date/time : 2018-12-18, 19:23:41, 450ms

computer name : PERSONAL-PC

user name : Rizki Saputra <admin>
registered owner : Windows User
operating system : Windows 7 x64 Service Pack 1 build 7601
system language : Indonesian
system up time : 13 hours 23 minutes
program up time : 14 minutes 35 seconds
processors : 4x Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
physical memory : 2628/6143 MB (free/total)
free disk space : (C:) 24,04 GB
display mode : 1920x1080, 32 bit
process id : $15ac
allocated memory : 1,93 GB
largest free block : 1,27 GB
command line : "C:\Program Files\KCP\MPC-BE\mpc-be.exe" "D:\Download\Dari
IDM\Compressed\Meownime_HuntxHunt_097-128_Mkv480p\Meownime_Hunt.x.Hunt_097-
128_Mkv480p\Meownime_Hunt.x.Hunt_100_Mkv480p.mkv"
executable : mpc-be.exe
current module : MADHCNET32.DLL
module date/time : 2015-11-21 03:15
version : 1.0.17.10
compiled with : Delphi XE7
madExcept version : 4.0.12
madVR version : 0.89.17
callstack crc : $6af7ee37, $7208d48a, $5a6935c3
exception number : 1
exception class : Exception
exception message : Zugriffsverletzung bei Adresse $6af7ee37 in Modul
'XySubFilter.dll'. Lesen von Adresse $8e297000.

CFrameQueue::SubtitleThread ($1aa0):
6af7ee37 +000 XySubFilter.dll
4a432a27 +257 madVR.ax framequeue.cpp 11942 +79 CFrameQueue.RequestSubtitles
4a432b6e +09e madVR.ax framequeue.cpp 11979 +9 CFrameQueue.SubtitleThread
4a434d54 +004 madVR.ax framequeue.cpp 196 +0 Queue_SubtitleThread
7705343b +010 kernel32.dll BaseThreadInitThunk

main thread ($1578):

76eb7eb8 +26 USER32.dll GetMessageW
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1a58:
77970186 +0e ntdll.dll NtWaitForMultipleObjects
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $e30:
76eb7eb8 +26 USER32.dll GetMessageW
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1fe8: <priority:-2>

77970186 +0e ntdll.dll
761d1714 +fa KERNELBASE.dll
770519f7 +89 kernel32.dll
77052687 +13 kernel32.dll
7705343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $4cc:
77971f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7705343b +10 kernel32.dll BaseThreadInitThunk

WindowQueueThread ($1f48): <priority:2>

76eb7eb8 +026 USER32.dll GetMessageW
09077ab6 +102 MADHCNET32.DLL madNetTools 1420 +17 WindowQueueThread
7705343b +010 kernel32.dll BaseThreadInitThunk

thread $6d4:
7796f9b7 +0b ntdll.dll NtReplyWaitReceivePort
09072c44 +30 MADHCNET32.DLL madCodeHook LpcPortThread
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1754: <priority:1>

7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
0907292e +12 MADHCNET32.DLL madCodeHook LpcDispatchThread
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $fa8:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $410:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1474:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $1b2c:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $d4c:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $c88:
77970186 +0e ntdll.dll NtWaitForMultipleObjects
761d1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +89 kernel32.dll WaitForMultipleObjectsEx
77052687 +13 kernel32.dll WaitForMultipleObjects
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $6f4:
77971f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $a24:
77971f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1af8: <priority:15>

77970186 +0e ntdll.dll NtWaitForMultipleObjects
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1b80:
77971e47 +0b ntdll.dll NtTraceControl
779aa06d +40 ntdll.dll EtwpNotificationThread
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1cb4:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
BaseThreadInitThunk

thread $1408:
76eb7eb8 +26 USER32.dll GetMessageW
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $d74:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1f18:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

KeyboardThreadProc ($14cc):
77970186 +0e ntdll.dll NtWaitForMultipleObjects
761d1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +89 kernel32.dll WaitForMultipleObjectsEx
76ec03d4 +f4 USER32.dll MsgWaitForMultipleObjectsEx
76ec0669 +1a USER32.dll MsgWaitForMultipleObjects
4a450cc2 +52 madVR.ax osd.cpp 1824 +10 COsd.KeyboardThreadMethod
4a453b9e +5e madVR.ax osd.cpp 1808 +3 KeyboardThreadProc
7705343b +10 kernel32.dll BaseThreadInitThunk

CFrameQueue::RenderThread ($e1c): <priority:2>

77970186 +00e ntdll.dll NtWaitForMultipleObjects
761d1714 +0fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +089 kernel32.dll WaitForMultipleObjectsEx
77052687 +013 kernel32.dll WaitForMultipleObjects
4a4365a7 +7b7 madVR.ax framequeue.cpp 13115 +254 CFrameQueue.RenderThread
4a43b054 +004 madVR.ax framequeue.cpp 193 +0 Queue_RenderThread
7705343b +010 kernel32.dll BaseThreadInitThunk

CVSync::CollectThreadMethod ($15d8): <priority:15>

7796fdba +00e ntdll.dll NtDelayExecution
4a48ad91 +071 madVR.ax tools.cpp 773 +14 SleepMicro
4a49d14c +46c madVR.ax vsync.cpp 801 +172 CVSync.CollectThreadMethod
4a49ebd4 +004 madVR.ax vsync.cpp 90 +0 VSync_CollectThreadProc
7705343b +010 kernel32.dll BaseThreadInitThunk

thread $1ae4:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $1b60:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $df4:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $43c:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $12bc:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

CVSync::EvaluateThreadMethod ($1dd4):
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
4a49ee19 +79 madVR.ax vsync.cpp 1331 +5 CVSync.EvaluateThreadMethod
4a49f004 +04 madVR.ax vsync.cpp 96 +0 VSync_EvaluateThreadProc
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1874:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1af0:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $73c:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $16e8:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $14a8:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1198:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $808:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1950:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1008:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
thread $1cb0:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $19e4:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $a48:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $adc:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1be4:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $11e8:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1f0c:
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
thread $1644: <priority:1>
7796f8fa +0e ntdll.dll
761d15c8 +92 KERNELBASE.dll
7705118f +3e kernel32.dll
77051143 +0d kernel32.dll
7705343b +10 kernel32.dll
CFrameQueue::PresentThread ($4d0): <priority:2>
7796fdba +0e ntdll.dll
761d3d36 +5f KERNELBASE.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtDelayExecution
SleepEx
761d4607 +0a KERNELBASE.dll Sleep
4a435a5b +8b madVR.ax framequeue.cpp 12673 +14 CFrameQueue.PresentThread
4a435de4 +04 madVR.ax framequeue.cpp 194 +0 Queue_PresentThread
7705343b +10 kernel32.dll BaseThreadInitThunk

CFrameQueue::IvtcThread ($100c):
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
4a43273a +7a madVR.ax framequeue.cpp 11850 +7 CFrameQueue.IvtcThread
4a434d04 +04 madVR.ax framequeue.cpp 189 +0 Queue_IvtcThread
7705343b +10 kernel32.dll BaseThreadInitThunk

CFrameQueue::UploadThread ($17e4): <priority:1>

7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
4a4308ca +7a madVR.ax framequeue.cpp 8922 +7 CFrameQueue.UploadThread
4a434d14 +04 madVR.ax framequeue.cpp 190 +0 Queue_UploadThread
7705343b +10 kernel32.dll BaseThreadInitThunk

CFrameQueue::DxvaProcessThread ($1dd8):
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
4a43202a +7a madVR.ax framequeue.cpp 9433 +7 CFrameQueue.DxvaProcessThread
4a434d24 +04 madVR.ax framequeue.cpp 191 +0 Queue_DxvaProcessThread
7705343b +10 kernel32.dll BaseThreadInitThunk

CFrameQueue::SplitThread ($1d68):
7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
4a4323ba +7a madVR.ax framequeue.cpp 9932 +7 CFrameQueue.SplitThread
4a434d34 +04 madVR.ax framequeue.cpp 192 +0 Queue_SplitThread
7705343b +10 kernel32.dll BaseThreadInitThunk

CDirect3D::ResetThread ($a40):
7796f8fa +00e ntdll.dll NtWaitForSingleObject
761d15c8 +092 KERNELBASE.dll WaitForSingleObjectEx
7705118f +03e kernel32.dll WaitForSingleObjectEx
77051143 +00d kernel32.dll WaitForSingleObject
4a40d009 +139 madVR.ax direct3d.cpp 3688 +30 CDirect3D.ResetThread
4a40d084 +004 madVR.ax direct3d.cpp 3712 +0 CDirect3D_ResetThread
7705343b +010 kernel32.dll BaseThreadInitThunk

thread $1680: <priority:-2>

77970186 +0e ntdll.dll
761d1714 +fa KERNELBASE.dll
770519f7 +89 kernel32.dll
77052687 +13 kernel32.dll
7705343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $19dc: <priority:15>

77970186 +0e ntdll.dll NtWaitForMultipleObjects
761d1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +89 kernel32.dll WaitForMultipleObjectsEx
77052687 +13 kernel32.dll WaitForMultipleObjects
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $df8: <priority:15>

77970186 +0e ntdll.dll NtWaitForMultipleObjects
761d1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +89 kernel32.dll WaitForMultipleObjectsEx
77052687 +13 kernel32.dll WaitForMultipleObjects
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $9e0:
77970186 +0e ntdll.dll NtWaitForMultipleObjects
761d1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +89 kernel32.dll WaitForMultipleObjectsEx
76ec03d4 +f4 USER32.dll MsgWaitForMultipleObjectsEx
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1914: <priority:15>

77970186 +0e ntdll.dll
761d1714 +fa KERNELBASE.dll
770519f7 +89 kernel32.dll
77052687 +13 kernel32.dll
7705343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $bcc:
77970186 +00e ntdll.dll NtWaitForMultipleObjects
761d1714 +0fa KERNELBASE.dll WaitForMultipleObjectsEx
770519f7 +089 kernel32.dll WaitForMultipleObjectsEx
76ec03d4 +0f4 USER32.dll MsgWaitForMultipleObjectsEx
76ec0669 +01a USER32.dll MsgWaitForMultipleObjects
4a415928 +0d8 madVR.ax framequeue.cpp 3440 +23 CFrameQueue.WaitReady
4a42e65b +63b madVR.ax framequeue.cpp 3685 +213 CFrameQueue.AddFrame
4a44f66e +3fe madVR.ax madvr.cpp 4847 +197 CVideoRenderer.Receive
4a4036ca +04a madVR.ax customren.cpp 1632 +6
CCustomRendererInputPin.Receive
7705343b +010 kernel32.dll BaseThreadInitThunk

thread $450: <priority:1>

7796f8fa +0e ntdll.dll NtWaitForSingleObject
761d15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7705118f +3e kernel32.dll WaitForSingleObjectEx
77051143 +0d kernel32.dll WaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1668:
7796f8fa +0e ntdll.dll NtWaitForSingleObject
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $d34:
7796fdba +0e ntdll.dll NtDelayExecution
761d3d36 +5f KERNELBASE.dll SleepEx
761d4607 +0a KERNELBASE.dll Sleep
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $18a0:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $7c:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $83c:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1540:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $fbc:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $570:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $125c:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $1638:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $b50:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk
thread $1498:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $1904:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $66c:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $3e4:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $14f8:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $16f8:
77971f56 +0e ntdll.dll
779f8314 +b1 ntdll.dll
770d52c5 +1b kernel32.dll
75311323 +67 msvcrt.dll
7705343b +10 kernel32.dll
NtWaitForKeyedEvent
RtlSleepConditionVariableCS
SleepConditionVariableCS
_endthreadex
BaseThreadInitThunk

thread $7e0:
77971f56 +0e ntdll.dll NtWaitForKeyedEvent
779f8314 +b1 ntdll.dll RtlSleepConditionVariableCS
770d52c5 +1b kernel32.dll SleepConditionVariableCS
75311323 +67 msvcrt.dll _endthreadex
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1560: <priority:-3>

