Ok, so I finally decided to us EurekaLog to determine the issue. Below is the bug report. It seems that for some reason my LoginService is being destroyed before the DataService is created.
log
===============================
Application made attempt to call method of already deleted object: $00000214B081B1B0 OBJECT [TLoginService] 984 bytes.
[000000000222675C] DataAbstractService_Impl.TDataAbstractService.Create (Line 548, “DataAbstractService_Impl.pas”)
[0000000002237E33] AT.PgDA.LoginService_Impl.Create_LoginService (Line 75, “AT.PgDA.LoginService_Impl.pas”)
[0000000000D3C1D7] uROServer.TROClassFactory.CreateInstance (Line 1565, “uROServer.pas”)
[0000000000D39635] uROServer.TROInvoker.CustomHandleMessage (Line 853, “uROServer.pas”)
[0000000000D39B10] uROServer.TROInvoker.HandleMessage (Line 897, “uROServer.pas”)
[0000000000D387D6] uROServer.MainProcessMessage (Line 690, “uROServer.pas”)
[0000000000D3AB95] uROServer.TROMessageDispatcher.ProcessMessage (Line 1084, “uROServer.pas”)
[0000000000D3BC55] uROServer.TROServer.IntDispatchMessage (Line 1474, “uROServer.pas”)
[0000000000D44E8A] uROBaseHTTPServer.TROBaseHTTPServer.ProcessRequest (Line 238, “uROBaseHTTPServer.pas”)
[0000000000D48FB3] uROWebBrokerServer.TROWebBrokerServer.IntOnBeforeDispatch (Line 296, “uROWebBrokerServer.pas”)
[0000000000B0C2E0] Web.HTTPApp.TCustomWebDispatcher.DoBeforeDispatch
[0000000000B0C468] Web.HTTPApp.TCustomWebDispatcher.DispatchAction
[0000000000B0C872] Web.HTTPApp.TCustomWebDispatcher.HandleRequest
[0000000000B0EB99] Web.HTTPApp.TDefaultWebAppServices.InvokeDispatcher
[0000000000B0EB14] Web.HTTPApp.TDefaultWebAppServices.HandleRequest
[0000000000B1251B] Web.WebReq.TWebRequestHandler.HandleRequest
[0000000000B16F86] Web.Win.ISAPIApp.TISAPIApplication.HttpExtensionProc
[0000000000B17150] Web.Win.ISAPIApp.HttpExtensionProc
[00007FF836AD2C17] isapi (possible RegisterModule+7175)
[00007FF836ADAEBA] isapi.RegisterModule
[00007FF836AD187A] isapi (possible RegisterModule+2154)
[00007FF836AD1D35] isapi (possible RegisterModule+3365)
[00007FF839194C8F] w3dt (possible UlAtqFreeContext+703)
[00007FF83A08184D] THREAD_POOL (possible CreateThreadPool+1261)
[00007FF83A08179E] THREAD_POOL (possible CreateThreadPool+1086)
[00007FF83A0816F3] THREAD_POOL (possible CreateThreadPool+915)
[00007FF8453D835E] KERNEL32.BaseThreadInitThunk
EurekaLog 7.8.1.0 A0275827F357574192D80A373267850A 825B91F56744874ABCA9541B00E38FD4 DA39A3EE5E6B4B0D3255BFEF95601890AFD80709 063372444A10CA41855A49DBBB13A260
Application:
1.1 Start Date : Fri, 10 Jan 2020 05:41:23 -0800
1.2 Name/Description: w3wp.exe - (IIS Worker Process)
1.3 Version Number : 10.0.14393.0
1.4 Parameters : -ap “DefaultAppPool” -v “v4.0” -l “webengine4.dll” -a \.\pipe\iisipm0f328015-0229-40de-b2e1-72701e3f0aae -h “C:\inetpub\temp\apppools\DefaultAppPool\DefaultAppPool.config” -w “” -m 0 -t 20 -ta 0
1.5 Compilation Date: Fri, 15 Jul 2016 10:27:22 -0800
1.6 Up Time : 49 second(s)
1.7 Elevated : 0
1.8 Integrity :
1.9 Allocated : 7324952 (6.99 Mb)
1.10 RAM : 86835200 (82.81 Mb); Max: 86835200 (82.81 Mb)
1.11 Private : 81326080 (77.56 Mb); Max: 85442560 (81.48 Mb)
1.12 Virtual : 2208560979968 (2.01 Tb)
Exception:
2.1 Date : Fri, 10 Jan 2020 05:42:12 -0800
2.2 Address : 000000000222675C
2.3 Module Name : PgDASvr.dll
2.4 Module Version: 2020.1.10.7
2.5 Type : EUseAfterFreeError
2.6 Message : Application made attempt to call method of already deleted object: $00000214B081B1B0 OBJECT [TLoginService] 984 bytes.
