Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Oct. 2, 2023, 8:56 a.m.	Oct. 2, 2023, 8:58 a.m.

Size	10.2MB
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`6cfc8a19911d2a4401c1c362587e83ce`
SHA256	`6543c547b83be07c11742aebcba0264026667005c7d4b90ca9ee8da62ad06984`
CRC32	`BC84CED2`
ssdeep	`98304:01+qfbaSe1um0WohRcxAqV6EiTEEhG8VdjDEJgkKQ:nGWM0x7VdiAfj`
Yara	Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature IsPE64 - (no description) anti_vm_detect - Possibly employs anti-virtualization techniques Malicious_Packer_Zero - Malicious Packer OS_Processor_Check_Zero - OS Processor Check Generic_Malware_Zero - Generic Malware

rFXRoh.exe "C:\Users\test22\AppData\Local\Temp\rFXRoh.exe"
1952

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

One or more processes crashed (50 out of 45476 events)

Time & API	Arguments	Status
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3a7ec4 rfxroh+0x577ac @ 0x13f6777ac callbackTrampoline-0x3a7c4b rfxroh+0x57a25 @ 0x13f677a25 preUpdateHookTrampoline+0x508570 _cgo_dummy_export-0x178de0 rfxroh+0x907f40 @ 0x13ff27f40 preUpdateHookTrampoline+0x107870 _cgo_dummy_export-0x579ae0 rfxroh+0x507240 @ 0x13fb27240 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 0 registers.rcx: 824634016768 registers.rsi: 9664459576 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664459928 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 9664460032 registers.rbp: 9664460080 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 5367824192	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 0x278d0008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664454720 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664455064 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664455072 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664455600	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664449856 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664450200 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664450208 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664450736	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664444992 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664445336 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664445344 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664445872	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664440128 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664440472 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664440480 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664441008	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664435264 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664435608 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664435616 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664436144	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664430400 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664430744 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664430752 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664431280	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664425536 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664425880 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664425888 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664426416	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664420672 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664421016 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664421024 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664421552	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664415808 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664416152 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664416160 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664416688	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664410944 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664411288 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664411296 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664411824	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664406080 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664406424 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664406432 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664406960	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664401216 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664401560 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664401568 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664402096	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664396352 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664396696 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664396704 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664397232	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664391488 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664391832 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664391840 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664392368	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664386624 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664386968 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664386976 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664387504	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664381760 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664382104 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664382112 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664382640	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664376896 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664377240 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664377248 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664377776	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664372032 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664372376 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664372384 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664372912	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664367168 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664367512 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664367520 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664368048	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664362304 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664362648 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664362656 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664363184	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664357440 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664357784 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664357792 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664358320	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664352576 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664352920 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664352928 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664353456	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664347712 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664348056 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664348064 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664348592	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664342848 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664343192 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664343200 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664343728	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664337984 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664338328 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664338336 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664338864	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664333120 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664333464 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664333472 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664334000	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664328256 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664328600 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664328608 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664329136	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664323392 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664323736 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664323744 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664324272	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664318528 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664318872 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664318880 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664319408	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664313664 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664314008 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664314016 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664314544	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664308800 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664309144 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664309152 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664309680	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664303936 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664304280 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664304288 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664304816	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664299072 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664299416 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664299424 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664299952	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664294208 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664294552 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664294560 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664295088	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664289344 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664289688 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664289696 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664290224	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664284480 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664284824 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664284832 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664285360	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664279616 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664279960 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664279968 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664280496	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664274752 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664275096 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664275104 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664275632	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664269888 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664270232 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664270240 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664270768	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664265024 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664265368 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664265376 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664265904	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664260160 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664260504 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664260512 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664261040	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664255296 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664255640 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664255648 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664256176	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664250432 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664250776 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664250784 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664251312	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664245568 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664245912 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664245920 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664246448	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664240704 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664241048 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664241056 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664241584	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664235840 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664236184 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664236192 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664236720	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664230976 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664231320 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664231328 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664231856	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664226112 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664226456 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664226464 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664226992	1
__exception__ Oct. 2, 2023, 8:49 a.m.	stacktrace: callbackTrampoline-0x39380f rfxroh+0x6be61 @ 0x13f68be61 callbackTrampoline-0x39586c rfxroh+0x69e04 @ 0x13f689e04 callbackTrampoline-0x3f2111 rfxroh+0xd55f @ 0x13f62d55f callbackTrampoline-0x3c65f2 rfxroh+0x3907e @ 0x13f65907e preUpdateHookTrampoline+0x673050 _cgo_dummy_export-0xe300 rfxroh+0xa72a20 @ 0x140092a20 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 0x27890008 exception.instruction_r: 03 eb fe cc cc cc cc cc cc cc cc cc cc cc cc cc exception.symbol: callbackTrampoline-0x39380f rfxroh+0x6be61 exception.instruction: add ebp, ebx exception.module: rFXRoh.exe exception.exception_code: 0x80000003 exception.offset: 441953 exception.address: 0x13f68be61 registers.r14: 824633976032 registers.r15: 5358810400 registers.rcx: 824634016768 registers.rsi: 9664221248 registers.r10: 3221225480 registers.rbx: 824634017400 registers.rsp: 9664221592 registers.r11: 514 registers.r8: 2003566592 registers.r9: 350 registers.rdx: 0 registers.r12: 8796092887040 registers.rbp: 9664221600 registers.rdi: 8796092870656 registers.rax: 0 registers.r13: 9664222128	1