77970186 +0e ntdll.dll
761d1714 +fa KERNELBASE.dll
770519f7 +89 kernel32.dll
77052687 +13 kernel32.dll
7705343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $1e20:
77971f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7705343b +10 kernel32.dll BaseThreadInitThunk

thread $1af4:
77971f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7705343b +10 kernel32.dll BaseThreadInitThunk

modules:
01140000 mpc-be.exe 1.4.5.787 C:\Program
Files\KCP\MPC-BE
08fd0000 MADHCNET32.DLL 1.0.17.10 C:\Program
Files\KCP\madVR
090d0000 MVRSETTINGS32.DLL 1.1.9.0 C:\Program
Files\KCP\madVR
10000000 idmmkb.dll 6.19.9.1 C:\Program
Files (x86)\Internet Download Manager
4a400000 madVR.ax 0.89.17.0 C:\Program
Files\KCP\madVR
5c640000 atiumdvt.dll 8.14.10.609
C:\Windows\system32
5d250000 atiumdva.dll 24.20.13011.1009
C:\Windows\system32
5eb10000 amdihk32.dll 1.0.0.0
C:\Windows\system32
5eb40000 atidxx32.dll 24.20.13011.1009
C:\Windows\system32
5f810000 aticfx32.dll 24.20.13011.1009
C:\Windows\system32
5fe90000 OLEACC.dll 7.0.0.0
C:\Windows\system32
67c40000 atiuxpag.dll 24.20.13011.1009
C:\Windows\system32
67ec0000 POWRPROF.dll 6.1.7600.16385
C:\Windows\system32
67ef0000 dsound.dll 6.1.7600.16385
C:\Windows\system32
67f70000 AUDIOSES.DLL 6.1.7601.23471
C:\Windows\system32
67fb0000 wdmaud.drv 6.1.7601.17514
C:\Windows\system32
67fe0000 MMDevAPI.DLL 6.1.7601.17514
C:\Windows\system32
68090000 DUI70.dll 6.1.7600.16385
C:\Windows\system32
68150000 explorerframe.dll 6.1.7601.24187
C:\Windows\system32
6a390000 dxva2.dll 6.1.7600.16385
C:\Windows\system32
6a3b0000 atiumdag.dll 24.20.13011.1009
C:\Windows\system32
6adf0000 atiu9pag.dll 24.20.13011.1009
C:\Windows\system32
6ae20000 FaultRep.dll 6.1.7601.17514
C:\Windows\system32
6ae80000 DShowRdpFilter.dll 1.0.0.0
C:\Windows\system32
6aed0000 XySubFilter.dll 3.1.0.746 C:\Program
Files\KCP\xy-subfilter
6b050000 avfilter-lav-6.dll 6.15.100.0 C:\Program
Files\KCP\LAV Filters
6b090000 swscale-lav-4.dll 4.0.100.0 C:\Program
Files\KCP\LAV Filters
6b130000 LAVVideo.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
6b230000 LAVAudio.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
6b280000 avutil-lav-55.dll 55.6.100.0 C:\Program
Files\KCP\LAV Filters
6b320000 avresample-lav-3.dll 3.0.0.0 C:\Program
Files\KCP\LAV Filters
6b350000 avcodec-lav-57.dll 57.15.100.0 C:\Program
Files\KCP\LAV Filters
6c300000 avformat-lav-57.dll 57.14.100.0 C:\Program
Files\KCP\LAV Filters
6c4a0000 LAVSplitter.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
6c870000 WINSPOOL.DRV 6.1.7601.17514
C:\Windows\system32
6c9a0000 MSACM32.dll 6.1.7600.16385
C:\Windows\system32
6ca00000 dwmapi.dll 6.1.7601.18917
C:\Windows\system32
6da20000 wsock32.dll 6.1.7600.16385
C:\Windows\system32
6ee60000 gdiplus.dll 6.1.7601.23894
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23894_non
e_5c0be957a009922e
6f290000 RpcRtRemote.dll 6.1.7601.17514
C:\Windows\system32
6f3f0000 midimap.dll 6.1.7600.16385
C:\Windows\system32
6f900000 d3d9.dll 6.1.7601.17514
C:\Windows\system32
70c70000 UxTheme.dll 6.1.7600.16385
C:\Windows\system32
70cf0000 msacm32.drv 6.1.7600.16385
C:\Windows\system32
70e20000 quartz.dll 6.6.7601.23709
C:\Windows\SysWOW64
70fa0000 d3d11.dll 6.2.9200.16570
C:\Windows\system32
71120000 AVRT.dll 6.1.7600.16385
C:\Windows\system32
71130000 ksuser.dll 6.1.7601.19091
C:\Windows\system32
71230000 libbluray.dll C:\Program
Files\KCP\LAV Filters
712b0000 DUser.dll 6.1.7600.16385
C:\Windows\system32
71310000 devenum.dll 6.6.7601.19091
C:\Windows\SysWOW64
71530000 WINSTA.dll 6.1.7601.18540
C:\Windows\system32
71560000 oledlg.dll 6.1.7600.16385
C:\Windows\system32
71580000 msdmo.dll 6.6.7601.17514
C:\Windows\system32
717e0000 dnsapi.dll 6.1.7601.24168
C:\Windows\system32
71830000 WINMM.dll 6.1.7601.17514
C:\Windows\system32
71870000 PROPSYS.dll 7.0.7601.17514
C:\Windows\system32
71cf0000 rsaenh.dll 6.1.7600.16385
C:\Windows\system32
72280000 CRYPTSP.dll 6.1.7601.23471
C:\Windows\system32
722b0000 api-ms-win-core-synch-l1-2-0.DLL 10.0.14393.2247
C:\Windows\system32
72d60000 MSIMG32.dll 6.1.7600.16385
C:\Windows\system32
72e00000 d3d8thk.dll 6.1.7600.16385
C:\Windows\system32
72e10000 dxgi.dll 6.2.9200.16492
C:\Windows\system32
72e60000 wkscli.dll 6.1.7601.17514
C:\Windows\system32
72e70000 netutils.dll 6.1.7601.17514
C:\Windows\system32
72e80000 netapi32.dll 6.1.7601.17887
C:\Windows\system32
730a0000 slc.dll 6.1.7600.16385
C:\Windows\system32
73f00000 srvcli.dll 6.1.7601.17514
C:\Windows\system32
73f70000 WindowsCodecs.dll 6.2.9200.21830
C:\Windows\system32
740b0000 BROWCLI.DLL 6.1.7601.17887
C:\Windows\system32
740c0000 wtsapi32.dll 6.1.7601.17514
C:\Windows\system32
74120000 Secur32.dll 6.1.7601.24168
C:\Windows\system32
74960000 ntmarta.dll 6.1.7600.16385
C:\Windows\system32
74990000 COMCTL32.dll 6.10.7601.18837
C:\Windows\WinSxS\x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
74be0000 WINNSI.DLL 6.1.7601.23889
C:\Windows\system32
74bf0000 iphlpapi.dll 6.1.7601.17514
C:\Windows\system32
74ec0000 version.DLL 6.1.7600.16385
C:\Windows\system32
751f0000 CRYPTBASE.dll 6.1.7601.24168
C:\Windows\syswow64
75200000 SspiCli.dll 6.1.7601.24168
C:\Windows\syswow64
75260000 OLEAUT32.dll 6.1.7601.24117
C:\Windows\syswow64
75300000 msvcrt.dll 7.0.7601.17744
C:\Windows\syswow64
753b0000 sechost.dll 6.1.7600.16385
C:\Windows\SysWOW64
753d0000 CLBCatQ.DLL 2001.12.8530.16385
C:\Windows\syswow64
75460000 shlwapi.DLL 6.1.7601.17514
C:\Windows\syswow64
754c0000 CRYPT32.dll 6.1.7601.23971
C:\Windows\syswow64
755f0000 CFGMGR32.dll 6.1.7601.17621
C:\Windows\syswow64
756b0000 WINTRUST.dll 6.1.7601.23971
C:\Windows\syswow64
756e0000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
756f0000 MSASN1.dll 6.1.7601.17514
C:\Windows\syswow64
75700000 normaliz.DLL 6.1.7600.16385
C:\Windows\syswow64
75770000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
75780000 setupapi.dll 6.1.7601.17514
C:\Windows\syswow64
75950000 WLDAP32.dll 6.1.7601.23889
C:\Windows\syswow64
759a0000 USP10.dll 1.626.7601.23894
C:\Windows\syswow64
75a40000 LPK.dll 6.1.7601.24082
C:\Windows\syswow64
75a50000 ole32.dll 6.1.7601.24168
C:\Windows\syswow64
75bb0000 IMM32.dll 6.1.7601.17514
C:\Windows\syswow64
75c10000 DEVOBJ.dll 6.1.7601.17621
C:\Windows\syswow64
75c30000 WS2_32.dll 6.1.7601.23451
C:\Windows\syswow64
75dd0000 comdlg32.dll 6.1.7601.17514
C:\Windows\syswow64
75e50000 profapi.dll 6.1.7600.16385
C:\Windows\syswow64
75e60000 WININET.dll 11.0.9600.19081
C:\Windows\syswow64
76110000 ADVAPI32.dll 6.1.7601.24168
C:\Windows\syswow64
761c0000 KERNELBASE.dll 6.1.7601.24168
C:\Windows\syswow64
76220000 SHELL32.dll 6.1.7601.24187
C:\Windows\syswow64
76e70000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76e80000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76e90000 NSI.dll 6.1.7601.23889
C:\Windows\syswow64
76ea0000 USER32.dll 6.1.7600.16385
C:\Windows\syswow64
76fa0000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76fb0000 GDI32.dll 6.1.7601.23914
C:\Windows\syswow64
77040000 kernel32.dll 6.1.7601.24168
C:\Windows\syswow64
77150000 USERENV.dll 6.1.7601.17514
C:\Windows\syswow64
77170000 iertutil.dll 11.0.9600.19081
C:\Windows\syswow64
773b0000 RPCRT4.dll 6.1.7601.24168
C:\Windows\syswow64
774a0000 MSCTF.dll 6.1.7601.23915
C:\Windows\syswow64
77950000 ntdll.dll 6.1.7601.24168
C:\Windows\SysWOW64