2.7 ID : 280FF214
2.8 Count : 1
2.9 Status : New
2.10 Note :
2.11 Sent : 0
User:
3.1 ID : IUSR
3.2 Name : IUSR
3.3 Email :
3.4 Company :
3.5 Privileges:
3.6 Admin : 0
Active Controls:
4.1 Form Class :
4.2 Form Text :
4.3 Control Class:
4.4 Control Text :
Computer:
5.1 Name : WIN-59JDF64IOMC
5.2 Total Memory : 3220754432 (3.00 Gb)
5.3 Free Memory : 869216256 (828.95 Mb)
5.4 Total Disk : 106846744576 (99.51 Gb)
5.5 Free Disk : 76594536448 (71.33 Gb)
5.6 System Up Time : 7 day(s), 9 hour(s), 36 minute(s), 4 second(s)
5.7 Processor : Intel® Xeon® CPU E5-2680 v4 @ 2.40GHz
5.8 Display Mode : 1024 x 768, 32 bit
5.9 Display DPI : 96
5.10 Video Card : (driver )
5.11 Printer :
5.12 Virtual Machine: Microsoft Hypervisor 10.0.14393 Service Pack 3
Operating System:
6.1 Type : Microsoft Windows Server 10 (64 bit)
6.2 Build # : 1607 (10.0.14393.2007)
6.3 Update : Anniversary Update [Redstone 1] #2007
6.4 Non-Unicode Language: English (0409)
6.5 Charset/ACP : 0/1252
6.6 Install Language : English (0409)
6.7 UI Language : English (0409)
6.8 Edition :
6.9 UAC : 1
Network:
7.1 IP Address : fe80::20:a5cc:28ce:de27%6 - 198.038.093.170 - fe80::200:5efe:198.38.93.170%8 - 2001:0:34f1:8072:20d8:3946:39d9:a255 - fe80::20d8:3946:39d9:a255%16
7.2 Submask : /64 - 255.255.255.000 - /128 - /64 - /64
7.3 Gateway : - 198.038.093.001 - - :: -
7.4 DNS 1 : - 008.008.008.008 - - -
7.5 DNS 2 : - 008.008.004.004 - - -
7.6 DHCP : OFF - OFF - OFF
7.7 Description: Ethernet 9 - [UNPLGGD] TUNNEL : isa - TUNNEL : Teredo Tunneling Pseudo-Interface
Steps to reproduce:
8.1 Text:
Call Stack Information:
|Methods |Details|Stack |Address |Module |Offset |Source |Unit |Class |Procedure/Method |Line |
|*Exception Thread: ID=7180; Parent=0; Priority=0 |
|Class=; Name=MAIN |
|DeadLock=0; Wait Chain= |
Comment= |
7FFFFFFE |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
00000060 |
7FFF7FFE |
Modules Information:
|Handle |Name |Description |Version |Size |Modified |Path |
|0000000000400000|PgDASvr.dll | |2020.1.10.7 |51809792|2020-01-10 05:39:59|C:\ISAPI\dbapi\ |
|0000000060490000|msvcr100.dll |Microsoft® C Runtime Library |10.0.40219.1 |829264 |2011-02-19 00:52:32|C:\Windows\System32\ |
|000002128A1F0000|iisres.dll |IIS Resource DLL |10.0.14393.0 |230912 |2017-06-23 02:55:46|c:\Windows\System32\inetsrv\ |
|00007FF749DC0000|w3wp.exe |IIS Worker Process |10.0.14393.0 |24576 |2018-01-08 10:08:20|C:\Windows\System32\inetsrv\ |
|00007FF818B10000|System.ServiceModel.ni.dll |System.ServiceModel.dll |4.7.3062.0 |24675840|2020-01-02 20:19:33|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\da1a143bfdb77511e8b81e41482b73d7\ |
|00007FF822B70000|System.Xml.ni.dll |.NET Framework |4.7.3062.0 |8950272 |2020-01-02 20:20:12|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\8821b72d5d51079acf96e90c4af19a96\ |
|00007FF8257E0000|comctl32.dll |Common Controls Library |5.82.14393.447 |684384 |2016-11-02 02:59:52|C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646|
|00007FF8258E0000|System.Configuration.ni.dll |System.Configuration.dll |4.7.3062.0 |1207296 |2020-01-02 20:18:41|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\36778d2072c745f0ad72f7e219122258\ |
|00007FF825FD0000|mozjs185-x64.dll | | |2313216 |2019-03-20 11:21:32|C:\ISAPI\dbapi\ |
|00007FF8270E0000|System.Core.ni.dll |.NET Framework |4.7.3081.0 |10805248|2020-01-02 20:17:52|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\75913bbaf1bee617a94dcd6b5df12a5d\ |
|00007FF827B30000|System.ni.dll |.NET Framework |4.7.3062.0 |12831232|2020-01-02 20:17:42|C:\Windows\assembly\NativeImages_v4.0.30319_64\System\095a3392942c3d4eb888e6a32036acd8\ |
|00007FF828770000|mscorlib.ni.dll |Microsoft Common Language Runtime Class Library |4.7.3062.0 |22563840|2020-01-02 20:17:31|C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\b308b9c61f65cf2dfd876031ee385ba4\ |
|00007FF832440000|Faultrep.dll |Windows User Mode Crash Reporting DLL |10.0.14393.1884 |385856 |2017-11-01 14:43:16|C:\Windows\System32\ |
|00007FF8330A0000|d3d9.dll |Direct3D 9 Runtime |10.0.14393.447 |1609920 |2016-11-02 02:56:52|C:\Windows\System32\ |
|00007FF833230000|System.Web.ni.dll |System.Web.dll |4.7.3062.0 |16505856|2020-01-02 20:26:43|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\5fc5747c2c5a8c9903788db8973ea28a\ |
|00007FF835720000|qwave.dll |Windows NT |10.0.14393.0 |275456 |2016-07-16 05:18:20|C:\Windows\System32\ |
|00007FF835770000|System.ServiceModel.Internals.ni.dll |System.ServiceModel.Internals.dll |4.7.3062.0 |990208 |2020-01-02 20:26:23|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\9fab28f14be5a0da526b1ceaaa04a4c3\ |
