Information | Value |
---|---|
Trigger | KiPageFault+0x377 |
Start Address | 0xfffff960008de219 |
Information | Value |
---|---|
Sequence Length | 9524 |
Process | Count |
---|---|
Process 37 (csrss.exe, PID: 396) | 1 |
Symbol | Parameters | ||||
---|---|---|---|---|---|
MmCreateSection | DesiredAccess_unk = 0x0, ObjectAttributes_unk = 0x0, MaximumSize_ptr = 0xffffd00020c219f0, SectionPageProtection = 0x4, AllocationAttributes = 0x8000000, FileHandle_unk = 0x0, File_unk = 0x0, SectionObject_ptr_out = 0xffffd00020c219e0, SectionObject_out = 0xffffc000087826d0, ret_val_unk_out = 0x0 | ||||
ObfReferenceObject | Object_ptr = 0xffffc000087826d0, ret_val_ptr_out = 0x2 | ||||
DxgkCddPresentDisplayOnly | ret_val_out = 0x0 | ||||
DxgkCddPresentDisplayOnly | ret_val_out = 0x0 | ||||
ObfReferenceObject | Object_ptr = 0xffffc000087826d0, ret_val_ptr_out = 0x3 | ||||
DxgkCddPresentDisplayOnly | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000128f180 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000007fcda0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000147d450 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000147d450 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000147d450 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000147d450 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000147d450 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000162c1b0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000012371a0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000012371a0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe000012371a0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
ExEnterCriticalRegionAndAcquireFastMutexUnsafe | FastMutex_unk = 0xffffe0000126bf30 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 | ||||
DxgkCddSubmitPresentHistory | ret_val_out = 0x0 | ||||
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 | ||||
For performance reasons the remaining entries are omitted.
Click to download all entries as text file. |
Information | Value |
---|---|
Trigger | KiPageFault+0x377 |
Start Address | 0xfffff960008dddde |
Information | Value |
---|---|
Sequence Length | 194 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff9014240f2b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001582cd0, Process_unk = 0xffffe000011ff900, BaseAddress_ptr = 0xfffff9014240f5d8, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021db2880, ViewSize_ptr = 0xfffff9014240f5f0, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014240f5d8, BaseAddress_out = 0x44f0000, SectionOffset_ptr_out = 0xffffd00021db2880, ViewSize_ptr_out = 0xfffff9014240f5f0, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x7050632 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901424132c8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00001254260 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00001254278 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 22 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff901424172b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc000015b1570, Process_unk = 0xffffe000011ff900, BaseAddress_ptr = 0xfffff901424175d8, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021d06ed0, ViewSize_ptr = 0xfffff901424175f0, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff901424175d8, BaseAddress_out = 0x4610000, SectionOffset_ptr_out = 0xffffd00021d06ed0, ViewSize_ptr_out = 0xfffff901424175f0, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x6050638 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901400ca028 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000126bf30 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000126bf48 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 8 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 3 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff9014241f530 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc0000167abc0, Process_unk = 0xffffe000011ff900, BaseAddress_ptr = 0xfffff9014241f858, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00020e4fed0, ViewSize_ptr = 0xfffff9014241f870, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014241f858, BaseAddress_out = 0x4ba0000, SectionOffset_ptr_out = 0xffffd00020e4fed0, ViewSize_ptr_out = 0xfffff9014241f870, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x1050655 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901409fd378 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000128f180 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000128f198 |
Information | Value |
---|---|
Sequence Length | 172 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff90140890700 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001daf8c0, Process_unk = 0xffffe0000120d900, BaseAddress_ptr = 0xfffff90140890a28, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021de5ed0, ViewSize_ptr = 0xfffff90140890a40, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90140890a28, BaseAddress_out = 0x92cd790000, SectionOffset_ptr_out = 0xffffd00021de5ed0, ViewSize_ptr_out = 0xfffff90140890a40, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x2a0505ca |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901408972c8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000162c1b0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000162c1c8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff9014087f840 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001b06d40, Process_unk = 0xffffe0000120d900, BaseAddress_ptr = 0xfffff9014087fb68, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021de5ed0, ViewSize_ptr = 0xfffff9014087fb80, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014087fb68, BaseAddress_out = 0x92ca2d0000, SectionOffset_ptr_out = 0xffffd00021de5ed0, ViewSize_ptr_out = 0xfffff9014087fb80, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x5d0506fe |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901425358a8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe000007fcda0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe000007fcdb8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff90142561ca0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001594e00, Process_unk = 0xffffe0000120d900, BaseAddress_ptr = 0xfffff90142561fc8, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021de5ed0, ViewSize_ptr = 0xfffff90142561fe0, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90142561fc8, BaseAddress_out = 0x92ca8d0000, SectionOffset_ptr_out = 0xffffd00021de5ed0, ViewSize_ptr_out = 0xfffff90142561fe0, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x80505c9 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901400d76b8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000147d450 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000147d468 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
MmUnmapViewOfSection | Process_unk = 0xffffe0000120d900, BaseAddress_ptr = 0x92ca8d0000, ret_val_unk_out = 0x0 |
MmUnmapViewOfSection | Process_unk = 0xffffe0000120d900, BaseAddress_ptr = 0x92cd790000, ret_val_unk_out = 0x0 |
Information | Value |
---|---|
Sequence Length | 48 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 1 |
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff90142521030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001d942b0, Process_unk = 0xffffe0000137f900, BaseAddress_ptr = 0xfffff90142521358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd0002180eed0, ViewSize_ptr = 0xfffff90142521370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90142521358, BaseAddress_out = 0x5eb0e20000, SectionOffset_ptr_out = 0xffffd0002180eed0, ViewSize_ptr_out = 0xfffff90142521370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x1205059c |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901424ed2c8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe000012371a0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe000012371b8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff9014251f030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc0000154de20, Process_unk = 0xffffe0000137f900, BaseAddress_ptr = 0xfffff9014251f358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd0002180eed0, ViewSize_ptr = 0xfffff9014251f370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014251f358, BaseAddress_out = 0x5eb4300000, SectionOffset_ptr_out = 0xffffd0002180eed0, ViewSize_ptr_out = 0xfffff9014251f370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x17050580 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901400f55c8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00001463440 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00001463458 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff9014087f840 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001a3c060, Process_unk = 0xffffe0000137f900, BaseAddress_ptr = 0xfffff9014087fb68, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd0002180eed0, ViewSize_ptr = 0xfffff9014087fb80, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014087fb68, BaseAddress_out = 0x5eb4350000, SectionOffset_ptr_out = 0xffffd0002180eed0, ViewSize_ptr_out = 0xfffff9014087fb80, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x680506f0 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901408cccb8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000144ce70 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000144ce88 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
