a1ff5e8 65 49 3f e0 b8 7a 4e 02 00 00 4e 02 00 00 00 00 eI?..zN...N.....
  971. 0a1ff5f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  972. 0a1ff608 7f 01 00 7e 00 00 00 00 7f 01 00 7e 00 00 00 00 ...~.......~....
  973. 0a1ff618 00 00 00 00 00 00 00 00 44 00 01 45 00 00 00 00 ........D..E....
  974. 0a1ff628 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  975. 0a1ff638 00 00 00 00 00 00 00 00 00 00 00 00 c5 fe ff ff ................
  976. 0a1ff648 c5 fe ff ff 53 00 00 00 2b 00 00 00 2b 00 00 00 ....S...+...+...
  977. 0a1ff658 00 00 00 00 00 00 00 00 c0 7a 4e 02 00 00 4e 02 .........zN...N.
  978. 0a1ff668 44 00 00 00 ce fa 29 5a fc 29 b5 77 a9 11 6c 77 D.....)Z.).w..lw
  979. 0a1ff678 04 02 00 00 00 00 00 00 c6 11 6c 77 09 37 d0 1e ..........lw.7..
  980. 0a1ff688 00 00 00 00 80 82 84 02 00 00 00 00 24 00 00 00 ............$...
  981. 0a1ff698 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  982. 0a1ff6a8 29 37 d0 1e 00 00 00 00 00 00 00 00 b8 f7 1f 0a )7..............
  983. 0a1ff6b8 70 07 6e 77 75 a5 b8 63 00 00 00 00 e0 f6 1f 0a p.nwu..c........
  984. 0a1ff6c8 38 b1 6c 77 8.lw
  985.  
  986. Found via call frame info
  987.  
  988.  
  989. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  990. eip: 0x776cb138 esp: 0x0a1ff6cc ebp: 0x0a1ff6e0
  991.  
  992. 0a1ff6cc 03 00 00 00 14 f7 1f 0a 00 00 00 00 ff ff ff ff ................
  993. 0a1ff6dc 00 00 00 00 28 f7 1f 0a 1e ab 30 5a ....(.....0Z
  994.  
  995. Found via call frame info
  996.  
  997.  
  998. 3: vstdlib.dll + 0xab1e
  999. eip: 0x5a30ab1e esp: 0x0a1ff6e8 ebp: 0x0a1ff728
  1000.  
  1001. 0a1ff6e8 03 00 00 00 14 f7 1f 0a 00 00 00 00 ff ff ff ff ................
  1002. 0a1ff6f8 00 00 00 00 80 82 84 02 00 00 00 00 9c 2a b5 77 .............*.w
  1003. 0a1ff708 00 00 00 00 9c 45 b5 77 23 76 76 77 04 02 00 00 .....E.w#vvw....
  1004. 0a1ff718 cc 01 00 00 0c 02 00 00 00 00 00 00 00 00 00 00 ................
  1005. 0a1ff728 94 f7 1f 0a cd ab 30 5a ......0Z
  1006.  
  1007. Found via call frame info
  1008.  
  1009.  
  1010. 4: vstdlib.dll + 0xabcd
  1011. eip: 0x5a30abcd esp: 0x0a1ff730 ebp: 0x0a1ff794
  1012.  
  1013. 0a1ff730 ff ff ff ff a0 75 4e 02 01 7a 4e 02 1d 79 b6 77 .....uN..zN..y.w
  1014. 0a1ff740 00 00 00 00 44 79 b6 77 c0 7a 4e 02 00 00 00 00 ....Dy.w.zN.....
  1015. 0a1ff750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1016. 0a1ff760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1017. 0a1ff770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1018. 0a1ff780 00 00 00 00 a0 ef 6c 77 00 00 00 00 98 83 84 02 ......lw........
  1019. 0a1ff790 d6 9c 00 5a c4 f7 1f 0a 0d db 28 5a ...Z......(Z
  1020.  
  1021. Found via previous frame's frame pointer
  1022.  
  1023.  
  1024. 5: tier0.dll + 0xdb0d
  1025. eip: 0x5a28db0d esp: 0x0a1ff79c ebp: 0x0a1ff7c4
  1026.  
  1027. 0a1ff79c 0d 26 30 66 ce fa 29 5a ce fa 29 5a c0 7a 4e 02 .&0f..)Z..)Z.zN.
  1028. 0a1ff7ac 80 82 84 02 fc f7 1f 01 9c f7 1f 0a ec f7 1f 0a ................
  1029. 0a1ff7bc c0 f3 2a 5a ff ff ff ff fc f7 1f 0a a8 fa 29 5a ..*Z..........)Z
  1030.  
  1031. Found via previous frame's frame pointer
  1032.  
  1033.  
  1034. 6: tier0.dll + 0x1faa8
  1035. eip: 0x5a29faa8 esp: 0x0a1ff7cc ebp: 0x0a1ff7fc
  1036.  
  1037. 0a1ff7cc a0 75 4e 02 35 26 30 66 ce fa 29 5a ce fa 29 5a .uN.5&0f..)Z..)Z
  1038. 0a1ff7dc c0 7a 4e 02 d0 f7 1f 0a d0 f7 1f 0a 64 f8 1f 0a .zN.........d...
  1039. 0a1ff7ec 64 f8 1f 0a 20 d6 29 5a 81 89 04 36 00 00 00 00 d... .)Z...6....
  1040. 0a1ff7fc 08 f8 1f 0a 32 fb 29 5a ....2.)Z
  1041.  
  1042. Found via previous frame's frame pointer
  1043.  
  1044.  
  1045. 7: tier0.dll + 0x1fb32
  1046. eip: 0x5a29fb32 esp: 0x0a1ff804 ebp: 0x0a1ff808
  1047.  
  1048. 0a1ff804 ce fa 29 5a 18 f8 1f 0a 29 fa 7e 77 ..)Z....).~w
  1049.  
  1050. Found via previous frame's frame pointer
  1051.  
  1052.  
  1053. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  1054. eip: 0x777efa29 esp: 0x0a1ff810 ebp: 0x0a1ff818
  1055.  
  1056. 0a1ff810 c0 7a 4e 02 10 fa 7e 77 74 f8 1f 0a 9e 7a b4 77 .zN...~wt....z.w
  1057.  
  1058. Found via previous frame's frame pointer
  1059.  
  1060.  
  1061. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  1062. eip: 0x77b47a9e esp: 0x0a1ff820 ebp: 0x0a1ff874
  1063.  
  1064. 0a1ff820 c0 7a 4e 02 29 46 3f e0 00 00 00 00 00 00 00 00 .zN.)F?.........
  1065. 0a1ff830 c0 7a 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 .zN.............
  1066. 0a1ff840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1067. 0a1ff850 00 00 00 00 00 00 00 00 00 00 00 00 24 f8 1f 0a ............$...
  1068. 0a1ff860 00 00 00 00 7c f8 1f 0a 40 ad b5 77 3d 76 9e 9d ....|...@..w=v..
  1069. 0a1ff870 00 00 00 00 84 f8 1f 0a 6e 7a b4 77 ........nz.w
  1070.  
  1071. Found via call frame info
  1072.  
  1073.  
  1074. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  1075. eip: 0x77b47a6e esp: 0x0a1ff87c ebp: 0x0a1ff884
  1076.  
  1077. Found via call frame info
  1078.  
  1079.  
  1080. Thread 4:
  1081. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  1082. eip: 0x77b52f8c esp: 0x0a2ffc54 ebp: 0x0a2ffde4 ebx: 0x00000000
  1083. esi: 0x00000003 edi: 0x00000003 eax: 0x5a29face ecx: 0x00000000
  1084. edx: 0x00000000 efl: 0x00000202
  1085.  
  1086. 77b52f7c c2 04 00 ret 0x4
  1087. 77b52f7f 90 nop
  1088. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  1089. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  1090. 77b52f8a ff d2 call edx
  1091. > 77b52f8c c2 14 00 ret 0x14
  1092. 77b52f8f 90 nop
  1093. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  1094. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  1095. 77b52f9a ff d2 call edx
  1096. 77b52f9c c2 10 00 ret 0x10
  1097.  
  1098. 0a2ffc54 53 b2 6c 77 S.lw
  1099.  
  1100. Found via instruction pointer in context
  1101.  
  1102.  
  1103. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  1104. eip: 0x776cb253 esp: 0x0a2ffc58 ebp: 0x0a2ffde4 ebx: 0x00000000
  1105.  
  1106. 0a2ffc58 03 00 00 00 34 fe 2f 0a 01 00 00 00 00 00 00 00 ....4./.........
  1107. 0a2ffc68 00 00 00 00 09 3c e0 1e 00 00 00 00 c0 83 84 02 .....<..........
  1108. 0a2ffc78 00 00 00 00 00 00 00 00 24 00 00 00 01 00 00 00 ........$.......
  1109. 0a2ffc88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1110. 0a2ffc98 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  1111. 0a2ffca8 00 50 45 00 ff ff ff ff 40 ad b5 77 00 00 00 00 .PE.....@..w....
  1112. 0a2ffcb8 34 fe 2f 0a dc fc 2f 0a 00 00 00 00 00 00 00 00 4./.../.........
  1113. 0a2ffcc8 00 00 00 00 00 00 00 00 dc fc 2f 0a 00 00 ae 77 ........../....w
  1114. 0a2ffcd8 00 00 00 00 3f 00 01 00 00 00 00 00 00 00 00 00 ....?...........
  1115. 0a2ffce8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1116. 0a2ffcf8 7f 02 00 00 00 00 00 00 ff ff 00 00 3a 50 b2 77 ............:P.w
  1117. 0a2ffd08 05 40 0f e0 b8 7a 4e 02 00 00 4e 02 00 00 00 00 .@...zN...N.....
  1118. 0a2ffd18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1119. 0a2ffd28 30 01 00 31 00 00 00 00 30 01 00 31 00 00 00 00 0..1....0..1....
  1120. 0a2ffd38 00 00 00 00 00 00 00 00 44 00 01 45 00 00 00 00 ........D..E....
  1121. 0a2ffd48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1122. 0a2ffd58 00 00 00 00 00 00 00 00 00 00 00 00 14 ff ff ff ................
  1123. 0a2ffd68 14 ff ff ff 53 00 00 00 2b 00 00 00 2b 00 00 00 ....S...+...+...
  1124. 0a2ffd78 00 00 00 00 00 00 00 00 c0 7a 4e 02 00 00 4e 02 .........zN...N.
  1125. 0a2ffd88 44 00 00 00 ce fa 29 5a fc 29 b5 77 a9 11 6c 77 D.....)Z.).w..lw
  1126. 0a2ffd98 1c 02 00 00 00 00 00 00 c6 11 6c 77 e9 3f e0 1e ..........lw.?..
  1127. 0a2ffda8 00 00 00 00 c0 83 84 02 00 00 00 00 24 00 00 00 ............$...
  1128. 0a2ffdb8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1129. 0a2ffdc8 09 3c e0 1e 00 00 00 00 00 00 00 00 d8 fe 2f 0a .<............/.
  1130. 0a2ffdd8 70 07 6e 77 75 a5 b8 63 00 00 00 00 00 fe 2f 0a p.nwu..c....../.
  1131. 0a2ffde8 38 b1 6c 77 8.lw
  1132.  
  1133. Found via call frame info
  1134.  
  1135.  
  1136. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  1137. eip: 0x776cb138 esp: 0x0a2ffdec ebp: 0x0a2ffe00
  1138.  
  1139. 0a2ffdec 03 00 00 00 34 fe 2f 0a 00 00 00 00 ff ff ff ff ....4./.........
  1140. 0a2ffdfc 00 00 00 00 48 fe 2f 0a 1e ab 30 5a ....H./...0Z
  1141.  
  1142. Found via call frame info
  1143.  
  1144.  
  1145. 3: vstdlib.dll + 0xab1e
  1146. eip: 0x5a30ab1e esp: 0x0a2ffe08 ebp: 0x0a2ffe48
  1147.  
  1148. 0a2ffe08 03 00 00 00 34 fe 2f 0a 00 00 00 00 ff ff ff ff ....4./.........
  1149. 0a2ffe18 00 00 00 00 c0 83 84 02 00 00 00 00 9c 2a b5 77 .............*.w
  1150. 0a2ffe28 00 00 00 00 9c 45 b5 77 23 76 76 77 1c 02 00 00 .....E.w#vvw....
  1151. 0a2ffe38 cc 01 00 00 24 02 00 00 00 00 00 00 00 00 00 00 ....$...........
  1152. 0a2ffe48 b4 fe 2f 0a cd ab 30 5a ../...0Z
  1153.  
  1154. Found via call frame info
  1155.  
  1156.  
  1157. 4: vstdlib.dll + 0xabcd
  1158. eip: 0x5a30abcd esp: 0x0a2ffe50 ebp: 0x0a2ffeb4
  1159.  
  1160. 0a2ffe50 ff ff ff ff b8 75 4e 02 01 7a 4e 02 1d 79 b6 77 .....uN..zN..y.w
  1161. 0a2ffe60 00 00 00 00 44 79 b6 77 c0 7a 4e 02 00 00 00 00 ....Dy.w.zN.....
  1162. 0a2ffe70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1163. 0a2ffe80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1164. 0a2ffe90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1165. 0a2ffea0 00 00 00 00 a0 ef 6c 77 00 00 00 00 d8 84 84 02 ......lw........
  1166. 0a2ffeb0 d6 9c 00 5a e4 fe 2f 0a 0d db 28 5a ...Z../...(Z
  1167.  
  1168. Found via previous frame's frame pointer
  1169.  
  1170.  
  1171. 5: tier0.dll + 0xdb0d
  1172. eip: 0x5a28db0d esp: 0x0a2ffebc ebp: 0x0a2ffee4
  1173.  
  1174. 0a2ffebc 2d 2f 00 66 ce fa 29 5a ce fa 29 5a c0 7a 4e 02 -/.f..)Z..)Z.zN.
  1175. 0a2ffecc c0 83 84 02 1c ff 2f 01 bc fe 2f 0a 0c ff 2f 0a ....../.../.../.
  1176. 0a2ffedc c0 f3 2a 5a ff ff ff ff 1c ff 2f 0a a8 fa 29 5a ..*Z....../...)Z
  1177.  
  1178. Found via previous frame's frame pointer
  1179.  
  1180.  
  1181. 6: tier0.dll + 0x1faa8
  1182. eip: 0x5a29faa8 esp: 0x0a2ffeec ebp: 0x0a2fff1c
  1183.  
  1184. 0a2ffeec b8 75 4e 02 d5 2e 00 66 ce fa 29 5a ce fa 29 5a .uN....f..)Z..)Z
  1185. 0a2ffefc c0 7a 4e 02 f0 fe 2f 0a f0 fe 2f 0a 84 ff 2f 0a .zN.../.../.../.
  1186. 0a2fff0c 84 ff 2f 0a 20 d6 29 5a 81 89 04 36 00 00 00 00 ../. .)Z...6....
  1187. 0a2fff1c 28 ff 2f 0a 32 fb 29 5a (./.2.)Z
  1188.  
  1189. Found via previous frame's frame pointer
  1190.  
  1191.  
  1192. 7: tier0.dll + 0x1fb32
  1193. eip: 0x5a29fb32 esp: 0x0a2fff24 ebp: 0x0a2fff28
  1194.  
  1195. 0a2fff24 ce fa 29 5a 38 ff 2f 0a 29 fa 7e 77 ..)Z8./.).~w
  1196.  
  1197. Found via previous frame's frame pointer
  1198.  
  1199.  
  1200. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  1201. eip: 0x777efa29 esp: 0x0a2fff30 ebp: 0x0a2fff38
  1202.  
  1203. 0a2fff30 c0 7a 4e 02 10 fa 7e 77 94 ff 2f 0a 9e 7a b4 77 .zN...~w../..z.w
  1204.  
  1205. Found via previous frame's frame pointer
  1206.  
  1207.  
  1208. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  1209. eip: 0x77b47a9e esp: 0x0a2fff40 ebp: 0x0a2fff94
  1210.  
  1211. 0a2fff40 c0 7a 4e 02 c9 41 0f e0 00 00 00 00 00 00 00 00 .zN..A..........
  1212. 0a2fff50 c0 7a 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 .zN.............
  1213. 0a2fff60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1214. 0a2fff70 00 00 00 00 00 00 00 00 00 00 00 00 44 ff 2f 0a ............D./.
  1215. 0a2fff80 00 00 00 00 9c ff 2f 0a 40 ad b5 77 3d 76 9e 9d ....../.@..w=v..
  1216. 0a2fff90 00 00 00 00 a4 ff 2f 0a 6e 7a b4 77 ....../.nz.w
  1217.  
  1218. Found via call frame info
  1219.  
  1220.  
  1221. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  1222. eip: 0x77b47a6e esp: 0x0a2fff9c ebp: 0x0a2fffa4
  1223.  
  1224. Found via call frame info
  1225.  
  1226.  
  1227. Thread 5:
  1228. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  1229. eip: 0x77b52f8c esp: 0x0c1cf478 ebp: 0x0c1cf608 ebx: 0x00000000
  1230. esi: 0x00000001 edi: 0x00000001 eax: 0x00000102 ecx: 0x00000000
  1231. edx: 0x00000000 efl: 0x00000206
  1232.  
  1233. 77b52f7c c2 04 00 ret 0x4
  1234. 77b52f7f 90 nop
  1235. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  1236. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  1237. 77b52f8a ff d2 call edx
  1238. > 77b52f8c c2 14 00 ret 0x14
  1239. 77b52f8f 90 nop
  1240. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  1241. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  1242. 77b52f9a ff d2 call edx
  1243. 77b52f9c c2 10 00 ret 0x10
  1244.  
  1245. 0c1cf478 53 b2 6c 77 S.lw
  1246.  
  1247. Found via instruction pointer in context
  1248.  
  1249.  
  1250. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  1251. eip: 0x776cb253 esp: 0x0c1cf47c ebp: 0x0c1cf608 ebx: 0x00000000
  1252.  
  1253. 0c1cf47c 01 00 00 00 30 40 78 00 01 00 00 00 00 00 00 00 ....0@x.........
  1254. 0c1cf48c 00 00 00 00 e5 37 d3 18 30 40 78 00 00 00 00 00 .....7..0@x.....
  1255. 0c1cf49c 00 00 00 00 bc 04 00 00 24 00 00 00 01 00 00 00 ........$.......
  1256. 0c1cf4ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1257. 0c1cf4bc 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ................
  1258. 0c1cf4cc 00 50 45 00 ec f4 1c 0c ec 09 2c 67 00 00 00 00 .PE.......,g....
  1259. 0c1cf4dc 30 40 78 00 30 b7 74 00 00 00 00 00 fc 72 7e 00 0@x.0.t......r~.
  1260. 0c1cf4ec 84 f5 1c 0c 88 c1 2b 67 59 1b 30 67 cd c2 2b 67 ......+gY.0g..+g
  1261. 0c1cf4fc 01 8e 51 3e cc f5 1c 0c 48 42 78 00 01 00 00 00 ..Q>....HBx.....
  1262. 0c1cf50c 48 42 78 00 48 42 78 00 00 00 00 00 00 00 00 00 HBx.HBx.........
  1263. 0c1cf51c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1264. 0c1cf52c 00 fe ff ff fc 72 7e 02 f8 b3 7e 02 f1 03 00 00 .....r~...~.....
  1265. 0c1cf53c a8 26 b1 0c 00 40 00 00 00 00 00 00 00 00 00 00 .&...@..........
  1266. 0c1cf54c 00 00 00 00 38 b5 7e 02 00 fe ff ff 28 00 00 00 ....8.~.....(...
  1267. 0c1cf55c 00 00 00 00 06 00 20 00 20 ae 78 00 48 42 78 00 ...... . .x.HBx.
  1268. 0c1cf56c f1 03 00 01 01 8e 51 3e fc f4 1c 0c e0 f5 1c 0c ......Q>........
  1269. 0c1cf57c 32 33 30 67 0c 00 00 00 cd c2 2b 67 c9 bf 2b 67 230g......+g..+g
  1270. 0c1cf58c 00 00 00 00 00 00 00 00 bc 04 00 00 6c 07 00 00 ............l...
  1271. 0c1cf59c 00 ce 74 00 48 a5 76 00 48 42 78 00 dd bf 2b 67 ..t.H.v.HBx...+g
  1272. 0c1cf5ac 69 8e 51 3e 6c 07 00 00 bc 04 00 00 48 a5 76 00 i.Q>l.......H.v.
  1273. 0c1cf5bc 18 b4 7e 02 00 00 00 00 00 00 00 00 10 00 00 00 ..~.............
  1274. 0c1cf5cc e8 b3 7e 02 28 00 00 00 f2 05 00 00 48 42 78 00 ..~.(.......HBx.
  1275. 0c1cf5dc ac f5 1c 0c b8 72 7e 02 38 f6 1c 0c 00 00 00 00 .....r~.8.......
  1276. 0c1cf5ec e5 37 d3 18 cf 16 2d 67 b8 72 7e 02 c4 f6 1c 0c .7....-g.r~.....
  1277. 0c1cf5fc 70 07 6e 77 75 a5 b8 63 00 00 00 00 d4 f6 1c 0c p.nwu..c........
  1278. 0c1cf60c 3e b0 2e 67 >..g
  1279.  
  1280. Found via call frame info
  1281.  
  1282.  
  1283. 2: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::WaitAdapter::Callback_WaitAny(Microsoft::CoreUI::Dispatch::WaitController *,Microsoft::CoreUI::Support::Win32Handle *,unsigned int,unsigned int,Microsoft::CoreUI::WaitFlags,bool,unsigned int &) + 0xd8
  1284. eip: 0x672eb03e esp: 0x0c1cf610 ebp: 0x0c1cf6d4
  1285.  
  1286. 0c1cf610 01 00 00 00 30 40 78 00 00 00 00 00 ff ff ff ff ....0@x.........
  1287. 0c1cf620 00 00 00 00 51 8d 51 3e 00 00 00 00 00 00 00 00 ....Q.Q>........
  1288. 0c1cf630 b8 0b 77 00 f0 03 00 00 ff ff 00 80 b8 72 7e 02 ..w..........r~.
  1289. 0c1cf640 00 00 00 00 98 f9 1c 0c 01 32 b5 77 50 f7 1c 0c .........2.wP...
  1290. 0c1cf650 14 04 00 00 f0 03 00 00 e8 55 75 00 30 40 78 00 .........Uu.0@x.
  1291. 0c1cf660 54 f7 1c 0c 01 00 00 00 00 00 00 00 ff ff ff ff T...............
  1292. 0c1cf670 30 19 00 00 30 19 78 00 0f 48 2f 67 42 e1 2d 67 0...0.x..H/gB.-g
  1293. 0c1cf680 e8 b3 7e 02 54 f7 1c 0c 5f e1 2d 67 31 8d 51 3e ..~.T..._.-g1.Q>
  1294. 0c1cf690 a8 b3 7e 02 44 aa 30 67 a8 af 7e 02 e0 41 75 00 ..~.D.0g..~..Au.
  1295. 0c1cf6a0 d8 4f c0 77 8c f6 1c 0c 14 f7 1c 0c 85 41 30 67 .O.w.........A0g
  1296. 0c1cf6b0 00 00 00 00 5f e1 2d 67 51 8d 51 3e 24 f6 1c 0c ...._.-gQ.Q>$...
  1297. 0c1cf6c0 14 f8 1c 0c 5c f7 1c 0c 80 0c 30 67 5d 92 7c 55 ....\.....0g].|U
  1298. 0c1cf6d0 00 00 00 00 68 f7 1c 0c c5 c3 2c 67 ....h.....,g
  1299.  
  1300. Found via call frame info
  1301.  
  1302.  
  1303. 3: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::WaitController::Callback_DoWait(unsigned int,Microsoft::CoreUI::Support::Win32Handle *,unsigned int,Microsoft::CoreUI::WaitFlags,bool,Microsoft::CoreUI::Dispatch::WakeRecord &) + 0xc5
  1304. eip: 0x672cc3c5 esp: 0x0c1cf6dc ebp: 0x0c1cf768
  1305.  
  1306. 0c1cf6dc 54 f7 1c 0c 50 f7 1c 0c 30 40 78 00 00 00 00 00 T...P...0@x.....
  1307. 0c1cf6ec ff ff ff ff 00 00 00 00 00 00 00 00 50 f7 1c 0c ............P...
  1308. 0c1cf6fc ed 8c 51 3e 14 f8 1c 0c 00 00 00 00 b8 0b 77 00 ..Q>..........w.
  1309. 0c1cf70c d6 f7 1c 0c dc 40 b5 77 5f 48 2f 67 f0 03 00 00 .....@.w_H/g....
  1310. 0c1cf71c 40 f7 1c 0c 01 00 00 00 3c f7 1c 0c 44 f7 1c 0c @.......<...D...
  1311. 0c1cf72c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1312. 0c1cf73c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1313. 0c1cf74c b8 0b 77 00 ff ff ff ff 30 40 78 00 fc f6 1c 0c ..w.....0@x.....
  1314. 0c1cf75c d4 f7 1c 0c ed 3a 30 67 02 00 00 00 e0 f7 1c 0c .....:0g........