|00007FF835870000|System.Web.Extensions.ni.dll |System.Web.Extensions.dll |4.7.3062.0 |3691008 |2020-01-02 20:26:52|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.28b9ef5a#\413f9d9e7f1161d468e7499eea5c7544\ |
|00007FF835CE0000|System.ServiceModel.Activation.ni.dll|System.ServiceModel.Activation.dll |4.7.3062.0 |647168 |2020-01-02 20:26:16|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\2c7e795fb7d690d3b8931d360e4ce7f5\ |
|00007FF835DA0000|SMDiagnostics.ni.dll |SMDiagnostics.dll |4.7.3062.0 |150016 |2020-01-02 20:24:03|C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\c7d01590f25b87c1d82c1b48e56d5865\ |
|00007FF835E00000|Microsoft.Build.Utilities.v4.0.ni.dll|Microsoft.Build.Utilities.v4.0.dll |4.7.3062.0 |1035264 |2020-01-02 20:20:55|C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.B83e9cb53#\4a58f2013ffa484c7f872e70952613ca\ |
|00007FF8361C0000|traffic.dll |Microsoft Traffic Control 1.0 DLL |10.0.14393.2007 |42496 |2017-12-31 20:50:16|C:\Windows\System32\ |
|00007FF836760000|System.Runtime.Caching.ni.dll |System.Runtime.Caching.dll |4.7.3062.0 |299008 |2020-01-02 20:26:13|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runt19c51595#\c2577ffc64fd5f786d339c18f95dfae7\ |
|00007FF8367B0000|System.Web.ApplicationServices.ni.dll|System.Web.ApplicationServices.dll |4.7.3062.0 |112640 |2020-01-02 20:26:43|C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.8dc504e4#\4a5f2a8626e8af6b6f54e42a0f59f2b6\ |
|00007FF8367D0000|webengine.dll |Microsoft ASP.NET ISAPI Shim DLL |4.7.3062.0 |26256 |2020-01-02 20:00:30|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF8367E0000|iisnode.dll |Native IIS module for hosting node.js applications in IIS |0.2.21.0 |674816 |2016-04-11 00:26:54|C:\Program Files\iisnode\ |
|00007FF836890000|rewrite.dll |URL Rewrite Module for IIS 7 |7.1.1980.0 |391056 |2017-06-06 17:24:34|C:\Windows\System32\inetsrv\ |
|00007FF836900000|iisetw.dll |ETW tracing support module |10.0.14393.0 |101888 |2018-01-08 10:09:47|C:\Windows\System32\inetsrv\ |
|00007FF836940000|wbhst_pm.dll |WebHost Protocol Manager (the worker process plug-in) |10.0.14393.0 |27648 |2018-01-08 08:56:52|C:\Windows\System32\inetsrv\ |
|00007FF836A20000|iprestr.dll |IP restriction module |10.0.14393.0 |29696 |2018-01-08 10:07:53|C:\Windows\System32\inetsrv\ |
|00007FF836A30000|websocket.dll |Web Socket API |10.0.14393.0 |46080 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF836A40000|aspnet_filter.dll |Microsoft ASP.NET ISAPI Filter DLL |4.7.3062.0 |38560 |2020-01-02 20:00:24|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF836A60000|iisfreb.dll |Failed requests event buffering module |10.0.14393.0 |167936 |2018-01-08 10:09:47|C:\Windows\System32\inetsrv\ |
|00007FF836A90000|authcert.dll |AD certmap authentication provider |10.0.14393.0 |27648 |2018-01-08 14:01:50|C:\Windows\System32\inetsrv\ |
|00007FF836AA0000|iisreqs.dll |IIS request monitor |10.0.14393.0 |18432 |2018-01-08 10:46:30|C:\Windows\System32\inetsrv\ |
|00007FF836AB0000|diprestr.dll |Dynamic IP Restriction Module |10.0.14393.0 |39424 |2018-01-08 10:07:53|C:\Windows\System32\inetsrv\ |
|00007FF836AC0000|iiswsock.dll |Web Socket Module |10.0.14393.0 |48128 |2018-01-08 10:09:39|C:\Windows\System32\inetsrv\ |
|00007FF836AD0000|isapi.dll |IIS ISAPI Handler |10.0.14393.0 |122368 |2018-01-08 10:08:58|C:\Windows\System32\inetsrv\ |
|00007FF836CD0000|iisfcgi.dll |FastCGI handler |10.0.14393.0 |86016 |2018-01-08 10:09:18|C:\Windows\System32\inetsrv\ |
|00007FF836CF0000|modrqflt.dll |Request filtering handler |10.0.14393.0 |41984 |2018-01-08 10:09:19|C:\Windows\System32\inetsrv\ |
|00007FF836D00000|webengine4.dll |Microsoft ASP.NET Support DLL |4.7.3062.0 |667288 |2020-01-02 20:00:29|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF8373A0000|warmup.dll |HTTP Application Warmup Handler |10.0.14393.0 |32256 |2018-01-08 10:08:42|C:\Windows\System32\inetsrv\ |
|00007FF8375F0000|httpapi.dll |HTTP Protocol Stack API |10.0.14393.1532 |31232 |2017-07-11 21:20:24|C:\Windows\System32\ |
|00007FF837640000|filter.dll |ISAPI filter module |10.0.14393.0 |68096 |2018-01-08 10:08:55|C:\Windows\System32\inetsrv\ |
|00007FF837660000|authbas.dll |basic authentication provider |10.0.14393.0 |37888 |2018-01-08 10:09:03|C:\Windows\System32\inetsrv\ |
|00007FF837840000|MSVCR120_CLR0400.dll |Microsoft® C Runtime Library |12.0.52519.0 |993632 |2017-04-11 10:27:40|C:\Windows\System32\ |
|00007FF837940000|validcfg.dll |Configuration Validation Module |10.0.14393.0 |19968 |2018-01-08 10:09:02|C:\Windows\System32\inetsrv\ |
|00007FF837960000|cgi.dll |CGI handler |10.0.14393.0 |43008 |2018-01-08 10:09:18|C:\Windows\System32\inetsrv\ |
|00007FF837970000|custerr.dll |Custom error handler |10.0.14393.953 |46592 |2017-03-03 22:34:56|C:\Windows\System32\inetsrv\ |
