[panda-users] Panda Plugin development

Mon Jan 12 17:45:23 EST 2015

Hello,

I am developing a Panda plugin for doing VM introspection of a Windows VM
(windows 7 for the moment). My goal is to track the flow of system calls of
a given process, including their return values and their arguments.
The final goal is to "automatically" retrieve the arguments of each system
call, and see which arguments are passed from a system call to another, or
if the return values of some system calls are used as input for other
system calls.

I have currently coded a plugin that uses the "osi" plugin and the
"win7x86intro" plugin, but I'm not sure of the results that produces.

I put the source code as attachment.

Regarding the code of the file mysyscalls.c of the attachment, can someone
give me an opinion about the correctness of what I write? My intention is
to track only the system calls of a certain process with input arguments,
and output values.
My plugin currently tries to retrieve all the arguments of a syscall, and
print them in order in a txt file. The output seems to have sense, but I am
not completely sure that it retrieves the correct number of arguments.

In the file mysyscalls.txt there is an example of the output and as you can
see, for example for the system call 0xb3 (NtOpenFile) at line 1035, I
found 8 arguments. Is it correct?The windows 7 system call NtOpenFile has 8
input argumets?

I know I wrote a lot of stuff, but I tried to be more clear that I can.

Thanks in advance for the answers, and if someone has any advice, is truly
appreciated.

-Simone
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/mailman/private/panda-users/attachments/20150112/14dfce03/attachment-0001.htm
-------------- next part --------------
MYSYSCALLS PLUGIN TRAKING FILE
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef5a0
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef5bc
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef5bc
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 000000000000002e
ARG2= 00000000001ef6a0
ARG3= 0000000000000004
ARG4= 00000000001ef6c4
ARG5= 000000007ffdf000
ARG6= 000000007ffd4000
ARG7= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef59c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef5b8
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef564
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000776acda4
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef514
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef530
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef578
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef4e4
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef4dc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ef4c0
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ef588
ARG2= 00000000001ef594
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef4dc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef4ac
RETURN ADDRESS=000000007761564c
ARG0= 0000000000000037
ARG1= 00000000001ef4c4
ARG2= 0000000000000108
ARG3= 00000000001ef5cc
ARG4= 00000000002600c4
ARG5= 0000000000260000
ARG6= 0000000000000002
ARG7= 00000000001ef4f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef3e8
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef424
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ef5a4
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ef5cc
ARG2= 00000000001ef5c8
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000af, EDX=00000000001ef5c4
RETURN ADDRESS=00000000776150ec
ARG0= 00000000776acda8
ARG1= 0000000000000003
ARG2= 00000000001ef634
ARG3= 000000007ffdf000
ARG4= 000000007ffd4000
ARG5= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c5, EDX=00000000001ef5c4
RETURN ADDRESS=000000007761524c
ARG0= 00000000001ef65c
ARG1= 0000000000000001
ARG2= 00000000001ef634
ARG3= 000000007ffdf000
ARG4= 000000007ffd4000
ARG5= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000102, EDX=00000000001ef5c4
RETURN ADDRESS=000000007761561c
ARG0= 0000000000000008
ARG1= 00000000776a7288
ARG2= 00000000001ef670
ARG3= 000000007ffdf000
ARG4= 000000007ffd4000
ARG5= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef5cc
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000008
ARG1= 000000007ffdf000
ARG2= 000000007ffd4000
ARG3= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef550
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef5b8
ARG1= 0000000000100020
ARG2= 00000000001ef57c
ARG3= 00000000001ef59c
ARG4= 0000000000000003
ARG5= 0000000000000021
ARG6= 000000007ffd4000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010c, EDX=00000000001ef554
RETURN ADDRESS=00000000776156bc
ARG0= 0000000000000008
ARG1= 00000000001ef59c
ARG2= 00000000001ef594
ARG3= 0000000000000008
ARG4= 0000000000000004
ARG5= 000000007ffd4000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef344
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef3f8
ARG1= 000000000000000f
ARG2= 00000000001ef360
ARG3= 00000000001ef458
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef320
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef408
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef378
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001ef3e4
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef388
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef38c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef3f8
ARG2= 00000000001ef3fc
ARG3= 0000000000000004
ARG4= 00000000001ef3f0
ARG5= 000000007773b659
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eefa4
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef058
ARG1= 000000000000000f
ARG2= 00000000001eefc0
ARG3= 00000000001ef0c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eef80
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef068
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eefd8
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001ef044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eefe8
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef354
ARG4= 000000000000001d
ARG5= 0000000077620000
ARG6= 00000000001ef0c8
ARG7= 00000000001ef038
ARG8= 000000007762e6e5
ARG9= 00000000001ef0d8
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eefec
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef058
ARG2= 00000000001ef05c
ARG3= 0000000000000004
ARG4= 00000000001ef050
ARG5= 000000007773b239
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eefec
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef058
ARG2= 00000000001ef05c
ARG3= 0000000000000020
ARG4= 00000000001ef050
ARG5= 000000007773b239
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef38c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef3f8
ARG2= 00000000001ef3fc
ARG3= 0000000000000020
ARG4= 00000000001ef3f0
ARG5= 000000007773b659
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef3fc
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef3fc
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef19c
RETURN ADDRESS=000000007761564c
ARG0= 0000000000000032
ARG1= 00000000001ef1c0
ARG2= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eefd8
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef0ac
ARG1= 0000000000000005
ARG2= 00000000001ef04c
ARG3= 00000000001ef1e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eefc8
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef0a8
ARG1= 00000000000f001f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000003b, EDX=00000000001eefc4
RETURN ADDRESS=00000000776149ac
ARG0= 00000000776a70ec
ARG1= 00000000776a7258
ARG2= 00000000001ef070
ARG3= 00000000001ef07c
ARG4= 00000000001ef064
ARG5= 00000000001ef048
ARG6= 00000000001ef028
ARG7= 00000000001ef098
ARG8= 00000000001ef1e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eefe0
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000001ef1e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eefbc
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef094
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eefe0
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000001ef1e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eefd0
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef00c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000094, EDX=00000000001ef164
RETURN ADDRESS=0000000077614f3c
ARG0= 00000000001ef1a0
ARG1= 00000000757e494c
ARG2= 00000000001ef198
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eef78
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eef94
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eef84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eefa0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ee940
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ee95c
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ee5d4
RETURN ADDRESS=00000000776158ac
ARG0= 0000000000000014
ARG1= 00000000001ee618
ARG2= 00000000001ee618
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eef64
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 000000000000001a
ARG2= 00000000001eef8c
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef384
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 00000000001ef3e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ef378
RETURN ADDRESS=00000000776154cc
ARG0= 000000000000000c
ARG1= 0000000000000001
ARG2= 00000000001ef424
ARG3= 0000000000000088
ARG4= 00000000001ef3a4
ARG5= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef380
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef3d0
ARG1= 0000000000000003
ARG2= 000000007763d07c
ARG3= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef380
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef3e0
ARG1= 0000000000020019
ARG2= 00000000776acdac
ARG3= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef380
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef3ec
ARG1= 0000000000000001
ARG2= 000000007763d09c
ARG3= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef374
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000010
ARG1= 000000007763d094
ARG2= 0000000000000002
ARG3= 00000000001ef57c
ARG4= 0000000000000050
ARG5= 00000000001ef3cc
ARG6= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef388
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ef300
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ef330
ARG4= 00000000c0000034
ARG5= 000000007763d094
ARG6= 00000000001ef34c
ARG7= 000000007762c64c
ARG8= 00000000000000e0
ARG9= 00000000772700e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ef2fc
RETURN ADDRESS=00000000776154cc
ARG0= 0000000000000010
ARG1= 0000000000000001
ARG2= 00000000001ef334
ARG3= 0000000000000050
ARG4= 00000000001ef320
ARG5= 00000000c0000034
ARG6= 000000007763d094
ARG7= 00000000001ef34c
ARG8= 000000007762c64c
ARG9= 00000000000000e0
ARG10= 00000000772700e0
ARG11= 0000000000000010
ARG12= 00000000001ef310
ARG13= 000000007ffd4000
ARG14= 000000007762bd4d
ARG15= 000000007773b139
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef30c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000c0000034
ARG2= 000000007763d094
ARG3= 0000000000000024
ARG4= 000000007762c64c
ARG5= 00000000000000e0
ARG6= 00000000772700e0
ARG7= 0000000000000010
ARG8= 00000000001ef33c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef380
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef3ec
ARG1= 0000000000000001
ARG2= 00000000001ef3a8
ARG3= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef388
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 000000007763cc80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef538
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef5a4
ARG2= 00000000001ef5a8
ARG3= 0000000000000004
ARG4= 00000000001ef59c
ARG5= 000000007773b78d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 000000000026023c
ARG5= 0000000000260000
ARG6= 00000000001ef274
ARG7= 00000000001ef1e4
ARG8= 000000007762e6e5
ARG9= 00000000001ef284
ARG10= 000000007762e700
ARG11= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eedb0
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee64
ARG1= 000000000000000f
ARG2= 00000000001eedcc
ARG3= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef160
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001eed68
RETURN ADDRESS=000000007761538c
ARG0= 00000000001eedac
ARG1= 00000000001eed84
ARG2= 00000000776a72e0
ARG3= 00000000001eee2c
ARG4= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001eede0
RETURN ADDRESS=000000007761512c
ARG0= 00000000001eee6c
ARG1= 0000000000100021
ARG2= 00000000001eee0c
ARG3= 00000000001eee24
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eeddc
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eee64
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000010
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000010
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eea10
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eeac4
ARG1= 000000000000000f
ARG2= 00000000001eea2c
ARG3= 00000000001eeb34
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee9ec
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eead4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eea44
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eeab0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea54
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001eedc0
ARG4= 000000000000001a
ARG5= 0000000077620000
ARG6= 00000000001eeb34
ARG7= 00000000001eeaa4
ARG8= 000000007762e6e5
ARG9= 00000000001eeb44
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea58
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeac4
ARG2= 00000000001eeac8
ARG3= 0000000000000004
ARG4= 00000000001eeabc
ARG5= 000000007773a8ad
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee4b4
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee4f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee4c4
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee500
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea58
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeac4
ARG2= 00000000001eeac8
ARG3= 0000000000000020
ARG4= 00000000001eeabc
ARG5= 000000007773a8ad
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001ef274
ARG7= 00000000001ef1e4
ARG8= 000000007762e6e5
ARG9= 00000000001ef284
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eedb0
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee64
ARG1= 000000000000000f
ARG2= 00000000001eedcc
ARG3= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef160
ARG4= 000000000000001b
ARG5= 0000000077620000
ARG6= 00000000001eeed4
ARG7= 00000000001eee44
ARG8= 000000007762e6e5
ARG9= 00000000001eeee4
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eedb0
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee64
ARG1= 000000000000000f
ARG2= 00000000001eedcc
ARG3= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef160
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001eeed4
ARG7= 00000000001eee44
ARG8= 000000007762e6e5
ARG9= 00000000001eeee4
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eea10
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eeac4
ARG1= 000000000000000f
ARG2= 00000000001eea2c
ARG3= 00000000001eeb34
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee9ec
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eead4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eea44
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eeab0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea54
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001eedc0
ARG4= 000000000000001a
ARG5= 0000000077620000
ARG6= 00000000001eeb34
ARG7= 00000000001eeaa4
ARG8= 000000007762e6e5
ARG9= 00000000001eeb44
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea58
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeac4
ARG2= 00000000001eeac8
ARG3= 0000000000000004
ARG4= 00000000001eeabc
ARG5= 000000007773a8ad
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea58
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeac4
ARG2= 00000000001eeac8
ARG3= 0000000000000020
ARG4= 00000000001eeabc
ARG5= 000000007773a8ad
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001ef274
ARG7= 00000000001ef1e4
ARG8= 000000007762e6e5
ARG9= 00000000001ef284
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eedb0
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee64
ARG1= 000000000000000f
ARG2= 00000000001eedcc
ARG3= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 000000000000000c
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000000c
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 000000000000000c
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef160
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001eeed4
ARG7= 00000000001eee44
ARG8= 000000007762e6e5
ARG9= 00000000001eeee4
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee494
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee4e0
ARG1= 0000000000000008
ARG2= 00000000001ee4b4
ARG3= 0000000000000002
ARG4= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee400
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee444
ARG1= 00000000001ee41c
ARG2= 00000000001eea16
ARG3= 0000000077643a4c
ARG4= 00000000001ee788
ARG5= 00000000fffffffc
ARG6= 0000000000000002
ARG7= 00000000001ee478
ARG8= 0000000077642b41
ARG9= 00000000001ee44c
ARG10= 0000000000040b24
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee448
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee494
ARG1= 00000000001ee464
ARG2= 0000000000000001
ARG3= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee438
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee4e0
ARG1= 0000000000100020
ARG2= 00000000001ee494
ARG3= 00000000001ee48c
ARG4= 0000000000000003
ARG5= 0000000000000021
ARG6= 0000000000000001
ARG7= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee94c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee988
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001eed94
RETURN ADDRESS=000000007761538c
ARG0= 00000000001eedd8
ARG1= 00000000001eedb0
ARG2= 00000000776a72e0
ARG3= 00000000001eeeb8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001eede0
RETURN ADDRESS=000000007761512c
ARG0= 00000000001eee6c
ARG1= 0000000000100021
ARG2= 00000000001eee0c
ARG3= 00000000001eee24
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eeddc
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eee64
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000018
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000018
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000018
ARG1= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eedb0
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee64
ARG1= 000000000000000f
ARG2= 00000000001eedcc
ARG3= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eed8c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000010
ARG1= 00000000ffffffff
ARG2= 00000000001eee74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eede4
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000010
ARG1= 0000000000000002
ARG2= 00000000001eee50
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eedf4
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef160
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001eeed4
ARG7= 00000000001eee44
ARG8= 000000007762e6e5
ARG9= 00000000001eeee4
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000004
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eedf8
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eee64
ARG2= 00000000001eee68
ARG3= 0000000000000020
ARG4= 00000000001eee5c
ARG5= 000000007773accd
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef100
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef144
ARG1= 00000000001ef11c
ARG2= 00000000002614ae
ARG3= 00000000001ef1cc
ARG4= 00000000002615de
ARG5= 0000000000000020
ARG6= 0000000000000020
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef180
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef20c
ARG1= 0000000000100021
ARG2= 00000000001ef1ac
ARG3= 00000000001ef1c4
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 00000000776a72e0
ARG7= 00000000c0150008
ARG8= 00000000001ef500
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef17c
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef204
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000018
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eee7c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eeeb8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000018
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000018
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000010
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000010
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001ef274
ARG7= 00000000001ef1e4
ARG8= 000000007762e6e5
ARG9= 00000000001ef284
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000010
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000010
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000009
ARG5= 0000000077630000
ARG6= 00000000001ef274
ARG7= 00000000001ef1e4
ARG8= 000000007762e6e5
ARG9= 00000000001ef284
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef150
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef204
ARG1= 000000000000000f
ARG2= 00000000001ef16c
ARG3= 00000000001ef274
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef100
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef144
ARG1= 00000000001ef11c
ARG2= 00000000002614ae
ARG3= 00000000001ef1cc
ARG4= 00000000002615de
ARG5= 0000000000000020
ARG6= 0000000000000020
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef180
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef20c
ARG1= 0000000000100021
ARG2= 00000000001ef1ac
ARG3= 00000000001ef1c4
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 00000000776a72e0
ARG7= 00000000c0150008
ARG8= 00000000001ef500
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef17c
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef204
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef12c
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000018
ARG1= 00000000ffffffff
ARG2= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef184
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000018
ARG1= 0000000000000002
ARG2= 00000000001ef1f0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000018
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000010
ARG1= 00000000776a72e0
ARG2= 00000000c0150008
ARG3= 00000000001ef500
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000004
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef198
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef204
ARG2= 00000000001ef208
ARG3= 0000000000000020
ARG4= 00000000001ef1fc
ARG5= 000000007773b06d
ARG6= 00000000776a72e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef538
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef5a4
ARG2= 00000000001ef5a8
ARG3= 0000000000000020
ARG4= 00000000001ef59c
ARG5= 000000007773b78d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef5bc
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000022
ARG2= 00000000001ef6c0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014d, EDX=00000000001ef5c0
RETURN ADDRESS=0000000077615acc
ARG0= 00000000ffffffff
ARG1= 0000000000000022
ARG2= 00000000001ef6c0
ARG3= 0000000000000004
ARG4= 000000007ffdf000
ARG5= 000000007ffd4000
ARG6= 00000000776a714c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef4c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef234
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef2e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ef218
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ef2e0
ARG2= 00000000001ef2ec
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef234
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef2f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef30c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef328
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef2f4
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef310
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef2f8
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef314
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef148
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef184
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef284
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef2c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee464
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee8d4
ARG1= 0000000000020019
ARG2= 00000000001ee48c
ARG3= 00000000001eeb60
ARG4= 00000000001eebbc
ARG5= 00000000001eeb4c
ARG6= 000000000090008e
ARG7= 00000000001ee4b4
ARG8= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee888
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000010
ARG1= 00000000001ee8b4
ARG2= 0000000000000001
ARG3= 00000000001ee900
ARG4= 0000000000000214
ARG5= 00000000001ee8cc
ARG6= 00000000001eeb60
ARG7= 00000000001eebbc
ARG8= 00000000001eeb4c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef43c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef458
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef254
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef290
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef0d4
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef110
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000004a, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077614a9c
ARG0= 00000000001ef430
ARG1= 00000000001f0001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eef48
RETURN ADDRESS=000000007761515c
ARG0= 0000000077336b40
ARG1= 0000000002000000
ARG2= 00000000001eef5c
ARG3= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eef00
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef06c
ARG1= 0000000000020019
ARG2= 00000000001eef50
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef464
RETURN ADDRESS=00000000776149fc
ARG0= 00000000770f314c
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001eef18
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001eede8
RETURN ADDRESS=00000000776158ac
ARG0= 0000000000000014
ARG1= 00000000001eee2c
ARG2= 00000000001eee2c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee5a0
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee5e4
ARG1= 00000000001ee5bc
ARG2= 00000000001ee6dc
ARG3= 00000000001ee66c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee618
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee688
ARG1= 0000000000100001
ARG2= 00000000001ee644
ARG3= 00000000001ee65c
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000007762e70c
ARG7= 000000000000002e
ARG8= 00000000001eed1c
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ee614
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ee68c
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee608
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000028
ARG1= 00000000ffffffff
ARG2= 00000000001ee69c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ee628
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 000000007762e70c
ARG3= 000000000000002e
ARG4= 00000000001eed1c
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee62c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000028
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001eed1c
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee62c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000024
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001eed1c
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee780
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee7a8
ARG1= 0000000000000001
ARG2= 00000000757b2ee0
ARG3= 0000000000000001
ARG4= 0000000000000026
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee774
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000024
ARG1= 00000000757b3a54
ARG2= 0000000000000002
ARG3= 00000000001ee7ac
ARG4= 0000000000000010
ARG5= 00000000001ee7a0
ARG6= 0000000000000001
ARG7= 0000000000000026
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee5a0
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee5e4
ARG1= 00000000001ee5bc
ARG2= 00000000001ee6dc
ARG3= 00000000001ee66c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee618
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee688
ARG1= 0000000000100001
ARG2= 00000000001ee644
ARG3= 00000000001ee65c
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000007762e70c
ARG7= 000000000000002e
ARG8= 00000000001eed1c
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ee614
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ee68c
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee608
RETURN ADDRESS=000000007761507c
ARG0= 000000000000002c
ARG1= 00000000ffffffff
ARG2= 00000000001ee69c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ee628
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 000000007762e70c
ARG3= 000000000000002e
ARG4= 00000000001eed1c
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee62c
RETURN ADDRESS=000000007761491c
ARG0= 000000000000002c
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001eed1c
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee62c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000028
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001eed1c
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee9fc
RETURN ADDRESS=000000007761538c
ARG0= 00000000001eea40
ARG1= 00000000001eea18
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001eea74
RETURN ADDRESS=000000007761512c
ARG0= 00000000001eeb00
ARG1= 0000000000100021
ARG2= 00000000001eeaa0
ARG3= 00000000001eeab8
ARG4= 0000000000000005
ARG5= 0000000000000060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eea70
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eeaf8
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eea20
RETURN ADDRESS=000000007761507c
ARG0= 000000000000002c
ARG1= 00000000ffffffff
ARG2= 00000000001eeb08
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eea78
RETURN ADDRESS=00000000776155dc
ARG0= 000000000000002c
ARG1= 0000000000000002
ARG2= 00000000001eeae4
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea88
RETURN ADDRESS=000000007761491c
ARG0= 000000000000002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea88
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000028
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea8c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeaf8
ARG2= 00000000001eeafc
ARG3= 0000000000000004
ARG4= 00000000001eeaf0
ARG5= 000000007773a959
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ee6a4
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ee758
ARG1= 000000000000000f
ARG2= 00000000001ee6c0
ARG3= 00000000001ee7c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee680
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000028
ARG1= 00000000ffffffff
ARG2= 00000000001ee768
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ee6d8
RETURN ADDRESS=00000000776155dc
ARG0= 0000000000000028
ARG1= 0000000000000002
ARG2= 00000000001ee744
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee6e8
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000028
ARG1= 00000000001eecb8
ARG2= 00000000c0150008
ARG3= 00000000001eea54
ARG4= 000000000000001b
ARG5= 0000000077620000
ARG6= 00000000001ee7c8
ARG7= 00000000001ee738
ARG8= 000000007762e6e5
ARG9= 00000000001ee7d8
ARG10= 000000007762e700
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ee6ec
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ee758
ARG2= 00000000001ee75c
ARG3= 0000000000000004
ARG4= 00000000001ee750
ARG5= 000000007773a539
ARG6= 00000000001eecb8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ee6ec
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ee758
ARG2= 00000000001ee75c
ARG3= 0000000000000020
ARG4= 00000000001ee750
ARG5= 000000007773a539
ARG6= 00000000001eecb8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eea8c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eeaf8
ARG2= 00000000001eeafc
ARG3= 0000000000000020
ARG4= 00000000001eeaf0
ARG5= 000000007773a959
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001eea14
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001eea30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001eea14
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001eea30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ee830
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ee868
ARG2= 00000000000000a0
ARG3= 00000000001ee868
ARG4= 00000000000000a0
ARG5= 00000000001ee85c
ARG6= 0000000000272548
ARG7= 00000000761048a0
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000272548
ARG11= 00000000001ee838
ARG12= 000000004fba1227
ARG13= 000000004e5ff606
ARG14= 00000000b9fae8b9
ARG15= 00000000f34057ab
ARG16= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ee95c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 000000000000001a
ARG2= 00000000001ee97c
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ee9b8
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eeeb0
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eef20
ARG1= 0000000000020019
ARG2= 00000000001eeee8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eee1c
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eee5c
ARG1= 0000000000020019
ARG2= 00000000001eee3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eee10
RETURN ADDRESS=000000007761569c
ARG0= 000000000000002c
ARG1= 00000000001eee54
ARG2= 0000000000000002
ARG3= 00000000001eee60
ARG4= 0000000000000014
ARG5= 00000000001eee38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eee24
RETURN ADDRESS=000000007761491c
ARG0= 000000000000002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e6, EDX=00000000001eef14
RETURN ADDRESS=000000007735ecff
ARG0= 00000000001ef05c
ARG1= 00000000001ef4b8
ARG2= 00000000771bf5a0
ARG3= 00000000771a0000
ARG4= 0000000000000001
ARG5= 00000000001ef588
ARG6= 00000000001ef4cc
ARG7= 0000000000000001
ARG8= 0000000009770339
ARG9= 0000000000190578
ARG10= 00000000000d0000
ARG11= 000000000000000c
ARG12= 0000000000191728
ARG13= 00000000ff840000
ARG14= 0000000000000318
ARG15= 0000000000191918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010fe, EDX=00000000001eeda4
RETURN ADDRESS=000000007735687d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000008a, EDX=00000000001eeab4
RETURN ADDRESS=0000000077614e9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee8f4
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee930
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000008a, EDX=00000000001eeab4
RETURN ADDRESS=0000000077614e9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ee9f8
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001eea28
ARG4= 0000000000272d38
ARG5= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ee9f4
RETURN ADDRESS=00000000776154cc
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 00000000001eea2c
ARG3= 0000000000000050
ARG4= 00000000001eea18
ARG5= 0000000000272d38
ARG6= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea04
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
ARG1= 0000000000272d38
ARG2= 0000000000272d38
ARG3= 0000000000000024
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea78
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eeae0
ARG1= 0000000002000000
ARG2= 00000000001eea94
ARG3= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea84
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eeadc
ARG1= 0000000000020019
ARG2= 00000000001eea98
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001eead4
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eeabc
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea30
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea94
ARG1= 0000000000020019
ARG2= 00000000001eea44
ARG3= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ee9a4
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ee9d4
ARG4= 0000000000020019
ARG5= 0000000000000004
ARG6= 00000000000001e6
ARG7= 000000007773abb5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ee9a0
RETURN ADDRESS=00000000776154cc
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 00000000001ee9d8
ARG3= 0000000000000050
ARG4= 00000000001ee9c4
ARG5= 0000000000020019
ARG6= 0000000000000004
ARG7= 00000000000001e6
ARG8= 000000007773abb5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee9b0
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
ARG1= 0000000000020019
ARG2= 0000000000000004
ARG3= 0000000000000024
ARG4= 000000007773abb5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea24
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea90
ARG1= 0000000002000000
ARG2= 00000000001eea40
ARG3= 0000000000020019
ARG4= 00000000001eeab4
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea30
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea8c
ARG1= 0000000000020019
ARG2= 00000000001eea44
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001eea80
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eea30
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea94
ARG1= 0000000000020019
ARG2= 00000000001eea44
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001eea80
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001ee7c0
RETURN ADDRESS=0000000077614d6c
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea68
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
ARG1= 0000000000272d38
ARG2= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea68
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
ARG1= 0000000000272d38
ARG2= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9d4
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea38
ARG1= 0000000000020019
ARG2= 00000000001ee9e8
ARG3= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ee948
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ee978
ARG4= 0000000000000001
ARG5= 00000000001eea87
ARG6= 0000000000000003
ARG7= 000000007762349f
ARG8= 00000000000001e6
ARG9= 000000007773abd9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ee944
RETURN ADDRESS=00000000776154cc
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 00000000001ee97c
ARG3= 0000000000000050
ARG4= 00000000001ee968
ARG5= 0000000000000001
ARG6= 00000000001eea87
ARG7= 0000000000000003
ARG8= 000000007762349f
ARG9= 00000000000001e6
ARG10= 000000007773abd9
ARG11= 000000000000003c
ARG12= 0000000008000008
ARG13= 0000000000000166
ARG14= 00000000001ee9ac
ARG15= 0000000000272398
ARG16= 00000000002730b8
ARG17= 000000007761982a
ARG18= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee954
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 00000000001eea87
ARG3= 0000000000000024
ARG4= 000000007762349f
ARG5= 00000000000001e6
ARG6= 000000007773abd9
ARG7= 000000000000003c
ARG8= 00000000001ee984
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9c8
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea3c
ARG1= 0000000002000000
ARG2= 00000000001ee9e4
ARG3= 0000000000000001
ARG4= 0000000000000001
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee99c
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee9fc
ARG1= 0000000000020019
ARG2= 00000000001ee9b0
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001ee9ec
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9d4
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea40
ARG1= 0000000000020019
ARG2= 00000000001ee9e8
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001eea24
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee9c8
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000040
ARG1= 00000000001eea24
ARG2= 0000000000000002
ARG3= 00000000002709d0
ARG4= 000000000000000c
ARG5= 00000000001ee9f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea0c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
ARG1= 0000000000000001
ARG2= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea0c
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 0000000000272d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9d4
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea38
ARG1= 0000000000020019
ARG2= 00000000001ee9e8
ARG3= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ee948
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ee978
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ee944
RETURN ADDRESS=00000000776154cc
ARG0= 000000000000003c
ARG1= 0000000000000001
ARG2= 00000000001ee97c
ARG3= 0000000000000050
ARG4= 00000000001ee968
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee954
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9c8
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea3c
ARG1= 0000000002000000
ARG2= 00000000001ee9e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee9d4
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eea40
ARG1= 0000000000020019
ARG2= 00000000001ee9e8
ARG3= 0000000000000018
ARG4= 000000000000003c
ARG5= 00000000001eea24
ARG6= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee9c8
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000040
ARG1= 00000000001eea24
ARG2= 0000000000000002
ARG3= 00000000002709d0
ARG4= 000000000000000c
ARG5= 00000000001ee9f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee9c8
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000040
ARG1= 00000000001eea24
ARG2= 0000000000000002
ARG3= 00000000002723b8
ARG4= 0000000000000018
ARG5= 00000000001ee9f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea0c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eea0c
RETURN ADDRESS=000000007761491c
ARG0= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a5, EDX=00000000001ee074
RETURN ADDRESS=000000007761504c
ARG0= 0000000000000010
ARG1= 00000000ffffffff
ARG2= 00000000001ee0dc
ARG3= 00000000001ee0c8
ARG4= 00000000001ee0c4
ARG5= 00000000001ee094
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a5, EDX=00000000001ee094
RETURN ADDRESS=000000007761504c
ARG0= 0000000000000140
ARG1= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000042, EDX=00000000001ee370
RETURN ADDRESS=0000000077614a1c
ARG0= 00000000001ee410
ARG1= 0000000080100080
ARG2= 00000000001ee3cc
ARG3= 00000000001ee3a4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ee39c
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ee40c
ARG1= 00000000000f0005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee390
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000040
ARG1= 00000000ffffffff
ARG2= 00000000001ee408
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee3b4
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
ARG1= 000000007761c822
ARG2= 0000000000000014
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ee334
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ee360
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eec4c
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001eec78
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed84
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001eeda0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eedbc
RETURN ADDRESS=00000000771bf0ca
ARG0= 000000000000001c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001eeda8
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001eed94
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000008
ARG1= 0000000000000008
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000771c0a58
ARG5= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eed8c
RETURN ADDRESS=0000000077356869
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eed8c
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000004
ARG1= 0000000000000001
ARG2= 0000000077355ddb
ARG3= 0000000000000008
ARG4= 00000000001eedc0
ARG5= 00000000771c0992
ARG6= 0000000000000004
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102f, EDX=00000000001eed70
RETURN ADDRESS=0000000077356855
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eed8c
RETURN ADDRESS=0000000077356869
ARG0= 000000000000000d
ARG1= 0000000000000001
ARG2= 0000000077355ddb
ARG3= 0000000000000008
ARG4= 00000000001eedc0
ARG5= 00000000771c09bf
ARG6= 000000000000000d
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001eed90
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eed7c
RETURN ADDRESS=0000000077356350
ARG0= 0000000007010708
ARG1= 00000000080506d9
ARG2= 0000000000000001
ARG3= 00000000773561d0
ARG4= 0000000000000008
ARG5= 00000000000006d9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eedbc
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eedb8
RETURN ADDRESS=00000000771bf0ab
ARG0= 000000000000000f
ARG1= 0000000000000037
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001eecf0
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001eed58
ARG3= 00000000001eeda0
ARG4= 00000000772c8888
ARG5= 00000000ffffffff
ARG6= 000000000000000a
ARG7= 00000000001eed58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001eeca0
RETURN ADDRESS=0000000077614cfc
ARG0= 0000000000000040
ARG1= 000000000000000c
ARG2= 00000000001eecc0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001eecc0
RETURN ADDRESS=000000007761460c
ARG0= 00000000001eed1c
ARG1= 0000000000000044
ARG2= 0000000000000001
ARG3= 00000000001eed30
ARG4= 00000000001eed64
ARG5= 00000000001eed40
ARG6= 00000000001eed4c
ARG7= 00000000001eed08
ARG8= 00000000001eeda0
ARG9= 00000000772c89e1
ARG10= 00000000001eed1c
ARG11= 0000000000000044
ARG12= 0000000000000001
ARG13= 00000000001eed30
ARG14= 00000000001eed64
ARG15= 00000000001eed40
ARG16= 00000000001eed4c
ARG17= 00000000001eed48
ARG18= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eecfc
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000044
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eed00
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eec78
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eedbc
ARG1= 0000000000020019
ARG2= 00000000001eecc8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eebd0
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000040
ARG1= 00000000001eecf0
ARG2= 0000000000000002
ARG3= 00000000001eec2c
ARG4= 0000000000000090
ARG5= 00000000001eec08
ARG6= 00000000770deff5
ARG7= 00000000001eedb4
ARG8= 00000000001eedb0
ARG9= 0000000000000040
ARG10= 00000000001eed04
ARG11= 00000000001eed0c
ARG12= 00000000002732d8
ARG13= 00000000001eed08
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eed54
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000002c, EDX=00000000001eeeec
RETURN ADDRESS=00000000776148bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eeef8
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eeef8
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000013
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef458
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef480
ARG1= 00000000001ef468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef284
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2bc
ARG2= 00000000000000a0
ARG3= 00000000001ef2bc
ARG4= 00000000000000a0
ARG5= 00000000001ef2b0
ARG6= 0000000000273338
ARG7= 00000000001ef3b0
ARG8= 0000000000010001
ARG9= 00000000012732d8
ARG10= 0000000000273338
ARG11= 00000000002732d3
ARG12= 000000002955e23c
ARG13= 0000000045ca4e0b
ARG14= 00000000e46e81a1
ARG15= 00000000c01fca42
ARG16= 0000000000000002
ARG17= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef304
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef33c
ARG2= 00000000000000a0
ARG3= 00000000001ef33c
ARG4= 00000000000000a0
ARG5= 00000000001ef330
ARG6= 0000000000273410
ARG7= 0000000075e522c0
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000273410
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 00000000003c003a
ARG2= 00000000747f3a7c
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 0000000000360034
ARG2= 00000000747f3ad0
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 00000000004a0048
ARG2= 00000000747f3b20
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 0000000000280026
ARG2= 00000000747f3b80
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 0000000000340032
ARG2= 00000000747f3bc0
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 0000000000320030
ARG2= 00000000747f3c0c
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef40c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef418
ARG1= 000000000030002e
ARG2= 00000000747f3c54
ARG3= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef294
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2cc
ARG2= 00000000000000a0
ARG3= 00000000001ef2cc
ARG4= 00000000000000a0
ARG5= 00000000001ef2c0
ARG6= 0000000000273548
ARG7= 00000000001ef3c0
ARG8= 0000000000010001
ARG9= 00000000012734e8
ARG10= 0000000000273548
ARG11= 00000000002734e3
ARG12= 000000006097799c
ARG13= 000000004c3299df
ARG14= 0000000029a388bf
ARG15= 000000001a42c658
ARG16= 0000000000000002
ARG17= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef314
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef34c
ARG2= 00000000000000a0
ARG3= 00000000001ef34c
ARG4= 00000000000000a0
ARG5= 00000000001ef340
ARG6= 0000000000273620
ARG7= 000000007490c710
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000273620
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000008, EDX=00000000001ef3c0
RETURN ADDRESS=000000007761467c
ARG0= 00000000747f3f0c
ARG1= 000000000000002a
ARG2= 00000000001ef428
ARG3= 0000000005122ead
ARG4= 00000000001ef588
ARG5= 00000000772b9c70
ARG6= 0000000000000001
ARG7= 00000000001ef588
ARG8= 000000007762f8be
ARG9= 00000000002c002a
ARG10= 00000000747f3f0c
ARG11= 00000000001ef414
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000008, EDX=00000000001ef3c0
RETURN ADDRESS=000000007761467c
ARG0= 00000000747f3ec8
ARG1= 0000000000000042
ARG2= 00000000001ef428
ARG3= 0000000005122ead
ARG4= 00000000001ef588
ARG5= 00000000772b9c70
ARG6= 0000000000000001
ARG7= 00000000001ef588
ARG8= 000000007762f8be
ARG9= 0000000000440042
ARG10= 00000000747f3ec8
ARG11= 00000000001ef414
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee914
RETURN ADDRESS=000000007761512c
ARG0= 00000000001eea60
ARG1= 00000000001200a9
ARG2= 00000000001ee9f4
ARG3= 00000000001ee9c0
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000000000fffe
ARG7= 0000000000000100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ee910
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eea68
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee904
RETURN ADDRESS=000000007761507c
ARG0= 0000000000000054
ARG1= 00000000ffffffff
ARG2= 00000000001eea94
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee868
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee8ac
ARG1= 0000000000020019
ARG2= 00000000001ee88c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee85c
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000058
ARG1= 00000000001ee8a4
ARG2= 0000000000000002
ARG3= 00000000001ee8b0
ARG4= 0000000000000014
ARG5= 00000000001ee888
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee870
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000058
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000e7, EDX=00000000001ee85c
RETURN ADDRESS=000000007761546c
ARG0= 0000000000000050
ARG1= 00000000001ee8b4
ARG2= 00000000001ee884
ARG3= 0000000000000018
ARG4= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010c, EDX=00000000001ee8f8
RETURN ADDRESS=00000000776156bc
ARG0= 0000000000000050
ARG1= 00000000001ee914
ARG2= 00000000001ee91c
ARG3= 0000000000000008
ARG4= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000e7, EDX=00000000001ee918
RETURN ADDRESS=000000007761546c
ARG0= 0000000000000050
ARG1= 00000000001ee9c0
ARG2= 00000000001ee940
ARG3= 0000000000000028
ARG4= 0000000000000004
ARG5= 000000000000fffe
ARG6= 0000000000000100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ee7ec
RETURN ADDRESS=00000000776158ac
ARG0= 0000000000000014
ARG1= 00000000001ee844
ARG2= 00000000001ee844
ARG3= 0000000000000080
ARG4= 00000000001ee90c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee918
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000050
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee918
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000054
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ee914
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000220000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef410
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef41c
ARG1= 0000000000240022
ARG2= 00000000747f3ea4
ARG3= 00000000001ef41c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef390
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000001022
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef40c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000013
ARG2= 00000000001ef428
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eeff8
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef034
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef294
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2cc
ARG2= 00000000000000a0
ARG3= 00000000001ef2cc
ARG4= 00000000000000a0
ARG5= 00000000001ef2c0
ARG6= 0000000000273a28
ARG7= 00000000001ef3c0
ARG8= 0000000000010001
ARG9= 00000000012739c8
ARG10= 0000000000273a28
ARG11= 00000000002739c3
ARG12= 000000002955e23c
ARG13= 0000000045ca4e0b
ARG14= 00000000e46e81a1
ARG15= 00000000c01fca42
ARG16= 0000000000000002
ARG17= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef294
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2cc
ARG2= 00000000000000a0
ARG3= 00000000001ef2cc
ARG4= 00000000000000a0
ARG5= 00000000001ef2c0
ARG6= 0000000000274360
ARG7= 00000000001ef3c0
ARG8= 0000000000010001
ARG9= 0000000001274300
ARG10= 0000000000274360
ARG11= 00000000002742fb
ARG12= 00000000bcebf131
ARG13= 000000004ba4e4e6
ARG14= 00000000409cfa82
ARG15= 0000000069f70260
ARG16= 0000000000000002
ARG17= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef294
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2cc
ARG2= 00000000000000a0
ARG3= 00000000001ef2cc
ARG4= 00000000000000a0
ARG5= 00000000001ef2c0
ARG6= 0000000000274498
ARG7= 00000000001ef3c0
ARG8= 0000000000010001
ARG9= 0000000001274438
ARG10= 0000000000274498
ARG11= 0000000000274433
ARG12= 00000000a323cdc2
ARG13= 0000000048b281b0
ARG14= 0000000049b7c880
ARG15= 000000008a4721a2
ARG16= 0000000000000002
ARG17= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef2ec
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef324
ARG2= 00000000000000a0
ARG3= 00000000001ef324
ARG4= 00000000000000a0
ARG5= 00000000001ef318
ARG6= 0000000000274570
ARG7= 00000000767f9f50
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000274570
ARG11= 000000000026d518
ARG12= 0000000030336ed4
ARG13= 00000000447ce327
ARG14= 00000000b651e09d
ARG15= 000000000861c852
ARG16= 0000000000000003
ARG17= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef2e8
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef320
ARG2= 00000000000000a0
ARG3= 00000000001ef320
ARG4= 00000000000000a0
ARG5= 00000000001ef314
ARG6= 0000000000274648
ARG7= 00000000767fb5f8
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000274648
ARG11= 00000000007fa528
ARG12= 000000008939299f
ARG13= 000000004c5c2315
ARG14= 00000000b8ab919b
ARG15= 000000007d62a06a
ARG16= 0000000000000003
ARG17= 0000000000000009
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef290
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2c8
ARG2= 00000000000000a0
ARG3= 00000000001ef2c8
ARG4= 00000000000000a0
ARG5= 00000000001ef2bc
ARG6= 0000000000274780
ARG7= 00000000001ef3bc
ARG8= 0000000000010001
ARG9= 0000000001274720
ARG10= 0000000000274780
ARG11= 000000000027471b
ARG12= 000000002955e23c
ARG13= 0000000045ca4e0b
ARG14= 00000000e46e81a1
ARG15= 00000000c01fca42
ARG16= 0000000000000002
ARG17= 000000000000000a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef290
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2c8
ARG2= 00000000000000a0
ARG3= 00000000001ef2c8
ARG4= 00000000000000a0
ARG5= 00000000001ef2bc
ARG6= 00000000002748b8
ARG7= 00000000001ef3bc
ARG8= 0000000000010001
ARG9= 0000000001274858
ARG10= 00000000002748b8
ARG11= 0000000000274853
ARG12= 00000000bcebf131
ARG13= 000000004ba4e4e6
ARG14= 00000000409cfa82
ARG15= 0000000069f70260
ARG16= 0000000000000002
ARG17= 000000000000000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef2f4
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef32c
ARG2= 00000000000000a0
ARG3= 00000000001ef32c
ARG4= 00000000000000a0
ARG5= 00000000001ef320
ARG6= 0000000000274990
ARG7= 0000000077177248
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000274990
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef2f4
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef32c
ARG2= 00000000000000a0
ARG3= 00000000001ef32c
ARG4= 00000000000000a0
ARG5= 00000000001ef320
ARG6= 0000000000274a78
ARG7= 0000000077177618
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000274a78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 0000000000180016
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121d99
ARG8= 0000000077177a28
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 00000000001a0018
ARG3= 0000000000273e60
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121da5
ARG8= 0000000077177a54
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 0000000000320030
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121db1
ARG8= 0000000077177afc
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 0000000000360034
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121dbd
ARG8= 0000000077177b18
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 00000000002e002c
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121dc9
ARG8= 0000000077177ac8
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 0000000000260024
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121dd5
ARG8= 0000000077177a88
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 000000000020001e
ARG3= 0000000000273e60
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121de1
ARG8= 0000000077177a64
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef418
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000771ae6b1
ARG2= 0000000000280026
ARG3= 0000000000274b50
ARG4= 00000000001ef428
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 0000000077121ded
ARG8= 0000000077177a9c
ARG9= 0000000077120000
ARG10= 0000000077121892
ARG11= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef41c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 0000000000360034
ARG2= 0000000077177bd4
ARG3= 00000000001ef428
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef41c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 00000000002e002c
ARG2= 0000000077177ba4
ARG3= 00000000001ef428
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef41c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 0000000000260024
ARG2= 0000000077177b54
ARG3= 00000000001ef428
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef41c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 000000000020001e
ARG2= 0000000077177b34
ARG3= 00000000001ef428
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef41c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef428
ARG1= 0000000000280026
ARG2= 0000000077177b7c
ARG3= 00000000001ef428
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef420
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef430
ARG1= 0000000077120000
ARG2= 00000000001a0018
ARG3= 0000000000273e60
ARG4= 00000000001ef430
ARG5= 0000000000000001
ARG6= 00000000001ef458
ARG7= 000000007712189d
ARG8= 0000000077177a44
ARG9= 00000000001ef588
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef424
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef430
ARG1= 00000000001a0018
ARG2= 0000000077177ae0
ARG3= 00000000001ef430
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef290
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef2c8
ARG2= 00000000000000a0
ARG3= 00000000001ef2c8
ARG4= 00000000000000a0
ARG5= 00000000001ef2bc
ARG6= 0000000000274bb0
ARG7= 00000000001ef3bc
ARG8= 0000000000010001
ARG9= 0000000001274b50
ARG10= 0000000000274bb0
ARG11= 0000000000274b4b
ARG12= 00000000c9bf4a02
ARG13= 000000004d11d547
ARG14= 000000003ae04282
ARG15= 0000000001beb518
ARG16= 0000000000000002
ARG17= 000000000000000e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef304
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef33c
ARG2= 00000000000000a0
ARG3= 00000000001ef33c
ARG4= 00000000000000a0
ARG5= 00000000001ef330
ARG6= 0000000000274c98
ARG7= 00000000705b67a8
ARG8= 0000000000010001
ARG9= 0000000001000000
ARG10= 0000000000274c98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef0b0
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef0ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef2f4
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef32c
ARG2= 00000000000000a0
ARG3= 00000000001ef32c
ARG4= 00000000000000a0
ARG5= 00000000001ef320
ARG6= 0000000000274d98
ARG7= 00000000705b67b8
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 0000000000274d98
ARG11= 0000000000274d98
ARG12= 00000000c89b991e
ARG13= 0000000049b23b48
ARG14= 0000000000acd380
ARG15= 000000004997fc0d
ARG16= 0000000000000003
ARG17= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef330
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef3dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ef314
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ef3dc
ARG2= 00000000001ef3e8
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef330
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef3ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef2b4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef3f4
ARG1= 0000000000020019
ARG2= 00000000001ef304
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef268
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000080
ARG1= 00000000001ef388
ARG2= 0000000000000002
ARG3= 00000000001ef2c4
ARG4= 0000000000000090
ARG5= 00000000001ef2a0
ARG6= 00000000770deff5
ARG7= 00000000001ef3f0
ARG8= 00000000001ef3f8
ARG9= 0000000000000080
ARG10= 00000000001ef39c
ARG11= 00000000001ef3a4
ARG12= 00000000001ef374
ARG13= 00000000001ef3a0
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef390
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef2b4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef3f4
ARG1= 0000000000020019
ARG2= 00000000001ef304
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef268
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000080
ARG1= 00000000001ef388
ARG2= 0000000000000002
ARG3= 00000000001ef2c4
ARG4= 0000000000000090
ARG5= 00000000001ef2a0
ARG6= 00000000770deff5
ARG7= 00000000001ef3f0
ARG8= 00000000001ef3f8
ARG9= 0000000000000080
ARG10= 00000000001ef39c
ARG11= 00000000001ef3a4
ARG12= 00000000001ef374
ARG13= 00000000001ef3a0
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef390
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef3ec
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef3ec
RETURN ADDRESS=000000007761564c
ARG0= 0000000000000001
ARG1= 00000000001ef434
ARG2= 000000000000000c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef388
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000025
ARG2= 00000000001ef3ac
ARG3= 0000000000000030
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef418
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef434
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef418
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef434
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef418
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef434
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef418
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef434
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef0e4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef230
ARG1= 0000000000020019
ARG2= 00000000001ef134
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001ef070
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001ef0a8
ARG2= 00000000000000a0
ARG3= 00000000001ef0a8
ARG4= 00000000000000a0
ARG5= 00000000001ef09c
ARG6= 0000000000274e70
ARG7= 00000000001ef19c
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 0000000000274e70
ARG11= 0000000000274e70
ARG12= 00000000bda92ae8
ARG13= 000000004d499f11
ARG14= 00000000c2a41dba
ARG15= 000000002e69caab
ARG16= 0000000000000002
ARG17= 0000000000000011
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef394
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef3e4
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef224
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef260
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000af, EDX=00000000001ef38c
RETURN ADDRESS=00000000776150ec
ARG0= 00000000001ef3d4
ARG1= 000000000000000f
ARG2= 00000000001ef3ac
ARG3= 0000000000000001
ARG4= 0000000076150000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b1, EDX=00000000001ef3d8
RETURN ADDRESS=000000007761510c
ARG0= 00000000001ef40c
ARG1= 0000000000100000
ARG2= 00000000001ef3ec
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001ef404
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef3b8
ARG1= 00000000004e004c
ARG2= 00000000001ef3d4
ARG3= 00000000001ef3b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef2cc
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef404
ARG1= 0000000000000001
ARG2= 00000000001ef31c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef3ec
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 000000000000001a
ARG2= 00000000001ef414
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef2e4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef434
ARG1= 0000000000000001
ARG2= 00000000001ef334
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000174, EDX=00000000001ef734
RETURN ADDRESS=0000000077615d3c
ARG0= 000000007773b539
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000003c, EDX=00000000001ef77c
RETURN ADDRESS=00000000776149bc
ARG0= 00000000001ef7a0
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef9c0
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef9f0
ARG1= 00000000001ef9d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6b0
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000a69d9d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6dc
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000a69d9d
ARG2= 0000000000000003
ARG3= 00000000001ef720
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6dc
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000a69d9d
ARG2= 0000000000000002
ARG3= 00000000001ef754
ARG4= 0000000000000212
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef714
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef730
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef714
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef730
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef58c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef5c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef11c
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef160
ARG1= 00000000001ef138
ARG2= 00000000001ef258
ARG3= 00000000001ef1e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef194
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef204
ARG1= 0000000000100001
ARG2= 00000000001ef1c0
ARG3= 00000000001ef1d8
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000007762e70c
ARG7= 000000000000002e
ARG8= 00000000001ef8a0
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef190
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef208
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef184
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000a4
ARG1= 00000000ffffffff
ARG2= 00000000001ef218
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 00000000004f0000
ARG2= 000000007762e70c
ARG3= 000000000000002e
ARG4= 00000000001ef8a0
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1a8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000a4
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001ef8a0
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1a8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000a0
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001ef8a0
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef11c
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef160
ARG1= 00000000001ef138
ARG2= 00000000001ef258
ARG3= 00000000001ef1e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef194
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef204
ARG1= 0000000000100001
ARG2= 00000000001ef1c0
ARG3= 00000000001ef1d8
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000007762e70c
ARG7= 000000000000002e
ARG8= 00000000001ef8a0
ARG9= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef190
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef208
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef184
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000a4
ARG1= 00000000ffffffff
ARG2= 00000000001ef218
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 00000000004f0000
ARG2= 000000007762e70c
ARG3= 000000000000002e
ARG4= 00000000001ef8a0
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1a8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000a4
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001ef8a0
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1a8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000a0
ARG1= 000000007762e70c
ARG2= 000000000000002e
ARG3= 00000000001ef8a0
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef868
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef8b8
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000040, EDX=00000000001ef868
RETURN ADDRESS=00000000776149fc
ARG0= 00000000001ef8b8
ARG1= 00000000001f0003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000105, EDX=00000000001ef888
RETURN ADDRESS=000000007761564c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001ef430
RETURN ADDRESS=000000007761521c
ARG0= 00000000001ef4e4
ARG1= 000000000000000f
ARG2= 00000000001ef44c
ARG3= 00000000001ef544
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef3e0
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef424
ARG1= 00000000001ef3fc
ARG2= 000000000027240a
ARG3= 00000000001ef4ac
ARG4= 0000000000272538
ARG5= 0000000000000020
ARG6= 0000000000000020
ARG7= 0000000005123d25
ARG8= 00000000757ade86
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef460
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef4ec
ARG1= 0000000000100021
ARG2= 00000000001ef48c
ARG3= 00000000001ef4a4
ARG4= 0000000000000005
ARG5= 0000000000000060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef45c
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef4e4
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef40c
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000ac
ARG1= 00000000ffffffff
ARG2= 00000000001ef4f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef464
RETURN ADDRESS=00000000776155dc
ARG0= 00000000000000ac
ARG1= 0000000000000002
ARG2= 00000000001ef4d0
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef474
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef474
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef478
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef4e4
ARG2= 00000000001ef4e8
ARG3= 0000000000000004
ARG4= 00000000001ef4dc
ARG5= 000000007773b74d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef478
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef4e4
ARG2= 00000000001ef4e8
ARG3= 0000000000000020
ARG4= 00000000001ef4dc
ARG5= 000000007773b74d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef3a4
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef3cc
ARG1= 00000000001ef3b4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef540
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef654
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef6a4
ARG1= 0000000000100001
ARG2= 00000000001ef67c
ARG3= 00000000001ef694
ARG4= 0000000000000007
ARG5= 0000000000000020
ARG6= 0000000000000030
ARG7= 00000000001ef724
ARG8= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000006b, EDX=00000000001ef5c0
RETURN ADDRESS=0000000077614cac
ARG0= 00000000000000a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef67c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef6b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001ef5c8
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001ef5f8
ARG1= 00000000001ef648
ARG2= 00000000001ef658
ARG3= 00000000001ef63c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef290
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef2a8
ARG1= 00000000001ef2b8
ARG2= 00000000001ef2e8
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ef2a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001ef280
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001ef2b0
ARG1= 00000000001ef300
ARG2= 00000000001ef310
ARG3= 00000000001ef2f4
ARG4= 00000000000002a9
ARG5= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001193, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771b292c
ARG0= 000000000000c03b
ARG1= 00000000001ef558
ARG2= 00000000ffff0000
ARG3= 000000000000c03b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef544
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ef064
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ef0a8
ARG1= 00000000001ef080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ef0dc
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ef168
ARG1= 0000000000100021
ARG2= 00000000001ef108
ARG3= 00000000001ef120
ARG4= 0000000000000005
ARG5= 0000000000000060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ef0d8
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ef160
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef088
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000b0
ARG1= 00000000ffffffff
ARG2= 00000000001ef170
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001ef0e0
RETURN ADDRESS=00000000776155dc
ARG0= 00000000000000b0
ARG1= 0000000000000002
ARG2= 00000000001ef14c
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef0f0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef0f0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef0f4
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef160
ARG2= 00000000001ef164
ARG3= 0000000000000004
ARG4= 00000000001ef158
ARG5= 000000007773b3c1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001ef0f4
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001ef160
ARG2= 00000000001ef164
ARG3= 0000000000000020
ARG4= 00000000001ef158
ARG5= 000000007773b3c1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001ef07c
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001ef098
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001eee54
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001eee8c
ARG2= 00000000000000a0
ARG3= 00000000001eee8c
ARG4= 00000000000000a0
ARG5= 00000000001eee80
ARG6= 0000000000274f48
ARG7= 00000000001eef80
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 0000000000274f48
ARG11= 0000000000274f48
ARG12= 0000000069d3f5b6
ARG13= 000000004ef96605
ARG14= 0000000002bca0b6
ARG15= 00000000a62cbd33
ARG16= 0000000000000002
ARG17= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001eeed0
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001eef08
ARG2= 00000000000000a0
ARG3= 00000000001eef08
ARG4= 00000000000000a0
ARG5= 00000000001eeefc
ARG6= 0000000000275020
ARG7= 000000007467a0e8
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 0000000000275020
ARG11= 0000000000275020
ARG12= 00000000422088e6
ARG13= 000000004f99cd0c
ARG14= 0000000085690bbd
ARG15= 00000000df0b29fa
ARG16= 0000000000000003
ARG17= 0000000000000013
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eeedc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eef88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001eeec0
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001eef88
ARG2= 00000000001eef94
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eeedc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eef98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011be, EDX=00000000001ef264
RETURN ADDRESS=00000000771b0966
ARG0= 00000000001ef364
ARG1= 00000000001ef2c6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001ef250
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000030
ARG1= 0000000000000002
ARG2= 00000000001ef274
ARG3= 0000000000000040