  1315. 0c1cf76c 7f c2 2c 67 ..,g
  1316.  
  1317. Found via call frame info
  1318.  
  1319.  
  1320. 4: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::WaitController::Callback_DoGeneralWait(unsigned int,Microsoft::CoreUI::Support::Win32Handle *,unsigned int,Microsoft::CoreUI::WaitFlags,Microsoft::CoreUI::Dispatch::WakeRecord &,Microsoft::CoreUI::Dispatch::WakeRecordHandler *,bool) + 0x152
  1321. eip: 0x672cc27f esp: 0x0c1cf770 ebp: 0x0c1cf7e0
  1322.  
  1323. 0c1cf770 c4 f7 1c 0c 00 00 00 00 00 00 00 00 ff ff ff ff ................
  1324. 0c1cf780 00 00 00 00 00 00 00 00 14 f8 1c 0c 65 8c 51 3e ............e.Q>
  1325. 0c1cf790 b0 c4 2c 67 b8 0b 77 00 b8 0b 77 00 00 00 00 00 ..,g..w...w.....
  1326. 0c1cf7a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1327. 0c1cf7b0 00 00 00 00 00 00 00 00 00 00 00 00 b8 0b 77 00 ..............w.
  1328. 0c1cf7c0 21 4e b4 77 d8 4f c0 77 01 00 00 00 ff ff ff ff !N.w.O.w........
  1329. 0c1cf7d0 8c f7 1c 0c 34 f8 1c 0c b2 3a 30 67 02 00 00 00 ....4....:0g....
  1330. 0c1cf7e0 40 f8 1c 0c f6 c4 2c 67 @.....,g
  1331.  
  1332. Found via call frame info
  1333.  
  1334.  
  1335. 5: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::WaitController::Callback_OnDispatch() + 0x46
  1336. eip: 0x672cc4f6 esp: 0x0c1cf7e8 ebp: 0x0c1cf840
  1337.  
  1338. 0c1cf7e8 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 ................
  1339. 0c1cf7f8 14 f8 1c 0c 00 c3 75 00 00 00 00 00 c5 83 51 3e ......u.......Q>
  1340. 0c1cf808 b0 c4 2c 67 b8 0b 77 00 b8 0b 77 00 00 00 00 00 ..,g..w...w.....
  1341. 0c1cf818 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1342. 0c1cf828 00 f8 1c 0c 00 00 00 00 00 00 00 00 74 f8 1c 0c ............t...
  1343. 0c1cf838 ec 39 30 67 00 00 00 00 80 f8 1c 0c ea b7 2c 67 .90g..........,g
  1344.  
  1345. Found via call frame info
  1346.  
  1347.  
  1348. 6: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::Dispatcher::DispatchNextItem() + 0xe0
  1349. eip: 0x672cb7ea esp: 0x0c1cf848 ebp: 0x0c1cf880
  1350.  
  1351. 0c1cf848 05 83 51 3e ec f8 1c 0c 70 39 76 00 00 00 00 00 ..Q>....p9v.....
  1352. 0c1cf858 00 00 00 00 b8 0b 77 00 7c f8 1c 0c 70 39 76 00 ......w.|...p9v.
  1353. 0c1cf868 01 00 00 00 70 39 76 00 b8 0b 77 00 b4 f8 1c 0c ....p9v...w.....
  1354. 0c1cf878 44 3a 30 67 01 00 00 00 c0 f8 1c 0c bd b2 2c 67 D:0g..........,g
  1355.  
  1356. Found via call frame info
  1357.  
  1358.  
  1359. 7: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::Dispatcher::Callback_DispatchLoop(Microsoft::CoreUI::Dispatch::RunnablePriorityMask) + 0x5b
  1360. eip: 0x672cb2bd esp: 0x0c1cf888 ebp: 0x0c1cf8c0
  1361.  
  1362. 0c1cf888 45 83 51 3e b8 0b 77 00 78 08 77 00 00 00 00 00 E.Q>..w.x.w.....
  1363. 0c1cf898 70 39 76 00 b4 f8 1c 0c ad c4 2d 67 b8 0b 77 00 p9v.......-g..w.
  1364. 0c1cf8a8 00 00 00 00 02 00 00 00 45 83 51 3e f4 f8 1c 0c ........E.Q>....
  1365. 0c1cf8b8 0f 3a 30 67 00 00 00 00 00 f9 1c 0c 60 ec 2b 67 .:0g........`.+g
  1366.  
  1367. Found via call frame info
  1368.  
  1369.  
  1370. 8: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::EventLoop::Callback_RunCoreLoop(Microsoft::CoreUI::Dispatch::RunMode,bool,bool &) + 0xe1
  1371. eip: 0x672bec60 esp: 0x0c1cf8c8 ebp: 0x0c1cf900
  1372.  
  1373. 0c1cf8c8 ec f8 1c 0c 00 00 00 00 85 82 51 3e 48 42 78 00 ..........Q>HBx.
  1374. 0c1cf8d8 78 08 77 00 00 00 00 00 00 00 00 00 48 3f 76 00 x.w.........H?v.
  1375. 0c1cf8e8 78 08 77 00 00 00 00 00 d0 f8 1c 0c 38 f9 1c 0c x.w.........8...
  1376. 0c1cf8f8 75 34 30 67 01 00 00 00 44 f9 1c 0c f5 ea 2b 67 u40g....D.....+g
  1377.  
  1378. Found via call frame info
  1379.  
  1380.  
  1381. 9: CoreMessaging.dll!Microsoft::CoreUI::Dispatch::EventLoop::Callback_Run(Microsoft::CoreUI::Dispatch::RunMode) + 0x89
  1382. eip: 0x672beaf5 esp: 0x0c1cf908 ebp: 0x0c1cf944
  1383.  
  1384. 0c1cf908 28 f9 1c 0c 01 00 00 00 00 00 00 00 33 f9 1c 0c (...........3...
  1385. 0c1cf918 c1 82 51 3e 48 42 78 00 f0 94 2d 67 78 ab 76 00 ..Q>HBx...-gx.v.
  1386. 0c1cf928 00 00 00 00 78 08 77 00 82 3f 2b 00 00 00 00 01 ....x.w..?+.....
  1387. 0c1cf938 64 f9 1c 0c 4a 34 30 67 00 00 00 00 70 f9 1c 0c d...J40g....p...
  1388. 0c1cf948 1e 95 2d 67 ..-g
  1389.  
  1390. Found via call frame info
  1391.  
  1392.  
  1393. 10: CoreMessaging.dll!Microsoft::CoreUI::Messaging::MessageSessionCommon$R::Microsoft__CoreUI__IExportMessageSession_Impl::Run(System::Object *) + 0x2e
  1394. eip: 0x672d951e esp: 0x0c1cf94c ebp: 0x0c1cf970
  1395.  
  1396. 0c1cf94c 01 00 00 00 f5 82 51 3e fc 22 32 67 f0 94 2d 67 ......Q>."2g..-g
  1397. 0c1cf95c 78 ab 76 00 48 42 78 00 d8 f9 1c 0c 91 2f 30 67 x.v.HBx....../0g
  1398. 0c1cf96c 00 00 00 00 e4 f9 1c 0c 2f 1c 2a 67 ......../.*g
  1399.  
  1400. Found via call frame info
  1401.  
  1402.  
  1403. 11: CoreMessaging.dll!Microsoft::CoreUI::IExportMessageSession::Run() + 0x22
  1404. eip: 0x672a1c2f esp: 0x0c1cf978 ebp: 0x0c1cf9e4
  1405.  
  1406. 0c1cf978 48 42 78 00 38 ab 76 00 50 ae 7e 02 9f 6b 2a 67 HBx.8.v.P.~..k*g
  1407.  
  1408. Found via call frame info
  1409.  
  1410.  
  1411. 12: CoreMessaging.dll!Microsoft::CoreUI::IExportMessageSession$X__ExportAdapter::Run() + 0x3f
  1412. eip: 0x672a6b9f esp: 0x0c1cf988 ebp: 0x0c1cf9e4
  1413.  
  1414. 0c1cf988 61 82 51 3e 38 ab 76 00 60 6b 2a 67 78 ab 76 00 a.Q>8.v.`k*gx.v.
  1415. 0c1cf998 ff ff 00 80 b8 72 7e 02 1e 00 00 00 50 05 7e 02 .....r~.....P.~.
  1416. 0c1cf9a8 74 73 7e 02 e0 f9 1c 0c ad 2e 76 63 66 0a 15 23 ts~.......vcf..#
  1417. 0c1cf9b8 38 ab 76 00 a0 6c 2a 67 00 00 00 00 e8 c1 75 00 8.v..l*g......u.
  1418. 0c1cf9c8 78 f9 1c 0c 64 8d 76 00 50 ae 7e 02 88 f9 1c 0c x...d.v.P.~.....
  1419. 0c1cf9d8 1c fa 1c 0c bb 27 30 67 00 00 00 00 28 fa 1c 0c .....'0g....(...
  1420. 0c1cf9e8 a3 28 76 63 .(vc
  1421.  
  1422. Found via call frame info
  1423.  
  1424.  
  1425. 13: inputhost.dll!MessagingThread::ThreadProc() + 0xc4
  1426. eip: 0x637628a3 esp: 0x0c1cf9ec ebp: 0x0c1cfa28
  1427.  
  1428. 0c1cf9ec 50 ae 7e 02 ae 09 15 23 20 27 76 63 20 27 76 63 P.~....# 'vc 'vc
  1429. 0c1cf9fc 38 ab 76 00 00 00 00 00 00 00 00 00 00 00 00 00 8.v.............
  1430. 0c1cfa0c 00 00 00 00 01 00 00 00 38 ab 76 00 f0 f9 1c 0c ........8.v.....
  1431. 0c1cfa1c 8c fa 1c 0c d9 c5 76 63 00 00 00 00 30 fa 1c 0c ......vc....0...
  1432. 0c1cfa2c 2d 27 76 63 -'vc
  1433.  
  1434. Found via call frame info
  1435.  
  1436.  
  1437. 14: inputhost.dll!<lambda_52549c42edc0789d5b8e6fe768050260>::<lambda_invoker_stdcall> + 0xd
  1438. eip: 0x6376272d esp: 0x0c1cfa30 ebp: 0x0c1cfa30
  1439.  
  1440. 0c1cfa30 40 fa 1c 0c 29 fa 7e 77 @...).~w
  1441.  
  1442. Found via call frame info
  1443.  
  1444.  
  1445. 15: kernel32.dll!BaseThreadInitThunk + 0x19
  1446. eip: 0x777efa29 esp: 0x0c1cfa38 ebp: 0x0c1cfa40
  1447.  
  1448. 0c1cfa38 38 ab 76 00 10 fa 7e 77 9c fa 1c 0c 9e 7a b4 77 8.v...~w.....z.w
  1449.  
  1450. Found via call frame info
  1451.  
  1452.  
  1453. 16: ntdll.dll!__RtlUserThreadStart + 0x2f
  1454. eip: 0x77b47a9e esp: 0x0c1cfa48 ebp: 0x0c1cfa9c
  1455.  
  1456. 0c1cfa48 38 ab 76 00 c1 44 3c e6 00 00 00 00 00 00 00 00 8.v..D<.........
  1457. 0c1cfa58 38 ab 76 00 00 00 00 00 00 00 00 00 00 00 00 00 8.v.............
  1458. 0c1cfa68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1459. 0c1cfa78 00 00 00 00 00 00 00 00 00 00 00 00 4c fa 1c 0c ............L...
  1460. 0c1cfa88 00 00 00 00 a4 fa 1c 0c 40 ad b5 77 3d 76 9e 9d ........@..w=v..
  1461. 0c1cfa98 00 00 00 00 ac fa 1c 0c 6e 7a b4 77 ........nz.w
  1462.  
  1463. Found via call frame info
  1464.  
  1465.  
  1466. 17: ntdll.dll!_RtlUserThreadStart + 0x1b
  1467. eip: 0x77b47a6e esp: 0x0c1cfaa4 ebp: 0x0c1cfaac
  1468.  
  1469. Found via call frame info
  1470.  
  1471.  
  1472. Thread 6:
  1473. 0: win32u.dll!NtUserGetMessage + 0xc
  1474. eip: 0x7599106c esp: 0x1411fabc ebp: 0x1411faf8 ebx: 0x00000554
  1475. esi: 0x1411fb14 edi: 0x73a747b0 eax: 0x77398e80 ecx: 0x00000000
  1476. edx: 0x00000000 efl: 0x00000202
  1477.  
  1478. 7599105c c2 04 00 ret 0x4
  1479. 7599105f 90 nop
  1480. 75991060 b8 06 10 00 00 mov eax, 0x1006
  1481. 75991065 ba 10 63 99 75 mov edx, 0x75996310
  1482. 7599106a ff d2 call edx
  1483. > 7599106c c2 10 00 ret 0x10
  1484. 7599106f 90 nop
  1485. 75991070 b8 07 10 00 00 mov eax, 0x1007
  1486. 75991075 ba 10 63 99 75 mov edx, 0x75996310
  1487. 7599107a ff d2 call edx
  1488. 7599107c c2 1c 00 ret 0x1c
  1489.  
  1490. 1411fabc 55 5e 71 76 U^qv
  1491.  
  1492. Found via instruction pointer in context
  1493.  
  1494.  
  1495. 1: user32.dll!GetMessageA + 0x55
  1496. eip: 0x76715e55 esp: 0x1411fac0 ebp: 0x1411faf8 ebx: 0x00000554
  1497.  
  1498. 1411fac0 14 fb 11 14 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1499. 1411fad0 b0 47 a7 73 01 00 00 00 1c 7c a8 73 00 00 00 00 .G.s.....|.s....
  1500. 1411fae0 30 eb 75 77 58 f0 a8 73 00 00 00 00 59 b9 93 b3 0.uwX..s....Y...
  1501. 1411faf0 00 fb 11 14 25 7f 08 76 30 fb 11 14 37 48 a7 73 ....%..v0...7H.s
  1502.  
  1503. Found via call frame info
  1504.  
  1505.  
  1506. 2: winmm.dll!mciwindow(void *) + 0x87
  1507. eip: 0x73a74837 esp: 0x1411fb00 ebp: 0x1411fb30
  1508.  
  1509. 1411fb00 14 fb 11 14 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1510. 1411fb10 b0 47 a7 73 00 00 00 00 00 00 00 00 00 00 00 00 .G.s............
  1511. 1411fb20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1512. 1411fb30 40 fb 11 14 29 fa 7e 77 @...).~w
  1513.  
  1514. Found via call frame info
  1515.  
  1516.  
  1517. 3: kernel32.dll!BaseThreadInitThunk + 0x19
  1518. eip: 0x777efa29 esp: 0x1411fb38 ebp: 0x1411fb40
  1519.  
  1520. 1411fb38 54 05 00 00 10 fa 7e 77 9c fb 11 14 9e 7a b4 77 T.....~w.....z.w
  1521.  
  1522. Found via call frame info
  1523.  
  1524.  
  1525. 4: ntdll.dll!__RtlUserThreadStart + 0x2f
  1526. eip: 0x77b47a9e esp: 0x1411fb48 ebp: 0x1411fb9c
  1527.  
  1528. 1411fb48 54 05 00 00 c1 45 31 fe 00 00 00 00 00 00 00 00 T....E1.........
  1529. 1411fb58 54 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 T...............
  1530. 1411fb68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1531. 1411fb78 00 00 00 00 00 00 00 00 00 00 00 00 4c fb 11 14 ............L...
  1532. 1411fb88 00 00 00 00 a4 fb 11 14 40 ad b5 77 3d 76 9e 9d ........@..w=v..
  1533. 1411fb98 00 00 00 00 ac fb 11 14 6e 7a b4 77 ........nz.w
  1534.  
  1535. Found via call frame info
  1536.  
  1537.  
  1538. 5: ntdll.dll!_RtlUserThreadStart + 0x1b
  1539. eip: 0x77b47a6e esp: 0x1411fba4 ebp: 0x1411fbac
  1540.  
  1541. Found via call frame info
  1542.  
  1543.  
  1544. Thread 7:
  1545. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  1546. eip: 0x77b52f8c esp: 0x171bfc04 ebp: 0x171bfd94 ebx: 0x00000000
  1547. esi: 0x00000003 edi: 0x00000003 eax: 0x00000000 ecx: 0x00000000
  1548. edx: 0x00000000 efl: 0x00000202
  1549.  
  1550. 77b52f7c c2 04 00 ret 0x4
  1551. 77b52f7f 90 nop
  1552. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  1553. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  1554. 77b52f8a ff d2 call edx
  1555. > 77b52f8c c2 14 00 ret 0x14
  1556. 77b52f8f 90 nop
  1557. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  1558. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  1559. 77b52f9a ff d2 call edx
  1560. 77b52f9c c2 10 00 ret 0x10
  1561.  
  1562. 171bfc04 53 b2 6c 77 S.lw
  1563.  
  1564. Found via instruction pointer in context
  1565.  
  1566.  
  1567. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  1568. eip: 0x776cb253 esp: 0x171bfc08 ebp: 0x171bfd94 ebx: 0x00000000
  1569.  
  1570. 171bfc08 03 00 00 00 e4 fd 1b 17 01 00 00 00 00 00 00 00 ................
  1571. 171bfc18 00 00 00 00 79 3c d4 03 00 00 00 00 00 85 84 02 ....y<..........
  1572. 171bfc28 00 00 00 00 80 38 01 00 24 00 00 00 01 00 00 00 .....8..$.......
  1573. 171bfc38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1574. 171bfc48 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  1575. 171bfc58 00 50 45 00 04 00 00 00 11 84 b1 77 00 00 00 00 .PE........w....
  1576. 171bfc68 e4 fd 1b 17 30 00 00 00 00 00 00 00 18 0c 00 00 ....0...........
  1577. 171bfc78 68 84 b1 77 70 fd 1b 17 fd e4 a4 79 00 00 48 5b h..wp......y..H[
  1578. 171bfc88 00 00 00 00 b4 91 78 77 00 00 00 00 00 00 00 00 ......xw........
  1579. 171bfc98 00 00 00 00 00 f9 b3 77 00 00 00 00 00 00 00 00 .......w........
  1580. 171bfca8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1581. 171bfcb8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1582. 171bfcc8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1583. 171bfcd8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1584. 171bfce8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1585. 171bfcf8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1586. 171bfd08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1587. 171bfd18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1588. 171bfd28 80 c4 75 03 a4 0b 00 00 00 0e 01 04 b0 05 2d 5a ..u...........-Z
  1589. 171bfd38 c0 ce 2e 5a 00 00 00 00 fc 29 b5 77 a9 11 6c 77 ...Z.....).w..lw
  1590. 171bfd48 3c 07 00 00 00 00 00 00 c6 11 6c 77 59 3c d4 03 <.........lwY<..
  1591. 171bfd58 00 0e 01 04 00 85 84 02 00 00 00 00 24 00 00 00 ............$...
  1592. 171bfd68 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1593. 171bfd78 79 3c d4 03 00 00 00 00 00 00 00 00 88 fe 1b 17 y<..............
  1594. 171bfd88 70 07 6e 77 75 a5 b8 63 00 00 00 00 b0 fd 1b 17 p.nwu..c........
  1595. 171bfd98 38 b1 6c 77 8.lw
  1596.  
  1597. Found via call frame info
  1598.  
  1599.  
  1600. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  1601. eip: 0x776cb138 esp: 0x171bfd9c ebp: 0x171bfdb0
  1602.  
  1603. 171bfd9c 03 00 00 00 e4 fd 1b 17 00 00 00 00 ff ff ff ff ................
  1604. 171bfdac 00 00 00 00 f8 fd 1b 17 1e ab 30 5a ..........0Z
  1605.  
  1606. Found via call frame info
  1607.  
  1608.  
  1609. 3: vstdlib.dll + 0xab1e
  1610. eip: 0x5a30ab1e esp: 0x171bfdb8 ebp: 0x171bfdf8
  1611.  
  1612. 171bfdb8 03 00 00 00 e4 fd 1b 17 00 00 00 00 ff ff ff ff ................
  1613. 171bfdc8 00 0e 01 04 00 85 84 02 00 00 00 00 37 3d 29 5a ............7=)Z
  1614. 171bfdd8 00 00 00 00 f4 fd 1b 17 9c 2a b5 77 3c 07 00 00 .........*.w<...
  1615. 171bfde8 98 00 00 00 44 07 00 00 00 00 00 00 00 00 00 00 ....D...........
  1616. 171bfdf8 64 fe 1b 17 cd ab 30 5a d.....0Z
  1617.  
  1618. Found via call frame info
  1619.  
  1620.  
  1621. 4: vstdlib.dll + 0xabcd
  1622. eip: 0x5a30abcd esp: 0x171bfe00 ebp: 0x171bfe64
  1623.  
  1624. 171bfe00 ff ff ff ff b0 86 4e 02 01 9c 4e 02 1d 79 b6 77 ......N...N..y.w
  1625. 171bfe10 00 00 00 00 44 79 b6 77 18 9c 4e 02 00 00 00 00 ....Dy.w..N.....
  1626. 171bfe20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1627. 171bfe30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1628. 171bfe40 00 00 00 00 ce fa 29 5a 05 00 00 00 00 00 00 00 ......)Z........
  1629. 171bfe50 00 00 00 00 00 00 00 00 00 00 00 00 18 86 84 02 ................
  1630. 171bfe60 d6 9c 00 01 94 fe 1b 17 0d db 28 5a ..........(Z
  1631.  
  1632. Found via previous frame's frame pointer
  1633.  
  1634.  
  1635. 5: tier0.dll + 0xdb0d
  1636. eip: 0x5a28db0d esp: 0x171bfe6c ebp: 0x171bfe94
  1637.  
  1638. 171bfe6c 5d 2f 34 7b ce fa 29 5a ce fa 29 5a 18 9c 4e 02 ]/4{..)Z..)Z..N.
  1639. 171bfe7c 00 85 84 02 cc fe 1b 01 6c fe 1b 17 bc fe 1b 17 ........l.......
  1640. 171bfe8c c0 f3 2a 5a ff ff ff ff cc fe 1b 17 a8 fa 29 5a ..*Z..........)Z
  1641.  
  1642. Found via previous frame's frame pointer
  1643.  
  1644.  
  1645. 6: tier0.dll + 0x1faa8
  1646. eip: 0x5a29faa8 esp: 0x171bfe9c ebp: 0x171bfecc
  1647.  
  1648. 171bfe9c b0 86 4e 02 05 2f 34 7b ce fa 29 5a ce fa 29 5a ..N../4{..)Z..)Z
  1649. 171bfeac 18 9c 4e 02 a0 fe 1b 17 a0 fe 1b 17 34 ff 1b 17 ..N.........4...
  1650. 171bfebc 34 ff 1b 17 20 d6 29 5a 81 89 04 36 00 00 00 00 4... .)Z...6....
  1651. 171bfecc d8 fe 1b 17 32 fb 29 5a ....2.)Z
  1652.  
  1653. Found via previous frame's frame pointer
  1654.  
  1655.  
  1656. 7: tier0.dll + 0x1fb32
  1657. eip: 0x5a29fb32 esp: 0x171bfed4 ebp: 0x171bfed8
  1658.  
  1659. 171bfed4 ce fa 29 5a e8 fe 1b 17 29 fa 7e 77 ..)Z....).~w
  1660.  
  1661. Found via previous frame's frame pointer
  1662.  
  1663.  
  1664. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  1665. eip: 0x777efa29 esp: 0x171bfee0 ebp: 0x171bfee8
  1666.  
  1667. 171bfee0 18 9c 4e 02 10 fa 7e 77 44 ff 1b 17 9e 7a b4 77 ..N...~wD....z.w
  1668.  
  1669. Found via previous frame's frame pointer
  1670.  
  1671.  
  1672. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  1673. eip: 0x77b47a9e esp: 0x171bfef0 ebp: 0x171bff44
  1674.  
  1675. 171bfef0 18 9c 4e 02 19 41 3b fd 00 00 00 00 00 00 00 00 ..N..A;.........
  1676. 171bff00 18 9c 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 ..N.............
  1677. 171bff10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1678. 171bff20 00 00 00 00 00 00 00 00 00 00 00 00 f4 fe 1b 17 ................
  1679. 171bff30 00 00 00 00 4c ff 1b 17 40 ad b5 77 3d 76 9e 9d ....L...@..w=v..
  1680. 171bff40 00 00 00 00 54 ff 1b 17 6e 7a b4 77 ....T...nz.w
  1681.  
  1682. Found via call frame info
  1683.  
  1684.  
  1685. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  1686. eip: 0x77b47a6e esp: 0x171bff4c ebp: 0x171bff54
  1687.  
  1688. Found via call frame info
  1689.  
  1690.  
  1691. Thread 8:
  1692. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  1693. eip: 0x77b52f8c esp: 0x172ff6dc ebp: 0x172ff86c ebx: 0x00000000
  1694. esi: 0x00000003 edi: 0x00000003 eax: 0x00000000 ecx: 0x00000000
  1695. edx: 0x00000000 efl: 0x00000202
  1696.  