|00007FF837980000|logcust.dll |IIS custom logging module |10.0.14393.0 |23552 |2018-01-08 10:09:47|C:\Windows\System32\inetsrv\ |
|00007FF837F80000|authsspi.dll |SSPI authentication provider |10.0.14393.0 |53248 |2018-01-08 10:09:25|C:\Windows\System32\inetsrv\ |
|00007FF837FA0000|urlauthz.dll |Url Authorization Module |10.0.14393.0 |23552 |2018-01-08 10:08:48|C:\Windows\System32\inetsrv\ |
|00007FF837FB0000|authanon.dll |anonymous authentication provider |10.0.14393.0 |40960 |2018-01-08 10:09:49|C:\Windows\System32\inetsrv\ |
|00007FF8380A0000|msxml6.dll |MSXML 6.0 |6.30.14393.2007 |2447208 |2017-12-31 21:20:49|C:\Windows\System32\ |
|00007FF8384D0000|clr.dll |Microsoft .NET Runtime Common Language Runtime - WorkStation|4.7.3062.0 |10375800|2020-01-02 20:00:24|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF838EF0000|static.dll |Static file handler |10.0.14393.0 |44032 |2018-01-08 10:07:48|C:\Windows\System32\inetsrv\ |
|00007FF838F10000|w3wphost.dll |WAS App Hosting library |10.0.14393.0 |72192 |2018-01-08 08:56:52|c:\Windows\System32\inetsrv\ |
|00007FF838F50000|iis_ssi.dll |Microsoft Server Side Include Extension |10.0.14393.0 |33792 |2018-01-08 10:09:48|C:\Windows\System32\inetsrv\ |
|00007FF838F60000|redirect.dll |http redirection |10.0.14393.0 |20992 |2018-01-08 10:07:50|C:\Windows\System32\inetsrv\ |
|00007FF838F70000|protsup.dll |Protocol Support handler |10.0.14393.0 |21504 |2018-01-08 10:09:09|C:\Windows\System32\inetsrv\ |
|00007FF838F80000|dirlist.dll |Directory Listing handler |10.0.14393.0 |23552 |2018-01-08 10:09:31|C:\Windows\System32\inetsrv\ |
|00007FF838F90000|defdoc.dll |Default Document handler |10.0.14393.0 |20480 |2018-01-08 10:07:22|C:\Windows\System32\inetsrv\ |
|00007FF838FA0000|compstat.dll |Static compression module |10.0.14393.0 |52224 |2018-01-08 10:09:48|C:\Windows\System32\inetsrv\ |
|00007FF838FC0000|loghttp.dll |HTTP Logging module |10.0.14393.0 |38400 |2018-01-08 10:08:22|C:\Windows\System32\inetsrv\ |
|00007FF838FD0000|iiscore.dll |IIS Web Server Core |10.0.14393.1532 |323072 |2017-07-11 21:19:47|C:\Windows\System32\inetsrv\ |
|00007FF839190000|w3dt.dll |IIS Worker Process/Http.sys Interface |10.0.14393.1794 |110592 |2017-10-08 17:44:15|c:\Windows\System32\inetsrv\ |
|00007FF8391C0000|cachhttp.dll |Http cache provider |10.0.14393.0 |50688 |2018-01-08 10:09:36|C:\Windows\System32\inetsrv\ |
|00007FF8392A0000|clrjit.dll |Microsoft .NET Runtime Just-In-Time Compiler |4.7.3062.0 |1224328 |2020-01-02 20:00:29|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF839640000|mlang.dll |Multi Language Support DLL |10.0.14393.0 |239616 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF839BA0000|winrnr.dll |LDAP RnR Provider DLL |10.0.14393.0 |31744 |2016-07-16 05:18:34|C:\Windows\System32\ |
|00007FF839EF0000|NapiNSP.dll |E-mail Naming Shim Provider |10.0.14393.0 |67584 |2016-07-16 05:18:47|C:\Windows\System32\ |
|00007FF83A080000|w3tp.dll |IIS Thread Pool Library |10.0.14393.0 |29696 |2018-01-08 08:56:52|c:\Windows\System32\inetsrv\ |
|00007FF83A370000|wsock32.dll |Windows Socket 32-Bit DLL |10.0.14393.0 |18432 |2016-07-16 05:18:48|C:\Windows\System32\ |
|00007FF83A630000|mscoreei.dll |Microsoft .NET Runtime Execution Engine |4.7.3062.0 |630416 |2020-01-02 20:00:24|C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ |
|00007FF83A860000|ktmw32.dll |Windows KTM Win32 Client DLL |10.0.14393.0 |24064 |2016-07-16 05:18:52|C:\Windows\System32\ |
|00007FF83AC90000|iisutil.dll |IISUTIL |10.0.14393.0 |290816 |2017-06-23 02:55:46|c:\Windows\System32\inetsrv\ |
|00007FF83ACE0000|nativerd.dll |Native Code Configuration Reader |10.0.14393.0 |492544 |2017-06-23 02:55:46|c:\Windows\System32\inetsrv\ |
|00007FF83ADA0000|mscoree.dll |Microsoft .NET Runtime Execution Engine |10.0.14393.0 |387072 |2016-07-16 05:18:08|C:\Windows\System32\ |
|00007FF83AE20000|version.dll |Version Checking and File Installation Libraries |10.0.14393.0 |30504 |2016-07-16 05:18:47|C:\Windows\System32\ |
|00007FF83BC10000|shfolder.dll |Shell Folder Service |10.0.14393.0 |10752 |2016-07-16 05:18:47|C:\Windows\System32\ |
|00007FF83BD00000|rasadhlp.dll |Remote Access AutoDial Helper |10.0.14393.0 |16896 |2016-07-16 05:18:20|C:\Windows\System32\ |
|00007FF83BD30000|gzip.dll |GZIP Compression DLL |10.0.14393.0 |37376 |2018-01-08 10:09:49|C:\Windows\System32\inetsrv\ |
|00007FF83BD90000|compdyn.dll |Dynamic compression module |10.0.14393.0 |41472 |2018-01-08 10:09:47|C:\Windows\System32\inetsrv\ |
|00007FF83BDA0000|cachtokn.dll |token cache provider |10.0.14393.0 |14848 |2018-01-08 10:08:09|C:\Windows\System32\inetsrv\ |