ARG4= 00000000001ef270
ARG5= 00000000001ef364
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a9, EDX=00000000001ef278
RETURN ADDRESS=00000000771b395a
ARG0= 0000000000000d3c
ARG1= 00000000001ef288
ARG2= 0000000000000030
ARG3= 0000000000000020
ARG4= 000000007464b5c4
ARG5= 000000007467a8ac
ARG6= 00000000001ef364
ARG7= 00000000001ef2b4
ARG8= 000000007464b5eb
ARG9= 000000007467a1e0
ARG10= 000000007467b620
ARG11= 000000000000000a
ARG12= 0000000000000001
ARG13= 00000000069afce1
ARG14= 00000000001ef2c0
ARG15= 000000007464b751
ARG16= 00000000001ef2e4
ARG17= 000000007464b2af
ARG18= 000000007467a1e0
ARG19= 00000000001ef2fc
ARG20= 000000007467a844
ARG21= 00000000772092a0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000003b, EDX=00000000001ef1a8
RETURN ADDRESS=00000000776149ac
ARG0= 000000007467a118
ARG1= 00000000001ef1d4
ARG2= 00000000001ef1dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ef224
RETURN ADDRESS=00000000776158ac
ARG0= 00000000000000b4
ARG1= 00000000001ef274
ARG2= 00000000001ef23c
ARG3= 00000000001ef364
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ef228
RETURN ADDRESS=00000000776158ac
ARG0= 00000000000000b4
ARG1= 00000000001ef278
ARG2= 00000000001ef240
ARG3= 00000000001ef364
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef180
RETURN ADDRESS=00000000771bf0ca
ARG0= 000000000000000f
ARG1= 0000000005e2e039
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef164
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 000000007467a590
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eefd8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef00c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eefd8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef00c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ef178
RETURN ADDRESS=00000000776158ac
ARG0= 00000000000000b4
ARG1= 00000000001ef1c8
ARG2= 00000000001ef190
ARG3= 0000000000560808
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ef16c
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000b8
ARG1= 00000000ffffffff
ARG2= 00000000001ef1b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef230
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef210
RETURN ADDRESS=0000000077356f13
ARG0= 0000000009010196
ARG1= 0000000000000058
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef21c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef258
ARG3= 000000007464a818
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eed4c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eed5c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eed98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eedf8
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eee34
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef218
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef210
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef218
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef210
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef218
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef210
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef204
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef204
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef25c
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102a, EDX=00000000001ef248
RETURN ADDRESS=000000007735a4ee
ARG0= 0000000001850481
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef248
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef274
ARG3= 000000007464bf0f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102f, EDX=00000000001ef228
RETURN ADDRESS=0000000077356855
ARG0= 0000000000ffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eef4c
RETURN ADDRESS=00000000771bf0ca
ARG0= 000000000000000f
ARG1= 0000000005e2fe05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eef4c
RETURN ADDRESS=00000000771bf0ca
ARG0= 000000000000000f
ARG1= 0000000005e2fe05
ARG2= 00000000001ef080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef350
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef370
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef348
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef368
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef350
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ef378
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030138
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2fc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef31c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2fc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef31c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef304
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef2d0
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000030138
ARG3= 00000000001ef2e0
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef318
ARG9= 0000000074641e8a
ARG10= 0000000000030138
ARG11= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef2a4
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 00000000ffffffff
ARG3= 00000000001ef310
ARG4= 000000007467a970
ARG5= 0000000000030138
ARG6= 00000000001ef2e0
ARG7= 0000000074645c90
ARG8= 0000000000030138
ARG9= 000000000000a918
ARG10= 00000000ffffffff
ARG11= 00000000001ef310
ARG12= 00000000ffffffff
ARG13= 00000000001ef2f4
ARG14= 0000000074645d83
ARG15= 0000000000030138
ARG16= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef280
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030138
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef320
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef340
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef318
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef338
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef320
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef348
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef328
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef348
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef31c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef33c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef324
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000006b, EDX=00000000001ef5e0
RETURN ADDRESS=0000000077614cac
ARG0= 00000000000000a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef85c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef868
ARG1= 0000000000280026
ARG2= 0000000000a623a8
ARG3= 00000000001ef868
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef85c
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef868
ARG1= 00000000001a0018
ARG2= 0000000000a6238c
ARG3= 00000000001ef868
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef878
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eefa8
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef128
ARG1= 0000000000000001
ARG2= 00000000001eefc4
ARG3= 00000000001ef128
ARG4= 000000000000011c
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eef80
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000bc
ARG1= 00000000001eefa8
ARG2= 0000000000000002
ARG3= 00000000001eefb4
ARG4= 0000000000000013
ARG5= 00000000001eefb0
ARG6= 00000000001ef128
ARG7= 000000000000011c
ARG8= 000000000010000e
ARG9= 00000000772bc4d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef108
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef4fc
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6c8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef6f4
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef6d8
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef704
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef5d0
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef5e8
ARG1= 00000000001ef5f8
ARG2= 00000000001ef628
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ef5e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef5d0
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef5e8
ARG1= 00000000001ef5f8
ARG2= 00000000001ef628
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ef5e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef72c
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef758
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001164, EDX=00000000001ef840
RETURN ADDRESS=00000000771aac78
ARG0= 000000000027dd80
ARG1= 0000000000000011
ARG2= 00000000771af283
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef598
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef5b0
ARG1= 00000000001ef5c0
ARG2= 00000000001ef5f0
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ef5b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef598
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef5b0
ARG1= 00000000001ef5c0
ARG2= 00000000001ef5f0
ARG3= 0000000000000020
ARG4= 000000000040003e
ARG5= 00000000001ef610
ARG6= 00000000001ef5b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef250
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef27c
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef264
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef290
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ef174
RETURN ADDRESS=000000007735ab9a
ARG0= 00000000450101ad
ARG1= 0000000000000020
ARG2= 0000000000000020
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1d0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000390506c6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001ef1c0
RETURN ADDRESS=0000000077359e2b
ARG0= 00000000390506c6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef198
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000390506c6
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef190
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1a0
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001ef0cc
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1a0
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef198
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000390506c6
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001ef19c
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1d0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef170
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ef0ec
RETURN ADDRESS=000000007735ab9a
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 0000000000000040
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef15c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef238
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef224
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000240506de
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001ef214
RETURN ADDRESS=0000000077359e2b
ARG0= 00000000240506de
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001ef1f8
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000240506de
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef1e4
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1f4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001ef120
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1f4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000240506de
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001ef1f0
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef224
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef1f8
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef1d8
RETURN ADDRESS=0000000077357471
ARG0= 00000000240506de
ARG1= 0000000000000018
ARG2= 00000000001ef224
ARG3= 00000000001ef204
ARG4= 000000007735751f
ARG5= 00000000240506de
ARG6= 0000000000000018
ARG7= 00000000001ef224
ARG8= 00000000240506de
ARG9= 00000000001ef248
ARG10= 00000000771af952
ARG11= 00000000240506de
ARG12= 0000000000000018
ARG13= 00000000001ef224
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001ef1fc
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000020
ARG1= 0000000000000040
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1e4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000240506de
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1e4
RETURN ADDRESS=0000000077356350
ARG0= 00000000170106e4
ARG1= 000000000a0506e9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef1a8
RETURN ADDRESS=0000000077357209
ARG0= 00000000170106e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1e4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1e4
RETURN ADDRESS=0000000077356350
ARG0= 00000000170106e4
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1ec
RETURN ADDRESS=000000007735697e
ARG0= 00000000240506de
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1d8
RETURN ADDRESS=000000007735697e
ARG0= 00000000170106e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2a4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001ef264
RETURN ADDRESS=00000000771af7ca
ARG0= 00000000000b00f3
ARG1= 00000000001ef284
ARG2= 00000000001ef294
ARG3= 00000000001ef2d8
ARG4= 00000000000b00f3
ARG5= 00000000001ef2d8
ARG6= 000000000040003e
ARG7= 00000000001ef34c
ARG8= 00000000001ef284
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef218
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef244
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef22c
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef258
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ef13c
RETURN ADDRESS=000000007735ab9a
ARG0= 00000000450101ad
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef198
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000b0506e6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001ef188
RETURN ADDRESS=0000000077359e2b
ARG0= 000000000b0506e6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001ef16c
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef160
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000b0506e6
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef158
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef168
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001ef094
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef168
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef160
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000b0506e6
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001ef164
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef198
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef138
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ef0b4
RETURN ADDRESS=000000007735ab9a
ARG0= 0000000003010699
ARG1= 0000000000000010
ARG2= 0000000000000020
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef124
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef200
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001ef1dc
RETURN ADDRESS=0000000077359e2b
ARG0= 0000000004050704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001ef1c0
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1b4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050704
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1bc
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001ef0e8
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1bc
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1b4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050704
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001ef1b8
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 000000000027dd80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef1c0
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef1a0
RETURN ADDRESS=0000000077357471
ARG0= 0000000004050704
ARG1= 0000000000000018
ARG2= 00000000001ef1ec
ARG3= 00000000001ef1cc
ARG4= 000000007735751f
ARG5= 0000000004050704
ARG6= 0000000000000018
ARG7= 00000000001ef1ec
ARG8= 0000000004050704
ARG9= 00000000001ef210
ARG10= 00000000771af952
ARG11= 0000000004050704
ARG12= 0000000000000018
ARG13= 00000000001ef1ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001ef1c4
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000010
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077356350
ARG0= 0000000007010709
ARG1= 000000000405070a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef170
RETURN ADDRESS=0000000077357209
ARG0= 0000000007010709
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077356350
ARG0= 0000000007010709
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1b4
RETURN ADDRESS=000000007735697e
ARG0= 0000000004050704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1a0
RETURN ADDRESS=000000007735697e
ARG0= 0000000007010709
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef26c
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001ef22c
RETURN ADDRESS=00000000771af7ca
ARG0= 0000000000070124
ARG1= 00000000001ef24c
ARG2= 00000000001ef25c
ARG3= 00000000001ef2a0
ARG4= 0000000000070124
ARG5= 00000000001ef2a0
ARG6= 000000000040003e
ARG7= 00000000001ef314
ARG8= 00000000001ef24c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001ef57c
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001ef5ac
ARG1= 00000000001ef5fc
ARG2= 00000000001ef60c
ARG3= 00000000001ef5f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef718
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 00000000001ef770
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ef70c
RETURN ADDRESS=00000000776154cc
ARG0= 00000000000000bc
ARG1= 000000000000000a
ARG2= 00000000001ef734
ARG3= 0000000000000038
ARG4= 00000000001ef774
ARG5= 0000000000000400
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef71c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000bc
ARG1= 0000000000000400
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ef628
RETURN ADDRESS=00000000776158ac
ARG0= 0000000000000014
ARG1= 00000000001ef670
ARG2= 00000000001ef670
ARG3= 00000000757e41ac
ARG4= 0000000000010590
ARG5= 00000000000005cc
ARG6= 00000000001ef754
ARG7= 00000000757b4853
ARG8= 00000000001ef670
ARG9= 0000000000010590
ARG10= 000000000001001b
ARG11= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eee38
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef2ac
ARG1= 0000000000020019
ARG2= 00000000001eee60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef250
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000bc
ARG1= 00000000001ef27c
ARG2= 0000000000000001
ARG3= 00000000001ef31c
ARG4= 0000000000000214
ARG5= 00000000001ef294
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef29c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000bc
ARG1= 00000000757e41ae
ARG2= 00000000000000bc
ARG3= 00000000001ef73c
ARG4= 00000000757b20ab
ARG5= 00000000757e41ae
ARG6= 00000000757b1f40
ARG7= 00000000001ef31c
ARG8= 00000000757e41ae
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eee38
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef2ac
ARG1= 0000000000020019
ARG2= 00000000001eee60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef250
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000bc
ARG1= 00000000001ef27c
ARG2= 0000000000000001
ARG3= 00000000001ef31c
ARG4= 0000000000000214
ARG5= 00000000001ef294
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef29c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000bc
ARG1= 0000000000000208
ARG2= 00000000000000bc
ARG3= 00000000001ef73c
ARG4= 00000000757b20cf
ARG5= 00000000757e41ae
ARG6= 00000000757b217c
ARG7= 00000000001ef31c
ARG8= 00000000757e41ae
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ef630
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ef660
ARG4= 0000000077336b30
ARG5= 0000000000000010
ARG6= 0000000000010590
ARG7= 00000000001ef754
ARG8= 00000000757b4874
ARG9= 0000000000010590
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ef62c
RETURN ADDRESS=00000000776154cc
ARG0= 00000000000000bc
ARG1= 0000000000000001
ARG2= 00000000001ef664
ARG3= 0000000000000050
ARG4= 00000000001ef650
ARG5= 0000000077336b30
ARG6= 0000000000000010
ARG7= 0000000000010590
ARG8= 00000000001ef754
ARG9= 00000000757b4874
ARG10= 0000000000010590
ARG11= 00000000000000bc
ARG12= 00000000757e41a0
ARG13= 00000000757b4887
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef63c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000bc
ARG1= 0000000077336b30
ARG2= 0000000000000010
ARG3= 0000000000000024
ARG4= 00000000001ef754
ARG5= 00000000757b4874
ARG6= 0000000000010590
ARG7= 00000000000000bc
ARG8= 00000000001ef66c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761515c
ARG0= 0000000077336b30
ARG1= 0000000002000000
ARG2= 00000000001ef6cc
ARG3= 0000000077336b30
ARG4= 00000000001ef768
ARG5= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef68c
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef7d4
ARG1= 0000000000020019
ARG2= 00000000001ef6dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef68c
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef7d0
ARG1= 0000000000020019
ARG2= 00000000001ef6dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef624
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000c0
ARG1= 00000000001ef744
ARG2= 0000000000000002
ARG3= 00000000001ef680
ARG4= 0000000000000090
ARG5= 00000000001ef65c
ARG6= 00000000770deff5
ARG7= 00000000001ef7bc
ARG8= 00000000001ef834
ARG9= 00000000000000c0
ARG10= 00000000001ef758
ARG11= 00000000001ef760
ARG12= 00000000001ef74c
ARG13= 00000000001ef75c
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef624
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000c0
ARG1= 00000000001ef744
ARG2= 0000000000000002
ARG3= 00000000001ef680
ARG4= 0000000000000090
ARG5= 00000000001ef65c
ARG6= 00000000770deff5
ARG7= 00000000001ef7a0
ARG8= 00000000001ef7a4
ARG9= 00000000000000c0
ARG10= 00000000001ef758
ARG11= 00000000001ef760
ARG12= 000000000000002a
ARG13= 00000000001ef75c
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef768
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000c0
ARG1= 0000000000a62ce0
ARG2= 00000000001ef7b4
ARG3= 00000000772bfa6e
ARG4= 00000000001ef7bc
ARG5= 0000000005122d01
ARG6= 0000000000a62cf8
ARG7= 0000000000a62ce0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000240022
ARG2= 00000000760929f0
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c03e
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 00000000760927a7
ARG5= 000000000000c03e
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000340032
ARG2= 00000000760929bc
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c03f
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 00000000760927bf
ARG5= 000000000000c03f
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000360034
ARG2= 0000000076092984
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c040
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 00000000760927d3
ARG5= 000000000000c040
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 00000000002e002c
ARG2= 0000000076092954
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c041
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 00000000760927e7
ARG5= 000000000000c041
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000320030
ARG2= 0000000076092920
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 00000000002c002a
ARG2= 00000000760928f4
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 00000000002e002c
ARG2= 00000000760928c4
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c044
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 000000007609281b
ARG5= 000000000000c044
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000260024
ARG2= 000000007609289c
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b3d83
ARG0= 000000000000c045
ARG1= 0000000000000001
ARG2= 0000000000000068
ARG3= 00000000001ef3dc
ARG4= 000000007609282f
ARG5= 000000000000c045
ARG6= 0000000000000001
ARG7= 0000000005d7fb2e
ARG8= 0000000000000003
ARG9= 00000000001ef7e8
ARG10= 0000000000050003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001ef388
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001ef394
ARG1= 0000000000380036
ARG2= 0000000076092864
ARG3= 00000000001ef394
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef31c
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 00000000001f0000
ARG2= 0000000000000003
ARG3= 00000000001ef348
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef374
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000040126
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f06a6
ARG7= 00000000001f069a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000400f4
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef3e8
ARG5= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef374
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030136
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0792
ARG7= 00000000001f0786
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000400f4
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef3e8
ARG5= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef374
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030140
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0928
ARG7= 00000000001f0918
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000030140
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0928
ARG7= 00000000001f0918
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000400f4
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef3e8
ARG5= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef374
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000070134
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0966
ARG7= 00000000001f095a
ARG8= 0000000000000010
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000400f4
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef3e8
ARG5= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef374
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000070132
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0990
ARG7= 00000000001f0984
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000070132
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef360
RETURN ADDRESS=00000000771b151c
ARG0= 0000000000070132
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef38c
ARG5= 00000000001ef3bc
ARG6= 00000000001f0990
ARG7= 00000000001f0984
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000400f4
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef3e8
ARG5= 00000000001ef418
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2d8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ef2e0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef1fc
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2e0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2d0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2c8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ef2d8
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001241, EDX=00000000001ef2c0
RETURN ADDRESS=00000000771b3dd9
ARG0= 0000000000070130
ARG1= 00000000000002a9
ARG2= 00000000001ef46c
ARG3= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef1b4
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000070130
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2d8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef1ec
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000070130
ARG3= 00000000001ef1fc
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef234
ARG9= 0000000074641e8a
ARG10= 0000000000070130
ARG11= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef208
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef1c0
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 00000000ffffffff
ARG3= 00000000001ef22c
ARG4= 000000007467a970
ARG5= 0000000000070130
ARG6= 00000000001ef1fc
ARG7= 0000000074645c90
ARG8= 0000000000070130
ARG9= 000000000000a918
ARG10= 00000000ffffffff
ARG11= 00000000001ef22c
ARG12= 00000000ffffffff
ARG13= 00000000001ef210
ARG14= 0000000074645d83
ARG15= 0000000000070130
ARG16= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef19c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000070130
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2d0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2c8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef2d8
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001266, EDX=00000000001ef274
RETURN ADDRESS=00000000771b3e87
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 0000000000070130
ARG3= 00000000001ef2a4
ARG4= 00000000771b3e42
ARG5= 0000000000070130
ARG6= 0000000000110121
ARG7= 0000000000a9f468
ARG8= 000000000027dea0
ARG9= 0000000000110121
ARG10= 00000000001ef2c0
ARG11= 00000000771b4036
ARG12= 000000000027dea0
ARG13= 0000000000110121
ARG14= 0000000000a9f468
ARG15= 0000000000000282
ARG16= 0000000000000001
ARG17= 00000000001ef2e0
ARG18= 00000000771b3fd4
ARG19= 000000000027dea0
ARG20= 00000000001ef46c
ARG21= 00000000001ef46c
ARG22= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2d8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c7, EDX=00000000001eeff4
RETURN ADDRESS=000000007761526c
ARG0= 00000000fffffffe
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001eeff8
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001ef03c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001eef94
RETURN ADDRESS=0000000077614cfc
ARG0= 00000000000000c0
ARG1= 000000000000000c
ARG2= 00000000001eefb4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef000
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001eefe4
RETURN ADDRESS=000000007761460c
ARG0= 000000000027df00
ARG1= 00000000000000c4
ARG2= 0000000000000001
ARG3= 00000000001ef018
ARG4= 00000000001ef048
ARG5= 00000000001ef028
ARG6= 00000000001ef038
ARG7= 00000000001ef034
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef000
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001eed94
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001eede8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001eed48
RETURN ADDRESS=00000000762b13ec
ARG0= 000000000000000e
ARG1= 0000000000000001
ARG2= 000000000027df00
ARG3= 0000000041800000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eea28
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eea40
ARG1= 00000000001eea50
ARG2= 00000000001eea80
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eea40
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eea28
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eea40
ARG1= 00000000001eea50
ARG2= 00000000001eea80
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eea40
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001eecb8
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000005
ARG1= 00000000771af283
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee7e4
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee820
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eea0c
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eea3c
ARG1= 00000000001eea8c
ARG2= 00000000001eea9c
ARG3= 00000000001eea80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eea28
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eea40
ARG1= 00000000001eea50
ARG2= 00000000001eea80
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eea40
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eea0c
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eea3c
ARG1= 00000000001eea8c
ARG2= 00000000001eea9c
ARG3= 00000000001eea80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 00000000001a0018
ARG2= 0000000076092744
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 00000000001a0018
ARG2= 0000000076092728
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 00000000002c002a
ARG2= 00000000760926fc
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 00000000001e001c
ARG2= 00000000760926dc
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 0000000000240022
ARG2= 00000000760926b8
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 0000000000260024
ARG2= 0000000076092690
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 00000000001c001a
ARG2= 0000000076092674
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 000000000020001e
ARG2= 0000000076092654
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 0000000000280026
ARG2= 000000007609262c
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000120f, EDX=00000000001eece0
RETURN ADDRESS=00000000771aedf5
ARG0= 00000000001eecec
ARG1= 0000000000180016
ARG2= 0000000076092614
ARG3= 00000000001eecec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001196, EDX=00000000001eea90
RETURN ADDRESS=00000000771b28f3
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef258
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef278
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef258
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef278
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef260
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef20c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef22c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef214
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef23c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef274
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef228
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef248
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef230
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001197, EDX=00000000001ef0e0
RETURN ADDRESS=00000000771b3195
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef1d8
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a912
ARG2= 0000000000030142
ARG3= 00000000772bf17d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eef80
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 0000000000560808
ARG2= 00000000001ef1c4
ARG3= 0000000074647a91
ARG4= 0000000000030142
ARG5= 00000000001eefb8
ARG6= 0000000000000104
ARG7= 0000000000030142
ARG8= 0000000000560808
ARG9= 0000000000030142
ARG10= 0000000000030142
ARG11= 0000000000560844
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eef70
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eefb8
ARG3= 0000000000000208
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed64
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a910
ARG2= 00000000771b7829
ARG3= 00000000001ef1c4
ARG4= 0000000074646f2e
ARG5= 0000000000030142
ARG6= 000000000000a910
ARG7= 0000000000030142
ARG8= 00000000772bf17d
ARG9= 0000000000030142
ARG10= 00000000001eeda8
ARG11= 0000000000560940
ARG12= 00000000001ef1fc
ARG13= 00000000001ef1f8
ARG14= 0000000074646ba0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed64
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a911
ARG2= 00000000771b7829
ARG3= 00000000001ef1c4
ARG4= 0000000074646f48
ARG5= 0000000000030142
ARG6= 000000000000a911
ARG7= 0000000000030142
ARG8= 00000000772bf17d
ARG9= 0000000000030142
ARG10= 00000000001eeda8
ARG11= 0000000000560940
ARG12= 00000000001ef1fc
ARG13= 00000000001ef1f8
ARG14= 0000000074646ba0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1fc
RETURN ADDRESS=000000007735697e
ARG0= 0000000062100679
ARG1= 00000000773568b4
ARG2= 000000007467a8e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef178
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef164
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1ac
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef174
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1a4
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef178
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef164
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1ac
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef174
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1a4
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef178
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef164
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1ac
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef174
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1a4
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef164
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef150
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef198
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef164
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef150
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef198
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eed44
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eed80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1f0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102a, EDX=00000000001ef1dc
RETURN ADDRESS=000000007735a4ee
ARG0= 0000000001850481
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1dc
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef208
ARG3= 000000007464bf0f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef23c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a91c
ARG2= 000000000056da60
ARG3= 00000000001ef284
ARG4= 00000000746497c7
ARG5= 0000000000030142
ARG6= 000000000000a91c
ARG7= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eeee4
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eef98
ARG1= 000000000000000f
ARG2= 00000000001eef00
ARG3= 00000000001eeff8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001eee94
RETURN ADDRESS=000000007761538c
ARG0= 00000000001eeed8
ARG1= 00000000001eeeb0
ARG2= 000000000027240a
ARG3= 00000000001eef60
ARG4= 0000000000272538
ARG5= 0000000000000020
ARG6= 0000000000000020
ARG7= 0000000000000010
ARG8= 000000000056d0a8
ARG9= 00000000001eefd8
ARG10= 0000000077628007
ARG11= 00000000001eef0c
ARG12= 0000000000000014
ARG13= 00000000001eeef0
ARG14= 0000000077628dcb
ARG15= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001eef14
RETURN ADDRESS=000000007761512c
ARG0= 00000000001eefa0
ARG1= 0000000000100021
ARG2= 00000000001eef40
ARG3= 00000000001eef58
ARG4= 0000000000000005
ARG5= 0000000000000060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eef10
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eef98
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eeec0
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000c0
ARG1= 00000000ffffffff
ARG2= 00000000001eefa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fe, EDX=00000000001eef18
RETURN ADDRESS=00000000776155dc
ARG0= 00000000000000c0
ARG1= 0000000000000002
ARG2= 00000000001eef84
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eef28
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eef28
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eef2c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eef98
ARG2= 00000000001eef9c
ARG3= 0000000000000004
ARG4= 00000000001eef90
ARG5= 000000007773adf9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d7, EDX=00000000001eef2c
RETURN ADDRESS=000000007761536c
ARG0= 00000000ffffffff
ARG1= 00000000001eef98
ARG2= 00000000001eef9c
ARG3= 0000000000000020
ARG4= 00000000001eef90
ARG5= 000000007773adf9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000fb, EDX=00000000001eeeb4
RETURN ADDRESS=00000000776155ac
ARG0= 00000000001eeed0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001eece0
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001eed18
ARG2= 00000000000000a0
ARG3= 00000000001eed18
ARG4= 00000000000000a0
ARG5= 00000000001eed0c
ARG6= 00000000002750f8
ARG7= 000000007431c060
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 00000000002750f8
ARG11= 00000000002750f8
ARG12= 0000000092ae46d7
ARG13= 0000000047276d9c
ARG14= 000000009ae4d59e
ARG15= 00000000bf4cc2f9
ARG16= 0000000000000003
ARG17= 0000000000000014
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000177, EDX=00000000001eece0
RETURN ADDRESS=0000000077615d6c
ARG0= 000000000000000f
ARG1= 00000000001eed18
ARG2= 00000000000000a0
ARG3= 00000000001eed18
ARG4= 00000000000000a0
ARG5= 00000000001eed0c
ARG6= 00000000002751d0
ARG7= 000000007431d960
ARG8= 0000000000010001
ARG9= 0000000000266520
ARG10= 00000000002751d0
ARG11= 00000000002751d0
ARG12= 0000000030336ed4
ARG13= 00000000447ce327
ARG14= 00000000b651e09d
ARG15= 000000000861c852
ARG16= 0000000000000003
ARG17= 0000000000000015
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef1f0
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a91c
ARG2= 000000000056da60
ARG3= 00000000001ef284
ARG4= 0000000074647b5d
ARG5= 0000000000030142
ARG6= 000000000000a91c
ARG7= 0000000000000083
ARG8= 000000000056da60
ARG9= 00000000001ef284
ARG10= 0000000074643199
ARG11= 000000000056da70
ARG12= 0000000000000002
ARG13= 0000000000000001
ARG14= 00000000001ef26c
ARG15= 000000000056da60
ARG16= 0000000000030142
ARG17= 000000000056da60
ARG18= 0000000000000083
ARG19= 00000000001ef284
ARG20= 0000000074643295
ARG21= 0000000000000083
ARG22= 000000007467b310
ARG23= 0000000000000025
ARG24= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef1dc
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef4c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef5c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eef94
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eefa8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeeb8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeed8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef1c8
ARG3= 00000000001eeee8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef100
ARG8= 00000000001eef2c
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef1c8
ARG12= 0000000000000009
ARG13= 0000000000000011
ARG14= 0000000000030142
ARG15= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a911
ARG2= 000000007467a974
ARG3= 00000000001eeeb8
ARG4= 0000000074652566
ARG5= 0000000000030142
ARG6= 000000000000a911
ARG7= 00000000001eeed4
ARG8= 00000000746524fc
ARG9= 0000000000030142
ARG10= 000000000056ca24
ARG11= 000000007467a974
ARG12= 00000000001ef100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee82c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee868
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee04
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eede4
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eede4
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee38
ARG6= 000000007464cfb6
ARG7= 0000000003010699
ARG8= 0000000000000058
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eede4
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee38
ARG6= 000000007464cfc5
ARG7= 0000000003010699
ARG8= 000000000000005a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eede4
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 00000000006509d0
ARG4= 00000000001eee5c
ARG5= 00000000001eee38
ARG6= 000000007464ced3
ARG7= 0000000003010699
ARG8= 0000000000000058
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eede4
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 00000000006509d0
ARG4= 00000000001eee5c
ARG5= 00000000001eee38
ARG6= 000000007464cedd
ARG7= 0000000003010699
ARG8= 000000000000005a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eedf0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee38
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee04
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eedf0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee38
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee04
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eedf0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee38
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee4c
ARG6= 000000007464cfb6
ARG7= 0000000003010699
ARG8= 0000000000000058
ARG9= 0000000000650850
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee4c
ARG6= 000000007464cfc5
ARG7= 0000000003010699
ARG8= 000000000000005a
ARG9= 0000000000650850
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee4c
ARG6= 000000007464cfb6
ARG7= 0000000003010699
ARG8= 0000000000000058
ARG9= 0000000000650850
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eedf8
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 0000000000650850
ARG5= 00000000001eee4c
ARG6= 000000007464cfc5
ARG7= 0000000003010699
ARG8= 000000000000005a
ARG9= 0000000000650850
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee18
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee04
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee4c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eee14
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eee18
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee44
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef30
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeefc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef0c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000094
ARG8= 00000000001eef44
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000094
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef58
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee810
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee828
ARG2= 0000000000000044
ARG3= 00000000001ee92c
ARG4= 000000000056dfe0
ARG5= 00000000001ee860
ARG6= 000000000056df80
ARG7= 0000000000560000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102c, EDX=00000000001ee8e4
RETURN ADDRESS=00000000773591dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8f8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000000b040704
ARG2= 0000000000000001
ARG3= 000000000b040704
ARG4= 00000000001ee9a8
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000000b040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee61c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee63c
ARG3= 00000000001ee64c
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee3cc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee478
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ee478
ARG2= 00000000001ee484
ARG3= 0000000000008000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee3cc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee30c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee348
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee30c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee348
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ed944
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eddb4
ARG1= 0000000000020019
ARG2= 00000000001ed96c
ARG3= 0000000000000c00
ARG4= 0000000000000410
ARG5= 00000000001ee4f4
ARG6= 00000000007c007a
ARG7= 00000000001ed994
ARG8= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ed944
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eddb4
ARG1= 0000000000020019
ARG2= 00000000001ed96c
ARG3= 0000000000000c00
ARG4= 0000000000000410
ARG5= 00000000001ee4f4
ARG6= 00000000009c009a
ARG7= 00000000001ed994
ARG8= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ed944
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eddb4
ARG1= 0000000000020019
ARG2= 00000000001ed96c
ARG3= 0000000000000c00
ARG4= 0000000000000410
ARG5= 00000000001ee4f4
ARG6= 00000000008e008c
ARG7= 00000000001ed994
ARG8= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001edd68
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000c8
ARG1= 00000000001edd94
ARG2= 0000000000000001
ARG3= 00000000001edde0
ARG4= 0000000000000214
ARG5= 00000000001eddac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001edd68
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000d0
ARG1= 00000000001edd94
ARG2= 0000000000000001
ARG3= 00000000001ee000
ARG4= 0000000000000214
ARG5= 00000000001eddac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001009, EDX=00000000001ee600
RETURN ADDRESS=000000007735ba26
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee500
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee330
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee34c
ARG2= 0000000077399140
ARG3= 00000000001ee4b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ee37c
RETURN ADDRESS=0000000077357722
ARG0= 00000000040101bc
ARG1= 00000000000a0000
ARG2= 00000000001ee480
ARG3= 00000000040101bc
ARG4= 00000000001ee4b8
ARG5= 00000000001ee3a8
ARG6= 00000000773577b3
ARG7= 00000000040101bc
ARG8= 00000000000a0000
ARG9= 00000000001ee458
ARG10= 00000000762d9587
ARG11= 00000000040101bc
ARG12= 0000000000000006
ARG13= 000000007632bdf0
ARG14= 000000000000000c
ARG15= 00000000757e4800
ARG16= 0000000000000103
ARG17= 000000000000000c
ARG18= 000000000100005b
ARG19= 00000000001ee468
ARG20= 000000007762ed38
ARG21= 00000000001ee4ca
ARG22= 00000000000002cb
ARG23= 0000000077350000
ARG24= 0000000077351dc0
ARG25= 000000007762ed7e
ARG26= 000000007773a62d
ARG27= 00000000001ee4c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ee0d8
RETURN ADDRESS=0000000077357471
ARG0= 000000005a0a0753
ARG1= 00000000000001a4
ARG2= 00000000001ee1fc
ARG3= 00000000001ee480
ARG4= 00000000040101bc
ARG5= 00000000001ee4b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c6, EDX=00000000001ee384
RETURN ADDRESS=000000007735b8be
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c6, EDX=00000000001ee384
RETURN ADDRESS=000000007735b8be
ARG0= 00000000040101bc
ARG1= 000000000000012e
ARG2= 00000000007587e0
ARG3= 00000000001ee39c
ARG4= 000000000000012e
ARG5= 000000000000012e
ARG6= 00000000001ee458
ARG7= 00000000762d963e
ARG8= 00000000040101bc
ARG9= 000000000000012e
ARG10= 00000000007587e0
ARG11= 000000007632bdf0
ARG12= 000000000000000c
ARG13= 00000000757e4800
ARG14= 0000000000000103
ARG15= 000000000000000c
ARG16= 000000000100005b
ARG17= 00000000001ee468
ARG18= 000000007762ed38
ARG19= 00000000001ee4ca
ARG20= 00000000000002cb
ARG21= 0000000077350000
ARG22= 0000000077351dc0
ARG23= 000000007762ed7e
ARG24= 000000007773a62d
ARG25= 00000000001ee4c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee36c
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000020464643
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee36c
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000072617666
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 00000000322f534f
ARG2= 000000000000003e
ARG3= 00000000001ee1ac
ARG4= 0000000000000004
ARG5= 00000000001ee1e4
ARG6= 00000000040101bc
ARG7= 000000007735b8e8
ARG8= 00000000001ee1c0
ARG9= 00000000762db71c
ARG10= 00000000040101bc
ARG11= 00000000322f534f
ARG12= 000000000000003e
ARG13= 00000000001ee1ac
ARG14= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000070616d63
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000070616d63
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100a, EDX=00000000001ee1c4
RETURN ADDRESS=000000007735b9ca
ARG0= 00000000040101bc
ARG1= 0000000000758878
ARG2= 00000000001ee548
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001edfa4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ee108
ARG1= 0000000000000109
ARG2= 00000000001edff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000f4, EDX=00000000001eddf0
RETURN ADDRESS=000000007761553c
ARG0= 00000000000000d4
ARG1= 0000000000000004
ARG2= 00000000001edf54
ARG3= 00000000000000b0
ARG4= 00000000001ede2c
ARG5= 00000000001ee050
ARG6= 00000000000000d4
ARG7= 00000000001ee068
ARG8= 00000000001ee008
ARG9= 00000000772bb7db
ARG10= 00000000000000d4
ARG11= 0000000000000004
ARG12= 00000000001ede98
ARG13= 00000000000000b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ee0c4
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000000b0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000000b0a070b
ARG1= 0000000000759a42
ARG2= 000000000000000f
ARG3= 0000000000759a40
ARG4= 0000000000000b0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000001
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759a60
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000001
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000001c2
ARG5= 00000000001edf28
ARG6= 0000000000759a60
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000001c2
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000000c0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000000c0a070b
ARG1= 0000000000759a60
ARG2= 0000000000000023
ARG3= 0000000000759a40
ARG4= 0000000000000c0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000002
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759a88
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000002
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000001d6
ARG5= 00000000001edf28
ARG6= 0000000000759a88
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000001d6
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000000d0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000000d0a070b
ARG1= 0000000000759a88
ARG2= 0000000000000040
ARG3= 0000000000759a40
ARG4= 0000000000000d0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000003
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759ac2
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000003
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000001ce
ARG5= 00000000001edf28
ARG6= 0000000000759ac2
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000001ce
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000000e0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000000e0a070b
ARG1= 0000000000759ac2
ARG2= 000000000000005a
ARG3= 0000000000759a40
ARG4= 0000000000000e0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000004
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759af6
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000004
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000000e0
ARG5= 00000000001edf28
ARG6= 0000000000759af6
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000000e0
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000000f0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000000f0a070b
ARG1= 0000000000759af6
ARG2= 000000000000006f
ARG3= 0000000000759a40
ARG4= 0000000000000f0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000005
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b20
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000005
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000000e0
ARG5= 00000000001edf28
ARG6= 0000000000759b20
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000000e0
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000100a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000100a070b
ARG1= 0000000000759b20
ARG2= 0000000000000085
ARG3= 0000000000759a40
ARG4= 000000000000100a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000006
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b4c
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000110a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000110a070b
ARG1= 0000000000759b4c
ARG2= 000000000000008d
ARG3= 0000000000759a40
ARG4= 000000000000110a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000007
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b5c
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000007
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000001d2
ARG5= 00000000001edf28
ARG6= 0000000000759b5c
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000001d2
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000120a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000120a070b
ARG1= 0000000000759b5c
ARG2= 0000000000000097
ARG3= 0000000000759a40
ARG4= 000000000000120a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000008
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b70
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000008
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000000de
ARG5= 00000000001edf28
ARG6= 0000000000759b70
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000000de
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000130a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000130a070b
ARG1= 0000000000759b70
ARG2= 00000000000000a0
ARG3= 0000000000759a40
ARG4= 000000000000130a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000009
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b82
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000140a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000140a070b
ARG1= 0000000000759b82
ARG2= 00000000000000aa
ARG3= 0000000000759a40
ARG4= 000000000000140a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000a
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759b96
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000a
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 0000000000000112
ARG5= 00000000001edf28
ARG6= 0000000000759b96
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 0000000000000112
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000150a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000150a070b
ARG1= 0000000000759b96
ARG2= 00000000000000b9
ARG3= 0000000000759a40
ARG4= 000000000000150a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000b
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759bb4
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000b
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000010e
ARG5= 00000000001edf28
ARG6= 0000000000759bb4
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000010e
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000160a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000160a070b
ARG1= 0000000000759bb4
ARG2= 00000000000000c7
ARG3= 0000000000759a40
ARG4= 000000000000160a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000c
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759bd0
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000c
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 0000000000000110
ARG5= 00000000001edf28
ARG6= 0000000000759bd0
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 0000000000000110
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000170a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000170a070b
ARG1= 0000000000759bd0
ARG2= 00000000000000d6
ARG3= 0000000000759a40
ARG4= 000000000000170a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000d
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759bee
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000d
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000014e
ARG5= 00000000001edf28
ARG6= 0000000000759bee
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000014e
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000180a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000180a070b
ARG1= 0000000000759bee
ARG2= 00000000000000ea
ARG3= 0000000000759a40
ARG4= 000000000000180a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000e
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759c16
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000e
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 0000000000000162
ARG5= 00000000001edf28
ARG6= 0000000000759c16
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 0000000000000162
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000190a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000190a070b
ARG1= 0000000000759c16
ARG2= 00000000000000fe
ARG3= 0000000000759a40
ARG4= 000000000000190a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000f
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759c3e
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000000f
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000019a
ARG5= 00000000001edf28
ARG6= 0000000000759c3e
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000019a
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001a0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001a0a070b
ARG1= 0000000000759c3e
ARG2= 0000000000000117
ARG3= 0000000000759a40
ARG4= 0000000000001a0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000010
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759c70
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000010
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000000e0
ARG5= 00000000001edf28
ARG6= 0000000000759c70
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000000e0
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001b0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001b0a070b
ARG1= 0000000000759c70
ARG2= 000000000000011f
ARG3= 0000000000759a40
ARG4= 0000000000001b0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000011
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759c80
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000011
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 0000000000000110
ARG5= 00000000001edf28
ARG6= 0000000000759c80
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 0000000000000110
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001c0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001c0a070b
ARG1= 0000000000759c80
ARG2= 000000000000012c
ARG3= 0000000000759a40
ARG4= 0000000000001c0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000012
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759c9a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001d0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001d0a070b
ARG1= 0000000000759c9a
ARG2= 0000000000000135
ARG3= 0000000000759a40
ARG4= 0000000000001d0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000013
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759cac
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000013
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000015a
ARG5= 00000000001edf28
ARG6= 0000000000759cac
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000015a
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001e0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001e0a070b
ARG1= 0000000000759cac
ARG2= 0000000000000146
ARG3= 0000000000759a40
ARG4= 0000000000001e0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000014
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759cce
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000014
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000018e
ARG5= 00000000001edf28
ARG6= 0000000000759cce
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000018e
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000001f0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000001f0a070b
ARG1= 0000000000759cce
ARG2= 000000000000015c
ARG3= 0000000000759a40
ARG4= 0000000000001f0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000015
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759cfa
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000015
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 0000000000000132
ARG5= 00000000001edf28
ARG6= 0000000000759cfa
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 0000000000000132
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000200a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000200a070b
ARG1= 0000000000759cfa
ARG2= 0000000000000164
ARG3= 0000000000759a40
ARG4= 000000000000200a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000016
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d0a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000016
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000015a
ARG5= 00000000001edf28
ARG6= 0000000000759d0a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000015a
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000210a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000210a070b
ARG1= 0000000000759d0a
ARG2= 0000000000000171
ARG3= 0000000000759a40
ARG4= 000000000000210a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000017
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d24
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000017
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000013a
ARG5= 00000000001edf28
ARG6= 0000000000759d24
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000013a
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000220a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000220a070b
ARG1= 0000000000759d24
ARG2= 000000000000017c
ARG3= 0000000000759a40
ARG4= 000000000000220a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000018
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d3a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000018
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000015e
ARG5= 00000000001edf28
ARG6= 0000000000759d3a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000015e
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000230a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000230a070b
ARG1= 0000000000759d3a
ARG2= 000000000000018c
ARG3= 0000000000759a40
ARG4= 000000000000230a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000019
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d5a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000240a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000240a070b
ARG1= 0000000000759d5a
ARG2= 0000000000000197
ARG3= 0000000000759a40
ARG4= 000000000000240a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001a
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d70
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000250a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000250a070b
ARG1= 0000000000759d70
ARG2= 00000000000001a3
ARG3= 0000000000759a40
ARG4= 000000000000250a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001b
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759d88
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000260a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000260a070b
ARG1= 0000000000759d88
ARG2= 00000000000001b1
ARG3= 0000000000759a40
ARG4= 000000000000260a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001c
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759da4
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000270a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000270a070b
ARG1= 0000000000759da4
ARG2= 00000000000001bc
ARG3= 0000000000759a40
ARG4= 000000000000270a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001d
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759dba
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000280a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000280a070b
ARG1= 0000000000759dba
ARG2= 00000000000001c8
ARG3= 0000000000759a40
ARG4= 000000000000280a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001e
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759dd2
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000290a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000290a070b
ARG1= 0000000000759dd2
ARG2= 00000000000001d0
ARG3= 0000000000759a40
ARG4= 000000000000290a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 000000000000001f
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759de2
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002a0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002a0a070b
ARG1= 0000000000759de2
ARG2= 00000000000001db
ARG3= 0000000000759a40
ARG4= 0000000000002a0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759df8
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002b0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002b0a070b
ARG1= 0000000000759df8
ARG2= 00000000000001e2
ARG3= 0000000000759a40
ARG4= 0000000000002b0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000021
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e06
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002c0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002c0a070b
ARG1= 0000000000759e06
ARG2= 00000000000001ec
ARG3= 0000000000759a40
ARG4= 0000000000002c0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000022
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e1a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000022
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 00000000000000e4
ARG5= 00000000001edf28
ARG6= 0000000000759e1a
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 00000000000000e4
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002d0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002d0a070b
ARG1= 0000000000759e1a
ARG2= 00000000000001f3
ARG3= 0000000000759a40
ARG4= 0000000000002d0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000023
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e28
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002e0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002e0a070b
ARG1= 0000000000759e28
ARG2= 00000000000001fd
ARG3= 0000000000759a40
ARG4= 0000000000002e0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000024
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e3c
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 000000002f0a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 000000002f0a070b
ARG1= 0000000000759e3c
ARG2= 0000000000000206
ARG3= 0000000000759a40
ARG4= 0000000000002f0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000025
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e4e
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000300a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000300a070b
ARG1= 0000000000759e4e
ARG2= 0000000000000212
ARG3= 0000000000759a40
ARG4= 000000000000300a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000026
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e66
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000026
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000014a
ARG5= 00000000001edf28
ARG6= 0000000000759e66
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000014a
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000310a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000310a070b
ARG1= 0000000000759e66
ARG2= 0000000000000221
ARG3= 0000000000759a40
ARG4= 000000000000310a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000027
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759e84
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000027
ARG2= 0000000000000001
ARG3= 000000000027dff0
ARG4= 000000000000017e
ARG5= 00000000001edf28
ARG6= 0000000000759e84
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
ARG9= 000000000000017e
ARG10= 00000000001ee07c
ARG11= 00000000001ee084
ARG12= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001edee8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001edf1c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
ARG3= 0000000000000001
ARG4= 00000000001ee1b4
ARG5= 00000000762dd726
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee16c
ARG9= 0000000000758878
ARG10= 00000000007587e0
ARG11= 0000000000758a60
ARG12= 00000000320a070b
ARG13= 000000007735b9ec
ARG14= 0000000000000489
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee0a4
RETURN ADDRESS=000000007735697e
ARG0= 00000000320a070b
ARG1= 0000000000759e84
ARG2= 0000000000000235
ARG3= 0000000000759a40
ARG4= 000000000000320a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000077, EDX=00000000001edefc
RETURN ADDRESS=0000000077614d6c
ARG0= 00000000000000d4
ARG1= 0000000000000028
ARG2= 0000000000000001
ARG3= 00000000001edf50
ARG4= 00000000000000dc
ARG5= 00000000001edf28
ARG6= 0000000000759eac
ARG7= 00000000000000d4
ARG8= 00000000770de0e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee078
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000d4
ARG1= 0000000000000235
ARG2= 00000000001ee0c4
ARG3= 00000000772bfa6e
ARG4= 00000000001ee0cc
ARG5= 0000000005123a71
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ee0b0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ee1b4
ARG3= 00000000762dd59d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee14c
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 000000007078616d
ARG2= 0000000000000004
ARG3= 00000000007588dc
ARG4= 0000000000000002
ARG5= 00000000007588dc
ARG6= 00000000001ee1e8
ARG7= 00000000007587e0
ARG8= 00000000001ee1c0
ARG9= 00000000762dca0c
ARG10= 00000000040101bc
ARG11= 000000007078616d
ARG12= 0000000000000004
ARG13= 00000000007588dc
ARG14= 0000000000000002
ARG15= 0000000000758a60
ARG16= 0000000000758878
ARG17= 00000000007587e0
ARG18= 0000000000759b5a
ARG19= 0000000000000049
ARG20= 00000000001ee1c4
ARG21= 00000000762dd976
ARG22= 0000000000759b5c
ARG23= 0000000000758a60
ARG24= 0000000000758878
ARG25= 00000000007587e0
ARG26= 0000000000000001
ARG27= 00000000001ee434
ARG28= 00000000762ddc5e
ARG29= 00000000040101bc
ARG30= 00000000001ee40c
ARG31= 0000000000758878
ARG32= 00000000001ee548
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001edfcc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001edc54
RETURN ADDRESS=000000007761516c
ARG0= 00000000001edd9c
ARG1= 0000000000000101
ARG2= 00000000001edca4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001edc0c
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000d4
ARG1= 00000000001edd2c
ARG2= 0000000000000002
ARG3= 00000000001edc68
ARG4= 0000000000000090
ARG5= 00000000001edc44
ARG6= 00000000770deff5
ARG7= 00000000001edd90
ARG8= 00000000001edd94
ARG9= 00000000000000d4
ARG10= 00000000001edd40
ARG11= 00000000001edd48
ARG12= 000000000000ffff
ARG13= 00000000001edd44
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001edc0c
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000d4
ARG1= 00000000001edd2c
ARG2= 0000000000000002
ARG3= 00000000001edc68
ARG4= 0000000000000090
ARG5= 00000000001edc44
ARG6= 00000000770deff5
ARG7= 00000000001edd90
ARG8= 00000000001edfb0
ARG9= 00000000000000d4
ARG10= 00000000001edd40
ARG11= 00000000001edd48
ARG12= 000000000000ffff
ARG13= 00000000001edd44
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001edd30
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000d4
ARG1= 0000000076304bff
ARG2= 00000000001edd7c
ARG3= 00000000772bfa6e
ARG4= 00000000001edd84
ARG5= 00000000051207c9
ARG6= 0000000000758a60
ARG7= 0000000076304bff
ARG8= 00000000007587e0
ARG9= 0000000077319332
ARG10= 00000000722724b5
ARG11= 00000000001edd4c
ARG12= 00000000772bfdfa
ARG13= 00000000001eeffc
ARG14= 0000000077319332
ARG15= 000000007227203d
ARG16= 00000000fffffffe
ARG17= 00000000001ee1c8
ARG18= 00000000762e6ad3
ARG19= 00000000000000d4
ARG20= 0000000000758a54
ARG21= 0000000000000214
ARG22= 0000000000000021
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000042, EDX=00000000001edc2c
RETURN ADDRESS=0000000077614a1c
ARG0= 00000000001edcc8
ARG1= 0000000080100080
ARG2= 00000000001edc6c
ARG3= 00000000001edcb0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000e7, EDX=00000000001edcd4
RETURN ADDRESS=000000007761546c
ARG0= 00000000000000d4
ARG1= 00000000001edd08
ARG2= 00000000001edcf0
ARG3= 0000000000000018
ARG4= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000111, EDX=00000000001edc58
RETURN ADDRESS=000000007761570c
ARG0= 00000000000000d4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001edc78
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001edce0
ARG1= 00000000000f0005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001edcc8
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000d8
ARG1= 00000000ffffffff
ARG2= 00000000001edd14
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 000000004654534a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 00000000534f5047
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000042555347
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000046454447
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001edfa8
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001edfe4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 00000000534f5047
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000042555347
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b6, EDX=00000000001ee150
RETURN ADDRESS=000000007735b970
ARG0= 00000000040101bc
ARG1= 0000000046454447
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ee434
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 000000000000005a
ARG2= 00000000007587e0
ARG3= 00000000040101bc
ARG4= 000000000075f6d0
ARG5= 00000000001ee550
ARG6= 00000000762d9efd
ARG7= 00000000040101bc
ARG8= 000000000000005a
ARG9= 000000007632bdf0
ARG10= 000000000000000c
ARG11= 00000000007508f4
ARG12= 000000000075f6d0
ARG13= 00000000040101bc
ARG14= 00000000007587e0
ARG15= 000000007632b848
ARG16= 00000000007508f4
ARG17= 000000000000000f
ARG18= 0000000000000006
ARG19= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ee42c
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 0000000000000058
ARG2= 00000000007587e0
ARG3= 00000000040101bc
ARG4= 000000000075f6d0
ARG5= 00000000001ee550
ARG6= 00000000762d9f10
ARG7= 00000000040101bc
ARG8= 0000000000000058
ARG9= 000000000000000c
ARG10= 0000000000000240
ARG11= 000000007632bdf0
ARG12= 000000000000000c
ARG13= 00000000007508f4
ARG14= 000000000075f6d0
ARG15= 00000000040101bc
ARG16= 00000000007587e0
ARG17= 000000007632b848
ARG18= 00000000007508f4
ARG19= 000000000000000f
ARG20= 0000000000000006
ARG21= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a4, EDX=00000000001ee0bc
RETURN ADDRESS=000000007735b992
ARG0= 00000000040101bc
ARG1= 0000000000000900