processes:
0000 Idle 0 0 0
0004 System 0 0 0
00f0 smss.exe 0 0 0 normal
017c csrss.exe 0 0 0 normal
01c4 wininit.exe 0 0 0 high
01d8 csrss.exe 1 174 83 normal
0200 services.exe 0 0 0 normal
0210 lsass.exe 0 0 0 normal
0218 lsm.exe 0 0 0 normal
0278 svchost.exe 0 0 0 normal
02c0 gxxsvc.exe 0 0 0 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
02d8 winlogon.exe 1 6 0 high
033c svchost.exe 0 0 0 normal
0398 atiesrxx.exe 0 0 0 normal
010c svchost.exe 0 0 0 normal
0188 svchost.exe 0 0 0 normal
0258 svchost.exe 0 0 0 normal
01dc svchost.exe 0 0 0 normal
045c svchost.exe 0 0 0 normal
04d8 svchost.exe 0 0 0 normal
0558 spoolsv.exe 0 0 0 normal
0560 atieclxx.exe 1 9 16 normal
0584 svchost.exe 0 0 0 normal
0684 taskhost.exe 1 84 41 normal
06d8 dwm.exe 1 21 2 high
06e4 HiPatchService.exe 0 0 0 normal
0718 explorer.exe 1 513 259 normal
05a8 RadeonSettings.exe 1 59 48 normal
07a8 NLSSRV32.EXE 0 0 0 normal C:\Windows\SysWOW64
0600 svchost.exe 0 0 0 normal
0824 TeamViewer_Service.exe 0 0 0 normal C:\Program Files
(x86)\TeamViewer
0850 RAVCpl64.exe 1 61 20 normal
0860 TenorshareWinAdService.exe 0 0 0 normal C:\Users\Rizki
Saputra\AppData\Roaming\Tenorshare\Service\configs
0890 IDMan.exe 1 171 79 normal C:\Program Files
(x86)\Internet Download Manager
0938 Steam.exe 1 556 168 normal E:\Game\Steam
0a60 CCleaner64.exe 1 65 33 normal
0a88 rundll32.exe 1 61 7 normal
0ac0 jusched.exe 1 9 2 normal C:\Program Files
(x86)\Common Files\Java\Java Update
03ec svchost.exe 0 0 0 normal
0c24 IEMonitor.exe 1 20 16 normal C:\Program Files
(x86)\Internet Download Manager
0fc4 TeamViewer.exe 1 206 153 normal C:\Program Files
(x86)\TeamViewer
0cb8 SearchIndexer.exe 0 0 0 normal
0620 wmpnetwk.exe 0 0 0 normal
1044 tv_w32.exe 1 4 2 normal C:\Program Files
(x86)\TeamViewer
1050 tv_x64.exe 1 4 2 normal
1068 svchost.exe 0 0 0 normal
1204 steamwebhelper.exe 1 24 33 normal
121c steamwebhelper.exe 1 12 4 normal
12f0 steamwebhelper.exe 1 7 6 normal
1358 steamwebhelper.exe 1 4 1 above normal
0748 Garena.exe 1 48 69 normal E:\Game\Program
Addons\Garena\Garena
0830 gxxcef.exe 1 14 9 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
0c10 gxxcef.exe 1 9 1 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
0344 gxxcef.exe 1 9 1 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
08b8 EpicGamesLauncher.exe 1 24 34 normal
1744 sppsvc.exe 0 0 0 normal
1e64 amddvr.exe 1 22 17 normal
0e74 amdow.exe 1 14 31 normal
1d88 steamwebhelper.exe 1 4 1 normal
179c chrome.exe 1 47 49 normal
07bc chrome.exe 1 9 4 normal
0dd0 chrome.exe 1 9 4 normal
0d50 chrome.exe 1 11 6 normal
1fa4 chrome.exe 1 4 1 normal
1628 chrome.exe 1 4 1 idle
1e5c chrome.exe 1 4 1 idle
0908 chrome.exe 1 4 1 idle
09ac chrome.exe 1 4 1 idle
1c20 chrome.exe 1 4 1 idle
0d6c chrome.exe 1 4 1 idle
168c chrome.exe 1 4 1 idle
1eac chrome.exe 1 4 1 normal
15f4 chrome.exe 1 4 1 normal
1c4c chrome.exe 1 4 1 normal
0c80 chrome.exe 1 4 1 idle
0d08 explorer.exe 1 221 136 normal
1154 audiodg.exe 0 0 0 normal
15ac mpc-be.exe 1 203 281 normal C:\Program Files\KCP\MPC-BE

hardware:
+ Batteries
- Microsoft Composite Battery
+ Computer
- ACPI x64-based PC
+ Disk drives
- ST3500413AS ATA Device
- ST500DM002-1BD142 ATA Device
- V-GEN05SM18EU120G ATA Device
+ Display adapters
- Radeon(TM) RX 460 Graphics (driver 24.20.13011.1009)
+ Human Interface Devices
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant device
- HID-compliant device
- HID-compliant device
 - HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 1
- Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 (driver
9.1.9.1005)
+ Keyboards
- HID Keyboard Device
- HID Keyboard Device
- HID Keyboard Device
+ Mice and other pointing devices
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- Microsoft PS/2 Mouse
+ Monitors
- LG IPSFULLHD(HDMI) (driver 1.0.0.0)
+ Network adapters
- Microsoft ISATAP Adapter
- Microsoft ISATAP Adapter #2
- Realtek PCIe GBE Family Controller (driver 7.97.1001.2015)
- Teredo Tunneling Pseudo-Interface
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ Ports (COM & LPT)
- Nuvoton Communications Port (COM1) (driver 1.0.2011.1109)
- Printer Port (LPT1)
+ Processors
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
+ Sound, video and game controllers
- AMD High Definition Audio Device (driver 7.12.0.7728)
- Realtek High Definition Audio (driver 6.0.1.7680)
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- ACPI Thermal Zone
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
 - High Definition Audio Controller
- High Definition Audio Controller
- Intel 28F320C3 Flash Update Device Driver v6.4 (driver 6.4.0.0)
- Intel(R) 4 Series Chipset PCI Express Root Port - 2E31 (driver 9.1.9.1005)
- Intel(R) 4 Series Chipset Processor to I/O Controller - 2E30 (driver
9.1.9.1005)
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) ICH7 Family LPC Interface Controller - 27B8 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D0 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D2 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family SMBus Controller - 27DA (driver 9.1.9.1005)
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- Pci Bus (driver 18.45.0.0)
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Device Redirector Bus
- System board
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C8 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C9 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CA (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CB (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB2 Enhanced Host Controller - 27CC (driver
9.1.9.1006)
- USB Composite Device
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub

cpu registers:
eax = 00000000
ebx = 8b6cfa98
ecx = 4000c57f
edx = 7dbc5ac0
esi = 8e265a04
edi = 0454ef0c
eip = 6af7ee37
esp = 1279ed74
ebp = 0454ef14

stack dump:
1279ed74 08 49 e1 36 08 49 e1 36 - 9c ee 54 04 e4 ee 54 04 .I.6.I.6..T...T.
1279ed84 00 00 00 00 09 20 00 80 - ff ff ff ff 7f c5 00 40 ..... .........@
1279ed94 c0 5a bc 7d 68 80 02 6b - 08 49 e1 36 00 a0 f7 ff .Z.}h..k.I.6....
1279eda4 ff ff ff ff 60 84 1f 5a - 27 02 00 40 91 05 00 40 ....`..Z'..@...@
1279edb4 ff ff ff ff ff ff ff ff - 49 00 00 00 cf e9 f7 6a ........I......j
1279edc4 6c ee 54 04 f4 ed 79 12 - 7f c5 00 40 ff ff ff 7f l.T...y....@....
1279edd4 0e 3b 86 da 98 62 79 7e - 98 fa 6c 8b 88 51 38 81 .;...by~..l..Q8.
1279ede4 48 00 00 00 90 dc fd 0e - 68 80 02 6b a1 01 00 40 H.......h..k...@
1279edf4 0c ef 54 04 6c ee 54 04 - 02 00 00 00 68 ee 54 04 ..T.l.T.....h.T.
1279ee04 94 ee 54 04 0a 00 00 00 - 00 00 00 00 00 00 00 00 ..T.............
1279ee14 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
1279ee24 00 00 00 00 00 00 00 00 - 28 ef 79 12 70 d0 ff 6a ........(.y.p..j
1279ee34 00 00 00 00 94 c6 f6 6a - 98 fa 6c 8b ea 01 00 40 .......j..l....@
1279ee44 94 00 00 00 49 00 00 00 - 88 fa 6c 8b ff ff ff ff ....I.....l.....
1279ee54 90 dc fd 0e 31 93 f3 6a - 49 00 00 00 49 00 00 00 ....1..jI...I...
1279ee64 be 38 86 da 60 eb e5 8b - 98 bd 4e 04 d0 ef 79 12 .8..`.....N...y.
1279ee74 00 00 00 00 50 a8 13 0f - 28 a2 f4 6a 78 62 79 7e ....P...(..jxby~
1279ee84 88 fa 6c 8b 90 c8 5c 7e - 00 00 00 00 88 fa 6c 8b ..l...\~......l.
1279ee94 48 00 00 00 54 e4 97 77 - 78 62 79 7e 38 53 38 81 H...T..wxby~8S8.
1279eea4 38 10 e2 e5 c3 02 00 00 - ed 01 00 00 e0 f0 88 8a 8...............

