dump count = 1 ChildEBP RetAddr 08faedec 0f63cc05 ntdll!RtlReAllocateHeap+0x67 08faee0c 00000000 CfgRelay!_realloc_base+0x63