dump count = 1 ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 0038beb8 50160110 ZfHookFileMmPlugin+0x20110 0038bee4 7598165c ZfHookFileMmPlugin+0x20110 0038bf38 00000000 KERNELBASE!WaitForSingleObjectEx+0xcb062235b019ee21a4f4f38ea791846777_000.dmp