  1697. 77b52f7c c2 04 00 ret 0x4
  1698. 77b52f7f 90 nop
  1699. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  1700. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  1701. 77b52f8a ff d2 call edx
  1702. > 77b52f8c c2 14 00 ret 0x14
  1703. 77b52f8f 90 nop
  1704. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  1705. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  1706. 77b52f9a ff d2 call edx
  1707. 77b52f9c c2 10 00 ret 0x10
  1708.  
  1709. 172ff6dc 53 b2 6c 77 S.lw
  1710.  
  1711. Found via instruction pointer in context
  1712.  
  1713.  
  1714. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  1715. eip: 0x776cb253 esp: 0x172ff6e0 ebp: 0x172ff86c ebx: 0x00000000
  1716.  
  1717. 172ff6e0 03 00 00 00 bc f8 2f 17 01 00 00 00 00 00 00 00 ....../.........
  1718. 172ff6f0 00 00 00 00 81 39 e0 03 00 00 00 00 40 86 84 02 .....9......@...
  1719. 172ff700 00 00 00 00 5f de 90 79 24 00 00 00 01 00 00 00 ...._..y$.......
  1720. 172ff710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1721. 172ff720 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  1722. 172ff730 00 50 45 00 04 00 00 00 11 84 b1 77 00 00 00 00 .PE........w....
  1723. 172ff740 bc f8 2f 17 30 00 00 00 00 00 00 00 cc 08 00 00 ../.0...........
  1724. 172ff750 68 84 b1 77 41 60 00 02 70 f7 2f 17 00 00 2f 17 h..wA`..p./.../.
  1725. 172ff760 00 00 6f 00 b4 91 78 77 00 00 00 00 00 00 00 00 ..o...xw........
  1726. 172ff770 80 12 ef 79 90 15 f7 5a 00 00 00 00 00 00 00 00 ...y...Z........
  1727. 172ff780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1728. 172ff790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1729. 172ff7a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1730. 172ff7b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1731. 172ff7c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1732. 172ff7d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1733. 172ff7e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1734. 172ff7f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1735. 172ff800 00 f9 3d 03 a4 06 00 00 00 26 2d 04 b0 1b 2d 5a ..=......&-...-Z
  1736. 172ff810 c0 ce 2e 5a 00 00 00 00 fc 29 b5 77 a9 11 6c 77 ...Z.....).w..lw
  1737. 172ff820 54 07 00 00 00 00 00 00 c6 11 6c 77 61 39 e0 03 T.........lwa9..
  1738. 172ff830 00 26 2d 04 40 86 84 02 00 00 00 00 24 00 00 00 .&-.@.......$...
  1739. 172ff840 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1740. 172ff850 81 39 e0 03 00 00 00 00 00 00 00 00 60 f9 2f 17 .9..........`./.
  1741. 172ff860 70 07 6e 77 75 a5 b8 63 00 00 00 00 88 f8 2f 17 p.nwu..c....../.
  1742. 172ff870 38 b1 6c 77 8.lw
  1743.  
  1744. Found via call frame info
  1745.  
  1746.  
  1747. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  1748. eip: 0x776cb138 esp: 0x172ff874 ebp: 0x172ff888
  1749.  
  1750. 172ff874 03 00 00 00 bc f8 2f 17 00 00 00 00 ff ff ff ff ....../.........
  1751. 172ff884 00 00 00 00 d0 f8 2f 17 1e ab 30 5a ....../...0Z
  1752.  
  1753. Found via call frame info
  1754.  
  1755.  
  1756. 3: vstdlib.dll + 0xab1e
  1757. eip: 0x5a30ab1e esp: 0x172ff890 ebp: 0x172ff8d0
  1758.  
  1759. 172ff890 03 00 00 00 bc f8 2f 17 00 00 00 00 ff ff ff ff ....../.........
  1760. 172ff8a0 00 26 2d 04 40 86 84 02 00 00 00 00 37 3d 29 5a .&-.@.......7=)Z
  1761. 172ff8b0 00 00 00 00 cc f8 2f 17 9c 2a b5 77 54 07 00 00 ....../..*.wT...
  1762. 172ff8c0 98 00 00 00 5c 07 00 00 00 00 00 00 00 00 00 00 ....\...........
  1763. 172ff8d0 3c f9 2f 17 cd ab 30 5a <./...0Z
  1764.  
  1765. Found via call frame info
  1766.  
  1767.  
  1768. 4: vstdlib.dll + 0xabcd
  1769. eip: 0x5a30abcd esp: 0x172ff8d8 ebp: 0x172ff93c
  1770.  
  1771. 172ff8d8 ff ff ff ff 48 88 4e 02 01 9c 4e 02 1d 79 b6 77 ....H.N...N..y.w
  1772. 172ff8e8 00 00 00 00 44 79 b6 77 18 9c 4e 02 00 00 00 00 ....Dy.w..N.....
  1773. 172ff8f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1774. 172ff908 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1775. 172ff918 00 00 00 00 ce fa 29 5a 06 00 00 00 00 00 00 00 ......)Z........
  1776. 172ff928 00 00 00 00 00 00 00 00 01 00 00 00 58 87 84 02 ............X...
  1777. 172ff938 d6 9c 00 01 6c f9 2f 17 0d db 28 5a ....l./...(Z
  1778.  
  1779. Found via previous frame's frame pointer
  1780.  
  1781.  
  1782. 5: tier0.dll + 0xdb0d
  1783. eip: 0x5a28db0d esp: 0x172ff944 ebp: 0x172ff96c
  1784.  
  1785. 172ff944 a5 28 00 7b ce fa 29 5a ce fa 29 5a 18 9c 4e 02 .(.{..)Z..)Z..N.
  1786. 172ff954 40 86 84 02 a4 f9 2f 01 44 f9 2f 17 94 f9 2f 17 @...../.D./.../.
  1787. 172ff964 c0 f3 2a 5a ff ff ff ff a4 f9 2f 17 a8 fa 29 5a ..*Z....../...)Z
  1788.  
  1789. Found via previous frame's frame pointer
  1790.  
  1791.  
  1792. 6: tier0.dll + 0x1faa8
  1793. eip: 0x5a29faa8 esp: 0x172ff974 ebp: 0x172ff9a4
  1794.  
  1795. 172ff974 48 88 4e 02 6d 28 00 7b ce fa 29 5a ce fa 29 5a H.N.m(.{..)Z..)Z
  1796. 172ff984 18 9c 4e 02 78 f9 2f 17 78 f9 2f 17 0c fa 2f 17 ..N.x./.x./.../.
  1797. 172ff994 0c fa 2f 17 20 d6 29 5a 81 89 04 36 00 00 00 00 ../. .)Z...6....
  1798. 172ff9a4 b0 f9 2f 17 32 fb 29 5a ../.2.)Z
  1799.  
  1800. Found via previous frame's frame pointer
  1801.  
  1802.  
  1803. 7: tier0.dll + 0x1fb32
  1804. eip: 0x5a29fb32 esp: 0x172ff9ac ebp: 0x172ff9b0
  1805.  
  1806. 172ff9ac ce fa 29 5a c0 f9 2f 17 29 fa 7e 77 ..)Z../.).~w
  1807.  
  1808. Found via previous frame's frame pointer
  1809.  
  1810.  
  1811. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  1812. eip: 0x777efa29 esp: 0x172ff9b8 ebp: 0x172ff9c0
  1813.  
  1814. 172ff9b8 18 9c 4e 02 10 fa 7e 77 1c fa 2f 17 9e 7a b4 77 ..N...~w../..z.w
  1815.  
  1816. Found via previous frame's frame pointer
  1817.  
  1818.  
  1819. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  1820. eip: 0x77b47a9e esp: 0x172ff9c8 ebp: 0x172ffa1c
  1821.  
  1822. 172ff9c8 18 9c 4e 02 41 44 0f fd 00 00 00 00 00 00 00 00 ..N.AD..........
  1823. 172ff9d8 18 9c 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 ..N.............
  1824. 172ff9e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1825. 172ff9f8 00 00 00 00 00 00 00 00 00 00 00 00 cc f9 2f 17 ............../.
  1826. 172ffa08 00 00 00 00 24 fa 2f 17 40 ad b5 77 3d 76 9e 9d ....$./.@..w=v..
  1827. 172ffa18 00 00 00 00 2c fa 2f 17 6e 7a b4 77 ....,./.nz.w
  1828.  
  1829. Found via call frame info
  1830.  
  1831.  
  1832. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  1833. eip: 0x77b47a6e esp: 0x172ffa24 ebp: 0x172ffa2c
  1834.  
  1835. Found via call frame info
  1836.  
  1837.  
  1838. Thread 9:
  1839. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  1840. eip: 0x77b52f8c esp: 0x1743f520 ebp: 0x1743f6b0 ebx: 0x00000000
  1841. esi: 0x00000003 edi: 0x00000003 eax: 0x00000000 ecx: 0x00000000
  1842. edx: 0x00000000 efl: 0x00000212
  1843.  
  1844. 77b52f7c c2 04 00 ret 0x4
  1845. 77b52f7f 90 nop
  1846. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  1847. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  1848. 77b52f8a ff d2 call edx
  1849. > 77b52f8c c2 14 00 ret 0x14
  1850. 77b52f8f 90 nop
  1851. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  1852. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  1853. 77b52f9a ff d2 call edx
  1854. 77b52f9c c2 10 00 ret 0x10
  1855.  
  1856. 1743f520 53 b2 6c 77 S.lw
  1857.  
  1858. Found via instruction pointer in context
  1859.  
  1860.  
  1861. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  1862. eip: 0x776cb253 esp: 0x1743f524 ebp: 0x1743f6b0 ebx: 0x00000000
  1863.  
  1864. 1743f524 03 00 00 00 00 f7 43 17 01 00 00 00 00 00 00 00 ......C.........
  1865. 1743f534 00 00 00 00 5d 37 8c 03 00 00 00 00 80 87 84 02 ....]7..........
  1866. 1743f544 00 00 00 00 9a 0a c9 79 24 00 00 00 01 00 00 00 .......y$.......
  1867. 1743f554 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1868. 1743f564 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 ................
  1869. 1743f574 00 50 45 00 11 84 b1 77 90 f6 43 17 00 00 00 00 .PE....w..C.....
  1870. 1743f584 00 f7 43 17 00 d1 48 04 00 00 00 00 68 84 b1 00 ..C...H.....h...
  1871. 1743f594 81 60 00 02 b0 f5 43 17 00 00 43 17 00 00 6f 00 .`....C...C...o.
  1872. 1743f5a4 b4 91 78 77 00 00 00 00 00 00 00 00 80 12 ef 79 ..xw...........y
  1873. 1743f5b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1874. 1743f5c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1875. 1743f5d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1876. 1743f5e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1877. 1743f5f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1878. 1743f604 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1879. 1743f614 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1880. 1743f624 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1881. 1743f634 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1882. 1743f644 00 00 00 00 00 00 00 00 00 d1 48 04 90 29 2d 5a ..........H..)-Z
  1883. 1743f654 c0 ce 2e 5a 00 00 00 00 fc 29 b5 77 a9 11 6c 77 ...Z.....).w..lw
  1884. 1743f664 6c 07 00 00 00 00 00 00 c6 11 6c 77 3d 37 8c 03 l.........lw=7..
  1885. 1743f674 00 d1 48 04 80 87 84 02 00 00 00 00 24 00 00 00 ..H.........$...
  1886. 1743f684 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1887. 1743f694 5d 37 8c 03 00 00 00 00 00 00 00 00 a4 f7 43 17 ]7............C.
  1888. 1743f6a4 70 07 6e 77 75 a5 b8 63 00 00 00 00 cc f6 43 17 p.nwu..c......C.
  1889. 1743f6b4 38 b1 6c 77 8.lw
  1890.  
  1891. Found via call frame info
  1892.  
  1893.  
  1894. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  1895. eip: 0x776cb138 esp: 0x1743f6b8 ebp: 0x1743f6cc
  1896.  
  1897. 1743f6b8 03 00 00 00 00 f7 43 17 00 00 00 00 ff ff ff ff ......C.........
  1898. 1743f6c8 00 00 00 00 14 f7 43 17 1e ab 30 5a ......C...0Z
  1899.  
  1900. Found via call frame info
  1901.  
  1902.  
  1903. 3: vstdlib.dll + 0xab1e
  1904. eip: 0x5a30ab1e esp: 0x1743f6d4 ebp: 0x1743f714
  1905.  
  1906. 1743f6d4 03 00 00 00 00 f7 43 17 00 00 00 00 ff ff ff ff ......C.........
  1907. 1743f6e4 00 d1 48 04 80 87 84 02 00 00 00 00 37 3d 29 5a ..H.........7=)Z
  1908. 1743f6f4 00 00 00 00 10 f7 43 17 9c 2a b5 77 6c 07 00 00 ......C..*.wl...
  1909. 1743f704 98 00 00 00 74 07 00 00 00 00 00 00 00 00 00 00 ....t...........
  1910. 1743f714 80 f7 43 17 cd ab 30 5a ..C...0Z
  1911.  
  1912. Found via call frame info
  1913.  
  1914.  
  1915. 4: vstdlib.dll + 0xabcd
  1916. eip: 0x5a30abcd esp: 0x1743f71c ebp: 0x1743f780
  1917.  
  1918. 1743f71c ff ff ff ff 58 87 4e 02 01 9c 4e 02 00 00 00 00 ....X.N...N.....
  1919. 1743f72c 44 79 b6 77 18 9c 4e 02 00 00 4e 02 00 00 00 00 Dy.w..N...N.....
  1920. 1743f73c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1921. 1743f74c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1922. 1743f75c 00 00 00 00 ce fa 29 5a 07 00 00 00 00 00 00 00 ......)Z........
  1923. 1743f76c 00 00 00 00 00 00 00 00 02 00 00 00 98 88 84 02 ................
  1924. 1743f77c d6 9c 00 01 b0 f7 43 17 0d db 28 5a ......C...(Z
  1925.  
  1926. Found via previous frame's frame pointer
  1927.  
  1928.  
  1929. 5: tier0.dll + 0xdb0d
  1930. eip: 0x5a28db0d esp: 0x1743f788 ebp: 0x1743f7b0
  1931.  
  1932. 1743f788 79 26 6c 7b ce fa 29 5a ce fa 29 5a 18 9c 4e 02 y&l{..)Z..)Z..N.
  1933. 1743f798 80 87 84 02 e8 f7 43 01 88 f7 43 17 d8 f7 43 17 ......C...C...C.
  1934. 1743f7a8 c0 f3 2a 5a ff ff ff ff e8 f7 43 17 a8 fa 29 5a ..*Z......C...)Z
  1935.  
  1936. Found via previous frame's frame pointer
  1937.  
  1938.  
  1939. 6: tier0.dll + 0x1faa8
  1940. eip: 0x5a29faa8 esp: 0x1743f7b8 ebp: 0x1743f7e8
  1941.  
  1942. 1743f7b8 58 87 4e 02 21 26 6c 7b ce fa 29 5a ce fa 29 5a X.N.!&l{..)Z..)Z
  1943. 1743f7c8 18 9c 4e 02 bc f7 43 17 bc f7 43 17 50 f8 43 17 ..N...C...C.P.C.
  1944. 1743f7d8 50 f8 43 17 20 d6 29 5a 81 89 04 36 00 00 00 00 P.C. .)Z...6....
  1945. 1743f7e8 f4 f7 43 17 32 fb 29 5a ..C.2.)Z
  1946.  
  1947. Found via previous frame's frame pointer
  1948.  
  1949.  
  1950. 7: tier0.dll + 0x1fb32
  1951. eip: 0x5a29fb32 esp: 0x1743f7f0 ebp: 0x1743f7f4
  1952.  
  1953. 1743f7f0 ce fa 29 5a 04 f8 43 17 29 fa 7e 77 ..)Z..C.).~w
  1954.  
  1955. Found via previous frame's frame pointer
  1956.  
  1957.  
  1958. 8: kernel32.dll!BaseThreadInitThunk + 0x19
  1959. eip: 0x777efa29 esp: 0x1743f7fc ebp: 0x1743f804
  1960.  
  1961. 1743f7fc 18 9c 4e 02 10 fa 7e 77 60 f8 43 17 9e 7a b4 77 ..N...~w`.C..z.w
  1962.  
  1963. Found via previous frame's frame pointer
  1964.  
  1965.  
  1966. 9: ntdll.dll!__RtlUserThreadStart + 0x2f
  1967. eip: 0x77b47a9e esp: 0x1743f80c ebp: 0x1743f860
  1968.  
  1969. 1743f80c 18 9c 4e 02 3d 46 63 fd 00 00 00 00 00 00 00 00 ..N.=Fc.........
  1970. 1743f81c 18 9c 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 ..N.............
  1971. 1743f82c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  1972. 1743f83c 00 00 00 00 00 00 00 00 00 00 00 00 10 f8 43 17 ..............C.
  1973. 1743f84c 00 00 00 00 68 f8 43 17 40 ad b5 77 3d 76 9e 9d ....h.C.@..w=v..
  1974. 1743f85c 00 00 00 00 70 f8 43 17 6e 7a b4 77 ....p.C.nz.w
  1975.  
  1976. Found via call frame info
  1977.  
  1978.  
  1979. 10: ntdll.dll!_RtlUserThreadStart + 0x1b
  1980. eip: 0x77b47a6e esp: 0x1743f868 ebp: 0x1743f870
  1981.  
  1982. Found via call frame info
  1983.  
  1984.  
  1985. Thread 10:
  1986. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  1987. eip: 0x77b529fc esp: 0x1d73f82c ebp: 0x1d73f89c ebx: 0x00000000
  1988. esi: 0x00000000 edi: 0x00000254 eax: 0x00000000 ecx: 0x00000000
  1989. edx: 0x00000000 efl: 0x00000202
  1990.  
  1991. 77b529ec c2 0c 00 ret 0xc
  1992. 77b529ef 90 nop
  1993. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  1994. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  1995. 77b529fa ff d2 call edx
  1996. > 77b529fc c2 0c 00 ret 0xc
  1997. 77b529ff 90 nop
  1998. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  1999. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  2000. 77b52a0a ff d2 call edx
  2001. 77b52a0c c2 0c 00 ret 0xc
  2002.  
  2003. 1d73f82c a9 11 6c 77 ..lw
  2004.  
  2005. Found via instruction pointer in context
  2006.  
  2007.  
  2008. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  2009. eip: 0x776c11a9 esp: 0x1d73f830 ebp: 0x1d73f89c ebx: 0x00000000
  2010.  
  2011. 1d73f830 54 02 00 00 00 00 00 00 70 f8 73 1d 71 39 bc 09 T.......p.s.q9..
  2012. 1d73f840 60 21 07 7c c4 21 07 7c 00 00 00 00 24 00 00 00 `!.|.!.|....$...
  2013. 1d73f850 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2014. 1d73f860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2015. 1d73f870 e0 5e f8 ff ff ff ff ff 70 f8 73 1d 00 00 00 00 .^......p.s.....
  2016. 1d73f880 54 02 00 00 78 17 fa fc af fe 00 00 20 f9 73 1d T...x....... .s.
  2017. 1d73f890 70 07 6e 77 0d a0 b8 63 00 00 00 00 b0 f8 73 1d p.nw...c......s.
  2018. 1d73f8a0 02 11 6c 77 ..lw
  2019.  
  2020. Found via call frame info
  2021.  
  2022.  
  2023. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  2024. eip: 0x776c1102 esp: 0x1d73f8a4 ebp: 0x1d73f8b0
  2025.  
  2026. 1d73f8a4 54 02 00 00 32 00 00 00 00 00 00 00 c4 f8 73 1d T...2.........s.
  2027. 1d73f8b4 fc 3a 29 5a .:)Z
  2028.  
  2029. Found via call frame info
  2030.  
  2031.  
  2032. 3: tier0.dll + 0x13afc
  2033. eip: 0x5a293afc esp: 0x1d73f8b8 ebp: 0x1d73f8c4
  2034.  
  2035. 1d73f8b8 54 02 00 00 32 00 00 00 54 02 00 00 d4 f8 73 1d T...2...T.....s.
  2036. 1d73f8c8 88 c2 28 5a ..(Z
  2037.  
  2038. Found via call frame info
  2039.  
  2040.  
  2041. 4: tier0.dll + 0xc288
  2042. eip: 0x5a28c288 esp: 0x1d73f8cc ebp: 0x1d73f8d4
  2043.  
  2044. 1d73f8cc 54 02 00 00 32 00 00 00 fc f8 73 1d 7d ec b8 7b T...2.....s.}..{
  2045.  
  2046. Found via previous frame's frame pointer
  2047.  
  2048.  
  2049. 5: engine.dll + 0x1cec7d
  2050. eip: 0x7bb8ec7d esp: 0x1d73f8dc ebp: 0x1d73f8fc
  2051.  
  2052. 1d73f8dc 32 00 00 00 ff ff ff ff 70 87 4e 02 01 ad 4e 02 2.......p.N...N.
  2053. 1d73f8ec 60 21 07 7c b4 25 f9 00 32 00 00 00 d6 9c 28 00 `!.|.%..2.....(.
  2054. 1d73f8fc 2c f9 73 1d 0d db 28 5a ,.s...(Z
  2055.  
  2056. Found via previous frame's frame pointer
  2057.  
  2058.  
  2059. 6: tier0.dll + 0xdb0d
  2060. eip: 0x5a28db0d esp: 0x1d73f904 ebp: 0x1d73f92c
  2061.  
  2062. 1d73f904 e5 28 5c 71 ce fa 29 5a ce fa 29 5a b8 ad 4e 02 .(\q..)Z..)Z..N.
  2063. 1d73f914 60 21 07 7c 64 f9 73 01 04 f9 73 1d 54 f9 73 1d `!.|d.s...s.T.s.
  2064. 1d73f924 c0 f3 2a 5a ff ff ff ff 64 f9 73 1d a8 fa 29 5a ..*Z....d.s...)Z
  2065.  
  2066. Found via previous frame's frame pointer
  2067.  
  2068.  
  2069. 7: tier0.dll + 0x1faa8
  2070. eip: 0x5a29faa8 esp: 0x1d73f934 ebp: 0x1d73f964
  2071.  
  2072. 1d73f934 70 87 4e 02 ad 28 5c 71 ce fa 29 5a ce fa 29 5a p.N..(\q..)Z..)Z
  2073. 1d73f944 b8 ad 4e 02 38 f9 73 1d 38 f9 73 1d cc f9 73 1d ..N.8.s.8.s...s.
  2074. 1d73f954 cc f9 73 1d 20 d6 29 5a 81 89 04 36 00 00 00 00 ..s. .)Z...6....
  2075. 1d73f964 70 f9 73 1d 32 fb 29 5a p.s.2.)Z
  2076.  
  2077. Found via previous frame's frame pointer
  2078.  
  2079.  
  2080. 8: tier0.dll + 0x1fb32
  2081. eip: 0x5a29fb32 esp: 0x1d73f96c ebp: 0x1d73f970
  2082.  
  2083. 1d73f96c ce fa 29 5a 80 f9 73 1d 29 fa 7e 77 ..)Z..s.).~w
  2084.  
  2085. Found via previous frame's frame pointer
  2086.  
  2087.  
  2088. 9: kernel32.dll!BaseThreadInitThunk + 0x19
  2089. eip: 0x777efa29 esp: 0x1d73f978 ebp: 0x1d73f980
  2090.  
  2091. 1d73f978 b8 ad 4e 02 10 fa 7e 77 dc f9 73 1d 9e 7a b4 77 ..N...~w..s..z.w
  2092.  
  2093. Found via previous frame's frame pointer
  2094.  
  2095.  
  2096. 10: ntdll.dll!__RtlUserThreadStart + 0x2f
  2097. eip: 0x77b47a9e esp: 0x1d73f988 ebp: 0x1d73f9dc
  2098.  
  2099. 1d73f988 b8 ad 4e 02 81 47 53 f7 00 00 00 00 00 00 00 00 ..N..GS.........
  2100. 1d73f998 b8 ad 4e 02 00 00 00 00 00 00 00 00 00 00 00 00 ..N.............
  2101. 1d73f9a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2102. 1d73f9b8 00 00 00 00 00 00 00 00 00 00 00 00 8c f9 73 1d ..............s.
  2103. 1d73f9c8 00 00 00 00 e4 f9 73 1d 40 ad b5 77 3d 76 9e 9d ......s.@..w=v..
  2104. 1d73f9d8 00 00 00 00 ec f9 73 1d 6e 7a b4 77 ......s.nz.w
  2105.  
  2106. Found via call frame info
  2107.  
  2108.  
  2109. 11: ntdll.dll!_RtlUserThreadStart + 0x1b
  2110. eip: 0x77b47a6e esp: 0x1d73f9e4 ebp: 0x1d73f9ec
  2111.  
  2112. Found via call frame info
  2113.  
  2114.  
  2115. Thread 11:
  2116. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  2117. eip: 0x77b529fc esp: 0x1ddffea0 ebp: 0x1ddfff10 ebx: 0x007ada68
  2118. esi: 0x00000000 edi: 0x000007fc eax: 0x582455a0 ecx: 0x00000000
  2119. edx: 0x00000000 efl: 0x00000216
  2120.  