ARG2= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee4fc
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010fe, EDX=00000000001ee56c
RETURN ADDRESS=000000007735687d
ARG0= 00000000040101bc
ARG1= 000000000000000f
ARG2= 000000000000000c
ARG3= 0000000000000003
ARG4= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ee3f4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ee534
ARG1= 0000000000000101
ARG2= 00000000001ee444
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee328
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee450
ARG2= 0000000000000002
ARG3= 00000000001ee384
ARG4= 0000000000000090
ARG5= 00000000001ee360
ARG6= 00000000770deff5
ARG7= 00000000001ee4dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee4d0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 00000000007507d0
ARG2= 00000000001ee51c
ARG3= 00000000772bfa6e
ARG4= 00000000001ee524
ARG5= 0000000005123fa9
ARG6= 000000007709bec4
ARG7= 00000000007507d0
ARG8= 00000000007508f4
ARG9= 00000000001ee518
ARG10= 00000000762e6c94
ARG11= 00000000001ee4ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee4fc
RETURN ADDRESS=000000007735b4c4
ARG0= 00000000040101bc
ARG1= 0000000000000020
ARG2= 00000000001ee538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ee3f4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ee534
ARG1= 0000000000000109
ARG2= 00000000001ee444
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000f4, EDX=00000000001ee220
RETURN ADDRESS=000000007761553c
ARG0= 00000000000000dc
ARG1= 0000000000000004
ARG2= 00000000001ee384
ARG3= 00000000000000b0
ARG4= 00000000001ee25c
ARG5= 00000000001ee480
ARG6= 00000000000000dc
ARG7= 00000000001ee498
ARG8= 00000000001ee438
ARG9= 00000000772bb7db
ARG10= 00000000000000dc
ARG11= 0000000000000004
ARG12= 00000000001ee2c8
ARG13= 00000000000000b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001ee30c
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001ee30c
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000dc
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001ee30c
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000dc
ARG1= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001ee30c
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000dc
ARG1= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ee414
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ee238
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ee26c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee4a8
ARG3= 0000000000000001
ARG4= 00000000001ee4f0
ARG5= 00000000762e23b7
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee4a8
ARG9= 0000000000000004
ARG10= 00000000007594b8
ARG11= 0000000000000004
ARG12= 000000007735b9ec
ARG13= 00000000018a002e
ARG14= 00000000330a070b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000007594b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735697e
ARG0= 00000000330a070b
ARG1= 00000000007594f8
ARG2= 00000000007594b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ee238
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ee26c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee4a8
ARG3= 0000000000000001
ARG4= 00000000001ee4f0
ARG5= 00000000762e23b7
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee4a8
ARG9= 0000000000000004
ARG10= 00000000007594b8
ARG11= 0000000000000004
ARG12= 000000007735b9ec
ARG13= 00000000018a002e
ARG14= 00000000340a070b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 0000000000759538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735697e
ARG0= 00000000340a070b
ARG1= 0000000000759578
ARG2= 0000000000759538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ee238
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ee26c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee4a8
ARG3= 0000000000000001
ARG4= 00000000001ee4f0
ARG5= 00000000762e23b7
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee4a8
ARG9= 0000000000000004
ARG10= 00000000007594b8
ARG11= 0000000000000004
ARG12= 000000007735b9ec
ARG13= 00000000018a002e
ARG14= 00000000350a070b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000007595b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735697e
ARG0= 00000000350a070b
ARG1= 00000000007595f8
ARG2= 00000000007595b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ee238
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ee26c
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ee4a8
ARG3= 0000000000000001
ARG4= 00000000001ee4f0
ARG5= 00000000762e23b7
ARG6= 0000000003010699
ARG7= 0000000000000020
ARG8= 00000000001ee4a8
ARG9= 0000000000000004
ARG10= 00000000007594b8
ARG11= 0000000000000004
ARG12= 000000007735b9ec
ARG13= 00000000018a002e
ARG14= 00000000360a070b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 0000000000759638
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735697e
ARG0= 00000000360a070b
ARG1= 0000000000759678
ARG2= 0000000000759638
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ee400
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ee4f0
ARG3= 00000000762e24b4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ee3f4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ee52c
ARG1= 0000000000000101
ARG2= 00000000001ee444
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee4d0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 00000000007507d0
ARG2= 00000000001ee51c
ARG3= 00000000772bfa6e
ARG4= 00000000001ee524
ARG5= 0000000005123fa9
ARG6= 000000007709bec4
ARG7= 00000000007507d0
ARG8= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a4, EDX=00000000001edf2c
RETURN ADDRESS=000000007735b992
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a4, EDX=00000000001edf2c
RETURN ADDRESS=000000007735b992
ARG0= 00000000040101bc
ARG1= 0000000000000040
ARG2= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eea24
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eeadc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef30
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeefc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef0c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000094
ARG8= 00000000001eef44
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000094
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef58
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee810
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee828
ARG2= 0000000000000044
ARG3= 00000000001ee92c
ARG4= 000000000000000f
ARG5= 000000000000000c
ARG6= 0000000000000003
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8f8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000000c040704
ARG2= 0000000000000001
ARG3= 000000000c040704
ARG4= 00000000001ee9a8
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000000c040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee61c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee63c
ARG3= 00000000001ee64c
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee500
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee4fc
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eea24
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eeadc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef30
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeefc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef0c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000094
ARG8= 00000000001eef44
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000094
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef58
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee810
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee828
ARG2= 0000000000000044
ARG3= 00000000001ee92c
ARG4= 000000000000000f
ARG5= 000000000000000c
ARG6= 0000000000000003
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8f8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000000d040704
ARG2= 0000000000000001
ARG3= 000000000d040704
ARG4= 00000000001ee9a8
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000000d040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee61c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee63c
ARG3= 00000000001ee64c
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee500
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee4fc
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eea24
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eeadc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef30
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeefc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef0c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000094
ARG8= 00000000001eef44
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000094
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef58
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee810
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee828
ARG2= 0000000000000044
ARG3= 00000000001ee92c
ARG4= 000000000000000f
ARG5= 000000000000000c
ARG6= 0000000000000003
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8f8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000000e040704
ARG2= 0000000000000001
ARG3= 000000000e040704
ARG4= 00000000001ee9a8
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000000e040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee61c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee63c
ARG3= 00000000001ee64c
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee500
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee4fc
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eea24
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eeadc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef28
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef48
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef30
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeefc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef0c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000094
ARG8= 00000000001eef44
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000094
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef58
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee810
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee828
ARG2= 0000000000000044
ARG3= 00000000001ee92c
ARG4= 000000000000000f
ARG5= 000000000000000c
ARG6= 0000000000000003
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8f8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000000f040704
ARG2= 0000000000000001
ARG3= 000000000f040704
ARG4= 00000000001ee9a8
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000000f040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee61c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee63c
ARG3= 00000000001ee64c
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee500
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4e4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee4fc
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ee8e4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eea24
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eeadc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef2d4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2c8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001190, EDX=00000000001ef27c
RETURN ADDRESS=00000000771b3d1b
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2c0
ARG3= 0000000074649a7a
ARG4= 0000000000030142
ARG5= 00000000001ef2a8
ARG6= 000000000056da60
ARG7= 00000000001ef2f0
ARG8= 00000000001ef380
ARG9= 0000000000000064
ARG10= 0000000000000064
ARG11= 00000000000002bc
ARG12= 00000000000001f4
ARG13= 0000000000000001
ARG14= 0000000000000417
ARG15= 00000000001ef2d4
ARG16= 0000000074649908
ARG17= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001244, EDX=00000000001ef278
RETURN ADDRESS=00000000771b358d
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef824
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000030142
ARG1= 00000000ffffffec
ARG2= 0000000000000110
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef67c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef69c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef674
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef694
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef67c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef6a4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000ffffffec
ARG8= 00000000001ef6f0
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 000000000000007c
ARG12= 00000000ffffffec
ARG13= 00000000001ef814
ARG14= 0000000077336b30
ARG15= 00000000001ef6f4
ARG16= 0000000077623b27
ARG17= 0000000077623b2c
ARG18= 000000007773b4b1
ARG19= 0000000077336b30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef684
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6a4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef678
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef698
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef680
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef67c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef69c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef674
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef694
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef67c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef6a4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000ffffffec
ARG8= 00000000001ef6f0
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 000000000000007d
ARG12= 00000000ffffffec
ARG13= 00000000001ef814
ARG14= 00000000ffffffec
ARG15= 00000000001ef814
ARG16= 000000000000007c
ARG17= 00000000001ef6f4
ARG18= 00000000771b86ef
ARG19= 0000000000030142
ARG20= 000000000000007c
ARG21= 00000000ffffffec
ARG22= 00000000001ef814
ARG23= 000000000000007c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef578
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef598
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef580
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef5a8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef5e0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 000000000000007d
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef45c
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056c760
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef4b4
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056c760
ARG8= 0000000000000104
ARG9= 00000000069afaed
ARG10= 00000000001ef5b0
ARG11= 000000000056da84
ARG12= 000000000056da60
ARG13= 0000000000a614de
ARG14= 00000000001ef488
ARG15= 000000000000004c
ARG16= 00000000001ef698
ARG17= 000000007467371f
ARG18= 0000000072e0df01
ARG19= 00000000fffffffe
ARG20= 00000000001ef4d8
ARG21= 000000007464d247
ARG22= 000000000056c760
ARG23= 000000000056da60
ARG24= 00000000480a0759
ARG25= 000000000056da60
ARG26= 000000007467a1c8
ARG27= 00000000001ef4e4
ARG28= 000000007464d1b9
ARG29= 00000000001ef5b8
ARG30= 000000007464d212
ARG31= 0000000000010000
ARG32= 0000000000030142
ARG33= 00000000480a0759
ARG34= 00000000001ef5a8
ARG35= 0000000000000002
ARG36= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef5b8
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 0000000000000002
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef4fc
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef06c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef06c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef054
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef000
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef020
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef008
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef030
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001ef068
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef07c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eefac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef29c
ARG3= 00000000001eefbc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef200
ARG8= 00000000001ef000
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef29c
ARG12= 0000000000000011
ARG13= 0000000000030142
ARG14= 0000000000030142
ARG15= 00000000771b72b6
ARG16= 0000000005e2e18d
ARG17= 0000000000000094
ARG18= 00000000001ef178
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef20c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eefac
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef20c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eefac
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef20c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eefac
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001149, EDX=00000000001ef210
RETURN ADDRESS=00000000771b51e6
ARG0= 0000000000030142
ARG1= 00000000ffffffde
ARG2= 000000000000004e
ARG3= 00000000001ef2a0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef470
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef4b8
ARG2= 00000000480a0759
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a5, EDX=00000000001ee658
RETURN ADDRESS=000000007761504c
ARG0= 0000000000000020
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ef2cc
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000001fca480
ARG2= 0000000000000003
ARG3= 00000000001ef2f8
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef380
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef324
RETURN ADDRESS=00000000771bf0ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef310
RETURN ADDRESS=00000000771b151c
ARG0= 000000000004012e
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef33c
ARG5= 00000000001ef36c
ARG6= 0000000001fcb41a
ARG7= 0000000001fcb416
ARG8= 0000000000000090
ARG9= 0000000000000030
ARG10= 0000000000000143
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001256, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b151c
ARG0= 00000000000c00ff
ARG1= 00000000ffffffff
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef398
ARG5= 00000000001ef3c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef684
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6a4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef678
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef698
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef680
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b0d69
ARG0= 0000000000000200
ARG1= 00000000001ef7e8
ARG2= 00000000001ef510
ARG3= 00000000001ef7fc
ARG4= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ef1f8
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ef210
ARG1= 00000000001ef220
ARG2= 00000000001ef250
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ef210
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001ef1e8
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001ef218
ARG1= 00000000001ef268
ARG2= 00000000001ef278
ARG3= 00000000001ef25c
ARG4= 00000000000002a5
ARG5= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b0d69
ARG0= 0000000000000200
ARG1= 00000000001ef7e8
ARG2= 00000000001ef510
ARG3= 00000000001ef7fc
ARG4= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000042, EDX=00000000001eee40
RETURN ADDRESS=0000000077614a1c
ARG0= 00000000001eeedc
ARG1= 0000000080100080
ARG2= 00000000001eee80
ARG3= 00000000001eeec4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001eee88
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001eef00
ARG1= 00000000000f0005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eeeb0
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000e0
ARG1= 00000000ffffffff
ARG2= 00000000001eeefc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eeee8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e0
ARG1= 0000000000000001
ARG2= 00000000001eef10
ARG3= 00000000772cb6f5
ARG4= 00000000000000e0
ARG5= 0000000077336620
ARG6= 0000000000000104
ARG7= 00000000772cb1c0
ARG8= 00000000001ef13c
ARG9= 00000000772cb7ad
ARG10= 00000000001eef30
ARG11= 00000000001eef2c
ARG12= 00000000757e4990
ARG13= 0000000077336620
ARG14= 000000000027dff0
ARG15= 0000000000790000
ARG16= 00000000003a0043
ARG17= 000000000057005c
ARG18= 00000000006e0069
ARG19= 00000000006f0064
ARG20= 0000000000730077
ARG21= 000000000047005c
ARG22= 00000000006f006c
ARG23= 0000000000610062
ARG24= 000000000069006c
ARG25= 000000000061007a
ARG26= 0000000000690074
ARG27= 00000000006e006f
ARG28= 000000000053005c
ARG29= 000000000072006f
ARG30= 0000000000690074
ARG31= 000000000067006e
ARG32= 000000000073005c
ARG33= 000000000072006f
ARG34= 0000000000640074
ARG35= 0000000000660065
ARG36= 0000000000750061
ARG37= 000000000074006c
ARG38= 00000000006e002e
ARG39= 000000000073006c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eeee8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 0000000000000001
ARG2= 00000000001eef10
ARG3= 00000000772cb6fb
ARG4= 00000000000000dc
ARG5= 0000000077336620
ARG6= 0000000000000104
ARG7= 00000000772cb1c0
ARG8= 00000000001ef13c
ARG9= 00000000772cb7ad
ARG10= 00000000001eef30
ARG11= 00000000001eef2c
ARG12= 00000000757e4990
ARG13= 0000000077336620
ARG14= 000000000027dff0
ARG15= 0000000000790000
ARG16= 00000000003a0043
ARG17= 000000000057005c
ARG18= 00000000006e0069
ARG19= 00000000006f0064
ARG20= 0000000000730077
ARG21= 000000000047005c
ARG22= 00000000006f006c
ARG23= 0000000000610062
ARG24= 000000000069006c
ARG25= 000000000061007a
ARG26= 0000000000690074
ARG27= 00000000006e006f
ARG28= 000000000053005c
ARG29= 000000000072006f
ARG30= 0000000000690074
ARG31= 000000000067006e
ARG32= 000000000073005c
ARG33= 000000000072006f
ARG34= 0000000000640074
ARG35= 0000000000660065
ARG36= 0000000000750061
ARG37= 000000000074006c
ARG38= 00000000006e002e
ARG39= 000000000073006c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eef70
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eef88
ARG1= 00000000001eef98
ARG2= 00000000001eefc8
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eef88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eef34
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eef64
ARG1= 00000000001eefb4
ARG2= 00000000001eefc4
ARG3= 00000000001eefa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b0d69
ARG0= 0000000000000200
ARG1= 00000000001ef7e8
ARG2= 00000000001ef510
ARG3= 00000000001ef7fc
ARG4= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2d4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ef2e4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef288
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef200
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef23c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ef200
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef244
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a912
ARG2= 0000000000020144
ARG3= 00000000772bf17d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eef74
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 0000000000560808
ARG2= 00000000001ef1b8
ARG3= 0000000074647a91
ARG4= 0000000000020144
ARG5= 00000000001eefac
ARG6= 0000000000000104
ARG7= 0000000000020144
ARG8= 0000000000560808
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 0000000000560844
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eef64
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eefac
ARG3= 0000000000000208
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed58
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a910
ARG2= 00000000771b7829
ARG3= 00000000001ef1b8
ARG4= 0000000074646f2e
ARG5= 0000000000020144
ARG6= 000000000000a910
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 000000007762e4ef
ARG11= 0000000000560940
ARG12= 00000000001ef1f0
ARG13= 00000000001ef1ec
ARG14= 00000000747efa88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed58
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a911
ARG2= 00000000771b7829
ARG3= 00000000001ef1b8
ARG4= 0000000074646f48
ARG5= 0000000000020144
ARG6= 000000000000a911
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 000000007762e4ef
ARG11= 0000000000560940
ARG12= 00000000001ef1f0
ARG13= 00000000001ef1ec
ARG14= 00000000747efa88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef1a0
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000020144
ARG1= 000000000000a912
ARG2= 0000000000010003
ARG3= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef1b8
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2e4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1c8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1c8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef15c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef17c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef164
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef18c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef1c4
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef178
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef198
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef180
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001197, EDX=00000000001eef20
RETURN ADDRESS=00000000771b3195
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001197, EDX=00000000001ef034
RETURN ADDRESS=00000000771b3195
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef128
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a912
ARG2= 0000000000020144
ARG3= 00000000772bf17d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eeed0
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 0000000000560808
ARG2= 00000000001ef114
ARG3= 0000000074647a91
ARG4= 0000000000020144
ARG5= 00000000001eef08
ARG6= 0000000000000104
ARG7= 0000000000020144
ARG8= 0000000000560808
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 0000000000560844
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eef08
ARG3= 0000000000000208
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a910
ARG2= 00000000771b7829
ARG3= 00000000001ef114
ARG4= 0000000074646f2e
ARG5= 0000000000020144
ARG6= 000000000000a910
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 00000000776222ae
ARG11= 0000000000560940
ARG12= 00000000001ef14c
ARG13= 00000000001ef148
ARG14= 0000000074646ba0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a911
ARG2= 00000000771b7829
ARG3= 00000000001ef114
ARG4= 0000000074646f48
ARG5= 0000000000020144
ARG6= 000000000000a911
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 00000000776222ae
ARG11= 0000000000560940
ARG12= 00000000001ef14c
ARG13= 00000000001ef148
ARG14= 0000000074646ba0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef18c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a91c
ARG2= 000000000056e388
ARG3= 00000000001ef1d4
ARG4= 00000000746497c7
ARG5= 0000000000020144
ARG6= 000000000000a91c
ARG7= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef140
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef160
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a91c
ARG2= 000000000056e388
ARG3= 00000000001ef1d4
ARG4= 0000000074647b5d
ARG5= 0000000000020144
ARG6= 000000000000a91c
ARG7= 0000000000000083
ARG8= 000000000056e388
ARG9= 00000000001ef1d4
ARG10= 0000000074643199
ARG11= 000000000056e398
ARG12= 0000000000000002
ARG13= 0000000000000001
ARG14= 00000000001ef1bc
ARG15= 000000000056e388
ARG16= 0000000000020144
ARG17= 000000000056e388
ARG18= 0000000000000083
ARG19= 00000000001ef1d4
ARG20= 0000000074643295
ARG21= 0000000000000083
ARG22= 000000007467b310
ARG23= 0000000000000025
ARG24= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef12c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2d4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef2dc
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef290
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef0e0
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef10c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef1f0
RETURN ADDRESS=00000000771b704d
ARG0= 0000000000020144
ARG1= 00000000001ef470
ARG2= 000000000027e758
ARG3= 0000000040300104
ARG4= 00000000001ef220
ARG5= 00000000747cb8ae
ARG6= 000000000027e758
ARG7= 0000000000000001
ARG8= 00000000001ef470
ARG9= 000000000027e758
ARG10= 00000000001ef238
ARG11= 000000007481875e
ARG12= 000000000027e758
ARG13= 0000000040300104
ARG14= 000000000027e758
ARG15= 0000000000000001
ARG16= 00000000001ef2b8
ARG17= 0000000074818737
ARG18= 0000000040300104
ARG19= 00000000001ef470
ARG20= 0000000000000001
ARG21= 000000000027e758
ARG22= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef180
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d5, EDX=00000000001ef1f8
RETURN ADDRESS=000000007735c0b4
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1dc
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef204
ARG3= 00000000747cacea
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 000000000027e758
ARG7= 0000000040300104
ARG8= 00000000001ef220
ARG9= 00000000747cb8ca
ARG10= 000000000027e758
ARG11= 00000000040101bc
ARG12= 0000000000000001
ARG13= 00000000001ef470
ARG14= 000000000027e758
ARG15= 00000000001ef238
ARG16= 000000007481875e
ARG17= 000000000027e758
ARG18= 0000000040300104
ARG19= 000000000027e758
ARG20= 0000000000000001
ARG21= 00000000001ef2b8
ARG22= 0000000074818737
ARG23= 0000000040300104
ARG24= 00000000001ef470
ARG25= 0000000000000001
ARG26= 000000000027e758
ARG27= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1f8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef048
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef074
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b0, EDX=00000000001ef1b4
RETURN ADDRESS=00000000771aaab6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b0, EDX=00000000001ef1b0
RETURN ADDRESS=00000000771aaab6
ARG0= 0000000000000002
ARG1= 000000000027e970
ARG2= 00000000040101bc
ARG3= 000000000027e758
ARG4= 0000000040300104
ARG5= 000000000000000b
ARG6= 00000000040101bc
ARG7= 000000000027e758
ARG8= 0000000040300104
ARG9= 0000000000000001
ARG10= 00000000001ef1cc
ARG11= 00000000040101bc
ARG12= 00000000001ef394
ARG13= 00000000772062e3
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee850
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eecc4
ARG1= 0000000000020019
ARG2= 00000000001ee878
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eec68
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001eec94
ARG2= 0000000000000001
ARG3= 00000000001eed34
ARG4= 0000000000000214
ARG5= 00000000001eecac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eecb4
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 0000000000000409
ARG2= 00000000000000dc
ARG3= 00000000001ef154
ARG4= 00000000757b20ab
ARG5= 000000000007f2e0
ARG6= 00000000757b1f40
ARG7= 00000000001eed34
ARG8= 0000000000000409
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee850
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eecc4
ARG1= 0000000000020019
ARG2= 00000000001ee878
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eec68
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001eec94
ARG2= 0000000000000001
ARG3= 00000000001eed34
ARG4= 0000000000000214
ARG5= 00000000001eecac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eecb4
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 0000000000000208
ARG2= 00000000000000dc
ARG3= 00000000001ef154
ARG4= 00000000757b20cf
ARG5= 000000000007f2e0
ARG6= 00000000757b217c
ARG7= 00000000001eed34
ARG8= 0000000000000409
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef1a4
RETURN ADDRESS=00000000771b704d
ARG0= 0000000000020144
ARG1= 00000000001ef470
ARG2= 000000000027e758
ARG3= 0000000000000400
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ef078
RETURN ADDRESS=000000007735b4c4
ARG0= 00000000040101bc
ARG1= 0000000000000020
ARG2= 00000000001ef154
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eefc4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eefdc
ARG2= 0000000000000044
ARG3= 00000000001ef1cc
ARG4= 00000000001ef01c
ARG5= 000000007762e6ad
ARG6= 0000000000000001
ARG7= 00000000001ef200
ARG8= 000000007762e70c
ARG9= 00000000001ef06c
ARG10= 0000000077618816
ARG11= 00000000001ef014
ARG12= 000000007762f0e7
ARG13= 000000000026e9d8
ARG14= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001eef30
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001eef4c
ARG2= 0000000077399140
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ba, EDX=00000000001eef9c
RETURN ADDRESS=000000007735b52d
ARG0= 00000000040101bc
ARG1= 0000000076421bc8
ARG2= 0000000000000004
ARG3= 00000000001eefc8
ARG4= 0000000000000001
ARG5= 00000000040101bc
ARG6= 0000000000000101
ARG7= 0000000000000001
ARG8= 0000000061000017
ARG9= 000000007735a563
ARG10= 00000000001ef1cc
ARG11= 0000000006010e63
ARG12= 00000000001eefe4
ARG13= 0000000076421c26
ARG14= 00000000040101bc
ARG15= 0000000000000034
ARG16= 00000000001ef00c
ARG17= 000000007735af18
ARG18= 00000000040101bc
ARG19= 0000000077399c38
ARG20= 0000000000000034
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001eef14
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001eef30
ARG2= 0000000077399140
ARG3= 0000000077399c38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d7, EDX=00000000001eef78
RETURN ADDRESS=000000007735c0f2
ARG0= 00000000040101bc
ARG1= 0000000077399c38
ARG2= 0000000000000034
ARG3= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d5, EDX=00000000001ef128
RETURN ADDRESS=000000007735c0b4
ARG0= 00000000040101bc
ARG1= 00000000001ef16c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef190
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef21c
ARG3= 00000000747cb1f5
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 00000000001ef470
ARG7= 000000000027e758
ARG8= 0000000000000400
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef010
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef010
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef014
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee660
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee6a4
ARG1= 0000000000020019
ARG2= 00000000001ee684
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ee654
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000dc
ARG1= 00000000001ee69c
ARG2= 0000000000000002
ARG3= 00000000001ee6a8
ARG4= 0000000000000014
ARG5= 00000000001ee680
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee668
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee650
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee778
ARG1= 00000000001200a9
ARG2= 00000000001ee694
ARG3= 00000000001ee6ac
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 00000000001ee890
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee70c
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee880
ARG1= 0000000000120089
ARG2= 00000000001ee7ec
ARG3= 00000000001ee7b8
ARG4= 0000000000000005
ARG5= 0000000000000060
ARG6= 000000000000fffe
ARG7= 0000000000000100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010c, EDX=00000000001ee6f0
RETURN ADDRESS=00000000776156bc
ARG0= 00000000000000dc
ARG1= 00000000001ee70c
ARG2= 00000000001ee714
ARG3= 0000000000000008
ARG4= 0000000000000004
ARG5= 000000007761512c
ARG6= 00000000772b8267
ARG7= 00000000001ee880
ARG8= 0000000000120089
ARG9= 00000000001eec54
ARG10= 00000000772b8288
ARG11= 00000000000000dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000e7, EDX=00000000001ee710
RETURN ADDRESS=000000007761546c
ARG0= 00000000000000dc
ARG1= 00000000001ee7b8
ARG2= 00000000001ee738
ARG3= 0000000000000028
ARG4= 0000000000000004
ARG5= 000000000000fffe
ARG6= 0000000000000100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000012b, EDX=00000000001ee5e4
RETURN ADDRESS=00000000776158ac
ARG0= 0000000000000014
ARG1= 00000000001ee63c
ARG2= 00000000001ee63c
ARG3= 0000000000000080
ARG4= 00000000001ee704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee720
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 000000000000fffe
ARG2= 0000000000000100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee3f0
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee43c
ARG1= 0000000000000008
ARG2= 00000000001ee410
ARG3= 0000000000000002
ARG4= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001edf1c
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001edf58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee35c
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee3a0
ARG1= 00000000001ee378
ARG2= 00000000001ee972
ARG3= 0000000077643a4c
ARG4= 00000000001ee6e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee3a4
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee3f0
ARG1= 00000000001ee3c0
ARG2= 0000000000000001
ARG3= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee394
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee43c
ARG1= 0000000000100020
ARG2= 00000000001ee3f0
ARG3= 00000000001ee3e8
ARG4= 0000000000000003
ARG5= 0000000000000021
ARG6= 0000000000000001
ARG7= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001eef84
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000220000
ARG2= 00000000001eefbc
ARG3= 00000000775f0dc0
ARG4= 0000000000000001
ARG5= 000000000027ed94
ARG6= 0000000000220000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eef90
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 000000000027ed94
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eeffc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefd8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefe4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef014
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef038
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef84
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefa8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefe0
ARG8= 00000000747f83a1
ARG9= 0000000000020144
ARG10= 0000000000100000
ARG11= 0000000000000001
ARG12= 0000000000020144
ARG13= 000000000000c019
ARG14= 0000000000100000
ARG15= 00000000001eefd8
ARG16= 00000000747f7ecd
ARG17= 0000000000020144
ARG18= 000000000000c019
ARG19= 00000000001eefe4
ARG20= 0000000005e32176
ARG21= 00000000001ef014
ARG22= 00000000747d56a8
ARG23= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001eef7c
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed90
ARG3= 00000000771b7a64
ARG4= 000000000027ed90
ARG5= 0000000000020144
ARG6= 00000000001eefe0
ARG7= 00000000747f5d8f
ARG8= 0000000000020144
ARG9= 000000000000c019
ARG10= 000000000027ed90
ARG11= 0000000000020144
ARG12= 0000000000100000
ARG13= 0000000000000001
ARG14= 0000000000020144
ARG15= 000000000000c019
ARG16= 0000000000100000
ARG17= 00000000001eefd8
ARG18= 00000000747f7ecd
ARG19= 0000000000020144
ARG20= 000000000000c019
ARG21= 00000000001eefe4
ARG22= 0000000005e32176
ARG23= 00000000001ef014
ARG24= 00000000747d56a8
ARG25= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001eef3c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a912
ARG2= 0000000000020144
ARG3= 00000000772bf17d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eece4
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 0000000000560808
ARG2= 00000000001eef28
ARG3= 0000000074647a91
ARG4= 0000000000020144
ARG5= 00000000001eed1c
ARG6= 0000000000000104
ARG7= 0000000000020144
ARG8= 0000000000560808
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 0000000000560844
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eecd4
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eed1c
ARG3= 0000000000000208
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeac8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a910
ARG2= 00000000771b7829
ARG3= 00000000001eef28
ARG4= 0000000074646f2e
ARG5= 0000000000020144
ARG6= 000000000000a910
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 00000000001eeb9c
ARG11= 0000000000560940
ARG12= 00000000001eef60
ARG13= 00000000001eef5c
ARG14= 00000000747f38f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeac8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a911
ARG2= 00000000771b7829
ARG3= 00000000001eef28
ARG4= 0000000074646f48
ARG5= 0000000000020144
ARG6= 000000000000a911
ARG7= 0000000000020144
ARG8= 00000000772bf17d
ARG9= 0000000000020144
ARG10= 00000000001eeb9c
ARG11= 0000000000560940
ARG12= 00000000001eef60
ARG13= 00000000001eef5c
ARG14= 00000000747f38f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eeaf0
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eeb2c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef10
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef30
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef10
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef30
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef18
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000027ed90
ARG3= 00000000001eef40
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000056e388
ARG3= 00000000001eef2c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef38
ARG8= 00000000747f5f0a
ARG9= 0000000000020144
ARG10= 00000000001eef58
ARG11= 0000000074647edb
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 00000000001eefc0
ARG15= 00000000001eefdc
ARG16= 000000000027ed90
ARG17= 00000000771b5151
ARG18= 00000000001eef9c
ARG19= 00000000771b518e
ARG20= 0000000000020144
ARG21= 0000000000000001
ARG22= 00000000001eefc0
ARG23= 0000000005e2fe1d
ARG24= 00000000001eefdc
ARG25= 000000000027ed90
ARG26= 00000000771b5151
ARG27= 00000000001eefa0
ARG28= 0000000000000001
ARG29= 00000000001eef6c
ARG30= 0000000000010004
ARG31= 00000000001ef098
ARG32= 00000000772062e3
ARG33= 0000000072e74029
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001eefc0
ARG4= 000000000056e388
ARG5= 00000000001eef58
ARG6= 0000000074647ef5
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001eefc0
ARG10= 00000000001eefdc
ARG11= 000000000027ed90
ARG12= 00000000771b5151
ARG13= 00000000001eef9c
ARG14= 00000000771b518e
ARG15= 0000000000020144
ARG16= 0000000000000001
ARG17= 00000000001eefc0
ARG18= 0000000005e2fe1d
ARG19= 00000000001eefdc
ARG20= 000000000027ed90
ARG21= 00000000771b5151
ARG22= 00000000001eefa0
ARG23= 0000000000000001
ARG24= 00000000001eef6c
ARG25= 0000000000010004
ARG26= 00000000001ef098
ARG27= 00000000772062e3
ARG28= 0000000072e74029
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef38
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eef5c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef68
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eef98
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b5151
ARG14= 00000000001eefdc
ARG15= 000000000027ed90
ARG16= 0000000000000001
ARG17= 00000000001eefc0
ARG18= 0000000000000001
ARG19= 00000000001ef098
ARG20= 0000000000000001
ARG21= 0000000005e3210e
ARG22= 00000000001eefe0
ARG23= 00000000747f5dfe
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001eefc0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef08
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001eef24
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eef30
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef3c
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eef60
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eef3c
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eef28
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eef60
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef10
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef30
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef10
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef30
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef18
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000027ed90
ARG3= 00000000001eef40
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000056e388
ARG3= 00000000001eef2c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef38
ARG8= 00000000747f5f0a
ARG9= 0000000000020144
ARG10= 00000000001eef58
ARG11= 0000000074647edb
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef38
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eef5c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef68
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eef98
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b5151
ARG14= 00000000001eefdc
ARG15= 000000000027ed90
ARG16= 0000000000000001
ARG17= 00000000001eefc0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef14
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed8c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed64
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed84
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eed94
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eede0
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef04
ARG14= 0000000000000008
ARG15= 000000000056c990
ARG16= 000000000056f050
ARG17= 00000000001eedd0
ARG18= 0000000074642f10
ARG19= 0000000000560000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed8c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed64
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed84
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eed94
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eede0
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef04
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef04
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecac
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecac
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eec60
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eec70
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eeca8
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eecbc
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef14
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed8c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed64
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed84
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eed94
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eede0
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef04
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef04
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed8c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed64
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed84
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed6c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eed94
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eede0
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef04
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef04
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecac
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecac
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eec60
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eec70
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eeca8
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eecbc
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef08
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001eef24
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eef30
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef3c
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eef60
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eef3c
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eef28
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eef60
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
ARG9= 0000000000000001
ARG10= 0000000003010699
ARG11= 0000000000000003
ARG12= 00000000001eef98
ARG13= 00000000747f8106
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef90
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 00000000ffffffff
ARG15= 00000000771b881f
ARG16= 00000000771b88c9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed10
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecdc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eecec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed24
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed38
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef90
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed10
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecdc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eecec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed24
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed38
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef84
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001eefa0
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef88
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefb8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eefdc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefb8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefa4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eefdc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef020
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef84
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001eefa8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefb4
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef014
ARG11= 00000000747f4e7b
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 000000000056e388
ARG15= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef74
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001eef98
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefa4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eefb0
ARG11= 00000000747f8645
ARG12= 0000000000020144
ARG13= 00000000001ef014
ARG14= 00000000747f4ea1
ARG15= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000000119
ARG3= 00000000001eef40
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefa4
ARG8= 00000000747f4c66
ARG9= 0000000000020144
ARG10= 00000000001eefd0
ARG11= 0000000000020144
ARG12= 0000000003010699
ARG13= 000000000000003c
ARG14= 00000000001eefd0
ARG15= 0000000000000096
ARG16= 00000000000002b4
ARG17= 0000000000000011
ARG18= 0000000000000002
ARG19= 0000000000020144
ARG20= 0000000000000002
ARG21= 00000000000000df
ARG22= 0000000000000235
ARG23= 00000000000000f0
ARG24= 0000000000020144
ARG25= 00000000001eef98
ARG26= 00000000747f7ecd
ARG27= 0000000000020144
ARG28= 000000000000c019
ARG29= 00000000001eefa4
ARG30= 00000000747f7ee3
ARG31= 0000000005e32132
ARG32= 00000000001ef014
ARG33= 00000000747f4ead
ARG34= 0000000000020144
ARG35= 00000000001eefd0
ARG36= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeef8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001eef1c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef28
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001eef3c
ARG11= 00000000747f9ed1
ARG12= 0000000000020144
ARG13= 00000000ffffffff
ARG14= 0000000000010004
ARG15= 00000000001eefa4
ARG16= 00000000747f4ca3
ARG17= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeef4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001eef18
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef24
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001eef3c
ARG11= 00000000747f9ede
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001eef0c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef1c
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 000000000027ed98
ARG11= 00000000001eef28
ARG12= 00000000747f9b5e
ARG13= 0000000000020144
ARG14= 00000000001eef3c
ARG15= 00000000747f9ee8
ARG16= 0000000000020144
ARG17= 00000000ffffffff
ARG18= 0000000000010004
ARG19= 00000000001eefa4
ARG20= 00000000747f4ca3
ARG21= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeeec
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001eef10
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef1c
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001eef30
ARG11= 00000000747f5132
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000068
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 000000000000006c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001eeef4
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eeed4
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 000000007490c788
ARG4= 00000000771aeee1
ARG5= 00000000001eef20
ARG6= 00000000747f623b
ARG7= 00000000040101bc
ARG8= 0000000000000058
ARG9= 00000000ffffffff
ARG10= 0000000003010699
ARG11= 0000000000010004
ARG12= 00000000040101bc
ARG13= 0000000000020144
ARG14= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001eeed4
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 000000007490c788
ARG4= 00000000771aeee1
ARG5= 00000000001eef20
ARG6= 00000000747f6248
ARG7= 00000000040101bc
ARG8= 000000000000005a
ARG9= 00000000ffffffff
ARG10= 0000000003010699
ARG11= 0000000000010004
ARG12= 00000000040101bc
ARG13= 0000000000020144
ARG14= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eeee0
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001eef20
ARG3= 00000000747f6289
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000042
ARG1= 000000000000000c
ARG2= 00000000001eef10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000026
ARG1= 0000000000000004
ARG2= 000000007490c9a0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 000000000000103e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000001042
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 000000007490c78c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eed8c
RETURN ADDRESS=00000000771aee41
ARG0= 000000000000001b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eede8
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eee34
ARG1= 0000000000000006
ARG2= 00000000001eedfc
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eee20
ARG6= 0000000000000080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eee08
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000dc
ARG1= 00000000ffffffff
ARG2= 00000000001eee54
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eeb08
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eec58
ARG1= 0000000000000001
ARG2= 00000000001eeb58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eeb08
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eec58
ARG1= 0000000000000001
ARG2= 00000000001eeb58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001eee9c
RETURN ADDRESS=0000000077356598
ARG0= 0000000003010699
ARG1= 000000000027ee34
ARG2= 000000000027ee4c
ARG3= 00000000001eeecc
ARG4= 00000000747fa127
ARG5= 0000000003010699
ARG6= 000000000027ee3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001eea38
RETURN ADDRESS=00000000773573c6
ARG0= 0000000003010699
ARG1= 0000000000000233
ARG2= 0000000000000011
ARG3= 000000000027ee34
ARG4= 000000000027ee3c
ARG5= 000000000027ee10
ARG6= 0000000077622149
ARG7= 0000000000020144
ARG8= 000000000000000a
ARG9= 00000000772ad811
ARG10= 0000000000780075
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee8c
RETURN ADDRESS=0000000077356350
ARG0= 000000003a01070b
ARG1= 000000000305070c
ARG2= 000000000027ee34
ARG3= 000000000027ee3c
ARG4= 000000000027ee10
ARG5= 000000000000070c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001eef0c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eef1c
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001eef28
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001eef38
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 0000000000010004
ARG18= 00000000001eefa4
ARG19= 00000000747f4d58
ARG20= 0000000000020144
ARG21= 000000003a01070b
ARG22= 00000000001eef94
ARG23= 00000000001eefd0
ARG24= 0000000000020144
ARG25= 0000000003010699
ARG26= 0000000000000001
ARG27= 00000000001eefd0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea90
RETURN ADDRESS=0000000077357265
ARG0= 000000003a01070b
ARG1= 0000000000000060
ARG2= 00000000001eec18
ARG3= 00000000005e7f50
ARG4= 000000000056bd3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea90
RETURN ADDRESS=0000000077357265
ARG0= 000000003a01070b
ARG1= 0000000000000060
ARG2= 00000000001eec18
ARG3= 00000000005e80c8
ARG4= 000000000056bd3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea90
RETURN ADDRESS=0000000077357265
ARG0= 000000003a01070b
ARG1= 0000000000000060
ARG2= 00000000001eec18
ARG3= 00000000005e7f50
ARG4= 000000000056bd3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea90
RETURN ADDRESS=0000000077357265
ARG0= 000000003a01070b
ARG1= 0000000000000060
ARG2= 00000000001eec18
ARG3= 00000000005e80c8
ARG4= 000000000056bd3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee78
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001eefd0
ARG3= 00000000001eee9c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eeea8
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001eef2c
ARG11= 00000000747f9bb7
ARG12= 0000000000020144
ARG13= 00000000001eefd0
ARG14= 000000003a01070b
ARG15= 0000000000010004
ARG16= 00000000000000df
ARG17= 00000000001eeed4
ARG18= 00000000746415ba
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee50
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001eee74
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eee84
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001eee90
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001eeea0
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 00000000001eefd0
ARG18= 00000000001eef2c
ARG19= 00000000747f9cca
ARG20= 0000000000020144
ARG21= 000000003a01070b
ARG22= 00000000001eef24
ARG23= 00000000001eefd0
ARG24= 000000003a01070b
ARG25= 0000000000010004
ARG26= 00000000000000df
ARG27= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee50
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001eefd0
ARG3= 00000000001eee74
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eee80
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001eee90
ARG11= 00000000747f9f7e
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001eefd0
ARG3= 00000000001eee6c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eee78
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001eee90
ARG11= 00000000747f9f9e
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee3c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee9cc
RETURN ADDRESS=0000000077357265
ARG0= 000000003a01070b
ARG1= 0000000000000060
ARG2= 00000000001eeb54
ARG3= 00000000005e84a8
ARG4= 0000000001fca480
ARG5= 00000000ffff0000
ARG6= 00000000001eea00
ARG7= 00000000001eea04
ARG8= 00000000771b8544
ARG9= 0000000000000002
ARG10= 00000000000002b2
ARG11= 000000000056e520
ARG12= 00000000001eec20
ARG13= 000000007464c793
ARG14= 000000000056e460
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee78
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001eefd0
ARG3= 00000000001eee9c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eeea8
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001eef2c
ARG11= 00000000747f9e25
ARG12= 0000000000020144
ARG13= 00000000001eefd0
ARG14= 000000003a01070b
ARG15= 0000000000010004
ARG16= 00000000000000df
ARG17= 00000000001eeed4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001eee40
RETURN ADDRESS=0000000077357209
ARG0= 0000000003010699
ARG1= 0000000000000002
ARG2= 00000000000000df
ARG3= 0000000000000233
ARG4= 0000000000000011
ARG5= 000000003a01070b
ARG6= 0000000000000002
ARG7= 00000000000000df
ARG8= 0000000000cc0020
ARG9= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee6c
RETURN ADDRESS=0000000077356350
ARG0= 000000003a01070b
ARG1= 000000000185000f
ARG2= 0000000003010699
ARG3= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eee74
RETURN ADDRESS=000000007735697e
ARG0= 000000000305070c
ARG1= 0000000003010699
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eee60
RETURN ADDRESS=000000007735697e
ARG0= 000000003a01070b
ARG1= 0000000003010699
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef00c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef060
ARG3= 0000000074649559
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef010
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef010
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef014
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef100
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eeffc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef038
ARG4= 000000000056e388
ARG5= 00000000001ef060
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef038
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefd8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefe4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef014
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef038
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33e82
ARG22= 00000000001ef060
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef038
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef90
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000074642c55
ARG15= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed10
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecdc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eecec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed24
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed38
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef90
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee08
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee5c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef80
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed08
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed28
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed10
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecdc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eecec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed24
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed38
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef84
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001eefa0
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef88
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefb8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eefdc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefb8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefa4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eefdc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
ARG9= 0000000000000001
ARG10= 0000000003010699
ARG11= 0000000000000003
ARG12= 00000000001ef014
ARG13= 00000000747f8106
ARG14= 0000000000020144
ARG15= 0000000000000001
ARG16= 0000000000000003
ARG17= 00000000771b83a9
ARG18= 0000000000020144
ARG19= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefe8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef008
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefe8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef008
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef00c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef0f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eeff4
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef030
ARG4= 000000000056e388
ARG5= 00000000001ef058
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef030
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefd0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefdc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef00c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef030
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33e9a
ARG22= 00000000001ef058
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef030
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef88
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 00000000fffffff0
ARG15= 00000000001eef80
ARG16= 0000000000020144
ARG17= 000000000000007d
ARG18= 00000000fffffff0
ARG19= 00000000001eef80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eece4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef88
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eece4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef7c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001eef98
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefa4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefb0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eefd4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefb0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eef9c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eefd4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefe8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef008
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefe8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef008
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef00c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001eeff4
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefd0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefdc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef00c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef030
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef88
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eece4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef88
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eede0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eede0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eef78
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eef78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eecd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eece4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eef7c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001eef98
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefa4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefb0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001eefd4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefb0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eef9c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eefd4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef02c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef04c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef02c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef04c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef034
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef050
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef038
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef014
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef020
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef050
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef074
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 000000000056e398
ARG15= 00000000001eeed0
ARG16= 00000000771b88c9
ARG17= 00000000771b888d
ARG18= 0000000005e2ff51
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed4c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed18
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed28
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed60
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed4c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed18
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed28
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed60
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eefc0
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001eefdc
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefe8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eeff4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef018
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eeff4
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefe0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef018
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef02c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef04c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef02c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef04c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef034
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef050
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef13c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef038
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef074
ARG4= 000000000056e388
ARG5= 00000000001ef09c
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef074
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef014
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef020
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef050
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef074
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33ec6
ARG22= 00000000001ef09c
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef074
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed4c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed18
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed28
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed60
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee44
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee3c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee24
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee4c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee98
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefbc
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefbc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed44
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed64
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed4c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eecf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed18
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed28
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed60
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eefc0
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001eefdc
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefc4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefe8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eeff4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef018
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eeff4
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefe0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef018
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef2d0
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef108
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef108
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef0f4
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef130
ARG4= 000000000056e388
ARG5= 00000000001ef158
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef130
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef0d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef0dc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef10c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef130
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33f9a
ARG22= 00000000001ef158
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef088
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 00000000747cd03b
ARG15= 0000000000020144
ARG16= 000000000000007d
ARG17= 00000000fffffff0
ARG18= 00000000001eefbc
ARG19= 0000000000aa002c
ARG20= 00000000771b70ff
ARG21= 0000000005e2fef1
ARG22= 0000000000020144
ARG23= 0000000000aa0018
ARG24= 00000000fffffff0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eedbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eede4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eee1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef088
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eedbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eede4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eee1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef07c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001ef098
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef080
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef0a4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef0b0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef0d4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef0b0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef09c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef0d4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef108
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef108
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef0f4
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef0d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef0dc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef10c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef088
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eedbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eede4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eee1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef088
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000040300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eef00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eeef8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeee0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eef08
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eef54
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef078
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef078
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee00
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee20
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee08
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedb4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedd4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eedbc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eede4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eee1c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef07c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001ef098
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef080
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef0a4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef0b0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef0d4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef0b0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef09c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef0d4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001ef258
RETURN ADDRESS=00000000771b7bd5
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef468
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef468
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ee640
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ee68c
ARG1= 0000000000000008
ARG2= 00000000001ee660
ARG3= 0000000000000002
ARG4= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee5ac
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee5f0
ARG1= 00000000001ee5c8
ARG2= 00000000001eebc2
ARG3= 0000000077643a4c
ARG4= 00000000001ee934
ARG5= 00000000000000ee
ARG6= 00000000000000f8
ARG7= 000000000027eec2
ARG8= 000000000027eec0
ARG9= 00000000001ee6bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000d9, EDX=00000000001ee5f4
RETURN ADDRESS=000000007761538c
ARG0= 00000000001ee640
ARG1= 00000000001ee610
ARG2= 0000000000000001
ARG3= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b3, EDX=00000000001ee5e4
RETURN ADDRESS=000000007761512c
ARG0= 00000000001ee68c
ARG1= 0000000000100020
ARG2= 00000000001ee640
ARG3= 00000000001ee638
ARG4= 0000000000000003
ARG5= 0000000000000021
ARG6= 0000000000000001
ARG7= 00000000000000b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eef18
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eef30
ARG1= 00000000001eef40
ARG2= 00000000001eef70
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eef30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eef0c
ARG1= 00000000001eef5c
ARG2= 00000000001eef6c
ARG3= 00000000001eef50
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ef468
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef248
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef268
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ef270
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef114
RETURN ADDRESS=00000000771b732e
ARG0= 000000000003013e
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef250
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef270
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef190
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef15c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef144
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001ef16c
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef1a4