The binary likely contains encrypted or compressed data indicative of a packer (1 event)

section

{u'size_of_data': u'0x00002200', u'virtual_address': u'0x00a87000', u'entropy': 7.140142343747973, u'name': u'.rsrc', u'virtual_size': u'0x0000202c'}

entropy

7.14014234375

description

A section with a high entropy has been found

Detects the presence of Wine emulator (1 event)

Time & API	Arguments	Status	Return	Repeated
LdrGetProcedureAddress Oct. 2, 2023, 8:49 a.m.	ordinal: 0 function_address: 0x000007fefe467a50 function_name: wine_get_version module: ntdll module_address: 0x00000000776c0000		-1073741511	0

File has been identified by 36 AntiVirus engines on VirusTotal as malicious (36 events)

Bkav	W32.AIDetectMalware.64
Lionic	Trojan.Win32.DInvoke.4!c
MicroWorld-eScan	Trojan.GenericKD.69531918
McAfee	Artemis!6CFC8A19911D
Alibaba	Trojan:MSIL/DInvoke.e990bf10
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Generic.D424F90E
Cyren	W64/ABRisk.TBMB-7635
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Kaspersky	Trojan.MSIL.DInvoke.anz
BitDefender	Trojan.GenericKD.69531918
Avast	Win64:Evo-gen [Trj]
Emsisoft	Trojan.GenericKD.69531918 (B)
F-Secure	Trojan.TR/Redcap.hpolj
McAfee-GW-Edition	Artemis!Trojan
FireEye	Trojan.GenericKD.69531918
Sophos	Mal/Generic-S
Webroot	W32.Trojan.GenKD
Avira	TR/Redcap.hpolj
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.Wacatac
Gridinsoft	Trojan.Win64.AsyncRAT.bot
Microsoft	Trojan:Win32/Znyonm
ZoneAlarm	Trojan.MSIL.DInvoke.anz
GData	Trojan.GenericKD.69531918
Google	Detected
AhnLab-V3	Trojan/Win.Evo-gen.C5499237
ALYac	Trojan.GenericKD.69531969
Cylance	unsafe
Panda	Trj/Chgt.AD
Ikarus	Trojan.MSIL.Agent
Fortinet	W32/PossibleThreat
AVG	Win64:Evo-gen [Trj]
DeepInstinct	MALICIOUS

rFXRoh.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All