  2121. 77b529ec c2 0c 00 ret 0xc
  2122. 77b529ef 90 nop
  2123. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  2124. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  2125. 77b529fa ff d2 call edx
  2126. > 77b529fc c2 0c 00 ret 0xc
  2127. 77b529ff 90 nop
  2128. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  2129. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  2130. 77b52a0a ff d2 call edx
  2131. 77b52a0c c2 0c 00 ret 0xc
  2132.  
  2133. 1ddffea0 a9 11 6c 77 ..lw
  2134.  
  2135. Found via instruction pointer in context
  2136.  
  2137.  
  2138. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  2139. eip: 0x776c11a9 esp: 0x1ddffea4 ebp: 0x1ddfff10 ebx: 0x007ada68
  2140.  
  2141. 1ddffea4 fc 07 00 00 00 00 00 00 e4 fe df 1d fd 3e 10 09 .............>..
  2142. 1ddffeb4 50 da 7a 00 a0 0f 00 00 68 da 7a 00 24 00 00 00 P.z.....h.z.$...
  2143. 1ddffec4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2144. 1ddffed4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2145. 1ddffee4 00 a6 9d fd ff ff ff ff e4 fe df 1d 00 00 00 00 ................
  2146. 1ddffef4 fc 07 00 00 00 00 00 00 00 00 00 00 4c ff df 1d ............L...
  2147. 1ddfff04 70 07 6e 77 0d a0 b8 63 00 00 00 00 24 ff df 1d p.nw...c....$...
  2148. 1ddfff14 02 11 6c 77 ..lw
  2149.  
  2150. Found via call frame info
  2151.  
  2152.  
  2153. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  2154. eip: 0x776c1102 esp: 0x1ddfff18 ebp: 0x1ddfff24
  2155.  
  2156. 1ddfff18 fc 07 00 00 a0 0f 00 00 00 00 00 00 58 ff df 1d ............X...
  2157. 1ddfff28 ba 52 24 58 .R$X
  2158.  
  2159. Found via call frame info
  2160.  
  2161.  
  2162. 3: sourcepawn.jit.x86.dll!sp::WatchdogTimer::Run() [ watchdog_timer.cpp:89 + 0x16 ]
  2163. https://github.com/alliedmodders/sourcepawn/blob/2239972ff621364b70828b1d14cc8bf296d06233/vm/watchdog_timer.cpp#L89
  2164. eip: 0x582452ba esp: 0x1ddfff2c ebp: 0x1ddfff58
  2165.  
  2166. 1ddfff2c fc 07 00 00 a0 0f 00 00 55 ee 80 5e a0 55 24 58 ........U..^.U$X
  2167. 1ddfff3c 20 cb e4 0e 20 cb e4 0e 00 00 00 00 68 da 7a 00 ... .......h.z.
  2168. 1ddfff4c c0 ff df 1d b9 59 27 58 00 00 00 00 64 ff df 1d .....Y'X....d...
  2169. 1ddfff5c ae 55 24 58 .U$X
  2170.  
  2171. Found via call frame info
  2172.  
  2173.  
  2174. 4: sourcepawn.jit.x86.dll!ke::Thread::MainCallback(void *) [ am-thread-windows.h:147 + 0xa ]
  2175. https://github.com/alliedmodders/amtl/blob/e00a845c6bc415995ddc4b7ec538d1704fdd0122/amtl/am-thread-windows.h#L147
  2176. eip: 0x582455ae esp: 0x1ddfff60 ebp: 0x1ddfff64
  2177.  
  2178. 1ddfff60 a0 55 24 58 74 ff df 1d 29 fa 7e 77 .U$Xt...).~w
  2179.  
  2180. Found via call frame info
  2181.  
  2182.  
  2183. 5: kernel32.dll!BaseThreadInitThunk + 0x19
  2184. eip: 0x777efa29 esp: 0x1ddfff6c ebp: 0x1ddfff74
  2185.  
  2186. 1ddfff6c 20 cb e4 0e 10 fa 7e 77 d0 ff df 1d 9e 7a b4 77 .....~w.....z.w
  2187.  
  2188. Found via call frame info
  2189.  
  2190.  
  2191. 6: ntdll.dll!__RtlUserThreadStart + 0x2f
  2192. eip: 0x77b47a9e esp: 0x1ddfff7c ebp: 0x1ddfffd0
  2193.  
  2194. 1ddfff7c 20 cb e4 0e 8d 41 ff f7 00 00 00 00 00 00 00 00 ....A..........
  2195. 1ddfff8c 20 cb e4 0e 00 00 00 00 00 00 00 00 00 00 00 00 ...............
  2196. 1ddfff9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2197. 1ddfffac 00 00 00 00 00 00 00 00 00 00 00 00 80 ff df 1d ................
  2198. 1ddfffbc 00 00 00 00 d8 ff df 1d 40 ad b5 77 3d 76 9e 9d ........@..w=v..
  2199. 1ddfffcc 00 00 00 00 e0 ff df 1d 6e 7a b4 77 ........nz.w
  2200.  
  2201. Found via call frame info
  2202.  
  2203.  
  2204. 7: ntdll.dll!_RtlUserThreadStart + 0x1b
  2205. eip: 0x77b47a6e esp: 0x1ddfffd8 ebp: 0x1ddfffe0
  2206.  
  2207. Found via call frame info
  2208.  
  2209.  
  2210. Thread 12:
  2211. 0: ntdll.dll!NtGetContextThread + 0xc
  2212. eip: 0x77b538fc esp: 0x1ea6e898 ebp: 0x1ea6e8a4 ebx: 0x5b6f5868
  2213. esi: 0x5b6f5818 edi: 0x5b6f5828 eax: 0x00000000 ecx: 0x00000000
  2214. edx: 0x00000000 efl: 0x00000202
  2215.  
  2216. 77b538ec c2 18 00 ret 0x18
  2217. 77b538ef 90 nop
  2218. 77b538f0 b8 f2 00 00 00 mov eax, 0xf2
  2219. 77b538f5 ba 70 88 b6 77 mov edx, 0x77b68870
  2220. 77b538fa ff d2 call edx
  2221. > 77b538fc c2 08 00 ret 0x8
  2222. 77b538ff 90 nop
  2223. 77b53900 b8 f3 00 19 00 mov eax, 0x1900f3
  2224. 77b53905 ba 70 88 b6 77 mov edx, 0x77b68870
  2225. 77b5390a ff d2 call edx
  2226. 77b5390c c3 ret
  2227.  
  2228. 1ea6e898 fe ff ff ff 00 00 00 00 00 00 00 00 aa ea a6 1e ................
  2229. 1ea6e8a8 03 00 00 00 01 54 ae 77 00 00 00 00 03 00 00 00 .....T.w........
  2230. 1ea6e8b8 89 56 86 f4 c0 e5 a6 1e 00 00 34 70 50 ec a6 1e .V........4pP...
  2231. 1ea6e8c8 40 ad b5 77 @..w
  2232.  
  2233. Found via instruction pointer in context
  2234.  
  2235.  
  2236. 1: ntdll.dll!wcstombs + 0x70
  2237. eip: 0x77b5ad40 esp: 0x1ea6e8cc ebp: 0x1ea6e8a4 ebx: 0x5b6f5868
  2238.  
  2239. Found via call frame info with scanning
  2240.  
  2241.  
  2242. Thread 13:
  2243. 0: ntdll.dll!NtRemoveIoCompletionEx + 0xc
  2244. eip: 0x77b540dc esp: 0x2d69f65c ebp: 0x2d69f6d0 ebx: 0x00000000
  2245. esi: 0x00000000 edi: 0x2d69f6ac eax: 0x00000102 ecx: 0x00000000
  2246. edx: 0x00000000 efl: 0x00000206
  2247.  
  2248. 77b540cc c2 04 00 ret 0x4
  2249. 77b540cf 90 nop
  2250. 77b540d0 b8 70 01 00 00 mov eax, 0x170
  2251. 77b540d5 ba 70 88 b6 77 mov edx, 0x77b68870
  2252. 77b540da ff d2 call edx
  2253. > 77b540dc c2 18 00 ret 0x18
  2254. 77b540df 90 nop
  2255. 77b540e0 b8 71 01 08 00 mov eax, 0x80171
  2256. 77b540e5 ba 70 88 b6 77 mov edx, 0x77b68870
  2257. 77b540ea ff d2 call edx
  2258. 77b540ec c2 08 00 ret 0x8
  2259.  
  2260. 2d69f65c 72 9d 76 77 r.vw
  2261.  
  2262. Found via instruction pointer in context
  2263.  
  2264.  
  2265. 1: KERNELBASE.dll!GetQueuedCompletionStatusEx + 0x82
  2266. eip: 0x77769d72 esp: 0x2d69f660 ebp: 0x2d69f6d0 ebx: 0x00000000
  2267.  
  2268. 2d69f660 d4 07 00 00 60 00 46 1b 01 00 00 00 10 f7 69 2d ....`.F.......i-
  2269. 2d69f670 ac f6 69 2d 00 00 00 00 3d 37 a6 39 70 b4 3a 58 ..i-....=7.9p.:X
  2270. 2d69f680 60 00 46 1b 88 7d 2f 79 24 00 00 00 01 00 00 00 `.F..}/y$.......
  2271. 2d69f690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2272. 2d69f6a0 00 00 00 00 00 00 00 00 00 00 00 00 c0 b4 b3 ff ................
  2273. 2d69f6b0 ff ff ff ff 00 00 00 00 78 f6 69 2d 80 1c aa 2b ........x.i-...+
  2274. 2d69f6c0 94 f7 69 2d 70 07 6e 77 45 b1 b8 63 00 00 00 00 ..i-p.nwE..c....
  2275. 2d69f6d0 24 f7 69 2d 5f f3 cc 78 $.i-_..x
  2276.  
  2277. Found via call frame info
  2278.  
  2279.  
  2280. 2: steamclient.dll + 0xa4f35f
  2281. eip: 0x78ccf35f esp: 0x2d69f6d8 ebp: 0x2d69f724
  2282.  
  2283. 2d69f6d8 d4 07 00 00 60 00 46 1b 01 00 00 00 10 f7 69 2d ....`.F.......i-
  2284. 2d69f6e8 f4 01 00 00 00 00 00 00 70 ae c9 78 f0 49 3a 58 ........p..x.I:X
  2285. 2d69f6f8 c8 22 a2 23 2c 32 e3 59 88 7d 2f 79 00 00 00 00 .".#,2.Y.}/y....
  2286. 2d69f708 00 00 00 00 60 00 46 1b 00 00 00 00 01 00 00 00 ....`.F.........
  2287. 2d69f718 00 00 00 00 70 ae c9 78 80 17 a4 2b 48 f7 69 2d ....p..x...+H.i-
  2288. 2d69f728 89 f1 cc 78 ...x
  2289.  
  2290. Found via call frame info
  2291.  
  2292.  
  2293. 3: steamclient.dll + 0xa4f189
  2294. eip: 0x78ccf189 esp: 0x2d69f72c ebp: 0x2d69f748
  2295.  
  2296. 2d69f72c 94 f7 69 2d 00 c9 3a 58 28 46 3d 58 88 7d 2f 79 ..i-..:X(F=X.}/y
  2297. 2d69f73c 6c f7 69 2d 9e ac c9 78 58 f7 69 2d 6c f7 69 2d l.i-...xX.i-l.i-
  2298. 2d69f74c ae ac c9 78 ...x
  2299.  
  2300. Found via previous frame's frame pointer
  2301.  
  2302.  
  2303. 4: steamclient.dll + 0xa1acae
  2304. eip: 0x78c9acae esp: 0x2d69f750 ebp: 0x2d69f76c
  2305.  
  2306. 2d69f750 00 00 00 00 d8 f7 69 2d 49 4f 43 50 20 54 68 72 ......i-IOCP Thr
  2307. 2d69f760 65 61 64 20 30 00 00 00 00 00 00 00 a4 f7 69 2d ead 0.........i-
  2308. 2d69f770 a6 f4 39 58 ..9X
  2309.  
  2310. Found via previous frame's frame pointer
  2311.  
  2312.  
  2313. 5: tier0_s.dll + 0xf4a6
  2314. eip: 0x5839f4a6 esp: 0x2d69f774 ebp: 0x2d69f7a4
  2315.  
  2316. 2d69f774 00 00 00 00 00 00 00 00 45 f5 39 58 70 ae c9 78 ........E.9Xp..x
  2317. 2d69f784 00 00 00 00 c8 22 a2 23 80 f7 69 2d 64 00 00 00 .....".#..i-d...
  2318. 2d69f794 c0 f7 69 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 ..i-..:X.E=X....
  2319. 2d69f7a4 cc f7 69 2d c8 ee 39 58 ..i-..9X
  2320.  
  2321. Found via previous frame's frame pointer
  2322.  
  2323.  
  2324. 6: tier0_s.dll + 0xeec8
  2325. eip: 0x5839eec8 esp: 0x2d69f7ac ebp: 0x2d69f7cc
  2326.  
  2327. 2d69f7ac d8 f7 69 2d 70 ae c9 78 00 00 00 00 c8 22 a2 23 ..i-p..x.....".#
  2328. 2d69f7bc b0 f7 69 2d 88 f8 69 2d c0 89 3c 58 00 00 00 00 ..i-..i-..<X....
  2329. 2d69f7cc f0 f7 69 2d 31 fd 39 58 ..i-1.9X
  2330.  
  2331. Found via previous frame's frame pointer
  2332.  
  2333.  
  2334. 7: tier0_s.dll + 0xfd31
  2335. eip: 0x5839fd31 esp: 0x2d69f7d4 ebp: 0x2d69f7f0
  2336.  
  2337. 2d69f7d4 d8 f7 69 2d 03 00 00 00 60 ac c9 78 00 00 00 00 ..i-....`..x....
  2338. 2d69f7e4 00 00 00 00 fc f7 69 2d 00 00 00 00 04 f8 69 2d ......i-......i-
  2339. 2d69f7f4 83 ae c9 78 ...x
  2340.  
  2341. Found via previous frame's frame pointer
  2342.  
  2343.  
  2344. 8: steamclient.dll + 0xa1ae83
  2345. eip: 0x78c9ae83 esp: 0x2d69f7f8 ebp: 0x2d69f804
  2346.  
  2347. 2d69f7f8 60 ac c9 78 00 00 00 00 01 00 00 00 2c f8 69 2d `..x........,.i-
  2348. 2d69f808 8b 3d 3a 58 .=:X
  2349.  
  2350. Found via previous frame's frame pointer
  2351.  
  2352.  
  2353. 9: tier0_s.dll + 0x13d8b
  2354. eip: 0x583a3d8b esp: 0x2d69f80c ebp: 0x2d69f82c
  2355.  
  2356. 2d69f80c 00 00 00 00 c8 22 a2 23 0c 00 00 00 70 3d 3a 58 .....".#....p=:X
  2357. 2d69f81c 70 3d 3a 58 00 00 00 00 00 00 00 00 00 00 00 00 p=:X............
  2358. 2d69f82c 3c f8 69 2d 29 fa 7e 77 <.i-).~w
  2359.  
  2360. Found via previous frame's frame pointer
  2361.  
  2362.  
  2363. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  2364. eip: 0x777efa29 esp: 0x2d69f834 ebp: 0x2d69f83c
  2365.  
  2366. 2d69f834 c8 22 a2 23 10 fa 7e 77 98 f8 69 2d 9e 7a b4 77 .".#..~w..i-.z.w
  2367.  
  2368. Found via previous frame's frame pointer
  2369.  
  2370.  
  2371. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  2372. eip: 0x77b47a9e esp: 0x2d69f844 ebp: 0x2d69f898
  2373.  
  2374. 2d69f844 c8 22 a2 23 c5 46 49 c7 00 00 00 00 00 00 00 00 .".#.FI.........
  2375. 2d69f854 c8 22 a2 23 00 00 00 00 00 00 00 00 00 00 00 00 .".#............
  2376. 2d69f864 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2377. 2d69f874 00 00 00 00 00 00 00 00 00 00 00 00 48 f8 69 2d ............H.i-
  2378. 2d69f884 00 00 00 00 a0 f8 69 2d 40 ad b5 77 3d 76 9e 9d ......i-@..w=v..
  2379. 2d69f894 00 00 00 00 a8 f8 69 2d 6e 7a b4 77 ......i-nz.w
  2380.  
  2381. Found via call frame info
  2382.  
  2383.  
  2384. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  2385. eip: 0x77b47a6e esp: 0x2d69f8a0 ebp: 0x2d69f8a8
  2386.  
  2387. Found via call frame info
  2388.  
  2389.  
  2390. Thread 14:
  2391. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  2392. eip: 0x77b52f8c esp: 0x2d7df1ec ebp: 0x2d7df37c ebx: 0x00000000
  2393. esi: 0x00000002 edi: 0x00000002 eax: 0x00000000 ecx: 0x00000000
  2394. edx: 0x00000000 efl: 0x00000202
  2395.  
  2396. 77b52f7c c2 04 00 ret 0x4
  2397. 77b52f7f 90 nop
  2398. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  2399. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  2400. 77b52f8a ff d2 call edx
  2401. > 77b52f8c c2 14 00 ret 0x14
  2402. 77b52f8f 90 nop
  2403. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  2404. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  2405. 77b52f9a ff d2 call edx
  2406. 77b52f9c c2 10 00 ret 0x10
  2407.  
  2408. 2d7df1ec 53 b2 6c 77 S.lw
  2409.  
  2410. Found via instruction pointer in context
  2411.  
  2412.  
  2413. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  2414. eip: 0x776cb253 esp: 0x2d7df1f0 ebp: 0x2d7df37c ebx: 0x00000000
  2415.  
  2416. 2d7df1f0 02 00 00 00 b8 f3 7d 2d 01 00 00 00 00 00 00 00 ......}-........
  2417. 2d7df200 44 f2 7d 2d 91 32 b2 39 02 00 00 00 18 00 45 1b D.}-.2.9......E.
  2418. 2d7df210 31 00 00 00 00 b4 3a 58 24 00 00 00 01 00 00 00 1.....:X$.......
  2419. 2d7df220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2420. 2d7df230 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 ................
  2421. 2d7df240 00 50 45 00 f0 85 f8 ff ff ff ff ff 00 00 00 00 .PE.............
  2422. 2d7df250 b8 f3 7d 2d 00 f0 fe 7f 44 f2 7d 2d 00 00 00 00 ..}-....D.}-....
  2423. 2d7df260 c3 d8 00 00 90 f2 7d 2d b2 97 bc 78 68 00 42 1b ......}-...xh.B.
  2424. 2d7df270 88 f2 7d 2d 04 00 00 00 68 00 42 1b 68 00 42 1b ..}-....h.B.h.B.
  2425. 2d7df280 38 00 43 1b 28 1c 42 1b 70 00 42 1b 98 ad 2d 79 8.C.(.B.p.B...-y
  2426. 2d7df290 13 00 01 00 13 00 01 00 e0 f2 7d 2d e7 51 3a 58 ..........}-.Q:X
  2427. 2d7df2a0 e4 f2 7d 2d 04 00 00 00 e7 51 3a 58 68 00 42 1b ..}-.....Q:Xh.B.
  2428. 2d7df2b0 04 00 00 00 01 00 00 00 04 f3 7d 2d 70 b4 3a 58 ..........}-p.:X
  2429. 2d7df2c0 68 00 42 1b a0 53 39 58 a0 53 39 58 c6 11 6c 77 h.B..S9X.S9X..lw
  2430. 2d7df2d0 dd 32 b2 39 f0 18 53 1b 68 13 47 1b 01 00 00 00 .2.9..S.h.G.....
  2431. 2d7df2e0 0c f3 7d 2d b2 97 bc 78 68 00 42 1b 04 f3 7d 2d ..}-...xh.B...}-
  2432. 2d7df2f0 04 00 00 00 04 00 00 00 70 b4 3a 58 18 ab 2d 79 ........p.:X..-y
  2433. 2d7df300 98 ad 2d 79 00 00 00 00 98 ad 2d 79 3c f4 7d 2d ..-y......-y<.}-
  2434. 2d7df310 3d 8f bc 78 18 ab 2d 79 00 b4 3a 58 70 b4 3a 58 =..x..-y..:Xp.:X
  2435. 2d7df320 80 b4 3a 58 c0 01 53 1b 80 b4 3a 58 7c f4 7d 2d ..:X..S...:X|.}-
  2436. 2d7df330 80 d0 9f 2b e0 d0 9f 2b 64 f4 7d 2d 64 f4 7d 2d ...+...+d.}-d.}-
  2437. 2d7df340 f4 0a bf 78 3c d5 9f 2b 99 d2 62 8a b8 d4 9f 2b ...x<..+..b....+
  2438. 2d7df350 80 b4 3a 58 f0 18 53 1b 9c f3 7d 2d e7 51 3a 58 ..:X..S...}-.Q:X
  2439. 2d7df360 91 32 b2 39 d8 f3 7d 2d ec bc b3 77 94 f6 7d 2d .2.9..}-...w..}-
  2440. 2d7df370 70 07 6e 77 75 a5 b8 63 00 00 00 00 98 f3 7d 2d p.nwu..c......}-
  2441. 2d7df380 38 b1 6c 77 8.lw
  2442.  
  2443. Found via call frame info
  2444.  
  2445.  
  2446. 2: KERNELBASE.dll!WaitForMultipleObjects + 0x18
  2447. eip: 0x776cb138 esp: 0x2d7df384 ebp: 0x2d7df398
  2448.  
  2449. 2d7df384 02 00 00 00 b8 f3 7d 2d 00 00 00 00 31 00 00 00 ......}-....1...
  2450. 2d7df394 00 00 00 00 b8 f4 7d 2d c2 4c 3a 58 ......}-.L:X
  2451.  
  2452. Found via call frame info
  2453.  
  2454.  
  2455. 3: tier0_s.dll + 0x14cc2
  2456. eip: 0x583a4cc2 esp: 0x2d7df3a0 ebp: 0x2d7df4b8
  2457.  
  2458. 2d7df3a0 02 00 00 00 b8 f3 7d 2d 00 00 00 00 31 00 00 00 ......}-....1...
  2459. 2d7df3b0 00 00 45 1b 18 00 45 1b 24 09 00 00 a8 0e 00 00 ..E...E.$.......
  2460. 2d7df3c0 68 9c 2f 79 ee 38 6d 77 41 00 01 00 41 00 01 00 h./y.8mwA...A...
  2461. 2d7df3d0 18 f4 7d 2d e7 51 3a 58 7c 9d 49 61 bd 4d 5d c7 ..}-.Q:X|.Ia.M].
  2462. 2d7df3e0 54 f4 7d 2d ec bc b3 77 ff ff ff ff 4c f4 7d 2d T.}-...w....L.}-
  2463. 2d7df3f0 9b bd b3 77 80 b4 3a 58 d4 aa 2d 79 fc aa 2d 79 ...w..:X..-y..-y
  2464. 2d7df400 12 b0 b0 e3 f2 00 00 00 18 b0 b0 e3 f2 00 00 00 ................
  2465. 2d7df410 eb f7 68 1c b5 00 00 00 00 f0 fe 7f 3d 00 00 00 ..h.........=...
  2466. 2d7df420 5f be b3 77 c0 f4 7d 2d c4 f4 7d 2d 48 61 6c 54 _..w..}-..}-HalT
  2467. 2d7df430 ff ff ff ff 00 00 00 00 00 00 00 00 c3 d8 00 00 ................
  2468. 2d7df440 93 14 b0 00 5d 0b b6 00 2f a0 e2 d9 4c 01 62 8a ....].../...L.b.
  2469. 2d7df450 09 4a 5d c7 c8 f4 7d 2d ec bc b3 77 ff ff ff ff .J]...}-...w....
  2470. 2d7df460 c0 f4 7d 2d 9b bd b3 77 68 aa 2d 79 7c 9d 49 61 ..}-...wh.-y|.Ia
  2471. 2d7df470 e0 a9 2d 79 7c 9d 49 61 e0 a9 2d 79 2a b0 b0 e3 ..-y|.Ia..-y*...
  2472. 2d7df480 f2 00 00 00 f0 f7 68 1c b5 00 00 00 60 fb 9c f7 ......h.....`...
  2473. 2d7df490 af fe 00 00 41 b8 47 c7 3d 00 00 00 0a 00 00 00 ....A.G.=.......
  2474. 2d7df4a0 48 61 6c 54 00 f0 fe 7f 00 00 00 00 00 00 00 00 HalT............
  2475. 2d7df4b0 c3 d8 00 00 98 14 b0 00 d8 f4 7d 2d e1 82 82 78 ..........}-...x
  2476.  
  2477. Found via call frame info
  2478.  
  2479.  
  2480. 4: steamclient.dll + 0x5a82e1
  2481. eip: 0x788282e1 esp: 0x2d7df4c0 ebp: 0x2d7df4d8
  2482.  
  2483. 2d7df4c0 60 16 41 1b 02 00 00 00 31 00 00 00 18 00 45 1b `.A.....1.....E.
  2484. 2d7df4d0 4d 14 00 00 7c 9d 49 61 58 f6 7d 2d ca 9b 82 78 M...|.IaX.}-...x
  2485.  