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef158
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef178
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef160
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef130
RETURN ADDRESS=00000000771b7a5c
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 00000000ffffffff
ARG3= 00000000001ef19c
ARG4= 000000007467a970
ARG5= 000000000003013e
ARG6= 00000000001ef16c
ARG7= 0000000074645c90
ARG8= 000000000003013e
ARG9= 000000000000a918
ARG10= 00000000ffffffff
ARG11= 00000000001ef19c
ARG12= 00000000ffffffff
ARG13= 00000000001ef180
ARG14= 0000000074645d83
ARG15= 000000000003013e
ARG16= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b732e
ARG0= 000000000003013e
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef238
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef258
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef240
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef268
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef188
RETURN ADDRESS=00000000771b65b5
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eedf8
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eef6c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eed84
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001eedb8
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef164
RETURN ADDRESS=00000000771b704d
ARG0= 000000000003013e
ARG1= 00000000001ef3fc
ARG2= 000000000027f548
ARG3= 00000000ffffffff
ARG4= 000000003b0a070b
ARG5= 00000000001ef1b4
ARG6= 0000000074645cf0
ARG7= 00000000771b65b5
ARG8= 00000000771b6608
ARG9= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ef0d8
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ef0f0
ARG2= 0000000000000044
ARG3= 00000000773561d0
ARG4= 000000000027fa00
ARG5= 000000000013009f
ARG6= 000000000027c9d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef14c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1c4
ARG3= 00000000747dad22
ARG4= 000000000003013e
ARG5= 0000000003010699
ARG6= 00000000772bf24c
ARG7= 00000000001ef3fc
ARG8= 000000000027f548
ARG9= 00000000018a002e
ARG10= 000000003b0a070b
ARG11= 0000000003010699
ARG12= 000000000000000f
ARG13= 000000000000000c
ARG14= 0000000000000003
ARG15= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef144
RETURN ADDRESS=000000007735697e
ARG0= 000000003b0a070b
ARG1= 000000000003013e
ARG2= 000000000027f548
ARG3= 00000000772bf24c
ARG4= 0000000000003b0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef164
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a912
ARG2= 000000000003013e
ARG3= 00000000772bf17d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eef0c
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 0000000000560808
ARG2= 00000000001ef150
ARG3= 0000000074647a91
ARG4= 000000000003013e
ARG5= 00000000001eef44
ARG6= 0000000000000104
ARG7= 000000000003013e
ARG8= 0000000000560808
ARG9= 000000000003013e
ARG10= 000000000003013e
ARG11= 0000000000560844
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eeefc
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eef44
ARG3= 0000000000000208
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecf0
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a910
ARG2= 00000000771b7829
ARG3= 00000000001ef150
ARG4= 0000000074646f2e
ARG5= 000000000003013e
ARG6= 000000000000a910
ARG7= 000000000003013e
ARG8= 00000000772bf17d
ARG9= 000000000003013e
ARG10= 000000007773afb5
ARG11= 0000000000560940
ARG12= 00000000001ef188
ARG13= 00000000001ef184
ARG14= 00000000747cf354
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eecf0
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a911
ARG2= 00000000771b7829
ARG3= 00000000001ef150
ARG4= 0000000074646f48
ARG5= 000000000003013e
ARG6= 000000000000a911
ARG7= 000000000003013e
ARG8= 00000000772bf17d
ARG9= 000000000003013e
ARG10= 000000007773afb5
ARG11= 0000000000560940
ARG12= 00000000001ef188
ARG13= 00000000001ef184
ARG14= 00000000747cf354
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef138
RETURN ADDRESS=00000000771b7a5c
ARG0= 000000000003013e
ARG1= 000000000000a912
ARG2= 0000000000010005
ARG3= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001ef160
RETURN ADDRESS=00000000771b7bd5
ARG0= 000000000003013e
ARG1= 00000000001ef18c
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef1a8
RETURN ADDRESS=00000000771b704d
ARG0= 000000000003013e
ARG1= 00000000001ef3fc
ARG2= 000000000027f548
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001eee3c
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000000029
ARG1= 00000000000001f8
ARG2= 00000000001eefb0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eedc8
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001eedfc
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ef058
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ef070
ARG2= 0000000000000044
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef194
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1c4
ARG3= 00000000747d427c
ARG4= 000000000003013e
ARG5= 0000000003010699
ARG6= 00000000001ef3fc
ARG7= 000000000027f548
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b704d
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef0fc
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef0fc
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 00000000005fec18
ARG5= 00000000001ef150
ARG6= 000000007464cfb6
ARG7= 0000000003010699
ARG8= 0000000000000058
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef0fc
RETURN ADDRESS=0000000077356f13
ARG0= 0000000003010699
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 00000000005fec18
ARG5= 00000000001ef150
ARG6= 000000007464cfc5
ARG7= 0000000003010699
ARG8= 000000000000005a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1b8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef1fc
ARG3= 00000000747cf4c7
ARG4= 000000000003013e
ARG5= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef248
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef268
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef23c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef25c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef244
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001244, EDX=00000000001ef208
RETURN ADDRESS=00000000771b358d
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef06c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef044
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef064
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef074
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eef18
RETURN ADDRESS=00000000771b732e
ARG0= 000000000003013e
ARG1= 0000000000000046
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef054
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef074
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef048
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef068
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef050
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee8
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eef08
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeee8
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eef08
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeef0
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee9c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeebc
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeea4
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001eeecc
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001eef04
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
ARG12= 00000000ffffffff
ARG13= 0000000000000083
ARG14= 000000000003013e
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 000000000003013e
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eee6c
RETURN ADDRESS=00000000771b732e
ARG0= 000000000003013e
ARG1= 0000000000000083
ARG2= 0000000000000001
ARG3= 00000000001ef1b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef06c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef044
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef064
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef04c
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef074
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eef3c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eef3c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef24
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeed0
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeef0
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeed8
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001eef00
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001eef38
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
ARG12= 00000000ffffffff
ARG13= 0000000000000047
ARG14= 000000000003013e
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 000000000003013e
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001244, EDX=00000000001eecf0
RETURN ADDRESS=00000000771b358d
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb34
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeb54
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb2c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeb4c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb34
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001eeb5c
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eea00
RETURN ADDRESS=00000000771b732e
ARG0= 000000000003013e
ARG1= 0000000000000046
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb3c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeb5c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb30
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001eeb50
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb38
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eecd0
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eecbc
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eed04
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eeccc
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eecd0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eecfc
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001eed64
RETURN ADDRESS=00000000771b7bd5
ARG0= 000000000003013e
ARG1= 00000000001eede0
ARG2= 0000000000000001
ARG3= 00000000001eee74
ARG4= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef054
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef074
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef048
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef068
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef050
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e8
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1d4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef21c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef1e4
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1e8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef214
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001ef27c
RETURN ADDRESS=00000000771b7bd5
ARG0= 000000000003013e
ARG1= 00000000001ef2f8
ARG2= 0000000000000001
ARG3= 00000000001ef38c
ARG4= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001ef678
RETURN ADDRESS=00000000771b7bd5
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef514
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4d8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4e4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef514
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000000210
ARG15= 00000000dcbaabcd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef484
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001ef4a0
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef488
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4ac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4b8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4dc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4b8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4a4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4dc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef514
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef600
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef538
ARG4= 000000000056e388
ARG5= 00000000001ef560
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef538
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4d8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4e4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef514
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef538
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33b82
ARG22= 00000000001ef560
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef484
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001ef4a0
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef488
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4ac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4b8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4dc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4b8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4a4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4dc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef854
RETURN ADDRESS=0000000077356f13
ARG0= 0000000009010196
ARG1= 000000000000005a
ARG2= 0000000000a615bc
ARG3= 00000000771b764c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ef69c
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef6d0
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ef858
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000009010196
ARG1= 0000000000000020
ARG2= 00000000001ef8f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef6ac
RETURN ADDRESS=00000000771b704d
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 000000000027e758
ARG3= 00000000771b83a9
ARG4= 00000000070a070c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d8, EDX=00000000001ef580
RETURN ADDRESS=000000007735b4c4
ARG0= 0000000003010699
ARG1= 0000000000000020
ARG2= 00000000001ef65c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ef4cc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ef4e4
ARG2= 0000000000000044
ARG3= 00000000001ef6d4
ARG4= 000000000027fa00
ARG5= 000000000013108f
ARG6= 000000000027c9c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a8, EDX=00000000001ef6a8
RETURN ADDRESS=000000007735c4bc
ARG0= 0000000003010699
ARG1= 00000000001ef710
ARG2= 0000000000000001
ARG3= 000000000027e758
ARG4= 00000000771b83a9
ARG5= 00000000070a070c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d5, EDX=00000000001ef630
RETURN ADDRESS=000000007735c0b4
ARG0= 0000000003010699
ARG1= 00000000001ef674
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef698
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef724
ARG3= 00000000747cb1f5
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000000001
ARG7= 000000000027e758
ARG8= 00000000771b83a9
ARG9= 00000000070a070c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef518
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef518
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef500
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef51c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef504
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4e0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4ec
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef51c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef540
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef498
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 00000000fffffff0
ARG15= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef218
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1e4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1f4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef22c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef498
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef218
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1e4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1f4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef22c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef48c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001ef4a8
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef490
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4b4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4c0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4e4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4ac
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4e4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef518
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef518
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef500
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef51c
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef608
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef504
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef540
ARG4= 000000000056e388
ARG5= 00000000001ef568
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef540
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4e0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4ec
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef51c
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef540
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33b8a
ARG22= 00000000001ef568
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef540
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef498
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef218
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1e4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1f4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef22c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef498
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef318
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef364
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef488
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef218
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1e4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1f4
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef22c
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef48c
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001ef4a8
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef490
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4b4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4c0
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4e4
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4ac
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4e4
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef514
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef600
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef538
ARG4= 000000000056e388
ARG5= 00000000001ef560
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef538
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4d8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4e4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef514
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef538
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33b82
ARG22= 00000000001ef560
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 00000000fffffff0
ARG15= 00000000001ef488
ARG16= 0000000000020144
ARG17= 000000000000007d
ARG18= 00000000fffffff0
ARG19= 00000000001ef488
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef484
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001ef4a0
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef488
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001ef4ac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4b8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4dc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4b8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4a4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4dc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef4f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef510
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef514
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef4b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4d8
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4e4
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef514
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef538
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef490
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef308
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001ef310
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001ef35c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001ef480
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef208
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef228
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef210
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef1dc
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef1ec
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001ef224
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef238
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001ef484
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001ef4a0
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef488
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001ef4ac
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef4b8
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef4dc
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef4b8
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4a4
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef4dc
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef864
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef938
ARG3= 0000000000a621dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001eee98
RETURN ADDRESS=00000000771b7bd5
ARG0= 000000000003013e
ARG1= 00000000001eeec4
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 000000000027f548
ARG5= 00000000001ef774
ARG6= 0000000000170248
ARG7= 000000000027f548
ARG8= 00000000001ef774
ARG9= 00000000000001b6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee94
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeb4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee94
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeb4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee9c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee48
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee68
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee50
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee78
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 000000000000000c
ARG8= 00000000001eeeb0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 000000000000000c
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000000a918
ARG17= 00000000001eeec4
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eedf0
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000000c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124f, EDX=00000000001ef874
RETURN ADDRESS=00000000771b1486
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 0000000000261620
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef620
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef5fc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000086
ARG8= 00000000001ef634
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000086
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef648
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef570
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000086
ARG2= 0000000000000001
ARG3= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef3dc
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef434
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afa6d
ARG10= 00000000001ef530
ARG11= 000000000056da84
ARG12= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef430
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000030142
ARG1= 00000000001ef530
ARG2= 000000000056da60
ARG3= 00000000480a0759
ARG4= 000000000056da60
ARG5= 000000007467a1c8
ARG6= 00000000001ef464
ARG7= 000000000056f598
ARG8= 00000000001ef538
ARG9= 000000007464d212
ARG10= 0000000000010000
ARG11= 0000000000030142
ARG12= 00000000480a0759
ARG13= 00000000001ef528
ARG14= 00000000001ef604
ARG15= 00000000001ef660
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ef1c8
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ef1e0
ARG2= 0000000000000044
ARG3= 00000000001ef2e4
ARG4= 000000000027fce8
ARG5= 000000000013009f
ARG6= 000000000027c9e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef2b0
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000010040704
ARG2= 0000000000000001
ARG3= 0000000010040704
ARG4= 00000000001ef360
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000010040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef29c
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef0fc
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ef11c
ARG3= 00000000001ef12c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001eefc4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eefe0
ARG2= 0000000077399140
ARG3= 0000000003010699
ARG4= 000000000027fcc8
ARG5= 0000000000000010
ARG6= 0000000077399140
ARG7= 00000000480a0759
ARG8= 00000000001ef014
ARG9= 0000000077357ae0
ARG10= 0000000003010699
ARG11= 00000000001ef014
ARG12= 0000000077357aee
ARG13= 0000000003010699
ARG14= 00000000001ef024
ARG15= 000000000027fcc8
ARG16= 00000000ffffffff
ARG17= 00000000007508f4
ARG18= 00000000001ef03c
ARG19= 0000000077357a3d
ARG20= 0000000003010699
ARG21= 00000000001ef024
ARG22= 0000000000000010
ARG23= 0000000077529c39
ARG24= 00000000007507d0
ARG25= 0000000000000780
ARG26= 0000000072e79911
ARG27= 0000000000000024
ARG28= 00000000001ef058
ARG29= 00000000762da096
ARG30= 0000000003010699
ARG31= 00000000001ef04c
ARG32= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef114
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ef134
ARG3= 00000000001ef144
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ef29c
RETURN ADDRESS=0000000077357c8b
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef418
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef458
ARG3= 000000007464d2c0
ARG4= 0000000000030142
ARG5= 0000000003010699
ARG6= 000000000056da84
ARG7= 00000000001ef530
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef44c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef538
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 00000000001ef604
ARG8= 00000000001ef660
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001ef230
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef47c
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eefec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefcc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eefec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefd4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef80
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eefa0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef88
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eefb0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eefe8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeffc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef21c
ARG3= 00000000001eef3c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef200
ARG8= 00000000001eef80
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef21c
ARG12= 0000000000000011
ARG13= 0000000000030142
ARG14= 0000000000030142
ARG15= 00000000007508f4
ARG16= 00000000001eef78
ARG17= 00000000762d78bb
ARG18= 00000000762d7960
ARG19= 00000000007507d0
ARG20= 00000000007508f4
ARG21= 00000000007507d0
ARG22= 00000000771b7796
ARG23= 0000000005e2fe25
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef3f0
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef438
ARG2= 000000000056dac8
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef52c
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef514
RETURN ADDRESS=000000007735909d
ARG0= 00000000040101bc
ARG1= 0000000000000008
ARG2= 000000000000001e
ARG3= 0000000000000250
ARG4= 0000000000000188
ARG5= 000000000056dd08
ARG6= 00000000001ef61c
ARG7= 00000000746474ef
ARG8= 00000000040101bc
ARG9= 0000000000000008
ARG10= 000000000000001e
ARG11= 0000000000000250
ARG12= 0000000000000188
ARG13= 000000000056da60
ARG14= 00000000001ef660
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef094
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef21c
ARG3= 0000000000633ed8
ARG4= 00000000001ef0e4
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e165
ARG8= 00000000001ef25c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef094
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef21c
ARG3= 0000000000634068
ARG4= 00000000001ef0e4
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e165
ARG8= 00000000001ef25c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef094
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef21c
ARG3= 00000000006341f8
ARG4= 00000000001ef0e4
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e165
ARG8= 00000000001ef25c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef47c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da60
ARG3= 00000000001ef534
ARG4= 0000000074652b55
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001ef018
RETURN ADDRESS=00000000773573c6
ARG0= 00000000040101bc
ARG1= 0000000000000258
ARG2= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef480
RETURN ADDRESS=0000000077356598
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef46c
RETURN ADDRESS=0000000077356350
ARG0= 0000000003010710
ARG1= 000000000b05070f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 0000000000633430
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 000000000063c190
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 000000000063c308
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 0000000000638600
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 0000000000638778
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 0000000000635fd0
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010710
ARG1= 0000000000000060
ARG2= 00000000001ef16c
ARG3= 0000000000636148
ARG4= 00000000001ef21c
ARG5= 00000000001ef048
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef43c
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef494
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afacd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010710
ARG1= 0000000011040704
ARG2= 0000000000000001
ARG3= 0000000011040704
ARG4= 00000000001ef25c
ARG5= 00000000771b7d50
ARG6= 0000000003010710
ARG7= 0000000011040704
ARG8= 0000000003010710
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef198
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010710
ARG1= 000000000000001e
ARG2= 000000000000000b
ARG3= 00000000000001ea
ARG4= 000000000000001b
ARG5= 00000000001ef35c
ARG6= 00000000001ef25c
ARG7= 00000000771b7d7f
ARG8= 0000000003010710
ARG9= 000000000000001e
ARG10= 000000000000000b
ARG11= 00000000000001ea
ARG12= 000000000000001b
ARG13= 0000000003010710
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeec0
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010710
ARG1= 0000000000000007
ARG2= 00000000001eeee0
ARG3= 00000000001eeef0
ARG4= 0000000077357c56
ARG5= 0000000003010710
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeed0
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010710
ARG1= 0000000000000007
ARG2= 00000000001eeef0
ARG3= 00000000001eef00
ARG4= 0000000077357c56
ARG5= 0000000003010710
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001eeaf8
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010710
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef404
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010710
ARG1= 0000000000000007
ARG2= 00000000001ef424
ARG3= 00000000001ef434
ARG4= 0000000077357c56
ARG5= 0000000003010710
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000117d, EDX=00000000001ef418
RETURN ADDRESS=00000000771b4ceb
ARG0= 0000000003010710
ARG1= 000000000000000a
ARG2= 000000000000000a
ARG3= 0000000000070124
ARG4= 0000000000000010
ARG5= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001123, EDX=00000000001ef470
RETURN ADDRESS=000000007735a237
ARG0= 0000000003010710
ARG1= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef430
RETURN ADDRESS=0000000077357209
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef46c
RETURN ADDRESS=0000000077356350
ARG0= 0000000003010710
ARG1= 000000000185000f
ARG2= 0000000003010710
ARG3= 000000000056da60
ARG4= 000000000056da84
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef460
RETURN ADDRESS=000000007735697e
ARG0= 0000000003010710
ARG1= 0000000003010710
ARG2= 000000000056da60
ARG3= 000000000056da84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef474
RETURN ADDRESS=000000007735697e
ARG0= 000000000b05070f
ARG1= 0000000003010710
ARG2= 000000000056da60
ARG3= 000000000056da84
ARG4= 0000000000000b05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125c, EDX=00000000001ef530
RETURN ADDRESS=00000000771ad480
ARG0= 0000000000030142
ARG1= 00000000040101bc
ARG2= 0000000000000008
ARG3= 0000000000000008
ARG4= 000000000000001e
ARG5= 0000000000000001
ARG6= 000000000056da60
ARG7= 00000000001ef660
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef280
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2a0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef288
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2b0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001ef2e8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef2fc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef20c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef22c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef214
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef51c
ARG3= 00000000001ef23c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef500
ARG8= 00000000001ef280
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef51c
ARG12= 0000000000000011
ARG13= 0000000000030142
ARG14= 0000000000030142
ARG15= 000000000056f5bc
ARG16= 00000000001ef280
ARG17= 00000000771b7bfb
ARG18= 0000000003010710
ARG19= 00000000ffffffff
ARG20= 0000000000000012
ARG21= 00000000001ef34c
ARG22= 00000000771b7796
ARG23= 0000000005e2e325
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef280
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2a0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef288
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2b0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000091
ARG8= 00000000001ef2e8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000091
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef2fc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef208
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed64
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeeec
ARG3= 000000000064fa98
ARG4= 00000000762d8be9
ARG5= 0000000000000063
ARG6= 0000000003010710
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef214
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef234
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef244
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef27c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef14
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea70
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebf8
ARG3= 000000000064fa98
ARG4= 0000000000750d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf0
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec78
ARG3= 000000000064fc58
ARG4= 00000000001eeb6c
ARG5= 0000000000750c30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebec
ARG2= 0000000000000044
ARG3= 00000000001eecf0
ARG4= 00000000001eebfc
ARG5= 0000000074643f54
ARG6= 00000000001eee70
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec78
ARG11= 00000000001eeec4
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000008
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf0
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecbc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000012040704
ARG2= 0000000000000001
ARG3= 0000000012040704
ARG4= 00000000001eed6c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000012040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeca8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000000021
ARG4= 000000000000002f
ARG5= 00000000001eee6c
ARG6= 00000000001eed6c
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000000f
ARG10= 0000000000000020
ARG11= 0000000000000021
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e0
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea00
ARG3= 00000000001eea10
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8a8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c0
ARG2= 0000000000000044
ARG3= 00000000007508f4
ARG4= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee608
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3c4
ARG2= 0000000000000044
ARG3= 0000000000000004
ARG4= 00000000001ee4e4
ARG5= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef214
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef234
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef244
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef27c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef14
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea70
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebf8
ARG3= 000000000064fa98
ARG4= 0000000000750d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf0
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec78
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb4c
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000000f
ARG9= 0000000000000020
ARG10= 00000000001ef014
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf0
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf0
ARG19= 000000000000000f
ARG20= 000000000000000f
ARG21= 00000000001eeb80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebec
ARG2= 0000000000000044
ARG3= 00000000001eecf0
ARG4= 00000000001eebfc
ARG5= 0000000074643f54
ARG6= 00000000001eee70
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec78
ARG11= 00000000001eeec4
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000028
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf0
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecbc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000013040704
ARG2= 0000000000000001
ARG3= 0000000013040704
ARG4= 00000000001eed6c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000013040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeca8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000000043
ARG4= 000000000000002f
ARG5= 00000000001eee6c
ARG6= 00000000001eed6c
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000002f
ARG10= 0000000000000020
ARG11= 0000000000000043
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e0
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea00
ARG3= 00000000001eea10
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8a8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c0
ARG2= 0000000000000044
ARG3= 00000000007508f4
ARG4= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee608
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3c4
ARG2= 0000000000000044
ARG3= 0000000000000004
ARG4= 00000000001ee4e4
ARG5= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef214
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef234
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef244
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef27c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef14
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea70
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebf8
ARG3= 000000000064fa98
ARG4= 0000000000750d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf0
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec78
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb4c
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000002f
ARG9= 0000000000000020
ARG10= 00000000001ef014
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf0
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf0
ARG19= 000000000000002f
ARG20= 000000000000002f
ARG21= 00000000001eeb80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebec
ARG2= 0000000000000044
ARG3= 00000000001eecf0
ARG4= 00000000001eebfc
ARG5= 0000000074643f54
ARG6= 00000000001eee70
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec78
ARG11= 00000000001eeec4
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000004a
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf0
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecbc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000014040704
ARG2= 0000000000000001
ARG3= 0000000014040704
ARG4= 00000000001eed6c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000014040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeca8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000000077
ARG4= 000000000000002f
ARG5= 00000000001eee6c
ARG6= 00000000001eed6c
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000051
ARG10= 0000000000000020
ARG11= 0000000000000077
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e0
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea00
ARG3= 00000000001eea10
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8a8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c0
ARG2= 0000000000000044
ARG3= 00000000007508f4
ARG4= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee608
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3c4
ARG2= 0000000000000044
ARG3= 0000000000000006
ARG4= 00000000001ee4e4
ARG5= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef214
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef234
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef244
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef27c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef14
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea70
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebf8
ARG3= 000000000064fa98
ARG4= 0000000000750d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf0
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec78
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb4c
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000051
ARG9= 0000000000000020
ARG10= 00000000001ef014
ARG11= 0000000000000007
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf0
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000007
ARG18= 00000000001eecf0
ARG19= 0000000000000051
ARG20= 0000000000000051
ARG21= 00000000001eeb80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebec
ARG2= 0000000000000044
ARG3= 00000000001eecf0
ARG4= 00000000001eebfc
ARG5= 0000000074643f54
ARG6= 00000000001eee70
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec78
ARG11= 00000000001eeec4
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000007e
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf0
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecbc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000015040704
ARG2= 0000000000000001
ARG3= 0000000015040704
ARG4= 00000000001eed6c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000015040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeca8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 000000000000009e
ARG4= 000000000000002f
ARG5= 00000000001eee6c
ARG6= 00000000001eed6c
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000085
ARG10= 0000000000000020
ARG11= 000000000000009e
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e0
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea00
ARG3= 00000000001eea10
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8a8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c0
ARG2= 0000000000000044
ARG3= 00000000007508f4
ARG4= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee608
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3c4
ARG2= 0000000000000044
ARG3= 0000000000000004
ARG4= 00000000001ee4e4
ARG5= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef214
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef234
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef244
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef27c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef14
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea70
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebf8
ARG3= 000000000064fa98
ARG4= 0000000000750d38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf0
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec78
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb4c
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000085
ARG9= 0000000000000020
ARG10= 00000000001ef014
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf0
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf0
ARG19= 0000000000000085
ARG20= 0000000000000085
ARG21= 00000000001eeb80
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebec
ARG2= 0000000000000044
ARG3= 00000000001eecf0
ARG4= 00000000001eebfc
ARG5= 0000000074643f54
ARG6= 00000000001eee70
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec78
ARG11= 00000000001eeec4
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 00000000000000a5
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf0
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecbc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000016040704
ARG2= 0000000000000001
ARG3= 0000000016040704
ARG4= 00000000001eed6c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000016040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeca8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 00000000000000c5
ARG4= 000000000000002f
ARG5= 00000000001eee6c
ARG6= 00000000001eed6c
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 00000000000000ac
ARG10= 0000000000000020
ARG11= 00000000000000c5
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e0
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea00
ARG3= 00000000001eea10
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8a8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c0
ARG2= 0000000000000044
ARG3= 00000000007508f4
ARG4= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee608
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3c4
ARG2= 0000000000000044
ARG3= 0000000000000004
ARG4= 00000000001ee4e4
ARG5= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef530
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef61c
ARG3= 000000007464763f
ARG4= 0000000000030142
ARG5= 00000000040101bc
ARG6= 000000000056da60
ARG7= 00000000001ef660
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a7, EDX=00000000001ef70c
RETURN ADDRESS=00000000771b5669
ARG0= 00000000001ef798
ARG1= 0000000000000006
ARG2= 00000000001ef748
ARG3= 00000000771b86ef
ARG4= 0000000000030142
ARG5= 0000000000000006
ARG6= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a7, EDX=00000000001ef70c
RETURN ADDRESS=00000000771b5669
ARG0= 00000000001ef798
ARG1= 0000000000000006
ARG2= 00000000001ef748
ARG3= 00000000771b86ef
ARG4= 0000000000030142
ARG5= 0000000000000006
ARG6= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001224, EDX=00000000001ef708
RETURN ADDRESS=00000000771acbb5
ARG0= 0000000000030142
ARG1= 00000000001ef798
ARG2= 0000000000000006
ARG3= 00000000001ef748
ARG4= 00000000771b86ef
ARG5= 0000000000030142
ARG6= 0000000000000006
ARG7= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef2cc
RETURN ADDRESS=00000000762b13ec
ARG0= 000000000000000c
ARG1= 0000000000110121
ARG2= 0000000000030142
ARG3= 0000000000110121
ARG4= 00000000001ef2f4
ARG5= 00000000762b2a1b
ARG6= 0000000000110121
ARG7= 0000000000030142
ARG8= 00000000001ef304
ARG9= 00000000762b29b6
ARG10= 0000000000030142
ARG11= 0000000000000002
ARG12= 00000000001ef318
ARG13= 00000000771b49fe
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000027dea0
ARG17= 00000000001ef56c
ARG18= 00000000771b3668
ARG19= 0000000000030142
ARG20= 0000000000000001
ARG21= 0000000000000282
ARG22= 0000000000000287
ARG23= 0000000000a9f468
ARG24= 00000000001ef3f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001266, EDX=00000000001ef2c4
RETURN ADDRESS=00000000762b37d4
ARG0= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef2ac
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 0000000000110121
ARG3= 0000000000030142
ARG4= 000000000027ff80
ARG5= 00000000001ef2d8
ARG6= 00000000762b2801
ARG7= 0000000000110121
ARG8= 0000000000000001
ARG9= 00000000001ef2fc
ARG10= 00000000762b2bce
ARG11= 0000000000110121
ARG12= 0000000000110121
ARG13= 0000000000030142
ARG14= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2a0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c7, EDX=00000000001ef1e4
RETURN ADDRESS=000000007761526c
ARG0= 00000000fffffffe
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef1e8
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001ef22c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001ef184
RETURN ADDRESS=0000000077614cfc
ARG0= 00000000000000e4
ARG1= 000000000000000c
ARG2= 00000000001ef1a4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1f0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eefe0
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ef01c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001ef1d4
RETURN ADDRESS=000000007761460c
ARG0= 000000000027ffc0
ARG1= 00000000000000e8
ARG2= 0000000000000001
ARG3= 00000000001ef208
ARG4= 00000000001ef238
ARG5= 00000000001ef218
ARG6= 00000000001ef228
ARG7= 00000000001ef224
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1f0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eeb08
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eec44
ARG1= 0000000000020019
ARG2= 00000000001eeb58
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef290
RETURN ADDRESS=00000000762b13ec
ARG0= 000000000000000e
ARG1= 0000000000000100
ARG2= 00000000762b3751
ARG3= 0000000000000001
ARG4= 000000000027ff80
ARG5= 00000000771b61dd
ARG6= 00000000001ef2c8
ARG7= 00000000762b3ad6
ARG8= 0000000004100410
ARG9= 0000000000000001
ARG10= 0000000000030142
ARG11= 000000000027ff80
ARG12= 00000000001ef2d8
ARG13= 00000000762b2801
ARG14= 0000000000110121
ARG15= 0000000000000001
ARG16= 00000000001ef2fc
ARG17= 00000000762b2bce
ARG18= 0000000000110121
ARG19= 0000000000110121
ARG20= 0000000000030142
ARG21= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c7, EDX=00000000001ef1d4
RETURN ADDRESS=000000007761526c
ARG0= 00000000fffffffe
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef1d8
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001ef21c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001ef174
RETURN ADDRESS=0000000077614cfc
ARG0= 00000000000000e8
ARG1= 000000000000000c
ARG2= 00000000001ef194
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1e0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001ef1c4
RETURN ADDRESS=000000007761460c
ARG0= 00000000002807e0
ARG1= 00000000000000e4
ARG2= 0000000000000001
ARG3= 00000000001ef1f8
ARG4= 00000000001ef228
ARG5= 00000000001ef208
ARG6= 00000000001ef218
ARG7= 00000000001ef214
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1e0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef0b8
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef1f8
ARG1= 0000000000020019
ARG2= 00000000001ef108
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef070
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000e4
ARG1= 00000000001ef190
ARG2= 0000000000000002
ARG3= 00000000001ef0cc
ARG4= 0000000000000090
ARG5= 00000000001ef0a8
ARG6= 00000000770deff5
ARG7= 00000000001ef1f4
ARG8= 00000000001ef1f0
ARG9= 00000000000000e4
ARG10= 00000000001ef1a4
ARG11= 00000000001ef1ac
ARG12= 00000000001ef1f8
ARG13= 00000000001ef1a8
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef194
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
ARG1= 0000000000000001
ARG2= 00000000001ef1e0
ARG3= 00000000772bfa6e
ARG4= 00000000001ef1e8
ARG5= 0000000005122b55
ARG6= 00000000001ef284
ARG7= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef204
RETURN ADDRESS=00000000762b13ec
ARG0= 000000000000000e
ARG1= 00000000002807e0
ARG2= 000000007608d979
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c7, EDX=00000000001ef148
RETURN ADDRESS=000000007761526c
ARG0= 00000000fffffffe
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef14c
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001ef190
ARG3= 00000000001ef284
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001ef0e8
RETURN ADDRESS=0000000077614cfc
ARG0= 00000000000000e4
ARG1= 000000000000000c
ARG2= 00000000001ef108
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef154
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
ARG1= 00000000001ef284
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001ef138
RETURN ADDRESS=000000007761460c
ARG0= 0000000000280840
ARG1= 00000000000000e8
ARG2= 0000000000000001
ARG3= 00000000001ef16c
ARG4= 00000000001ef19c
ARG5= 00000000001ef17c
ARG6= 00000000001ef18c
ARG7= 00000000001ef188
ARG8= 00000000001ef284
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef154
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e8
ARG1= 00000000001ef284
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c7, EDX=00000000001ef14c
RETURN ADDRESS=000000007761526c
ARG0= 00000000fffffffe
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bf, EDX=00000000001ef150
RETURN ADDRESS=00000000776151ec
ARG0= 00000000ffffffff
ARG1= 000000000000000a
ARG2= 00000000001ef194
ARG3= 0000000000000001
ARG4= 00000000002807e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000070, EDX=00000000001ef0ec
RETURN ADDRESS=0000000077614cfc
ARG0= 00000000000000e8
ARG1= 000000000000000c
ARG2= 00000000001ef10c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef158
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e8
ARG1= 0000000000000001
ARG2= 00000000002807e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000001, EDX=00000000001ef13c
RETURN ADDRESS=000000007761460c
ARG0= 0000000000280840
ARG1= 00000000000000e4
ARG2= 0000000000000001
ARG3= 00000000001ef170
ARG4= 00000000001ef1a0
ARG5= 00000000001ef180
ARG6= 00000000001ef190
ARG7= 00000000001ef18c
ARG8= 0000000000000001
ARG9= 00000000002807e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef158
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
ARG1= 0000000000000001
ARG2= 00000000002807e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eef94
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eefd0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eebac
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001ef010
ARG2= 000000007608d508
ARG3= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eeb9c
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eebc4
ARG3= 0000000000000208
ARG4= 00000000001eebc0
ARG5= 00000000001ef010
ARG6= 000000007608d508
ARG7= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eeda0
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b1, EDX=00000000001eefa8
RETURN ADDRESS=000000007761510c
ARG0= 00000000001eefdc
ARG1= 0000000000100000
ARG2= 00000000001eefbc
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eefd4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000187, EDX=00000000001eef5c
RETURN ADDRESS=0000000077615e6c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eefd4
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
ARG1= 00000000000000e4
ARG2= 00000000001eeff4
ARG3= 00000000772c05df
ARG4= 00000000000000e4
ARG5= 00000000001ef00c
ARG6= 00000000001ef21c
ARG7= 000000007609086d
ARG8= 00000000000000e4
ARG9= 0000000000000001
ARG10= 000000007608d6b0
ARG11= 0000000000280e60
ARG12= 00000000000000e4
ARG13= 00000000006f004c
ARG14= 0000000000610063
ARG15= 00000000005c006c
ARG16= 000000000053004d
ARG17= 0000000000540043
ARG18= 00000000002e0046
ARG19= 0000000000740043
ARG20= 0000000000410066
ARG21= 0000000000740063
ARG22= 0000000000760069
ARG23= 0000000000740061
ARG24= 0000000000640065
ARG25= 000000000044002e
ARG26= 0000000000660065
ARG27= 0000000000750061
ARG28= 000000000074006c
ARG29= 0000000000000031
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eeea8
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eeed8
ARG1= 00000000001eef28
ARG2= 00000000001eef38
ARG3= 00000000001eef1c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001eee14
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebf4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eec14
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebec
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eec0c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eebf4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001eec1c
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eeafc
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020146
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebfc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eec1c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb70
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eeb90
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb70
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eeb90
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb78
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb24
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eeb44
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb2c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000020146
ARG3= 00000000001eeb54
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001eeb8c
ARG9= 0000000074641e8a
ARG10= 0000000000020146
ARG11= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eeb60
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001eeb18
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 00000000ffffffff
ARG3= 00000000001eeb84
ARG4= 000000007467a970
ARG5= 0000000000020146
ARG6= 00000000001eeb54
ARG7= 0000000074645c90
ARG8= 0000000000020146
ARG9= 000000000000a918
ARG10= 00000000ffffffff
ARG11= 00000000001eeb84
ARG12= 00000000ffffffff
ARG13= 00000000001eeb68
ARG14= 0000000074645d83
ARG15= 0000000000020146
ARG16= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001eeaf4
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020146
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebd0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eebf0
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebc8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eebe8
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eebd0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001eebf8
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebd8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eebf8
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebcc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001eebec
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eebd4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001291, EDX=00000000001ef1c0
RETURN ADDRESS=00000000771b5259
ARG0= 0000000000020146
ARG1= 000000000000c046
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001291, EDX=00000000001ef1c0
RETURN ADDRESS=00000000771b5259
ARG0= 0000000000020146
ARG1= 000000000000c042
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001291, EDX=00000000001ef1c0
RETURN ADDRESS=00000000771b5259
ARG0= 0000000000020146
ARG1= 000000000000c043
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eeb18
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001ef010
ARG2= 00000000760902f4
ARG3= 00000000001eeb84
ARG4= 000000007467a970
ARG5= 0000000000020146
ARG6= 00000000001eeb54
ARG7= 0000000074645c90
ARG8= 00000000001eeb54
ARG9= 0000000074645c99
ARG10= 000000007467a970
ARG11= 00000000001eeb84
ARG12= 00000000ffffffff
ARG13= 00000000001eeb68
ARG14= 0000000074645d83
ARG15= 00000000001eeb78
ARG16= 00000000771b7308
ARG17= 0000000000020146
ARG18= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eeb08
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eeb30
ARG3= 0000000000000208
ARG4= 00000000001eeb2c
ARG5= 00000000001ef010
ARG6= 00000000760902f4
ARG7= 00000000001eeb84
ARG8= 000000007467a970
ARG9= 0000000000020146
ARG10= 00000000001eeb54
ARG11= 0000000074645c90
ARG12= 00000000001eeb54
ARG13= 0000000074645c99
ARG14= 000000007467a970
ARG15= 00000000001eeb84
ARG16= 00000000ffffffff
ARG17= 00000000001eeb68
ARG18= 0000000074645d83
ARG19= 00000000001eeb78
ARG20= 00000000771b7308
ARG21= 0000000000020146
ARG22= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eed0c
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000016, EDX=00000000001eef40
RETURN ADDRESS=000000007761475c
ARG0= 0000000000280054
ARG1= 00000000001eefb0
ARG2= 00000000001eefe4
ARG3= 00000000001eefb8
ARG4= 0000000000020000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001ee8ac
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001eed20
ARG2= 000000007608d6ec
ARG3= 000000007752b606
ARG4= 0000000000000016
ARG5= 0000000000000001
ARG6= 0000000000750b7a
ARG7= 0000000000750ac0
ARG8= 0000000000000007
ARG9= 0000000000750031
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001ee89c
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001ee8c4
ARG3= 0000000000000208
ARG4= 00000000001ee8c0
ARG5= 00000000001eed20
ARG6= 000000007608d6ec
ARG7= 000000007752b606
ARG8= 0000000000000016
ARG9= 0000000000000001
ARG10= 0000000000750b7a
ARG11= 0000000000750ac0
ARG12= 0000000000000007
ARG13= 0000000000750031
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eeaa0
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000bb, EDX=00000000001eec74
RETURN ADDRESS=00000000776151ac
ARG0= 00000000001eeca8
ARG1= 0000000000100000
ARG2= 00000000001eec88
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eeca0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eeae0
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001eef88
ARG2= 000000007608ffe4
ARG3= 0000000000000074
ARG4= 00000000001eed54
ARG5= 0000000000020000
ARG6= 00000000001eeb10
ARG7= 00000000760840a1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eead0
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eeaf8
ARG3= 0000000000000208
ARG4= 00000000001eeaf4
ARG5= 00000000001eef88
ARG6= 000000007608ffe4
ARG7= 0000000000000074
ARG8= 00000000001eed54
ARG9= 0000000000020000
ARG10= 00000000001eeb10
ARG11= 00000000760840a1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eecd4
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b1, EDX=00000000001eeedc
RETURN ADDRESS=000000007761510c
ARG0= 00000000001eef10
ARG1= 0000000000100000
ARG2= 00000000001eeef0
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eef08
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000187, EDX=00000000001eee88
RETURN ADDRESS=0000000077615e6c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eef08
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
ARG1= 00000000000000ec
ARG2= 00000000001eef28
ARG3= 00000000772c05df
ARG4= 00000000000000ec
ARG5= 00000000001eef84
ARG6= 00000000001ef1ac
ARG7= 000000007609086d
ARG8= 00000000000000ec
ARG9= 00000000761047d8
ARG10= 000000007608fcef
ARG11= 0000000005d7f95e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eeae0
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001eef88
ARG2= 000000007608dd24
ARG3= 0000000000000010
ARG4= 0000000000650044
ARG5= 0000000000610066
ARG6= 00000000006c0075
ARG7= 0000000000000074
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eead0
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eeaf8
ARG3= 0000000000000208
ARG4= 00000000001eeaf4
ARG5= 00000000001eef88
ARG6= 000000007608dd24
ARG7= 0000000000000010
ARG8= 0000000000650044
ARG9= 0000000000610066
ARG10= 00000000006c0075
ARG11= 0000000000000074
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eecd4
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000187, EDX=00000000001eee74
RETURN ADDRESS=0000000077615e6c
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eeed8
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eef24
ARG1= 0000000000000004
ARG2= 00000000001eeeec
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eef10
ARG6= 0000000000000080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eeec8
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000ec
ARG1= 00000000ffffffff
ARG2= 00000000001eef14
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eeb54
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eeb90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000011c, EDX=00000000001eef18
RETURN ADDRESS=00000000776157bc
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001eef08
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000240000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eef00
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
ARG1= 00000000000000ec
ARG2= 00000000001eef20
ARG3= 00000000772c05df
ARG4= 00000000000000ec
ARG5= 00000000001eef50
ARG6= 00000000001ef1ac
ARG7= 0000000076090859
ARG8= 00000000000000ec
ARG9= 00000000001eef50
ARG10= 0000000076090821
ARG11= 0000000000240edc
ARG12= 000000007608feea
ARG13= 0000000005d7f95e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eee30
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f0
ARG1= 00000000001eeec8
ARG2= 00000000001eee7c
ARG3= 00000000772bfa6e
ARG4= 00000000001eee84
ARG5= 00000000051234c9
ARG6= 0000000000000100
ARG7= 00000000001eeec8
ARG8= 0000000000281348
ARG9= 00000000001ef0d0
ARG10= 00000000001eee8c
ARG11= 00000000001eee4c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f0
ARG1= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eee30
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f0
ARG1= 00000000001eeec8
ARG2= 00000000001eee7c
ARG3= 00000000772bfa6e
ARG4= 00000000001eee84
ARG5= 00000000051234c9
ARG6= 0000000000000100
ARG7= 00000000001eeec8
ARG8= 0000000000281348
ARG9= 00000000001ef0d0
ARG10= 00000000001eee8c
ARG11= 00000000001eee4c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 0000000000000009
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eed38
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eee74
ARG1= 0000000000020019
ARG2= 00000000001eed88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eec80
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000ec
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eee30
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
ARG1= 00000000001eeeac
ARG2= 00000000001eee7c
ARG3= 00000000772bfa6e
ARG4= 00000000001eee84
ARG5= 00000000051234c9
ARG6= 0000000000000007
ARG7= 00000000001eeeac
ARG8= 0000000000281348
ARG9= 0000000076084810
ARG10= 0000000000282b90
ARG11= 00000000001eee4c
ARG12= 0000000000000002
ARG13= 00000000001ef12c
ARG14= 0000000077319332
ARG15= 000000007227203d
ARG16= 00000000fffffffe
ARG17= 00000000001ef13c
ARG18= 000000007609052c
ARG19= 00000000000000ec
ARG20= 0000000000281358
ARG21= 00000000760907c9
ARG22= 0000000005d7f9ce
ARG23= 00000000001ef18c
ARG24= 0000000000281348
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef118
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef18c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001ef088
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001ef0b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001ef084
RETURN ADDRESS=00000000776154cc
ARG0= 00000000000000ec
ARG1= 0000000000000001
ARG2= 00000000001ef0bc
ARG3= 0000000000000050
ARG4= 00000000001ef0a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef094
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef108
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef174
ARG1= 0000000000020019
ARG2= 00000000001ef124
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef034
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef170
ARG1= 0000000000020019
ARG2= 00000000001ef084
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef110
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eeff0
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000f0
ARG1= 00000000001ef110
ARG2= 0000000000000002
ARG3= 00000000001ef04c
ARG4= 0000000000000090
ARG5= 00000000001ef028
ARG6= 00000000770deff5
ARG7= 00000000001ef188
ARG8= 00000000001ef1a8
ARG9= 00000000000000f0
ARG10= 00000000001ef124
ARG11= 00000000001ef12c
ARG12= 00000000001ef018
ARG13= 00000000001ef128
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eeff0
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000f0
ARG1= 00000000001ef110
ARG2= 0000000000000002
ARG3= 00000000001ef04c
ARG4= 0000000000000090
ARG5= 00000000001ef028
ARG6= 00000000770deff5
ARG7= 00000000001ef188
ARG8= 00000000001ef1a8
ARG9= 00000000000000f0
ARG10= 00000000001ef124
ARG11= 00000000001ef12c
ARG12= 00000000001ef018
ARG13= 00000000001ef128
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001eeff0
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000f0
ARG1= 00000000001ef110
ARG2= 0000000000000002
ARG3= 00000000001ef04c
ARG4= 0000000000000090
ARG5= 00000000001ef028
ARG6= 00000000770deff5
ARG7= 00000000001ef188
ARG8= 00000000001ef1ac
ARG9= 00000000000000f0
ARG10= 00000000001ef124
ARG11= 00000000001ef12c
ARG12= 00000000001ef018
ARG13= 00000000001ef128
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef12c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f0
ARG1= 00000000001ef19c
ARG2= 00000000001ef178
ARG3= 00000000772bfa6e
ARG4= 00000000001ef180
ARG5= 0000000005122bcd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000042, EDX=00000000001ee4a4
RETURN ADDRESS=0000000077614a1c
ARG0= 00000000001ee544
ARG1= 0000000080100080
ARG2= 00000000001ee500
ARG3= 00000000001ee4d8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000054, EDX=00000000001ee4d0
RETURN ADDRESS=0000000077614b3c
ARG0= 00000000001ee540
ARG1= 00000000000f0005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001ee4c4
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000ec
ARG1= 00000000ffffffff
ARG2= 00000000001ee53c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ee4e8
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
ARG1= 000000007761c822
ARG2= 0000000000000014
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001ee468
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001ee494
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eed74
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eeda0
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef080
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef0f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001eeff8
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef06c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eed74
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eeda0
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef080
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef0f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eed70
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eed9c
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef07c
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef0ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eedfc
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eee38
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c6, EDX=00000000001eeaa4
RETURN ADDRESS=00000000771bfb0c
ARG0= 0000000000000d3c
ARG1= 00000000001eef4c
ARG2= 000000007608dd24
ARG3= 000000007608d6ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011bb, EDX=00000000001eea94
RETURN ADDRESS=00000000771b0978
ARG0= 0000000000000034
ARG1= 0000000000000002
ARG2= 00000000001eeabc
ARG3= 0000000000000208
ARG4= 00000000001eeab8
ARG5= 00000000001eef4c
ARG6= 000000007608dd24
ARG7= 000000007608d6ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001eec98
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000187, EDX=00000000001eee38
RETURN ADDRESS=0000000077615e6c
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c2, EDX=00000000001eee9c
RETURN ADDRESS=000000007761521c
ARG0= 00000000001eeee8
ARG1= 0000000000000004
ARG2= 00000000001eeeb0
ARG3= 0000000000000018
ARG4= 000000000000009c
ARG5= 00000000001eeed4
ARG6= 0000000000000080
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000a8, EDX=00000000001eee8c
RETURN ADDRESS=000000007761507c
ARG0= 00000000000000ec
ARG1= 00000000ffffffff
ARG2= 00000000001eeed8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000011c, EDX=00000000001eeedc
RETURN ADDRESS=00000000776157bc
ARG0= 00000000000000e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001eeecc
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000250000
ARG2= 0000000000277ac0
ARG3= 00000000001eef14
ARG4= 00000000001ef170
ARG5= 000000007609084b
ARG6= 0000000000250000
ARG7= 00000000001eef14
ARG8= 0000000076090821
ARG9= 0000000000282960
ARG10= 000000007608f49f
ARG11= 0000000005d7f982
ARG12= 0000000000281468
ARG13= 0000000000277ac0
ARG14= 0000000000283368
ARG15= 0000000076090808
ARG16= 0000000000250000
ARG17= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eeec4
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
ARG1= 00000000000000ec
ARG2= 00000000001eeee4
ARG3= 00000000772c05df
ARG4= 00000000000000ec
ARG5= 00000000001eef14
ARG6= 00000000001ef170
ARG7= 0000000076090859
ARG8= 00000000000000ec
ARG9= 00000000001eef14
ARG10= 0000000076090821
ARG11= 0000000000282960
ARG12= 000000007608f49f
ARG13= 0000000005d7f982
ARG14= 0000000000281468
ARG15= 0000000000277ac0
ARG16= 0000000000283368
ARG17= 0000000076090808
ARG18= 0000000000250000
ARG19= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eed70
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eed9c
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef07c
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef0ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eed70
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eed9c
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef07c
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef0ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef14c
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef160
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef114
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef184
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124c, EDX=00000000001eef6c
RETURN ADDRESS=00000000771b5129
ARG0= 0000000080000002
ARG1= 0000000080000003
ARG2= 0000000076080000
ARG3= 00000000001eef9c
ARG4= 0000000076085619
ARG5= 0000000000000d38
ARG6= 0000000000000d3c
ARG7= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a9, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b395a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef04c
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef01c
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef030
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001eefe4
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef054
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000c0, EDX=00000000001eec48
RETURN ADDRESS=00000000776151fc
ARG0= 00000000ffffffff
ARG1= 0000000000000008
ARG2= 0000000000000200
ARG3= 00000000001eec78
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ed, EDX=00000000001eec44
RETURN ADDRESS=00000000776154cc
ARG0= 00000000000000ec
ARG1= 0000000000000001
ARG2= 00000000001eec7c
ARG3= 0000000000000050
ARG4= 00000000001eec68
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eec54
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001eecc8
RETURN ADDRESS=000000007761515c
ARG0= 00000000001eed34
ARG1= 0000000000020019
ARG2= 00000000001eece4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eebf4
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eed30
ARG1= 0000000000020019
ARG2= 00000000001eec44
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eecd0
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ec
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000074, EDX=00000000001eeb54
RETURN ADDRESS=0000000077614d3c
ARG0= 00000000000000f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001eed14
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f4
ARG1= 00000000001eed8c
ARG2= 00000000001eed60