disassembling:
[...]
4a4329ee mov edx, [ebp+8]
4a4329f1 push edx
4a4329f2 mov ecx, esi
4a4329f4 call -$c4a9 ($4a426550) ;
framequeue.cpp.CFrameQueue.UnlockItem (madVR.ax)
4a4329f9 11941 mov byte ptr [ebp], 0
4a4329fd 11942 mov eax, [esi+$43dc0]
4a432a03 mov ecx, [eax]
4a432a05 mov edx, [ebp+8]
4a432a08 push edx
4a432a09 mov eax, ebx
4a432a0b add eax, [esi+$43ed8]
4a432a11 mov edx, edi
4a432a13 adc edx, [esi+$43edc]
4a432a19 push edx
4a432a1a push eax
4a432a1b push edi
4a432a1c push ebx
4a432a1d mov eax, [esi+$43dc0]
4a432a23 push eax
4a432a24 mov eax, [ecx+$4c]
4a432a27 > call eax
4a432a29 test eax, eax
4a432a2b jl loc_4a432a60
4a432a2d 11944 lea ecx, [ebp]
4a432a30 push ecx
4a432a31 mov edx, [ebp+$c]
4a432a34 push edx
4a432a35 mov eax, [ebp+8]
4a432a38 push eax
4a432a39 mov ecx, esi
4a432a3b call -$c650 ($4a4263f0) ;
framequeue.cpp.CFrameQueue.LockItem (madVR.ax)
4a432a40 11945 mov byte ptr [ebp+$17a], 1
4a432a47 11946 mov byte ptr [ebp-$19], 1
4a432a4b 11948 jmp loc_4a432a85
4a432a4d 11910 add ecx, 1
4a432a50 11911 jmp loc_4a432866
4a432a60 11950 push 0
4a432a62 push 0
4a432a64 push 0
4a432a66 mov ecx, [ebp+8]
4a432a69 push ecx
[...]

date/time : 2019-01-09, 09:25:34, 87ms

computer name : PERSONAL-PC
user name : Rizki Saputra <admin>
registered owner : Windows User
operating system : Windows 7 x64 Service Pack 1 build 7601
system language : Indonesian
system up time : 2 hours 34 minutes
program up time : 1 minute 9 seconds
processors : 4x Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
physical memory : 4047/6143 MB (free/total)
free disk space : (C:) 12,67 GB
display mode : 1920x1080, 32 bit
process id : $147c
allocated memory : 588,05 MB
largest free block : 1,59 GB
command line : "C:\Program Files\KCP\MPC-BE\mpc-be.exe" "D:\Download\Dari
IDM\Video\TSSDK-14-1080p[x265]-SAMEHADAKU.TV.mkv"
executable : mpc-be.exe
current module : MADHCNET32.DLL
module date/time : 2015-11-21 03:15
version : 1.0.17.10
compiled with : Delphi XE7
madExcept version : 4.0.12
madVR version : 0.89.17
callstack crc : $5fce34e9, $cce37ff5, $ff5063fc
exception number : 1
exception class : Exception
exception message : Zugriffsverletzung bei Adresse $5fce34e9 in Modul
'atidxx32.dll'. Schreiben von Adresse $c982008.

CFrameQueue::RenderThread ($14fc): <priority:2>

5fce34e9 +0000 atidxx32.dll
4a408490 +04f0 madVR.ax direct3d.cpp 3220 +184 CDirect3D.Final
4a43af67 +5177 madVR.ax framequeue.cpp 14593 +1732 CFrameQueue.RenderThread
4a43b054 +0004 madVR.ax framequeue.cpp 193 +0 Queue_RenderThread
7667343b +0010 kernel32.dll BaseThreadInitThunk

main thread ($1480):

777f7eb8 +26 USER32.dll GetMessageW
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $1484:
77d80186 +0e ntdll.dll NtWaitForMultipleObjects
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $148c:
77d81f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $1490:
77d81f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $1494:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
BaseThreadInitThunk

thread $1498:
777f7eb8 +26 USER32.dll GetMessageW
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $149c: <priority:-2>

77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
76672687 +13 kernel32.dll
7667343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $14a0:
777f7eb8 +26 USER32.dll GetMessageW
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $14b0:
77d7f8fa +00e ntdll.dll NtWaitForSingleObject
779415c8 +092 KERNELBASE.dll WaitForSingleObjectEx
7667118f +03e kernel32.dll WaitForSingleObjectEx
76671143 +00d kernel32.dll WaitForSingleObject
664c7640 +020 avutil-lav-55.dll av_mallocz
664a5cdf +00f avutil-lav-55.dll av_buffer_ref
664c03ae +3be avutil-lav-55.dll av_frame_ref
7667343b +010 kernel32.dll BaseThreadInitThunk

thread $14b4:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14b8:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14bc:
77d7f8fa +0e ntdll.dll NtWaitForSingleObject
779415c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7667118f +3e kernel32.dll WaitForSingleObjectEx
76671143 +0d kernel32.dll WaitForSingleObject
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $14c0:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14c4:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14c8:
77d81f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $14cc:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14d0:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $14d4:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

KeyboardThreadProc ($14e8):
77d80186 +0e ntdll.dll NtWaitForMultipleObjects
77941714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
766719f7 +89 kernel32.dll WaitForMultipleObjectsEx
778003d4 +f4 USER32.dll MsgWaitForMultipleObjectsEx
77800669 +1a USER32.dll MsgWaitForMultipleObjects
4a450cc2 +52 madVR.ax osd.cpp 1824 +10 COsd.KeyboardThreadMethod
4a453b9e +5e madVR.ax osd.cpp 1808 +3 KeyboardThreadProc
7667343b +10 kernel32.dll BaseThreadInitThunk

WindowQueueThread ($14ec): <priority:2>

777f7eb8 +026 USER32.dll GetMessageW
08707ab6 +102 MADHCNET32.DLL madNetTools 1420 +17 WindowQueueThread
7667343b +010 kernel32.dll BaseThreadInitThunk

thread $14f0:
77d7f9b7 +0b ntdll.dll
08702c44 +30 MADHCNET32.DLL madCodeHook LpcPortThread
7667343b +10 kernel32.dll
thread $14f4: <priority:1>
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
0870292e +12 MADHCNET32.DLL madCodeHook LpcDispatchThread
7667343b +10 kernel32.dll
thread $151c:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $1520:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $1524:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $1528:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $152c:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $1554:
77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
thread $1590: <priority:15>
77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
76672687 +13 kernel32.dll
NtReplyWaitReceivePort
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $1594: <priority:15>

77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
76672687 +13 kernel32.dll
7667343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $1598:
77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
778003d4 +f4 USER32.dll
7667343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
BaseThreadInitThunk

thread $159c: <priority:15>

77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
76672687 +13 kernel32.dll
7667343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

thread $15a4:
77d80186 +00e ntdll.dll NtWaitForMultipleObjects
77941714 +0fa KERNELBASE.dll WaitForMultipleObjectsEx
766719f7 +089 kernel32.dll WaitForMultipleObjectsEx
778003d4 +0f4 USER32.dll MsgWaitForMultipleObjectsEx
77800669 +01a USER32.dll MsgWaitForMultipleObjects
4a48dd90 +070 madVR.ax tools.cpp 1422 +16 WaitFor
4a43b164 +104 madVR.ax framequeue.cpp 1349 +39
CFrameQueue.RestartRenderingIfNecessary
4a42e6a3 +683 madVR.ax framequeue.cpp 3723 +251 CFrameQueue.AddFrame
4a44f66e +3fe madVR.ax madvr.cpp 4847 +197 CVideoRenderer.Receive
4a4036ca +04a madVR.ax customren.cpp 1632 +6
CCustomRendererInputPin.Receive
7667343b +010 kernel32.dll BaseThreadInitThunk

thread $15a8: <priority:1>

77d7f8fa +0e ntdll.dll
779415c8 +92 KERNELBASE.dll
7667118f +3e kernel32.dll
76671143 +0d kernel32.dll
7667343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $15ac:
77d7fdba +0e ntdll.dll NtDelayExecution
77943d36 +5f KERNELBASE.dll SleepEx
77944607 +0a KERNELBASE.dll Sleep
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $15dc:
77d81e47 +0b ntdll.dll NtTraceControl
77dba06d +40 ntdll.dll EtwpNotificationThread
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $15e0: <priority:-3>

77d80186 +0e ntdll.dll NtWaitForMultipleObjects
77941714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
766719f7 +89 kernel32.dll WaitForMultipleObjectsEx
76672687 +13 kernel32.dll WaitForMultipleObjects
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $15f8:
77d81f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7667343b +10 kernel32.dll BaseThreadInitThunk

thread $15fc:
77d80186 +0e ntdll.dll
77941714 +fa KERNELBASE.dll
766719f7 +89 kernel32.dll
76672687 +13 kernel32.dll
7667343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk

modules:
01010000 mpc-be.exe 1.4.5.787 C:\Program
Files\KCP\MPC-BE
08660000 MADHCNET32.DLL 1.0.17.10 C:\Program
Files\KCP\madVR
088b0000 MVRSETTINGS32.DLL 1.1.9.0 C:\Program
Files\KCP\madVR
10000000 idmmkb.dll 6.19.9.1 C:\Program
Files (x86)\Internet Download Manager
4a400000 madVR.ax 0.89.17.0 C:\Program
Files\KCP\madVR
5f610000 atidxx32.dll 24.20.13011.1009
C:\Windows\system32
602e0000 atiuxpag.dll 24.20.13011.1009
C:\Windows\system32
60340000 FaultRep.dll 6.1.7601.17514
C:\Windows\system32
603a0000 XySubFilter.dll 3.1.0.746 C:\Program
Files\KCP\xy-subfilter
60520000 atiumdvt.dll 8.14.10.609
C:\Windows\system32
61130000 atiumdva.dll 24.20.13011.1009
C:\Windows\system32
61d30000 atiumdag.dll 24.20.13011.1009
C:\Windows\system32
62770000 avcodec-lav-57.dll 57.15.100.0 C:\Program
Files\KCP\LAV Filters
64b30000 DShowRdpFilter.dll 1.0.0.0
C:\Windows\system32
65d00000 amdihk32.dll 1.0.0.0
C:\Windows\system32
65d30000 atiu9pag.dll 24.20.13011.1009
C:\Windows\system32
65d60000 aticfx32.dll 24.20.13011.1009
C:\Windows\system32
65ef0000 dxva2.dll 6.1.7600.16385
C:\Windows\system32
66300000 swscale-lav-4.dll 4.0.100.0 C:\Program
Files\KCP\LAV Filters
663a0000 LAVVideo.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
664a0000 avutil-lav-55.dll 55.6.100.0 C:\Program
Files\KCP\LAV Filters
66ae0000 LAVAudio.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
66b30000 DUI70.dll 6.1.7600.16385
C:\Windows\system32
66bf0000 DUser.dll 6.1.7600.16385
C:\Windows\system32
66c20000 explorerframe.dll 6.1.7601.24187
C:\Windows\system32
66dc0000 POWRPROF.dll 6.1.7600.16385
C:\Windows\system32
66df0000 dsound.dll 6.1.7600.16385
C:\Windows\system32
66e70000 midimap.dll 6.1.7600.16385
C:\Windows\system32
66e80000 MSACM32.dll 6.1.7600.16385
C:\Windows\system32
66ea0000 msacm32.drv 6.1.7600.16385
C:\Windows\system32
66eb0000 AUDIOSES.DLL 6.1.7601.23471
C:\Windows\system32
66ef0000 AVRT.dll 6.1.7600.16385
C:\Windows\system32
66f00000 wdmaud.drv 6.1.7601.17514
C:\Windows\system32
6af90000 MMDevAPI.DLL 6.1.7601.17514
C:\Windows\system32
6b1e0000 msdmo.dll 6.6.7601.17514
C:\Windows\system32
6b1f0000 devenum.dll 6.6.7601.19091
C:\Windows\SysWOW64
6c2c0000 quartz.dll 6.6.7601.23709
C:\Windows\SysWOW64
6c440000 d3d9.dll 6.1.7601.17514
C:\Windows\system32
70960000 WindowsCodecs.dll 6.2.9200.21830
C:\Windows\system32
70aa0000 dwmapi.dll 6.1.7601.18917
C:\Windows\system32
70d80000 RpcRtRemote.dll 6.1.7601.17514
C:\Windows\system32
70d90000 wsock32.dll 6.1.7600.16385
C:\Windows\system32
70fa0000 gdiplus.dll 6.1.7601.23894
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23894_non
e_5c0be957a009922e
713c0000 avfilter-lav-6.dll 6.15.100.0 C:\Program
Files\KCP\LAV Filters
71400000 libbluray.dll C:\Program
Files\KCP\LAV Filters
71450000 avresample-lav-3.dll 3.0.0.0 C:\Program
Files\KCP\LAV Filters
71480000 avformat-lav-57.dll 57.14.100.0 C:\Program
Files\KCP\LAV Filters
71620000 LAVSplitter.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
716b0000 OLEACC.dll 7.0.0.0
C:\Windows\system32
718e0000 UxTheme.dll 6.1.7600.16385
C:\Windows\system32
71a00000 oledlg.dll 6.1.7600.16385
C:\Windows\system32
71aa0000 dnsapi.dll 6.1.7601.24168
C:\Windows\system32
71b20000 PROPSYS.dll 7.0.7601.17514
C:\Windows\system32
71f90000 rsaenh.dll 6.1.7600.16385
C:\Windows\system32
71fd0000 CRYPTSP.dll 6.1.7601.23471
C:\Windows\system32
72550000 api-ms-win-core-synch-l1-2-0.DLL 10.0.14393.2247
C:\Windows\system32
731f0000 MSIMG32.dll 6.1.7600.16385
C:\Windows\system32
73220000 BROWCLI.DLL 6.1.7601.17887
C:\Windows\system32
73230000 WINMM.dll 6.1.7601.17514
C:\Windows\system32
73280000 d3d8thk.dll 6.1.7600.16385
C:\Windows\system32
73290000 dxgi.dll 6.2.9200.16492
C:\Windows\system32
732e0000 d3d11.dll 6.2.9200.16570
C:\Windows\system32
73460000 wkscli.dll 6.1.7601.17514
C:\Windows\system32
73470000 netutils.dll 6.1.7601.17514
C:\Windows\system32
73480000 netapi32.dll 6.1.7601.17887
C:\Windows\system32
734a0000 WINSTA.dll 6.1.7601.18540
C:\Windows\system32
734d0000 ksuser.dll 6.1.7601.19091
C:\Windows\system32
74340000 WINSPOOL.DRV 6.1.7601.17514
C:\Windows\system32
74490000 slc.dll 6.1.7600.16385
C:\Windows\system32
744b0000 srvcli.dll 6.1.7601.17514
C:\Windows\system32
744d0000 wtsapi32.dll 6.1.7601.17514
C:\Windows\system32
74530000 Secur32.dll 6.1.7601.24168
C:\Windows\system32
74d70000 ntmarta.dll 6.1.7600.16385
C:\Windows\system32
74da0000 COMCTL32.dll 6.10.7601.18837
C:\Windows\WinSxS\x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
74ff0000 WINNSI.DLL 6.1.7601.23889
C:\Windows\system32
75000000 iphlpapi.dll 6.1.7601.17514
C:\Windows\system32
752d0000 version.DLL 6.1.7600.16385
C:\Windows\system32
75600000 CRYPTBASE.dll 6.1.7601.24168
C:\Windows\syswow64
75610000 SspiCli.dll 6.1.7601.24168
C:\Windows\syswow64
75670000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
75680000 USERENV.dll 6.1.7601.17514
C:\Windows\syswow64
756b0000 CLBCatQ.DLL 2001.12.8530.16385
C:\Windows\syswow64
75740000 sechost.dll 6.1.7600.16385
C:\Windows\SysWOW64
75760000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
75770000 profapi.dll 6.1.7600.16385
C:\Windows\syswow64
75780000 IMM32.dll 6.1.7601.17514
C:\Windows\syswow64
757e0000 MSASN1.dll 6.1.7601.17514
C:\Windows\syswow64
757f0000 SHELL32.dll 6.1.7601.24187
C:\Windows\syswow64
76440000 comdlg32.dll 6.1.7601.17514
C:\Windows\syswow64
764c0000 setupapi.dll 6.1.7601.17514
C:\Windows\syswow64
76660000 kernel32.dll 6.1.7601.24168
C:\Windows\syswow64
76770000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76790000 MSCTF.dll 6.1.7601.23915
C:\Windows\syswow64
76860000 NSI.dll 6.1.7601.23889
C:\Windows\syswow64
76870000 iertutil.dll 11.0.9600.19081
C:\Windows\syswow64
76ae0000 ole32.dll 6.1.7601.24168
C:\Windows\syswow64
76c40000 ADVAPI32.dll 6.1.7601.24168
C:\Windows\syswow64
76e40000 CRYPT32.dll 6.1.7601.23971
C:\Windows\syswow64
76f70000 RPCRT4.dll 6.1.7601.24168
C:\Windows\syswow64
77060000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
77070000 GDI32.dll 6.1.7601.23914
C:\Windows\syswow64
77100000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
771a0000 WINTRUST.dll 6.1.7601.23971
C:\Windows\syswow64
771d0000 msvcrt.dll 7.0.7601.17744
C:\Windows\syswow64
772e0000 WININET.dll 11.0.9600.19081
C:\Windows\syswow64
77590000 WS2_32.dll 6.1.7601.23451
C:\Windows\syswow64
775d0000 shlwapi.DLL 6.1.7601.17514
C:\Windows\syswow64
77630000 OLEAUT32.dll 6.1.7601.24117
C:\Windows\syswow64
776d0000 USP10.dll 1.626.7601.23894
C:\Windows\syswow64
77770000 DEVOBJ.dll 6.1.7601.17621
C:\Windows\syswow64
77790000 WLDAP32.dll 6.1.7601.23889
C:\Windows\syswow64
777e0000 USER32.dll 6.1.7600.16385
C:\Windows\syswow64
778e0000 LPK.dll 6.1.7601.24082
C:\Windows\syswow64
778f0000 normaliz.DLL 6.1.7600.16385
C:\Windows\syswow64
77900000 CFGMGR32.dll 6.1.7601.17621
C:\Windows\syswow64
77930000 KERNELBASE.dll 6.1.7601.24168
C:\Windows\syswow64
77d60000 ntdll.dll 6.1.7601.24168
C:\Windows\SysWOW64

processes:
0000 Idle 0 0 0
0004 System 0 0 0
00f0 smss.exe 0 0 0 normal
017c csrss.exe 0 0 0 normal
01c4 wininit.exe 0 0 0 high
01d8 csrss.exe 1 174 84 normal
01fc services.exe 0 0 0 normal
020c lsass.exe 0 0 0 normal
0214 lsm.exe 0 0 0 normal
027c svchost.exe 0 0 0 normal
02c8 gxxsvc.exe 0 0 0 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
02e4 winlogon.exe 1 6 0 high
0354 svchost.exe 0 0 0 normal
03b0 atiesrxx.exe 0 0 0 normal
0110 svchost.exe 0 0 0 normal
01a4 svchost.exe 0 0 0 normal
0124 svchost.exe 0 0 0 normal
01d0 svchost.exe 0 0 0 normal
0474 svchost.exe 0 0 0 normal
04ec svchost.exe 0 0 0 normal
0550 atieclxx.exe 1 9 15 normal
0594 spoolsv.exe 0 0 0 normal
05c4 svchost.exe 0 0 0 normal
0658 taskhost.exe 1 39 24 normal
06ac dwm.exe 1 17 2 high
0730 explorer.exe 1 281 211 normal
0768 HiPatchService.exe 0 0 0 normal
05d8 RadeonSettings.exe 1 59 49 normal
0500 NLSSRV32.EXE 0 0 0 normal C:\Windows\SysWOW64
0820 svchost.exe 0 0 0 normal
0844 TeamViewer_Service.exe 0 0 0 normal C:\Program Files
(x86)\TeamViewer
08f8 RAVCpl64.exe 1 61 21 normal
0910 IDMan.exe 1 155 145 normal C:\Program Files (x86)\Internet
Download Manager
0974 Steam.exe 1 400 129 normal E:\Game\Steam
0aec amddvr.exe 1 22 17 normal
0bc8 svchost.exe 0 0 0 normal
0b10 IEMonitor.exe 1 20 16 normal C:\Program Files (x86)\Internet
Download Manager
0ce8 TeamViewer.exe 1 191 141 normal C:\Program Files
(x86)\TeamViewer
0d20 amdow.exe 1 14 31 normal
0dc8 tv_w32.exe 1 4 2 normal C:\Program Files
(x86)\TeamViewer
0dd0 tv_x64.exe 1 4 2 normal
0dfc SearchIndexer.exe 0 0 0 normal
0e74 wmpnetwk.exe 0 0 0 normal
0ef8 svchost.exe 0 0 0 normal
0b6c steamwebhelper.exe 1 20 29 normal
0c44 steamwebhelper.exe 1 12 4 normal
0a0c steamwebhelper.exe 1 5 2 normal
03e4 steamwebhelper.exe 1 4 1 above normal
1064 steamwebhelper.exe 1 4 1 normal
03d8 sppsvc.exe 0 0 0 normal
071c Garena.exe 1 17 12 normal E:\Game\Program
Addons\Garena\Garena
1148 WmiPrvSE.exe 0 0 0 normal
0884 audiodg.exe 0 0 0 normal
0440 chrome.exe 1 50 46 normal
12f4 chrome.exe 1 12 4 normal
1324 chrome.exe 1 12 4 normal
0410 chrome.exe 1 4 1 idle
0278 chrome.exe 1 4 1 normal
0808 chrome.exe 1 4 1 idle
1144 chrome.exe 1 4 1 normal
147c mpc-be.exe 1 198 261 normal C:\Program Files\KCP\MPC-BE
17c0 svchost.exe 0 0 0 normal
17e8 chrome.exe 1 5 2 normal

