000000014D26D440 - 00 00 00 00

00000001568479E0 - 00 00 00 00

thread start - 00000001493E6ED0

getfilesize - 0000000000001422

kuser:

49 C7 C7 78 02 FE 7F 45 8B 37 66 41 83 EF 90 45 03 37 66 41 83 EF 7C 45 03 37 66 41
83 EF E8 45 03 37 66 41 83 C7 FC 45 33 37 66 41 83 C7 F0 45 33 37 66 41 83 C7 0C 45
2B 37 41 81 EE 6A 82 10 55 C3

0000000156B85E90 | 49:C7C7 7802FE7F | mov r15,7FFE0278

|
0000000156B85E97 | 45:8B37 | mov r14d,dword ptr ds:[r15]
|
0000000156B85E9A | 6641:83EF 90 | sub r15w,FF90
|
0000000156B85E9F | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EA2 | 6641:83EF 7C | sub r15w,7C
|
0000000156B85EA7 | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EAA | 6641:83EF E8 | sub r15w,FFE8
|
0000000156B85EAF | 45:0337 | add r14d,dword ptr ds:[r15]
|
0000000156B85EB2 | 6641:83C7 FC | add r15w,FFFC
|
0000000156B85EB7 | 45:3337 | xor r14d,dword ptr ds:[r15]
|
0000000156B85EBA | 6641:83C7 F0 | add r15w,FFF0
|
0000000156B85EBF | 45:3337 | xor r14d,dword ptr ds:[r15]
|
0000000156B85EC2 | 6641:83C7 0C | add r15w,C
|
0000000156B85EC7 | 45:2B37 | sub r14d,dword ptr ds:[r15]
|
0000000156B85ECA | 41:81EE 6A821055 | sub r14d,5510826A
|
0000000156B85ED1 | C3 | ret
|

23 53 DC 40
01 00 10 01