ARG3= 00000000772bfa6e
ARG4= 00000000001eed68
ARG5= 00000000051237d5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef194
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1a8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef15c
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef1cc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef2b0
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000002
ARG2= 0000000000030142
ARG3= 000000000027ff80
ARG4= 00000000001ef2d8
ARG5= 00000000762b2801
ARG6= 0000000000110121
ARG7= 0000000000000001
ARG8= 00000000001ef2fc
ARG9= 00000000762b2bce
ARG10= 0000000000110121
ARG11= 0000000000110121
ARG12= 0000000000030142
ARG13= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef2b0
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 0000000000030142
ARG3= 000000000027ff80
ARG4= 00000000001ef2d8
ARG5= 00000000762b2801
ARG6= 0000000000110121
ARG7= 0000000000000001
ARG8= 00000000001ef2fc
ARG9= 00000000762b2bce
ARG10= 0000000000110121
ARG11= 0000000000110121
ARG12= 0000000000030142
ARG13= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef298
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000d3c
ARG1= 000000000000002b
ARG2= 000000000027ff80
ARG3= 00000000001ef2c8
ARG4= 00000000762b384e
ARG5= 0000000000000d3c
ARG6= 0000000000000001
ARG7= 000000000027ff80
ARG8= 0000000000030142
ARG9= 000000000027ff80
ARG10= 00000000001ef2d8
ARG11= 00000000762b2801
ARG12= 0000000000110121
ARG13= 0000000000000001
ARG14= 00000000001ef2fc
ARG15= 00000000762b2bce
ARG16= 0000000000110121
ARG17= 0000000000110121
ARG18= 0000000000030142
ARG19= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef270
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 000000000027df00
ARG3= 0000000000283770
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eed40
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eed7c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001ef07c
RETURN ADDRESS=000000007761516c
ARG0= 00000000001ef1b8
ARG1= 0000000000020019
ARG2= 00000000001ef0cc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef034
RETURN ADDRESS=000000007761569c
ARG0= 00000000000000f4
ARG1= 00000000001ef154
ARG2= 0000000000000002
ARG3= 00000000001ef090
ARG4= 0000000000000090
ARG5= 00000000001ef06c
ARG6= 00000000770deff5
ARG7= 00000000001ef1bc
ARG8= 00000000001ef1b4
ARG9= 00000000000000f4
ARG10= 00000000001ef168
ARG11= 00000000001ef170
ARG12= 00000000001ef1b8
ARG13= 00000000001ef16c
ARG14= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef158
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f4
ARG1= 0000000000283a4c
ARG2= 00000000001ef1a4
ARG3= 00000000772bfa6e
ARG4= 00000000001ef1ac
ARG5= 0000000005122b11
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001eede8
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001eee24
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef1d0
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef1a0
RETURN ADDRESS=0000000077357722
ARG0= 0000000009010196
ARG1= 00000000000a0000
ARG2= 0000000000280840
ARG3= 0000000009010196
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef1b0
RETURN ADDRESS=0000000077357471
ARG0= 00000000018a002e
ARG1= 000000000000005c
ARG2= 00000000001ef208
ARG3= 0000000009010196
ARG4= 00000000001ef268
ARG5= 000000007608cde8
ARG6= 00000000018a002e
ARG7= 000000000000005c
ARG8= 00000000001ef208
ARG9= 000000000027dec8
ARG10= 0000000000283770
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef268
ARG3= 000000007608cdf0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001197, EDX=00000000001eef4c
RETURN ADDRESS=00000000771b3195
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef60
ARG3= 0000000002060000
ARG4= 00000000001eefa0
ARG5= 00000000001ef210
ARG6= 0000000076093f3d
ARG7= 0000000000030142
ARG8= 00000000001eefa0
ARG9= 0000000000000103
ARG10= 0000000000280840
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b7, EDX=00000000001eee20
RETURN ADDRESS=000000007761516c
ARG0= 00000000001eef5c
ARG1= 0000000000020019
ARG2= 00000000001eee70
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef0ec
RETURN ADDRESS=00000000771b5a13
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001ef19c
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000020146
ARG1= 0000000000000005
ARG2= 0000000000000064
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0c8
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 00000000001ef144
ARG3= 00000000771b4780
ARG4= 0000000000030142
ARG5= 0000000000000281
ARG6= 00000000c000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001eed98
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001eee00
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001196, EDX=00000000001eeafc
RETURN ADDRESS=00000000771b28f3
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001169, EDX=00000000001ee9fc
RETURN ADDRESS=00000000771b0d69
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ab, EDX=00000000001ee4b4
RETURN ADDRESS=00000000771b1d5f
ARG0= 0000000000010027
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ee4ac
RETURN ADDRESS=00000000771b1821
ARG0= 0000000000010027
ARG1= 00000000001ee554
ARG2= 00000000001ee54c
ARG3= 00000000001ee540
ARG4= 00000000001ee568
ARG5= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001ee450
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001ee468
ARG1= 00000000001ee478
ARG2= 00000000001ee528
ARG3= 00000000001ee528
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001ee468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ee428
RETURN ADDRESS=0000000077357471
ARG0= 000000001105070f
ARG1= 0000000000000018
ARG2= 00000000001ee468
ARG3= 00000000001ee454
ARG4= 000000007735751f
ARG5= 000000001105070f
ARG6= 0000000000000018
ARG7= 00000000001ee468
ARG8= 00000000772092e0
ARG9= 00000000001ee490
ARG10= 00000000771b1a72
ARG11= 000000001105070f
ARG12= 0000000000000018
ARG13= 00000000001ee468
ARG14= 00000000000e000c
ARG15= 0000000077209e0c
ARG16= 00000000001ee468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b3, EDX=00000000001ee3f0
RETURN ADDRESS=000000007735a9d1
ARG0= 00000000450101ad
ARG1= 000000001105070f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ee2f4
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ee270
RETURN ADDRESS=000000007735ab9a
ARG0= 0000000009010196
ARG1= 0000000000000010
ARG2= 0000000000000020
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ee2e0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ee3bc
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee3a8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000050506e7
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001082, EDX=00000000001ee328
RETURN ADDRESS=000000007735abae
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000112f, EDX=00000000001ee25c
RETURN ADDRESS=000000007735ad59
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee3a8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ee37c
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ee35c
RETURN ADDRESS=0000000077357471
ARG0= 00000000050506e7
ARG1= 0000000000000018
ARG2= 00000000001ee3a8
ARG3= 00000000001ee388
ARG4= 000000007735751f
ARG5= 00000000050506e7
ARG6= 0000000000000018
ARG7= 00000000001ee3a8
ARG8= 00000000050506e7
ARG9= 00000000001ee3cc
ARG10= 00000000771af952
ARG11= 00000000050506e7
ARG12= 0000000000000018
ARG13= 00000000001ee3a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001ee380
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000010
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee368
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000050506e7
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee368
RETURN ADDRESS=0000000077356350
ARG0= 00000000040106e8
ARG1= 00000000060506f3
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ee32c
RETURN ADDRESS=0000000077357209
ARG0= 00000000040106e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee368
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee368
RETURN ADDRESS=0000000077356350
ARG0= 00000000040106e8
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee370
RETURN ADDRESS=000000007735697e
ARG0= 00000000050506e7
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee35c
RETURN ADDRESS=000000007735697e
ARG0= 00000000040106e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ee428
RETURN ADDRESS=0000000077357471
ARG0= 00000000050506db
ARG1= 0000000000000018
ARG2= 00000000001ee468
ARG3= 00000000001ee454
ARG4= 000000007735751f
ARG5= 00000000050506db
ARG6= 0000000000000018
ARG7= 00000000001ee468
ARG8= 00000000772092e0
ARG9= 00000000001ee490
ARG10= 00000000771b1a72
ARG11= 00000000050506db
ARG12= 0000000000000018
ARG13= 00000000001ee468
ARG14= 00000000fffffffe
ARG15= 000000007762316f
ARG16= 0000000077622d68
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000013, EDX=00000000001ee288
RETURN ADDRESS=000000007761472c
ARG0= 00000000ffffffff
ARG1= 00000000001ee2c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b3, EDX=00000000001ee3f0
RETURN ADDRESS=000000007735a9d1
ARG0= 00000000450101ad
ARG1= 00000000050506db
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ee2f4
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001ede78
RETURN ADDRESS=00000000773573c6
ARG0= 0000000009010196
ARG1= 0000000000000010
ARG2= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ee2e0
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ee3bc
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee3a8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 00000000060506e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001082, EDX=00000000001ee328
RETURN ADDRESS=000000007735abae
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000112f, EDX=00000000001ee25c
RETURN ADDRESS=000000007735ad59
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ee3a8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee498
RETURN ADDRESS=000000007735697e
ARG0= 000000001105070f
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 00000000060506e8
ARG4= 0000000000001105
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ee498
RETURN ADDRESS=000000007735697e
ARG0= 00000000050506db
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 00000000060506e8
ARG4= 0000000000000505
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ee4b4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001ee474
RETURN ADDRESS=00000000771af7ca
ARG0= 0000000000010152
ARG1= 00000000001ee494
ARG2= 00000000001ee4a4
ARG3= 00000000001ee4d0
ARG4= 0000000000000010
ARG5= 0000000000000010
ARG6= 00000000000e000c
ARG7= 00000000001ee578
ARG8= 00000000001ee494
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7ec
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee80c
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7e4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee804
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee7ec
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000000081
ARG3= 00000000001ee814
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ee720
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000010150
ARG1= 0000000000000081
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee814
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee784
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7a4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee784
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7a4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee78c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee738
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee758
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee740
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000010150
ARG3= 00000000001ee768
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ee7a0
ARG9= 0000000074641e8a
ARG10= 0000000000010150
ARG11= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee754
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee774
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee75c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ee72c
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 00000000ffffffff
ARG3= 00000000001ee798
ARG4= 000000007467a970
ARG5= 0000000000010150
ARG6= 00000000001ee768
ARG7= 0000000074645c90
ARG8= 0000000000010150
ARG9= 000000000000a918
ARG10= 00000000ffffffff
ARG11= 00000000001ee798
ARG12= 00000000ffffffff
ARG13= 00000000001ee77c
ARG14= 0000000074645d83
ARG15= 0000000000010150
ARG16= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ee708
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000010150
ARG1= 0000000000000083
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7ec
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7e4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee7cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ee7f4
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ee798
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000010150
ARG1= 0000000000000004
ARG2= 00000000002830b8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7d4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7f4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ee7c8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ee7e8
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ee7d0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eeda8
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef60
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eef20
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001227, EDX=00000000001eef60
RETURN ADDRESS=00000000771b4b62
ARG0= 0000000000070130
ARG1= 0000000000030142
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001eee1c
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001eeec8
ARG3= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001eee14
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 000000000000012c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eef64
RETURN ADDRESS=00000000771bf0ca
ARG0= 0000000000000009
ARG1= 0000000000000282
ARG2= 0000000000000281
ARG3= 0000000000a9f468
ARG4= 0000000000000281
ARG5= 0000000000070130
ARG6= 0000000000000281
ARG7= 0000000000a9f468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef60
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed40
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 00000000001eedbc
ARG3= 00000000771b4a9a
ARG4= 0000000000030142
ARG5= 0000000000000282
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001147, EDX=00000000001eef54
RETURN ADDRESS=00000000771b4341
ARG0= 0000000000070130
ARG1= 0000000000000058
ARG2= 00000000001eefa0
ARG3= 00000000771b49d0
ARG4= 0000000000070130
ARG5= 0000000000000282
ARG6= 0000000000000281
ARG7= 0000000000a9f468
ARG8= 0000000000000281
ARG9= 0000000000070130
ARG10= 0000000000000281
ARG11= 0000000000a9f468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011f0, EDX=00000000001ef2d0
RETURN ADDRESS=00000000762b2c90
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001224, EDX=00000000001ef59c
RETURN ADDRESS=00000000771acbb5
ARG0= 0000000000020144
ARG1= 00000000001ef62c
ARG2= 0000000000000007
ARG3= 00000000001ef5dc
ARG4= 00000000771b86ef
ARG5= 0000000000030142
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef518
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000020146
ARG1= 000000000000000d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef138
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef0fc
RETURN ADDRESS=00000000771b5a13
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef05c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef0a4
ARG2= 00000000760932ff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef098
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef0e8
ARG2= 00000000760932a5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef158
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef104
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef5c
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 00000000001eefd8
ARG3= 00000000771b4780
ARG4= 0000000000030142
ARG5= 0000000000000281
ARG6= 00000000c000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001eecb0
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001eed5c
ARG3= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001eeca8
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 000000000000012c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eedf8
RETURN ADDRESS=00000000771bf0ca
ARG0= 0000000000000009
ARG1= 0000000000000282
ARG2= 0000000000000281
ARG3= 0000000000a9f468
ARG4= 0000000000000281
ARG5= 0000000000070130
ARG6= 0000000000000281
ARG7= 0000000000a9f468
ARG8= 00000000771b72b6
ARG9= 0000000000a61555
ARG10= 0000000000030142
ARG11= 0000000000000282
ARG12= 00000000762b1591
ARG13= 00000000001eee5c
ARG14= 00000000771b3612
ARG15= 0000000000030142
ARG16= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedf4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 00000000771b72b6
ARG10= 0000000000a61555
ARG11= 0000000000030142
ARG12= 0000000000000282
ARG13= 00000000762b1591
ARG14= 00000000001eee5c
ARG15= 00000000771b3612
ARG16= 0000000000030142
ARG17= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedf4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000003
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 00000000771b72b6
ARG10= 0000000000a61555
ARG11= 0000000000030142
ARG12= 0000000000000282
ARG13= 00000000762b1591
ARG14= 00000000001eee5c
ARG15= 00000000771b3612
ARG16= 0000000000030142
ARG17= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001197, EDX=00000000001eede0
RETURN ADDRESS=00000000771b3195
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eedf4
ARG3= 0000000002060000
ARG4= 00000000001eee34
ARG5= 00000000001ef0a4
ARG6= 0000000076093f3d
ARG7= 0000000000020144
ARG8= 00000000001eee34
ARG9= 0000000000000103
ARG10= 0000000000280840
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef158
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef34
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001eefb0
ARG3= 00000000771b4780
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 0000000000110121
ARG7= 0000000000000200
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedcc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 000000007608443b
ARG10= 00000000001ef0a4
ARG11= 0000000076083fa5
ARG12= 0000000000020144
ARG13= 00000000762b1591
ARG14= 00000000001eee34
ARG15= 00000000771b3612
ARG16= 0000000000030142
ARG17= 0000000000000281
ARG18= 0000000000000001
ARG19= 00000000c000000f
ARG20= 00000000001eeecc
ARG21= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eed8c
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001227, EDX=00000000001eedcc
RETURN ADDRESS=00000000771b4b62
ARG0= 0000000000070130
ARG1= 0000000000020144
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 000000007608443b
ARG10= 00000000001ef0a4
ARG11= 0000000076083fa5
ARG12= 0000000000020144
ARG13= 0000000000110121
ARG14= 00000000001eee34
ARG15= 00000000771b3612
ARG16= 0000000000030142
ARG17= 0000000000000281
ARG18= 0000000000000001
ARG19= 00000000c000000f
ARG20= 00000000001eeecc
ARG21= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001eec88
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001eed34
ARG3= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001eec80
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 000000000000012c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eedd0
RETURN ADDRESS=00000000771bf0ca
ARG0= 0000000000000009
ARG1= 0000000000000282
ARG2= 0000000000000281
ARG3= 0000000000a9f468
ARG4= 0000000000000281
ARG5= 0000000000070130
ARG6= 0000000000000281
ARG7= 0000000000a9f468
ARG8= 000000007608443b
ARG9= 00000000001ef0a4
ARG10= 0000000076083fa5
ARG11= 0000000000020144
ARG12= 0000000000110121
ARG13= 00000000001eee34
ARG14= 00000000771b3612
ARG15= 0000000000030142
ARG16= 0000000000000281
ARG17= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eedcc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 000000007608443b
ARG10= 00000000001ef0a4
ARG11= 0000000076083fa5
ARG12= 0000000000020144
ARG13= 0000000000110121
ARG14= 00000000001eee34
ARG15= 00000000771b3612
ARG16= 0000000000030142
ARG17= 0000000000000281
ARG18= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001147, EDX=00000000001eedc0
RETURN ADDRESS=00000000771b4341
ARG0= 0000000000070130
ARG1= 0000000000000058
ARG2= 00000000001eee0c
ARG3= 00000000771b49d0
ARG4= 0000000000070130
ARG5= 0000000000000282
ARG6= 0000000000000281
ARG7= 0000000000a9f468
ARG8= 0000000000000281
ARG9= 0000000000070130
ARG10= 0000000000000281
ARG11= 0000000000a9f468
ARG12= 000000007608443b
ARG13= 00000000001ef0a4
ARG14= 0000000076083fa5
ARG15= 0000000000020144
ARG16= 0000000000110121
ARG17= 00000000001eee34
ARG18= 00000000771b3612
ARG19= 0000000000030142
ARG20= 0000000000000281
ARG21= 0000000000a9c908
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011f0, EDX=00000000001ef164
RETURN ADDRESS=00000000762b2c90
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3f4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef25c
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef288
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef374
RETURN ADDRESS=0000000077357471
ARG0= 00000000070a070c
ARG1= 000000000000005c
ARG2= 00000000001ef3a8
ARG3= 000000000027e758
ARG4= 00000000001ef408
ARG5= 000000007484fa83
ARG6= 00000000070a070c
ARG7= 000000000000005c
ARG8= 00000000001ef3a8
ARG9= 0000000000110121
ARG10= 000000000027e758
ARG11= 000000007761642e
ARG12= 000000000025f560
ARG13= 0000000000000048
ARG14= 000000000025fb84
ARG15= 00000000776163e0
ARG16= 0000000000000048
ARG17= 0000000000000014
ARG18= 0000000000000001
ARG19= 0000000000110121
ARG20= 00000000762b27da
ARG21= 00000000001ef3e8
ARG22= 00000000762b2783
ARG23= 00000000001ef3e8
ARG24= 00000000762b27b3
ARG25= 000000000027ff84
ARG26= 0000000000110121
ARG27= 00000000001ef3f8
ARG28= 00000000762b2a39
ARG29= 000000000027ff80
ARG30= 000000000027e758
ARG31= 00000000001ef408
ARG32= 00000000762b29b6
ARG33= 0000000000020144
ARG34= 0000000005e33a9e
ARG35= 00000000001ef444
ARG36= 000000007484f901
ARG37= 000000000027e758
ARG38= 00000000001ef4c0
ARG39= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef330
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 0000000000110121
ARG3= 000000000027e758
ARG4= 00000000001ef3a8
ARG5= 0000000000110121
ARG6= 0000000000110121
ARG7= 0000000000110121
ARG8= 00000000762b27da
ARG9= 00000000001ef374
ARG10= 00000000762b2783
ARG11= 00000000001ef374
ARG12= 00000000762b27b3
ARG13= 000000000027ff84
ARG14= 0000000000110121
ARG15= 0000000074907ac2
ARG16= 0000000000000001
ARG17= 00000000001ef408
ARG18= 00000000747cab29
ARG19= 00000000762b0000
ARG20= 000000007490c0cc
ARG21= 0000000005d7a03e
ARG22= 00000000001ef408
ARG23= 000000007484fa8d
ARG24= 0000000000110121
ARG25= 00000000001ef3a8
ARG26= 0000000000110121
ARG27= 000000000027e758
ARG28= 00000000fffffff3
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef308
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 00000000762b49c0
ARG4= 0000000000110121
ARG5= 0000000000020144
ARG6= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2f4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000d3c
ARG1= 000000000000002b
ARG2= 00000000001ef404
ARG3= 00000000001ef318
ARG4= 00000000762b484a
ARG5= 0000000000000d3c
ARG6= 00000000001ef404
ARG7= 00000000001ef390
ARG8= 00000000762b49c0
ARG9= 0000000000110121
ARG10= 0000000000020144
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0d4
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001ef150
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 00000000fffffffe
ARG9= 00000000771b888d
ARG10= 00000000771b7631
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eebac
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001eebe0
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001eebac
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001eebe0
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb04
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001eeb80
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 0000000000280190
ARG9= 00000000001eeb40
ARG10= 000000007609feb4
ARG11= 0000000000280190
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef244
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef270
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef1fc
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000002006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001207, EDX=00000000001ef358
RETURN ADDRESS=00000000771b52ae
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef344
RETURN ADDRESS=00000000771b704d
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef2d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000009010196
ARG1= 0000000000000001
ARG2= 0000000000000001
ARG3= 0000000000000232
ARG4= 00000000000000d1
ARG5= 000000000027e758
ARG6= 00000000001ef33c
ARG7= 00000000747cacb0
ARG8= 0000000009010196
ARG9= 0000000000000001
ARG10= 0000000000000001
ARG11= 0000000000000232
ARG12= 00000000000000d1
ARG13= 0000000009010196
ARG14= 000000000027e758
ARG15= 0000000000000001
ARG16= 0000000000000001
ARG17= 0000000000000232
ARG18= 00000000000000d1
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000000000232
ARG22= 00000000000000d1
ARG23= 0000000005e33daa
ARG24= 00000000001ef35c
ARG25= 00000000747cad34
ARG26= 000000000027e758
ARG27= 0000000009010196
ARG28= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef330
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001165, EDX=00000000001ef32c
RETURN ADDRESS=00000000771d650c
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124d, EDX=00000000001ef360
RETURN ADDRESS=00000000771aa8f8
ARG0= 0000000000020144
ARG1= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef1b4
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000002006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef304
RETURN ADDRESS=00000000771b3d83
ARG0= 0000000000000001
ARG1= 0000000000000001
ARG2= 0000000000000073
ARG3= 00000000001ef35c
ARG4= 000000007481903d
ARG5= 0000000000000001
ARG6= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef308
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef170
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef19c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef290
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef2f8
ARG3= 000000000027e758
ARG4= 00000000001ef314
ARG5= 0000000074850e80
ARG6= 0000000000110121
ARG7= 00000000001ef2f4
ARG8= 0000000000000001
ARG9= 000000000027e758
ARG10= 00000000ffffb1e0
ARG11= 0000000000110121
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef26c
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef2a8
ARG3= 00000000762b4906
ARG4= 0000000000110121
ARG5= 0000000000020144
ARG6= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef258
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000d3c
ARG1= 000000000000002b
ARG2= 0000000000020144
ARG3= 00000000001ef27c
ARG4= 00000000762b484a
ARG5= 0000000000000d3c
ARG6= 0000000000020144
ARG7= 00000000001ef2a8
ARG8= 00000000762b4906
ARG9= 0000000000110121
ARG10= 0000000000020144
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef038
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001ef0b4
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 00000000ffffffff
ARG9= 00000000771b881f
ARG10= 00000000771b88c9
ARG11= 0000000000000001
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef330
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef358
ARG3= 00000000747cacea
ARG4= 0000000000020144
ARG5= 0000000009010196
ARG6= 000000000027e758
ARG7= 0000000009010196
ARG8= 00000000001ef380
ARG9= 0000000074818974
ARG10= 000000000027e758
ARG11= 0000000009010196
ARG12= 0000000000000001
ARG13= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef518
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000020146
ARG1= 000000000000000d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef508
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000020146
ARG1= 0000000000000007
ARG2= 0000000080000000
ARG3= 0000000000280840
ARG4= 0000000000100000
ARG5= 0000000076085711
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef40c
RETURN ADDRESS=00000000771b5a13
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001ef4bc
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000020146
ARG1= 0000000000000005
ARG2= 0000000000000064
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fd, EDX=00000000001ef484
RETURN ADDRESS=00000000771aecd6
ARG0= 0000000000000d3c
ARG1= 000000000000c03e
ARG2= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fd, EDX=00000000001ef5f0
RETURN ADDRESS=00000000771aecd6
ARG0= 0000000000000d3c
ARG1= 000000000000c03e
ARG2= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6e8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000085
ARG3= 00000000001ef6f8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000001
ARG8= 00000000001ef744
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000085
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef620
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef5fc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000085
ARG8= 00000000001ef634
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000085
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef648
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef3e0
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef438
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afa61
ARG10= 00000000001ef534
ARG11= 000000000056da84
ARG12= 000000000056da60
ARG13= 000000000028403c
ARG14= 00000000001ef40c
ARG15= 00000000001ef470
ARG16= 00000000001ef6ec
ARG17= 000000007467371f
ARG18= 0000000072e0df01
ARG19= 00000000fffffffe
ARG20= 00000000001ef45c
ARG21= 000000007464d247
ARG22= 000000000056f598
ARG23= 000000000056da60
ARG24= 00000000480a0759
ARG25= 000000000056da60
ARG26= 000000007467a1c8
ARG27= 00000000001ef468
ARG28= 000000007464d1b9
ARG29= 00000000001ef53c
ARG30= 000000007464d212
ARG31= 0000000000010000
ARG32= 0000000000030142
ARG33= 00000000480a0759
ARG34= 00000000001ef52c
ARG35= 00000000001ef608
ARG36= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef434
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000030142
ARG1= 00000000001ef534
ARG2= 000000000056da60
ARG3= 00000000480a0759
ARG4= 000000000056da60
ARG5= 000000007467a1c8
ARG6= 00000000001ef468
ARG7= 000000000056f598
ARG8= 00000000001ef53c
ARG9= 000000007464d212
ARG10= 0000000000010000
ARG11= 0000000000030142
ARG12= 00000000480a0759
ARG13= 00000000001ef52c
ARG14= 00000000001ef608
ARG15= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef2b4
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000017040704
ARG2= 0000000000000001
ARG3= 0000000017040704
ARG4= 00000000001ef364
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000017040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef2a0
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a6, EDX=00000000001ef280
RETURN ADDRESS=0000000077357f8a
ARG0= 0000000003010699
ARG1= 00000000001ef2b8
ARG2= 00000000771b8079
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef100
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ef120
ARG3= 00000000001ef130
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef118
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ef138
ARG3= 00000000001ef148
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ef2a0
RETURN ADDRESS=0000000077357c8b
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef41c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef45c
ARG3= 000000007464d2c0
ARG4= 0000000000030142
ARG5= 0000000003010699
ARG6= 000000000056da84
ARG7= 00000000001ef534
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef450
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef53c
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 00000000001ef608
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001ef234
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef480
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefd0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeff0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eefd0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeff0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefd8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef84
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eefa4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef8c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eefb4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eefec
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef10
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef30
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef18
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef220
ARG3= 00000000001eef40
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef200
ARG8= 00000000001eef84
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef220
ARG12= 0000000000030142
ARG13= 0000000000030142
ARG14= 00000000007508f4
ARG15= 00000000001eef78
ARG16= 00000000762d78bb
ARG17= 00000000762d7960
ARG18= 00000000007507d0
ARG19= 00000000007508f4
ARG20= 00000000007507d0
ARG21= 0000000000000012
ARG22= 00000000771b7796
ARG23= 0000000005e2fe29
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef3f4
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef43c
ARG2= 000000000056dac8
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef530
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef518
RETURN ADDRESS=000000007735909d
ARG0= 00000000040101bc
ARG1= 0000000000000008
ARG2= 000000000000001e
ARG3= 0000000000000250
ARG4= 0000000000000188
ARG5= 000000000056dd08
ARG6= 00000000001ef620
ARG7= 00000000746474ef
ARG8= 00000000040101bc
ARG9= 0000000000000008
ARG10= 000000000000001e
ARG11= 0000000000000250
ARG12= 0000000000000188
ARG13= 00000000001ef660
ARG14= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef098
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef220
ARG3= 0000000000633ed8
ARG4= 00000000001ef0e8
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e169
ARG8= 00000000001ef260
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef098
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef220
ARG3= 0000000000634068
ARG4= 00000000001ef0e8
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e169
ARG8= 00000000001ef260
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ef098
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ef220
ARG3= 00000000006341f8
ARG4= 00000000001ef0e8
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2e169
ARG8= 00000000001ef260
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef480
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da60
ARG3= 00000000001ef538
ARG4= 0000000074652b55
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001ef01c
RETURN ADDRESS=00000000773573c6
ARG0= 00000000040101bc
ARG1= 0000000000000258
ARG2= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef484
RETURN ADDRESS=0000000077356598
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef470
RETURN ADDRESS=0000000077356350
ARG0= 00000000060106dc
ARG1= 000000001a05070f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 0000000000633430
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 000000000063c190
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 000000000063c308
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 0000000000638600
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 0000000000638778
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 0000000000635fd0
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefe8
RETURN ADDRESS=0000000077357265
ARG0= 00000000060106dc
ARG1= 0000000000000060
ARG2= 00000000001ef170
ARG3= 0000000000636148
ARG4= 00000000001ef220
ARG5= 00000000001ef04c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef440
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef498
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afac1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef1b0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000060106dc
ARG1= 0000000018040704
ARG2= 0000000000000001
ARG3= 0000000018040704
ARG4= 00000000001ef260
ARG5= 00000000771b7d50
ARG6= 00000000060106dc
ARG7= 0000000018040704
ARG8= 00000000060106dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef19c
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000060106dc
ARG1= 000000000000001e
ARG2= 000000000000000b
ARG3= 00000000000001ea
ARG4= 000000000000001b
ARG5= 00000000001ef360
ARG6= 00000000001ef260
ARG7= 00000000771b7d7f
ARG8= 00000000060106dc
ARG9= 000000000000001e
ARG10= 000000000000000b
ARG11= 00000000000001ea
ARG12= 000000000000001b
ARG13= 00000000060106dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeec4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000060106dc
ARG1= 0000000000000007
ARG2= 00000000001eeee4
ARG3= 00000000001eeef4
ARG4= 0000000077357c56
ARG5= 00000000060106dc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeed4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000060106dc
ARG1= 0000000000000007
ARG2= 00000000001eeef4
ARG3= 00000000001eef04
ARG4= 0000000077357c56
ARG5= 00000000060106dc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001eeb00
RETURN ADDRESS=0000000077358128
ARG0= 00000000060106dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef408
RETURN ADDRESS=0000000077357be3
ARG0= 00000000060106dc
ARG1= 0000000000000007
ARG2= 00000000001ef428
ARG3= 00000000001ef438
ARG4= 0000000077357c56
ARG5= 00000000060106dc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000117d, EDX=00000000001ef41c
RETURN ADDRESS=00000000771b4ceb
ARG0= 00000000060106dc
ARG1= 000000000000000a
ARG2= 000000000000000a
ARG3= 0000000000070124
ARG4= 0000000000000010
ARG5= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001123, EDX=00000000001ef474
RETURN ADDRESS=000000007735a237
ARG0= 00000000060106dc
ARG1= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef434
RETURN ADDRESS=0000000077357209
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef470
RETURN ADDRESS=0000000077356350
ARG0= 00000000060106dc
ARG1= 000000000185000f
ARG2= 00000000060106dc
ARG3= 000000000056da60
ARG4= 000000000056da84
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef464
RETURN ADDRESS=000000007735697e
ARG0= 00000000060106dc
ARG1= 00000000060106dc
ARG2= 000000000056da60
ARG3= 000000000056da84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef478
RETURN ADDRESS=000000007735697e
ARG0= 000000001a05070f
ARG1= 00000000060106dc
ARG2= 000000000056da60
ARG3= 000000000056da84
ARG4= 0000000000001a05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125c, EDX=00000000001ef534
RETURN ADDRESS=00000000771ad480
ARG0= 0000000000030142
ARG1= 00000000040101bc
ARG2= 0000000000000008
ARG3= 0000000000000008
ARG4= 000000000000001e
ARG5= 0000000000000001
ARG6= 00000000001ef660
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2d8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef284
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2a4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef28c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2b4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001ef2ec
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef210
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef230
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef218
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef520
ARG3= 00000000001ef240
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef500
ARG8= 00000000001ef284
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef520
ARG12= 0000000000030142
ARG13= 0000000000030142
ARG14= 0000000000000001
ARG15= 000000000056f5bc
ARG16= 00000000001ef284
ARG17= 00000000771b7bfb
ARG18= 00000000060106dc
ARG19= 00000000ffffffff
ARG20= 0000000000000012
ARG21= 00000000001ef350
ARG22= 00000000771b7796
ARG23= 0000000005e2e329
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2d8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef284
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2a4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef28c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2b4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000091
ARG8= 00000000001ef2ec
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000091
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef20c
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed68
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeef0
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef248
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef280
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef18
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea74
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebfc
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec7c
ARG3= 000000000064fc58
ARG4= 00000000001eeb64
ARG5= 00000000001eeb74
ARG6= 0000000000750c30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebf0
ARG2= 0000000000000044
ARG3= 00000000001eecf4
ARG4= 00000000001eec00
ARG5= 0000000074643f54
ARG6= 00000000001eee74
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec7c
ARG11= 00000000001eeec8
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000008
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf4
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec5c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000019040704
ARG2= 0000000000000001
ARG3= 0000000019040704
ARG4= 00000000001eed70
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000019040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eecac
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000000021
ARG4= 000000000000002f
ARG5= 00000000001eee70
ARG6= 00000000001eed70
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000000f
ARG10= 0000000000000020
ARG11= 0000000000000021
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea04
ARG3= 00000000001eea14
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c4
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee610
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3b4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3cc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef248
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef280
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef18
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea74
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebfc
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec7c
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb50
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000000f
ARG9= 0000000000000020
ARG10= 00000000001ef018
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf4
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf4
ARG19= 000000000000000f
ARG20= 000000000000000f
ARG21= 00000000001eeb84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebf0
ARG2= 0000000000000044
ARG3= 00000000001eecf4
ARG4= 00000000001eec00
ARG5= 0000000074643f54
ARG6= 00000000001eee74
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec7c
ARG11= 00000000001eeec8
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000028
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf4
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec5c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001a040704
ARG2= 0000000000000001
ARG3= 000000001a040704
ARG4= 00000000001eed70
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001a040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eecac
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000000043
ARG4= 000000000000002f
ARG5= 00000000001eee70
ARG6= 00000000001eed70
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000002f
ARG10= 0000000000000020
ARG11= 0000000000000043
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea04
ARG3= 00000000001eea14
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c4
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee610
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3b4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3cc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef248
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef280
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef18
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea74
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebfc
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec7c
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb50
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000002f
ARG9= 0000000000000020
ARG10= 00000000001ef018
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf4
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf4
ARG19= 000000000000002f
ARG20= 000000000000002f
ARG21= 00000000001eeb84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebf0
ARG2= 0000000000000044
ARG3= 00000000001eecf4
ARG4= 00000000001eec00
ARG5= 0000000074643f54
ARG6= 00000000001eee74
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec7c
ARG11= 00000000001eeec8
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000004a
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf4
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec5c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001b040704
ARG2= 0000000000000001
ARG3= 000000001b040704
ARG4= 00000000001eed70
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001b040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eecac
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000000077
ARG4= 000000000000002f
ARG5= 00000000001eee70
ARG6= 00000000001eed70
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000051
ARG10= 0000000000000020
ARG11= 0000000000000077
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea04
ARG3= 00000000001eea14
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c4
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee610
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3b4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3cc
ARG2= 0000000000000044
ARG3= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef248
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef280
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef18
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea74
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebfc
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec7c
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb50
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000051
ARG9= 0000000000000020
ARG10= 00000000001ef018
ARG11= 0000000000000007
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf4
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000007
ARG18= 00000000001eecf4
ARG19= 0000000000000051
ARG20= 0000000000000051
ARG21= 00000000001eeb84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebf0
ARG2= 0000000000000044
ARG3= 00000000001eecf4
ARG4= 00000000001eec00
ARG5= 0000000074643f54
ARG6= 00000000001eee74
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec7c
ARG11= 00000000001eeec8
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000007e
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf4
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec5c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001c040704
ARG2= 0000000000000001
ARG3= 000000001c040704
ARG4= 00000000001eed70
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001c040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eecac
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 000000000000009e
ARG4= 000000000000002f
ARG5= 00000000001eee70
ARG6= 00000000001eed70
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000085
ARG10= 0000000000000020
ARG11= 000000000000009e
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea04
ARG3= 00000000001eea14
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c4
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee610
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3b4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3cc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef264
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef284
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef218
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef238
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef220
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef248
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef280
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eef18
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea74
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eebfc
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eeaf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eec7c
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eeb50
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000085
ARG9= 0000000000000020
ARG10= 00000000001ef018
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001eecf4
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eecf4
ARG19= 0000000000000085
ARG20= 0000000000000085
ARG21= 00000000001eeb84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eebd8
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001eebf0
ARG2= 0000000000000044
ARG3= 00000000001eecf4
ARG4= 00000000001eec00
ARG5= 0000000074643f54
ARG6= 00000000001eee74
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001eec7c
ARG11= 00000000001eeec8
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 00000000000000a5
ARG15= 000000000000001e
ARG16= 0000000000200740
ARG17= 00000000001eecf4
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eec5c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001d040704
ARG2= 0000000000000001
ARG3= 000000001d040704
ARG4= 00000000001eed70
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001d040704
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eecac
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 00000000000000c5
ARG4= 000000000000002f
ARG5= 00000000001eee70
ARG6= 00000000001eed70
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 00000000000000ac
ARG10= 0000000000000020
ARG11= 00000000000000c5
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee9e4
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eea04
ARG3= 00000000001eea14
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee8c8
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee8ac
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee8c4
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee610
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3b4
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee3cc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef534
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef620
ARG3= 000000007464763f
ARG4= 0000000000030142
ARG5= 00000000040101bc
ARG6= 00000000001ef660
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6f8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6e8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000014
ARG3= 00000000001ef6f8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000003010699
ARG8= 00000000001ef744
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000014
ARG12= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef618
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef638
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef620
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef5fc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000014
ARG8= 00000000001ef634
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000014
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef648
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5d0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef5f8
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000000030142
ARG8= 00000000001ef634
ARG9= 00000000746457bd
ARG10= 0000000000030142
ARG11= 0000000000000004
ARG12= 0000000000030142
ARG13= 000000000056da60
ARG14= 0000000000000014
ARG15= 0000000000030142
ARG16= 00000000771b77cd
ARG17= 00000000771b7987
ARG18= 00000000001ef648
ARG19= 0000000074643199
ARG20= 000000000056da70
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef59c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000014
ARG2= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6f8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6cc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6ec
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef5e0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef5e0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5c8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef574
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef594
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef57c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000070130
ARG3= 00000000001ef5a4
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001ef5dc
ARG9= 0000000074641e8a
ARG10= 0000000000070130
ARG11= 0000000000070130
ARG12= 00000000ffffffff
ARG13= 0000000000000047
ARG14= 0000000000070130
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef6e0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef600
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef620
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef600
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef620
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef608
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef5d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef5e4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001ef61c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000047
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6e0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef4c0
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef518
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afb41
ARG10= 00000000001ef614
ARG11= 000000000056da84
ARG12= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef514
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000030142
ARG1= 00000000001ef614
ARG2= 000000000056da60
ARG3= 00000000480a0759
ARG4= 000000000056da60
ARG5= 000000007467a1c8
ARG6= 00000000001ef548
ARG7= 000000000056f598
ARG8= 00000000001ef61c
ARG9= 000000007464d212
ARG10= 0000000000010000
ARG11= 0000000000030142
ARG12= 00000000480a0759
ARG13= 00000000001ef60c
ARG14= 00000000001ef850
ARG15= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef394
RETURN ADDRESS=0000000077357c77
ARG0= 0000000009010196
ARG1= 000000001e040704
ARG2= 0000000000000001
ARG3= 000000001e040704
ARG4= 00000000001ef444
ARG5= 00000000771b7d50
ARG6= 0000000009010196
ARG7= 000000001e040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef380
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000009010196
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a6, EDX=00000000001ef360
RETURN ADDRESS=0000000077357f8a
ARG0= 0000000009010196
ARG1= 00000000001ef398
ARG2= 00000000771b8079
ARG3= 0000000009010196
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef1e0
RETURN ADDRESS=0000000077357be3
ARG0= 0000000009010196
ARG1= 0000000000000007
ARG2= 00000000001ef200
ARG3= 00000000001ef210
ARG4= 0000000077357c56
ARG5= 0000000009010196
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef1f8
RETURN ADDRESS=0000000077357be3
ARG0= 0000000009010196
ARG1= 0000000000000007
ARG2= 00000000001ef218
ARG3= 00000000001ef228
ARG4= 0000000077357c56
ARG5= 0000000009010196
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ef380
RETURN ADDRESS=0000000077357c8b
ARG0= 0000000009010196
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef4fc
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef53c
ARG3= 000000007464d2c0
ARG4= 0000000000030142
ARG5= 0000000009010196
ARG6= 000000000056da84
ARG7= 00000000001ef614
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef530
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef61c
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 00000000001ef850
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001ef314
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef560
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef0d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef0b0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef0d0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef064
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef084
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef06c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef094
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001ef0cc
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeff0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef010
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeff8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef300
ARG3= 00000000001ef020
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef300
ARG8= 00000000001ef064
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef300
ARG12= 0000000000030142
ARG13= 0000000000030142
ARG14= 00000000007508f4
ARG15= 00000000001ef058
ARG16= 00000000762d78bb
ARG17= 00000000762d7960
ARG18= 00000000007507d0
ARG19= 00000000007508f4
ARG20= 00000000007507d0
ARG21= 0000000000000012
ARG22= 00000000771b7796
ARG23= 0000000005e2e109
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef4d4
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef51c
ARG2= 000000000056dac8
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001143, EDX=00000000001ef5a4
RETURN ADDRESS=00000000771b5703
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5a0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef5c0
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5a8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000285980
ARG3= 00000000001ef5d0
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef5a0
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef5c0
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef5a8
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000285984
ARG3= 00000000001ef5d0
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000001
ARG8= 00000000001ef5e0
ARG9= 00000000746478a1
ARG10= 000000000003013e
ARG11= 0000000000285984
ARG12= 00000000001ef600
ARG13= 00000000771b56c3
ARG14= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef448
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef434
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef47c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef444
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef448
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef474
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001090, EDX=00000000001ef3fc
RETURN ADDRESS=000000007735c5c5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010f2, EDX=00000000001ef4b4
RETURN ADDRESS=0000000077359f36
ARG0= 000000002404070f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef4b8
RETURN ADDRESS=0000000077358f09
ARG0= 000000001f040704
ARG1= 000000002404070f
ARG2= 000000001f040704
ARG3= 0000000000000005
ARG4= 000000000056dd18
ARG5= 000000001f040704
ARG6= 000000000056da84
ARG7= 0000000000210fa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef4d8
RETURN ADDRESS=000000007735697e
ARG0= 000000002404070f
ARG1= 0000000000040000
ARG2= 000000000000070f
ARG3= 00000000001ef50c
ARG4= 0000000077356966
ARG5= 000000002404070f
ARG6= 000000000056dd18
ARG7= 00000000001ef534
ARG8= 000000000056da84
ARG9= 0000000000002404
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102c, EDX=00000000001ef4d0
RETURN ADDRESS=00000000773591dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef4b8
RETURN ADDRESS=0000000077358f09
ARG0= 000000001f040704
ARG1= 000000002504070f
ARG2= 000000001f040704
ARG3= 0000000000000002
ARG4= 000000000056dd28
ARG5= 000000001f040704
ARG6= 000000000056da84
ARG7= 0000000000210fa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102c, EDX=00000000001ef4d0
RETURN ADDRESS=00000000773591dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef4b8
RETURN ADDRESS=0000000077358f09
ARG0= 000000001f040704
ARG1= 00000000070406dc
ARG2= 000000001f040704
ARG3= 0000000000000002
ARG4= 000000000056dd38
ARG5= 000000001f040704
ARG6= 000000000056da84
ARG7= 0000000000210fa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef4b8
RETURN ADDRESS=0000000077358f09
ARG0= 000000001f040704
ARG1= 000000002604070f
ARG2= 000000001f040704
ARG3= 0000000000000002
ARG4= 000000000056dd48
ARG5= 000000001f040704
ARG6= 000000000056da84
ARG7= 0000000000210fa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef4b8
RETURN ADDRESS=0000000077358f09
ARG0= 000000001f040704
ARG1= 00000000080406dc
ARG2= 000000001f040704
ARG3= 0000000000000002
ARG4= 000000000056dd58
ARG5= 000000001f040704
ARG6= 000000000056da84
ARG7= 0000000000210fa8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef448
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef434
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef47c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef444
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef448
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef474
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001015, EDX=00000000001ef510
RETURN ADDRESS=0000000077358f09
ARG0= 00000000090406dc
ARG1= 000000001f040704
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef48c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef4ac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef48c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef4ac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef494
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 000000000056da60
ARG3= 00000000001ef4bc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000030142
ARG8= 00000000001ef4f4
ARG9= 00000000746462fd
ARG10= 0000000000030142
ARG11= 000000000056dea0
ARG12= 000000000056da60
ARG13= 0000000000000001
ARG14= 0000000074642c55
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001245, EDX=00000000001ef49c
RETURN ADDRESS=00000000771ab292
ARG0= 0000000000030142
ARG1= 000000001f040704
ARG2= 0000000000000001
ARG3= 0000000000000001
ARG4= 00000000001ef4f4
ARG5= 0000000074646333
ARG6= 0000000000030142
ARG7= 000000001f040704
ARG8= 0000000000000001
ARG9= 000000000056dea0
ARG10= 000000000056da60
ARG11= 0000000000000001
ARG12= 0000000074642c55
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef308
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef214
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef214
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1fc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1a8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1c8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef1d8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef210
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000083
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a91c
ARG2= 000000000056da60
ARG3= 00000000001ef220
ARG4= 0000000074647b5d
ARG5= 0000000000030142
ARG6= 000000000000a91c
ARG7= 0000000000000083
ARG8= 00000000771b7796
ARG9= 0000000005e2e385
ARG10= 00000000771b7756
ARG11= 0000000000560808
ARG12= 0000000000030142
ARG13= 0000000000030142
ARG14= 00000000001ef1d8
ARG15= 0000000000030142
ARG16= 0000000000030142
ARG17= 000000000056da60
ARG18= 0000000000000083
ARG19= 00000000001ef220
ARG20= 0000000074643295
ARG21= 0000000000000083
ARG22= 000000007467b310
ARG23= 0000000000000025
ARG24= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef178
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000083
ARG2= 0000000000000001
ARG3= 00000000001ef44c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef14
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef34
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef14
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef34
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef1c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeed0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eef30
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee54
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee74
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee5c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef164
ARG3= 00000000001eee84
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef100
ARG8= 00000000001eeec8
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef164
ARG12= 0000000076305f7e
ARG13= 00000000001eefe0
ARG14= 0000000000000011
ARG15= 0000000000030142
ARG16= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef318
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000085
ARG3= 00000000001ef320
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000001
ARG8= 00000000001ef36c
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000085
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef214
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1fc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef224
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000085
ARG8= 00000000001ef25c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000085
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef008
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef060
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afe39
ARG10= 00000000001ef15c
ARG11= 000000000056da84
ARG12= 000000000056da60
ARG13= 00000000001ef054
ARG14= 00000000001ef034
ARG15= 00000000772098d8
ARG16= 00000000001ef314
ARG17= 000000007467371f
ARG18= 0000000072e0df01
ARG19= 00000000fffffffe
ARG20= 00000000001ef084
ARG21= 000000007464d247
ARG22= 000000000056f598
ARG23= 000000000056da60
ARG24= 00000000480a0759
ARG25= 000000000056da60
ARG26= 000000007467a1c8
ARG27= 00000000001ef090
ARG28= 000000007464d1b9
ARG29= 00000000001ef164
ARG30= 000000007464d212
ARG31= 0000000000010000
ARG32= 0000000000030142
ARG33= 00000000480a0759
ARG34= 00000000001ef154
ARG35= 00000000001ef230
ARG36= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef05c
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000030142
ARG1= 00000000001ef15c
ARG2= 000000000056da60
ARG3= 00000000480a0759
ARG4= 000000000056da60
ARG5= 000000007467a1c8
ARG6= 00000000001ef090
ARG7= 000000000056f598
ARG8= 00000000001ef164
ARG9= 000000007464d212
ARG10= 0000000000010000
ARG11= 0000000000030142
ARG12= 00000000480a0759
ARG13= 00000000001ef154
ARG14= 00000000001ef230
ARG15= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102c, EDX=00000000001eeec8
RETURN ADDRESS=00000000773591dc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eeedc
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000009040701
ARG2= 0000000000000001
ARG3= 0000000009040701
ARG4= 00000000001eef8c
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000009040701
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eeec8
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a6, EDX=00000000001eeea8
RETURN ADDRESS=0000000077357f8a
ARG0= 00000000040101bc
ARG1= 00000000001eeee0
ARG2= 00000000771b8079
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eed28
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eed48
ARG3= 00000000001eed58
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eed40
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001eed60
ARG3= 00000000001eed70
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001eeec8
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef044
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef084
ARG3= 000000007464d2c0
ARG4= 0000000000030142
ARG5= 00000000040101bc
ARG6= 000000000056da84
ARG7= 00000000001ef15c
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef078
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef164
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 00000000001ef230
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001eee5c
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef0a8
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eec18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebf8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eec18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eebcc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eebb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eebdc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eec14
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eec28
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb38
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeb58
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeb40
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001eee48
ARG3= 00000000001eeb68
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001eee00
ARG8= 00000000001eebac
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001eee48
ARG12= 00000000001eeb88
ARG13= 0000000000000011
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 00000000762d78bb
ARG17= 00000000762d7960
ARG18= 00000000007507d0
ARG19= 00000000007508f4
ARG20= 00000000007507d0
ARG21= 0000000000000012
ARG22= 00000000771b7796
ARG23= 0000000005e2fa51
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef01c
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef064
ARG2= 000000000056dac8
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef158
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef140
RETURN ADDRESS=000000007735909d
ARG0= 0000000003010699
ARG1= 0000000000000008
ARG2= 000000000000001e
ARG3= 0000000000000250
ARG4= 0000000000000188
ARG5= 000000000056dd08
ARG6= 00000000001ef248
ARG7= 00000000746474ef
ARG8= 0000000003010699
ARG9= 0000000000000008
ARG10= 000000000000001e
ARG11= 0000000000000250
ARG12= 0000000000000188
ARG13= 00000000001ef288
ARG14= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eee48
ARG3= 0000000000633ed8
ARG4= 00000000001eed10
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc91
ARG8= 00000000001eee88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eee48
ARG3= 0000000000634068
ARG4= 00000000001eed10
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc91
ARG8= 00000000001eee88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eecc0
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eee48
ARG3= 00000000006341f8
ARG4= 00000000001eed10
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc91
ARG8= 00000000001eee88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0a8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da60
ARG3= 00000000001ef160
ARG4= 0000000074652b55
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001eec44
RETURN ADDRESS=00000000773573c6
ARG0= 0000000003010699
ARG1= 0000000000000258
ARG2= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef0ac
RETURN ADDRESS=0000000077356598
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef098
RETURN ADDRESS=0000000077356350
ARG0= 00000000050106f4
ARG1= 0000000009050702
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 0000000000633430
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 000000000063c190
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 000000000063c308
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 0000000000638600
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 0000000000638778
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 0000000000635fd0
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec10
RETURN ADDRESS=0000000077357265
ARG0= 00000000050106f4
ARG1= 0000000000000060
ARG2= 00000000001eed98
ARG3= 0000000000636148
ARG4= 00000000001eee48
ARG5= 00000000001eec74
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef068
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef0c0
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afe99
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eedd8
RETURN ADDRESS=0000000077357c77
ARG0= 00000000050106f4
ARG1= 000000000a040701
ARG2= 0000000000000001
ARG3= 000000000a040701
ARG4= 00000000001eee88
ARG5= 00000000771b7d50
ARG6= 00000000050106f4
ARG7= 000000000a040701
ARG8= 00000000050106f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedc4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000050106f4
ARG1= 000000000000001e
ARG2= 000000000000000b
ARG3= 00000000000001ea
ARG4= 000000000000001b
ARG5= 00000000001eef88
ARG6= 00000000001eee88
ARG7= 00000000771b7d7f
ARG8= 00000000050106f4
ARG9= 000000000000001e
ARG10= 000000000000000b
ARG11= 00000000000001ea
ARG12= 000000000000001b
ARG13= 00000000050106f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeaec
RETURN ADDRESS=0000000077357be3
ARG0= 00000000050106f4
ARG1= 0000000000000007
ARG2= 00000000001eeb0c
ARG3= 00000000001eeb1c
ARG4= 0000000077357c56
ARG5= 00000000050106f4
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeafc
RETURN ADDRESS=0000000077357be3
ARG0= 00000000050106f4
ARG1= 0000000000000007
ARG2= 00000000001eeb1c
ARG3= 00000000001eeb2c
ARG4= 0000000077357c56
ARG5= 00000000050106f4
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee728
RETURN ADDRESS=0000000077358128
ARG0= 00000000050106f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef030
RETURN ADDRESS=0000000077357be3
ARG0= 00000000050106f4
ARG1= 0000000000000007
ARG2= 00000000001ef050
ARG3= 00000000001ef060
ARG4= 0000000077357c56
ARG5= 00000000050106f4
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000117d, EDX=00000000001ef044
RETURN ADDRESS=00000000771b4ceb
ARG0= 00000000050106f4
ARG1= 000000000000000a
ARG2= 000000000000000a
ARG3= 0000000000070124
ARG4= 0000000000000010
ARG5= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001123, EDX=00000000001ef09c
RETURN ADDRESS=000000007735a237
ARG0= 00000000050106f4
ARG1= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef05c
RETURN ADDRESS=0000000077357209
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef098
RETURN ADDRESS=0000000077356350
ARG0= 00000000050106f4
ARG1= 000000000185000f
ARG2= 00000000050106f4
ARG3= 000000000056da60
ARG4= 000000000056da84
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef08c
RETURN ADDRESS=000000007735697e
ARG0= 00000000050106f4
ARG1= 00000000050106f4
ARG2= 000000000056da60
ARG3= 000000000056da84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef0a0
RETURN ADDRESS=000000007735697e
ARG0= 0000000009050702
ARG1= 00000000050106f4
ARG2= 000000000056da60
ARG3= 000000000056da84
ARG4= 0000000000000905
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125c, EDX=00000000001ef15c
RETURN ADDRESS=00000000771ad480
ARG0= 0000000000030142
ARG1= 0000000003010699
ARG2= 0000000000000008
ARG3= 0000000000000008
ARG4= 000000000000001e
ARG5= 0000000000000001
ARG6= 00000000001ef288
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeef8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeef8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeeac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeecc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeeb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeedc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eef14
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef28
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee38
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee58
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee40
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef148
ARG3= 00000000001eee68
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef100
ARG8= 00000000001eeeac
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef148
ARG12= 0000000000000258
ARG13= 0000000000000011
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 00000000001eeeac
ARG17= 00000000771b7bfb
ARG18= 00000000050106f4
ARG19= 00000000ffffffff
ARG20= 0000000000000012
ARG21= 00000000001eef78
ARG22= 00000000771b7796
ARG23= 0000000005e2ff51
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeef8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeef8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef18
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef00
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeeac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeecc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeeb4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeedc
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000091
ARG8= 00000000001eef14