hardware:
+ Batteries
- Microsoft Composite Battery
+ Computer
- ACPI x64-based PC
+ Disk drives
- ST3500413AS ATA Device
- ST500DM002-1BD142 ATA Device
- V-GEN05SM18EU120G ATA Device
+ Display adapters
- Radeon(TM) RX 460 Graphics (driver 24.20.13011.1009)
+ Human Interface Devices
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 1
- Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 (driver
9.1.9.1005)
+ Keyboards
- HID Keyboard Device
- HID Keyboard Device
- HID Keyboard Device
+ Mice and other pointing devices
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- Microsoft PS/2 Mouse
+ Monitors
- LG IPSFULLHD(HDMI) (driver 1.0.0.0)
+ Network adapters
- Microsoft ISATAP Adapter
- Microsoft ISATAP Adapter #2
- Realtek PCIe GBE Family Controller (driver 7.97.1001.2015)
- Teredo Tunneling Pseudo-Interface
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ Ports (COM & LPT)
- Nuvoton Communications Port (COM1) (driver 1.0.2011.1109)
- Printer Port (LPT1)
+ Processors
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
+ Sound, video and game controllers
- AMD High Definition Audio Device (driver 7.12.0.7728)
- Realtek High Definition Audio (driver 6.0.1.7680)
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- ACPI Thermal Zone
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High Definition Audio Controller
- Intel 28F320C3 Flash Update Device Driver v6.4 (driver 6.4.0.0)
- Intel(R) 4 Series Chipset PCI Express Root Port - 2E31 (driver 9.1.9.1005)
- Intel(R) 4 Series Chipset Processor to I/O Controller - 2E30 (driver
9.1.9.1005)
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) ICH7 Family LPC Interface Controller - 27B8 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D0 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D2 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family SMBus Controller - 27DA (driver 9.1.9.1005)
 - Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Numeric data processor
- Pci Bus (driver 18.45.0.0)
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Device Redirector Bus
- System board
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C8 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C9 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CA (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CB (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB2 Enhanced Host Controller - 27CC (driver
9.1.9.1006)
- USB Composite Device
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub

cpu registers:
eax = 00000000
ebx = 0f01cf00
ecx = 00000058
edx = 00000002
esi = 0f04fb40
edi = 0c982000
eip = 5fce34e9
esp = 0beed4f8
ebp = 0beed520

stack dump:
0beed4f8 40 d5 ee 0b 40 d1 01 0f - 2c cd 61 5f 00 00 98 0c @...@...,.a_....
0beed508 40 db 04 0f 58 20 00 00 - 88 fd 03 0f f0 b5 04 0f @...X ..........
0beed518 01 00 00 00 00 cf 01 0f - d4 d6 ee 0b 26 1a 68 5f ............&.h_
0beed528 40 d5 ee 0b 30 b5 13 0d - 28 81 13 0f f0 b5 04 0f @...0...(.......
0beed538 00 00 00 00 00 00 00 00 - 08 01 00 00 00 00 00 00 ................
0beed548 0b 04 00 00 11 04 00 00 - 00 00 00 00 00 00 00 00 ................
0beed558 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed568 00 00 00 00 30 b5 13 0d - 00 00 00 00 00 00 00 00 ....0...........
0beed578 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed588 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed598 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5a8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5b8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5c8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5d8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5e8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed5f8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed608 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed618 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0beed628 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

disassembling:
[...]
4a408462 3215 cmp [ebp-$68], ebx
4a408465 jz loc_4a408472
4a408467 3216 mov eax, [ebp-$68]
4a40846a mov ecx, [eax]
4a40846c push eax
4a40846d mov edx, [ecx+8]
4a408470 call edx
4a408472 3217 cmp [ebp-$6c], ebx
4a408475 jz loc_4a408482
4a408477 3218 mov eax, [ebp-$6c]
4a40847a mov ecx, [eax]
4a40847c push eax
4a40847d mov edx, [ecx+8]
4a408480 call edx
4a408482 3219 cmp [ebp-$70], ebx
4a408485 jz loc_4a408492
4a408487 3220 mov eax, [ebp-$70]
4a40848a mov ecx, [eax]
4a40848c push eax
4a40848d mov edx, [ecx+8]
4a408490 > call edx
4a408492 3221 lea eax, [esi+$f98]
4a408498 push eax
4a408499 call +$d1022 ($4a4d94c0) ; UnhookAPI (madVR.ax)
4a40849e 3222 lea ecx, [esi+$f9c]
4a4084a4 push ecx
4a4084a5 call +$d1016 ($4a4d94c0) ; UnhookAPI (madVR.ax)
4a4084aa 3224 mov eax, [esi+$e3c]
4a4084b0 cmp eax, ebx
4a4084b2 jz loc_4a4084c1
4a4084b4 3226 push eax
4a4084b5 call dword ptr [$4a4e3100] ; CloseHandle (kernel32.dll)
4a4084bb 3227 mov [esi+$e3c], ebx
4a4084c1 3230 push ebx
4a4084c2 push ebx
4a4084c3 mov edx, [esi+$158]
4a4084c9 push edx
4a4084ca call dword ptr [$4a4e354c] ; InvalidateRect (USER32.dll)
4a4084d0 3232 cmp [esi+$146], bl
4a4084d6 jz loc_4a40850e
4a4084d8 mov ecx, [esi+$fc4]
[...]

date/time : 2019-01-20, 07:18:23, 857ms

computer name : PERSONAL-PC
user name : Rizki Saputra <admin>
registered owner : Windows User
operating system : Windows 7 x64 Service Pack 1 build 7601
system language : Indonesian
system up time : 9 minutes 9 seconds
program up time : 3 minutes 26 seconds
processors : 4x Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
physical memory : 3916/6143 MB (free/total)
free disk space : (C:) 13,29 GB
display mode : 1920x1080, 32 bit
process id : $6a4
allocated memory : 466,54 MB
largest free block : 1,99 GB
command line : "C:\Program Files\KCP\MPC-BE\mpc-be.exe" "D:\Download\Dari
IDM\Video\Mkv720p_SAOA_15_oploverz.mkv"
executable : mpc-be.exe
current module : MADHCNET32.DLL
module date/time : 2015-11-21 03:15
version : 1.0.17.10
compiled with : Delphi XE7
madExcept version : 4.0.12
madVR version : 0.89.17
callstack crc : $5f5434e9, $fb1576e0, $6e499281
exception number : 1
exception class : Exception
exception message : Zugriffsverletzung bei Adresse $5f5434e9 in Modul
'atidxx32.dll'. Schreiben von Adresse $cb12008.

CFrameQueue::RenderThread ($66c): <priority:2>

5f5434e9 +0000 atidxx32.dll
4a408490 +04f0 madVR.ax direct3d.cpp 3220 +184 CDirect3D.Final
4a43af67 +5177 madVR.ax framequeue.cpp 14593 +1732 CFrameQueue.RenderThread
4a43b054 +0004 madVR.ax framequeue.cpp 193 +0 Queue_RenderThread
7535343b +0010 kernel32.dll BaseThreadInitThunk

main thread ($1744):

751b7eb8 +26 USER32.dll GetMessageW
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1174:
774a0186 +0e ntdll.dll NtWaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1738:
751b7eb8 +26 USER32.dll GetMessageW
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1718: <priority:-2>

774a0186 +0e ntdll.dll
759b1714 +fa KERNELBASE.dll
753519f7 +89 kernel32.dll
75352687 +13 kernel32.dll
7535343b +10 kernel32.dll
NtWaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForMultipleObjectsEx
WaitForMultipleObjects
BaseThreadInitThunk
thread $1604:
751b7eb8 +26 USER32.dll GetMessageW
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $b94:
7749f8fa +00e ntdll.dll NtWaitForSingleObject
759b15c8 +092 KERNELBASE.dll WaitForSingleObjectEx
7535118f +03e kernel32.dll WaitForSingleObjectEx
75351143 +00d kernel32.dll WaitForSingleObject
624b7640 +020 avutil-lav-55.dll av_mallocz
62495cdf +00f avutil-lav-55.dll av_buffer_ref
624b03ae +3be avutil-lav-55.dll av_frame_ref
7535343b +010 kernel32.dll BaseThreadInitThunk

thread $12cc:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $1534:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $1504:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $c0c:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1118:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $120c:
774a1f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $e0c:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $814:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $820:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

KeyboardThreadProc ($114c):
774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
751c03d4 +f4 USER32.dll MsgWaitForMultipleObjectsEx
751c0669 +1a USER32.dll MsgWaitForMultipleObjects
4a450d21 +b1 madVR.ax osd.cpp 1824 +10 COsd.KeyboardThreadMethod
4a453b9e +5e madVR.ax osd.cpp 1808 +3 KeyboardThreadProc
7535343b +10 kernel32.dll BaseThreadInitThunk

WindowQueueThread ($1578): <priority:2>

751b7eb8 +026 USER32.dll GetMessageW
088a7ab6 +102 MADHCNET32.DLL madNetTools 1420 +17 WindowQueueThread
7535343b +010 kernel32.dll BaseThreadInitThunk

thread $171c:
7749f9b7 +0b ntdll.dll NtReplyWaitReceivePort
088a2c44 +30 MADHCNET32.DLL madCodeHook LpcPortThread
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $10a0: <priority:1>

7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
088a292e +12 MADHCNET32.DLL madCodeHook LpcDispatchThread
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $16b0:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $138c:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $1154:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1108:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $10ac:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $b98:
7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $fd0: <priority:15>

774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
75352687 +13 kernel32.dll WaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $fd4: <priority:15>

774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
75352687 +13 kernel32.dll WaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $f48:
774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
751c03d4 +f4 USER32.dll MsgWaitForMultipleObjectsEx
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $a94: <priority:15>

774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
75352687 +13 kernel32.dll WaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $f7c:
774a0186 +00e ntdll.dll NtWaitForMultipleObjects
759b1714 +0fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +089 kernel32.dll WaitForMultipleObjectsEx
751c03d4 +0f4 USER32.dll MsgWaitForMultipleObjectsEx
751c0669 +01a USER32.dll MsgWaitForMultipleObjects
4a48dd90 +070 madVR.ax tools.cpp 1422 +16 WaitFor
4a43b164 +104 madVR.ax framequeue.cpp 1349 +39
CFrameQueue.RestartRenderingIfNecessary
4a42e6a3 +683 madVR.ax framequeue.cpp 3723 +251 CFrameQueue.AddFrame
4a44f66e +3fe madVR.ax madvr.cpp 4847 +197 CVideoRenderer.Receive
4a4036ca +04a madVR.ax customren.cpp 1632 +6
CCustomRendererInputPin.Receive
7535343b +010 kernel32.dll BaseThreadInitThunk

thread $d30: <priority:1>

7749f8fa +0e ntdll.dll NtWaitForSingleObject
759b15c8 +92 KERNELBASE.dll WaitForSingleObjectEx
7535118f +3e kernel32.dll WaitForSingleObjectEx
75351143 +0d kernel32.dll WaitForSingleObject
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $f80:
7749fdba +0e ntdll.dll NtDelayExecution
759b3d36 +5f KERNELBASE.dll SleepEx
759b4607 +0a KERNELBASE.dll Sleep
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $f94:
774a1e47 +0b ntdll.dll NtTraceControl
774da06d +40 ntdll.dll EtwpNotificationThread
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $f74: <priority:-3>