MmUnmapViewOfSection | Process_unk = 0xffffe0000137f900, BaseAddress_ptr = 0x5eb4350000, ret_val_unk_out = 0x0 |
MmUnmapViewOfSection | Process_unk = 0xffffe0000137f900, BaseAddress_ptr = 0x5eb0e20000, ret_val_unk_out = 0x0 |
Information | Value |
---|---|
Sequence Length | 12 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff9014251f030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc0000123d990, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff9014251f358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd000209f2ed0, ViewSize_ptr = 0xfffff9014251f370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014251f358, BaseAddress_out = 0x47839e0000, SectionOffset_ptr_out = 0xffffd000209f2ed0, ViewSize_ptr_out = 0xfffff9014251f370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x5f050579 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901409dbcb8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00000b1f1d0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00000b1f1e8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 56 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
EngAllocMem | ret_val_out = 0xfffff9014251f030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001c662c0, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff9014251f358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021096ed0, ViewSize_ptr = 0xfffff9014251f370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff9014251f358, BaseAddress_out = 0xcb2b250000, SectionOffset_ptr_out = 0xffffd00021096ed0, ViewSize_ptr_out = 0xfffff9014251f370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0xffffffffbc050599 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901409dfcb8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00001127c40 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00001127c58 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff90142521030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc000017b89a0, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff90142521358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021096ed0, ViewSize_ptr = 0xfffff90142521370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90142521358, BaseAddress_out = 0xcb27de0000, SectionOffset_ptr_out = 0xffffd00021096ed0, ViewSize_ptr_out = 0xfffff90142521370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x506de |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901409e1cb8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe0000156dfc0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe0000156dfd8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff901409e3ca0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001cb1950, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff901409e3fc8, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd00021096ed0, ViewSize_ptr = 0xfffff901409e3fe0, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff901409e3fc8, BaseAddress_out = 0xcb29a40000, SectionOffset_ptr_out = 0xffffd00021096ed0, ViewSize_ptr_out = 0xfffff901409e3fe0, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x69050587 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901424e73c8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00001473df0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00001473e08 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Trigger | DrvFillPath+0x3b2 |
Start Address | 0xfffff960008e8fac |
Information | Value |
---|---|
Sequence Length | 43 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 9 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 2 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 7 |
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 171 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 264 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 49 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 16 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 7 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 4 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 181 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 22 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 3 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 3 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 73 (wanacr~1.exe, PID: 2432) | 2 |
Process 74 (wanacr~1.exe, PID: 2468) | 2 |
Process 75 (wanacr~1.exe, PID: 2504) | 2 |
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 81 (wanacr~1.exe, PID: 2732) | 4 |
Process 82 (wanacr~1.exe, PID: 2768) | 3 |
Process 83 (wanacr~1.exe, PID: 2804) | 2 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 3 |
Process 54 (explorer.exe, PID: 1048) | 19 |
Process 58 (wanacr~1.exe, PID: 1104) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 59 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 8 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 4 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 3 |
Process 54 (explorer.exe, PID: 1048) | 4 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 19 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 52 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 31 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 6 |
Process | Count |
---|---|
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 2 |
Process 72 (wanacr~1.exe, PID: 2392) | 2 |
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Process 77 (wanacr~1.exe, PID: 2568) | 4 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 3 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Process 82 (wanacr~1.exe, PID: 2768) | 2 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 3 |
Process 54 (explorer.exe, PID: 1048) | 6 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 49 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 10 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 79 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 7 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 45 |
Process | Count |
---|---|
Process 83 (wanacr~1.exe, PID: 2804) | 2 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 105 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 123 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 117 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 99 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 46 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000128f180 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 465 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 156 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 69 (wanacr~1.exe, PID: 2284) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 65 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 15 |
Process | Count |
---|---|
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 84 |
Process | Count |
---|---|
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 34 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 309 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 39 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 30 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000007fcda0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 234 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 302 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 24 |
Process | Count |
---|---|
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000147d450 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000120d900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000162c1b0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 18 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 5 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 120 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001463440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 63 |