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000091
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef28
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eee34
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee990
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eeb18
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee60
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee70
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eeea8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeebc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeb40
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee69c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee824
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fc58
ARG4= 00000000001ee78c
ARG5= 00000000001ee79c
ARG6= 0000000000750c30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee800
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee818
ARG2= 0000000000000044
ARG3= 00000000001ee91c
ARG4= 00000000001ee828
ARG5= 0000000074643f54
ARG6= 00000000001eea9c
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001ee8a4
ARG11= 00000000001eeaf0
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000008
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee91c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee884
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8e8
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 000000000b040701
ARG2= 0000000000000001
ARG3= 000000000b040701
ARG4= 00000000001ee998
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 000000000b040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000000021
ARG4= 000000000000002f
ARG5= 00000000001eea98
ARG6= 00000000001ee998
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 000000000000000f
ARG10= 0000000000000020
ARG11= 0000000000000021
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee60c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ee62c
ARG3= 00000000001ee63c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001ee4f0
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee4ec
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee238
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edfdc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001edff4
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee60
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee70
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eeea8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeebc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeb40
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee69c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee824
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee778
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 000000000000000f
ARG9= 0000000000000020
ARG10= 00000000001eec40
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001ee91c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee91c
ARG19= 000000000000000f
ARG20= 000000000000000f
ARG21= 00000000001ee7ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee800
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee818
ARG2= 0000000000000044
ARG3= 00000000001ee91c
ARG4= 00000000001ee828
ARG5= 0000000074643f54
ARG6= 00000000001eea9c
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001ee8a4
ARG11= 00000000001eeaf0
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000028
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee91c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee884
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8e8
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 000000000c040701
ARG2= 0000000000000001
ARG3= 000000000c040701
ARG4= 00000000001ee998
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 000000000c040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000000043
ARG4= 000000000000002f
ARG5= 00000000001eea98
ARG6= 00000000001ee998
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 000000000000002f
ARG10= 0000000000000020
ARG11= 0000000000000043
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee60c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ee62c
ARG3= 00000000001ee63c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001ee4f0
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee4ec
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee238
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edfdc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001edff4
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee60
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee70
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eeea8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeebc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeb40
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee69c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee824
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee778
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 000000000000002f
ARG9= 0000000000000020
ARG10= 00000000001eec40
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001ee91c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee91c
ARG19= 000000000000002f
ARG20= 000000000000002f
ARG21= 00000000001ee7ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee800
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee818
ARG2= 0000000000000044
ARG3= 00000000001ee91c
ARG4= 00000000001ee828
ARG5= 0000000074643f54
ARG6= 00000000001eea9c
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001ee8a4
ARG11= 00000000001eeaf0
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000004a
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee91c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee884
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8e8
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 000000000d040701
ARG2= 0000000000000001
ARG3= 000000000d040701
ARG4= 00000000001ee998
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 000000000d040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000000077
ARG4= 000000000000002f
ARG5= 00000000001eea98
ARG6= 00000000001ee998
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 0000000000000051
ARG10= 0000000000000020
ARG11= 0000000000000077
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee60c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ee62c
ARG3= 00000000001ee63c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001ee4f0
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee4ec
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee238
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edfdc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001edff4
ARG2= 0000000000000044
ARG3= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee60
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee70
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eeea8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeebc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeb40
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee69c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee824
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee778
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 0000000000000051
ARG9= 0000000000000020
ARG10= 00000000001eec40
ARG11= 0000000000000007
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001ee91c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000007
ARG18= 00000000001ee91c
ARG19= 0000000000000051
ARG20= 0000000000000051
ARG21= 00000000001ee7ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee800
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee818
ARG2= 0000000000000044
ARG3= 00000000001ee91c
ARG4= 00000000001ee828
ARG5= 0000000074643f54
ARG6= 00000000001eea9c
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001ee8a4
ARG11= 00000000001eeaf0
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000007e
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee91c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee884
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8e8
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 000000000e040701
ARG2= 0000000000000001
ARG3= 000000000e040701
ARG4= 00000000001ee998
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 000000000e040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 000000000000009e
ARG4= 000000000000002f
ARG5= 00000000001eea98
ARG6= 00000000001ee998
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 0000000000000085
ARG10= 0000000000000020
ARG11= 000000000000009e
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee60c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ee62c
ARG3= 00000000001ee63c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001ee4f0
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee4ec
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee238
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edfdc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001edff4
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee8c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeeac
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee94
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee40
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eee60
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee48
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eee70
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eeea8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeebc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeb40
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee69c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee824
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee778
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 0000000000000085
ARG9= 0000000000000020
ARG10= 00000000001eec40
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000100020
ARG14= 00000000001ee91c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee91c
ARG19= 0000000000000085
ARG20= 0000000000000085
ARG21= 00000000001ee7ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee800
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee818
ARG2= 0000000000000044
ARG3= 00000000001ee91c
ARG4= 00000000001ee828
ARG5= 0000000074643f54
ARG6= 00000000001eea9c
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001ee8a4
ARG11= 00000000001eeaf0
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 00000000000000a5
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee91c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee884
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee8e8
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 000000000f040701
ARG2= 0000000000000001
ARG3= 000000000f040701
ARG4= 00000000001ee998
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 000000000f040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee8d4
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 00000000000000c5
ARG4= 000000000000002f
ARG5= 00000000001eea98
ARG6= 00000000001ee998
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 00000000000000ac
ARG10= 0000000000000020
ARG11= 00000000000000c5
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee60c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001ee62c
ARG3= 00000000001ee63c
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001ee4f0
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee4d4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee4ec
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee238
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edfdc
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001edff4
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef15c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef248
ARG3= 000000007464763f
ARG4= 0000000000030142
ARG5= 0000000003010699
ARG6= 00000000001ef288
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef300
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef320
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef314
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2fc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef318
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef310
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000014
ARG3= 00000000001ef320
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000040101bc
ARG8= 00000000001ef36c
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000014
ARG12= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef214
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1fc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef224
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000014
ARG8= 00000000001ef25c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000014
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef220
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000000030142
ARG8= 00000000001ef25c
ARG9= 00000000746457bd
ARG10= 0000000000030142
ARG11= 0000000000000004
ARG12= 0000000000030142
ARG13= 000000000056da60
ARG14= 0000000000000014
ARG15= 0000000000030142
ARG16= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef1c4
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000014
ARG2= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef300
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef320
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2f4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef314
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2fc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef300
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2d8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2f8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2e0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef308
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef200
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef220
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef200
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef220
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef208
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1d4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef1e4
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001ef21c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000047
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ef, EDX=00000000001ef6dc
RETURN ADDRESS=00000000771aa8d0
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef520
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef540
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef518
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef538
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef520
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef548
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef3b4
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000046
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef528
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef548
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef51c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef53c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef524
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef384
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3a4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef384
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3a4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef38c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef338
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef358
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef340
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef368
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000083
ARG8= 00000000001ef3a0
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 0000000000000083
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a91c
ARG2= 000000000056e388
ARG3= 00000000001ef3b0
ARG4= 0000000074647b5d
ARG5= 0000000000020144
ARG6= 000000000000a91c
ARG7= 0000000000000083
ARG8= 00000000771b7796
ARG9= 0000000005e2e215
ARG10= 00000000771b7756
ARG11= 0000000000560808
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 00000000001ef368
ARG15= 0000000000020144
ARG16= 0000000000020144
ARG17= 000000000056e388
ARG18= 0000000000000083
ARG19= 00000000001ef3b0
ARG20= 0000000074643295
ARG21= 0000000000000083
ARG22= 000000007467b310
ARG23= 0000000000000025
ARG24= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef308
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000083
ARG2= 0000000000000001
ARG3= 00000000001ef68c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef538
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef558
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef530
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef550
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef538
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000014
ARG3= 00000000001ef560
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000040101bc
ARG8= 00000000001ef5ac
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000014
ARG12= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef480
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef4a0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef480
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef4a0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef488
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef434
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef454
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef43c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef464
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000014
ARG8= 00000000001ef49c
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000014
ARG14= 0000000000030142
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef438
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef460
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000000030142
ARG8= 00000000001ef49c
ARG9= 00000000746457bd
ARG10= 0000000000030142
ARG11= 0000000000000004
ARG12= 0000000000030142
ARG13= 000000000056da60
ARG14= 0000000000000014
ARG15= 0000000000030142
ARG16= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef404
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000014
ARG2= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef540
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef560
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef534
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef554
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef53c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef520
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef540
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef518
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef538
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef520
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef548
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3d8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3b8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3d8
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3c0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001ef3d4
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 0000000000000047
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef3e8
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef014
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef034
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef014
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef034
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef01c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef038
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef124
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef020
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 0000000000aa0104
ARG3= 00000000001ef05c
ARG4= 000000000056e388
ARG5= 00000000001ef084
ARG6= 000000007464cc00
ARG7= 0000000000020144
ARG8= 0000000000000001
ARG9= 00000000001ef05c
ARG10= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefd8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eeffc
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef008
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef038
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef05c
ARG18= 0000000000000001
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000005e33eae
ARG22= 00000000001ef084
ARG23= 000000007464cc19
ARG24= 0000000000020144
ARG25= 0000000000000001
ARG26= 00000000001ef05c
ARG27= 0000000000000001
ARG28= 0000000000aa002c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050100104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 00000000001eee64
ARG15= 0000000074651ede
ARG16= 0000000000030142
ARG17= 00000000001ef0e0
ARG18= 00000000001eef08
ARG19= 0000000000030142
ARG20= 00000000001eeea8
ARG21= 0000000074651eae
ARG22= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eece0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eece8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed48
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed5c
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eece0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eece8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed48
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed5c
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eefa8
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffb
ARG2= 00000000001eefc4
ARG3= 0000000000020144
ARG4= 0000000000200000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000200000
ARG3= 00000000001eefd0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefdc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef000
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000200000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefdc
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000200000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefc8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef000
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000009010196
ARG6= 0000000000020144
ARG7= 0000000000200000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef014
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef034
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef014
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef034
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef01c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001234, EDX=00000000001ef038
RETURN ADDRESS=00000000771b66ca
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001214, EDX=00000000001ef020
RETURN ADDRESS=00000000771b6d40
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefd8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eeffc
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef008
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef038
ARG11= 00000000747f808b
ARG12= 0000000000020144
ARG13= 00000000771b83a9
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 00000000771b6d40
ARG17= 00000000001ef05c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050200104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eece0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eece8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed48
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed5c
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001eefb4
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
ARG1= 00000000fffffff0
ARG2= 0000000050300104
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007c
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007c
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007d
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee2c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eee04
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eee24
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eee0c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000007d
ARG3= 00000000001eee34
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 00000000fffffff0
ARG8= 00000000001eee80
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 000000000000007d
ARG12= 00000000fffffff0
ARG13= 00000000001eefa4
ARG14= 0000000000020144
ARG15= 000000000000007c
ARG16= 00000000fffffff0
ARG17= 00000000001eefa4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed4c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eed34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eece0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001eed00
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eece8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001eed10
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 000000000000007d
ARG8= 00000000001eed48
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 000000000000007d
ARG14= 0000000000020144
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eed5c
ARG18= 0000000074643199
ARG19= 000000000056e398
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c4, EDX=00000000001eefa8
RETURN ADDRESS=00000000771b6cba
ARG0= 0000000000020144
ARG1= 00000000fffffffa
ARG2= 00000000001eefc4
ARG3= 0000000000020144
ARG4= 0000000000100000
ARG5= 000000000000003c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eefac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000100000
ARG3= 00000000001eefd0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001eefdc
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef000
ARG11= 00000000747f8191
ARG12= 0000000000020144
ARG13= 0000000000020144
ARG14= 0000000000100000
ARG15= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001eefdc
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000020144
ARG1= 0000000000020144
ARG2= 0000000000100000
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eefc8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef000
ARG3= 00000000747f81fd
ARG4= 0000000000020144
ARG5= 0000000009010196
ARG6= 0000000000020144
ARG7= 0000000000100000
ARG8= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011de, EDX=00000000001ef184
RETURN ADDRESS=00000000771b7bd5
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef178
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001eefe0
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef00c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001195, EDX=00000000001ef18c
RETURN ADDRESS=00000000771d49f2
ARG0= 00000000001ef1ac
ARG1= 0000000001410233
ARG2= 000000000027e758
ARG3= 0000000000000005
ARG4= 0000000000000007
ARG5= 0000000000030142
ARG6= 000000000056da60
ARG7= 0000000000000047
ARG8= 0000000000000001
ARG9= 0000000000000001
ARG10= 0000000000000232
ARG11= 0000000000000140
ARG12= 0000000005e33f5e
ARG13= 00000000001ef24c
ARG14= 00000000748186e0
ARG15= 000000000027e758
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef100
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef180
ARG3= 000000000027e758
ARG4= 00000000001ef184
ARG5= 0000000074850e80
ARG6= 0000000000110121
ARG7= 00000000001ef164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef0dc
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef118
ARG3= 00000000762b4906
ARG4= 0000000000110121
ARG5= 0000000000020144
ARG6= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef0c8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000d3c
ARG1= 000000000000002b
ARG2= 0000000000020144
ARG3= 00000000001ef0ec
ARG4= 00000000762b484a
ARG5= 0000000000000d3c
ARG6= 0000000000020144
ARG7= 00000000001ef118
ARG8= 00000000762b4906
ARG9= 0000000000110121
ARG10= 0000000000020144
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeea8
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001eef24
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 00000000771b88c9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef528
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef548
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef51c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef53c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef524
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef2d4
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001201, EDX=00000000001ef2b0
RETURN ADDRESS=00000000762b2b5b
ARG0= 0000000000110121
ARG1= 0000000000000001
ARG2= 00000000001ef2ec
ARG3= 00000000762b4906
ARG4= 0000000000110121
ARG5= 0000000000020144
ARG6= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef29c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000d3c
ARG1= 000000000000002b
ARG2= 0000000000020144
ARG3= 00000000001ef2c0
ARG4= 00000000762b484a
ARG5= 0000000000000d3c
ARG6= 0000000000020144
ARG7= 00000000001ef2ec
ARG8= 00000000762b4906
ARG9= 0000000000110121
ARG10= 0000000000020144
ARG11= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef07c
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001ef0f8
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 0000000000110121
ARG9= 00000000747cd03b
ARG10= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001221, EDX=00000000001ef878
RETURN ADDRESS=00000000771b52f6
ARG0= 0000000000010005
ARG1= 0000000000261620
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011d5, EDX=00000000001ef664
RETURN ADDRESS=00000000771aa8e4
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef664
RETURN ADDRESS=00000000771b704d
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef5f4
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000001
ARG2= 0000000000000001
ARG3= 0000000000000232
ARG4= 0000000000000139
ARG5= 000000000027e758
ARG6= 00000000001ef65c
ARG7= 00000000747cacb0
ARG8= 00000000040101bc
ARG9= 0000000000000001
ARG10= 0000000000000001
ARG11= 0000000000000232
ARG12= 0000000000000139
ARG13= 00000000040101bc
ARG14= 000000000027e758
ARG15= 0000000000000001
ARG16= 0000000000000001
ARG17= 0000000000000232
ARG18= 0000000000000139
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000000000232
ARG22= 0000000000000139
ARG23= 0000000005e338ca
ARG24= 00000000001ef67c
ARG25= 00000000747cad34
ARG26= 000000000027e758
ARG27= 00000000040101bc
ARG28= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011d5, EDX=00000000001ef640
RETURN ADDRESS=00000000771aa8e4
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef494
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000002006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef5e4
RETURN ADDRESS=00000000771b3d83
ARG0= 0000000000000001
ARG1= 0000000000000001
ARG2= 0000000000000073
ARG3= 00000000001ef63c
ARG4= 000000007481903d
ARG5= 0000000000000001
ARG6= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef5e8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef450
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef47c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124d, EDX=00000000001ef640
RETURN ADDRESS=00000000771aa8f8
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef4d4
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000002006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef624
RETURN ADDRESS=00000000771b3d83
ARG0= 0000000000000001
ARG1= 0000000000000001
ARG2= 0000000000000073
ARG3= 00000000001ef67c
ARG4= 000000007481903d
ARG5= 0000000000000001
ARG6= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef628
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef490
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef4bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef650
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef678
ARG3= 00000000747cacea
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 000000000027e758
ARG7= 00000000040101bc
ARG8= 00000000001ef698
ARG9= 00000000748197d9
ARG10= 000000000027e758
ARG11= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124d, EDX=00000000001ef664
RETURN ADDRESS=00000000771aa8f8
ARG0= 0000000000020144
ARG1= 000000000027e758
ARG2= 00000000040101bc
ARG3= 00000000001ef698
ARG4= 00000000748197d9
ARG5= 000000000027e758
ARG6= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef864
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000f5, EDX=00000000001ee540
RETURN ADDRESS=000000007761554c
ARG0= 00000000001ee578
ARG1= 00000000001ee5e8
ARG2= 00000000001ee5e4
ARG3= 0000000000000004
ARG4= 00000000001ee5d8
ARG5= 00000000001ee5a4
ARG6= 00000000762e4a38
ARG7= 0000000003010699
ARG8= 00000000007508f4
ARG9= 00000000007508ec
ARG10= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124c, EDX=00000000001ef6e4
RETURN ADDRESS=00000000771b5129
ARG0= 000000000000800b
ARG1= 000000000000800b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef790
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef790
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef748
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef768
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef740
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef760
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef748
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 000000000000000f
ARG3= 00000000001ef770
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef68c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef750
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef770
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef744
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef764
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef74c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef748
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef768
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef740
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef760
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef748
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 000000000000000f
ARG3= 00000000001ef770
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000113f, EDX=00000000001ef6cc
RETURN ADDRESS=00000000771b7b93
ARG0= 0000000000020144
ARG1= 00000000001ef708
ARG2= 0000000000000001
ARG3= 000000000027e758
ARG4= 00000000771b83a9
ARG5= 00000000771b5108
ARG6= 000000000000800b
ARG7= 000000000000800b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef528
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef548
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef520
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef540
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef528
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000085
ARG3= 00000000001ef550
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000001
ARG8= 00000000001ef59c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 0000000000000085
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef49c
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef408
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3f4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef43c
ARG3= 00000000746461e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef404
RETURN ADDRESS=00000000771b68f6
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef408
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef434
ARG3= 0000000074646215
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef474
RETURN ADDRESS=000000007735909d
ARG0= 0000000003010699
ARG1= 0000000000000002
ARG2= 0000000000000002
ARG3= 0000000000000246
ARG4= 0000000000000154
ARG5= 000000000027e758
ARG6= 00000000001ef534
ARG7= 00000000748558ea
ARG8= 0000000003010699
ARG9= 0000000000000002
ARG10= 0000000000000002
ARG11= 0000000000000246
ARG12= 0000000000000154
ARG13= 0000000000000001
ARG14= 000000000027e758
ARG15= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef384
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef418
ARG4= 000000007464520f
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ef370
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000010040701
ARG2= 0000000000000001
ARG3= 00000000001ef3f0
ARG4= 00000000001ef39c
ARG5= 0000000074645384
ARG6= 0000000003010699
ARG7= 0000000010040701
ARG8= 000000000000a915
ARG9= 00000000001ef418
ARG10= 0000000074645228
ARG11= 0000000003010699
ARG12= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef36c
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef240
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef260
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef238
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef258
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef240
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000014
ARG3= 00000000001ef268
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000003010699
ARG8= 00000000001ef2b4
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000014
ARG12= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef190
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef15c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef144
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef16c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000014
ARG8= 00000000001ef1a4
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000014
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000000a918
ARG17= 00000000001ef1b8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef140
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef168
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000000030142
ARG8= 00000000001ef1a4
ARG9= 00000000746457bd
ARG10= 0000000000030142
ARG11= 0000000000000004
ARG12= 0000000000030142
ARG13= 000000000056da60
ARG14= 0000000000000014
ARG15= 0000000000030142
ARG16= 0000000000030142
ARG17= 000000000000a918
ARG18= 00000000001ef1b8
ARG19= 0000000074643199
ARG20= 000000000056da70
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef130
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 0000000000000005
ARG3= 00000000001ef204
ARG4= 000000000000a915
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000014
ARG2= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef248
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef268
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef23c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef25c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef244
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef190
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef15c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef144
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef16c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000318
ARG8= 00000000001ef1a4
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000318
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000000a918
ARG17= 00000000001ef1b8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef140
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef168
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000000030142
ARG8= 00000000001ef1a4
ARG9= 00000000746457bd
ARG10= 0000000000030142
ARG11= 0000000000000002
ARG12= 0000000000030142
ARG13= 000000000056da60
ARG14= 0000000000000318
ARG15= 0000000000030142
ARG16= 0000000000030142
ARG17= 000000000000a918
ARG18= 00000000001ef1b8
ARG19= 0000000074643199
ARG20= 000000000056da70
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef130
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 0000000000000007
ARG3= 00000000001ef204
ARG4= 000000000000a915
ARG5= 0000000000000004
ARG6= 00000000001ef168
ARG7= 00000000746457ee
ARG8= 0000000000030142
ARG9= 000000000000a915
ARG10= 0000000000000007
ARG11= 0000000000030142
ARG12= 00000000001ef1a4
ARG13= 00000000746457bd
ARG14= 0000000000030142
ARG15= 0000000000000002
ARG16= 0000000000030142
ARG17= 000000000056da60
ARG18= 0000000000000318
ARG19= 0000000000030142
ARG20= 0000000000030142
ARG21= 000000000000a918
ARG22= 00000000001ef1b8
ARG23= 0000000074643199
ARG24= 000000000056da70
ARG25= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef17c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000000000a915
ARG3= 00000000001ef1a4
ARG4= 00000000746457dc
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 000000000056da60
ARG8= 00000000001ef1b4
ARG9= 000000007465d5a8
ARG10= 0000000000030142
ARG11= 0000000000000002
ARG12= 00000000001ef208
ARG13= 0000000074641e09
ARG14= 000000000056da60
ARG15= 00000000001ef1d0
ARG16= 0000000000000318
ARG17= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001233, EDX=00000000001ef16c
RETURN ADDRESS=00000000771b7a5c
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 0000000000000007
ARG3= 0000000000030142
ARG4= 000000000000a915
ARG5= 0000000000000318
ARG6= 00000000001ef1a4
ARG7= 00000000746457ee
ARG8= 0000000000030142
ARG9= 000000000000a915
ARG10= 0000000000000007
ARG11= 000000000056da60
ARG12= 00000000001ef1b4
ARG13= 000000007465d5a8
ARG14= 0000000000030142
ARG15= 0000000000000002
ARG16= 00000000001ef208
ARG17= 0000000074641e09
ARG18= 000000000056da60
ARG19= 00000000001ef1d0
ARG20= 0000000000000318
ARG21= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a1, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2eb
ARG0= 0000000003010699
ARG1= 00000000001ef3c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef384
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 000000007735c2f3
ARG3= 00000000001ef418
ARG4= 000000007464530b
ARG5= 0000000000030142
ARG6= 000000000000a915
ARG7= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef188
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef1a8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef190
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef15c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef144
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef16c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000138
ARG8= 00000000001ef1a4
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000138
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000000a918
ARG17= 00000000001ef1b8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a1, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2eb
ARG0= 0000000003010699
ARG1= 00000000001ef3c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001ef384
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000008
ARG1= 00000000001ef518
ARG2= 000000007735c2f3
ARG3= 0000000003010699
ARG4= 00000000001ef418
ARG5= 000000007465d2e1
ARG6= 0000000000000008
ARG7= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ff, EDX=00000000001ef364
RETURN ADDRESS=000000007735f614
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a1, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2eb
ARG0= 0000000003010699
ARG1= 00000000001ef3c4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001113, EDX=00000000001ef380
RETURN ADDRESS=000000007735c2d7
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a915
ARG2= 0000000003010699
ARG3= 000000007735c2f3
ARG4= 00000000773561d0
ARG5= 00000000001ef418
ARG6= 0000000074645321
ARG7= 0000000000030142
ARG8= 000000000000a915
ARG9= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ef350
RETURN ADDRESS=0000000077357c8b
ARG0= 0000000003010699
ARG1= 0000000010040701
ARG2= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eefa4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001ef12c
ARG3= 00000000005b8360
ARG4= 00000000001ef014
ARG5= 0000000000000282
ARG6= 00000000001eefd4
ARG7= 00000000001eeff0
ARG8= 00000000772098d8
ARG9= 000000000027deb4
ARG10= 00000000001ef03c
ARG11= 00000000771b88c9
ARG12= 00000000771b888d
ARG13= 0000000005e2e1bd
ARG14= 0000000000a9f468
ARG15= 0000000000000282
ARG16= 0000000000000042
ARG17= 0000000000000024
ARG18= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3d4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef3d4
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef368
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef388
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef370
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000020144
ARG3= 00000000001ef398
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000085
ARG8= 00000000001ef3d0
ARG9= 0000000074641e8a
ARG10= 0000000000020144
ARG11= 0000000000020144
ARG12= 000000000056e388
ARG13= 0000000000000085
ARG14= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000020144
ARG1= 0000000011040701
ARG2= 0000000000050481
ARG3= 00000000001ef3bc
ARG4= 00000000746474aa
ARG5= 0000000000020144
ARG6= 0000000011040701
ARG7= 00000000001ef3fc
ARG8= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef2b4
RETURN ADDRESS=000000007735909d
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001ef2a4
RETURN ADDRESS=0000000077357c8b
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001101, EDX=00000000001ef2e0
RETURN ADDRESS=0000000077358dc0
ARG0= 00000000040101bc
ARG1= 00000000001ef388
ARG2= 00000000001ef3fc
ARG3= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef26c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef278
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef2d8
ARG11= 00000000747f4e7b
ARG12= 0000000000020144
ARG13= 00000000001ef398
ARG14= 000000000056e388
ARG15= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1a4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef238
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef25c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef268
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef274
ARG11= 00000000747f8645
ARG12= 0000000000020144
ARG13= 00000000001ef2d8
ARG14= 00000000747f4ea1
ARG15= 0000000000020144
ARG16= 0000000000000001
ARG17= 00000000001ef398
ARG18= 000000000056e388
ARG19= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1e0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000000000a0
ARG3= 00000000001ef204
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef268
ARG8= 00000000747f4c66
ARG9= 0000000000020144
ARG10= 00000000001ef294
ARG11= 0000000000020144
ARG12= 00000000040101bc
ARG13= 000000000000003c
ARG14= 00000000001ef294
ARG15= 0000000000000096
ARG16= 00000000000002b4
ARG17= 0000000000000011
ARG18= 0000000000000002
ARG19= 0000000000020144
ARG20= 0000000000000235
ARG21= 0000000000000002
ARG22= 0000000000000246
ARG23= 0000000000000143
ARG24= 0000000000020144
ARG25= 00000000001ef25c
ARG26= 00000000747f7ecd
ARG27= 0000000000020144
ARG28= 000000000000c019
ARG29= 00000000001ef268
ARG30= 00000000747f7ee3
ARG31= 0000000005e33cfe
ARG32= 00000000001ef2d8
ARG33= 00000000747f4ead
ARG34= 0000000000020144
ARG35= 00000000001ef294
ARG36= 00000000040101bc
ARG37= 0000000000000001
ARG38= 0000000000000003
ARG39= 00000000001ef398
ARG40= 000000000056e388
ARG41= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001ef1e0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1ec
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef200
ARG11= 00000000747f9ed1
ARG12= 0000000000020144
ARG13= 00000000ffffffff
ARG14= 0000000000010004
ARG15= 00000000001ef268
ARG16= 00000000747f4ca3
ARG17= 0000000000020144
ARG18= 0000000000000001
ARG19= 00000000001ef294
ARG20= 0000000000020144
ARG21= 00000000040101bc
ARG22= 000000000000003c
ARG23= 00000000001ef294
ARG24= 00000000ffffffff
ARG25= 00000000ffffffff
ARG26= 0000000000000011
ARG27= 000000000027ee10
ARG28= 0000000000020144
ARG29= 0000000000000235
ARG30= 0000000000000002
ARG31= 0000000000000246
ARG32= 0000000000000143
ARG33= 0000000000020144
ARG34= 00000000001ef25c
ARG35= 00000000747f7ecd
ARG36= 0000000000020144
ARG37= 000000000000c019
ARG38= 00000000001ef268
ARG39= 00000000747f7ee3
ARG40= 0000000005e33cfe
ARG41= 00000000001ef2d8
ARG42= 00000000747f4ead
ARG43= 0000000000020144
ARG44= 00000000001ef294
ARG45= 00000000040101bc
ARG46= 0000000000000001
ARG47= 0000000000000003
ARG48= 00000000001ef398
ARG49= 000000000056e388
ARG50= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001ef1dc
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e8
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef200
ARG11= 00000000747f9ede
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 00000000ffffffff
ARG15= 0000000000010004
ARG16= 00000000001ef268
ARG17= 00000000747f4ca3
ARG18= 0000000000020144
ARG19= 0000000000000001
ARG20= 00000000001ef294
ARG21= 0000000000020144
ARG22= 00000000040101bc
ARG23= 000000000000003c
ARG24= 00000000001ef294
ARG25= 00000000ffffffff
ARG26= 00000000ffffffff
ARG27= 0000000000000011
ARG28= 000000000027ee10
ARG29= 0000000000020144
ARG30= 0000000000000235
ARG31= 0000000000000002
ARG32= 0000000000000246
ARG33= 0000000000000143
ARG34= 0000000000020144
ARG35= 00000000001ef25c
ARG36= 00000000747f7ecd
ARG37= 0000000000020144
ARG38= 000000000000c019
ARG39= 00000000001ef268
ARG40= 00000000747f7ee3
ARG41= 0000000005e33cfe
ARG42= 00000000001ef2d8
ARG43= 00000000747f4ead
ARG44= 0000000000020144
ARG45= 00000000001ef294
ARG46= 00000000040101bc
ARG47= 0000000000000001
ARG48= 0000000000000003
ARG49= 00000000001ef398
ARG50= 000000000056e388
ARG51= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001ef1d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 000000000027ed98
ARG11= 00000000001ef1ec
ARG12= 00000000747f9b5e
ARG13= 0000000000020144
ARG14= 00000000001ef200
ARG15= 00000000747f9ee8
ARG16= 0000000000020144
ARG17= 00000000ffffffff
ARG18= 0000000000010004
ARG19= 00000000001ef268
ARG20= 00000000747f4ca3
ARG21= 0000000000020144
ARG22= 0000000000000001
ARG23= 00000000001ef294
ARG24= 0000000000020144
ARG25= 00000000040101bc
ARG26= 000000000000003c
ARG27= 00000000001ef294
ARG28= 00000000ffffffff
ARG29= 00000000ffffffff
ARG30= 0000000000000011
ARG31= 000000000027ee10
ARG32= 0000000000020144
ARG33= 0000000000000235
ARG34= 0000000000000002
ARG35= 0000000000000246
ARG36= 0000000000000143
ARG37= 0000000000020144
ARG38= 00000000001ef25c
ARG39= 00000000747f7ecd
ARG40= 0000000000020144
ARG41= 000000000000c019
ARG42= 00000000001ef268
ARG43= 00000000747f7ee3
ARG44= 0000000005e33cfe
ARG45= 00000000001ef2d8
ARG46= 00000000747f4ead
ARG47= 0000000000020144
ARG48= 00000000001ef294
ARG49= 00000000040101bc
ARG50= 0000000000000001
ARG51= 0000000000000003
ARG52= 00000000001ef398
ARG53= 000000000056e388
ARG54= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001ef1d4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef1f4
ARG11= 00000000747f5132
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 0000000000010004
ARG15= 00000000001ef268
ARG16= 00000000747f4cbc
ARG17= 0000000000020144
ARG18= 0000000000000001
ARG19= 0000000000000003
ARG20= 00000000001ef25c
ARG21= 00000000001ef260
ARG22= 00000000001ef294
ARG23= 0000000000020144
ARG24= 00000000040101bc
ARG25= 0000000000000001
ARG26= 00000000001ef294
ARG27= 00000000ffffffff
ARG28= 00000000ffffffff
ARG29= 0000000000000011
ARG30= 000000000027ee10
ARG31= 0000000000020144
ARG32= 0000000000000235
ARG33= 0000000000000002
ARG34= 0000000000000246
ARG35= 0000000000000143
ARG36= 0000000000020144
ARG37= 00000000001ef25c
ARG38= 00000000747f7ecd
ARG39= 0000000000020144
ARG40= 000000000000c019
ARG41= 00000000001ef268
ARG42= 00000000747f7ee3
ARG43= 0000000005e33cfe
ARG44= 00000000001ef2d8
ARG45= 00000000747f4ead
ARG46= 0000000000020144
ARG47= 00000000001ef294
ARG48= 00000000040101bc
ARG49= 0000000000000001
ARG50= 0000000000000003
ARG51= 00000000001ef398
ARG52= 000000000056e388
ARG53= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef160
RETURN ADDRESS=0000000077356598
ARG0= 00000000040101bc
ARG1= 000000000027ee34
ARG2= 000000000027ee4c
ARG3= 00000000001ef190
ARG4= 00000000747fa127
ARG5= 00000000040101bc
ARG6= 000000000027ee3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001eecfc
RETURN ADDRESS=00000000773573c6
ARG0= 00000000040101bc
ARG1= 0000000000000011
ARG2= 0000000000000141
ARG3= 000000000027ee34
ARG4= 000000000027ee3c
ARG5= 000000000027ee10
ARG6= 000000000068000c
ARG7= 0000000000260000
ARG8= 00000000001eed58
ARG9= 0000000077633165
ARG10= 0000000000260138
ARG11= 0000000000680008
ARG12= 000000000027ff80
ARG13= 0000000077633165
ARG14= 0000000000260138
ARG15= 0000000000680038
ARG16= 00000000001eede8
ARG17= 0000000000000001
ARG18= 00000000001eed34
ARG19= 000000000000000b
ARG20= 00000000001eed64
ARG21= 00000000001eed98
ARG22= 00000000757c19d5
ARG23= 0000000000260000
ARG24= 00000000757c1a5d
ARG25= 00000000051228cd
ARG26= 00000000771b83a9
ARG27= 000000000027ff80
ARG28= 000000000000000b
ARG29= 00000000051228fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef150
RETURN ADDRESS=0000000077356350
ARG0= 0000000030010286
ARG1= 0000000003050287
ARG2= 000000000027ee34
ARG3= 000000000027ee3c
ARG4= 000000000027ee10
ARG5= 0000000000000287
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef1d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001ef1ec
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001ef1fc
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 0000000000010004
ARG18= 00000000001ef268
ARG19= 00000000747f4d58
ARG20= 0000000000020144
ARG21= 0000000030010286
ARG22= 00000000001ef258
ARG23= 00000000001ef294
ARG24= 0000000000020144
ARG25= 00000000040101bc
ARG26= 0000000000000001
ARG27= 00000000001ef294
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000030010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e7f50
ARG4= 00000000771b83a9
ARG5= 000000000027ff80
ARG6= 000000000000000b
ARG7= 00000000051228fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000030010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e80c8
ARG4= 00000000771b83a9
ARG5= 000000000027ff80
ARG6= 000000000000000b
ARG7= 00000000051228fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000030010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e7f50
ARG4= 00000000771b83a9
ARG5= 000000000027ff80
ARG6= 000000000000000b
ARG7= 00000000051228fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000030010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e80c8
ARG4= 00000000771b83a9
ARG5= 000000000027ff80
ARG6= 000000000000000b
ARG7= 00000000051228fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef160
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef16c
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001ef1f0
ARG11= 00000000747f9bb7
ARG12= 0000000000020144
ARG13= 00000000001ef294
ARG14= 0000000030010286
ARG15= 0000000000010004
ARG16= 0000000000000132
ARG17= 00000000001ef198
ARG18= 00000000746415ba
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef114
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef138
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef148
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001ef154
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001ef164
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 00000000001ef294
ARG18= 00000000001ef1f0
ARG19= 00000000747f9cca
ARG20= 0000000000020144
ARG21= 0000000030010286
ARG22= 00000000001ef1e8
ARG23= 00000000001ef294
ARG24= 0000000030010286
ARG25= 0000000000010004
ARG26= 0000000000000132
ARG27= 00000000001ef198
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef114
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef138
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef144
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001ef154
ARG11= 00000000747f9f7e
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 00000000001ef1f0
ARG15= 00000000747f9d4c
ARG16= 0000000000020144
ARG17= 0000000030010286
ARG18= 0000000001100079
ARG19= 00000000001ef1d8
ARG20= 0000000000000001
ARG21= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef130
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef13c
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef154
ARG11= 00000000747f9f9e
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 00000000001ef294
ARG15= 0000000000000001
ARG16= 00000000001ef1f0
ARG17= 00000000747f9d4c
ARG18= 0000000000020144
ARG19= 0000000030010286
ARG20= 0000000001100079
ARG21= 00000000001ef1d8
ARG22= 0000000000000001
ARG23= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef100
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000030010286
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 00000000005e87c8
ARG4= 0000000000284050
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef160
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef16c
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef1f0
ARG11= 00000000747f9e25
ARG12= 0000000000020144
ARG13= 00000000001ef294
ARG14= 0000000030010286
ARG15= 0000000000010004
ARG16= 0000000000000132
ARG17= 00000000001ef198
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef104
RETURN ADDRESS=0000000077357209
ARG0= 00000000040101bc
ARG1= 0000000000000235
ARG2= 0000000000000002
ARG3= 0000000000000011
ARG4= 0000000000000141
ARG5= 0000000030010286
ARG6= 0000000000000235
ARG7= 0000000000000002
ARG8= 0000000000cc0020
ARG9= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef130
RETURN ADDRESS=0000000077356350
ARG0= 0000000030010286
ARG1= 000000000185000f
ARG2= 00000000040101bc
ARG3= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef138
RETURN ADDRESS=000000007735697e
ARG0= 0000000003050287
ARG1= 00000000040101bc
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef124
RETURN ADDRESS=000000007735697e
ARG0= 0000000030010286
ARG1= 00000000040101bc
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001101, EDX=00000000001ef2e0
RETURN ADDRESS=0000000077358dc0
ARG0= 00000000040101bc
ARG1= 000000000056e6a0
ARG2= 00000000001ef3fc
ARG3= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef26c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef278
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef2d8
ARG11= 00000000747f4e7b
ARG12= 0000000000020144
ARG13= 000000000056e6a0
ARG14= 000000000056e388
ARG15= 000000000056e3ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1a4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef238
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef25c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef268
ARG8= 00000000747f7ee3
ARG9= 0000000000020144
ARG10= 00000000001ef274
ARG11= 00000000747f8645
ARG12= 0000000000020144
ARG13= 00000000001ef2d8
ARG14= 00000000747f4ea1
ARG15= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1e0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000000119
ARG3= 00000000001ef204
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef268
ARG8= 00000000747f4c66
ARG9= 0000000000020144
ARG10= 00000000001ef294
ARG11= 0000000000020144
ARG12= 00000000040101bc
ARG13= 000000000000003c
ARG14= 00000000001ef294
ARG15= 0000000000000096
ARG16= 00000000000002b4
ARG17= 0000000000000011
ARG18= 0000000000000002
ARG19= 0000000000020144
ARG20= 0000000000000002
ARG21= 0000000000000143
ARG22= 0000000000000235
ARG23= 0000000000000154
ARG24= 0000000000020144
ARG25= 00000000001ef25c
ARG26= 00000000747f7ecd
ARG27= 0000000000020144
ARG28= 000000000000c019
ARG29= 00000000001ef268
ARG30= 00000000747f7ee3
ARG31= 0000000005e33cfe
ARG32= 00000000001ef2d8
ARG33= 00000000747f4ead
ARG34= 0000000000020144
ARG35= 00000000001ef294
ARG36= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001ef1e0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1ec
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef200
ARG11= 00000000747f9ed1
ARG12= 0000000000020144
ARG13= 0000000000000001
ARG14= 0000000000010004
ARG15= 00000000001ef268
ARG16= 00000000747f4ca3
ARG17= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001ef1dc
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e8
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef200
ARG11= 00000000747f9ede
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000027ed98
ARG3= 00000000001ef1d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 000000000027ed98
ARG11= 00000000001ef1ec
ARG12= 00000000747f9b5e
ARG13= 0000000000020144
ARG14= 00000000001ef200
ARG15= 00000000747f9ee8
ARG16= 0000000000020144
ARG17= 0000000000000001
ARG18= 0000000000010004
ARG19= 00000000001ef268
ARG20= 00000000747f4ca3
ARG21= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1b0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000010004
ARG3= 00000000001ef1d4
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef1f4
ARG11= 00000000747f5132
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef160
RETURN ADDRESS=0000000077356598
ARG0= 00000000040101bc
ARG1= 000000000027ee34
ARG2= 000000000027ee4c
ARG3= 00000000001ef190
ARG4= 00000000747fa127
ARG5= 00000000040101bc
ARG6= 000000000027ee3c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001eecfc
RETURN ADDRESS=00000000773573c6
ARG0= 00000000040101bc
ARG1= 0000000000000233
ARG2= 0000000000000011
ARG3= 000000000027ee34
ARG4= 000000000027ee3c
ARG5= 000000000027ee10
ARG6= 000000000068000c
ARG7= 0000000000260000
ARG8= 00000000001eed58
ARG9= 0000000077633165
ARG10= 0000000000260138
ARG11= 0000000000680008
ARG12= 000000000027ff80
ARG13= 0000000077633165
ARG14= 0000000000260138
ARG15= 0000000000680038
ARG16= 00000000001eede8
ARG17= 0000000000000001
ARG18= 00000000001eed34
ARG19= 000000000000000b
ARG20= 0000000077357265
ARG21= 000000007735724f
ARG22= 0000000030010286
ARG23= 0000000000000060
ARG24= 00000000001eeedc
ARG25= 00000000005e80c8
ARG26= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef150
RETURN ADDRESS=0000000077356350
ARG0= 0000000031010286
ARG1= 0000000004050287
ARG2= 000000000027ee34
ARG3= 000000000027ee3c
ARG4= 000000000027ee10
ARG5= 0000000000000287
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef1ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef1d0
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef1e0
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001ef1ec
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001ef1fc
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 0000000000010004
ARG18= 00000000001ef268
ARG19= 00000000747f4d58
ARG20= 0000000000020144
ARG21= 0000000031010286
ARG22= 00000000001ef258
ARG23= 00000000001ef294
ARG24= 0000000000020144
ARG25= 00000000040101bc
ARG26= 0000000000000001
ARG27= 00000000001ef294
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000031010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e7f50
ARG4= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000031010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e80c8
ARG4= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000031010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e7f50
ARG4= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed54
RETURN ADDRESS=0000000077357265
ARG0= 0000000031010286
ARG1= 0000000000000060
ARG2= 00000000001eeedc
ARG3= 00000000005e80c8
ARG4= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef160
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef16c
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001ef1f0
ARG11= 00000000747f9bb7
ARG12= 0000000000020144
ARG13= 00000000001ef294
ARG14= 0000000031010286
ARG15= 0000000000010004
ARG16= 0000000000000143
ARG17= 00000000001ef198
ARG18= 00000000746415ba
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef114
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 0000000000020144
ARG3= 00000000001ef138
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef148
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 0000000000020144
ARG11= 00000000001ef154
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001ef164
ARG15= 00000000747fa035
ARG16= 0000000000020144
ARG17= 00000000001ef294
ARG18= 00000000001ef1f0
ARG19= 00000000747f9cca
ARG20= 0000000000020144
ARG21= 0000000031010286
ARG22= 00000000001ef1e8
ARG23= 00000000001ef294
ARG24= 0000000031010286
ARG25= 0000000000010004
ARG26= 0000000000000143
ARG27= 00000000001ef198
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef114
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef138
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef144
ARG8= 00000000747fa012
ARG9= 0000000000020144
ARG10= 00000000001ef154
ARG11= 00000000747f9f7e
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef10c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef130
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef13c
ARG8= 00000000747f9f3a
ARG9= 0000000000020144
ARG10= 00000000001ef154
ARG11= 00000000747f9f9e
ARG12= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef100
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000031010286
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 00000000005e84a8
ARG4= 0000000000284050
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef13c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000001ef294
ARG3= 00000000001ef160
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef16c
ARG8= 00000000747f8528
ARG9= 0000000000020144
ARG10= 00000000001ef1f0
ARG11= 00000000747f9e25
ARG12= 0000000000020144
ARG13= 00000000001ef294
ARG14= 0000000031010286
ARG15= 0000000000010004
ARG16= 0000000000000143
ARG17= 00000000001ef198
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef104
RETURN ADDRESS=0000000077357209
ARG0= 00000000040101bc
ARG1= 0000000000000002
ARG2= 0000000000000143
ARG3= 0000000000000233
ARG4= 0000000000000011
ARG5= 0000000031010286
ARG6= 0000000000000002
ARG7= 0000000000000143
ARG8= 0000000000cc0020
ARG9= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef130
RETURN ADDRESS=0000000077356350
ARG0= 0000000031010286
ARG1= 000000000185000f
ARG2= 00000000040101bc
ARG3= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef138
RETURN ADDRESS=000000007735697e
ARG0= 0000000004050287
ARG1= 00000000040101bc
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef124
RETURN ADDRESS=000000007735697e
ARG0= 0000000031010286
ARG1= 00000000040101bc
ARG2= 000000000027ee10
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001101, EDX=00000000001ef2e0
RETURN ADDRESS=0000000077358dc0
ARG0= 00000000040101bc
ARG1= 00000000001ef3a4
ARG2= 00000000001ef3fc
ARG3= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef264
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000771b8409
ARG3= 00000000001ef288
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef298
ARG8= 00000000747f9b30
ARG9= 0000000000020144
ARG10= 00000000771b8409
ARG11= 00000000001ef2a4
ARG12= 00000000747fa064
ARG13= 0000000000020144
ARG14= 00000000001ef2d8
ARG15= 000000007485165b
ARG16= 0000000000020144
ARG17= 00000000001ef3b4
ARG18= 000000000056e388
ARG19= 000000000056e3ac
ARG20= 0000000000000224
ARG21= 00000000001ef3b4
ARG22= 0000000000000235
ARG23= 0000000000000143
ARG24= 0000000000000246
ARG25= 0000000000000154
ARG26= 0000000005e33c4e
ARG27= 00000000001ef3bc
ARG28= 0000000074647a02
ARG29= 0000000000020144
ARG30= 00000000040101bc
ARG31= 0000000000000235
ARG32= 0000000000000143
ARG33= 00000000001ef3fc
ARG34= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef274
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 000000000000005a
ARG2= 0000000077356e03
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 0000000000000058
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 00000000005ea3f0
ARG5= 00000000001ef1f8
ARG6= 000000007464cfb6
ARG7= 00000000040101bc
ARG8= 0000000000000058
ARG9= 00000000040101bc
ARG10= 00000000005ea3f0
ARG11= 000000000056c890
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b0, EDX=00000000001ef1a4
RETURN ADDRESS=0000000077356f13
ARG0= 00000000040101bc
ARG1= 000000000000005a
ARG2= 0000000077356e03
ARG3= 0000000000000060
ARG4= 00000000005ea3f0
ARG5= 00000000001ef1f8
ARG6= 000000007464cfc5
ARG7= 00000000040101bc
ARG8= 000000000000005a
ARG9= 00000000040101bc
ARG10= 00000000005ea3f0
ARG11= 000000000056c890
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eedf4
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eef7c
ARG3= 00000000005ea570
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2d0
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef3bc
ARG3= 000000007464763f
ARG4= 0000000000020144
ARG5= 00000000040101bc
ARG6= 00000000001ef3fc
ARG7= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef490
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef534
ARG3= 0000000074855970
ARG4= 0000000000020144
ARG5= 0000000003010699
ARG6= 0000000000000001
ARG7= 000000000027e758
ARG8= 00000000771b83a9
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef530
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef550
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef524
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef544
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef52c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef528
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef548
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef520
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef540
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef528
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000014
ARG3= 00000000001ef550
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000003010699
ARG8= 00000000001ef59c
ARG9= 0000000074641be3
ARG10= 0000000000020144
ARG11= 0000000000000014
ARG12= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef530
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef550
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef524
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef544
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef52c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ef614
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 0000000000000001
ARG2= 0000000000000001
ARG3= 0000000000000232
ARG4= 0000000000000139
ARG5= 000000000027e758
ARG6= 00000000001ef67c
ARG7= 00000000747cacb0
ARG8= 0000000003010699
ARG9= 0000000000000001
ARG10= 0000000000000001
ARG11= 0000000000000232
ARG12= 0000000000000139
ARG13= 00000000001ef710
ARG14= 000000000027e758
ARG15= 0000000000000001
ARG16= 0000000000000001
ARG17= 0000000000000232
ARG18= 0000000000000139
ARG19= 0000000000000001
ARG20= 0000000000000001
ARG21= 0000000000000232
ARG22= 0000000000000139
ARG23= 0000000005e338ea
ARG24= 00000000001ef6c8
ARG25= 000000007481849a
ARG26= 000000000027e758
ARG27= 0000000003010699
ARG28= 0000000000000001
ARG29= 00000000001ef710
ARG30= 000000000027e758
ARG31= 000000000000000f
ARG32= 00000000771b695b
ARG33= 00000000771b696a
ARG34= 0000000005e2e751
ARG35= 00000000001ef710
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011d5, EDX=00000000001ef62c
RETURN ADDRESS=00000000771aa8e4
ARG0= 0000000000020144
ARG1= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000124d, EDX=00000000001ef62c
RETURN ADDRESS=00000000771aa8f8
ARG0= 0000000000020144
ARG1= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001253, EDX=00000000001ef480
RETURN ADDRESS=00000000771aee41
ARG0= 0000000000002006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114f, EDX=00000000001ef5d0
RETURN ADDRESS=00000000771b3d83
ARG0= 0000000000000001
ARG1= 0000000000000001
ARG2= 0000000000000073
ARG3= 00000000001ef628
ARG4= 000000007481903d
ARG5= 0000000000000001
ARG6= 0000000000000001
ARG7= 0000000076427080
ARG8= 000000000027e758
ARG9= 0000000000000001
ARG10= 0000000000000001
ARG11= 0000000000000001
ARG12= 0000000000000001
ARG13= 0000000000000001
ARG14= 0000000000000001
ARG15= 0000000000000001
ARG16= 0000000000000232
ARG17= 0000000000000139
ARG18= 0000000000000001
ARG19= 0000000005e338be
ARG20= 00000000001ef674
ARG21= 00000000748183d2
ARG22= 000000000027e758
ARG23= 0000000003010699
ARG24= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef5d4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef43c
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef468
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001184, EDX=00000000001ef6cc
RETURN ADDRESS=00000000771b7b7f
ARG0= 0000000000020144
ARG1= 00000000001ef708
ARG2= 0000000000000001
ARG3= 000000000027e758
ARG4= 00000000771b83a9
ARG5= 0000000003010699
ARG6= 000000000000800b
ARG7= 000000000000800b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef750
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef770
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef744
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef764
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef74c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef7d8
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000020146
ARG1= 0000000000000005
ARG2= 00000000001ef8a8
ARG3= 0000000000000113
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef7fc
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef8a8
ARG3= 0000000000000113
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
ARG2= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef6b8
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 000000000000007f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef710
ARG3= 0000000000285a88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eefa4
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eefd0
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eefa4
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eefd0
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 0000000000286880
ARG3= 0000000000285a88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 0000000000286880
ARG3= 0000000000285a88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001ef3d0
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000011
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 0000000000282cb0
ARG4= 00000000001ef498
ARG5= 00000000760dd6f5
ARG6= 0000000000000011
ARG7= 0000000000286980
ARG8= 0000000000282ce8
ARG9= 0000000046000244
ARG10= 0000000000000007
ARG11= 0000000077633165
ARG12= 0000000000286dc8
ARG13= 0000000000281eb4
ARG14= 0000000000281eb4
ARG15= 0000000000260000
ARG16= 0000000000260180
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c8
RETURN ADDRESS=0000000077357471
ARG0= 00000000018a0025
ARG1= 000000000000005c
ARG2= 00000000001ef438
ARG3= 0000000000000010
ARG4= 00000000001ef498
ARG5= 00000000760dd702
ARG6= 00000000018a0025
ARG7= 000000000000005c
ARG8= 00000000001ef438
ARG9= 0000000000286980
ARG10= 0000000000282ce8
ARG11= 0000000046000244
ARG12= 0000000000000007
ARG13= 0000000077633165
ARG14= 0000000000286dc8
ARG15= 0000000000281eb4
ARG16= 0000000000281eb4
ARG17= 0000000000260000
ARG18= 0000000000260180
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ef1f4
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef228
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ef344
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ef35c
ARG2= 0000000000000044
ARG3= 00000000018a002e
ARG4= 00000000002869f8
ARG5= 000000000013009f
ARG6= 000000000027c9b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef3ac
RETURN ADDRESS=000000007735697e
ARG0= 000000003a0a0286
ARG1= 0000000003010699
ARG2= 00000000773561d0
ARG3= 00000000018a002e
ARG4= 0000000000003a0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3bc
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef3e4
ARG3= 00000000760dcc5d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef1d4
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ef00c
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef040
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ef0e4
RETURN ADDRESS=000000007735a60c
ARG0= 000000003b010286
ARG1= 00000000001ef100
ARG2= 0000000077399140
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ba, EDX=00000000001ef150
RETURN ADDRESS=000000007735b52d
ARG0= 000000003b010286
ARG1= 0000000076421bc8
ARG2= 0000000000000004
ARG3= 00000000001ef17c
ARG4= 0000000000000001
ARG5= 000000003b010286
ARG6= 0000000000000103
ARG7= 000000000000000b
ARG8= 0000000004000076
ARG9= 0000000000000003
ARG10= 0000000000020000
ARG11= 000000000601103f
ARG12= 00000000001ef198
ARG13= 0000000076421c26
ARG14= 000000003b010286
ARG15= 0000000000000002
ARG16= 00000000001ef1c0
ARG17= 000000007735af18
ARG18= 000000003b010286
ARG19= 00000000001ef35c
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e2, EDX=00000000001ef124
RETURN ADDRESS=000000007735b5e6
ARG0= 000000003b010286
ARG1= 0000000000000002
ARG2= 0000000000285b00
ARG3= 0000000000000102
ARG4= 0000000000285d04
ARG5= 0000000000286a10
ARG6= 0000000000286a20
ARG7= 000000000013108f
ARG8= 00000000002869d8
ARG9= 000000000027c9b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1c8
RETURN ADDRESS=000000007735697e
ARG0= 000000001e0a0702
ARG1= 000000001e0a0702
ARG2= 00000000773561d0
ARG3= 000000007735a3fd
ARG4= 0000000000001e0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef1ac
RETURN ADDRESS=000000007735697e
ARG0= 000000003b010286