|00007FF83BE60000|cachfile.dll |File cache provider |10.0.14393.0 |25088 |2018-01-08 10:08:09|C:\Windows\System32\inetsrv\ |
|00007FF83CB70000|cachuri.dll |URI cache provider |10.0.14393.0 |14336 |2018-01-08 10:08:09|C:\Windows\System32\inetsrv\ |
|00007FF83CD10000|FWPUCLNT.DLL |FWP/IPsec User-Mode API |10.0.14393.0 |412160 |2016-07-16 05:18:28|C:\Windows\System32\ |
|00007FF83CD80000|wmiclnt.dll |WMI Client API |10.0.14393.0 |45568 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF83D090000|winspool.drv |Windows Spooler Driver |10.0.14393.1715 |527360 |2017-09-06 21:11:07|C:\Windows\System32\ |
|00007FF83D400000|dhcpcsvc.dll |DHCP Client Service |10.0.14393.0 |85504 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF83DAD0000|dhcpcsvc6.dll |DHCPv6 Client |10.0.14393.0 |67072 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF83DCE0000|xmllite.dll |Microsoft XmlLite Library |10.0.14393.0 |214360 |2016-07-16 05:18:54|C:\Windows\System32\ |
|00007FF83E0F0000|dbgcore.dll |Windows Core Debugging Helpers |10.0.14321.1024 |151552 |2016-07-16 05:18:45|C:\Windows\System32\ |
|00007FF83E4C0000|dbghelp.dll |Windows Image Helper |10.0.14321.1024 |1529344 |2016-07-16 05:18:45|C:\Windows\System32\ |
|00007FF83EC80000|logoncli.dll |Net Logon Client DLL |10.0.14393.2007 |246864 |2017-12-31 21:23:09|C:\Windows\System32\ |
|00007FF840500000|nlaapi.dll |Network Location Awareness 2 |10.0.14393.2007 |80896 |2017-12-31 20:40:32|C:\Windows\System32\ |
|00007FF8406D0000|wer.dll |Windows Error Reporting DLL |10.0.14393.1884 |687968 |2017-11-01 14:43:24|C:\Windows\System32\ |
|00007FF840780000|netapi32.dll |Net Win32 API DLL |10.0.14393.0 |81184 |2016-07-16 05:18:38|C:\Windows\System32\ |
|00007FF840F60000|wkscli.dll |Workstation Service Client DLL |10.0.14393.0 |80088 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF8416B0000|dwmapi.dll |Microsoft Desktop Window Manager API |10.0.14393.206 |128864 |2016-09-15 09:07:28|C:\Windows\System32\ |
|00007FF8417C0000|wtsapi32.dll |Windows Remote Desktop Session Host Server SDK APIs |10.0.14393.0 |64112 |2016-07-16 05:18:58|C:\Windows\System32\ |
|00007FF842090000|WINMMBASE.dll |Base Multimedia Extension API DLL |10.0.14393.0 |164264 |2016-07-16 05:18:49|C:\Windows\System32\ |
|00007FF8421D0000|winmm.dll |MCI API DLL |10.0.14393.0 |124552 |2016-07-16 05:18:49|C:\Windows\System32\ |
|00007FF8424D0000|uxtheme.dll |Microsoft UxTheme Library |10.0.14393.0 |587264 |2016-07-16 05:18:56|C:\Windows\System32\ |
|00007FF8429B0000|ntmarta.dll |Windows NT MARTA provider |10.0.14393.0 |189608 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843090000|secur32.dll |Security Support Provider Interface |10.0.14393.0 |28160 |2016-07-16 05:18:54|C:\Windows\System32\ |
|00007FF8431B0000|rsaenh.dll |Microsoft Enhanced Cryptographic Provider |10.0.14393.0 |202992 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF8431F0000|dpapi.dll |Data Protection API |10.0.14393.0 |15360 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843330000|IPHLPAPI.DLL |IP Helper API |10.0.14393.953 |219040 |2017-03-03 23:18:43|C:\Windows\System32\ |
|00007FF843370000|dnsapi.dll |DNS Client API DLL |10.0.14393.1770 |646688 |2017-09-17 19:09:33|C:\Windows\System32\ |
|00007FF843420000|netutils.dll |Net Win32 API Helpers DLL |10.0.14393.0 |43416 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843440000|userenv.dll |Userenv |10.0.14393.0 |115744 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF8435B0000|mswsock.dll |Microsoft Windows Sockets 2.0 Service Provider |10.0.14393.0 |357216 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843750000|cryptsp.dll |Cryptographic Service Provider API |10.0.14393.0 |81176 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843770000|CRYPTBASE.dll |Base cryptographic API DLL |10.0.14393.0 |31080 |2016-07-16 05:18:43|C:\Windows\System32\ |
|00007FF8437F0000|ntasn1.dll |Microsoft ASN.1 API |10.0.14393.0 |237072 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF843830000|ncrypt.dll |Windows NCrypt Router |10.0.14393.0 |142616 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843950000|sspicli.dll |Security Support Provider Interface |10.0.14393.1770 |172536 |2017-09-17 19:05:15|C:\Windows\System32\ |
|00007FF843B20000|sxs.dll |Fusion 2.5 |10.0.14393.0 |616736 |2016-07-16 05:18:49|C:\Windows\System32\ |
|00007FF843C30000|bcrypt.dll |Windows Cryptographic Primitives Library |10.0.14393.576 |168424 |2016-12-09 02:19:21|C:\Windows\System32\ |
|00007FF843CE0000|profapi.dll |User Profile Basic API |10.0.14393.0 |69264 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF843D00000|powrprof.dll |Power Profile Helper DLL |10.0.14393.0 |301680 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF843D50000|kernel.appcore.dll |AppModel API Host |10.0.14393.0 |48608 |2016-07-16 05:18:24|C:\Windows\System32\ |