  2486. Found via previous frame's frame pointer
  2487.  
  2488.  
  2489. 5: steamclient.dll + 0x5a9bca
  2490. eip: 0x78829bca esp: 0x2d7df4e0 ebp: 0x2d7df658
  2491.  
  2492. 2d7df4e0 31 00 00 00 b0 df 7e 77 e0 a9 2d 79 5c d8 6f 00 1.....~w..-y\.o.
  2493. 2d7df4f0 00 00 00 00 02 00 00 00 02 00 00 00 01 00 00 00 ................
  2494. 2d7df500 45 ef 00 74 01 00 00 00 48 f5 7d 2d 7c ed 00 74 E..t....H.}-|..t
  2495. 2d7df510 00 00 fc 73 02 00 00 00 00 00 00 00 da 00 bc e7 ...s............
  2496. 2d7df520 40 ee 00 74 70 f5 7d 2d 00 00 00 00 01 00 00 00 @..tp.}-........
  2497. 2d7df530 1c f5 7d 2d 00 00 00 00 b8 f5 7d 2d d0 f1 00 74 ..}-......}-...t
  2498. 2d7df540 1a 76 c7 be fe ff ff ff 5c f5 7d 2d 5e ee 00 74 .v......\.}-^..t
  2499. 2d7df550 00 00 fc 73 02 00 00 00 30 f6 7d 2d 00 00 00 00 ...s....0.}-....
  2500. 2d7df560 bc c7 b2 77 00 00 fc 73 02 00 00 00 00 00 00 00 ...w...s........
  2501. 2d7df570 00 00 00 00 40 ee 00 74 00 00 fc 73 c8 f5 7d 2d ....@..t...s..}-
  2502. 2d7df580 42 dd b2 77 40 ee 00 74 00 00 fc 73 30 f6 7d 2d B..w@..t...s0.}-
  2503. 2d7df590 15 00 00 00 8c 5d c0 77 30 f6 7d 2d 00 00 00 00 .....].w0.}-....
  2504. 2d7df5a0 d0 d1 98 23 30 f6 7d 2d e0 5c c0 77 8c 5d c0 77 ...#0.}-.\.w.].w
  2505. 2d7df5b0 56 27 b3 77 30 f6 7d 2d 00 00 00 00 9c 2a b5 77 V'.w0.}-.....*.w
  2506. 2d7df5c0 51 7a b4 77 88 00 00 00 00 00 00 00 00 00 00 00 Qz.w............
  2507. 2d7df5d0 49 dc b2 77 15 dc b2 77 39 48 5d c7 00 50 45 00 I..w...w9H]..PE.
  2508. 2d7df5e0 00 00 00 00 00 50 4e 00 00 00 00 00 00 00 00 00 .....PN.........
  2509. 2d7df5f0 00 00 00 00 00 00 00 00 50 c3 00 00 00 00 00 00 ........P.......
  2510. 2d7df600 2c 55 87 16 00 00 00 00 00 00 00 00 70 14 a4 2b ,U..........p..+
  2511. 2d7df610 1f af b0 e3 f2 00 00 00 00 00 00 00 00 00 00 00 ................
  2512. 2d7df620 3f 50 b8 e3 f2 00 00 00 68 aa 2d 79 7c 9d 49 61 ?P......h.-y|.Ia
  2513. 2d7df630 14 00 00 00 00 00 00 00 d9 ce f7 53 00 00 00 00 ...........S....
  2514. 2d7df640 00 00 00 00 af 04 00 00 00 00 00 00 00 00 00 00 ................
  2515. 2d7df650 e0 a9 2d 79 d5 92 82 00 6c f6 7d 2d e2 92 82 78 ..-y....l.}-...x
  2516.  
  2517. Found via previous frame's frame pointer
  2518.  
  2519.  
  2520. 6: steamclient.dll + 0x5a92e2
  2521. eip: 0x788292e2 esp: 0x2d7df660 ebp: 0x2d7df66c
  2522.  
  2523. 2d7df660 98 aa 2d 79 1e 3b 3a 58 d8 f6 7d 2d a4 f6 7d 2d ..-y.;:X..}-..}-
  2524. 2d7df670 a6 f4 39 58 ..9X
  2525.  
  2526. Found via previous frame's frame pointer
  2527.  
  2528.  
  2529. 7: tier0_s.dll + 0xf4a6
  2530. eip: 0x5839f4a6 esp: 0x2d7df674 ebp: 0x2d7df6a4
  2531.  
  2532. 2d7df674 98 aa 2d 79 c8 22 a2 23 45 f5 39 58 b0 df 7e 77 ..-y.".#E.9X..~w
  2533. 2d7df684 c8 22 a2 23 5c d8 6f 00 80 f6 7d 2d 00 00 00 00 .".#\.o...}-....
  2534. 2d7df694 c0 f6 7d 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 ..}-..:X.E=X....
  2535. 2d7df6a4 cc f6 7d 2d c8 ee 39 58 ..}-..9X
  2536.  
  2537. Found via previous frame's frame pointer
  2538.  
  2539.  
  2540. 8: tier0_s.dll + 0xeec8
  2541. eip: 0x5839eec8 esp: 0x2d7df6ac ebp: 0x2d7df6cc
  2542.  
  2543. 2d7df6ac d8 f6 7d 2d b0 df 7e 77 c8 22 a2 23 5c d8 6f 00 ..}-..~w.".#\.o.
  2544. 2d7df6bc b0 f6 7d 2d 1c f9 7d 2d c0 89 3c 58 00 00 00 00 ..}-..}-..<X....
  2545. 2d7df6cc f0 f6 7d 2d 31 fd 39 58 ..}-1.9X
  2546.  
  2547. Found via previous frame's frame pointer
  2548.  
  2549.  
  2550. 9: tier0_s.dll + 0xfd31
  2551. eip: 0x5839fd31 esp: 0x2d7df6d4 ebp: 0x2d7df6f0
  2552.  
  2553. 2d7df6d4 d8 f6 7d 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 ..}-.....;:X....
  2554. 2d7df6e4 00 00 00 00 fc f6 7d 2d 01 00 00 00 28 f9 7d 2d ......}-....(.}-
  2555. 2d7df6f4 db 3c 3a 58 .<:X
  2556.  
  2557. Found via previous frame's frame pointer
  2558.  
  2559.  
  2560. 10: tier0_s.dll + 0x13cdb
  2561. eip: 0x583a3cdb esp: 0x2d7df6f8 ebp: 0x2d7df928
  2562.  
  2563. 2d7df6f8 10 3b 3a 58 98 aa 2d 79 00 00 00 00 50 3b 3a 58 .;:X..-y....P;:X
  2564. 2d7df708 50 3b 3a 58 c8 22 a2 23 00 00 00 00 00 00 00 00 P;:X.".#........
  2565. 2d7df718 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2566. 2d7df728 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2567. 2d7df738 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2568. 2d7df748 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2569. 2d7df758 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2570. 2d7df768 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  2571. 2d7df778 00 00 00 00 00 00 00 00 c8 22 a2 23 00 00 00 00 .........".#....
  2572. 2d7df788 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  2573. 2d7df798 23 00 00 00 02 02 00 00 a8 f9 7d 2d 2b 00 00 00 #.........}-+...
  2574. 2d7df7a8 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2575. 2d7df7b8 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  2576. 2d7df7c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2577. 2d7df7d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2578. 2d7df7e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2579. 2d7df7f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2580. 2d7df808 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2581. 2d7df818 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2582. 2d7df828 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2583. 2d7df838 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2584. 2d7df848 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2585. 2d7df858 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2586. 2d7df868 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2587. 2d7df878 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2588. 2d7df888 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2589. 2d7df898 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2590. 2d7df8a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2591. 2d7df8b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2592. 2d7df8c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2593. 2d7df8d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2594. 2d7df8e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2595. 2d7df8f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2596. 2d7df908 00 00 00 00 00 00 00 00 c8 22 a2 23 98 aa 2d 79 .........".#..-y
  2597. 2d7df918 04 f7 7d 2d 84 f9 7d 2d 10 8a 3c 58 ff ff ff ff ..}-..}-..<X....
  2598. 2d7df928 38 f9 7d 2d 29 fa 7e 77 8.}-).~w
  2599.  
  2600. Found via previous frame's frame pointer
  2601.  
  2602.  
  2603. 11: kernel32.dll!BaseThreadInitThunk + 0x19
  2604. eip: 0x777efa29 esp: 0x2d7df930 ebp: 0x2d7df938
  2605.  
  2606. 2d7df930 c8 22 a2 01 10 fa 7e 77 94 f9 7d 2d 9e 7a b4 77 ."....~w..}-.z.w
  2607.  
  2608. Found via previous frame's frame pointer
  2609.  
  2610.  
  2611. 12: ntdll.dll!__RtlUserThreadStart + 0x2f
  2612. eip: 0x77b47a9e esp: 0x2d7df940 ebp: 0x2d7df994
  2613.  
  2614. 2d7df940 c8 22 a2 23 c9 47 5d c7 00 00 00 00 00 00 00 00 .".#.G].........
  2615. 2d7df950 c8 22 a2 23 00 00 00 00 00 00 00 00 00 00 00 00 .".#............
  2616. 2d7df960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2617. 2d7df970 00 00 00 00 00 00 00 00 00 00 00 00 44 f9 7d 2d ............D.}-
  2618. 2d7df980 00 00 00 00 9c f9 7d 2d 40 ad b5 77 3d 76 9e 9d ......}-@..w=v..
  2619. 2d7df990 00 00 00 00 a4 f9 7d 2d 6e 7a b4 77 ......}-nz.w
  2620.  
  2621. Found via call frame info
  2622.  
  2623.  
  2624. 13: ntdll.dll!_RtlUserThreadStart + 0x1b
  2625. eip: 0x77b47a6e esp: 0x2d7df99c ebp: 0x2d7df9a4
  2626.  
  2627. Found via call frame info
  2628.  
  2629.  
  2630. Thread 15:
  2631. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  2632. eip: 0x77b529fc esp: 0x2dabf4c0 ebp: 0x2dabf530 ebx: 0x792dad98
  2633. esi: 0x00000000 edi: 0x000009c8 eax: 0x00000000 ecx: 0x00000000
  2634. edx: 0x00000000 efl: 0x00000216
  2635.  
  2636. 77b529ec c2 0c 00 ret 0xc
  2637. 77b529ef 90 nop
  2638. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  2639. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  2640. 77b529fa ff d2 call edx
  2641. > 77b529fc c2 0c 00 ret 0xc
  2642. 77b529ff 90 nop
  2643. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  2644. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  2645. 77b52a0a ff d2 call edx
  2646. 77b52a0c c2 0c 00 ret 0xc
  2647.  
  2648. 2dabf4c0 a9 11 6c 77 ..lw
  2649.  
  2650. Found via instruction pointer in context
  2651.  
  2652.  
  2653. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  2654. eip: 0x776c11a9 esp: 0x2dabf4c4 ebp: 0x2dabf530 ebx: 0x792dad98
  2655.  
  2656. 2dabf4c4 c8 09 00 00 00 00 00 00 04 f5 ab 2d dd 34 64 39 ...........-.4d9
  2657. 2dabf4d4 50 00 50 1b 90 00 50 1b 98 ad 2d 79 24 00 00 00 P.P...P...-y$...
  2658. 2dabf4e4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2659. 2dabf4f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2660. 2dabf504 60 da d9 ff ff ff ff ff 04 f5 ab 2d 00 00 00 00 `..........-....
  2661. 2dabf514 c8 09 00 00 70 2e 73 74 65 61 6d 63 04 f7 ab 2d ....p.steamc...-
  2662. 2dabf524 70 07 6e 77 0d a0 b8 63 00 00 00 00 44 f5 ab 2d p.nw...c....D..-
  2663. 2dabf534 02 11 6c 77 ..lw
  2664.  
  2665. Found via call frame info
  2666.  
  2667.  
  2668. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  2669. eip: 0x776c1102 esp: 0x2dabf538 ebp: 0x2dabf544
  2670.  
  2671. 2dabf538 c8 09 00 00 fa 00 00 00 00 00 00 00 58 f6 ab 2d ............X..-
  2672. 2dabf548 98 3f 3a 58 .?:X
  2673.  
  2674. Found via call frame info
  2675.  
  2676.  
  2677. 3: tier0_s.dll + 0x13f98
  2678. eip: 0x583a3f98 esp: 0x2dabf54c ebp: 0x2dabf658
  2679.  
  2680. 2dabf54c c8 09 00 00 fa 00 00 00 88 ae 2d 79 00 02 01 01 ..........-y....
  2681. 2dabf55c 00 00 00 00 99 fe 56 94 00 00 00 00 00 00 00 00 ......V.........
  2682. 2dabf56c 00 00 00 00 00 f0 fe 7f 3d 00 00 00 5f be b3 77 ........=..._..w
  2683. 2dabf57c 18 f6 ab 2d 1c f6 ab 2d 00 00 00 00 ff ff ff ff ...-...-........
  2684. 2dabf58c 3d 00 00 00 5f be b3 77 30 f6 ab 2d 00 f0 fe 7f =..._..w0..-....
  2685. 2dabf59c 3d 00 00 00 5f be b3 77 40 f6 ab 2d f1 4b 8b c7 =..._..w@..-.K..
  2686. 2dabf5ac 20 f6 ab 2d ec bc b3 77 ff ff ff ff 18 f6 ab 2d ..-...w.......-
  2687. 2dabf5bc 9b bd b3 77 e8 3a 55 1b e8 3a 55 1b 98 ad 2d 79 ...w.:U..:U...-y
  2688. 2dabf5cc 5b 32 34 30 89 4b 8b c7 48 f6 ab 2d ec bc b3 77 [240.K..H..-...w
  2689. 2dabf5dc 2b fd d5 d0 38 00 43 1b 70 00 42 1b 24 f6 ab 2d +...8.C.p.B.$..-
  2690. 2dabf5ec 18 f6 ab 2d 9e 51 3a 58 70 00 42 1b 38 00 43 1b ...-.Q:Xp.B.8.C.
  2691. 2dabf5fc 13 00 01 00 40 10 43 1b 12 00 01 00 98 ad 2d 79 ....@.C.......-y
  2692. 2dabf60c 68 00 42 1b 00 0e 43 1b 40 00 42 1b 54 f6 ab 2d h.B...C.@.B.T..-
  2693. 2dabf61c 48 f6 ab 2d 9e 51 3a 58 40 00 42 1b 00 0e 43 1b H..-.Q:X@.B...C.
  2694. 2dabf62c 14 00 01 00 20 00 43 1b 13 00 01 00 50 00 50 1b .... .C.....P.P.
  2695. 2dabf63c 08 19 a4 2b 20 00 43 1b 00 0e 43 1b 58 f6 ab 2d ...+ .C...C.X..-
  2696. 2dabf64c 08 19 a4 2b 50 00 50 1b a3 a1 3a 58 d0 f6 ab 2d ...+P.P...:X...-
  2697. 2dabf65c 5a a2 bc 78 Z..x
  2698.  
  2699. Found via call frame info
  2700.  
  2701.  
  2702. 4: steamclient.dll + 0x94a25a
  2703. eip: 0x78bca25a esp: 0x2dabf660 ebp: 0x2dabf6d0
  2704.  
  2705. 2dabf660 fa 00 00 00 b0 df 7e 77 50 00 50 1b 64 e9 7c 2d ......~wP.P.d.|-
  2706. 2dabf670 ad c4 97 e4 db 16 a0 3f ad c4 97 e4 db 16 a0 3f .......?.......?
  2707. 2dabf680 b9 90 a2 29 96 b6 e3 3e b9 90 a2 29 96 b6 e3 3e ...)...>...)...>
  2708. 2dabf690 f3 e9 18 98 ff ff ff ff 98 ad 2d 79 a0 3a 55 1b ..........-y.:U.
  2709. 2dabf6a0 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
  2710. 2dabf6b0 00 00 00 00 00 00 00 00 08 19 a4 2b a0 3a 55 1b ...........+.:U.
  2711. 2dabf6c0 01 00 00 00 50 00 50 1b 00 00 00 00 95 7c 9e 00 ....P.P......|..
  2712. 2dabf6d0 dc f6 ab 2d 1e 3b 3a 58 ...-.;:X
  2713.  
  2714. Found via previous frame's frame pointer
  2715.  
  2716.  
  2717. 5: tier0_s.dll + 0x13b1e
  2718. eip: 0x583a3b1e esp: 0x2dabf6d8 ebp: 0x2dabf6dc
  2719.  
  2720. 2dabf6d8 48 f7 ab 2d 14 f7 ab 2d a6 f4 39 58 H..-...-..9X
  2721.  
  2722. Found via previous frame's frame pointer
  2723.  
  2724.  
  2725. 6: tier0_s.dll + 0xf4a6
  2726. eip: 0x5839f4a6 esp: 0x2dabf6e4 ebp: 0x2dabf714
  2727.  
  2728. 2dabf6e4 50 00 50 1b 30 24 5c 1d 45 f5 39 58 b0 df 7e 77 P.P.0$\.E.9X..~w
  2729. 2dabf6f4 30 24 5c 1d 64 e9 7c 2d f0 f6 ab 2d 00 00 00 00 0$\.d.|-...-....
  2730. 2dabf704 30 f7 ab 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 0..-..:X.E=X....
  2731. 2dabf714 3c f7 ab 2d c8 ee 39 58 <..-..9X
  2732.  
  2733. Found via previous frame's frame pointer
  2734.  
  2735.  
  2736. 7: tier0_s.dll + 0xeec8
  2737. eip: 0x5839eec8 esp: 0x2dabf71c ebp: 0x2dabf73c
  2738.  
  2739. 2dabf71c 48 f7 ab 2d b0 df 7e 77 30 24 5c 1d 64 e9 7c 2d H..-..~w0$\.d.|-
  2740. 2dabf72c 20 f7 ab 2d 8c f9 ab 2d c0 89 3c 58 00 00 00 00 ..-...-..<X....
  2741. 2dabf73c 60 f7 ab 2d 31 fd 39 58 `..-1.9X
  2742.  
  2743. Found via previous frame's frame pointer
  2744.  
  2745.  
  2746. 8: tier0_s.dll + 0xfd31
  2747. eip: 0x5839fd31 esp: 0x2dabf744 ebp: 0x2dabf760
  2748.  
  2749. 2dabf744 48 f7 ab 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 H..-.....;:X....
  2750. 2dabf754 00 00 00 00 6c f7 ab 2d 01 00 00 00 98 f9 ab 2d ....l..-.......-
  2751. 2dabf764 db 3c 3a 58 .<:X
  2752.  
  2753. Found via previous frame's frame pointer
  2754.  
  2755.  
  2756. 9: tier0_s.dll + 0x13cdb
  2757. eip: 0x583a3cdb esp: 0x2dabf768 ebp: 0x2dabf998
  2758.  
  2759. 2dabf768 10 3b 3a 58 50 00 50 1b 00 00 00 00 50 3b 3a 58 .;:XP.P.....P;:X
  2760. 2dabf778 50 3b 3a 58 30 24 5c 1d 00 00 00 00 00 00 00 00 P;:X0$\.........
  2761. 2dabf788 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2762. 2dabf798 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2763. 2dabf7a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2764. 2dabf7b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2765. 2dabf7c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2766. 2dabf7d8 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  2767. 2dabf7e8 00 00 00 00 00 00 00 00 30 24 5c 1d 00 00 00 00 ........0$\.....
  2768. 2dabf7f8 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  2769. 2dabf808 23 00 00 00 02 02 00 00 18 fa ab 2d 2b 00 00 00 #..........-+...
  2770. 2dabf818 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2771. 2dabf828 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  2772. 2dabf838 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2773. 2dabf848 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2774. 2dabf858 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2775. 2dabf868 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2776. 2dabf878 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2777. 2dabf888 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2778. 2dabf898 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2779. 2dabf8a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2780. 2dabf8b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2781. 2dabf8c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2782. 2dabf8d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2783. 2dabf8e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2784. 2dabf8f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2785. 2dabf908 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2786. 2dabf918 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2787. 2dabf928 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2788. 2dabf938 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2789. 2dabf948 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2790. 2dabf958 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2791. 2dabf968 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2792. 2dabf978 00 00 00 00 00 00 00 00 30 24 5c 1d 50 00 50 1b ........0$\.P.P.
  2793. 2dabf988 74 f7 ab 2d f4 f9 ab 2d 10 8a 3c 58 ff ff ff ff t..-...-..<X....
  2794. 2dabf998 a8 f9 ab 2d 29 fa 7e 77 ...-).~w
  2795.  
  2796. Found via previous frame's frame pointer
  2797.  
  2798.  
  2799. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  2800. eip: 0x777efa29 esp: 0x2dabf9a0 ebp: 0x2dabf9a8
  2801.  
  2802. 2dabf9a0 30 24 5c 01 10 fa 7e 77 04 fa ab 2d 9e 7a b4 77 0$\...~w...-.z.w
  2803.  
  2804. Found via previous frame's frame pointer
  2805.  
  2806.  
  2807. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  2808. eip: 0x77b47a9e esp: 0x2dabf9b0 ebp: 0x2dabfa04
  2809.  
  2810. 2dabf9b0 30 24 5c 1d 59 44 8b c7 00 00 00 00 00 00 00 00 0$\.YD..........
  2811. 2dabf9c0 30 24 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 0$\.............
  2812. 2dabf9d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2813. 2dabf9e0 00 00 00 00 00 00 00 00 00 00 00 00 b4 f9 ab 2d ...............-
  2814. 2dabf9f0 00 00 00 00 0c fa ab 2d 40 ad b5 77 3d 76 9e 9d .......-@..w=v..
  2815. 2dabfa00 00 00 00 00 14 fa ab 2d 6e 7a b4 77 .......-nz.w
  2816.  
  2817. Found via call frame info
  2818.  
  2819.  
  2820. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  2821. eip: 0x77b47a6e esp: 0x2dabfa0c ebp: 0x2dabfa14
  2822.  
  2823. Found via call frame info
  2824.  
  2825.  
  2826. Thread 16:
  2827. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  2828. eip: 0x77b529fc esp: 0x2dbffa64 ebp: 0x2dbffad4 ebx: 0x1b524288
  2829. esi: 0x00000000 edi: 0x00000ae8 eax: 0xc0000034 ecx: 0x00000000
  2830. edx: 0x00000000 efl: 0x00000202
  2831.  
  2832. 77b529ec c2 0c 00 ret 0xc
  2833. 77b529ef 90 nop
  2834. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  2835. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  2836. 77b529fa ff d2 call edx
  2837. > 77b529fc c2 0c 00 ret 0xc
  2838. 77b529ff 90 nop
  2839. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  2840. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  2841. 77b52a0a ff d2 call edx
  2842. 77b52a0c c2 0c 00 ret 0xc
  2843.  
  2844. 2dbffa64 a9 11 6c 77 ..lw
  2845.  
  2846. Found via instruction pointer in context
  2847.  
  2848.  
  2849. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  2850. eip: 0x776c11a9 esp: 0x2dbffa68 ebp: 0x2dbffad4 ebx: 0x1b524288
  2851.  
  2852. 2dbffa68 e8 0a 00 00 00 00 00 00 a8 fa bf 2d 39 3b 70 39 ...........-9;p9
  2853. 2dbffa78 f0 00 50 1b 30 01 50 1b 88 42 52 1b 24 00 00 00 ..P.0.P..BR.$...
  2854. 2dbffa88 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2855. 2dbffa98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2856. 2dbffaa8 60 da d9 ff ff ff ff ff a8 fa bf 2d 00 00 00 00 `..........-....
  2857. 2dbffab8 e8 0a 00 00 00 00 00 00 00 00 00 00 a8 fc bf 2d ...............-
  2858. 2dbffac8 70 07 6e 77 0d a0 b8 63 00 00 00 00 e8 fa bf 2d p.nw...c.......-
  2859. 2dbffad8 02 11 6c 77 ..lw
  2860.  
  2861. Found via call frame info
  2862.  
  2863.  
  2864. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  2865. eip: 0x776c1102 esp: 0x2dbffadc ebp: 0x2dbffae8
  2866.  
  2867. 2dbffadc e8 0a 00 00 fa 00 00 00 00 00 00 00 fc fb bf 2d ...............-
  2868. 2dbffaec 98 3f 3a 58 .?:X
  2869.  
  2870. Found via call frame info
  2871.  
  2872.  
  2873. 3: tier0_s.dll + 0x13f98
  2874. eip: 0x583a3f98 esp: 0x2dbffaf0 ebp: 0x2dbffbfc
  2875.  
  2876. 2dbffaf0 e8 0a 00 00 fa 00 00 00 78 43 52 1b 00 00 00 00 ........xCR.....
  2877. 2dbffb00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2878. 2dbffb10 00 00 00 00 00 f0 fe 7f 3d 00 00 00 5f be b3 77 ........=..._..w
  2879. 2dbffb20 bc fb bf 2d c0 fb bf 2d 00 00 00 00 ff ff ff ff ...-...-........
  2880. 2dbffb30 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 fe 7f ................