ARG1= 00000000001ef494
ARG2= 00000000001ef214
ARG3= 000000007735a3fd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e4, EDX=00000000001ef0b0
RETURN ADDRESS=000000007735a3f5
ARG0= 00000000001ef0e4
ARG1= 0000000000000164
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef278
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef278
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef278
RETURN ADDRESS=0000000077356598
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001023, EDX=00000000001eef6c
RETURN ADDRESS=0000000077358794
ARG0= 000000001f010702
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef218
RETURN ADDRESS=0000000077356350
ARG0= 000000001f010702
ARG1= 000000000305029a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001023, EDX=00000000001eef6c
RETURN ADDRESS=0000000077358794
ARG0= 000000000b0106f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef218
RETURN ADDRESS=0000000077356350
ARG0= 000000000b0106f4
ARG1= 0000000002050289
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001023, EDX=00000000001eef6c
RETURN ADDRESS=0000000077358794
ARG0= 0000000006010287
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef218
RETURN ADDRESS=0000000077356350
ARG0= 0000000006010287
ARG1= 000000000b05028c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110e, EDX=00000000001ef264
RETURN ADDRESS=000000007735804b
ARG0= 000000001f010702
ARG1= 000000003c0a0286
ARG2= 0000000000000002
ARG3= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ef188
RETURN ADDRESS=000000007735a60c
ARG0= 000000001f010702
ARG1= 00000000001ef1a4
ARG2= 0000000077399140
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e2, EDX=00000000001ef1c8
RETURN ADDRESS=000000007735b5e6
ARG0= 000000001f010702
ARG1= 0000000000000002
ARG2= 0000000000285b00
ARG3= 0000000000000102
ARG4= 0000000000285d04
ARG5= 0000000000286a10
ARG6= 0000000000286a20
ARG7= 000000000013408f
ARG8= 00000000002869d8
ARG9= 000000000027c9b0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ef164
RETURN ADDRESS=0000000077358128
ARG0= 000000001f010702
ARG1= 0000000000000003
ARG2= 0000000000000001
ARG3= 0000000000001002
ARG4= 00000000001ef300
ARG5= 00000000001ef35c
ARG6= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110e, EDX=00000000001ef264
RETURN ADDRESS=000000007735804b
ARG0= 000000001f010702
ARG1= 00000000018a002e
ARG2= 0000000000000002
ARG3= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110e, EDX=00000000001ef264
RETURN ADDRESS=000000007735804b
ARG0= 0000000006010287
ARG1= 000000003c0a0286
ARG2= 0000000000000002
ARG3= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ef164
RETURN ADDRESS=0000000077358128
ARG0= 0000000006010287
ARG1= 0000000000000003
ARG2= 0000000000000001
ARG3= 0000000000001002
ARG4= 00000000001ef300
ARG5= 00000000001ef35c
ARG6= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110e, EDX=00000000001ef264
RETURN ADDRESS=000000007735804b
ARG0= 0000000006010287
ARG1= 00000000018a002e
ARG2= 0000000000000002
ARG3= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef1f4
RETURN ADDRESS=0000000077357471
ARG0= 000000000305029a
ARG1= 0000000000000018
ARG2= 00000000001ef26c
ARG3= 00000000001ef220
ARG4= 000000007735751f
ARG5= 000000000305029a
ARG6= 0000000000000018
ARG7= 00000000001ef26c
ARG8= 00000000001ef2f0
ARG9= 00000000001ef288
ARG10= 00000000760d7d4e
ARG11= 000000000305029a
ARG12= 0000000000000018
ARG13= 00000000001ef26c
ARG14= 0000000000000002
ARG15= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b3, EDX=00000000001ef1c8
RETURN ADDRESS=000000007735a9d1
ARG0= 000000001f010702
ARG1= 000000000305029a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef1f4
RETURN ADDRESS=0000000077357471
ARG0= 000000000b05028c
ARG1= 0000000000000018
ARG2= 00000000001ef26c
ARG3= 00000000001ef220
ARG4= 000000007735751f
ARG5= 000000000b05028c
ARG6= 0000000000000018
ARG7= 00000000001ef26c
ARG8= 00000000001ef2f8
ARG9= 00000000001ef288
ARG10= 00000000760d7d4e
ARG11= 000000000b05028c
ARG12= 0000000000000018
ARG13= 00000000001ef26c
ARG14= 0000000000000002
ARG15= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b3, EDX=00000000001ef1c8
RETURN ADDRESS=000000007735a9d1
ARG0= 0000000006010287
ARG1= 000000000b05028c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef258
RETURN ADDRESS=0000000077357471
ARG0= 000000000305029a
ARG1= 0000000000000018
ARG2= 00000000001ef2a4
ARG3= 00000000001ef284
ARG4= 000000007735751f
ARG5= 000000000305029a
ARG6= 0000000000000018
ARG7= 00000000001ef2a4
ARG8= 00000000773561d0
ARG9= 00000000001ef388
ARG10= 00000000760dd166
ARG11= 000000000305029a
ARG12= 0000000000000018
ARG13= 00000000001ef2a4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001023, EDX=00000000001eefb8
RETURN ADDRESS=0000000077358794
ARG0= 000000001f010702
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef250
RETURN ADDRESS=0000000077356350
ARG0= 000000000b0106f4
ARG1= 000000000185000f
ARG2= 00000000773561d0
ARG3= 00000000001ef314
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef248
RETURN ADDRESS=0000000077356350
ARG0= 0000000006010287
ARG1= 000000000185000f
ARG2= 00000000773561d0
ARG3= 00000000001ef328
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef250
RETURN ADDRESS=000000007735697e
ARG0= 000000000b05028c
ARG1= 00000000773561d0
ARG2= 00000000001ef328
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef250
RETURN ADDRESS=000000007735697e
ARG0= 0000000006010287
ARG1= 000000000028630a
ARG2= 00000000001ef328
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef26c
RETURN ADDRESS=000000007735697e
ARG0= 000000003c0a0286
ARG1= 000000000028630a
ARG2= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef250
RETURN ADDRESS=000000007735697e
ARG0= 000000000b0106f4
ARG1= 000000000028630a
ARG2= 00000000001ef314
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef248
RETURN ADDRESS=0000000077356350
ARG0= 000000001f010702
ARG1= 000000000185000f
ARG2= 00000000773561d0
ARG3= 00000000001ef340
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef250
RETURN ADDRESS=000000007735697e
ARG0= 000000000305029a
ARG1= 00000000773561d0
ARG2= 00000000001ef340
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef250
RETURN ADDRESS=000000007735697e
ARG0= 000000001f010702
ARG1= 000000000028630a
ARG2= 00000000001ef340
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef2c8
RETURN ADDRESS=0000000077357471
ARG0= 0000000002050289
ARG1= 0000000000000018
ARG2= 00000000001ef32c
ARG3= 00000000001ef2f4
ARG4= 000000007735751f
ARG5= 0000000002050289
ARG6= 0000000000000018
ARG7= 00000000001ef32c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef2c8
RETURN ADDRESS=0000000077357471
ARG0= 0000000003050726
ARG1= 0000000000000018
ARG2= 00000000001ef314
ARG3= 00000000001ef2f4
ARG4= 000000007735751f
ARG5= 0000000003050726
ARG6= 0000000000000018
ARG7= 00000000001ef314
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef26c
RETURN ADDRESS=0000000077357471
ARG0= 0000000003050726
ARG1= 0000000000000018
ARG2= 00000000001ef2ac
ARG3= 00000000001ef298
ARG4= 000000007735751f
ARG5= 0000000003050726
ARG6= 0000000000000018
ARG7= 00000000001ef2ac
ARG8= 00000000772092e0
ARG9= 00000000001ef2d4
ARG10= 00000000771b1a72
ARG11= 0000000003050726
ARG12= 0000000000000018
ARG13= 00000000001ef2ac
ARG14= 0000000000000010
ARG15= 0000000000000040
ARG16= 0000000000200001
ARG17= 0000000000250000
ARG18= 0000000000000028
ARG19= 0000000000000010
ARG20= 00000000001ef3c0
ARG21= 00000000772092e0
ARG22= 00000000773574b6
ARG23= 0000000003050726
ARG24= 00000000001ef2f0
ARG25= 00000000771b1a14
ARG26= 0000000003050726
ARG27= 00000000450101ad
ARG28= 00000000001ef3c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010b3, EDX=00000000001ef234
RETURN ADDRESS=000000007735a9d1
ARG0= 00000000450101ad
ARG1= 0000000003050726
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001ef190
RETURN ADDRESS=000000007735ab9a
ARG0= 00000000450101ad
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050299
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001ef1dc
RETURN ADDRESS=0000000077359e2b
ARG0= 0000000005050299
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001ef1c0
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1b4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050299
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001ef1ac
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1bc
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001ef0e8
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001ef1bc
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1b4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050299
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001ef1b8
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef1ec
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001ef2ec
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000010
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef2e8
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
ARG1= 00000000001ef3c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef2d4
RETURN ADDRESS=0000000077356350
ARG0= 000000000d0106f4
ARG1= 000000000505029a
ARG2= 00000000001ef3c0
ARG3= 00000000773561d0
ARG4= 00000000772092e0
ARG5= 000000000000029a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef2d4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000002050289
ARG2= 00000000001ef3c0
ARG3= 00000000773561d0
ARG4= 00000000772092e0
ARG5= 0000000000000289
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef298
RETURN ADDRESS=0000000077357209
ARG0= 000000000d0106f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef2d4
RETURN ADDRESS=0000000077356350
ARG0= 000000000d0106f4
ARG1= 000000000185000f
ARG2= 00000000001ef3c0
ARG3= 00000000773561d0
ARG4= 00000000772092e0
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef2d4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
ARG2= 00000000001ef3c0
ARG3= 00000000773561d0
ARG4= 00000000772092e0
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef2c8
RETURN ADDRESS=000000007735697e
ARG0= 000000000d0106f4
ARG1= 00000000001ef3c0
ARG2= 00000000773561d0
ARG3= 00000000772092e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001ef2b8
RETURN ADDRESS=00000000771af7ca
ARG0= 000000000002015f
ARG1= 00000000001ef2d8
ARG2= 00000000001ef2e8
ARG3= 00000000001ef344
ARG4= 00000000001ef3c0
ARG5= 00000000773561d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef388
RETURN ADDRESS=000000007735697e
ARG0= 0000000003050726
ARG1= 0000000002050289
ARG2= 00000000773568b4
ARG3= 000000000002015f
ARG4= 0000000000000305
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef388
RETURN ADDRESS=000000007735697e
ARG0= 0000000002050289
ARG1= 0000000002050289
ARG2= 00000000773568b4
ARG3= 000000000002015f
ARG4= 0000000000000205
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eee54
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eee80
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eee68
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eee94
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001eed78
RETURN ADDRESS=000000007735ab9a
ARG0= 00000000450101ad
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedd4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000003050289
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001eedc4
RETURN ADDRESS=0000000077359e2b
ARG0= 0000000003050289
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001eeda8
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eed9c
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000003050289
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001eed94
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eeda4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001eecd0
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eeda4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eed9c
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000003050289
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001eeda0
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedd4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001eed74
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001eecf0
RETURN ADDRESS=000000007735ab9a
ARG0= 0000000003010699
ARG1= 0000000000000010
ARG2= 0000000000000020
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eed60
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee3c
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee28
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050726
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001eee18
RETURN ADDRESS=0000000077359e2b
ARG0= 0000000005050726
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001eedfc
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedf0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050726
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001eede8
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eedf8
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001eed24
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eedf8
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedf0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050726
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001eedf4
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee28
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001eedfc
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001eeddc
RETURN ADDRESS=0000000077357471
ARG0= 0000000005050726
ARG1= 0000000000000018
ARG2= 00000000001eee28
ARG3= 00000000001eee08
ARG4= 000000007735751f
ARG5= 0000000005050726
ARG6= 0000000000000018
ARG7= 00000000001eee28
ARG8= 0000000005050726
ARG9= 00000000001eee4c
ARG10= 00000000771af952
ARG11= 0000000005050726
ARG12= 0000000000000018
ARG13= 00000000001eee28
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001eee00
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000010
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000005050726
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 000000000a010287
ARG1= 000000000b05028a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001eedac
RETURN ADDRESS=0000000077357209
ARG0= 000000000a010287
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 000000000a010287
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eedf0
RETURN ADDRESS=000000007735697e
ARG0= 0000000005050726
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eeddc
RETURN ADDRESS=000000007735697e
ARG0= 000000000a010287
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eeea8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001eee68
RETURN ADDRESS=00000000771af7ca
ARG0= 0000000000010163
ARG1= 00000000001eee88
ARG2= 00000000001eee98
ARG3= 00000000001eeedc
ARG4= 0000000000010163
ARG5= 00000000001eeedc
ARG6= 00000000003c003a
ARG7= 00000000001eef50
ARG8= 00000000001eee88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eee54
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eee80
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010b, EDX=00000000001eee68
RETURN ADDRESS=00000000776156ac
ARG0= 00000000ffffffff
ARG1= 0000000000240000
ARG2= 0000000000000003
ARG3= 00000000001eee94
ARG4= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001eed78
RETURN ADDRESS=000000007735ab9a
ARG0= 00000000450101ad
ARG1= 0000000000000010
ARG2= 0000000000000010
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedd4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000d05028c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001eedc4
RETURN ADDRESS=0000000077359e2b
ARG0= 000000000d05028c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001eeda8
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eed9c
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000d05028c
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001eed94
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eeda4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001eecd0
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eeda4
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eed9c
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000d05028c
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001eeda0
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedd4
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001eed74
RETURN ADDRESS=00000000771b704d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001022, EDX=00000000001eecf0
RETURN ADDRESS=000000007735ab9a
ARG0= 0000000003010699
ARG1= 0000000000000010
ARG2= 0000000000000020
ARG3= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eed60
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001eee3c
ARG3= 00000000771af892
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee28
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ad, EDX=00000000001eee18
RETURN ADDRESS=0000000077359e2b
ARG0= 0000000004050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001108, EDX=00000000001eedfc
RETURN ADDRESS=0000000077359b63
ARG0= 00000000450101ad
ARG1= 00000000450101ad
ARG2= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedf0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050728
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ae, EDX=00000000001eede8
RETURN ADDRESS=0000000077357722
ARG0= 00000000450101ad
ARG1= 0000000000080000
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eedf8
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001119, EDX=00000000001eed24
RETURN ADDRESS=0000000077359d15
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001217, EDX=00000000001eedf8
RETURN ADDRESS=0000000077359221
ARG0= 00000000450101ad
ARG1= 000000000188000b
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eedf0
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050728
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001106, EDX=00000000001eedf4
RETURN ADDRESS=0000000077359aca
ARG0= 00000000450101ad
ARG1= 00000000ffffffff
ARG2= 00000000450101ad
ARG3= 0000000000286c90
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eee28
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001eedfc
RETURN ADDRESS=0000000077356598
ARG0= 00000000450101ad
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001eeddc
RETURN ADDRESS=0000000077357471
ARG0= 0000000004050728
ARG1= 0000000000000018
ARG2= 00000000001eee28
ARG3= 00000000001eee08
ARG4= 000000007735751f
ARG5= 0000000004050728
ARG6= 0000000000000018
ARG7= 00000000001eee28
ARG8= 0000000004050728
ARG9= 00000000001eee4c
ARG10= 00000000771af952
ARG11= 0000000004050728
ARG12= 0000000000000018
ARG13= 00000000001eee28
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101a, EDX=00000000001eee00
RETURN ADDRESS=0000000077356833
ARG0= 0000000000000010
ARG1= 0000000000000020
ARG2= 0000000000000001
ARG3= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 0000000004050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 0000000007010729
ARG1= 000000000405072a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001eedac
RETURN ADDRESS=0000000077357209
ARG0= 0000000007010729
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 00000000450101ad
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001eede8
RETURN ADDRESS=0000000077356350
ARG0= 0000000007010729
ARG1= 000000000185000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eedf0
RETURN ADDRESS=000000007735697e
ARG0= 0000000004050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001eeddc
RETURN ADDRESS=000000007735697e
ARG0= 0000000007010729
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001eeea8
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001223, EDX=00000000001eee68
RETURN ADDRESS=00000000771af7ca
ARG0= 0000000000010165
ARG1= 00000000001eee88
ARG2= 00000000001eee98
ARG3= 00000000001eeedc
ARG4= 0000000000010165
ARG5= 00000000001eeedc
ARG6= 00000000003c003a
ARG7= 00000000001eef50
ARG8= 00000000001eee88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef420
RETURN ADDRESS=00000000771b1821
ARG0= 000000000002015f
ARG1= 00000000001ef45c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 000000000305072c
ARG1= 0000000000000018
ARG2= 00000000001ef424
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 000000000305072c
ARG6= 0000000000000018
ARG7= 00000000001ef424
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cfed6
ARG11= 000000000305072c
ARG12= 0000000000000018
ARG13= 00000000001ef424
ARG14= 000000000002015f
ARG15= 0000000000283160
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 0000000006050728
ARG1= 0000000000000018
ARG2= 00000000001ef40c
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 0000000006050728
ARG6= 0000000000000018
ARG7= 00000000001ef40c
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cff31
ARG11= 0000000006050728
ARG12= 0000000000000018
ARG13= 00000000001ef40c
ARG14= 000000000002015f
ARG15= 0000000000283160
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 000000000305072c
ARG1= 000000000002015f
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000305
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 0000000006050728
ARG1= 000000000002015f
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000605
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef420
RETURN ADDRESS=00000000771b1821
ARG0= 0000000000010163
ARG1= 00000000001ef45c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 000000000405072c
ARG1= 0000000000000018
ARG2= 00000000001ef424
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 000000000405072c
ARG6= 0000000000000018
ARG7= 00000000001ef424
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cfed6
ARG11= 000000000405072c
ARG12= 0000000000000018
ARG13= 00000000001ef424
ARG14= 0000000000010163
ARG15= 0000000000283164
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 0000000007050728
ARG1= 0000000000000018
ARG2= 00000000001ef40c
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 0000000007050728
ARG6= 0000000000000018
ARG7= 00000000001ef40c
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cff31
ARG11= 0000000007050728
ARG12= 0000000000000018
ARG13= 00000000001ef40c
ARG14= 0000000000010163
ARG15= 0000000000283164
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 000000000405072c
ARG1= 0000000000010163
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000405
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 0000000007050728
ARG1= 0000000000010163
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000705
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef420
RETURN ADDRESS=00000000771b1821
ARG0= 0000000000010165
ARG1= 00000000001ef45c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 000000000505072c
ARG1= 0000000000000018
ARG2= 00000000001ef424
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 000000000505072c
ARG6= 0000000000000018
ARG7= 00000000001ef424
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cfed6
ARG11= 000000000505072c
ARG12= 0000000000000018
ARG13= 00000000001ef424
ARG14= 0000000000010165
ARG15= 0000000000283168
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3c0
RETURN ADDRESS=0000000077357471
ARG0= 0000000008050728
ARG1= 0000000000000018
ARG2= 00000000001ef40c
ARG3= 00000000001ef3ec
ARG4= 000000007735751f
ARG5= 0000000008050728
ARG6= 0000000000000018
ARG7= 00000000001ef40c
ARG8= 00000000773574bf
ARG9= 00000000001ef440
ARG10= 00000000760cff31
ARG11= 0000000008050728
ARG12= 0000000000000018
ARG13= 00000000001ef40c
ARG14= 0000000000010165
ARG15= 0000000000283168
ARG16= 0000000000000008
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 000000000505072c
ARG1= 0000000000010165
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000505
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef424
RETURN ADDRESS=000000007735697e
ARG0= 0000000008050728
ARG1= 0000000000010165
ARG2= 00000000773568b4
ARG3= 0000000000000510
ARG4= 0000000000000805
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef44c
RETURN ADDRESS=00000000771b1821
ARG0= 000000000002015f
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 000000000605072c
ARG1= 0000000000000018
ARG2= 00000000001ef448
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 000000000605072c
ARG6= 0000000000000018
ARG7= 00000000001ef448
ARG8= 0000000000286ea8
ARG9= 00000000001ef460
ARG10= 00000000760d000a
ARG11= 000000000605072c
ARG12= 0000000000000018
ARG13= 00000000001ef448
ARG14= 0000000000286e88
ARG15= 0000000000286ea8
ARG16= 00000000001ef57c
ARG17= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 0000000009050728
ARG1= 0000000000000018
ARG2= 00000000001ef430
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 0000000009050728
ARG6= 0000000000000018
ARG7= 00000000001ef430
ARG8= 0000000000286ea8
ARG9= 00000000001ef460
ARG10= 00000000760d0050
ARG11= 0000000009050728
ARG12= 0000000000000018
ARG13= 00000000001ef430
ARG14= 0000000000286e88
ARG15= 0000000000286ea8
ARG16= 00000000001ef57c
ARG17= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 000000000605072c
ARG1= 0000000000000400
ARG2= 0000000000286f08
ARG3= 0000000000286e88
ARG4= 0000000000286ea8
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 0000000009050728
ARG1= 0000000000000020
ARG2= 0000000000287308
ARG3= 0000000000286e88
ARG4= 0000000000286ea8
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 000000000605072c
ARG1= 0000000000287330
ARG2= 00000000773568b4
ARG3= 0000000000286e88
ARG4= 0000000000000605
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 0000000009050728
ARG1= 0000000000287330
ARG2= 00000000773568b4
ARG3= 0000000000286e88
ARG4= 0000000000000905
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef44c
RETURN ADDRESS=00000000771b1821
ARG0= 0000000000010163
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 000000000705072c
ARG1= 0000000000000018
ARG2= 00000000001ef448
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 000000000705072c
ARG6= 0000000000000018
ARG7= 00000000001ef448
ARG8= 0000000000287350
ARG9= 00000000001ef460
ARG10= 00000000760d000a
ARG11= 000000000705072c
ARG12= 0000000000000018
ARG13= 00000000001ef448
ARG14= 0000000000287330
ARG15= 0000000000287350
ARG16= 00000000001ef57c
ARG17= 0000000077399160
ARG18= 00000000001ef44c
ARG19= 0000000077356c63
ARG20= 0000000077399100
ARG21= 0000000009050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 000000000a050728
ARG1= 0000000000000018
ARG2= 00000000001ef430
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 000000000a050728
ARG6= 0000000000000018
ARG7= 00000000001ef430
ARG8= 0000000000287350
ARG9= 00000000001ef460
ARG10= 00000000760d0050
ARG11= 000000000a050728
ARG12= 0000000000000018
ARG13= 00000000001ef430
ARG14= 0000000000287330
ARG15= 0000000000287350
ARG16= 00000000001ef57c
ARG17= 0000000077399160
ARG18= 00000000001ef44c
ARG19= 0000000077356c63
ARG20= 0000000077399100
ARG21= 0000000009050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 000000000705072c
ARG1= 0000000000000400
ARG2= 00000000002873b0
ARG3= 0000000000287330
ARG4= 0000000000287350
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 000000000a050728
ARG1= 0000000000000020
ARG2= 00000000002877b0
ARG3= 0000000000287330
ARG4= 0000000000287350
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 000000000705072c
ARG1= 00000000002877d8
ARG2= 00000000773568b4
ARG3= 0000000000287330
ARG4= 0000000000000705
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 000000000a050728
ARG1= 00000000002877d8
ARG2= 00000000773568b4
ARG3= 0000000000287330
ARG4= 0000000000000a05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011aa, EDX=00000000001ef44c
RETURN ADDRESS=00000000771b1821
ARG0= 0000000000010165
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 000000000805072c
ARG1= 0000000000000018
ARG2= 00000000001ef448
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 000000000805072c
ARG6= 0000000000000018
ARG7= 00000000001ef448
ARG8= 00000000002877f8
ARG9= 00000000001ef460
ARG10= 00000000760d000a
ARG11= 000000000805072c
ARG12= 0000000000000018
ARG13= 00000000001ef448
ARG14= 00000000002877d8
ARG15= 00000000002877f8
ARG16= 00000000001ef57c
ARG17= 0000000077399160
ARG18= 00000000001ef44c
ARG19= 0000000077356c63
ARG20= 0000000077399100
ARG21= 000000000a050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef3e4
RETURN ADDRESS=0000000077357471
ARG0= 000000000b050728
ARG1= 0000000000000018
ARG2= 00000000001ef430
ARG3= 00000000001ef410
ARG4= 000000007735751f
ARG5= 000000000b050728
ARG6= 0000000000000018
ARG7= 00000000001ef430
ARG8= 00000000002877f8
ARG9= 00000000001ef460
ARG10= 00000000760d0050
ARG11= 000000000b050728
ARG12= 0000000000000018
ARG13= 00000000001ef430
ARG14= 00000000002877d8
ARG15= 00000000002877f8
ARG16= 00000000001ef57c
ARG17= 0000000077399160
ARG18= 00000000001ef44c
ARG19= 0000000077356c63
ARG20= 0000000077399100
ARG21= 000000000a050728
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 000000000805072c
ARG1= 0000000000000400
ARG2= 0000000000287858
ARG3= 00000000002877d8
ARG4= 00000000002877f8
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000109f, EDX=00000000001ef410
RETURN ADDRESS=000000007735c5e6
ARG0= 000000000b050728
ARG1= 0000000000000020
ARG2= 0000000000287c58
ARG3= 00000000002877d8
ARG4= 00000000002877f8
ARG5= 00000000001ef57c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 000000000805072c
ARG1= 0000000000287c80
ARG2= 00000000773568b4
ARG3= 00000000002877d8
ARG4= 0000000000000805
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef44c
RETURN ADDRESS=000000007735697e
ARG0= 000000000b050728
ARG1= 0000000000287c80
ARG2= 00000000773568b4
ARG3= 00000000002877d8
ARG4= 0000000000000b05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001170, EDX=00000000001ef4b0
RETURN ADDRESS=00000000771ac6ce
ARG0= 000000000002015f
ARG1= 0000000000000001
ARG2= 00000000001ef4dc
ARG3= 00000000760af5c2
ARG4= 000000000002015f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001170, EDX=00000000001ef4b0
RETURN ADDRESS=00000000771ac6ce
ARG0= 0000000000010163
ARG1= 0000000000000001
ARG2= 00000000001ef4dc
ARG3= 00000000760af5c2
ARG4= 0000000000010163
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001170, EDX=00000000001ef4b0
RETURN ADDRESS=00000000771ac6ce
ARG0= 0000000000010165
ARG1= 0000000000000001
ARG2= 00000000001ef4dc
ARG3= 00000000760af5c2
ARG4= 0000000000010165
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 0000000000286dc8
ARG3= 0000000000285a88
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef6b0
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 0000000000000012
ARG1= 00000000001ef808
ARG2= 00000000760a0b8e
ARG3= 0000000000000012
ARG4= 0000000005d7f0fa
ARG5= 0000000020380001
ARG6= 0000000000280840
ARG7= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 000000000000005b
ARG1= 00000000001ef808
ARG2= 00000000760a0ba6
ARG3= 000000000000005b
ARG4= 0000000005d7f0fa
ARG5= 0000000020380001
ARG6= 0000000000280840
ARG7= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 000000000000005c
ARG1= 00000000001ef808
ARG2= 00000000760a0bb0
ARG3= 000000000000005c
ARG4= 0000000005d7f0fa
ARG5= 0000000020380001
ARG6= 0000000000280840
ARG7= 0000000000000012
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef7c4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125d, EDX=00000000001ef924
RETURN ADDRESS=00000000771d6b72
ARG0= 0000000000030142
ARG1= 00000000003a00df
ARG2= 00000000001ef958
ARG3= 00000000001ef974
ARG4= 0000000000a614bf
ARG5= 0000000000030142
ARG6= 00000000003a00df
ARG7= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125e, EDX=00000000001ef91c
RETURN ADDRESS=00000000771d6c4b
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef674
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000104
ARG2= 0000000000000012
ARG3= 0000000020380001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef388
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef3c0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef058
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eebb4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eed3c
ARG3= 000000000064fa98
ARG4= 0000000000000001
ARG5= 00000000002830f8
ARG6= 00000000001eebec
ARG7= 0000000077621faf
ARG8= 0000000000277b50
ARG9= 00000000001eeda8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec34
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eedbc
ARG3= 000000000064fc58
ARG4= 0000000000260000
ARG5= 00000000757c1b1e
ARG6= 00000000051229d1
ARG7= 0000000080004005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eed18
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eed30
ARG2= 0000000000000044
ARG3= 00000000001eee34
ARG4= 00000000001eed40
ARG5= 0000000074643f54
ARG6= 00000000001eefb4
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001eedbc
ARG11= 00000000001ef008
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000008
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001eee34
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eed9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee00
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000012040701
ARG2= 0000000000000001
ARG3= 0000000012040701
ARG4= 00000000001eeeb0
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000012040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedec
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000000021
ARG4= 000000000000002f
ARG5= 00000000001eefb0
ARG6= 00000000001eeeb0
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 000000000000000f
ARG10= 0000000000000020
ARG11= 0000000000000021
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb24
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eeb44
ARG3= 00000000001eeb54
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eea08
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eea04
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee848
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee940
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee620
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3c4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee3dc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d1, EDX=00000000001ee89c
RETURN ADDRESS=0000000077356869
ARG0= 0000000000000007
ARG1= 000000000000002d
ARG2= 0000000000000015
ARG3= 00000000007507d0
ARG4= 00000000001ee990
ARG5= 00000000762e5f29
ARG6= 0000000000000007
ARG7= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee88c
RETURN ADDRESS=000000007735ca70
ARG0= 0000000003010699
ARG1= 0000000000000015
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 0000000000000015
ARG5= 00000000007507d0
ARG6= 00000000001ee990
ARG7= 00000000762e5f48
ARG8= 0000000003010699
ARG9= 0000000000000015
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef388
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef3c0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef058
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eebb4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eed3c
ARG3= 000000000064fa98
ARG4= 0000000000000001
ARG5= 00000000002830f8
ARG6= 00000000001eebec
ARG7= 0000000077621faf
ARG8= 0000000000277b50
ARG9= 00000000001eeda8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec34
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eedbc
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eec90
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 000000000000000f
ARG9= 0000000000000020
ARG10= 00000000001ef158
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001eee34
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eee34
ARG19= 000000000000000f
ARG20= 000000000000000f
ARG21= 00000000001eecc4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eed18
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eed30
ARG2= 0000000000000044
ARG3= 00000000001eee34
ARG4= 00000000001eed40
ARG5= 0000000074643f54
ARG6= 00000000001eefb4
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001eedbc
ARG11= 00000000001ef008
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000028
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001eee34
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eed9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee00
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000013040701
ARG2= 0000000000000001
ARG3= 0000000013040701
ARG4= 00000000001eeeb0
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000013040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedec
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000000043
ARG4= 000000000000002f
ARG5= 00000000001eefb0
ARG6= 00000000001eeeb0
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 000000000000002f
ARG10= 0000000000000020
ARG11= 0000000000000043
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb24
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eeb44
ARG3= 00000000001eeb54
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eea08
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eea04
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee848
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee940
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee620
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3c4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee3dc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee88c
RETURN ADDRESS=000000007735ca70
ARG0= 0000000003010699
ARG1= 0000000000000035
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 0000000000000035
ARG5= 00000000007507d0
ARG6= 00000000001ee990
ARG7= 00000000762e5f48
ARG8= 0000000003010699
ARG9= 0000000000000035
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef388
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef3c0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef058
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eebb4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eed3c
ARG3= 000000000064fa98
ARG4= 0000000000000001
ARG5= 00000000002830f8
ARG6= 00000000001eebec
ARG7= 0000000077621faf
ARG8= 0000000000277b50
ARG9= 00000000001eeda8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec34
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eedbc
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eec90
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 000000000000002f
ARG9= 0000000000000020
ARG10= 00000000001ef158
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001eee34
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eee34
ARG19= 000000000000002f
ARG20= 000000000000002f
ARG21= 00000000001eecc4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eed18
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eed30
ARG2= 0000000000000044
ARG3= 00000000001eee34
ARG4= 00000000001eed40
ARG5= 0000000074643f54
ARG6= 00000000001eefb4
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001eedbc
ARG11= 00000000001ef008
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000004a
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001eee34
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eed9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee00
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000014040701
ARG2= 0000000000000001
ARG3= 0000000014040701
ARG4= 00000000001eeeb0
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000014040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedec
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000000077
ARG4= 000000000000002f
ARG5= 00000000001eefb0
ARG6= 00000000001eeeb0
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 0000000000000051
ARG10= 0000000000000020
ARG11= 0000000000000077
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb24
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eeb44
ARG3= 00000000001eeb54
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eea08
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eea04
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee848
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee940
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee620
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3c4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee3dc
ARG2= 0000000000000044
ARG3= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee88c
RETURN ADDRESS=000000007735ca70
ARG0= 0000000003010699
ARG1= 000000000000005e
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 000000000000005e
ARG5= 00000000007507d0
ARG6= 00000000001ee990
ARG7= 00000000762e5f48
ARG8= 0000000003010699
ARG9= 000000000000005e
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef388
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef3c0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef058
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eebb4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eed3c
ARG3= 000000000064fa98
ARG4= 0000000000000001
ARG5= 00000000002830f8
ARG6= 00000000001eebec
ARG7= 0000000077621faf
ARG8= 0000000000277b50
ARG9= 00000000001eeda8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec34
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eedbc
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eec90
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 0000000000000051
ARG9= 0000000000000020
ARG10= 00000000001ef158
ARG11= 0000000000000007
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001eee34
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000007
ARG18= 00000000001eee34
ARG19= 0000000000000051
ARG20= 0000000000000051
ARG21= 00000000001eecc4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eed18
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eed30
ARG2= 0000000000000044
ARG3= 00000000001eee34
ARG4= 00000000001eed40
ARG5= 0000000074643f54
ARG6= 00000000001eefb4
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001eedbc
ARG11= 00000000001ef008
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000007e
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001eee34
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eed9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee00
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000015040701
ARG2= 0000000000000001
ARG3= 0000000015040701
ARG4= 00000000001eeeb0
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000015040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedec
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 000000000000009e
ARG4= 000000000000002f
ARG5= 00000000001eefb0
ARG6= 00000000001eeeb0
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 0000000000000085
ARG10= 0000000000000020
ARG11= 000000000000009e
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb24
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eeb44
ARG3= 00000000001eeb54
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eea08
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eea04
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee848
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee940
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee620
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3c4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee3dc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee88c
RETURN ADDRESS=000000007735ca70
ARG0= 0000000003010699
ARG1= 000000000000008c
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 000000000000008c
ARG5= 00000000007507d0
ARG6= 00000000001ee990
ARG7= 00000000762e5f48
ARG8= 0000000003010699
ARG9= 000000000000008c
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef3c4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef3ac
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef358
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef378
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef388
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001ef3c0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001ef058
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eebb4
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eed3c
ARG3= 000000000064fa98
ARG4= 0000000000000001
ARG5= 00000000002830f8
ARG6= 00000000001eebec
ARG7= 0000000077621faf
ARG8= 0000000000277b50
ARG9= 00000000001eeda8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec34
RETURN ADDRESS=0000000077357265
ARG0= 0000000003010699
ARG1= 0000000000000060
ARG2= 00000000001eedbc
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001eec90
ARG6= 00000000771b7ca3
ARG7= 0000000003010699
ARG8= 0000000000000085
ARG9= 0000000000000020
ARG10= 00000000001ef158
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001eee34
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001eee34
ARG19= 0000000000000085
ARG20= 0000000000000085
ARG21= 00000000001eecc4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001eed18
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eed30
ARG2= 0000000000000044
ARG3= 00000000001eee34
ARG4= 00000000001eed40
ARG5= 0000000074643f54
ARG6= 00000000001eefb4
ARG7= 0000000074643efa
ARG8= 0000000003010699
ARG9= 0000000000000060
ARG10= 00000000001eedbc
ARG11= 00000000001ef008
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 00000000000000a5
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001eee34
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001eed9c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee00
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000016040701
ARG2= 0000000000000001
ARG3= 0000000016040701
ARG4= 00000000001eeeb0
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000016040701
ARG8= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eedec
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 00000000000000c5
ARG4= 000000000000002f
ARG5= 00000000001eefb0
ARG6= 00000000001eeeb0
ARG7= 00000000771b7d7f
ARG8= 0000000003010699
ARG9= 00000000000000ac
ARG10= 0000000000000020
ARG11= 00000000000000c5
ARG12= 000000000000002f
ARG13= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb24
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eeb44
ARG3= 00000000001eeb54
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a60c
ARG0= 0000000003010699
ARG1= 00000000001eea08
ARG2= 0000000077399140
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee9ec
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001eea04
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee848
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee940
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee620
RETURN ADDRESS=0000000077358128
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee3c4
RETURN ADDRESS=000000007735a59a
ARG0= 0000000003010699
ARG1= 00000000001ee3dc
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee88c
RETURN ADDRESS=000000007735ca70
ARG0= 0000000003010699
ARG1= 00000000000000b5
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 00000000000000b5
ARG5= 00000000007507d0
ARG6= 00000000001ee990
ARG7= 00000000762e5f48
ARG8= 0000000003010699
ARG9= 00000000000000b5
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001175, EDX=00000000001ef8ec
RETURN ADDRESS=00000000771b7ba7
ARG0= 00000000001ef958
ARG1= 0000000005e2e8b1
ARG2= 00000000771b8f97
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 0000000000000012
ARG1= 00000000001ef808
ARG2= 00000000760a0b8e
ARG3= 0000000000000012
ARG4= 0000000005d7f0fa
ARG5= 00000000203e0001
ARG6= 0000000000280840
ARG7= 0000000000000073
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 000000000000005b
ARG1= 00000000001ef808
ARG2= 00000000760a0ba6
ARG3= 000000000000005b
ARG4= 0000000005d7f0fa
ARG5= 00000000203e0001
ARG6= 0000000000280840
ARG7= 0000000000000073
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b4, EDX=00000000001ef7bc
RETURN ADDRESS=00000000771b5063
ARG0= 000000000000005c
ARG1= 00000000001ef808
ARG2= 00000000760a0bb0
ARG3= 000000000000005c
ARG4= 0000000005d7f0fa
ARG5= 00000000203e0001
ARG6= 0000000000280840
ARG7= 0000000000000073
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef7c4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125d, EDX=00000000001ef924
RETURN ADDRESS=00000000771d6b72
ARG0= 0000000000030142
ARG1= 00000000003a00df
ARG2= 00000000001ef958
ARG3= 00000000001ef974
ARG4= 0000000000a614bf
ARG5= 0000000000030142
ARG6= 00000000003a00df
ARG7= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125e, EDX=00000000001ef91c
RETURN ADDRESS=00000000771d6c4b
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef674
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000020144
ARG1= 0000000000000104
ARG2= 0000000000000073
ARG3= 00000000203e0001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef7e0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef800
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef7d8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef7f8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef7e0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000112
ARG3= 00000000001ef808
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 000000000000f060
ARG8= 00000000001ef854
ARG9= 0000000074641be3
ARG10= 0000000000030142
ARG11= 0000000000000112
ARG12= 000000000000f060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef728
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef748
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef728
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef748
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef730
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6dc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef6fc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6e4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef70c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000112
ARG8= 00000000001ef744
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000112
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 000000000000a918
ARG17= 00000000001ef758
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef68c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000112
ARG2= 000000000000f060
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011d1, EDX=00000000001ef4dc
RETURN ADDRESS=00000000771d6bdc
ARG0= 0000000000030142
ARG1= 00000000001ef4f0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000046, EDX=00000000001ef1cc
RETURN ADDRESS=0000000077614a5c
ARG0= 00000000001ef520
ARG1= 0000000002000000
ARG2= 00000000001ef1fc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000166, EDX=00000000001ef414
RETURN ADDRESS=0000000077615c5c
ARG0= 00000000000000f4
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000166, EDX=00000000001ef414
RETURN ADDRESS=0000000077615c5c
ARG0= 00000000000000f4
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000166, EDX=00000000001ef414
RETURN ADDRESS=0000000077615c5c
ARG0= 00000000000000f4
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000166, EDX=00000000001ef414
RETURN ADDRESS=0000000077615c5c
ARG0= 00000000000000f4
ARG1= 00000000001ef480
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef494
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000f4
ARG1= 0000000000000010
ARG2= 00000000001ef4e0
ARG3= 00000000772bfa6e
ARG4= 00000000001ef4e8
ARG5= 0000000005122e55
ARG6= 0000000000000010
ARG7= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001173, EDX=00000000001ef520
RETURN ADDRESS=00000000771ad5fb
ARG0= 000000000003013e
ARG1= 00000000001ef5b0
ARG2= 0000000000000010
ARG3= 00000000001ef560
ARG4= 00000000771b86ef
ARG5= 0000000000030142
ARG6= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef42c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef478
ARG2= 00000000760937b2
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef24c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef26c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef24c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef26c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef254
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef200
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef220
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef208
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001ef230
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef268
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
ARG12= 00000000ffffffff
ARG13= 0000000000000090
ARG14= 000000000003013e
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 000000000003013e
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a4, EDX=00000000001ef318
RETURN ADDRESS=00000000771b704d
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001093, EDX=00000000001ef20c
RETURN ADDRESS=0000000077357471
ARG0= 00000000ffffffff
ARG1= 000000000000005c
ARG2= 00000000001ef278
ARG3= 00000000001ef238
ARG4= 000000007735751f
ARG5= 00000000ffffffff
ARG6= 000000000000005c
ARG7= 00000000001ef278
ARG8= 000000000027f548
ARG9= 00000000001ef318
ARG10= 00000000747d7a68
ARG11= 00000000ffffffff
ARG12= 000000000000005c
ARG13= 00000000001ef278
ARG14= 00000000001ef320
ARG15= 00000000772062e3
ARG16= 00000000001ef270
ARG17= 00000000771b7308
ARG18= 000000000003013e
ARG19= 0000000000000090
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef2f8
RETURN ADDRESS=000000007735697e
ARG0= 000000003c0a070b
ARG1= 00000000ffffffff
ARG2= 000000000027f548
ARG3= 000000003c0a070b
ARG4= 0000000000003c0a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef304
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000009010196
ARG1= 000000000000003b
ARG2= 00000000001ef334
ARG3= 00000000747d427c
ARG4= 000000000003013e
ARG5= 0000000009010196
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef2f8
RETURN ADDRESS=00000000771b65b5
ARG0= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef24c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef26c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef24c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef26c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef254
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef200
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef220
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef208
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001ef230
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef268
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
ARG12= 00000000ffffffff
ARG13= 0000000000000002
ARG14= 000000000003013e
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 000000000003013e
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef374
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef394
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef244
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef264
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef244
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef264
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef24c
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef1f8
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef218
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef200
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 00000000001ef228
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef260
ARG9= 0000000074641e8a
ARG10= 000000000003013e
ARG11= 000000000003013e
ARG12= 00000000ffffffff
ARG13= 0000000000000082
ARG14= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef39c
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef370
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef378
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef3a0
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef3e8
ARG9= 0000000074641f96
ARG10= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef354
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef374
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef384
ARG4= 00000000746419fb
ARG5= 000000000003013e
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef39c
ARG9= 0000000074648e61
ARG10= 000000000003013e
ARG11= 00000000ffffffff
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef3e8
ARG15= 0000000074649029
ARG16= 000000000003013e
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef354
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a918
ARG2= 000000000003013e
ARG3= 000000007467a970
ARG4= 0000000000000002
ARG5= 00000000001ef384
ARG6= 0000000074648e2f
ARG7= 000000000003013e
ARG8= 000000000000a918
ARG9= 00000000ffffffff
ARG10= 00000000001ef39c
ARG11= 0000000074648e7b
ARG12= 000000000003013e
ARG13= 00000000ffffffff
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef3e8
ARG17= 0000000074649029
ARG18= 000000000003013e
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a912
ARG2= 000000000003013e
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648eb8
ARG7= 000000000003013e
ARG8= 000000000000a912
ARG9= 000000000003013e
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 000000000003013e
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 000000000003013e
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a916
ARG2= 000000000003013e
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ec6
ARG7= 000000000003013e
ARG8= 000000000000a916
ARG9= 000000000003013e
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 000000000003013e
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 000000000003013e
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a914
ARG2= 000000000003013e
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ece
ARG7= 000000000003013e
ARG8= 000000000000a914
ARG9= 000000000003013e
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 000000000003013e
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 000000000003013e
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 000000000003013e
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 000000000003013e
ARG9= 00000000001ef380
ARG10= 0000000074648edb
ARG11= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 000000000003013e
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 000000000003013e
ARG9= 00000000001ef380
ARG10= 0000000074648ee8
ARG11= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef340
RETURN ADDRESS=00000000771b77cd
ARG0= 000000000003013e
ARG1= 0000000000000001
ARG2= 00000000001ef360
ARG3= 0000000074641a62
ARG4= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7970
ARG0= 000000000003013e
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef374
ARG4= 000000007464900d
ARG5= 000000000003013e
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef380
ARG9= 000000007464909d
ARG10= 000000000003013e
ARG11= 00000000001ef390
ARG12= 000000007464906e
ARG13= 000000000003013e
ARG14= 0000000000000001
ARG15= 00000000001ef3a0
ARG16= 000000007464904a
ARG17= 000000000003013e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7a06
ARG0= 000000000003013e
ARG1= 000000000000a91a
ARG2= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001173, EDX=00000000001ef520
RETURN ADDRESS=00000000771ad5fb
ARG0= 0000000000030142
ARG1= 00000000001ef5b0
ARG2= 0000000000000010
ARG3= 00000000001ef560
ARG4= 00000000771b86ef
ARG5= 0000000000030142
ARG6= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef42c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef478
ARG2= 00000000760937b2
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef408
RETURN ADDRESS=00000000771b5a13
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001143, EDX=00000000001ef390
RETURN ADDRESS=00000000771b5703
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eed3c
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eed54
ARG1= 00000000001eed64
ARG2= 00000000001eed94
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eed54
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eed3c
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eed54
ARG1= 00000000001eed64
ARG2= 00000000001eed94
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eed54
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eed20
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eed50
ARG1= 00000000001eeda0
ARG2= 00000000001eedb0
ARG3= 00000000001eed94
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000118b, EDX=00000000001eed3c
RETURN ADDRESS=00000000771af0c3
ARG0= 00000000001eed54
ARG1= 00000000001eed64
ARG2= 00000000001eed94
ARG3= 0000000000000020
ARG4= 00000000000e000c
ARG5= 0000000077209e0c
ARG6= 00000000001eed54
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001208, EDX=00000000001eed20
RETURN ADDRESS=00000000771b0ec0
ARG0= 00000000001eed50
ARG1= 00000000001eeda0
ARG2= 00000000001eedb0
ARG3= 00000000001eed94
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef278
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef298
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef280
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2a8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef2e0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000090
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef364
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef384
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef37c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef364
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000046
ARG3= 00000000001ef38c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef360
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef380
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef368
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef364
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef384
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef37c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef364
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000047
ARG3= 00000000001ef38c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef290
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000047
ARG8= 00000000001ef2c8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000047
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef2dc
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef360
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef380
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef368
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef49c
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000020146
ARG1= 000000000000000d
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001ef494
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000020146
ARG1= 0000000000000006
ARG2= 0000000000000064
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2e4
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2cc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef278
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef298
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef280
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2a8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000086
ARG8= 00000000001ef2e0
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000086
ARG14= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ea, EDX=00000000001ef21c
RETURN ADDRESS=00000000771b732e
ARG0= 0000000000030142
ARG1= 0000000000000086
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef088
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f598
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef0e0
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f598
ARG8= 0000000000000104
ARG9= 00000000069afeb9
ARG10= 00000000001ef1dc
ARG11= 000000000056da84
ARG12= 000000000056da60
ARG13= 00000000001ef364
ARG14= 00000000001ef0b4
ARG15= 0000000000652450
ARG16= 00000000001ef398
ARG17= 000000007467371f
ARG18= 0000000072e0df01
ARG19= 00000000fffffffe
ARG20= 00000000001ef104
ARG21= 000000007464d247
ARG22= 000000000056f598
ARG23= 000000000056da60
ARG24= 00000000480a0759
ARG25= 000000000056da60
ARG26= 000000007467a1c8
ARG27= 00000000001ef110
ARG28= 000000007464d1b9
ARG29= 00000000001ef1e4
ARG30= 000000007464d212
ARG31= 0000000000010000
ARG32= 0000000000030142
ARG33= 00000000480a0759
ARG34= 00000000001ef1d4
ARG35= 00000000001ef2b0
ARG36= 00000000001ef30c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011cf, EDX=00000000001ef0dc
RETURN ADDRESS=00000000771b68f6
ARG0= 0000000000030142
ARG1= 00000000001ef1dc
ARG2= 000000000056da60
ARG3= 00000000480a0759
ARG4= 000000000056da60
ARG5= 000000007467a1c8
ARG6= 00000000001ef110
ARG7= 000000000056f598
ARG8= 00000000001ef1e4
ARG9= 000000007464d212
ARG10= 0000000000010000
ARG11= 0000000000030142
ARG12= 00000000480a0759
ARG13= 00000000001ef1d4
ARG14= 00000000001ef2b0
ARG15= 00000000001ef30c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eef5c
RETURN ADDRESS=0000000077357c77
ARG0= 0000000003010699
ARG1= 0000000017040701
ARG2= 0000000000000001
ARG3= 0000000017040701
ARG4= 00000000001ef00c
ARG5= 00000000771b7d50
ARG6= 0000000003010699
ARG7= 0000000017040701
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eef48
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010a6, EDX=00000000001eef28
RETURN ADDRESS=0000000077357f8a
ARG0= 0000000003010699
ARG1= 00000000001eef60
ARG2= 00000000771b8079
ARG3= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeda8
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eedc8
ARG3= 00000000001eedd8
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eedc0
RETURN ADDRESS=0000000077357be3
ARG0= 0000000003010699
ARG1= 0000000000000007
ARG2= 00000000001eede0
ARG3= 00000000001eedf0
ARG4= 0000000077357c56
ARG5= 0000000003010699
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001094, EDX=00000000001eef48
RETURN ADDRESS=0000000077357c8b
ARG0= 0000000003010699
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef0c4
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000003010699
ARG1= 000000000000003b
ARG2= 00000000001ef104
ARG3= 000000007464d2c0
ARG4= 0000000000030142
ARG5= 0000000003010699
ARG6= 000000000056da84
ARG7= 00000000001ef1dc
ARG8= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef0f8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da84
ARG3= 00000000001ef1e4
ARG4= 000000007464d220
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 00000000001ef2b0
ARG8= 00000000001ef30c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125b, EDX=00000000001eeedc
RETURN ADDRESS=00000000771b6c2d
ARG0= 0000000000030142
ARG1= 0000000000000008
ARG2= 0000000000000008
ARG3= 000000000000001e
ARG4= 000000000056db28
ARG5= 00000000480a0759
ARG6= 000000000056da84
ARG7= 000000000056da60
ARG8= 0000000000030142
ARG9= 00000000001ef128
ARG10= 00000000000001f8
ARG11= 0000000000000001
ARG12= 0000000000000011
ARG13= 0000000000000011
ARG14= 0000000000000015
ARG15= 0000000000000015
ARG16= 00000000fffffff4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eec98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eec98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eec2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eec4c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eec34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eec5c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eec94
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eeca8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eebb8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eebd8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eebc0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001eeec8
ARG3= 00000000001eebe8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001eee00
ARG8= 00000000001eec2c
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001eeec8
ARG12= 00000000001eec08
ARG13= 0000000000000011
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 00000000762d78bb
ARG17= 00000000762d7960
ARG18= 00000000007507d0
ARG19= 00000000007508f4
ARG20= 00000000007507d0
ARG21= 0000000000000012
ARG22= 00000000771b7796
ARG23= 0000000005e2fdd1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c8, EDX=00000000001ef09c
RETURN ADDRESS=00000000771b6bc2
ARG0= 0000000000030142
ARG1= 00000000001ef0e4
ARG2= 000000000056dac8
ARG3= 000000000056da84
ARG4= 0000000000000190
ARG5= 0000000001000000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011a5, EDX=00000000001ef1d8
RETURN ADDRESS=00000000771b4522
ARG0= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000108e, EDX=00000000001ef1c0
RETURN ADDRESS=000000007735909d
ARG0= 00000000040101bc
ARG1= 0000000000000008
ARG2= 000000000000001e
ARG3= 0000000000000250
ARG4= 0000000000000188
ARG5= 000000000056dd08
ARG6= 00000000001ef2c8
ARG7= 00000000746474ef
ARG8= 00000000040101bc
ARG9= 0000000000000008
ARG10= 000000000000001e
ARG11= 0000000000000250
ARG12= 0000000000000188
ARG13= 000000000056da60
ARG14= 00000000001ef30c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed40
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeec8
ARG3= 0000000000633ed8
ARG4= 00000000001eed90
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc11
ARG8= 00000000001eef08
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed40
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeec8
ARG3= 0000000000634068
ARG4= 00000000001eed90
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc11
ARG8= 00000000001eef08
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eed40
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeec8
ARG3= 00000000006341f8
ARG4= 00000000001eed90
ARG5= 00000000771b8565
ARG6= 00000000771b846d
ARG7= 0000000005e2fc11
ARG8= 00000000001eef08
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef128
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 000000000056da60
ARG3= 00000000001ef1e0
ARG4= 0000000074652b55
ARG5= 0000000000030142
ARG6= 000000000000a914
ARG7= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000101f, EDX=00000000001eecc4
RETURN ADDRESS=00000000773573c6
ARG0= 00000000040101bc
ARG1= 0000000000000258
ARG2= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001020, EDX=00000000001ef12c
RETURN ADDRESS=0000000077356598
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef118
RETURN ADDRESS=0000000077356350
ARG0= 0000000015010727
ARG1= 000000001f050299
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 0000000000633430
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 000000000063c190
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 000000000063c308
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 0000000000638600
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 0000000000638778
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 0000000000635fd0
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eec90
RETURN ADDRESS=0000000077357265
ARG0= 0000000015010727
ARG1= 0000000000000060
ARG2= 00000000001eee18
ARG3= 0000000000636148
ARG4= 00000000001eeec8
ARG5= 00000000001eecf4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011dc, EDX=00000000001ef0e8
RETURN ADDRESS=00000000771b6931
ARG0= 0000000000030142
ARG1= 000000000056f5c0
ARG2= 0000000000000104
ARG3= 0000000000000104
ARG4= 00000000001ef140
ARG5= 000000007464d13f
ARG6= 0000000000030142
ARG7= 000000000056f5c0
ARG8= 0000000000000104
ARG9= 00000000069aff19
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001eee58
RETURN ADDRESS=0000000077357c77
ARG0= 0000000015010727
ARG1= 0000000018040701
ARG2= 0000000000000001
ARG3= 0000000018040701
ARG4= 00000000001eef08
ARG5= 00000000771b7d50
ARG6= 0000000015010727
ARG7= 0000000018040701
ARG8= 0000000015010727
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001eee44
RETURN ADDRESS=0000000077357d0d
ARG0= 0000000015010727
ARG1= 000000000000001e
ARG2= 000000000000000b
ARG3= 00000000000001ea
ARG4= 000000000000001b
ARG5= 00000000001ef008
ARG6= 00000000001eef08
ARG7= 00000000771b7d7f
ARG8= 0000000015010727
ARG9= 000000000000001e
ARG10= 000000000000000b
ARG11= 00000000000001ea
ARG12= 000000000000001b
ARG13= 0000000015010727
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb6c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000015010727
ARG1= 0000000000000007
ARG2= 00000000001eeb8c
ARG3= 00000000001eeb9c
ARG4= 0000000077357c56
ARG5= 0000000015010727
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001eeb7c
RETURN ADDRESS=0000000077357be3
ARG0= 0000000015010727
ARG1= 0000000000000007
ARG2= 00000000001eeb9c
ARG3= 00000000001eebac
ARG4= 0000000077357c56
ARG5= 0000000015010727
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee7a8
RETURN ADDRESS=0000000077358128
ARG0= 0000000015010727
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ef0b0
RETURN ADDRESS=0000000077357be3
ARG0= 0000000015010727
ARG1= 0000000000000007
ARG2= 00000000001ef0d0
ARG3= 00000000001ef0e0
ARG4= 0000000077357c56
ARG5= 0000000015010727
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000117d, EDX=00000000001ef0c4
RETURN ADDRESS=00000000771b4ceb
ARG0= 0000000015010727
ARG1= 000000000000000a
ARG2= 000000000000000a
ARG3= 0000000000070124
ARG4= 0000000000000010
ARG5= 0000000000000010
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001123, EDX=00000000001ef11c
RETURN ADDRESS=000000007735a237
ARG0= 0000000015010727
ARG1= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000100e, EDX=00000000001ef0dc
RETURN ADDRESS=0000000077357209
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000110b, EDX=00000000001ef118
RETURN ADDRESS=0000000077356350
ARG0= 0000000015010727
ARG1= 000000000185000f
ARG2= 0000000015010727
ARG3= 000000000056da60
ARG4= 000000000056da84
ARG5= 000000000000000f
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef10c
RETURN ADDRESS=000000007735697e
ARG0= 0000000015010727
ARG1= 0000000015010727
ARG2= 000000000056da60
ARG3= 000000000056da84
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef120
RETURN ADDRESS=000000007735697e
ARG0= 000000001f050299
ARG1= 0000000015010727
ARG2= 000000000056da60
ARG3= 000000000056da84
ARG4= 0000000000001f05
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000125c, EDX=00000000001ef1dc
RETURN ADDRESS=00000000771ad480
ARG0= 0000000000030142
ARG1= 00000000040101bc
ARG2= 0000000000000008
ARG3= 0000000000000008
ARG4= 000000000000001e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef4c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef5c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000093
ARG8= 00000000001eef94
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000093
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eefa8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeeb8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeed8
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 00000000001ef1c8
ARG3= 00000000001eeee8
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 00000000001ef100
ARG8= 00000000001eef2c
ARG9= 0000000074651c96
ARG10= 0000000000030142
ARG11= 00000000001ef1c8
ARG12= 000000000056c398
ARG13= 0000000000000011
ARG14= 0000000000030142
ARG15= 0000000000030142
ARG16= 00000000001eef2c
ARG17= 00000000771b7bfb
ARG18= 0000000015010727
ARG19= 00000000ffffffff
ARG20= 0000000000000012
ARG21= 00000000001eeff8
ARG22= 00000000771b7796
ARG23= 0000000005e2fed1
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef78
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef98
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef80
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef2c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef4c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef34
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eef5c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000091
ARG8= 00000000001eef94
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000091
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eefa8
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eeeb4
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001eea10
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001eeb98
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eef28
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef3c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eebc0
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee79c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee924
ARG3= 000000000064fc58
ARG4= 00000000001ee80c
ARG5= 00000000001ee81c
ARG6= 0000000000750c30
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee880
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee898
ARG2= 0000000000000044
ARG3= 00000000001ee99c
ARG4= 00000000001ee8a8
ARG5= 0000000074643f54
ARG6= 00000000001eeb1c
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001ee924
ARG11= 00000000001eeb70
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000008
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee99c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee904
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee968