Process | Count |
---|---|
Process 69 (wanacr~1.exe, PID: 2284) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000144ce70 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 153 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 275 |
Process | Count |
---|---|
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 33 |
Process | Count |
---|---|
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 27 |
Process | Count |
---|---|
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e9ea0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001428900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000139abd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 201 |
Process | Count |
---|---|
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 87 |
Process | Count |
---|---|
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012371a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000014e9160 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 88 |
Process | Count |
---|---|
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000160c120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 180 |
Process | Count |
---|---|
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 52 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 60 |
Process | Count |
---|---|
Process 72 (wanacr~1.exe, PID: 2392) | 1 |
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000134fb80 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 354 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 195 |
Process | Count |
---|---|
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 21 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 70 (wanacr~1.exe, PID: 2320) | 1 |
Process 71 (wanacr~1.exe, PID: 2356) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00000c8f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000111b790 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 186 |
Process | Count |
---|---|
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 91 |
Process | Count |
---|---|
Process 75 (wanacr~1.exe, PID: 2504) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001609810 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe0000137f900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 182 |
Process | Count |
---|---|
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 66 |
Process | Count |
---|---|
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001235120 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 129 |
Process | Count |
---|---|
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 207 |
Process | Count |
---|---|
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 54 |
Process | Count |
---|---|
Process 80 (wanacr~1.exe, PID: 2696) | 1 |
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011e83f0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000015af200 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000012e1b30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 57 |
Process | Count |
---|---|
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000011ff330 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 51 |
Process | Count |
---|---|
Process 82 (wanacr~1.exe, PID: 2768) | 1 |
Process 84 (wanacr~1.exe, PID: 2840) | 1 |
Process 78 (wanacr~1.exe, PID: 2624) | 1 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000104e190 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011e9700 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000130ecd0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 48 |
Process | Count |
---|---|
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 177 |
Process | Count |
---|---|
Process 83 (wanacr~1.exe, PID: 2804) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001306680 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 36 |
Process | Count |
---|---|
Process 73 (wanacr~1.exe, PID: 2432) | 1 |
Process 77 (wanacr~1.exe, PID: 2568) | 1 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe000011ff900 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000126bf30 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 192 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 118 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe0000156dfc0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 130 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 34 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 83 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 67 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 66 |
Process | Count |
---|---|
Process 74 (wanacr~1.exe, PID: 2468) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001473df0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 384 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 10 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 94 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 220 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 72 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 64 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 64 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 44 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 85 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 580 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 104 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 190 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 182 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 28 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 2 |
Process 54 (explorer.exe, PID: 1048) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 194 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 32 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 3 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 131 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 411 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 78 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 79 (wanacr~1.exe, PID: 2660) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 416 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Sequence Length | 219 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 12 |
Process | Count |
---|---|
Process 58 (wanacr~1.exe, PID: 1104) | 1 |
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Process 54 (explorer.exe, PID: 1048) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 50 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 42 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 2 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 167 |
Process | Count |
---|---|
Process 85 (wanacr~1.exe, PID: 2876) | 1 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00001127c40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Trigger | RmtFillPath+0x35 |
Start Address | 0xfffff960008e8b4c |
Information | Value |
---|---|
Sequence Length | 8 |
Process | Count |
---|---|
Process 43 (dwm.exe, PID: 660) | 18 |
Symbol | Parameters |
---|---|
EngAcquireSemaphore | ret_val_out = 0xfffff901409d8010 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
MmUnmapViewOfSection | Process_unk = 0xffffe000011ff900, BaseAddress_ptr = 0xdc50000, ret_val_unk_out = 0x0 |
ObfDereferenceObject | Object_ptr = 0xffffc00001a3aa50, ret_val_ptr_out = 0x1 |
EngUnlockSurface | ret_val_out = 0x1 |
EngDeleteSurface | ret_val_out = 0x1 |
ExFreePoolWithTag | P_ptr = 0xffffe00001396e70, Tag = 0x0 |
EngFreeMem | ret_val_out = 0xfffff901409fb850 |
Information | Value |
---|---|
Sequence Length | 7 |
Process | Count |
---|---|
Process 43 (dwm.exe, PID: 660) | 32 |
Symbol | Parameters |
---|---|
EngAcquireSemaphore | ret_val_out = 0xfffff901409d8010 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
ObfDereferenceObject | Object_ptr = 0xffffc00001594e00, ret_val_ptr_out = 0x1 |
EngUnlockSurface | ret_val_out = 0x1 |
EngDeleteSurface | ret_val_out = 0x1 |
ExFreePoolWithTag | P_ptr = 0xffffe0000147d450, Tag = 0x0 |
EngFreeMem | ret_val_out = 0xfffff90140881ca0 |
Information | Value |
---|---|
Trigger | RmtEnablePDEV+0x123 |
Start Address | 0xfffff960008e8220 |
Information | Value |
---|---|
Sequence Length | 2 |
Process | Count |
---|---|
Process 43 (dwm.exe, PID: 660) | 51 |
Symbol | Parameters |
---|---|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