  2881. 2dbffb40 3d 00 00 00 5f be b3 77 e4 fb bf 2d 0d 45 9f c7 =..._..w...-.E..
  2882. 2dbffb50 c4 fb bf 2d ec bc b3 77 ff ff ff ff bc fb bf 2d ...-...w.......-
  2883. 2dbffb60 9b bd b3 77 48 4f 4c 1b 48 4f 4c 1b 88 42 52 1b ...wHOL.HOL..BR.
  2884. 2dbffb70 34 61 66 38 25 45 9f c7 ec fb bf 2d ec bc b3 77 4af8%E.....-...w
  2885. 2dbffb80 88 10 43 1b 10 18 42 1b c0 fb bf 2d b8 fb bf 2d ..C...B....-...-
  2886. 2dbffb90 9e 51 3a 58 10 18 42 1b 88 10 43 1b 0a 00 01 00 .Q:X..B...C.....
  2887. 2dbffba0 f8 09 43 1b 09 00 01 00 88 42 52 1b 08 18 42 1b ..C......BR...B.
  2888. 2dbffbb0 f8 09 43 1b 01 00 08 00 e0 09 43 1b e0 17 42 1b ..C.......C...B.
  2889. 2dbffbc0 f8 fb bf 2d f0 fb bf 2d 9e 51 3a 58 e0 17 42 1b ...-...-.Q:X..B.
  2890. 2dbffbd0 e0 09 43 1b 0b 00 01 00 e0 06 43 1b 0a 00 01 00 ..C.......C.....
  2891. 2dbffbe0 b8 09 a4 2b d8 17 42 1b e0 06 43 1b fc fb bf 2d ...+..B...C....-
  2892. 2dbffbf0 b8 09 a4 2b f0 00 50 1b a3 a1 3a 58 74 fc bf 2d ...+..P...:Xt..-
  2893. 2dbffc00 5a a2 bc 78 Z..x
  2894.  
  2895. Found via call frame info
  2896.  
  2897.  
  2898. 4: steamclient.dll + 0x94a25a
  2899. eip: 0x78bca25a esp: 0x2dbffc04 ebp: 0x2dbffc74
  2900.  
  2901. 2dbffc04 fa 00 00 00 b0 df 7e 77 f0 00 50 1b 2c e9 7c 2d ......~w..P.,.|-
  2902. 2dbffc14 92 ef ad a3 05 c3 14 3f 92 ef ad a3 05 c3 14 3f .......?.......?
  2903. 2dbffc24 fa 6c d3 8e d1 f0 dc 3e fa 6c d3 8e d1 f0 dc 3e .l.....>.l.....>
  2904. 2dbffc34 b4 91 04 98 ff ff ff ff 88 42 52 1b 00 4f 4c 1b .........BR..OL.
  2905. 2dbffc44 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
  2906. 2dbffc54 00 00 00 00 00 00 00 00 b8 09 a4 2b 00 4f 4c 1b ...........+.OL.
  2907. 2dbffc64 01 00 00 00 f0 00 50 1b 00 00 00 00 95 7c 9e 00 ......P......|..
  2908. 2dbffc74 80 fc bf 2d 1e 3b 3a 58 ...-.;:X
  2909.  
  2910. Found via previous frame's frame pointer
  2911.  
  2912.  
  2913. 5: tier0_s.dll + 0x13b1e
  2914. eip: 0x583a3b1e esp: 0x2dbffc7c ebp: 0x2dbffc80
  2915.  
  2916. 2dbffc7c ec fc bf 2d b8 fc bf 2d a6 f4 39 58 ...-...-..9X
  2917.  
  2918. Found via previous frame's frame pointer
  2919.  
  2920.  
  2921. 6: tier0_s.dll + 0xf4a6
  2922. eip: 0x5839f4a6 esp: 0x2dbffc88 ebp: 0x2dbffcb8
  2923.  
  2924. 2dbffc88 f0 00 50 1b b8 cc a5 23 45 f5 39 58 b0 df 7e 77 ..P....#E.9X..~w
  2925. 2dbffc98 b8 cc a5 23 2c e9 7c 2d 94 fc bf 2d 00 00 00 00 ...#,.|-...-....
  2926. 2dbffca8 d4 fc bf 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 ...-..:X.E=X....
  2927. 2dbffcb8 e0 fc bf 2d c8 ee 39 58 ...-..9X
  2928.  
  2929. Found via previous frame's frame pointer
  2930.  
  2931.  
  2932. 7: tier0_s.dll + 0xeec8
  2933. eip: 0x5839eec8 esp: 0x2dbffcc0 ebp: 0x2dbffce0
  2934.  
  2935. 2dbffcc0 ec fc bf 2d b0 df 7e 77 b8 cc a5 23 2c e9 7c 2d ...-..~w...#,.|-
  2936. 2dbffcd0 c4 fc bf 2d 30 ff bf 2d c0 89 3c 58 00 00 00 00 ...-0..-..<X....
  2937. 2dbffce0 04 fd bf 2d 31 fd 39 58 ...-1.9X
  2938.  
  2939. Found via previous frame's frame pointer
  2940.  
  2941.  
  2942. 8: tier0_s.dll + 0xfd31
  2943. eip: 0x5839fd31 esp: 0x2dbffce8 ebp: 0x2dbffd04
  2944.  
  2945. 2dbffce8 ec fc bf 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 ...-.....;:X....
  2946. 2dbffcf8 00 00 00 00 10 fd bf 2d 01 00 00 00 3c ff bf 2d .......-....<..-
  2947. 2dbffd08 db 3c 3a 58 .<:X
  2948.  
  2949. Found via previous frame's frame pointer
  2950.  
  2951.  
  2952. 9: tier0_s.dll + 0x13cdb
  2953. eip: 0x583a3cdb esp: 0x2dbffd0c ebp: 0x2dbfff3c
  2954.  
  2955. 2dbffd0c 10 3b 3a 58 f0 00 50 1b 00 00 00 00 50 3b 3a 58 .;:X..P.....P;:X
  2956. 2dbffd1c 50 3b 3a 58 b8 cc a5 23 00 00 00 00 00 00 00 00 P;:X...#........
  2957. 2dbffd2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2958. 2dbffd3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2959. 2dbffd4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2960. 2dbffd5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2961. 2dbffd6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2962. 2dbffd7c 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  2963. 2dbffd8c 00 00 00 00 00 00 00 00 b8 cc a5 23 00 00 00 00 ...........#....
  2964. 2dbffd9c 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  2965. 2dbffdac 23 00 00 00 02 02 00 00 bc ff bf 2d 2b 00 00 00 #..........-+...
  2966. 2dbffdbc 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2967. 2dbffdcc 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  2968. 2dbffddc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2969. 2dbffdec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2970. 2dbffdfc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2971. 2dbffe0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2972. 2dbffe1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2973. 2dbffe2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2974. 2dbffe3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2975. 2dbffe4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2976. 2dbffe5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2977. 2dbffe6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2978. 2dbffe7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2979. 2dbffe8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2980. 2dbffe9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2981. 2dbffeac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2982. 2dbffebc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2983. 2dbffecc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2984. 2dbffedc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2985. 2dbffeec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2986. 2dbffefc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2987. 2dbfff0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  2988. 2dbfff1c 00 00 00 00 00 00 00 00 b8 cc a5 23 f0 00 50 1b ...........#..P.
  2989. 2dbfff2c 18 fd bf 2d 98 ff bf 2d 10 8a 3c 58 ff ff ff ff ...-...-..<X....
  2990. 2dbfff3c 4c ff bf 2d 29 fa 7e 77 L..-).~w
  2991.  
  2992. Found via previous frame's frame pointer
  2993.  
  2994.  
  2995. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  2996. eip: 0x777efa29 esp: 0x2dbfff44 ebp: 0x2dbfff4c
  2997.  
  2998. 2dbfff44 b8 cc a5 01 10 fa 7e 77 a8 ff bf 2d 9e 7a b4 77 ......~w...-.z.w
  2999.  
  3000. Found via previous frame's frame pointer
  3001.  
  3002.  
  3003. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  3004. eip: 0x77b47a9e esp: 0x2dbfff54 ebp: 0x2dbfffa8
  3005.  
  3006. 2dbfff54 b8 cc a5 23 f5 41 9f c7 00 00 00 00 00 00 00 00 ...#.A..........
  3007. 2dbfff64 b8 cc a5 23 00 00 00 00 00 00 00 00 00 00 00 00 ...#............
  3008. 2dbfff74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3009. 2dbfff84 00 00 00 00 00 00 00 00 00 00 00 00 58 ff bf 2d ............X..-
  3010. 2dbfff94 00 00 00 00 b0 ff bf 2d 40 ad b5 77 3d 76 9e 9d .......-@..w=v..
  3011. 2dbfffa4 00 00 00 00 b8 ff bf 2d 6e 7a b4 77 .......-nz.w
  3012.  
  3013. Found via call frame info
  3014.  
  3015.  
  3016. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  3017. eip: 0x77b47a6e esp: 0x2dbfffb0 ebp: 0x2dbfffb8
  3018.  
  3019. Found via call frame info
  3020.  
  3021.  
  3022. Thread 17:
  3023. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  3024. eip: 0x77b529fc esp: 0x2dc5f3fc ebp: 0x2dc5f46c ebx: 0x2b9fd0e0
  3025. esi: 0x00000000 edi: 0x00000aec eax: 0x00000000 ecx: 0x00000000
  3026. edx: 0x00000000 efl: 0x00000206
  3027.  
  3028. 77b529ec c2 0c 00 ret 0xc
  3029. 77b529ef 90 nop
  3030. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  3031. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  3032. 77b529fa ff d2 call edx
  3033. > 77b529fc c2 0c 00 ret 0xc
  3034. 77b529ff 90 nop
  3035. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  3036. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  3037. 77b52a0a ff d2 call edx
  3038. 77b52a0c c2 0c 00 ret 0xc
  3039.  
  3040. 2dc5f3fc a9 11 6c 77 ..lw
  3041.  
  3042. Found via instruction pointer in context
  3043.  
  3044.  
  3045. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  3046. eip: 0x776c11a9 esp: 0x2dc5f400 ebp: 0x2dc5f46c ebx: 0x2b9fd0e0
  3047.  
  3048. 2dc5f400 ec 0a 00 00 00 00 00 00 40 f4 c5 2d 81 35 0a 39 ........@..-.5.9
  3049. 2dc5f410 00 09 56 1b 40 09 56 1b e0 d0 9f 2b 24 00 00 00 ..V.@.V....+$...
  3050. 2dc5f420 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3051. 2dc5f430 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3052. 2dc5f440 60 da d9 ff ff ff ff ff 40 f4 c5 2d 00 00 00 00 `.......@..-....
  3053. 2dc5f450 ec 0a 00 00 00 09 56 1b 00 00 00 00 40 f6 c5 2d ......V.....@..-
  3054. 2dc5f460 70 07 6e 77 0d a0 b8 63 00 00 00 00 80 f4 c5 2d p.nw...c.......-
  3055. 2dc5f470 02 11 6c 77 ..lw
  3056.  
  3057. Found via call frame info
  3058.  
  3059.  
  3060. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  3061. eip: 0x776c1102 esp: 0x2dc5f474 ebp: 0x2dc5f480
  3062.  
  3063. 2dc5f474 ec 0a 00 00 fa 00 00 00 00 00 00 00 94 f5 c5 2d ...............-
  3064. 2dc5f484 98 3f 3a 58 .?:X
  3065.  
  3066. Found via call frame info
  3067.  
  3068.  
  3069. 3: tier0_s.dll + 0x13f98
  3070. eip: 0x583a3f98 esp: 0x2dc5f488 ebp: 0x2dc5f594
  3071.  
  3072. 2dc5f488 ec 0a 00 00 fa 00 00 00 d0 d1 9f 2b 00 00 00 00 ...........+....
  3073. 2dc5f498 fc f4 c5 2d e2 d8 bc 78 1f 00 00 00 04 00 00 00 ...-...x........
  3074. 2dc5f4a8 05 00 00 00 00 f0 fe 7f 3d 00 00 00 5f be b3 77 ........=..._..w
  3075. 2dc5f4b8 54 f5 c5 2d 58 f5 c5 2d 00 00 00 00 ff ff ff ff T..-X..-........
  3076. 2dc5f4c8 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 fe 7f ................
  3077. 2dc5f4d8 3d 00 00 00 5f be b3 77 7c f5 c5 2d b5 4a e5 c7 =..._..w|..-.J..
  3078. 2dc5f4e8 5c f5 c5 2d ec bc b3 77 ff ff ff ff 54 f5 c5 2d \..-...w....T..-
  3079. 2dc5f4f8 9b bd b3 77 98 07 62 1b 98 07 62 1b e0 d0 9f 2b ...w..b...b....+
  3080. 2dc5f508 00 00 00 00 4d 4b e5 c7 84 f5 c5 2d ec bc b3 77 ....MK.....-...w
  3081. 2dc5f518 68 4b 43 1b a0 18 42 1b 58 f5 c5 2d 50 f5 c5 2d hKC...B.X..-P..-
  3082. 2dc5f528 9e 51 3a 58 a0 18 42 1b 68 4b 43 1b 93 09 01 00 .Q:X..B.hKC.....
  3083. 2dc5f538 30 11 43 1b 92 09 01 00 e0 d0 9f 2b 98 18 42 1b 0.C........+..B.
  3084. 2dc5f548 30 11 43 1b 05 00 91 09 48 11 43 1b 70 18 42 1b 0.C.....H.C.p.B.
  3085. 2dc5f558 90 f5 c5 2d 88 f5 c5 2d 9e 51 3a 58 70 18 42 1b ...-...-.Q:Xp.B.
  3086. 2dc5f568 48 11 43 1b 88 08 01 00 28 0a 43 1b 87 08 01 00 H.C.....(.C.....
  3087. 2dc5f578 a0 1d a4 2b 68 18 42 1b 28 0a 43 1b 94 f5 c5 2d ...+h.B.(.C....-
  3088. 2dc5f588 a0 1d a4 2b 00 09 56 1b a3 a1 3a 58 0c f6 c5 2d ...+..V...:X...-
  3089. 2dc5f598 5a a2 bc 78 Z..x
  3090.  
  3091. Found via call frame info
  3092.  
  3093.  
  3094. 4: steamclient.dll + 0x94a25a
  3095. eip: 0x78bca25a esp: 0x2dc5f59c ebp: 0x2dc5f60c
  3096.  
  3097. 2dc5f59c fa 00 00 00 b0 df 7e 77 00 09 56 1b e0 e9 7d 2d ......~w..V...}-
  3098. 2dc5f5ac 24 4b 9c cb c3 f8 4f 3f 24 4b 9c cb c3 f8 4f 3f $K....O?$K....O?
  3099. 2dc5f5bc 96 f1 a5 a6 13 bf d8 3e 96 f1 a5 a6 13 bf d8 3e .......>.......>
  3100. 2dc5f5cc 6a 9b 0b 98 ff ff ff ff e0 d0 9f 2b 50 07 62 1b j..........+P.b.
  3101. 2dc5f5dc 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
  3102. 2dc5f5ec 00 00 00 00 00 00 00 00 a0 1d a4 2b 50 07 62 1b ...........+P.b.
  3103. 2dc5f5fc 01 00 00 00 00 09 56 1b 00 00 00 00 95 7c 9e 00 ......V......|..
  3104. 2dc5f60c 18 f6 c5 2d 1e 3b 3a 58 ...-.;:X
  3105.  
  3106. Found via previous frame's frame pointer
  3107.  
  3108.  
  3109. 5: tier0_s.dll + 0x13b1e
  3110. eip: 0x583a3b1e esp: 0x2dc5f614 ebp: 0x2dc5f618
  3111.  
  3112. 2dc5f614 84 f6 c5 2d 50 f6 c5 2d a6 f4 39 58 ...-P..-..9X
  3113.  
  3114. Found via previous frame's frame pointer
  3115.  
  3116.  
  3117. 6: tier0_s.dll + 0xf4a6
  3118. eip: 0x5839f4a6 esp: 0x2dc5f620 ebp: 0x2dc5f650
  3119.  
  3120. 2dc5f620 00 09 56 1b 98 f1 56 1d 45 f5 39 58 b0 df 7e 77 ..V...V.E.9X..~w
  3121. 2dc5f630 98 f1 56 1d e0 e9 7d 2d 2c f6 c5 2d 00 00 00 00 ..V...}-,..-....
  3122. 2dc5f640 6c f6 c5 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 l..-..:X.E=X....
  3123. 2dc5f650 78 f6 c5 2d c8 ee 39 58 x..-..9X
  3124.  
  3125. Found via previous frame's frame pointer
  3126.  
  3127.  
  3128. 7: tier0_s.dll + 0xeec8
  3129. eip: 0x5839eec8 esp: 0x2dc5f658 ebp: 0x2dc5f678
  3130.  
  3131. 2dc5f658 84 f6 c5 2d b0 df 7e 77 98 f1 56 1d e0 e9 7d 2d ...-..~w..V...}-
  3132. 2dc5f668 5c f6 c5 2d c8 f8 c5 2d c0 89 3c 58 00 00 00 00 \..-...-..<X....
  3133. 2dc5f678 9c f6 c5 2d 31 fd 39 58 ...-1.9X
  3134.  
  3135. Found via previous frame's frame pointer
  3136.  
  3137.  
  3138. 8: tier0_s.dll + 0xfd31
  3139. eip: 0x5839fd31 esp: 0x2dc5f680 ebp: 0x2dc5f69c
  3140.  
  3141. 2dc5f680 84 f6 c5 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 ...-.....;:X....
  3142. 2dc5f690 00 00 00 00 a8 f6 c5 2d 01 00 00 00 d4 f8 c5 2d .......-.......-
  3143. 2dc5f6a0 db 3c 3a 58 .<:X
  3144.  
  3145. Found via previous frame's frame pointer
  3146.  
  3147.  
  3148. 9: tier0_s.dll + 0x13cdb
  3149. eip: 0x583a3cdb esp: 0x2dc5f6a4 ebp: 0x2dc5f8d4
  3150.  
  3151. 2dc5f6a4 10 3b 3a 58 00 09 56 1b 00 00 00 00 50 3b 3a 58 .;:X..V.....P;:X
  3152. 2dc5f6b4 50 3b 3a 58 98 f1 56 1d 00 00 00 00 00 00 00 00 P;:X..V.........
  3153. 2dc5f6c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3154. 2dc5f6d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3155. 2dc5f6e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3156. 2dc5f6f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3157. 2dc5f704 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3158. 2dc5f714 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  3159. 2dc5f724 00 00 00 00 00 00 00 00 98 f1 56 1d 00 00 00 00 ..........V.....
  3160. 2dc5f734 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  3161. 2dc5f744 23 00 00 00 02 02 00 00 54 f9 c5 2d 2b 00 00 00 #.......T..-+...
  3162. 2dc5f754 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3163. 2dc5f764 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  3164. 2dc5f774 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3165. 2dc5f784 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3166. 2dc5f794 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3167. 2dc5f7a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3168. 2dc5f7b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3169. 2dc5f7c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3170. 2dc5f7d4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3171. 2dc5f7e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3172. 2dc5f7f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3173. 2dc5f804 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3174. 2dc5f814 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3175. 2dc5f824 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3176. 2dc5f834 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3177. 2dc5f844 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3178. 2dc5f854 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3179. 2dc5f864 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3180. 2dc5f874 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3181. 2dc5f884 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3182. 2dc5f894 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3183. 2dc5f8a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3184. 2dc5f8b4 00 00 00 00 00 00 00 00 98 f1 56 1d 00 09 56 1b ..........V...V.
  3185. 2dc5f8c4 b0 f6 c5 2d 30 f9 c5 2d 10 8a 3c 58 ff ff ff ff ...-0..-..<X....
  3186. 2dc5f8d4 e4 f8 c5 2d 29 fa 7e 77 ...-).~w
  3187.  
  3188. Found via previous frame's frame pointer
  3189.  
  3190.  
  3191. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  3192. eip: 0x777efa29 esp: 0x2dc5f8dc ebp: 0x2dc5f8e4
  3193.  
  3194. 2dc5f8dc 98 f1 56 01 10 fa 7e 77 40 f9 c5 2d 9e 7a b4 77 ..V...~w@..-.z.w
  3195.  
  3196. Found via previous frame's frame pointer
  3197.  
  3198.  
  3199. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  3200. eip: 0x77b47a9e esp: 0x2dc5f8ec ebp: 0x2dc5f940
  3201.  
  3202. 2dc5f8ec 98 f1 56 1d 1d 47 e5 c7 00 00 00 00 00 00 00 00 ..V..G..........
  3203. 2dc5f8fc 98 f1 56 1d 00 00 00 00 00 00 00 00 00 00 00 00 ..V.............
  3204. 2dc5f90c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3205. 2dc5f91c 00 00 00 00 00 00 00 00 00 00 00 00 f0 f8 c5 2d ...............-
  3206. 2dc5f92c 00 00 00 00 48 f9 c5 2d 40 ad b5 77 3d 76 9e 9d ....H..-@..w=v..
  3207. 2dc5f93c 00 00 00 00 50 f9 c5 2d 6e 7a b4 77 ....P..-nz.w
  3208.  
  3209. Found via call frame info
  3210.  
  3211.  
  3212. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  3213. eip: 0x77b47a6e esp: 0x2dc5f948 ebp: 0x2dc5f950
  3214.  
  3215. Found via call frame info
  3216.  
  3217.  
  3218. Thread 18:
  3219. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  3220. eip: 0x77b529fc esp: 0x2dedf88c ebp: 0x2dedf8fc ebx: 0x583ab470
  3221. esi: 0x00000000 edi: 0x000007cc eax: 0x00000000 ecx: 0x00000000
  3222. edx: 0x00000000 efl: 0x00000202
  3223.  
  3224. 77b529ec c2 0c 00 ret 0xc
  3225. 77b529ef 90 nop
  3226. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  3227. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  3228. 77b529fa ff d2 call edx
  3229. > 77b529fc c2 0c 00 ret 0xc
  3230. 77b529ff 90 nop
  3231. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  3232. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  3233. 77b52a0a ff d2 call edx
  3234. 77b52a0c c2 0c 00 ret 0xc
  3235.  
  3236. 2dedf88c a9 11 6c 77 ..lw
  3237.  
  3238. Found via instruction pointer in context
  3239.  
  3240.  
  3241. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  3242. eip: 0x776c11a9 esp: 0x2dedf890 ebp: 0x2dedf8fc ebx: 0x583ab470
  3243.  
  3244. 2dedf890 cc 07 00 00 00 00 00 00 d0 f8 ed 2d 11 39 22 39 ...........-.9"9
  3245. 2dedf8a0 80 b4 3a 58 a0 72 2f 79 70 b4 3a 58 24 00 00 00 ..:X.r/yp.:X$...
  3246. 2dedf8b0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3247. 2dedf8c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3248. 2dedf8d0 80 7b e1 ff ff ff ff ff d0 f8 ed 2d 00 00 00 00 .{.........-....
  3249. 2dedf8e0 cc 07 00 00 00 00 00 00 00 00 00 00 d0 fa ed 2d ...............-
  3250. 2dedf8f0 70 07 6e 77 0d a0 b8 63 00 00 00 00 10 f9 ed 2d p.nw...c.......-
  3251. 2dedf900 02 11 6c 77 ..lw
  3252.  
  3253. Found via call frame info
  3254.  
  3255.  
  3256. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  3257. eip: 0x776c1102 esp: 0x2dedf904 ebp: 0x2dedf910
  3258.  
  3259. 2dedf904 cc 07 00 00 c8 00 00 00 00 00 00 00 24 fa ed 2d ............$..-
  3260. 2dedf914 98 3f 3a 58 .?:X
  3261.  
  3262. Found via call frame info
  3263.  
  3264.  
  3265. 3: tier0_s.dll + 0x13f98
  3266. eip: 0x583a3f98 esp: 0x2dedf918 ebp: 0x2dedfa24
  3267.  
  3268. 2dedf918 cc 07 00 00 c8 00 00 00 f8 71 2f 79 00 00 00 00 .........q/y....
  3269. 2dedf928 ac d7 7a 00 00 00 00 00 80 25 aa 2b 80 25 aa 2b ..z......%.+.%.+
  3270. 2dedf938 1f 20 01 00 58 f9 ed 2d 00 00 00 00 80 07 a7 2b . ..X..-.......+
  3271. 2dedf948 00 00 00 00 44 79 b6 77 80 07 a7 2b 00 00 73 00 ....Dy.w...+..s.
  3272. 2dedf958 00 00 00 00 c8 f9 ed 2d c5 ac 62 74 30 08 a7 2b .......-..bt0..+
  3273. 2dedf968 f2 7c 75 23 0c 0d 00 00 64 00 00 00 44 79 b6 77 .|u#....d...Dy.w
  3274. 2dedf978 70 58 73 00 00 00 73 00 00 00 00 00 02 00 14 00 pXs...s.........
  3275. 2dedf988 b8 e8 a6 2b 80 07 a7 2b 78 21 a6 23 00 00 73 00 ...+...+x!.#..s.
  3276. 2dedf998 64 00 00 00 00 00 00 00 40 ba a6 2b 04 00 00 00 d.......@..+....