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 0000000019040701
ARG2= 0000000000000001
ARG3= 0000000019040701
ARG4= 00000000001eea18
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 0000000019040701
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee954
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000000021
ARG4= 000000000000002f
ARG5= 00000000001eeb18
ARG6= 00000000001eea18
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000000f
ARG10= 0000000000000020
ARG11= 0000000000000021
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee68c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee6ac
ARG3= 00000000001ee6bc
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee554
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee570
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee554
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee56c
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
ARG1= 000000000000000f
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee4a8
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee188
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edf2c
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001edf44
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102b, EDX=00000000001ee3f8
RETURN ADDRESS=000000007735ca18
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735ca70
ARG0= 00000000040101bc
ARG1= 0000000000000015
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 0000000000000015
ARG5= 00000000007507d0
ARG6= 00000000001ee4f8
ARG7= 00000000762e5f48
ARG8= 00000000040101bc
ARG9= 0000000000000015
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eef28
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef3c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eebc0
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee79c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee924
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee7f8
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000000f
ARG9= 0000000000000020
ARG10= 00000000001eecc0
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001ee99c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee99c
ARG19= 000000000000000f
ARG20= 000000000000000f
ARG21= 00000000001ee82c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee880
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee898
ARG2= 0000000000000044
ARG3= 00000000001ee99c
ARG4= 00000000001ee8a8
ARG5= 0000000074643f54
ARG6= 00000000001eeb1c
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001ee924
ARG11= 00000000001eeb70
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 0000000000000028
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee99c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee904
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee968
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001a040701
ARG2= 0000000000000001
ARG3= 000000001a040701
ARG4= 00000000001eea18
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001a040701
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee954
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000000043
ARG4= 000000000000002f
ARG5= 00000000001eeb18
ARG6= 00000000001eea18
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 000000000000002f
ARG10= 0000000000000020
ARG11= 0000000000000043
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee68c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee6ac
ARG3= 00000000001ee6bc
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee554
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee570
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee554
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee56c
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
ARG1= 000000000000002f
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee4a8
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee188
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edf2c
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001edf44
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000102b, EDX=00000000001ee3f8
RETURN ADDRESS=000000007735ca18
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735ca70
ARG0= 00000000040101bc
ARG1= 0000000000000035
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 0000000000000035
ARG5= 00000000007507d0
ARG6= 00000000001ee4f8
ARG7= 00000000762e5f48
ARG8= 00000000040101bc
ARG9= 0000000000000035
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eef28
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef3c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eebc0
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee79c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee924
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee7f8
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 000000000000002f
ARG9= 0000000000000020
ARG10= 00000000001eecc0
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001ee99c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee99c
ARG19= 000000000000002f
ARG20= 000000000000002f
ARG21= 00000000001ee82c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee880
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee898
ARG2= 0000000000000044
ARG3= 00000000001ee99c
ARG4= 00000000001ee8a8
ARG5= 0000000074643f54
ARG6= 00000000001eeb1c
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001ee924
ARG11= 00000000001eeb70
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000004a
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee99c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee904
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee968
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001b040701
ARG2= 0000000000000001
ARG3= 000000001b040701
ARG4= 00000000001eea18
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001b040701
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee954
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000000077
ARG4= 000000000000002f
ARG5= 00000000001eeb18
ARG6= 00000000001eea18
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000051
ARG10= 0000000000000020
ARG11= 0000000000000077
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee68c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee6ac
ARG3= 00000000001ee6bc
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee554
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee570
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee554
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee56c
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
ARG1= 0000000000000051
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee4a8
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee188
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edf2c
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001edf44
ARG2= 0000000000000044
ARG3= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735ca70
ARG0= 00000000040101bc
ARG1= 000000000000005e
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 000000000000005e
ARG5= 00000000007507d0
ARG6= 00000000001ee4f8
ARG7= 00000000762e5f48
ARG8= 00000000040101bc
ARG9= 000000000000005e
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eef28
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef3c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eebc0
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee79c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee924
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee7f8
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000051
ARG9= 0000000000000020
ARG10= 00000000001eecc0
ARG11= 0000000000000007
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001ee99c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000007
ARG18= 00000000001ee99c
ARG19= 0000000000000051
ARG20= 0000000000000051
ARG21= 00000000001ee82c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee880
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee898
ARG2= 0000000000000044
ARG3= 00000000001ee99c
ARG4= 00000000001ee8a8
ARG5= 0000000074643f54
ARG6= 00000000001eeb1c
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001ee924
ARG11= 00000000001eeb70
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 000000000000007e
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee99c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee904
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee968
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001c040701
ARG2= 0000000000000001
ARG3= 000000001c040701
ARG4= 00000000001eea18
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001c040701
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee954
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 000000000000009e
ARG4= 000000000000002f
ARG5= 00000000001eeb18
ARG6= 00000000001eea18
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 0000000000000085
ARG10= 0000000000000020
ARG11= 000000000000009e
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee68c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee6ac
ARG3= 00000000001ee6bc
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee554
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee570
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee554
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee56c
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
ARG1= 0000000000000085
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee4a8
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee188
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edf2c
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001edf44
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735ca70
ARG0= 00000000040101bc
ARG1= 000000000000008c
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 000000000000008c
ARG5= 00000000007507d0
ARG6= 00000000001ee4f8
ARG7= 00000000762e5f48
ARG8= 00000000040101bc
ARG9= 000000000000008c
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eef0c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eef2c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eef14
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeec0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001eeee0
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001eeec8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001eeef0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000092
ARG8= 00000000001eef28
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000092
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001eef3c
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b6, EDX=00000000001eebc0
RETURN ADDRESS=00000000771ad3a6
ARG0= 0000000000030142
ARG1= 00000000fffffffd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee71c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee8a4
ARG3= 000000000064fa98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000012db, EDX=00000000001ee79c
RETURN ADDRESS=0000000077357265
ARG0= 00000000040101bc
ARG1= 0000000000000060
ARG2= 00000000001ee924
ARG3= 000000000064fc58
ARG4= 00000000ffffffff
ARG5= 00000000001ee7f8
ARG6= 00000000771b7ca3
ARG7= 00000000040101bc
ARG8= 0000000000000085
ARG9= 0000000000000020
ARG10= 00000000001eecc0
ARG11= 0000000000000005
ARG12= 0000000000000001
ARG13= 0000000000000020
ARG14= 00000000001ee99c
ARG15= 0000000000000001
ARG16= 00000000ffffffff
ARG17= 0000000000000005
ARG18= 00000000001ee99c
ARG19= 0000000000000085
ARG20= 0000000000000085
ARG21= 00000000001ee82c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee880
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee898
ARG2= 0000000000000044
ARG3= 00000000001ee99c
ARG4= 00000000001ee8a8
ARG5= 0000000074643f54
ARG6= 00000000001eeb1c
ARG7= 0000000074643efa
ARG8= 00000000040101bc
ARG9= 0000000000000060
ARG10= 00000000001ee924
ARG11= 00000000001eeb70
ARG12= 000000000064fd0c
ARG13= 0000000074643f3a
ARG14= 00000000000000a5
ARG15= 000000000000001e
ARG16= 0000000000200910
ARG17= 00000000001ee99c
ARG18= 0000000077399140
ARG19= 000000005a0a0753
ARG20= 00000000001ee904
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010c9, EDX=00000000001ee968
RETURN ADDRESS=0000000077357c77
ARG0= 00000000040101bc
ARG1= 000000001d040701
ARG2= 0000000000000001
ARG3= 000000001d040701
ARG4= 00000000001eea18
ARG5= 00000000771b7d50
ARG6= 00000000040101bc
ARG7= 000000001d040701
ARG8= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010e8, EDX=00000000001ee954
RETURN ADDRESS=0000000077357d0d
ARG0= 00000000040101bc
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 00000000000000c5
ARG4= 000000000000002f
ARG5= 00000000001eeb18
ARG6= 00000000001eea18
ARG7= 00000000771b7d7f
ARG8= 00000000040101bc
ARG9= 00000000000000ac
ARG10= 0000000000000020
ARG11= 00000000000000c5
ARG12= 000000000000002f
ARG13= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ac, EDX=00000000001ee68c
RETURN ADDRESS=0000000077357be3
ARG0= 00000000040101bc
ARG1= 0000000000000007
ARG2= 00000000001ee6ac
ARG3= 00000000001ee6bc
ARG4= 0000000077357c56
ARG5= 00000000040101bc
ARG6= 0000000000000007
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010cb, EDX=00000000001ee554
RETURN ADDRESS=000000007735a60c
ARG0= 00000000040101bc
ARG1= 00000000001ee570
ARG2= 0000000077399140
ARG3= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001ee554
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001ee56c
ARG2= 0000000000000044
ARG3= 00000000007508f4
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee3b0
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
ARG1= 00000000000000ac
ARG2= 0000000000000020
ARG3= 0000000000001004
ARG4= 00000000001ee4a8
ARG5= 00000000762d5e00
ARG6= 0000000000000001
ARG7= 00000000007508e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001095, EDX=00000000001ee188
RETURN ADDRESS=0000000077358128
ARG0= 00000000040101bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010d9, EDX=00000000001edf2c
RETURN ADDRESS=000000007735a59a
ARG0= 00000000040101bc
ARG1= 00000000001edf44
ARG2= 0000000000000044
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000010ea, EDX=00000000001ee3f4
RETURN ADDRESS=000000007735ca70
ARG0= 00000000040101bc
ARG1= 00000000000000b5
ARG2= 000000000000002d
ARG3= 000000000000002d
ARG4= 00000000000000b5
ARG5= 00000000007507d0
ARG6= 00000000001ee4f8
ARG7= 00000000762e5f48
ARG8= 00000000040101bc
ARG9= 00000000000000b5
ARG10= 000000000000002d
ARG11= 00000000007507d0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef1dc
RETURN ADDRESS=00000000771bf0ab
ARG0= 00000000040101bc
ARG1= 000000000000003b
ARG2= 00000000001ef2c8
ARG3= 000000007464763f
ARG4= 0000000000030142
ARG5= 00000000040101bc
ARG6= 000000000056da60
ARG7= 00000000001ef30c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef378
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011ad, EDX=00000000001ef1e0
RETURN ADDRESS=00000000762b2e4c
ARG0= 00000000001ef20c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001207, EDX=00000000001ef2e4
RETURN ADDRESS=00000000771b52ae
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001ef2ec
RETURN ADDRESS=00000000771bf0ca
ARG0= 0000000000000006
ARG1= 0000000074802fbe
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef080
RETURN ADDRESS=00000000771b5a13
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001eefe0
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef028
ARG2= 00000000760932ff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef01c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef06c
ARG2= 00000000760932a5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef0dc
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef088
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeeb8
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001eef34
ARG3= 00000000771b4780
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001eec0c
RETURN ADDRESS=00000000771b93cb
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001eecb8
ARG3= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000123d, EDX=00000000001eec04
RETURN ADDRESS=00000000771b77e1
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 000000000000012c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114d, EDX=00000000001eed54
RETURN ADDRESS=00000000771bf0ca
ARG0= 0000000000000009
ARG1= 0000000000000282
ARG2= 0000000000000281
ARG3= 0000000000a9f468
ARG4= 0000000000000281
ARG5= 0000000000070130
ARG6= 0000000000000281
ARG7= 0000000000a9f468
ARG8= 000000000027ff18
ARG9= 000000000064fa90
ARG10= 00000000001eeda4
ARG11= 0000000074643805
ARG12= 00000000762b1591
ARG13= 00000000001eedb8
ARG14= 00000000771b3612
ARG15= 0000000000020144
ARG16= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed50
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000004
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 000000000027ff18
ARG10= 000000000064fa90
ARG11= 00000000001eeda4
ARG12= 0000000074643805
ARG13= 00000000762b1591
ARG14= 00000000001eedb8
ARG15= 00000000771b3612
ARG16= 0000000000020144
ARG17= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eed50
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000003
ARG2= 0000000000000282
ARG3= 0000000000000281
ARG4= 0000000000a9f468
ARG5= 0000000000000281
ARG6= 0000000000070130
ARG7= 0000000000000281
ARG8= 0000000000a9f468
ARG9= 000000000027ff18
ARG10= 000000000064fa90
ARG11= 00000000001eeda4
ARG12= 0000000074643805
ARG13= 00000000762b1591
ARG14= 00000000001eedb8
ARG15= 00000000771b3612
ARG16= 0000000000020144
ARG17= 0000000000000281
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001eeb08
RETURN ADDRESS=00000000762b2b47
ARG0= 0000000000020144
ARG1= 0000000000000008
ARG2= 00000000001eeb84
ARG3= 00000000771b4a9a
ARG4= 0000000000020144
ARG5= 0000000000000001
ARG6= 000000000027e758
ARG7= 0000000000000200
ARG8= 000000000056df30
ARG9= 00000000040101bc
ARG10= 0000000000000004
ARG11= 00000000001eeb70
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3a4
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef42c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef478
ARG2= 00000000760937b2
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001142, EDX=00000000001ef384
RETURN ADDRESS=00000000762b40ca
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001260, EDX=00000000001ef380
RETURN ADDRESS=00000000771ad930
ARG0= 000000000001014c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef308
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000020000
ARG2= 00000000001ef378
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000027, EDX=00000000001ef308
RETURN ADDRESS=000000007761486c
ARG0= 00000000000000e4
ARG1= 0000000000010000
ARG2= 00000000001ef37c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef41c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e4
ARG1= 0000000000280e60
ARG2= 0000000076097838
ARG3= 0000000000280e60
ARG4= 0000000076097807
ARG5= 0000000000070130
ARG6= 00000000760977da
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef414
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
ARG6= 0000000000280e60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fa, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b914b
ARG0= 00000000001ef3f8
ARG1= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001173, EDX=00000000001ef41c
RETURN ADDRESS=00000000771ad5fb
ARG0= 0000000000020146
ARG1= 0000000000280e60
ARG2= 0000000000280e60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef184
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef1a4
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef184
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef1a4
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef18c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef138
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef158
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef140
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000020146
ARG3= 00000000001ef168
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef1a0
ARG9= 0000000074641e8a
ARG10= 0000000000020146
ARG11= 0000000000020146
ARG12= 00000000ffffffff
ARG13= 0000000000000090
ARG14= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef270
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef290
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef268
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef288
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef270
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef298
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef17c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef19c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef17c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef19c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef184
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef130
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef150
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef138
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000020146
ARG3= 00000000001ef160
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef198
ARG9= 0000000074641e8a
ARG10= 0000000000020146
ARG11= 0000000000020146
ARG12= 00000000ffffffff
ARG13= 0000000000000082
ARG14= 0000000000020146
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 0000000000020146
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef278
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef298
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef26c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef28c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef274
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef29c
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef2e4
ARG9= 0000000074641f96
ARG10= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef250
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef270
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef258
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef280
ARG4= 00000000746419fb
ARG5= 0000000000020146
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef298
ARG9= 0000000074648e61
ARG10= 0000000000020146
ARG11= 00000000ffffffff
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef2e4
ARG15= 0000000074649029
ARG16= 0000000000020146
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef250
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020146
ARG1= 000000000000a918
ARG2= 0000000000020146
ARG3= 000000007467a970
ARG4= 0000000000000002
ARG5= 00000000001ef280
ARG6= 0000000074648e2f
ARG7= 0000000000020146
ARG8= 000000000000a918
ARG9= 00000000ffffffff
ARG10= 00000000001ef298
ARG11= 0000000074648e7b
ARG12= 0000000000020146
ARG13= 00000000ffffffff
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef2e4
ARG17= 0000000074649029
ARG18= 0000000000020146
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020146
ARG1= 000000000000a912
ARG2= 0000000000020146
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef27c
ARG6= 0000000074648eb8
ARG7= 0000000000020146
ARG8= 000000000000a912
ARG9= 0000000000020146
ARG10= 00000000ffffffff
ARG11= 00000000001ef298
ARG12= 0000000074648e94
ARG13= 0000000000020146
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef2e4
ARG19= 0000000074649029
ARG20= 0000000000020146
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020146
ARG1= 000000000000a916
ARG2= 0000000000020146
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef27c
ARG6= 0000000074648ec6
ARG7= 0000000000020146
ARG8= 000000000000a916
ARG9= 0000000000020146
ARG10= 00000000ffffffff
ARG11= 00000000001ef298
ARG12= 0000000074648e94
ARG13= 0000000000020146
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef2e4
ARG19= 0000000074649029
ARG20= 0000000000020146
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020146
ARG1= 000000000000a914
ARG2= 0000000000020146
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef27c
ARG6= 0000000074648ece
ARG7= 0000000000020146
ARG8= 000000000000a914
ARG9= 0000000000020146
ARG10= 00000000ffffffff
ARG11= 00000000001ef298
ARG12= 0000000074648e94
ARG13= 0000000000020146
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef2e4
ARG19= 0000000074649029
ARG20= 0000000000020146
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef234
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef260
ARG4= 0000000074648f19
ARG5= 0000000000020146
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000020146
ARG9= 00000000001ef27c
ARG10= 0000000074648edb
ARG11= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef234
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef260
ARG4= 0000000074648f19
ARG5= 0000000000020146
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000020146
ARG9= 00000000001ef27c
ARG10= 0000000074648ee8
ARG11= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef23c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020146
ARG1= 0000000000000001
ARG2= 00000000001ef25c
ARG3= 0000000074641a62
ARG4= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef248
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020146
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef270
ARG4= 000000007464900d
ARG5= 0000000000020146
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef27c
ARG9= 000000007464909d
ARG10= 0000000000020146
ARG11= 00000000001ef28c
ARG12= 000000007464906e
ARG13= 0000000000020146
ARG14= 0000000000000001
ARG15= 00000000001ef29c
ARG16= 000000007464904a
ARG17= 0000000000020146
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef25c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020146
ARG1= 000000000000a91a
ARG2= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef414
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
ARG6= 0000000000000018
ARG7= 00000000001ef468
ARG8= 00000000776163e0
ARG9= 0000000000aa0410
ARG10= 0000000000000082
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fa, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b914b
ARG0= 00000000001ef3f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef414
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fa, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b914b
ARG0= 00000000001ef3f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d8
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef414
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fa, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b914b
ARG0= 00000000001ef3f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef3d0
RETURN ADDRESS=00000000771bf0ab
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef284
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2a4
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef284
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef2a4
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef28c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef238
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef258
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef240
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000070130
ARG3= 00000000001ef268
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef2a0
ARG9= 0000000074641e8a
ARG10= 0000000000070130
ARG11= 0000000000070130
ARG12= 00000000ffffffff
ARG13= 0000000000000090
ARG14= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011c7, EDX=00000000001ef42c
RETURN ADDRESS=00000000762b13ec
ARG0= 0000000000000003
ARG1= 00000000001ef478
ARG2= 00000000760937b2
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef2d4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef2d4
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef268
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef288
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef270
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000010150
ARG3= 00000000001ef298
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef2d0
ARG9= 0000000074641e8a
ARG10= 0000000000010150
ARG11= 0000000000010150
ARG12= 00000000ffffffff
ARG13= 0000000000000090
ARG14= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef368
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef368
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef368
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef368
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef348
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000010150
ARG1= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef340
RETURN ADDRESS=000000007735697e
ARG0= 00000000060a06db
ARG1= 00000000001ef444
ARG2= 00000000002856e8
ARG3= 00000000773568b4
ARG4= 000000000000060a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef340
RETURN ADDRESS=000000007735697e
ARG0= 00000000050a0710
ARG1= 000000000028587c
ARG2= 00000000002856e8
ARG3= 00000000773568b4
ARG4= 000000000000050a
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef330
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef330
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011e2, EDX=00000000001ef330
RETURN ADDRESS=00000000771b93cb
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef374
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef394
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2ac
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef2cc
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2b4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef260
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef280
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef268
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000010150
ARG3= 00000000001ef290
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef2c8
ARG9= 0000000074641e8a
ARG10= 0000000000010150
ARG11= 0000000000010150
ARG12= 00000000ffffffff
ARG13= 0000000000000082
ARG14= 0000000000010150
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 0000000000010150
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef39c
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef370
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef378
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef3a0
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef3e8
ARG9= 0000000074641f96
ARG10= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef354
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef374
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef384
ARG4= 00000000746419fb
ARG5= 0000000000010150
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef39c
ARG9= 0000000074648e61
ARG10= 0000000000010150
ARG11= 00000000ffffffff
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef3e8
ARG15= 0000000074649029
ARG16= 0000000000010150
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef354
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000010150
ARG1= 000000000000a918
ARG2= 0000000000010150
ARG3= 000000007467a970
ARG4= 0000000000000002
ARG5= 00000000001ef384
ARG6= 0000000074648e2f
ARG7= 0000000000010150
ARG8= 000000000000a918
ARG9= 00000000ffffffff
ARG10= 00000000001ef39c
ARG11= 0000000074648e7b
ARG12= 0000000000010150
ARG13= 00000000ffffffff
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef3e8
ARG17= 0000000074649029
ARG18= 0000000000010150
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000010150
ARG1= 000000000000a912
ARG2= 0000000000010150
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648eb8
ARG7= 0000000000010150
ARG8= 000000000000a912
ARG9= 0000000000010150
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000010150
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000010150
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000010150
ARG1= 000000000000a916
ARG2= 0000000000010150
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ec6
ARG7= 0000000000010150
ARG8= 000000000000a916
ARG9= 0000000000010150
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000010150
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000010150
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000010150
ARG1= 000000000000a914
ARG2= 0000000000010150
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ece
ARG7= 0000000000010150
ARG8= 000000000000a914
ARG9= 0000000000010150
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000010150
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000010150
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000010150
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000010150
ARG9= 00000000001ef380
ARG10= 0000000074648edb
ARG11= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000010150
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000010150
ARG9= 00000000001ef380
ARG10= 0000000074648ee8
ARG11= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef340
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000010150
ARG1= 0000000000000001
ARG2= 00000000001ef360
ARG3= 0000000074641a62
ARG4= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000010150
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef374
ARG4= 000000007464900d
ARG5= 0000000000010150
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef380
ARG9= 000000007464909d
ARG10= 0000000000010150
ARG11= 00000000001ef390
ARG12= 000000007464906e
ARG13= 0000000000010150
ARG14= 0000000000000001
ARG15= 00000000001ef3a0
ARG16= 000000007464904a
ARG17= 0000000000010150
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000010150
ARG1= 000000000000a91a
ARG2= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001143, EDX=00000000001ef318
RETURN ADDRESS=00000000771b5703
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef374
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef394
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001241, EDX=00000000001ef384
RETURN ADDRESS=00000000771b3dd9
ARG0= 0000000000070130
ARG1= 0000000000004000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef27c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef29c
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef27c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef29c
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef284
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef230
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef250
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef238
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000070130
ARG3= 00000000001ef260
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef298
ARG9= 0000000074641e8a
ARG10= 0000000000070130
ARG11= 0000000000070130
ARG12= 00000000ffffffff
ARG13= 0000000000000082
ARG14= 0000000000070130
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 0000000000070130
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef39c
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef370
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef378
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef3a0
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef3e8
ARG9= 0000000074641f96
ARG10= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef354
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef374
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef384
ARG4= 00000000746419fb
ARG5= 0000000000070130
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef39c
ARG9= 0000000074648e61
ARG10= 0000000000070130
ARG11= 00000000ffffffff
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef3e8
ARG15= 0000000074649029
ARG16= 0000000000070130
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef354
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000070130
ARG1= 000000000000a918
ARG2= 0000000000070130
ARG3= 000000007467a970
ARG4= 0000000000000002
ARG5= 00000000001ef384
ARG6= 0000000074648e2f
ARG7= 0000000000070130
ARG8= 000000000000a918
ARG9= 00000000ffffffff
ARG10= 00000000001ef39c
ARG11= 0000000074648e7b
ARG12= 0000000000070130
ARG13= 00000000ffffffff
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef3e8
ARG17= 0000000074649029
ARG18= 0000000000070130
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000070130
ARG1= 000000000000a912
ARG2= 0000000000070130
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648eb8
ARG7= 0000000000070130
ARG8= 000000000000a912
ARG9= 0000000000070130
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000070130
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000070130
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000070130
ARG1= 000000000000a916
ARG2= 0000000000070130
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ec6
ARG7= 0000000000070130
ARG8= 000000000000a916
ARG9= 0000000000070130
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000070130
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000070130
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000070130
ARG1= 000000000000a914
ARG2= 0000000000070130
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ece
ARG7= 0000000000070130
ARG8= 000000000000a914
ARG9= 0000000000070130
ARG10= 00000000ffffffff
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000070130
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000070130
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000070130
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000070130
ARG9= 00000000001ef380
ARG10= 0000000074648edb
ARG11= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000070130
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000070130
ARG9= 00000000001ef380
ARG10= 0000000074648ee8
ARG11= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef340
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000070130
ARG1= 0000000000000001
ARG2= 00000000001ef360
ARG3= 0000000074641a62
ARG4= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000070130
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef374
ARG4= 000000007464900d
ARG5= 0000000000070130
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef380
ARG9= 000000007464909d
ARG10= 0000000000070130
ARG11= 00000000001ef390
ARG12= 000000007464906e
ARG13= 0000000000070130
ARG14= 0000000000000001
ARG15= 00000000001ef3a0
ARG16= 000000007464904a
ARG17= 0000000000070130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000070130
ARG1= 000000000000a91a
ARG2= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef374
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef394
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001242, EDX=00000000001ef32c
RETURN ADDRESS=00000000771b65b5
ARG0= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef39c
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef370
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef378
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef3a0
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef3e8
ARG9= 0000000074641f96
ARG10= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef354
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef374
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef384
ARG4= 00000000746419fb
ARG5= 0000000000020144
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef39c
ARG9= 0000000074648e61
ARG10= 0000000000020144
ARG11= 000000000056e388
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef3e8
ARG15= 0000000074649029
ARG16= 0000000000020144
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef354
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a91c
ARG2= 000000000056e388
ARG3= 00000000001ef384
ARG4= 00000000746491a3
ARG5= 0000000000020144
ARG6= 000000000000a91c
ARG7= 0000000000020144
ARG8= 000000000056e388
ARG9= 0000000000000002
ARG10= 00000000001ef39c
ARG11= 0000000074649119
ARG12= 0000000000000002
ARG13= 000000000056e388
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef3e8
ARG17= 0000000074649029
ARG18= 0000000000020144
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 000000000056e388
ARG3= 00000000001ef35c
ARG4= 00000000747f7ecd
ARG5= 0000000000020144
ARG6= 000000000000c019
ARG7= 00000000001ef36c
ARG8= 00000000747f0177
ARG9= 0000000000020144
ARG10= 000000000056e388
ARG11= 00000000001ef384
ARG12= 00000000746491d6
ARG13= 0000000000020144
ARG14= 0000000000020144
ARG15= 000000000056e388
ARG16= 0000000000000002
ARG17= 00000000001ef39c
ARG18= 0000000074649119
ARG19= 0000000000000002
ARG20= 000000000056e388
ARG21= 0000000000000001
ARG22= 0000000000000082
ARG23= 00000000001ef3e8
ARG24= 0000000074649029
ARG25= 0000000000020144
ARG26= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000c019
ARG2= 00000000771b7a0e
ARG3= 000000000027ed90
ARG4= 0000000000020144
ARG5= 00000000001ef36c
ARG6= 00000000747f01d2
ARG7= 0000000000020144
ARG8= 000000000000c019
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a912
ARG2= 0000000000020144
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648eb8
ARG7= 0000000000020144
ARG8= 000000000000a912
ARG9= 0000000000020144
ARG10= 000000000056e388
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000020144
ARG14= 0000000000000001
ARG15= 000000000056e388
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000020144
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a916
ARG2= 0000000000020144
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ec6
ARG7= 0000000000020144
ARG8= 000000000000a916
ARG9= 0000000000020144
ARG10= 000000000056e388
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000020144
ARG14= 0000000000000001
ARG15= 000000000056e388
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000020144
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a914
ARG2= 0000000000020144
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ece
ARG7= 0000000000020144
ARG8= 000000000000a914
ARG9= 0000000000020144
ARG10= 000000000056e388
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000020144
ARG14= 0000000000000001
ARG15= 000000000056e388
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000020144
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000020144
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000020144
ARG9= 00000000001ef380
ARG10= 0000000074648edb
ARG11= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000020144
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000020144
ARG9= 00000000001ef380
ARG10= 0000000074648ee8
ARG11= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef340
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000020144
ARG1= 0000000000000001
ARG2= 00000000001ef360
ARG3= 0000000074641a62
ARG4= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000020144
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef374
ARG4= 000000007464900d
ARG5= 0000000000020144
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef380
ARG9= 000000007464909d
ARG10= 0000000000020144
ARG11= 00000000001ef390
ARG12= 000000007464906e
ARG13= 0000000000020144
ARG14= 0000000000000001
ARG15= 00000000001ef3a0
ARG16= 000000007464904a
ARG17= 0000000000020144
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000020144
ARG1= 000000000000a91a
ARG2= 000000000056e388
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef374
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef394
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef36c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef38c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef374
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef39c
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2dc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef2bc
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef2dc
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef2c4
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef270
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef290
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef278
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000030142
ARG3= 00000000001ef2a0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef2d8
ARG9= 0000000074641e8a
ARG10= 0000000000030142
ARG11= 0000000000030142
ARG12= 000000000056da60
ARG13= 0000000000000082
ARG14= 0000000000030142
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000001ef2ec
ARG18= 0000000074643199
ARG19= 000000000056da70
ARG20= 0000000000000003
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef37c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef39c
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef370
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef390
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef378
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef3a0
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef3e8
ARG9= 0000000074641f96
ARG10= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef354
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef374
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef35c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef384
ARG4= 00000000746419fb
ARG5= 0000000000030142
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef39c
ARG9= 0000000074648e61
ARG10= 0000000000030142
ARG11= 000000000056da60
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef3e8
ARG15= 0000000074649029
ARG16= 0000000000030142
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef354
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a91c
ARG2= 000000000056da60
ARG3= 00000000001ef384
ARG4= 00000000746491a3
ARG5= 0000000000030142
ARG6= 000000000000a91c
ARG7= 0000000000030142
ARG8= 000000000056da60
ARG9= 0000000000000002
ARG10= 00000000001ef39c
ARG11= 0000000074649119
ARG12= 0000000000000002
ARG13= 000000000056da60
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef3e8
ARG17= 0000000074649029
ARG18= 0000000000030142
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000c019
ARG2= 000000000056da60
ARG3= 00000000001ef35c
ARG4= 00000000747f7ecd
ARG5= 0000000000030142
ARG6= 000000000000c019
ARG7= 00000000001ef36c
ARG8= 00000000747f0177
ARG9= 0000000000030142
ARG10= 000000000056da60
ARG11= 00000000001ef384
ARG12= 00000000746491d6
ARG13= 0000000000030142
ARG14= 0000000000030142
ARG15= 000000000056da60
ARG16= 0000000000000002
ARG17= 00000000001ef39c
ARG18= 0000000074649119
ARG19= 0000000000000002
ARG20= 000000000056da60
ARG21= 0000000000000001
ARG22= 0000000000000082
ARG23= 00000000001ef3e8
ARG24= 0000000074649029
ARG25= 0000000000030142
ARG26= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef33c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a912
ARG2= 0000000000030142
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648eb8
ARG7= 0000000000030142
ARG8= 000000000000a912
ARG9= 0000000000030142
ARG10= 000000000056da60
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000030142
ARG14= 0000000000000001
ARG15= 000000000056da60
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000030142
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a916
ARG2= 0000000000030142
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ec6
ARG7= 0000000000030142
ARG8= 000000000000a916
ARG9= 0000000000030142
ARG10= 000000000056da60
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000030142
ARG14= 0000000000000001
ARG15= 000000000056da60
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000030142
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a914
ARG2= 0000000000030142
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef380
ARG6= 0000000074648ece
ARG7= 0000000000030142
ARG8= 000000000000a914
ARG9= 0000000000030142
ARG10= 000000000056da60
ARG11= 00000000001ef39c
ARG12= 0000000074648e94
ARG13= 0000000000030142
ARG14= 0000000000000001
ARG15= 000000000056da60
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef3e8
ARG19= 0000000074649029
ARG20= 0000000000030142
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000030142
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000030142
ARG9= 00000000001ef380
ARG10= 0000000074648edb
ARG11= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef338
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef364
ARG4= 0000000074648f19
ARG5= 0000000000030142
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000030142
ARG9= 00000000001ef380
ARG10= 0000000074648ee8
ARG11= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef340
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef360
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef34c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030142
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef374
ARG4= 000000007464900d
ARG5= 0000000000030142
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef380
ARG9= 000000007464909d
ARG10= 0000000000030142
ARG11= 00000000001ef390
ARG12= 000000007464906e
ARG13= 0000000000030142
ARG14= 0000000000000001
ARG15= 00000000001ef3a0
ARG16= 000000007464904a
ARG17= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef360
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030142
ARG1= 000000000000a91a
ARG2= 000000000056da60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000107d, EDX=00000000001ef500
RETURN ADDRESS=000000007735697e
ARG0= 00000000070a070c
ARG1= 0000000000000010
ARG2= 00000000771ad5ef
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef7e8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030142
ARG1= 0000000000000001
ARG2= 00000000001ef808
ARG3= 0000000074641a62
ARG4= 0000000000030142
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011b9, EDX=00000000001ef918
RETURN ADDRESS=00000000771b8f8f
ARG0= 00000000001ef958
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001260, EDX=00000000001ef940
RETURN ADDRESS=00000000771ad930
ARG0= 0000000000020157
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001173, EDX=00000000001ef90c
RETURN ADDRESS=00000000771ad5fb
ARG0= 0000000000030138
ARG1= 0000000076198116
ARG2= 0000000000020157
ARG3= 0000000000277610
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef684
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6a4
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef68c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000030138
ARG3= 00000000001ef6b4
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000090
ARG8= 00000000001ef6ec
ARG9= 0000000074641e8a
ARG10= 0000000000030138
ARG11= 0000000000030138
ARG12= 00000000ffffffff
ARG13= 0000000000000090
ARG14= 0000000000030138
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6f0
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d8
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef684
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6a4
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef68c
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000030138
ARG3= 00000000001ef6b4
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef6ec
ARG9= 0000000074641e8a
ARG10= 0000000000030138
ARG11= 0000000000030138
ARG12= 00000000ffffffff
ARG13= 0000000000000002
ARG14= 0000000000030138
ARG15= 00000000771b77cd
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef760
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef780
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef758
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef778
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef760
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000000082
ARG3= 00000000001ef788
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6e8
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef6c8
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef6e8
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef6d0
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef67c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef69c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef684
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000030138
ARG3= 00000000001ef6ac
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef6e4
ARG9= 0000000074641e8a
ARG10= 0000000000030138
ARG11= 0000000000030138
ARG12= 00000000ffffffff
ARG13= 0000000000000082
ARG14= 0000000000030138
ARG15= 00000000771b77cd
ARG16= 00000000771b7987
ARG17= 00000000771b7970
ARG18= 00000000771b7859
ARG19= 0000000000030138
ARG20= 000000000000a918
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef768
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef788
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef75c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef77c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef764
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef78c
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000082
ARG8= 00000000001ef7d4
ARG9= 0000000074641f96
ARG10= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef740
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef760
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef748
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000000001
ARG3= 00000000001ef770
ARG4= 00000000746419fb
ARG5= 0000000000030138
ARG6= 000000000000a918
ARG7= 0000000000000002
ARG8= 00000000001ef788
ARG9= 0000000074648e61
ARG10= 0000000000030138
ARG11= 00000000ffffffff
ARG12= 0000000000000001
ARG13= 0000000000000082
ARG14= 00000000001ef7d4
ARG15= 0000000074649029
ARG16= 0000000000030138
ARG17= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef740
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030138
ARG1= 000000000000a918
ARG2= 0000000000030138
ARG3= 000000007467a970
ARG4= 0000000000000002
ARG5= 00000000001ef770
ARG6= 0000000074648e2f
ARG7= 0000000000030138
ARG8= 000000000000a918
ARG9= 00000000ffffffff
ARG10= 00000000001ef788
ARG11= 0000000074648e7b
ARG12= 0000000000030138
ARG13= 00000000ffffffff
ARG14= 0000000000000001
ARG15= 0000000000000082
ARG16= 00000000001ef7d4
ARG17= 0000000074649029
ARG18= 0000000000030138
ARG19= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef738
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030138
ARG1= 000000000000a912
ARG2= 0000000000030138
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef76c
ARG6= 0000000074648eb8
ARG7= 0000000000030138
ARG8= 000000000000a912
ARG9= 0000000000030138
ARG10= 00000000ffffffff
ARG11= 00000000001ef788
ARG12= 0000000074648e94
ARG13= 0000000000030138
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef7d4
ARG19= 0000000074649029
ARG20= 0000000000030138
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef738
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030138
ARG1= 000000000000a916
ARG2= 0000000000030138
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef76c
ARG6= 0000000074648ec6
ARG7= 0000000000030138
ARG8= 000000000000a916
ARG9= 0000000000030138
ARG10= 00000000ffffffff
ARG11= 00000000001ef788
ARG12= 0000000074648e94
ARG13= 0000000000030138
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef7d4
ARG19= 0000000074649029
ARG20= 0000000000030138
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef738
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030138
ARG1= 000000000000a914
ARG2= 0000000000030138
ARG3= 00000000771b7a0e
ARG4= 0000000000000001
ARG5= 00000000001ef76c
ARG6= 0000000074648ece
ARG7= 0000000000030138
ARG8= 000000000000a914
ARG9= 0000000000030138
ARG10= 00000000ffffffff
ARG11= 00000000001ef788
ARG12= 0000000074648e94
ARG13= 0000000000030138
ARG14= 0000000000000001
ARG15= 00000000ffffffff
ARG16= 0000000000000001
ARG17= 0000000000000082
ARG18= 00000000001ef7d4
ARG19= 0000000074649029
ARG20= 0000000000030138
ARG21= 0000000000000002
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef724
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a910
ARG2= 000000000000a910
ARG3= 00000000001ef750
ARG4= 0000000074648f19
ARG5= 0000000000030138
ARG6= 000000000000a910
ARG7= 00000000771b7a0e
ARG8= 0000000000030138
ARG9= 00000000001ef76c
ARG10= 0000000074648edb
ARG11= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef724
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a911
ARG2= 000000000000a911
ARG3= 00000000001ef750
ARG4= 0000000074648f19
ARG5= 0000000000030138
ARG6= 000000000000a911
ARG7= 00000000771b7a0e
ARG8= 0000000000030138
ARG9= 00000000001ef76c
ARG10= 0000000074648ee8
ARG11= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001203, EDX=00000000001ef72c
RETURN ADDRESS=00000000771b77cd
ARG0= 0000000000030138
ARG1= 0000000000000001
ARG2= 00000000001ef74c
ARG3= 0000000074641a62
ARG4= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001232, EDX=00000000001ef738
RETURN ADDRESS=00000000771b7970
ARG0= 0000000000030138
ARG1= 000000000000a91a
ARG2= 0000000000000001
ARG3= 00000000001ef760
ARG4= 000000007464900d
ARG5= 0000000000030138
ARG6= 000000000000a91a
ARG7= 0000000000000082
ARG8= 00000000001ef76c
ARG9= 000000007464909d
ARG10= 0000000000030138
ARG11= 00000000001ef77c
ARG12= 000000007464906e
ARG13= 0000000000030138
ARG14= 0000000000000001
ARG15= 00000000001ef78c
ARG16= 000000007464904a
ARG17= 0000000000030138
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001212, EDX=00000000001ef74c
RETURN ADDRESS=00000000771b7a06
ARG0= 0000000000030138
ARG1= 000000000000a91a
ARG2= 00000000ffffffff
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef6bc
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef6f0
ARG1= 0000000076150000
ARG2= 00000000001ef6dc
ARG3= 00000000001ef940
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef908
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef924
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000ea, EDX=00000000001ef904
RETURN ADDRESS=000000007761549c
ARG0= 00000000ffffffff
ARG1= 0000000000000024
ARG2= 00000000001ef920
ARG3= 0000000000000004
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000172, EDX=00000000001ef8f8
RETURN ADDRESS=0000000077615d1c
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef78c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef7c8
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
ARG6= 0000000000280e60
ARG7= 000000007ffd4000
ARG8= 0000000005d7ff12
ARG9= 00000000001ef7a4
ARG10= 0000000000280e60
ARG11= 00000000001ef80c
ARG12= 00000000772062e3
ARG13= 00000000001ef81c
ARG14= 0000000076095ec5
ARG15= 0000000000280e60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000011fa, EDX=00000000001ef730
RETURN ADDRESS=00000000771b914b
ARG0= 00000000001ef7ac
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef78c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef7c8
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
ARG6= 0000000000280e60
ARG7= 000000007ffd4000
ARG8= 0000000005d7ff12
ARG9= 00000000001ef7a4
ARG10= 0000000000280e60
ARG11= 00000000001ef80c
ARG12= 00000000772062e3
ARG13= 00000000001ef81c
ARG14= 0000000076095ed2
ARG15= 0000000000280e60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000114e, EDX=00000000001ef78c
RETURN ADDRESS=00000000771bf0ab
ARG0= 0000000000000008
ARG1= 000000000000002e
ARG2= 00000000001ef7c8
ARG3= 0000000076095f61
ARG4= 0000000000000008
ARG5= 0000000076095f04
ARG6= 0000000000280e60
ARG7= 000000007ffd4000
ARG8= 0000000005d7ff12
ARG9= 00000000001ef7a4
ARG10= 0000000000280e60
ARG11= 00000000001ef80c
ARG12= 00000000772062e3
ARG13= 00000000001ef81c
ARG14= 0000000076095edf
ARG15= 0000000000280e60
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef788
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000b0
ARG1= 00000000001ef7ac
ARG2= 000000007762c337
ARG3= 0000000000275020
ARG4= 0000000000000001
ARG5= 0000000000000001
ARG6= 000000000026eae8
ARG7= 00000000001ef7c8
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 0000000000000013
ARG11= 00000000001ef7c4
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef77c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000ac
ARG1= 00000000001ef7a0
ARG2= 000000007762c337
ARG3= 0000000000274f48
ARG4= 000000007467a0e0
ARG5= 000000007467a130
ARG6= 000000000026eae8
ARG7= 00000000001ef7bc
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000012
ARG11= 00000000001ef7b8
ARG12= 000000007467a130
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef804
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef82c
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000762c8040
ARG6= 00000000001ef83c
ARG7= 00000000762b4248
ARG8= 0000000000000018
ARG9= 00000000001ef850
ARG10= 00000000762b16ef
ARG11= 000000000026ea68
ARG12= 00000000001ef85c
ARG13= 000000007762af24
ARG14= 00000000762b0000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001196, EDX=00000000001ef4f4
RETURN ADDRESS=00000000771b28f3
ARG0= 0000000076080000
ARG1= 00000000001ef524
ARG2= 00000000001ef780
ARG3= 00000000001ef520
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef518
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef54c
ARG1= 0000000076080000
ARG2= 00000000001ef538
ARG3= 0000000076084114
ARG4= 00000000771b2d26
ARG5= 00000000771ae5d5
ARG6= 0000000076084114
ARG7= 00000000001ef534
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001196, EDX=00000000001ef4f4
RETURN ADDRESS=00000000771b28f3
ARG0= 0000000076080000
ARG1= 00000000001ef524
ARG2= 00000000001ef780
ARG3= 00000000001ef520
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef518
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef54c
ARG1= 0000000076080000
ARG2= 00000000001ef538
ARG3= 0000000076084134
ARG4= 00000000771b2d26
ARG5= 00000000771ae5d5
ARG6= 0000000076084134
ARG7= 00000000001ef534
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef788
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b0
ARG3= 0000000000000004
ARG4= 0000000000020000
ARG5= 0000000080000000
ARG6= 00000000001ef7dc
ARG7= 0000000076082c39
ARG8= 0000000000000003
ARG9= 0000000076082c1e
ARG10= 0000000076082a4f
ARG11= 00000000761048a8
ARG12= 00000000772bf25e
ARG13= 0000000000000001
ARG14= 0000000076082a26
ARG15= 0000000076080000
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef790
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b8
ARG3= 0000000000000004
ARG4= 0000000000020000
ARG5= 0000000080000000
ARG6= 00000000001ef7dc
ARG7= 0000000076082a9d
ARG8= 0000000000000001
ARG9= 00000000761048a8
ARG10= 00000000772bf25e
ARG11= 0000000000000001
ARG12= 0000000076082a26
ARG13= 0000000076080000
ARG14= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef790
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b8
ARG3= 0000000000000004
ARG4= 0000000000020000
ARG5= 0000000080000000
ARG6= 00000000001ef7dc
ARG7= 0000000076082ab1
ARG8= 0000000000000002
ARG9= 00000000761048a8
ARG10= 00000000772bf25e
ARG11= 0000000000000001
ARG12= 0000000076082a26
ARG13= 0000000076080000
ARG14= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef788
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e8
ARG1= 00000000000000e8
ARG2= 00000000001ef7a8
ARG3= 00000000772c05df
ARG4= 00000000000000e8
ARG5= 00000000761047d8
ARG6= 00000000001ef7dc
ARG7= 000000007609744d
ARG8= 00000000000000e8
ARG9= 0000000080000000
ARG10= 0000000076082ad8
ARG11= 00000000761048a8
ARG12= 00000000772bf25e
ARG13= 0000000000000001
ARG14= 0000000076082a26
ARG15= 0000000076080000
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef75c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000028
ARG1= 00000000001ef780
ARG2= 000000007762c337
ARG3= 0000000000272548
ARG4= 0000000000020000
ARG5= 00000000761048a0
ARG6= 0000000000000001
ARG7= 00000000001ef79c
ARG8= 000000007763362e
ARG9= 0000000000010001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef7b0
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7d8
ARG3= 0000000000000004
ARG4= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef79c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7c4
ARG3= 0000000000000004
ARG4= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef554
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000080
ARG1= 00000000001ef578
ARG2= 000000007762c337
ARG3= 0000000000274e70
ARG4= 0000000076296578
ARG5= 0000000076296608
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000083, EDX=00000000001ef74c
RETURN ADDRESS=0000000077614e2c
ARG0= 00000000ffffffff
ARG1= 00000000001ef794
ARG2= 00000000001ef7a0
ARG3= 0000000000008000
ARG4= 0000000000490000
ARG5= 0000000000490000
ARG6= 0000000000490010
ARG7= 00000000001ef798
ARG8= 00000000775f174e
ARG9= 00000000ffffffff
ARG10= 00000000001ef794
ARG11= 00000000001ef7a0
ARG12= 0000000000008000
ARG13= 0000000000490000
ARG14= 00000000004900a0
ARG15= 0000000000490000
ARG16= 0000000000490000
ARG17= 00000000001ef7b4
ARG18= 00000000775f16c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef778
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000078
ARG1= 00000000001ef79c
ARG2= 000000007762c337
ARG3= 0000000000274c98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef770
RETURN ADDRESS=000000007761491c
ARG0= 000000000000007c
ARG1= 00000000001ef794
ARG2= 000000007762c337
ARG3= 0000000000274d98
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef774
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000074
ARG1= 00000000001ef798
ARG2= 000000007762c337
ARG3= 0000000000274bb0
ARG4= 00000000705b6164
ARG5= 00000000705b6168
ARG6= 0000000000000001
ARG7= 00000000001ef7b4
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 000000000000000e
ARG11= 00000000001ef7b0
ARG12= 00000000705b6168
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef770
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000070
ARG1= 00000000001ef794
ARG2= 000000007762c337
ARG3= 0000000000274a78
ARG4= 0000000000000001
ARG5= 0000000077177618
ARG6= 000000000026de48
ARG7= 00000000001ef7b0
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 000000000000000d
ARG11= 00000000001ef7ac
ARG12= 0000000077177618
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef770
RETURN ADDRESS=000000007761491c
ARG0= 000000000000006c
ARG1= 00000000001ef794
ARG2= 000000007762c337
ARG3= 0000000000274990
ARG4= 0000000000000001
ARG5= 0000000077177248
ARG6= 000000000026de48
ARG7= 00000000001ef7b0
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 000000000000000c
ARG11= 00000000001ef7ac
ARG12= 0000000077177248
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef774
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000064
ARG1= 00000000001ef798
ARG2= 000000007762c337
ARG3= 0000000000274780
ARG4= 0000000077177254
ARG5= 0000000077177280
ARG6= 000000000026de48
ARG7= 00000000001ef7b4
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 000000000000000a
ARG11= 00000000001ef7b0
ARG12= 0000000077177280
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef774
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000068
ARG1= 00000000001ef798
ARG2= 000000007762c337
ARG3= 00000000002748b8
ARG4= 0000000077177254
ARG5= 00000000771772a0
ARG6= 000000000026de48
ARG7= 00000000001ef7b4
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 000000000000000b
ARG11= 00000000001ef7b0
ARG12= 00000000771772a0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f88
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000007
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d19
ARG12= 00000000767f9f88
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f70
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000009
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d23
ARG12= 00000000767f9f70
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767fb2d0
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000a
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d2d
ARG12= 00000000767fb2d0
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f74
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000b
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d37
ARG12= 00000000767f9f74
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f80
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000008
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d41
ARG12= 00000000767f9f80
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f60
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000c
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d4b
ARG12= 00000000767f9f60
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f84
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000d
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d55
ARG12= 00000000767f9f84
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f7c
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000e
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d5f
ARG12= 00000000767f9f7c
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f68
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 000000000000000f
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d69
ARG12= 00000000767f9f68
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f6c
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000010
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d73
ARG12= 00000000767f9f6c
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767f9f78
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000011
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d7d
ARG12= 00000000767f9f78
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef78c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7b4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000767fb2d4
ARG6= 00000000001ef7bc
ARG7= 00000000764b8e0e
ARG8= 0000000000000012
ARG9= 0000000000000001
ARG10= 00000000001ef7cc
ARG11= 00000000764b8d87
ARG12= 00000000767fb2d4
ARG13= 00000000764b8d06
ARG14= 00000000001ef7dc
ARG15= 00000000764b8cd9
ARG16= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef764
RETURN ADDRESS=000000007761491c
ARG0= 000000000000005c
ARG1= 00000000001ef788
ARG2= 000000007762c337
ARG3= 0000000000274570
ARG4= 0000000000000001
ARG5= 00000000767f9f50
ARG6= 000000000026e128
ARG7= 00000000001ef7a4
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 0000000000000008
ARG11= 00000000001ef7a0
ARG12= 00000000767f9f50
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef77c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000054
ARG1= 00000000001ef7a0
ARG2= 000000007762c337
ARG3= 0000000000273a28
ARG4= 00000000767f9f58
ARG5= 00000000767fa3a8
ARG6= 000000000026e128
ARG7= 00000000001ef7bc
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000005
ARG11= 00000000001ef7b8
ARG12= 00000000767fa3a8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef77c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000050
ARG1= 00000000001ef7a0
ARG2= 000000007762c337
ARG3= 0000000000274360
ARG4= 00000000767f9f58
ARG5= 00000000767fa3c8
ARG6= 000000000026e128
ARG7= 00000000001ef7bc
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000006
ARG11= 00000000001ef7b8
ARG12= 00000000767fa3c8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef77c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000058
ARG1= 00000000001ef7a0
ARG2= 000000007762c337
ARG3= 0000000000274498
ARG4= 00000000767f9f58
ARG5= 00000000767fa3e8
ARG6= 000000000026e128
ARG7= 00000000001ef7bc
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000007
ARG11= 00000000001ef7b8
ARG12= 00000000767fa3e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef764
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000060
ARG1= 00000000001ef788
ARG2= 000000007762c337
ARG3= 0000000000274648
ARG4= 0000000000000001
ARG5= 00000000767fb5f8
ARG6= 000000000026e128
ARG7= 00000000001ef7a4
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 0000000000000009
ARG11= 00000000001ef7a0
ARG12= 00000000767fb5f8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef55c
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef590
ARG1= 00000000747c0000
ARG2= 00000000001ef57c
ARG3= 00000000747efd48
ARG4= 000000000000000c
ARG5= 00000000771ae5d5
ARG6= 00000000776017e2
ARG7= 00000000001ef594
ARG8= 00000000776017e8
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef55c
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef590
ARG1= 00000000747c0000
ARG2= 00000000001ef57c
ARG3= 00000000747efe2c
ARG4= 0000000000000058
ARG5= 00000000771ae5d5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000001263, EDX=00000000001ef55c
RETURN ADDRESS=00000000771ae5cd
ARG0= 00000000001ef590
ARG1= 00000000747c0000
ARG2= 00000000001ef57c
ARG3= 00000000747efe8c
ARG4= 0000000000000078
ARG5= 00000000771ae5d5
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ef768
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000230000
ARG2= 00000000001ef7a0
ARG3= 00000000775f0dc0
ARG4= 0000000000000001
ARG5= 00000000002736fc
ARG6= 0000000000230000
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef774
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000e0
ARG1= 00000000002736fc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef788
RETURN ADDRESS=000000007761491c
ARG0= 000000000000004c
ARG1= 00000000001ef7ac
ARG2= 000000007762c337
ARG3= 0000000000273620
ARG4= 0000000000000001
ARG5= 0000000000000001
ARG6= 000000000026dc60
ARG7= 00000000001ef7c8
ARG8= 000000007763362e
ARG9= 0000000000010001
ARG10= 0000000000000004
ARG11= 00000000001ef7c4
ARG12= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef77c
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000048
ARG1= 00000000001ef7a0
ARG2= 000000007762c337
ARG3= 0000000000273548
ARG4= 000000007490c284
ARG5= 000000007490c6c0
ARG6= 000000000026dc60
ARG7= 00000000001ef7bc
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000003
ARG11= 00000000001ef7b8
ARG12= 000000007490c6c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000181, EDX=00000000001ef7a4
RETURN ADDRESS=0000000077615e0c
ARG0= 00000000ffffffff
ARG1= 0000000000220000
ARG2= 00000000772c125e
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef79c
RETURN ADDRESS=000000007761491c
ARG0= 00000000000000dc
ARG1= 00000000000000dc
ARG2= 00000000001ef7bc
ARG3= 00000000772c05df
ARG4= 00000000000000dc
ARG5= 00000000772c05b7
ARG6= 00000000001ef7d0
ARG7= 0000000075e15097
ARG8= 00000000000000dc
ARG9= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef79c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7c4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000772c2a9f
ARG6= 00000000001ef7d0
ARG7= 0000000075e14f85
ARG8= 0000000000000005
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000014f, EDX=00000000001ef79c
RETURN ADDRESS=0000000077615aec
ARG0= 00000000fffffffe
ARG1= 000000000000000a
ARG2= 00000000001ef7c4
ARG3= 0000000000000004
ARG4= 0000000000000001
ARG5= 00000000772c2a9f
ARG6= 00000000001ef7d0
ARG7= 0000000075e14f92
ARG8= 0000000000000006
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef780
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000044
ARG1= 00000000001ef7a4
ARG2= 000000007762c337
ARG3= 0000000000273410
ARG4= 0000000000000001
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef774
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
ARG1= 00000000001ef798
ARG2= 000000007762c337
ARG3= 0000000000273338
ARG4= 0000000075e522c8
ARG5= 0000000075e522e0
ARG6= 000000000026d878
ARG7= 00000000001ef7b4
ARG8= 00000000776017c7
ARG9= 0000000000010001
ARG10= 0000000000000001
ARG11= 00000000001ef7b0
ARG12= 0000000075e522e0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=00000000000000b6, EDX=00000000001ef1a0
RETURN ADDRESS=000000007761515c
ARG0= 00000000001ef1e0
ARG1= 0000000000020019
ARG2= 00000000001ef1c0
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000010a, EDX=00000000001ef194
RETURN ADDRESS=000000007761569c
ARG0= 0000000000000040
ARG1= 00000000001ef1d8
ARG2= 0000000000000002
ARG3= 00000000001ef1e4
ARG4= 0000000000000014
ARG5= 00000000001ef1bc
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef1a8
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000040
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000187, EDX=00000000001ef738
RETURN ADDRESS=0000000077615e6c
ARG0= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=000000000000011c, EDX=00000000001ef7bc
RETURN ADDRESS=00000000776157bc
ARG0= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000032, EDX=00000000001ef7c0
RETURN ADDRESS=000000007761491c
ARG0= 0000000000000018
ARG1= 0000000000000018
ARG2= 00000000001ef7e0
ARG3= 00000000772c05df
ARG4= 0000000000000018
----------------------------------
PID=0d38, NAME=notepad.exe, PC=00000000776164f2, SYSCALL=0000000000000172, EDX=00000000001ef8f8
RETURN ADDRESS=0000000077615d1c
ARG0= 00000000ffffffff
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Makefile
Type: application/octet-stream
Size: 722 bytes
Desc: not available
Url : http://mailman.mit.edu/mailman/private/panda-users/attachments/20150112/14dfce03/attachment-0001.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mysyscalls.c
Type: text/x-csrc
Size: 5049 bytes
Desc: not available
Url : http://mailman.mit.edu/mailman/private/panda-users/attachments/20150112/14dfce03/attachment-0001.bin