crackme2019Q3D7.exe baseAddr: 0x400000 [+] New addr=0x465764 [!] Ctrl+D on UNIX, Ctrl+Z on Windows/cmd.exe to detach from instrumented program. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70009","ebx":"0x4f70009","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 0c 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 30 00 00 00 01 00 00 00 ........0....... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x22d8100","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f7006d","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 c0 2c 00 ..,. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 17 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x1","edx":"0x2cc002","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 ef ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 17 01 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x19bb5f","ecx":"0x1","edx":"0x22d80d0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 ef ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000010 6a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 j............... 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 01 00 00 00 14 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 44 03 00 00 01 00 00 00 00 00 00 00 ....D........... 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000010 5d 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ]............... 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 e4 ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x19bb54","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 54 c7 2f 02 T./. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000010 6d b1 f6 ff 00 00 00 00 00 00 00 00 00 00 00 00 m............... 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............... 00000010 4c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 L............... 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 77 95 49 00 00 00 00 00 00 00 00 00 ....w.I......... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x4","edx":"0x22d89b0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 77 95 49 00 w.I. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x1","edx":"0x499577","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 e0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 ee ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 17 01 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x19bb5e","ecx":"0x1","edx":"0x22d80d0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 e0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x1","edx":"0x499578","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b2 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 ed ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 17 01 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x19bb5d","ecx":"0x1","edx":"0x22d80d0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b2 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x1","edx":"0x499579","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b1 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 ec ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 17 01 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x19bb5c","ecx":"0x1","edx":"0x22d80d0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b1 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x1","edx":"0x49957a","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 01 00 00 00 02 00 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 eb ff ff ff 02 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 17 01 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x19bb5b","ecx":"0x1","edx":"0x22d80d0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 e4 ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x19bb54","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 54 c7 2f 02 T./. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1b 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 17 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x1936a8","ecx":"0x4","edx":"0x22fc754","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 61 33 32 31 a321 [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x1","edx":"0x1936a8","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 61 a [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 02 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x193a8a Context : {"pc":"0x465764","sp":"0x1936a0","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a0","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x22d8144","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 e0 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0d 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x0 Context : {"pc":"0x465764","sp":"0x1936a8","eax":"0x22d80c0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a8","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 ee ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x1","edx":"0x19bb5e","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 e0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............... 00000010 52 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 R............... 00000020 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 e4 ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x19bb54","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 54 c7 2f 02 T./. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1b 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 17 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x1936a8","ecx":"0x4","edx":"0x22fc755","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 33 32 31 00 321. [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x1","edx":"0x1936a8","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 33 3 [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 02 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x193a8a Context : {"pc":"0x465764","sp":"0x1936a0","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a0","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x22d8144","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b2 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0d 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x0 Context : {"pc":"0x465764","sp":"0x1936a8","eax":"0x22d80c0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a8","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 ed ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x1","edx":"0x19bb5d","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b2 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............... 00000010 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?............... 00000020 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 e4 ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x19bb54","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 54 c7 2f 02 T./. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1b 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 17 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x1936a8","ecx":"0x4","edx":"0x22fc756","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 32 31 00 00 21.. [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x1","edx":"0x1936a8","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 32 2 [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 02 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x193a8a Context : {"pc":"0x465764","sp":"0x1936a0","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a0","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x22d8144","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b1 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0d 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x0 Context : {"pc":"0x465764","sp":"0x1936a8","eax":"0x22d80c0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a8","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 ec ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x1","edx":"0x19bb5c","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b1 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............... 00000010 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ,............... 00000020 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 e4 ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x19bb54","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 54 c7 2f 02 T./. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 1b 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 17 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x1936a8","ecx":"0x4","edx":"0x22fc757","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 31 00 00 49 1..I [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x22d8144 Context : {"pc":"0x465764","sp":"0x19369c","eax":"0x22d80d0","ecx":"0x1","edx":"0x1936a8","ebx":"0x22d8144","esp":"0x19369c","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 31 1 [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 02 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 7f 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x193a8a Context : {"pc":"0x465764","sp":"0x1936a0","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a0","ebp":"0x1936b8","esi":"0x22d80d0","edi":"0x22d8144","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b0 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0d 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x0 Context : {"pc":"0x465764","sp":"0x1936a8","eax":"0x22d80c0","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a8","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 01 00 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 eb ff ff ff 02 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 01 02 ................ 00000050 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x1","edx":"0x19bb5b","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 b0 . [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 08 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 15 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ............... 00000010 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0c 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 02 00 00 f0 ................ 00000030 00 00 00 00 00 00 00 00 d8 7f ff ff 01 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x193b48 Context : {"pc":"0x465764","sp":"0x1936ac","eax":"0x22d80d0","ecx":"0x4","edx":"0x1936b4","ebx":"0x22d8144","esp":"0x1936ac","ebp":"0x1936b8","esi":"0x4","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 48 3b 19 00 H;.. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 09 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x1936c4 Context : {"pc":"0x465764","sp":"0x1936b0","eax":"0x193b14","ecx":"0x4","edx":"0x1936b4","ebx":"0x22d8144","esp":"0x1936b0","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 48 3b 19 00 H;.. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0d 00 00 00 00 00 00 00 16 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 16 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x0 Context : {"pc":"0x465764","sp":"0x1936a8","eax":"0x22d80c8","ecx":"0x4","edx":"0x1936b0","ebx":"0x4","esp":"0x1936a8","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 00 00 00 00 .... [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 15 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 88 97 49 00 00 00 00 00 00 00 00 00 ......I......... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80c0","ecx":"0x4","edx":"0x22d89b0","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 88 97 49 00 ..I. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 01 00 00 00 00 00 00 00 17 11 01 f0 00 00 00 00 ................ 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 01 00 14 11 01 f0 ................ 00000030 00 00 00 00 00 00 00 00 38 03 00 00 01 00 00 00 ........8....... 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 02 ................ 00000050 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 .... [+] return to : 0x474ea5 Context : {"pc":"0x465764","sp":"0x1936b4","eax":"0x22d80d0","ecx":"0x4","edx":"0x22d242c","ebx":"0x22d8144","esp":"0x1936b4","ebp":"0x1936b8","esi":"0x193a8a","edi":"0x4f70068","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0c 00 3c 05 ..<. [+] return to : 0x474ec0 Context : {"pc":"0x465764","sp":"0x1936cc","eax":"0x22d897c","ecx":"0x64","edx":"0x4f70004","ebx":"0x4f70004","esp":"0x1936cc","ebp":"0x1936f8","esi":"0x193a8a","edi":"0x22d07e4","eip":"0x465764"} Data dump src : 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 00000000 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000010 90 d3 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000020 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ 00000050 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000060 00 00 00 00 ....