  3277. 2dedf9a8 00 00 00 00 0d 00 06 00 80 72 2f 79 f8 71 2f 79 .........r/y.q/y
  3278. 2dedf9b8 40 01 43 1b 00 00 73 00 88 72 2f 79 e0 f9 ed 2d @.C...s..r/y...-
  3279. 2dedf9c8 4f 04 01 00 4f 04 01 00 18 fa ed 2d e7 51 3a 58 O...O......-.Q:X
  3280. 2dedf9d8 f0 4f 3a 58 04 00 00 00 e7 51 3a 58 80 72 2f 79 .O:X.....Q:X.r/y
  3281. 2dedf9e8 04 00 00 00 01 00 00 00 98 fa ed 2d 80 b4 3a 58 ...........-..:X
  3282. 2dedf9f8 f8 71 2f 79 70 b4 3a 58 24 fa ed 2d e9 55 cf 78 .q/yp.:X$..-.U.x
  3283. 2dedfa08 f8 71 2f 79 60 72 2f 79 e9 55 cf 78 24 fa ed 2d .q/y`r/y.U.x$..-
  3284. 2dedfa18 f8 71 2f 79 80 b4 3a 58 a3 a1 3a 58 9c fa ed 2d .q/y..:X..:X...-
  3285. 2dedfa28 01 c2 c7 78 ...x
  3286.  
  3287. Found via call frame info
  3288.  
  3289.  
  3290. 4: steamclient.dll + 0x9fc201
  3291. eip: 0x78c7c201 esp: 0x2dedfa2c ebp: 0x2dedfa9c
  3292.  
  3293. 2dedfa2c c8 00 00 00 b0 df 7e 77 c4 eb 7d 2d f8 71 2f 79 ......~w..}-.q/y
  3294. 2dedfa3c 00 00 00 00 00 00 00 00 00 00 00 00 24 00 00 00 ............$...
  3295. 2dedfa4c f0 00 00 00 c0 12 61 1b 00 00 00 00 70 00 00 00 ......a.....p...
  3296. 2dedfa5c c0 a0 3a 58 f8 71 2f 79 00 00 00 00 80 72 2f 79 ..:X.q/y.....r/y
  3297. 2dedfa6c c0 51 3a 58 50 3f 3a 58 20 05 a4 2b 00 00 00 00 .Q:XP?:X ..+....
  3298. 2dedfa7c b0 df 92 2d 8c 5d c0 77 00 50 45 00 00 00 00 00 ...-.].w.PE.....
  3299. 2dedfa8c 00 00 00 00 00 00 00 00 80 b4 3a 58 00 00 00 00 ..........:X....
  3300. 2dedfa9c a8 fa ed 2d 1e 3b 3a 58 ...-.;:X
  3301.  
  3302. Found via previous frame's frame pointer
  3303.  
  3304.  
  3305. 5: tier0_s.dll + 0x13b1e
  3306. eip: 0x583a3b1e esp: 0x2dedfaa4 ebp: 0x2dedfaa8
  3307.  
  3308. 2dedfaa4 14 fb ed 2d e0 fa ed 2d a6 f4 39 58 ...-...-..9X
  3309.  
  3310. Found via previous frame's frame pointer
  3311.  
  3312.  
  3313. 6: tier0_s.dll + 0xf4a6
  3314. eip: 0x5839f4a6 esp: 0x2dedfab0 ebp: 0x2dedfae0
  3315.  
  3316. 2dedfab0 f8 71 2f 79 50 d7 a5 23 45 f5 39 58 b0 df 7e 77 .q/yP..#E.9X..~w
  3317. 2dedfac0 50 d7 a5 23 c4 eb 7d 2d bc fa ed 2d 00 00 00 00 P..#..}-...-....
  3318. 2dedfad0 fc fa ed 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 ...-..:X.E=X....
  3319. 2dedfae0 08 fb ed 2d c8 ee 39 58 ...-..9X
  3320.  
  3321. Found via previous frame's frame pointer
  3322.  
  3323.  
  3324. 7: tier0_s.dll + 0xeec8
  3325. eip: 0x5839eec8 esp: 0x2dedfae8 ebp: 0x2dedfb08
  3326.  
  3327. 2dedfae8 14 fb ed 2d b0 df 7e 77 50 d7 a5 23 c4 eb 7d 2d ...-..~wP..#..}-
  3328. 2dedfaf8 ec fa ed 2d 58 fd ed 2d c0 89 3c 58 00 00 00 00 ...-X..-..<X....
  3329. 2dedfb08 2c fb ed 2d 31 fd 39 58 ,..-1.9X
  3330.  
  3331. Found via previous frame's frame pointer
  3332.  
  3333.  
  3334. 8: tier0_s.dll + 0xfd31
  3335. eip: 0x5839fd31 esp: 0x2dedfb10 ebp: 0x2dedfb2c
  3336.  
  3337. 2dedfb10 14 fb ed 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 ...-.....;:X....
  3338. 2dedfb20 00 00 00 00 38 fb ed 2d 01 00 00 00 64 fd ed 2d ....8..-....d..-
  3339. 2dedfb30 db 3c 3a 58 .<:X
  3340.  
  3341. Found via previous frame's frame pointer
  3342.  
  3343.  
  3344. 9: tier0_s.dll + 0x13cdb
  3345. eip: 0x583a3cdb esp: 0x2dedfb34 ebp: 0x2dedfd64
  3346.  
  3347. 2dedfb34 10 3b 3a 58 f8 71 2f 79 00 00 00 00 50 3b 3a 58 .;:X.q/y....P;:X
  3348. 2dedfb44 50 3b 3a 58 50 d7 a5 23 00 00 00 00 00 00 00 00 P;:XP..#........
  3349. 2dedfb54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3350. 2dedfb64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3351. 2dedfb74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3352. 2dedfb84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3353. 2dedfb94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3354. 2dedfba4 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  3355. 2dedfbb4 00 00 00 00 00 00 00 00 50 d7 a5 23 00 00 00 00 ........P..#....
  3356. 2dedfbc4 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  3357. 2dedfbd4 23 00 00 00 02 02 00 00 e4 fd ed 2d 2b 00 00 00 #..........-+...
  3358. 2dedfbe4 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3359. 2dedfbf4 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  3360. 2dedfc04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3361. 2dedfc14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3362. 2dedfc24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3363. 2dedfc34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3364. 2dedfc44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3365. 2dedfc54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3366. 2dedfc64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3367. 2dedfc74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3368. 2dedfc84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3369. 2dedfc94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3370. 2dedfca4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3371. 2dedfcb4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3372. 2dedfcc4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3373. 2dedfcd4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3374. 2dedfce4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3375. 2dedfcf4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3376. 2dedfd04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3377. 2dedfd14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3378. 2dedfd24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3379. 2dedfd34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3380. 2dedfd44 00 00 00 00 00 00 00 00 50 d7 a5 23 f8 71 2f 79 ........P..#.q/y
  3381. 2dedfd54 40 fb ed 2d c0 fd ed 2d 10 8a 3c 58 ff ff ff ff @..-...-..<X....
  3382. 2dedfd64 74 fd ed 2d 29 fa 7e 77 t..-).~w
  3383.  
  3384. Found via previous frame's frame pointer
  3385.  
  3386.  
  3387. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  3388. eip: 0x777efa29 esp: 0x2dedfd6c ebp: 0x2dedfd74
  3389.  
  3390. 2dedfd6c 50 d7 a5 01 10 fa 7e 77 d0 fd ed 2d 9e 7a b4 77 P.....~w...-.z.w
  3391.  
  3392. Found via previous frame's frame pointer
  3393.  
  3394.  
  3395. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  3396. eip: 0x77b47a9e esp: 0x2dedfd7c ebp: 0x2dedfdd0
  3397.  
  3398. 2dedfd7c 50 d7 a5 23 8d 43 cd c7 00 00 00 00 00 00 00 00 P..#.C..........
  3399. 2dedfd8c 50 d7 a5 23 00 00 00 00 00 00 00 00 00 00 00 00 P..#............
  3400. 2dedfd9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3401. 2dedfdac 00 00 00 00 00 00 00 00 00 00 00 00 80 fd ed 2d ...............-
  3402. 2dedfdbc 00 00 00 00 d8 fd ed 2d 40 ad b5 77 3d 76 9e 9d .......-@..w=v..
  3403. 2dedfdcc 00 00 00 00 e0 fd ed 2d 6e 7a b4 77 .......-nz.w
  3404.  
  3405. Found via call frame info
  3406.  
  3407.  
  3408. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  3409. eip: 0x77b47a6e esp: 0x2dedfdd8 ebp: 0x2dedfde0
  3410.  
  3411. Found via call frame info
  3412.  
  3413.  
  3414. Thread 19:
  3415. 0: ntdll.dll!NtWaitForSingleObject + 0xc
  3416. eip: 0x77b529fc esp: 0x2dfdfa38 ebp: 0x2dfdfaa8 ebx: 0x1b5b0a00
  3417. esi: 0x00000000 edi: 0x000009c4 eax: 0x77398e80 ecx: 0x00000000
  3418. edx: 0x00000000 efl: 0x00000202
  3419.  
  3420. 77b529ec c2 0c 00 ret 0xc
  3421. 77b529ef 90 nop
  3422. 77b529f0 b8 04 00 0d 00 mov eax, 0xd0004
  3423. 77b529f5 ba 70 88 b6 77 mov edx, 0x77b68870
  3424. 77b529fa ff d2 call edx
  3425. > 77b529fc c2 0c 00 ret 0xc
  3426. 77b529ff 90 nop
  3427. 77b52a00 b8 05 00 00 00 mov eax, 0x5
  3428. 77b52a05 ba 70 88 b6 77 mov edx, 0x77b68870
  3429. 77b52a0a ff d2 call edx
  3430. 77b52a0c c2 0c 00 ret 0xc
  3431.  
  3432. 2dfdfa38 a9 11 6c 77 ..lw
  3433.  
  3434. Found via instruction pointer in context
  3435.  
  3436.  
  3437. 1: KERNELBASE.dll!WaitForSingleObjectEx + 0x99
  3438. eip: 0x776c11a9 esp: 0x2dfdfa3c ebp: 0x2dfdfaa8 ebx: 0x1b5b0a00
  3439.  
  3440. 2dfdfa3c c4 09 00 00 00 00 00 00 7c fa fd 2d 45 3b 32 39 ........|..-E;29
  3441. 2dfdfa4c a0 00 50 1b e0 00 50 1b 00 0a 5b 1b 24 00 00 00 ..P...P...[.$...
  3442. 2dfdfa5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3443. 2dfdfa6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3444. 2dfdfa7c 60 da d9 ff ff ff ff ff 7c fa fd 2d 00 00 00 00 `.......|..-....
  3445. 2dfdfa8c c4 09 00 00 00 00 00 00 00 00 00 00 7c fc fd 2d ............|..-
  3446. 2dfdfa9c 70 07 6e 77 0d a0 b8 63 00 00 00 00 bc fa fd 2d p.nw...c.......-
  3447. 2dfdfaac 02 11 6c 77 ..lw
  3448.  
  3449. Found via call frame info
  3450.  
  3451.  
  3452. 2: KERNELBASE.dll!WaitForSingleObject + 0x12
  3453. eip: 0x776c1102 esp: 0x2dfdfab0 ebp: 0x2dfdfabc
  3454.  
  3455. 2dfdfab0 c4 09 00 00 fa 00 00 00 00 00 00 00 d0 fb fd 2d ...............-
  3456. 2dfdfac0 98 3f 3a 58 .?:X
  3457.  
  3458. Found via call frame info
  3459.  
  3460.  
  3461. 3: tier0_s.dll + 0x13f98
  3462. eip: 0x583a3f98 esp: 0x2dfdfac4 ebp: 0x2dfdfbd0
  3463.  
  3464. 2dfdfac4 c4 09 00 00 fa 00 00 00 f0 0a 5b 1b 00 00 00 00 ..........[.....
  3465. 2dfdfad4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3466. 2dfdfae4 00 00 00 00 00 f0 fe 7f 3d 00 00 00 5f be b3 77 ........=..._..w
  3467. 2dfdfaf4 90 fb fd 2d 94 fb fd 2d 00 00 00 00 ff ff ff ff ...-...-........
  3468. 2dfdfb04 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 fe 7f ................
  3469. 2dfdfb14 3d 00 00 00 5f be b3 77 b8 fb fd 2d 79 45 dd c7 =..._..w...-yE..
  3470. 2dfdfb24 98 fb fd 2d ec bc b3 77 ff ff ff ff 90 fb fd 2d ...-...w.......-
  3471. 2dfdfb34 9b bd b3 77 48 4f 4c 1b 48 4f 4c 1b 00 0a 5b 1b ...wHOL.HOL...[.
  3472. 2dfdfb44 00 00 00 00 11 45 dd c7 c0 fb fd 2d 18 32 43 1b .....E.....-.2C.
  3473. 2dfdfb54 00 19 42 1b 94 fb fd 2d 88 fb fd 2d 9e 51 3a 58 ..B....-...-.Q:X
  3474. 2dfdfb64 00 19 42 1b 18 32 43 1b bb 05 01 00 f8 21 43 1b ..B..2C......!C.
  3475. 2dfdfb74 ba 05 01 00 00 0a 5b 1b f8 18 42 1b f8 21 43 1b ......[...B..!C.
  3476. 2dfdfb84 18 32 43 1b 48 05 43 1b 70 1e 42 1b cc fb fd 2d .2C.H.C.p.B....-
  3477. 2dfdfb94 c0 fb fd 2d 9e 51 3a 58 70 1e 42 1b 48 05 43 1b ...-.Q:Xp.B.H.C.
  3478. 2dfdfba4 4b 05 01 00 70 22 43 1b 4a 05 01 00 a0 00 50 1b K...p"C.J.....P.
  3479. 2dfdfbb4 f8 15 a4 2b 70 22 43 1b 48 05 43 1b d0 fb fd 2d ...+p"C.H.C....-
  3480. 2dfdfbc4 f8 15 a4 2b a0 00 50 1b a3 a1 3a 58 48 fc fd 2d ...+..P...:XH..-
  3481. 2dfdfbd4 5a a2 bc 78 Z..x
  3482.  
  3483. Found via call frame info
  3484.  
  3485.  
  3486. 4: steamclient.dll + 0x94a25a
  3487. eip: 0x78bca25a esp: 0x2dfdfbd8 ebp: 0x2dfdfc48
  3488.  
  3489. 2dfdfbd8 fa 00 00 00 b0 df 7e 77 a0 00 50 1b 60 eb 7d 2d ......~w..P.`.}-
  3490. 2dfdfbe8 b7 5f 3e 59 31 5c dd 3e b7 5f 3e 59 31 5c dd 3e ._>Y1\.>._>Y1\.>
  3491. 2dfdfbf8 b7 5f 3e 59 31 5c dd 3e b7 5f 3e 59 31 5c dd 3e ._>Y1\.>._>Y1\.>
  3492. 2dfdfc08 13 da 8b e2 ff ff ff ff 00 0a 5b 1b 00 4f 4c 1b ..........[..OL.
  3493. 2dfdfc18 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
  3494. 2dfdfc28 00 00 00 00 00 00 00 00 f8 15 a4 2b 00 4f 4c 1b ...........+.OL.
  3495. 2dfdfc38 01 00 00 00 a0 00 50 1b 00 00 00 00 95 7c 9e 00 ......P......|..
  3496. 2dfdfc48 54 fc fd 2d 1e 3b 3a 58 T..-.;:X
  3497.  
  3498. Found via previous frame's frame pointer
  3499.  
  3500.  
  3501. 5: tier0_s.dll + 0x13b1e
  3502. eip: 0x583a3b1e esp: 0x2dfdfc50 ebp: 0x2dfdfc54
  3503.  
  3504. 2dfdfc50 c0 fc fd 2d 8c fc fd 2d a6 f4 39 58 ...-...-..9X
  3505.  
  3506. Found via previous frame's frame pointer
  3507.  
  3508.  
  3509. 6: tier0_s.dll + 0xf4a6
  3510. eip: 0x5839f4a6 esp: 0x2dfdfc5c ebp: 0x2dfdfc8c
  3511.  
  3512. 2dfdfc5c a0 00 50 1b 08 56 7b 00 45 f5 39 58 b0 df 7e 77 ..P..V{.E.9X..~w
  3513. 2dfdfc6c 08 56 7b 00 60 eb 7d 2d 68 fc fd 2d 00 00 00 00 .V{.`.}-h..-....
  3514. 2dfdfc7c a8 fc fd 2d 00 c9 3a 58 c0 45 3d 58 00 00 00 00 ...-..:X.E=X....
  3515. 2dfdfc8c b4 fc fd 2d c8 ee 39 58 ...-..9X
  3516.  
  3517. Found via previous frame's frame pointer
  3518.  
  3519.  
  3520. 7: tier0_s.dll + 0xeec8
  3521. eip: 0x5839eec8 esp: 0x2dfdfc94 ebp: 0x2dfdfcb4
  3522.  
  3523. 2dfdfc94 c0 fc fd 2d b0 df 7e 77 08 56 7b 00 60 eb 7d 2d ...-..~w.V{.`.}-
  3524. 2dfdfca4 98 fc fd 2d 04 ff fd 2d c0 89 3c 58 00 00 00 00 ...-...-..<X....
  3525. 2dfdfcb4 d8 fc fd 2d 31 fd 39 58 ...-1.9X
  3526.  
  3527. Found via previous frame's frame pointer
  3528.  
  3529.  
  3530. 8: tier0_s.dll + 0xfd31
  3531. eip: 0x5839fd31 esp: 0x2dfdfcbc ebp: 0x2dfdfcd8
  3532.  
  3533. 2dfdfcbc c0 fc fd 2d 03 00 00 00 10 3b 3a 58 00 00 00 00 ...-.....;:X....
  3534. 2dfdfccc 00 00 00 00 e4 fc fd 2d 01 00 00 00 10 ff fd 2d .......-.......-
  3535. 2dfdfcdc db 3c 3a 58 .<:X
  3536.  
  3537. Found via previous frame's frame pointer
  3538.  
  3539.  
  3540. 9: tier0_s.dll + 0x13cdb
  3541. eip: 0x583a3cdb esp: 0x2dfdfce0 ebp: 0x2dfdff10
  3542.  
  3543. 2dfdfce0 10 3b 3a 58 a0 00 50 1b 00 00 00 00 50 3b 3a 58 .;:X..P.....P;:X
  3544. 2dfdfcf0 50 3b 3a 58 08 56 7b 00 00 00 00 00 00 00 00 00 P;:X.V{.........
  3545. 2dfdfd00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3546. 2dfdfd10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3547. 2dfdfd20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3548. 2dfdfd30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3549. 2dfdfd40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3550. 2dfdfd50 2b 00 00 00 53 00 00 00 2b 00 00 00 2b 00 00 00 +...S...+...+...
  3551. 2dfdfd60 00 00 00 00 00 00 00 00 08 56 7b 00 00 00 00 00 .........V{.....
  3552. 2dfdfd70 00 00 00 00 50 3b 3a 58 00 00 00 00 90 4f b5 77 ....P;:X.....O.w
  3553. 2dfdfd80 23 00 00 00 02 02 00 00 90 ff fd 2d 2b 00 00 00 #..........-+...
  3554. 2dfdfd90 7f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3555. 2dfdfda0 00 00 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  3556. 2dfdfdb0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3557. 2dfdfdc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3558. 2dfdfdd0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3559. 2dfdfde0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3560. 2dfdfdf0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3561. 2dfdfe00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3562. 2dfdfe10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3563. 2dfdfe20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3564. 2dfdfe30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3565. 2dfdfe40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3566. 2dfdfe50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3567. 2dfdfe60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3568. 2dfdfe70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3569. 2dfdfe80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3570. 2dfdfe90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3571. 2dfdfea0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3572. 2dfdfeb0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3573. 2dfdfec0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3574. 2dfdfed0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3575. 2dfdfee0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3576. 2dfdfef0 00 00 00 00 00 00 00 00 08 56 7b 00 a0 00 50 1b .........V{...P.
  3577. 2dfdff00 ec fc fd 2d 6c ff fd 2d 10 8a 3c 58 ff ff ff ff ...-l..-..<X....
  3578. 2dfdff10 20 ff fd 2d 29 fa 7e 77 ..-).~w
  3579.  
  3580. Found via previous frame's frame pointer
  3581.  
  3582.  
  3583. 10: kernel32.dll!BaseThreadInitThunk + 0x19
  3584. eip: 0x777efa29 esp: 0x2dfdff18 ebp: 0x2dfdff20
  3585.  
  3586. 2dfdff18 08 56 7b 01 10 fa 7e 77 7c ff fd 2d 9e 7a b4 77 .V{...~w|..-.z.w
  3587.  
  3588. Found via previous frame's frame pointer
  3589.  
  3590.  
  3591. 11: ntdll.dll!__RtlUserThreadStart + 0x2f
  3592. eip: 0x77b47a9e esp: 0x2dfdff28 ebp: 0x2dfdff7c
  3593.  
  3594. 2dfdff28 08 56 7b 00 21 41 dd c7 00 00 00 00 00 00 00 00 .V{.!A..........
  3595. 2dfdff38 08 56 7b 00 00 00 00 00 00 00 00 00 00 00 00 00 .V{.............
  3596. 2dfdff48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3597. 2dfdff58 00 00 00 00 00 00 00 00 00 00 00 00 2c ff fd 2d ............,..-
  3598. 2dfdff68 00 00 00 00 84 ff fd 2d 40 ad b5 77 3d 76 9e 9d .......-@..w=v..
  3599. 2dfdff78 00 00 00 00 8c ff fd 2d 6e 7a b4 77 .......-nz.w
  3600.  
  3601. Found via call frame info
  3602.  
  3603.  
  3604. 12: ntdll.dll!_RtlUserThreadStart + 0x1b
  3605. eip: 0x77b47a6e esp: 0x2dfdff84 ebp: 0x2dfdff8c
  3606.  
  3607. Found via call frame info
  3608.  
  3609.  
  3610. Thread 20:
  3611. 0: ntdll.dll!ZwWaitForWorkViaWorkerFactory + 0xc
  3612. eip: 0x77b5470c esp: 0x2cf6f5f0 ebp: 0x2cf6f7ac ebx: 0x00771078
  3613. esi: 0x00771078 edi: 0x23e42ea0 eax: 0x00000103 ecx: 0x00000000
  3614. edx: 0x00000000 efl: 0x00000216
  3615.  
  3616. 77b546fc c2 10 00 ret 0x10
  3617. 77b546ff 90 nop
  3618. 77b54700 b8 d3 01 00 00 mov eax, 0x1d3
  3619. 77b54705 ba 70 88 b6 77 mov edx, 0x77b68870
  3620. 77b5470a ff d2 call edx
  3621. > 77b5470c c2 14 00 ret 0x14
  3622. 77b5470f 90 nop
  3623. 77b54710 b8 d4 01 03 00 mov eax, 0x301d4
  3624. 77b54715 ba 70 88 b6 77 mov edx, 0x77b68870
  3625. 77b5471a ff d2 call edx
  3626. 77b5471c c2 04 00 ret 0x4
  3627.  
  3628. 2cf6f5f0 a0 5b b1 77 .[.w
  3629.  
  3630. Found via instruction pointer in context
  3631.  
  3632.  
  3633. 1: ntdll.dll!TppWorkerThread + 0x2a0
  3634. eip: 0x77b15ba0 esp: 0x2cf6f5f4 ebp: 0x2cf6f7ac ebx: 0x00771078
  3635.  
  3636. 2cf6f5f4 d0 06 00 00 b8 0e 77 00 10 00 00 00 84 f6 f6 2c ......w........,
  3637. 2cf6f604 50 f7 f6 2c f1 49 d6 c6 00 59 b1 77 00 59 b1 77 P..,.I...Y.w.Y.w
  3638. 2cf6f614 a0 2e e4 23 90 4f b5 77 23 00 00 00 70 ae 58 1d ...#.O.w#...p.X.
  3639. 2cf6f624 d0 06 00 00 00 00 30 00 d0 06 00 00 00 00 00 00 ......0.........
  3640. 2cf6f634 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3641. 2cf6f644 00 00 00 00 0b 00 00 00 a8 2e e4 23 00 00 00 00 ...........#....
  3642. 2cf6f654 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3643. 2cf6f664 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 00 ................
  3644. 2cf6f674 00 00 00 00 00 00 00 00 0b 00 00 00 d8 8f 91 23 ...............#
  3645. 2cf6f684 00 00 00 00 00 00 00 00 00 50 45 00 b8 0e 77 00 .........PE...w.
  3646. 2cf6f694 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 ................
  3647. 2cf6f6a4 00 00 00 00 00 00 00 00 a0 2e e4 23 00 00 00 00 ...........#....
  3648. 2cf6f6b4 01 01 01 01 00 00 01 01 e8 f8 e4 5b 54 52 45 00 ...........[TRE.
  3649. 2cf6f6c4 d8 2e e4 23 d8 2e e4 23 00 00 00 00 78 54 00 00 ...#...#....xT..