|00007FF843D60000|msasn1.dll |ASN.1 Runtime APIs |10.0.14393.0 |59416 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF843D70000|bcryptPrimitives.dll |Windows Cryptographic Primitives Library |10.0.14393.1715 |431296 |2017-09-06 21:53:21|C:\Windows\System32\ |
|00007FF843E90000|SHCore.dll |SHCORE |10.0.14393.953 |681312 |2017-03-03 23:09:09|C:\Windows\System32\ |
|00007FF843F40000|crypt32.dll |Crypto API32 |10.0.14393.1198 |1852200 |2017-04-27 16:38:44|C:\Windows\System32\ |
|00007FF844110000|win32u.dll |Win32u |10.0.14393.51 |114192 |2016-08-02 00:44:21|C:\Windows\System32\ |
|00007FF844130000|cfgmgr32.dll |Configuration Manager DLL |10.0.14393.0 |259848 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF8441E0000|windows.storage.dll |Microsoft WinRT Storage API |10.0.14393.2007 |7216048 |2017-12-31 21:11:59|C:\Windows\System32\ |
|00007FF8448C0000|ucrtbase.dll |Microsoft® C Runtime Library |10.0.14393.1770 |998920 |2017-09-17 19:08:24|C:\Windows\System32\ |
|00007FF8449C0000|KERNELBASE.dll |Windows NT BASE API Client DLL |10.0.14393.1770 |2213760 |2017-09-17 19:09:13|C:\Windows\System32\ |
|00007FF844BE0000|msvcp_win.dll |Microsoft® C Runtime Library |10.0.14393.0 |633216 |2016-07-16 05:18:41|C:\Windows\System32\ |
|00007FF844C80000|gdi32full.dll |GDI Client DLL |10.0.14393.1770 |1566552 |2017-09-17 18:57:14|C:\Windows\System32\ |
|00007FF844E00000|comdlg32.dll |Common Dialogs DLL |10.0.14393.479 |991232 |2016-11-11 01:07:35|C:\Windows\System32\ |
|00007FF844F00000|ole32.dll |Microsoft OLE for Windows |10.0.14393.2007 |1277816 |2017-12-31 21:19:44|C:\Windows\System32\ |
|00007FF845040000|gdi32.dll |GDI Client DLL |10.0.14393.206 |206096 |2016-09-15 09:16:45|C:\Windows\System32\ |
|00007FF845080000|imagehlp.dll |Windows NT Image Helper |10.0.14393.0 |104336 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF8450A0000|oleaut32.dll |OLEAUT32.DLL |10.0.14393.1378 |774224 |2017-06-20 23:52:08|C:\Windows\System32\ |
|00007FF8453D0000|kernel32.dll |Windows NT BASE API Client DLL |10.0.14393.1198 |700936 |2017-04-27 16:49:43|C:\Windows\System32\ |
|00007FF845490000|ws2_32.dll |Windows Socket 2.0 32-Bit DLL |10.0.14393.206 |424640 |2016-09-15 09:29:45|C:\Windows\System32\ |
|00007FF845930000|combase.dll |Microsoft COM for Windows |10.0.14393.1715 |2915704 |2017-09-06 21:52:35|C:\Windows\System32\ |
|00007FF845C00000|user32.dll |Multi-User Windows USER API Client DLL |10.0.14393.1770 |1460696 |2017-09-17 18:57:17|C:\Windows\System32\ |
|00007FF845D70000|rpcrt4.dll |Remote Procedure Call Runtime |10.0.14393.2007 |1177680 |2017-12-31 21:22:43|C:\Windows\System32\ |
|00007FF845EA0000|msctf.dll |MSCTF Server DLL |10.0.14393.1770 |1415712 |2017-09-17 18:57:45|C:\Windows\System32\ |
|00007FF846000000|sechost.dll |Host for SCM/SDDL/LSA Lookup APIs |10.0.14393.1613 |357984 |2017-08-07 21:59:23|C:\Windows\System32\ |
|00007FF846060000|advapi32.dll |Advanced Windows 32 Base API |10.0.14393.2007 |652344 |2017-12-31 21:22:02|C:\Windows\System32\ |
|00007FF846110000|nsi.dll |NSI User-mode interface DLL |10.0.14393.0 |24312 |2016-07-16 05:18:43|C:\Windows\System32\ |
|00007FF846120000|clbcatq.dll |COM+ Configuration Catalog |2001.12.10941.16384|631176 |2016-07-16 05:18:33|C:\Windows\System32\ |
|00007FF8461C0000|imm32.dll |Multi-User Windows IMM32 API Client DLL |10.0.14393.0 |175672 |2016-07-16 05:18:38|C:\Windows\System32\ |
|00007FF8461F0000|shlwapi.dll |Shell Light-weight Utility Library |10.0.14393.0 |333640 |2016-07-16 05:18:47|C:\Windows\System32\ |
|00007FF846250000|msvcrt.dll |Windows NT CRT DLL |7.0.14393.0 |634824 |2016-07-16 05:18:42|C:\Windows\System32\ |
|00007FF8462F0000|psapi.dll |Process Status Helper |10.0.14393.0 |18656 |2016-07-16 05:18:30|C:\Windows\System32\ |
|00007FF846300000|shell32.dll |Windows Shell Common Dll |10.0.14393.2007 |22221912|2017-12-31 21:19:50|C:\Windows\System32\ |
|00007FF847870000|ntdll.dll |NT Layer DLL |10.0.14393.1715 |1887408 |2017-09-06 22:03:35|C:\Windows\System32\ |
Processes Information:
|ID |Name |Description |Version |Memory|Priority |Threads|Path |User|Session|
|0 |[System Process] | | |0 | |2 | | |0 |
|4 |System | | |0 |Normal |107 | | |0 |
|284 |smss.exe |Windows Session Manager |10.0.14393.0 |0 |Above-Normal|2 |C:\Windows\System32\ | |0 |
|336 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |16 |C:\Windows\System32\ | |0 |
|388 |csrss.exe |Client Server Runtime Process |10.0.14393.0 |0 |High |10 |C:\Windows\System32\ | |0 |
|456 |wininit.exe |Windows Start-Up Application |10.0.14393.1794 |0 |High |3 |C:\Windows\System32\ | |0 |