KeSetEvent | Event_unk = 0xffffe000000fcaf0, Increment_unk = 0x0, Wait = 0, Event_unk_out = 0xffffe000000fcaf0, ret_val_out = 0 |
Information | Value |
---|---|
Trigger | unknown_0xfffff960008e8000+0x5e6 |
Start Address | 0xfffff803fd24b350 |
Information | Value |
---|---|
Sequence Length | 1 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 4 |
Symbol | Parameters |
---|---|
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
Information | Value |
---|---|
Trigger | unknown_0xfffff960008e8000+0xff4 |
Start Address | 0xfffff960008c8c91 |
Information | Value |
---|---|
Sequence Length | 6 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Symbol | Parameters |
---|---|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
Information | Value |
---|---|
Sequence Length | 131 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Symbol | Parameters |
---|---|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Sequence Length | 176 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 1 |
Symbol | Parameters |
---|---|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff90142521030 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001242570, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff90142521358, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd000209f2ed0, ViewSize_ptr = 0xfffff90142521370, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90142521358, BaseAddress_out = 0x47821c0000, SectionOffset_ptr_out = 0xffffd000209f2ed0, ViewSize_ptr_out = 0xfffff90142521370, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0x110506fe |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff9014088acb8 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe000015a44a0 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe000015a44b8 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000015a44a0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
EngAllocMem | ret_val_out = 0xfffff90140892ca0 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
MmMapViewOfSection | SectionObject_ptr = 0xffffc00001aed1c0, Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0xfffff90140892fc8, BaseAddress = 0x0, ZeroBits = 0x0, CommitSize = 0x0, SectionOffset_ptr = 0xffffd000209f2ed0, ViewSize_ptr = 0xfffff90140892fe0, InheritDisposition_unk = 0xfffff90100000001, AllocationType = 0x0, Protect = 0x4, BaseAddress_ptr_out = 0xfffff90140892fc8, BaseAddress_out = 0x4780af0000, SectionOffset_ptr_out = 0xffffd000209f2ed0, ViewSize_ptr_out = 0xfffff90140892fe0, ret_val_unk_out = 0x0 |
EngCreateBitmap | ret_val_out = 0xffffffff82050564 |
EngAssociateSurface | ret_val_out = 0x1 |
EngLockSurface | ret_val_out = 0xfffff901409b2658 |
ExAllocatePoolWithTag | PoolType_unk = 0x200, NumberOfBytes_ptr = 0x38, Tag = 0x64646344, ret_val_ptr_out = 0xffffe00000fcff40 |
KeInitializeEvent | Type_unk = 0x1, State = 0, Event_unk_out = 0xffffe00000fcff58 |
IoGetCurrentProcess | ret_val_unk_out = 0xffffe00001078440 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000fcff40 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
MmUnmapViewOfSection | Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0x4780af0000, ret_val_unk_out = 0x0 |
MmUnmapViewOfSection | Process_unk = 0xffffe00001078440, BaseAddress_ptr = 0x47839e0000, ret_val_unk_out = 0x0 |
Information | Value |
---|---|
Trigger | DrvFillPath+0x4d1 |
Start Address | 0xfffff960008e8460 |
Information | Value |
---|---|
Sequence Length | 2 |
Process | Count |
---|---|
Process 81 (wanacr~1.exe, PID: 2732) | 2 |
Symbol | Parameters |
---|---|
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe00000b1f1d0 |
ExReleaseFastMutexUnsafeAndLeaveCriticalRegion | FastMutex_unk = 0xffffe000001652b0 |
Information | Value |
---|---|
Trigger | ExpWorkerThread+0x2b3 |
Start Address | 0xffffe0000020cc5f |
Information | Value |
---|---|
Sequence Length | 515 |
Process | Count |
---|---|
Process 30 (System, PID: 4) | 1 |
Symbol | Parameters |
---|---|
MmGetNextSession | ret_val_out = 0xffffe000007fb900 |
MmAttachSession | ret_val_out = 0x0 |
RtlLookupFunctionTable | ret_val_out = 0xfffff960004b1000 |
RtlImageNtHeader | BaseAddress_ptr = 0xfffff960000e9000, ret_val_unk_out = 0xfffff960000e90f8 |
ExAllocatePoolWithTag | PoolType_unk = 0x0, NumberOfBytes_ptr = 0x389db, Tag = 0x63536c41, ret_val_ptr_out = 0xffffe00000286000 |
ExFreePool | P_ptr = 0xffffe0000024d000 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600035d7f0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cbb80 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bd9a4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c16ec |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000ffe40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1c90 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012b4c0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2ddc |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000149c60, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3724 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002205e8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baaec |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000221c34, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004babd0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001498d8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b370c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600014d7e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3a24 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000131660, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b30b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001150cc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000251fc4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000119268, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b24f4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012c740, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021b570, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba72c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fc7c8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9448 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002207f0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baaf8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000154340, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3cf4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600035a81c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cb874 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002198c0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba618 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f7e40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1678 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021edf8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baa44 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fdf30, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9520 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000266eb0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdb58 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000ffce0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1c60 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002265f8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bae58 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001306e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3094 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025e3e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd4b0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000218ee4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba5d0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001380c0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3304 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021f744, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baab0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000ffa80, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1c24 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002511f8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bc988 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600023838c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb8a8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001885f0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b56f8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fa760, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b92e0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000123720, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b28d8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001362a0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3220 