774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
75352687 +13 kernel32.dll WaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $13a4:
7749f8fa +0e ntdll.dll
759b15c8 +92 KERNELBASE.dll
7535118f +3e kernel32.dll
75351143 +0d kernel32.dll
7535343b +10 kernel32.dll
NtWaitForSingleObject
WaitForSingleObjectEx
WaitForSingleObjectEx
WaitForSingleObject
BaseThreadInitThunk

thread $8d4:
774a0186 +0e ntdll.dll NtWaitForMultipleObjects
759b1714 +fa KERNELBASE.dll WaitForMultipleObjectsEx
753519f7 +89 kernel32.dll WaitForMultipleObjectsEx
75352687 +13 kernel32.dll WaitForMultipleObjects
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $1764:
774a1f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $9e8:
774a1f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7535343b +10 kernel32.dll BaseThreadInitThunk

thread $770:
774a1f6f +0b ntdll.dll NtWaitForWorkViaWorkerFactory
7535343b +10 kernel32.dll BaseThreadInitThunk

modules:
00a50000 mpc-be.exe 1.4.5.787 C:\Program
Files\KCP\MPC-BE
08800000 MADHCNET32.DLL 1.0.17.10 C:\Program
Files\KCP\madVR
08900000 MVRSETTINGS32.DLL 1.1.9.0 C:\Program
Files\KCP\madVR
10000000 idmmkb.dll 6.19.9.1 C:\Program
Files (x86)\Internet Download Manager
4a400000 madVR.ax 0.89.17.0 C:\Program
Files\KCP\madVR
5ee70000 atidxx32.dll 24.20.13011.1009
C:\Windows\system32
5fb40000 atiuxpag.dll 24.20.13011.1009
C:\Windows\system32
5fba0000 FaultRep.dll 6.1.7601.17514
C:\Windows\system32
5fc00000 DShowRdpFilter.dll 1.0.0.0
C:\Windows\system32
5fc50000 XySubFilter.dll 3.1.0.746 C:\Program
Files\KCP\xy-subfilter
5fdd0000 amdihk32.dll 1.0.0.0
C:\Windows\system32
5fe00000 atiumdvt.dll 8.14.10.609
C:\Windows\system32
60a10000 atiumdva.dll 24.20.13011.1009
C:\Windows\system32
61610000 atiumdag.dll 24.20.13011.1009
C:\Windows\system32
62050000 atiu9pag.dll 24.20.13011.1009
C:\Windows\system32
62080000 aticfx32.dll 24.20.13011.1009
C:\Windows\system32
62210000 avfilter-lav-6.dll 6.15.100.0 C:\Program
Files\KCP\LAV Filters
62250000 swscale-lav-4.dll 4.0.100.0 C:\Program
Files\KCP\LAV Filters
622f0000 LAVVideo.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
623f0000 LAVAudio.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
62440000 libbluray.dll C:\Program
Files\KCP\LAV Filters
62490000 avutil-lav-55.dll 55.6.100.0 C:\Program
Files\KCP\LAV Filters
62530000 avcodec-lav-57.dll 57.15.100.0 C:\Program
Files\KCP\LAV Filters
634e0000 avformat-lav-57.dll 57.14.100.0 C:\Program
Files\KCP\LAV Filters
63680000 LAVSplitter.ax 0.67.0.0 C:\Program
Files\KCP\LAV Filters
648a0000 dxva2.dll 6.1.7600.16385
C:\Windows\system32
648c0000 avresample-lav-3.dll 3.0.0.0 C:\Program
Files\KCP\LAV Filters
65020000 OLEACC.dll 7.0.0.0
C:\Windows\system32
66110000 DUI70.dll 6.1.7600.16385
C:\Windows\system32
661d0000 DUser.dll 6.1.7600.16385
C:\Windows\system32
66200000 explorerframe.dll 6.1.7601.24187
C:\Windows\system32
663c0000 dsound.dll 6.1.7600.16385
C:\Windows\system32
68370000 POWRPROF.dll 6.1.7600.16385
C:\Windows\system32
683a0000 midimap.dll 6.1.7600.16385
C:\Windows\system32
683b0000 AUDIOSES.DLL 6.1.7601.23471
C:\Windows\system32
6a740000 msdmo.dll 6.6.7601.17514
C:\Windows\system32
6a750000 devenum.dll 6.6.7601.19091
C:\Windows\SysWOW64
6b9a0000 WINMM.dll 6.1.7601.17514
C:\Windows\system32
6b9e0000 quartz.dll 6.6.7601.23709
C:\Windows\SysWOW64
6bb60000 d3d9.dll 6.1.7601.17514
C:\Windows\system32
70080000 WindowsCodecs.dll 6.2.9200.21830
C:\Windows\system32
701c0000 dwmapi.dll 6.1.7601.18917
C:\Windows\system32
704d0000 wsock32.dll 6.1.7600.16385
C:\Windows\system32
70550000 RpcRtRemote.dll 6.1.7601.17514
C:\Windows\system32
706b0000 gdiplus.dll 6.1.7601.23894
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23894_non
e_5c0be957a009922e
71010000 UxTheme.dll 6.1.7600.16385
C:\Windows\system32
71170000 dnsapi.dll 6.1.7601.24168
C:\Windows\system32
711d0000 PROPSYS.dll 7.0.7601.17514
C:\Windows\system32
712d0000 rsaenh.dll 6.1.7600.16385
C:\Windows\system32
71330000 oledlg.dll 6.1.7600.16385
C:\Windows\system32
71350000 CRYPTSP.dll 6.1.7601.23471
C:\Windows\system32
71390000 api-ms-win-core-synch-l1-2-0.DLL 10.0.14393.2247
C:\Windows\system32
728b0000 d3d8thk.dll 6.1.7600.16385
C:\Windows\system32
728c0000 dxgi.dll 6.2.9200.16492
C:\Windows\system32
72910000 d3d11.dll 6.2.9200.16570
C:\Windows\system32
72a90000 MSIMG32.dll 6.1.7600.16385
C:\Windows\system32
72b00000 wkscli.dll 6.1.7601.17514
C:\Windows\system32
72b10000 netutils.dll 6.1.7601.17514
C:\Windows\system32
72b20000 netapi32.dll 6.1.7601.17887
C:\Windows\system32
72b40000 WINSTA.dll 6.1.7601.18540
C:\Windows\system32
72be0000 BROWCLI.DLL 6.1.7601.17887
C:\Windows\system32
72bf0000 MSACM32.dll 6.1.7600.16385
C:\Windows\system32
72c10000 msacm32.drv 6.1.7600.16385
C:\Windows\system32
72c20000 AVRT.dll 6.1.7600.16385
C:\Windows\system32
72c30000 ksuser.dll 6.1.7601.19091
C:\Windows\system32
72c40000 MMDevAPI.DLL 6.1.7601.17514
C:\Windows\system32
72cd0000 wdmaud.drv 6.1.7601.17514
C:\Windows\system32
73a60000 WINSPOOL.DRV 6.1.7601.17514
C:\Windows\system32
73bb0000 slc.dll 6.1.7600.16385
C:\Windows\system32
73bd0000 srvcli.dll 6.1.7601.17514
C:\Windows\system32
73bf0000 wtsapi32.dll 6.1.7601.17514
C:\Windows\system32
73c50000 Secur32.dll 6.1.7601.24168
C:\Windows\system32
74490000 ntmarta.dll 6.1.7600.16385
C:\Windows\system32
744c0000 COMCTL32.dll 6.10.7601.18837
C:\Windows\WinSxS\x86_microsoft.windows.common-
controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
74710000 WINNSI.DLL 6.1.7601.23889
C:\Windows\system32
74720000 iphlpapi.dll 6.1.7601.17514
C:\Windows\system32
749f0000 version.DLL 6.1.7600.16385
C:\Windows\system32
74d20000 CRYPTBASE.dll 6.1.7601.24168
C:\Windows\syswow64
74d30000 SspiCli.dll 6.1.7601.24168
C:\Windows\syswow64
74d90000 iertutil.dll 11.0.9600.19081
C:\Windows\syswow64
74fd0000 USERENV.dll 6.1.7601.17514
C:\Windows\syswow64
74ff0000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
75000000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
75010000 sechost.dll 6.1.7600.16385
C:\Windows\SysWOW64
75030000 ole32.dll 6.1.7601.24168
C:\Windows\syswow64
75190000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
751a0000 USER32.dll 6.1.7600.16385
C:\Windows\syswow64
752a0000 OLEAUT32.dll 6.1.7601.24117
C:\Windows\syswow64
75340000 kernel32.dll 6.1.7601.24168
C:\Windows\syswow64
75450000 ADVAPI32.dll 6.1.7601.24168
C:\Windows\syswow64
75500000 shlwapi.DLL 6.1.7601.17514
C:\Windows\syswow64
75560000 WININET.dll 11.0.9600.19081
C:\Windows\syswow64
75810000 USP10.dll 1.626.7601.23894
C:\Windows\syswow64
758e0000 GDI32.dll 6.1.7601.23914
C:\Windows\syswow64
75970000 WINTRUST.dll 6.1.7601.23971
C:\Windows\syswow64
759a0000 KERNELBASE.dll 6.1.7601.24168
C:\Windows\syswow64
759f0000 WLDAP32.dll 6.1.7601.23889
C:\Windows\syswow64
75a40000 MSASN1.dll 6.1.7601.17514
C:\Windows\syswow64
75a50000 SHELL32.dll 6.1.7601.24187
C:\Windows\syswow64
766a0000 comdlg32.dll 6.1.7601.17514
C:\Windows\syswow64
76720000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76730000 MSCTF.dll 6.1.7601.23915
C:\Windows\syswow64
76800000 setupapi.dll 6.1.7601.17514
C:\Windows\syswow64
769a0000 WS2_32.dll 6.1.7601.23451
C:\Windows\syswow64
769e0000 DEVOBJ.dll 6.1.7601.17621
C:\Windows\syswow64
76a00000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492
C:\Windows\syswow64
76a10000 CRYPT32.dll 6.1.7601.23971
C:\Windows\syswow64
76b40000 msvcrt.dll 7.0.7601.17744
C:\Windows\syswow64
76bf0000 NSI.dll 6.1.7601.23889
C:\Windows\syswow64
76c70000 IMM32.dll 6.1.7601.17514
C:\Windows\syswow64
76cd0000 normaliz.DLL 6.1.7600.16385
C:\Windows\syswow64
76ce0000 RPCRT4.dll 6.1.7601.24168
C:\Windows\syswow64
76e60000 profapi.dll 6.1.7600.16385
C:\Windows\syswow64
76e70000 LPK.dll 6.1.7601.24082
C:\Windows\syswow64
76e90000 CLBCatQ.DLL 2001.12.8530.16385
C:\Windows\syswow64
76f20000 CFGMGR32.dll 6.1.7601.17621
C:\Windows\syswow64
77480000 ntdll.dll 6.1.7601.24168
C:\Windows\SysWOW64