|584 |services.exe |Services and Controller app |10.0.14393.1914 |0 |Normal |6 |C:\Windows\System32\ | |0 |
|592 |lsass.exe |Local Security Authority Process |10.0.14393.1770 |0 |Normal |11 |C:\Windows\System32\ | |0 |
|680 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |16 |C:\Windows\System32\ | |0 |
|732 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |11 |C:\Windows\System32\ | |0 |
|880 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |43 |C:\Windows\System32\ | |0 |
|932 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |25 |C:\Windows\System32\ | |0 |
|960 |svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |16 |C:\Windows\System32\ | |0 |
|1044|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |20 |C:\Windows\System32\ | |0 |
|1072|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |42 |C:\Windows\System32\ | |0 |
|1084|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |29 |C:\Windows\System32\ | |0 |
|1120|w3wp.exe |IIS Worker Process |10.0.14393.0 |0 |Normal |31 |C:\Windows\System32\inetsrv\ | |0 |
|1188|VSSVC.exe |Microsoft® Volume Shadow Copy Service |10.0.14393.1198 |0 |Normal |2 |C:\Windows\System32\ | |0 |
|1260|WmiPrvSE.exe |WMI Provider Host |10.0.14393.0 |0 |Normal |10 |C:\Windows\System32\wbem\ | |0 |
|1288|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |20 |C:\Windows\System32\ | |0 |
|1296|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |10 |C:\Windows\System32\ | |0 |
|1412|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |6 |C:\Windows\System32\ | |0 |
|1588|hMailServer.exe |hMailServer |1.0.0.1 |0 |Normal |71 |C:\Program Files (x86)\hMailServer\Bin\ | |0 |
|1900|MSOIDSVC.EXE |Microsoft Online Services Executable |7.250.4556.0 |0 |Normal |5 |C:\Program Files\Common Files\microsoft shared\Microsoft Online Services| |0 |
|1956|ibserver.exe |InterBase Server |13.3.0.328 |0 |Normal |6 |C:\Program Files\Embarcadero\InterBase\bin\ | |0 |
|1964|spoolsv.exe |Spooler SubSystem App |10.0.14393.2007 |0 |Normal |9 |C:\Windows\System32\ | |0 |
|2004|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |8 |C:\Windows\System32\ | |0 |
|2016|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |11 |C:\Windows\System32\ | |0 |
|2040|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |11 |C:\Windows\System32\ | |0 |
|2064|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |17 |C:\Windows\System32\ | |0 |
|2080|MsDepSvc.exe |Web Deployment Agent Service |7.1.1973.0 |0 |Normal |4 |C:\Program Files\IIS\Microsoft Web Deploy\ | |0 |
|2104|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |7 |C:\Windows\System32\ | |0 |
|2144|MsMpEng.exe |Antimalware Service Executable |4.10.14393.1794 |0 |Normal |22 |C:\Program Files\Windows Defender\ | |0 |
|2152|mqsvc.exe |Message Queuing Service |5.0.1.1 |0 |Normal |21 |C:\Windows\System32\ | |0 |
|2164|SMSvcHost.exe |SMSvcHost.exe |4.7.3062.0 |0 |Normal |7 |C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ | |0 |
|2196|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |5 |C:\Windows\System32\ | |0 |
|2216|SolidCP.VmConfig.exe |SolidCP Virtual Machine Configuration Service |1.2.0.38 |0 |Normal |7 |C:\Program Files (x86)\SolidCP-VMConfig\ | |0 |
|2224|snmp.exe |SNMP Service |10.0.14393.351 |0 |Normal |5 |C:\Windows\System32\ | |0 |
|2232|WMSvc.exe |IIS Manager Service |10.0.14393.0 |0 |Normal |12 |C:\Windows\System32\inetsrv\ | |0 |
|2688|MSOIDSVCM.EXE |Microsoft Online Services Executable |7.250.4556.0 |0 |Normal |2 |C:\Program Files\Common Files\microsoft shared\Microsoft Online Services| |0 |
|2944|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |4 |C:\Windows\System32\ | |0 |
|3136|SMSvcHost.exe |SMSvcHost.exe |4.7.3062.0 |0 |Normal |6 |C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ | |0 |
|3460|WmiPrvSE.exe |WMI Provider Host |10.0.14393.0 |0 |Normal |8 |C:\Windows\System32\wbem\ | |0 |
|3884|SearchProtocolHost.exe |Microsoft Windows Search Protocol Host |7.0.14393.1884 |0 |Low |8 |C:\Windows\System32\ | |0 |
|4196|msdtc.exe |Microsoft Distributed Transaction Coordinator Service|2001.12.10941.16384|0 |Normal |9 |C:\Windows\System32\ | |0 |
|5008|CertifySSLManager.Service.exe|Certify SSL Manager Service |1.0.0.0 |0 |Normal |13 |C:\Program Files\CertifyTheWeb\ | |0 |
|5056|ibguard.exe |InterBase Server |13.3.0.328 |0 |Normal |4 |C:\Program Files\Embarcadero\InterBase\bin\ | |0 |
|5192|w3wp.exe |IIS Worker Process |10.0.14393.0 |0 |Normal |17 |C:\Windows\System32\inetsrv\ | |0 |
|5668|w3wp.exe |IIS Worker Process |10.0.14393.0 |0 |Normal |29 |C:\Windows\System32\inetsrv\ | |0 |
|5952|mysqld.exe | |5.6.45.0 |0 |Normal |32 |C:\Program Files\MySQL\MySQL Server 5.6\bin\ | |0 |