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002261ac, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bae28 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000238310, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb890 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026b330, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdf54 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fa2bc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b928c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fcfb0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9484 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fecc0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1bf4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f4648, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b8e00 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000221de0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004babe8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025f004, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd540 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000224b68, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bad44 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018882c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b571c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a7780, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c05f4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fc7a4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1a5c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026173c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd72c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600023a270, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb9f8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600022a1d8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb080 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000221dcc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fd970, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1b34 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600022652c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bae4c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001043ac, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1db0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000165060, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b47e0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000209bac, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fdc70, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fdc14, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f488c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b8e30 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002ab630, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0864 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000113d40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2398 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018d250, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b59c8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000222290, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004babf4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600016819c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b4930 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000117650, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b24b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018b028, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b58b4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000264ae8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd8d0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000260e18, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd6c0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000220e64, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bab58 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001102c4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2194 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600019f13c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b61cc |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fbc20, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b93b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600023a614, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bba1c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600011d134, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021f08c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baa68 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000251fcc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bca18 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025d61c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd3f0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600010b560, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b20c8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bb0e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c14c4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001fe360, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9568 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000106550, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1e7c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f8e28, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9184 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000125734, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2a70 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b8260, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1254 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001654e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000109b40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1ffc |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b19e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6c34 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002538bc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bcb8c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021ecec, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baa2c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fc620, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1a44 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f90b0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1738 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600024fae4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bc868 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012ff28, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b304c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000219718, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba60c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600011c740, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b265c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025d334, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd3c0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025eea8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd528 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021fe28, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baad4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000291dcc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bf9e8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f92cc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b91b4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018a7dc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b5848 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000231a78, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f4750, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1564 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021ff88, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004baae0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012af64, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2da0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012b350, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2dd0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000220f50, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bab64 