processes:
0000 Idle 0 0 0
0004 System 0 0 0
00f0 smss.exe 0 0 0 normal
017c csrss.exe 0 0 0 normal
01c4 wininit.exe 0 0 0 high
01d8 csrss.exe 1 174 81 normal
0200 services.exe 0 0 0 normal
0210 lsass.exe 0 0 0 normal
0218 lsm.exe 0 0 0 normal
0278 svchost.exe 0 0 0 normal
02c4 gxxsvc.exe 0 0 0 normal E:\Game\Program
Addons\Garena\Garena\2.0.1811.2302
02dc winlogon.exe 1 6 0 high
033c svchost.exe 0 0 0 normal
039c atiesrxx.exe 0 0 0 normal
0108 svchost.exe 0 0 0 normal
0184 svchost.exe 0 0 0 normal
0258 svchost.exe 0 0 0 normal
02b4 svchost.exe 0 0 0 normal
0430 audiodg.exe 0 0 0 normal
0458 svchost.exe 0 0 0 normal
04dc svchost.exe 0 0 0 normal
0548 atieclxx.exe 1 9 15 normal
0588 spoolsv.exe 0 0 0 normal
05b4 svchost.exe 0 0 0 normal
0604 taskhost.exe 1 48 26 normal
064c dwm.exe 1 18 2 high
06c8 taskeng.exe 1 12 3 normal
06e4 explorer.exe 1 269 203 normal
07c0 HiPatchService.exe 0 0 0 normal
04c8 RadeonSettings.exe 1 59 52 normal
07cc NLSSRV32.EXE 0 0 0 normal C:\Windows\SysWOW64
04f0 svchost.exe 0 0 0 normal
080c TeamViewer_Service.exe 0 0 0 normal C:\Program Files
(x86)\TeamViewer
0824 RAVCpl64.exe 1 74 22 normal
082c IDMan.exe 1 117 78 normal C:\Program Files (x86)\Internet
Download Manager
0868 Steam.exe 1 163 44 normal E:\Game\Steam
0b64 svchost.exe 0 0 0 normal
03ec amddvr.exe 1 23 17 normal
03cc IEMonitor.exe 1 20 16 normal C:\Program Files (x86)\Internet
Download Manager
0d08 TeamViewer.exe 1 229 227 normal C:\Program Files
(x86)\TeamViewer
0d44 amdow.exe 1 14 31 normal
0dec tv_w32.exe 1 4 2 normal C:\Program Files
(x86)\TeamViewer
0df4 tv_x64.exe 1 4 2 normal
0e18 SearchIndexer.exe 0 0 0 normal
0e78 wmpnetwk.exe 0 0 0 normal
0f1c svchost.exe 0 0 0 normal
0c58 steamwebhelper.exe 1 20 17 normal
05c4 steamwebhelper.exe 1 12 4 normal
09b0 steamwebhelper.exe 1 5 1 normal
0bd8 chrome.exe 1 42 49 normal
0bdc chrome.exe 1 12 4 normal
0cd4 chrome.exe 1 12 4 normal
10d4 chrome.exe 1 4 1 normal
10e4 chrome.exe 1 4 1 normal
1408 chrome.exe 1 4 1 normal
1370 chrome.exe 1 4 1 idle
1704 chrome.exe 1 4 1 idle
1708 chrome.exe 1 4 1 idle
05f8 sppsvc.exe 0 0 0 normal
1580 WmiPrvSE.exe 0 0 0 normal
16f0 Garena.exe 1 17 11 normal E:\Game\Program
Addons\Garena\Garena
06a4 mpc-be.exe 1 198 254 normal C:\Program Files\KCP\MPC-BE
1798 taskeng.exe 0 0 0 below normal
17b4 CCUpdate.exe 0 0 0 idle C:\Program Files\CCleaner
0de8 svchost.exe 0 0 0 normal
15f0 WerFault.exe 0 0 0 normal
15ec chrome.exe 1 5 1 normal

hardware:
+ Batteries
- Microsoft Composite Battery
+ Computer
- ACPI x64-based PC
+ Disk drives
- ST3500413AS ATA Device
- ST500DM002-1BD142 ATA Device
- V-GEN05SM18EU120G ATA Device
+ Display adapters
- Radeon(TM) RX 460 Graphics (driver 24.20.13011.1009)
+ Human Interface Devices
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant consumer control device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- HID-compliant device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
- USB Input Device
+ IDE ATA/ATAPI controllers
- ATA Channel 0
- ATA Channel 1
- Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 (driver
9.1.9.1005)
+ Keyboards
- HID Keyboard Device
- HID Keyboard Device
 - HID Keyboard Device
+ Mice and other pointing devices
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- HID-compliant mouse
- Microsoft PS/2 Mouse
+ Monitors
- LG IPSFULLHD(HDMI) (driver 1.0.0.0)
+ Network adapters
- Microsoft ISATAP Adapter
- Microsoft ISATAP Adapter #2
- Realtek PCIe GBE Family Controller (driver 7.97.1001.2015)
- Teredo Tunneling Pseudo-Interface
- WAN Miniport (IKEv2)
- WAN Miniport (IP)
- WAN Miniport (IPv6)
- WAN Miniport (L2TP)
- WAN Miniport (Network Monitor)
- WAN Miniport (PPPOE)
- WAN Miniport (PPTP)
- WAN Miniport (SSTP)
+ Ports (COM & LPT)
- Nuvoton Communications Port (COM1) (driver 1.0.2011.1109)
- Printer Port (LPT1)
+ Processors
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
- Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
+ Sound, video and game controllers
- AMD High Definition Audio Device (driver 7.12.0.7728)
- Realtek High Definition Audio (driver 6.0.1.7680)
+ System devices
- ACPI Fixed Feature Button
- ACPI Power Button
- ACPI Thermal Zone
- Composite Bus Enumerator
- Direct memory access controller
- File as Volume Driver
- High Definition Audio Controller
- High Definition Audio Controller
- Intel 28F320C3 Flash Update Device Driver v6.4 (driver 6.4.0.0)
- Intel(R) 4 Series Chipset PCI Express Root Port - 2E31 (driver 9.1.9.1005)
- Intel(R) 4 Series Chipset Processor to I/O Controller - 2E30 (driver
9.1.9.1005)
- Intel(R) 82801 PCI Bridge - 244E
- Intel(R) ICH7 Family LPC Interface Controller - 27B8 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D0 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family PCI Express Root Port - 27D2 (driver 9.1.9.1005)
- Intel(R) N10/ICH7 Family SMBus Controller - 27DA (driver 9.1.9.1005)
- Microsoft ACPI-Compliant System
- Microsoft System Management BIOS Driver
- Microsoft Virtual Drive Enumerator Driver
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
- Motherboard resources
 - Numeric data processor
- Pci Bus (driver 18.45.0.0)
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- Remote Desktop Device Redirector Bus
- System board
- System board
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- UMBus Enumerator
- UMBus Root Bus Enumerator
- Volume Manager
+ Universal Serial Bus controllers
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C8 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C9 (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CA (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CB (driver
9.1.9.1006)
- Intel(R) N10/ICH7 Family USB2 Enhanced Host Controller - 27CC (driver
9.1.9.1006)
- USB Composite Device
- USB Composite Device
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub
- USB Root Hub

cpu registers:
eax = 00000000
ebx = 0f15cf00
ecx = 00000058
edx = 00000002
esi = 0f18fb40
edi = 0cb12000
eip = 5f5434e9
esp = 0c2cda18
ebp = 0c2cda40

stack dump:
0c2cda18 60 da 2c 0c 40 d1 15 0f - 2c cd e7 5e 00 00 b1 0c `.,.@...,..^....
0c2cda28 40 db 18 0f 58 20 00 00 - 88 fd 17 0f f0 b5 18 0f @...X ..........
0c2cda38 01 00 00 00 00 cf 15 0f - f4 db 2c 0c 26 1a ee 5e ..........,.&..^
0c2cda48 60 da 2c 0c 60 e5 b7 0d - 28 48 24 0f f0 b5 18 0f `.,.`...(H$.....
0c2cda58 00 00 00 00 00 00 00 00 - 08 01 00 00 00 00 00 00 ................
0c2cda68 0b 04 00 00 11 04 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cda78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cda88 00 00 00 00 60 e5 b7 0d - 00 00 00 00 00 00 00 00 ....`...........
0c2cda98 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdaa8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdab8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdac8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdad8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdae8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdaf8 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdb08 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdb18 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdb28 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdb38 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0c2cdb48 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

disassembling:
[...]
4a408462 3215 cmp [ebp-$68], ebx
4a408465 jz loc_4a408472
4a408467 3216 mov eax, [ebp-$68]
4a40846a mov ecx, [eax]
4a40846c push eax
4a40846d mov edx, [ecx+8]
4a408470 call edx
4a408472 3217 cmp [ebp-$6c], ebx
4a408475 jz loc_4a408482
4a408477 3218 mov eax, [ebp-$6c]
4a40847a mov ecx, [eax]
4a40847c push eax
4a40847d mov edx, [ecx+8]
4a408480 call edx
4a408482 3219 cmp [ebp-$70], ebx
4a408485 jz loc_4a408492
4a408487 3220 mov eax, [ebp-$70]
4a40848a mov ecx, [eax]
4a40848c push eax
4a40848d mov edx, [ecx+8]
4a408490 > call edx
4a408492 3221 lea eax, [esi+$f98]
4a408498 push eax
4a408499 call +$d1022 ($4a4d94c0) ; UnhookAPI (madVR.ax)
4a40849e 3222 lea ecx, [esi+$f9c]
4a4084a4 push ecx
4a4084a5 call +$d1016 ($4a4d94c0) ; UnhookAPI (madVR.ax)
4a4084aa 3224 mov eax, [esi+$e3c]
4a4084b0 cmp eax, ebx
4a4084b2 jz loc_4a4084c1
4a4084b4 3226 push eax
4a4084b5 call dword ptr [$4a4e3100] ; CloseHandle (kernel32.dll)
4a4084bb 3227 mov [esi+$e3c], ebx
4a4084c1 3230 push ebx
4a4084c2 push ebx
4a4084c3 mov edx, [esi+$158]
4a4084c9 push edx
4a4084ca call dword ptr [$4a4e354c] ; InvalidateRect (USER32.dll)
4a4084d0 3232 cmp [esi+$146], bl
4a4084d6 jz loc_4a40850e
4a4084d8 mov ecx, [esi+$fc4]
[...]