  3650. 2cf6f6d4 a0 2e e4 23 00 00 00 00 00 00 00 00 00 00 00 00 ...#............
  3651. 2cf6f6e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3652. 2cf6f6f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3653. 2cf6f704 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3654. 2cf6f714 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3655. 2cf6f724 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3656. 2cf6f734 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3657. 2cf6f744 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3658. 2cf6f754 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3659. 2cf6f764 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3660. 2cf6f774 00 00 00 00 00 00 00 00 00 00 00 00 78 10 77 00 ............x.w.
  3661. 2cf6f784 00 00 00 00 00 00 00 00 00 00 00 00 f1 49 d6 c6 .............I..
  3662. 2cf6f794 08 f6 f6 2c 00 00 00 00 08 f8 f6 2c 40 ad b5 77 ...,.......,@..w
  3663. 2cf6f7a4 15 03 9e 9d 05 00 00 00 bc f7 f6 2c 29 fa 7e 77 ...........,).~w
  3664.  
  3665. Found via call frame info
  3666.  
  3667.  
  3668. 2: kernel32.dll!BaseThreadInitThunk + 0x19
  3669. eip: 0x777efa29 esp: 0x2cf6f7b4 ebp: 0x2cf6f7bc
  3670.  
  3671. 2cf6f7b4 a0 2e e4 23 10 fa 7e 77 18 f8 f6 2c 9e 7a b4 77 ...#..~w...,.z.w
  3672.  
  3673. Found via call frame info
  3674.  
  3675.  
  3676. 3: ntdll.dll!__RtlUserThreadStart + 0x2f
  3677. eip: 0x77b47a9e esp: 0x2cf6f7c4 ebp: 0x2cf6f818
  3678.  
  3679. 2cf6f7c4 a0 2e e4 23 45 46 d6 c6 00 00 00 00 00 00 00 00 ...#EF..........
  3680. 2cf6f7d4 a0 2e e4 23 00 00 00 00 00 00 00 00 00 00 00 00 ...#............
  3681. 2cf6f7e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3682. 2cf6f7f4 00 00 00 00 00 00 00 00 00 00 00 00 c8 f7 f6 2c ...............,
  3683. 2cf6f804 00 00 00 00 20 f8 f6 2c 40 ad b5 77 3d 76 9e 9d .... ..,@..w=v..
  3684. 2cf6f814 00 00 00 00 28 f8 f6 2c 6e 7a b4 77 ....(..,nz.w
  3685.  
  3686. Found via call frame info
  3687.  
  3688.  
  3689. 4: ntdll.dll!_RtlUserThreadStart + 0x1b
  3690. eip: 0x77b47a6e esp: 0x2cf6f820 ebp: 0x2cf6f828
  3691.  
  3692. Found via call frame info
  3693.  
  3694.  
  3695. Thread 21:
  3696. 0: ntdll.dll!NtWaitForMultipleObjects + 0xc
  3697. eip: 0x77b52f8c esp: 0x5ba0f890 ebp: 0x5ba0fa20 ebx: 0x00000000
  3698. esi: 0x00000001 edi: 0x00000001 eax: 0x00000000 ecx: 0x00000000
  3699. edx: 0x00000000 efl: 0x00000216
  3700.  
  3701. 77b52f7c c2 04 00 ret 0x4
  3702. 77b52f7f 90 nop
  3703. 77b52f80 b8 5b 00 1d 00 mov eax, 0x1d005b
  3704. 77b52f85 ba 70 88 b6 77 mov edx, 0x77b68870
  3705. 77b52f8a ff d2 call edx
  3706. > 77b52f8c c2 14 00 ret 0x14
  3707. 77b52f8f 90 nop
  3708. 77b52f90 b8 5c 00 00 00 mov eax, 0x5c
  3709. 77b52f95 ba 70 88 b6 77 mov edx, 0x77b68870
  3710. 77b52f9a ff d2 call edx
  3711. 77b52f9c c2 10 00 ret 0x10
  3712.  
  3713. 5ba0f890 53 b2 6c 77 S.lw
  3714.  
  3715. Found via instruction pointer in context
  3716.  
  3717.  
  3718. 1: KERNELBASE.dll!WaitForMultipleObjectsEx + 0x103
  3719. eip: 0x776cb253 esp: 0x5ba0f894 ebp: 0x5ba0fa20 ebx: 0x00000000
  3720.  
  3721. 5ba0f894 01 00 00 00 58 fa a0 5b 01 00 00 00 00 00 00 00 ....X..[........
  3722. 5ba0f8a4 00 00 00 00 cd 3b 6f 4f 00 00 00 00 00 00 00 00 .....;oO........
  3723. 5ba0f8b4 84 fb a0 5b 00 00 00 00 24 00 00 00 01 00 00 00 ...[....$.......
  3724. 5ba0f8c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3725. 5ba0f8d4 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ................
  3726. 5ba0f8e4 00 50 45 00 68 df 4c 1d 44 79 b6 77 00 00 00 00 .PE.h.L.Dy.w....
  3727. 5ba0f8f4 58 fa a0 5b 00 00 00 00 00 00 00 00 00 00 00 00 X..[............
  3728. 5ba0f904 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3729. 5ba0f914 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3730. 5ba0f924 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3731. 5ba0f934 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3732. 5ba0f944 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3733. 5ba0f954 00 00 00 00 88 2a 53 76 14 f6 a0 5b 20 f7 a0 5b .....*Sv...[ ..[
  3734. 5ba0f964 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3735. 5ba0f974 00 00 00 00 00 00 00 00 00 00 73 00 02 00 00 00 ..........s.....
  3736. 5ba0f984 63 3c 56 76 68 f9 a0 5b fe 51 02 76 00 00 00 00 c<Vvh..[.Q.v....
  3737. 5ba0f994 a0 3b 56 76 64 00 00 00 44 79 b6 77 38 bc c4 2b .;Vvd...Dy.w8..+
  3738. 5ba0f9a4 00 00 73 00 00 00 00 00 13 00 15 00 20 f3 c3 2b ..s......... ..+
  3739. 5ba0f9b4 c0 f5 c3 2b f0 14 81 00 89 ab b3 77 64 00 00 00 ...+.......wd...
  3740. 5ba0f9c4 00 00 00 00 00 00 00 00 00 00 00 00 cc 44 b5 77 .............D.w
  3741. 5ba0f9d4 9d 47 80 b1 e0 0e 00 00 18 fa a0 5b ec f0 6c 77 .G.........[..lw
  3742. 5ba0f9e4 00 00 00 00 00 00 00 00 00 00 00 00 84 fb a0 5b ...............[
  3743. 5ba0f9f4 00 ba 3c dc ff ff ff ff 00 00 00 00 00 00 00 00 ..<.............
  3744. 5ba0fa04 cd 3b 6f 4f 00 00 00 00 a0 0f 00 00 24 fc a0 5b .;oO........$..[
  3745. 5ba0fa14 70 07 6e 77 75 a5 b8 63 00 00 00 00 5c fb a0 5b p.nwu..c....\..[
  3746. 5ba0fa24 ec 07 09 76 ...v
  3747.  
  3748. Found via call frame info
  3749.  
  3750.  
  3751. 2: combase.dll!WaitCoalesced(void *,unsigned int,void * const *,unsigned long,unsigned long,int,unsigned long *) [ coalescedwait.cxx:70 + 0x25 ]
  3752. eip: 0x760907ec esp: 0x5ba0fa28 ebp: 0x5ba0fb5c
  3753.  
  3754. 5ba0fa28 01 00 00 00 58 fa a0 5b 00 00 00 00 ff ff ff ff ....X..[........
  3755. 5ba0fa38 00 00 00 00 00 00 00 00 e0 0e 00 00 00 00 00 00 ................
  3756. 5ba0fa48 00 ba 3c dc ff ff ff ff 00 00 00 00 e0 0e 00 00 ..<.............
  3757. 5ba0fa58 e0 0e 00 00 00 00 00 00 80 1f 00 00 ff ff 02 00 ................
  3758. 5ba0fa68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3759. 5ba0fa78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3760. 5ba0fa88 00 00 00 00 ac fa a0 5b 58 41 0d 76 9c ff 21 76 .......[XA.v..!v
  3761. 5ba0fa98 00 00 00 00 a0 aa a3 2b 01 00 00 00 a0 aa a3 2b .......+.......+
  3762. 5ba0faa8 00 00 00 00 70 fb a0 5b 00 00 00 00 70 fb a0 5b ....p..[....p..[
  3763. 5ba0fab8 d0 fa a0 5b 63 62 0e 76 7f 62 b2 77 5a 00 00 00 ...[cb.v.b.wZ...
  3764. 5ba0fac8 20 00 00 00 b8 ab a3 2b 00 00 73 00 38 ed dc 23 ......+..s.8..#
  3765. 5ba0fad8 00 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 ..s.............
  3766. 5ba0fae8 00 00 00 00 18 01 00 00 00 00 00 00 0d 5f 0e 76 ............._.v
  3767. 5ba0faf8 00 00 00 00 e0 0e 00 00 5b 64 0e 76 89 ab b3 77 ........[d.v...w
  3768. 5ba0fb08 f0 fa a0 5b c0 fa a0 5b 00 00 00 00 c0 fa a0 5b ...[...[.......[
  3769. 5ba0fb18 c0 fa a0 5b f0 fa a0 5b 02 00 00 00 5b f5 35 06 ...[...[....[.5.
  3770. 5ba0fb28 00 00 00 00 c0 fa a0 5b 00 00 00 00 00 00 00 00 .......[........
  3771. 5ba0fb38 e0 0e 00 00 9c 89 00 76 9c 89 00 76 00 00 00 00 .......v...v....
  3772. 5ba0fb48 58 41 0d 76 d0 fa a0 5b 00 00 00 00 00 00 00 00 XA.v...[........
  3773. 5ba0fb58 91 b8 22 fc 8c fb a0 5b 39 af 10 76 .."....[9..v
  3774.  
  3775. Found via call frame info
  3776.  
  3777.  
  3778. 3: combase.dll!CROIDTable::WorkerThreadLoop(void *) [ refcache.cxx:1681 + 0x1d ]
  3779. eip: 0x7610af39 esp: 0x5ba0fb64 ebp: 0x5ba0fb8c
  3780.  
  3781. 5ba0fb64 00 00 00 00 60 ea 00 00 a0 0f 00 00 00 00 00 00 ....`...........
  3782. 5ba0fb74 84 fb a0 5b 00 af 10 76 38 ed dc 23 00 00 00 00 ...[...v8..#....
  3783. 5ba0fb84 ff ff ff ff 38 ed dc 23 b8 fb a0 5b b1 06 09 76 ....8..#...[...v
  3784.  
  3785. Found via call frame info
  3786.  
  3787.  
  3788. 4: combase.dll!CRpcThread::WorkerLoop() [ threads.cxx:279 + 0xd ]
  3789. eip: 0x760906b1 esp: 0x5ba0fb94 ebp: 0x5ba0fbb8
  3790.  
  3791. 5ba0fb94 00 00 00 00 38 ed dc 23 10 cf 10 76 38 ed dc 23 ....8..#...v8..#
  3792. 5ba0fba4 72 cf 10 76 38 ed dc 23 10 cf 10 76 10 cf 10 76 r..v8..#...v...v
  3793. 5ba0fbb4 a0 aa a3 2b c8 fb a0 5b 2f cf 10 76 ...+...[/..v
  3794.  
  3795. Found via call frame info
  3796.  
  3797.  
  3798. 5: combase.dll!CRpcThreadCache::RpcWorkerThreadEntry(void *) [ threads.cxx:73 + 0x7 ]
  3799. eip: 0x7610cf2f esp: 0x5ba0fbc0 ebp: 0x5ba0fbc8
  3800.  
  3801. 5ba0fbc0 10 cf 10 76 10 cf 10 76 d8 fb a0 5b 29 fa 7e 77 ...v...v...[).~w
  3802.  
  3803. Found via call frame info
  3804.  
  3805.  
  3806. 6: kernel32.dll!BaseThreadInitThunk + 0x19
  3807. eip: 0x777efa29 esp: 0x5ba0fbd0 ebp: 0x5ba0fbd8
  3808.  
  3809. 5ba0fbd0 38 ed dc 23 10 fa 7e 77 34 fc a0 5b 9e 7a b4 77 8..#..~w4..[.z.w
  3810.  
  3811. Found via call frame info
  3812.  
  3813.  
  3814. 7: ntdll.dll!__RtlUserThreadStart + 0x2f
  3815. eip: 0x77b47a9e esp: 0x5ba0fbe0 ebp: 0x5ba0fc34
  3816.  
  3817. 5ba0fbe0 38 ed dc 23 69 42 80 b1 00 00 00 00 00 00 00 00 8..#iB..........
  3818. 5ba0fbf0 38 ed dc 23 00 00 00 00 00 00 00 00 00 00 00 00 8..#............
  3819. 5ba0fc00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3820. 5ba0fc10 00 00 00 00 00 00 00 00 00 00 00 00 e4 fb a0 5b ...............[
  3821. 5ba0fc20 00 00 00 00 3c fc a0 5b 40 ad b5 77 3d 76 9e 9d ....<..[@..w=v..
  3822. 5ba0fc30 00 00 00 00 44 fc a0 5b 6e 7a b4 77 ....D..[nz.w
  3823.  
  3824. Found via call frame info
  3825.  
  3826.  
  3827. 8: ntdll.dll!_RtlUserThreadStart + 0x1b
  3828. eip: 0x77b47a6e esp: 0x5ba0fc3c ebp: 0x5ba0fc44
  3829.  
  3830. Found via call frame info
  3831.  
  3832.  
  3833. Thread 22:
  3834. 0: ntdll.dll!ZwWaitForWorkViaWorkerFactory + 0xc
  3835. eip: 0x77b5470c esp: 0x5be4f81c ebp: 0x5be4f9d8 ebx: 0x2bb32480
  3836. esi: 0x2bb32480 edi: 0x00774ef8 eax: 0x00000000 ecx: 0x00000000
  3837. edx: 0x00000000 efl: 0x00000202
  3838.  
  3839. 77b546fc c2 10 00 ret 0x10
  3840. 77b546ff 90 nop
  3841. 77b54700 b8 d3 01 00 00 mov eax, 0x1d3
  3842. 77b54705 ba 70 88 b6 77 mov edx, 0x77b68870
  3843. 77b5470a ff d2 call edx
  3844. > 77b5470c c2 14 00 ret 0x14
  3845. 77b5470f 90 nop
  3846. 77b54710 b8 d4 01 03 00 mov eax, 0x301d4
  3847. 77b54715 ba 70 88 b6 77 mov edx, 0x77b68870
  3848. 77b5471a ff d2 call edx
  3849. 77b5471c c2 04 00 ret 0x4
  3850.  
  3851. 5be4f81c a0 5b b1 77 .[.w
  3852.  
  3853. Found via instruction pointer in context
  3854.  
  3855.  
  3856. 1: ntdll.dll!TppWorkerThread + 0x2a0
  3857. eip: 0x77b15ba0 esp: 0x5be4f820 ebp: 0x5be4f9d8 ebx: 0x2bb32480
  3858.  
  3859. 5be4f820 a8 03 00 00 c0 22 b3 2b 10 00 00 00 b0 f8 e4 5b .....".+.......[
  3860. 5be4f830 7c f9 e4 5b 85 47 c4 b1 00 59 b1 77 00 59 b1 77 |..[.G...Y.w.Y.w
  3861. 5be4f840 f8 4e 77 00 90 4f b5 77 23 00 00 00 a0 4f 77 00 .Nw..O.w#....Ow.
  3862. 5be4f850 a8 03 00 00 00 00 30 00 a8 03 00 00 00 00 00 00 ......0.........
  3863. 5be4f860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3864. 5be4f870 00 00 00 00 0b 00 00 00 00 4f 77 00 00 00 00 00 .........Ow.....
  3865. 5be4f880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3866. 5be4f890 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 00 ................
  3867. 5be4f8a0 00 00 00 00 00 00 00 00 0b 00 00 00 78 7d a8 23 ............x}.#
  3868. 5be4f8b0 00 00 00 00 00 00 00 00 00 50 45 00 c0 22 b3 2b .........PE..".+
  3869. 5be4f8c0 00 00 00 00 10 00 00 00 00 00 00 00 68 de 4c 1d ............h.L.
  3870. 5be4f8d0 00 00 00 00 00 00 00 00 f8 4e 77 00 00 00 00 00 .........Nw.....
  3871. 5be4f8e0 01 01 01 01 00 00 01 01 08 fa f8 5b bc f6 f6 2c ...........[...,
  3872. 5be4f8f0 10 fa f8 5b 30 4f 77 00 00 00 00 00 ac 06 00 00 ...[0Ow.........
  3873. 5be4f900 f8 4e 77 00 00 00 00 00 00 00 00 00 00 00 00 00 .Nw.............
  3874. 5be4f910 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3875. 5be4f920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3876. 5be4f930 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3877. 5be4f940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3878. 5be4f950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3879. 5be4f960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3880. 5be4f970 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3881. 5be4f980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3882. 5be4f990 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3883. 5be4f9a0 00 00 00 00 00 00 00 00 00 00 00 00 80 24 b3 2b .............$.+
  3884. 5be4f9b0 00 00 00 00 01 00 00 00 00 00 00 00 85 47 c4 b1 .............G..
  3885. 5be4f9c0 34 f8 e4 5b 00 00 00 00 34 fa e4 5b 40 ad b5 77 4..[....4..[@..w
  3886. 5be4f9d0 15 03 9e 9d 05 00 00 00 e8 f9 e4 5b 29 fa 7e 77 ...........[).~w
  3887.  
  3888. Found via call frame info
  3889.  
  3890.  
  3891. 2: kernel32.dll!BaseThreadInitThunk + 0x19
  3892. eip: 0x777efa29 esp: 0x5be4f9e0 ebp: 0x5be4f9e8
  3893.  
  3894. 5be4f9e0 f8 4e 77 00 10 fa 7e 77 44 fa e4 5b 9e 7a b4 77 .Nw...~wD..[.z.w
  3895.  
  3896. Found via call frame info
  3897.  
  3898.  
  3899. 3: ntdll.dll!__RtlUserThreadStart + 0x2f
  3900. eip: 0x77b47a9e esp: 0x5be4f9f0 ebp: 0x5be4fa44
  3901.  
  3902. 5be4f9f0 f8 4e 77 00 19 44 c4 b1 00 00 00 00 00 00 00 00 .Nw..D..........
  3903. 5be4fa00 f8 4e 77 00 00 00 00 00 00 00 00 00 00 00 00 00 .Nw.............
  3904. 5be4fa10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3905. 5be4fa20 00 00 00 00 00 00 00 00 00 00 00 00 f4 f9 e4 5b ...............[
  3906. 5be4fa30 00 00 00 00 4c fa e4 5b 40 ad b5 77 3d 76 9e 9d ....L..[@..w=v..
  3907. 5be4fa40 00 00 00 00 54 fa e4 5b 6e 7a b4 77 ....T..[nz.w
  3908.  
  3909. Found via call frame info
  3910.  
  3911.  
  3912. 4: ntdll.dll!_RtlUserThreadStart + 0x1b
  3913. eip: 0x77b47a6e esp: 0x5be4fa4c ebp: 0x5be4fa54
  3914.  
  3915. Found via call frame info
  3916.  
  3917.  
  3918. Thread 23:
  3919. 0: ntdll.dll!ZwWaitForWorkViaWorkerFactory + 0xc
  3920. eip: 0x77b5470c esp: 0x5bf8f93c ebp: 0x5bf8faf8 ebx: 0x2bb31798
  3921. esi: 0x2bb31798 edi: 0x00774ef8 eax: 0x00000000 ecx: 0x00000000
  3922. edx: 0x00000000 efl: 0x00000206
  3923.  
  3924. 77b546fc c2 10 00 ret 0x10
  3925. 77b546ff 90 nop
  3926. 77b54700 b8 d3 01 00 00 mov eax, 0x1d3
  3927. 77b54705 ba 70 88 b6 77 mov edx, 0x77b68870
  3928. 77b5470a ff d2 call edx
  3929. > 77b5470c c2 14 00 ret 0x14
  3930. 77b5470f 90 nop
  3931. 77b54710 b8 d4 01 03 00 mov eax, 0x301d4
  3932. 77b54715 ba 70 88 b6 77 mov edx, 0x77b68870
  3933. 77b5471a ff d2 call edx
  3934. 77b5471c c2 04 00 ret 0x4
  3935.  
  3936. 5bf8f93c a0 5b b1 77 .[.w
  3937.  
  3938. Found via instruction pointer in context
  3939.  
  3940.  
  3941. 1: ntdll.dll!TppWorkerThread + 0x2a0
  3942. eip: 0x77b15ba0 esp: 0x5bf8f940 ebp: 0x5bf8faf8 ebx: 0x2bb31798
  3943.  
  3944. 5bf8f940 a8 03 00 00 d8 15 b3 2b 10 00 00 00 d0 f9 f8 5b .......+.......[
  3945. 5bf8f950 9c fa f8 5b a5 44 d8 b1 00 59 b1 77 00 59 b1 77 ...[.D...Y.w.Y.w
  3946. 5bf8f960 f8 4e 77 00 90 4f b5 77 23 00 00 00 a0 4f 77 00 .Nw..O.w#....Ow.
  3947. 5bf8f970 a8 03 00 00 00 00 30 00 a8 03 00 00 00 00 00 00 ......0.........
  3948. 5bf8f980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3949. 5bf8f990 00 00 00 00 0b 00 00 00 00 4f 77 00 00 00 00 00 .........Ow.....
  3950. 5bf8f9a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3951. 5bf8f9b0 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 00 ................
  3952. 5bf8f9c0 00 00 00 00 00 00 00 00 0b 00 00 00 28 76 a8 23 ............(v.#
  3953. 5bf8f9d0 00 00 00 00 00 00 00 00 00 50 45 00 d8 15 b3 2b .........PE....+
  3954. 5bf8f9e0 00 00 00 00 10 00 00 00 00 00 00 00 68 de 4c 1d ............h.L.
  3955. 5bf8f9f0 00 00 00 00 00 00 00 00 f8 4e 77 00 00 00 00 00 .........Nw.....
  3956. 5bf8fa00 01 01 01 01 00 00 01 01 54 52 45 00 e8 f8 e4 5b ........TRE....[
  3957. 5bf8fa10 30 4f 77 00 f0 f8 e4 5b 00 00 00 00 40 2e 00 00 0Ow....[....@...
  3958. 5bf8fa20 f8 4e 77 00 00 00 00 00 00 00 00 00 00 00 00 00 .Nw.............
  3959. 5bf8fa30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3960. 5bf8fa40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3961. 5bf8fa50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3962. 5bf8fa60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3963. 5bf8fa70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3964. 5bf8fa80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3965. 5bf8fa90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3966. 5bf8faa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3967. 5bf8fab0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3968. 5bf8fac0 00 00 00 00 00 00 00 00 00 00 00 00 98 17 b3 2b ...............+
  3969. 5bf8fad0 00 00 00 00 01 00 00 00 00 00 00 00 a5 44 d8 b1 .............D..
  3970. 5bf8fae0 54 f9 f8 5b 00 00 00 00 54 fb f8 5b 40 ad b5 77 T..[....T..[@..w
  3971. 5bf8faf0 15 03 9e 9d 05 00 00 00 08 fb f8 5b 29 fa 7e 77 ...........[).~w
  3972.  
  3973. Found via call frame info
  3974.  
  3975.  
  3976. 2: kernel32.dll!BaseThreadInitThunk + 0x19
  3977. eip: 0x777efa29 esp: 0x5bf8fb00 ebp: 0x5bf8fb08
  3978.  
  3979. 5bf8fb00 f8 4e 77 00 10 fa 7e 77 64 fb f8 5b 9e 7a b4 77 .Nw...~wd..[.z.w
  3980.  
  3981. Found via call frame info
  3982.  
  3983.  
  3984. 3: ntdll.dll!__RtlUserThreadStart + 0x2f
  3985. eip: 0x77b47a9e esp: 0x5bf8fb10 ebp: 0x5bf8fb64
  3986.  
  3987. 5bf8fb10 f8 4e 77 00 39 45 d8 b1 00 00 00 00 00 00 00 00 .Nw.9E..........
  3988. 5bf8fb20 f8 4e 77 00 00 00 00 00 00 00 00 00 00 00 00 00 .Nw.............
  3989. 5bf8fb30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  3990. 5bf8fb40 00 00 00 00 00 00 00 00 00 00 00 00 14 fb f8 5b ...............[
  3991. 5bf8fb50 00 00 00 00 6c fb f8 5b 40 ad b5 77 3d 76 9e 9d ....l..[@..w=v..
  3992. 5bf8fb60 00 00 00 00 74 fb f8 5b 6e 7a b4 77 ....t..[nz.w
  3993.  
  3994. Found via call frame info
  3995.  
  3996.  
  3997. 4: ntdll.dll!_RtlUserThreadStart + 0x1b
  3998. eip: 0x77b47a6e esp: 0x5bf8fb6c ebp: 0x5bf8fb74
  3999.  
  4000. Found via call frame info
  4001.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!