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600022aca0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb110 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b45c8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6de4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f533c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025dbf8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd438 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000265e24, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bda74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bbadc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1530 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f0610, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1318 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001280e4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2c44 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f9fb0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9274 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000219d90, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba63c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025f118, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd54c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000236a5c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb7b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001afc30, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6ab4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600022b0d0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb128 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000275080, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026acf8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdee8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f667c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1624 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600011c130, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2620 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000218020, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba528 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012b304, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2dc4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fb0c4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1930 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000106e58, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1e94 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f87c0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9124 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600019fa48, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000109a54, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1ff0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000236d70, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb7f4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018d450, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b59d4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000208ed4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9a90 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600013e57c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3484 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000128714, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2c74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003f0d34, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004d11fc |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021dee0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba984 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600028e020, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bf82c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001ee260, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b8adc |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000266304, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdabc |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021dc24, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba96c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003f00a0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004d1184 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026a0f0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bddf8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018aee0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025e240, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd498 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600010aea0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2098 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000238be0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600015aff0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b427c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fdb70, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1b40 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600015bb80, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b42f4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600014dbf4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3a78 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026afb8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdf24 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600013f544, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b34f0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001acbb8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b68bc |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600010fd28, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2164 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b395c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6d54 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000ea370, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b100c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b3270, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6cdc |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001304ec, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3070 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600016b6d4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b4a74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001afaa0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6a9c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b425c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0f54 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000265a40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bda50 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600029bb20, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0078 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012ec90, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b2fbc |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000232774, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000237f10, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb86c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000251b3c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bc9f4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a7fe0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0684 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b3310, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b6cf4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001acf54, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b68d4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a9bb8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c075c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000127800, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000237460, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb83c |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600017ab9c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b5164 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000156040, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b3ec8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001153dc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b24a0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002c49e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1b84 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a9350, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0720 