|5972|svchost.exe |Host Process for Windows Services |10.0.14393.0 |0 |Normal |3 |C:\Windows\System32\ | |0 |
|6124|php-cgi.exe |CGI / FastCGI |7.0.21.0 |0 |Normal |3 |C:\Program Files\PHP\v7.0\ | |0 |
|6180|php-cgi.exe |CGI / FastCGI |5.6.31.0 |0 |Normal |5 |C:\Program Files (x86)\PHP\v5.6\ | |0 |
|6252|w3wp.exe |IIS Worker Process |10.0.14393.0 |0 |Normal |28 |C:\Windows\System32\inetsrv\ | |0 |
|7096|SearchFilterHost.exe |Microsoft Windows Search Filter Host |7.0.14393.953 |0 |Low |6 |C:\Windows\System32\ | |0 |
|7800|SearchIndexer.exe |Microsoft Windows Search Indexer |7.0.14393.1884 |0 |Normal |13 |C:\Windows\System32\ | |0 |
|8732|php-cgi.exe |CGI / FastCGI |7.0.21.0 |0 |Normal |2 |C:\Program Files\PHP\v7.0\ | |0 |
Assembler Information:
; Base Address: $2226000, Allocation Base: $400000, Region Size: 1142784
; Allocation Protect: PAGE_EXECUTE_WRITECOPY, Protect: PAGE_EXECUTE_READ
; State: MEM_COMMIT, Type: MEM_IMAGE
;
;
; DataAbstractService_Impl.TDataAbstractService.Create (Line=548 - Offset=203)
; ----------------------------------------------------------------------------
000000000222672B 807D5800 CMP BYTE PTR [RBP+$58], 0
000000000222672F 743D JZ +$3D ; ($000000000222676E) DataAbstractService_Impl.TDataAbstractService.Create (Line=548)
0000000002226731 488B4D50 MOV RCX, [RBP+$50]
0000000002226735 E846A91EFE CALL -$01E156BA ; ($0000000000411080) System._AfterConstruction
000000000222673A 48894550 MOV [RBP+$50], RAX
000000000222673E EB2E JMP +$2E ; ($000000000222676E) DataAbstractService_Impl.TDataAbstractService.Create (Line=548)
0000000002226740 90 NOP
0000000002226741 90 NOP
0000000002226742 807D5800 CMP BYTE PTR [RBP+$58], 0
0000000002226746 7420 JZ +$20 ; ($0000000002226768) DataAbstractService_Impl.TDataAbstractService.Create (Line=548)
0000000002226748 48837D5000 CMP QWORD PTR [RBP+$50], 0
000000000222674D 7419 JZ +$19 ; ($0000000002226768) DataAbstractService_Impl.TDataAbstractService.Create (Line=548)
000000000222674F 488B4D50 MOV RCX, [RBP+$50]
0000000002226753 B281 MOV DL, $81
0000000002226755 488B4550 MOV RAX, [RBP+$50]
0000000002226759 488B18 MOV RBX, [RAX]
;
; Line=548 - Offset=252
; ---------------------
000000000222675C FF53E0 CALL QWORD PTR [RBX-$20] ; <-- EXCEPTION
000000000222675F 488B4D50 MOV RCX, [RBP+$50]
0000000002226763 E8F8A81EFE CALL -$01E15708 ; ($0000000000411060) System._ClassDestroy
0000000002226768 E8D3C31EFE CALL -$01E13C2D ; ($0000000000412B40) System._RaiseAgain
000000000222676D 90 NOP
000000000222676E 488B4550 MOV RAX, [RBP+$50]
0000000002226772 488D6538 LEA RSP, [RBP+$38]
0000000002226776 5B POP RBX
0000000002226777 5D POP RBP
Registers:
RAX: ??? RDI: ???
RBX: ??? RSI: ???
RCX: ??? RBP: ???
RDX: ??? RSP: ???
R8 : ??? R9 : ???
R10: ??? R11: ???
R12: ??? R13: ???
R14: ??? R15: ???
RIP: ??? FLG: ???
EXP: 000000000222675C STK: 000000BD0697CA30
Stack: Memory Dump:
000000BD0697CAA8: 00007FF8478A8FB8 000000000222675C: FF 53 E0 48 8B 4D 50 E8 F8 A8 1E FE E8 D3 C3 1E .S.H.MP…
000000BD0697CAA0: 00000214B21D49A0 000000000222676C: FE 90 48 8B 45 50 48 8D 65 38 5B 5D C3 48 8D 80 …H.EPH.e8[].H…
000000BD0697CA98: 000000BD0697CAC8 000000000222677C: 00 00 00 00 48 83 EC 28 E8 F7 C3 1E FE 48 83 C4 …H…(…H…
000000BD0697CA90: 0000000000000030 000000000222678C: 28 C3 CC CC 55 57 56 53 48 83 EC 78 48 8B EC 48 (…UWVSH…xH…H
000000BD0697CA88: 000000BD0697CBA0 000000000222679C: C7 45 30 00 00 00 00 48 C7 45 48 00 00 00 00 48 .E0…H.EH…H
000000BD0697CA80: 0000000000000022 00000000022267AC: C7 45 60 00 00 00 00 48 89 8D A0 00 00 00 48 89 .E....H......H. 000000BD0697CA78: 00000214B1FA0000 00000000022267BC: 95 A8 00 00 00 90 48 8D 4D 48 48 8B 15 53 8E 3F ......H.MHH..S.? 000000BD0697CA70: 0000000000000000 00000000022267CC: 00 E8 4E 6A 1F FE 48 8B 85 A8 00 00 00 48 89 45 ..Nj..H......H.E 000000BD0697CA68: 00007FF844A15368 00000000022267DC: 38 C6 45 40 11 48 8B 85 A0 00 00 00 80 B8 B0 01 8.E@.H.......... 000000BD0697CA60: 0000000000000008 00000000022267EC: 00 00 00 0F 94 C1 48 8B 85 A0 00 00 00 48 8B 50 ......H......H.P 000000BD0697CA58: 0000000000000030 00000000022267FC: 10 4C 8B 45 48 4C 8D 4D 38 C7 44 24 20 00 00 00 .L.EHL.M8.D$ ... 000000BD0697CA50: 0000000000000000 000000000222680C: 00 E8 9E C8 44 FF 48 8B 0D 8F 22 F5 FF B2 01 4C ....D.H..."....L 000000BD0697CA48: 0000000000452D1C 000000000222681C: 8B 85 A0 00 00 00 E8 E9 B2 F5 FF 48 89 45 68 48 ...........H.EhH 000000BD0697CA40: 0000021400000006 000000000222682C: 8D 4D 60 48 8B 95 A8 00 00 00 4C 8D 05 CF 01 00 .M
H…L…
000000BD0697CA38: 00000214B1010CC0 000000000222683C: 00 4D 33 C9 48 0F B6 05 C8 01 00 00 88 44 24 20 .M3.H…D$
000000BD0697CA30: 0000000000000030 000000000222684C: E8 8F F4 28 FE C7 45 54 00 00 00 00 48 83 7D 60 …(…ET…H.}`