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000232020, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb470 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bc8c8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1608 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600021c760, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004ba834 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b9120, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c132c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003c6478, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cfd74 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025ce7c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd3a8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026a68c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bde64 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000204a40, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b988c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000236b90, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb7d0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b59bc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c108c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000272244, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004be4c4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000274300, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004be620 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a6ccc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c057c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b14f0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c0dbc |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600012c04c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002a7090, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c05b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000297578, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bfcd0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bf05c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c18c0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000288cdc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bf5a4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600024f560, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bc844 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000188788, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b5710 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000209bb4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9ac0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bdd18, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1728 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002781e4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bea10 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001acd70, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b68c8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002604c4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd660 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000188ac0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b5728 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000271840, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004be434 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002337e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bb530 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000f996c, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1810 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fcef0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1aa4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001031d0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1d38 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600024ef84, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bc82c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000356470, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cb454 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018b278, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b58cc |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018b530, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b58fc |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018a974, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b5854 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960003f0014, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004d1178 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002bb320, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c14e8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600025e694, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bd4d4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000255db4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bcd00 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b6850, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c1128 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001f9cd0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b9250 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001b05dc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0x0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600028e568, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bf844 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002666fc, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004bdaec |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600018b3e8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b58e4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff9600026ebf8, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004be1b8 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960002b5b84, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004c10b0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000355b84, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004cb3d0 |
RtlLookupFunctionEntry | ControlPc = 0xfffff960000fb1e0, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b193c |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000122f30, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b286c |
RtlLookupFunctionEntry | ControlPc = 0xfffff960001244c4, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b29d4 |
RtlLookupFunctionEntry | ControlPc = 0xfffff96000100400, HistoryTable_unk = 0x0, ImageBase_ptr_out = 0xffffd00021936280, HistoryTable_unk_out = 0x0, ret_val_unk_out = 0xfffff960004b1cc0 |
RtlLookupFunctionTable | ret_val_out = 0xfffff960004b1000 |
RtlImageNtHeader | BaseAddress_ptr = 0xfffff960000e9000, ret_val_unk_out = 0xfffff960000e90f8 |
ExAllocatePoolWithTag | PoolType_unk = 0x0, NumberOfBytes_ptr = 0x4493f, Tag = 0x63536c41, ret_val_ptr_out = 0xffffe0000024d000 |
ExFreePool | P_ptr = 0xffffe000002bf000 |
ExAcquireSpinLockSharedAtDpcLevel | SpinLock_unk = 0xfffff803fd547480, SpinLock_unk_out = 0xfffff803fd547480 |
ExReleaseSpinLockSharedFromDpcLevel | SpinLock_unk = 0xfffff803fd547480, SpinLock_unk_out = 0xfffff803fd547480 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlSectionTableFromVirtualAddress | ret_val_out = 0xfffff960000e9200 |
RtlLookupFunctionTable | ret_val_out = 0xfffff960004b1000 |
RtlImageNtHeader | BaseAddress_ptr = 0xfffff960000e9000, ret_val_unk_out = 0xfffff960000e90f8 |
MmDetachSession | ret_val_out = 0x0 |
MmQuitNextSession | ret_val_out = 0x0 |
KeSetCoalescableTimer | Timer_unk = 0xffffe000000c5206, DueTime_unk = 0xffffffffb7abcb03, Period = 0x0, TolerableDelay = 0x698, Dpc_unk = 0xffffe000000c5bbf, Timer_unk_out = 0xffffe000000c5206, ret_val_out = 0 |
Information | Value |
---|---|
Trigger | ExpWorkerThread+0x2b3 |
Start Address | 0xffffe0000029dd83 |
Information | Value |
---|---|
Sequence Length | 3 |
Process | Count |
---|---|
Process 30 (System, PID: 4) | 1 |
Symbol | Parameters |
---|---|
ExAllocatePoolWithTag | PoolType_unk = 0x0, NumberOfBytes_ptr = 0xad0, Tag = 0x63536c41, ret_val_ptr_out = 0xffffe00000241010 |
ExAllocatePoolWithTag | PoolType_unk = 0x0, NumberOfBytes_ptr = 0x44f69, Tag = 0x63536c41, ret_val_ptr_out = 0xffffe0000024d000 |
KeSetCoalescableTimer | Timer_unk = 0xffffe000000c5206, DueTime_unk = 0xffffffffb55bd495, Period = 0x0, TolerableDelay = 0x22f7, Dpc_unk = 0xffffe000000c5bbf, Timer_unk_out = 0xffffe000000c5206, ret_val_out = 0 |
This feature requires an online-connection to the VMRay backend.
An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefox
with deactivated setting "security.fileuri.strict_origin_policy".