Analyzed 28 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fcdf0 62bddc08 node+0x2a2f20b
004fd0ef 614d203a node+0xb2dc08
736d2030 00770035 d3d11!FastPathSwizzler<1,16,4>::ProcessUnalignedBytes<1>+0xcb
736d2050 0074006d 0x770035
736d2054 00000000 0x74006d

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0607f638 0a998f28 node+0xfefdcb
0607f63c 00000000 0xa998f28

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fcce8 67bbdc08 node+0x2a2f20b
008fcfe7 4d203a73 node+0xb2dc08
008fcfeb 2d6b7261 0x4d203a73
008fcfef 65657773 0x2d6b7261
008fcff3 30312070 0x65657773
008fcff7 2820312e 0x30312070
008fcffb 382e3131 0x2820312e
008fcfff 3e2d2029 0x382e3131
008fd003 2e303120 0x3e2d2029
008fd007 31282031 0x2e303120
008fd00b 29382e31 0x31282031
008fd00f 2c424d20 0x29382e31
008fd013 35383520 0x2c424d20
008fd017 2f20322e 0x35383520
008fd01b 302e3020 0x2f20322e
008fd01f 20736d20 0x302e3020
008fd023 76612820 0x20736d20
008fd04f 656d2077 advapi32!__CodeAuthzIsExecutableFileTypeHelper+0x10a
008fd05b 63696669 0x656d2077
008fd05f 6f697461 0x63696669
008fd063 4347206e 0x6f697461
008fd067 206e6920 0x4347206e
008fd06b 20646c6f 0x206e6920
008fd06f 63617073 0x20646c6f
008fd073 65722065 0x63617073
008fd077 73657571 0x65722065
008fd07b 0a646574 0x73657571
008fd07f 3638385b 0xa646574
008fd083 32303a30 0x3638385b
008fd087 42353544 0x32303a30
008fd08b 205d3830 0x42353544
008fd08f 35363120 0x205d3830
008fd093 36383034 0x35363120
008fd097 3a736d20 0x36383034
008fd09b 72614d20 0x3a736d20
008fd09f 77732d6b 0x72614d20
008fd0df 3d20756d wintrust!CatalogFillCTL+0x2ed
008fd0e3 392e3020 0x3d20756d
008fd0e7 202c3637 0x392e3020
008fd0eb 72727563 0x202c3637
008fd0ef 20746e65 0x72727563
008fd0f3 3d20756d 0x20746e65
008fd0f7 392e3020 0x3d20756d
008fd0fb 20293638 0x392e3020
008fd0ff 20776f6c 0x20293638
008fd103 6f6d656d 0x20776f6c
008fd107 6e207972 0x6f6d656d
008fd10b 6669746f 0x6e207972
008fd13f 3120205d d3d9!CEnum::ValidateCreateDevice+0x262
008fd15b 2820312e 0x3120205d
008fd15f 382e3131 0x2820312e
008fd163 3e2d2029 0x382e3131
008fd167 2e303120 0x3e2d2029
008fd16b 31282031 0x2e303120
008fd16f 29382e31 0x31282031
008fd173 2c424d20 0x29382e31
008fd177 30353720 0x2c424d20
008fd17b 2f20352e 0x30353720
008fd17f 302e3020 0x2f20352e
008fd183 20736d20 0x302e3020
008fd187 76612820 0x20736d20
008fd1b3 656d2077 advapi32!__CodeAuthzIsExecutableFileTypeHelper+0x10a
008fd1bf 63696669 0x656d2077
008fd1c3 6f697461 0x63696669
008fd1c7 4347206e 0x6f697461
008fd1cb 206e6920 0x4347206e
008fd1cf 20646c6f 0x206e6920
008fd1d3 63617073 0x20646c6f
008fd1d7 65722065 0x63617073
008fd1db 73657571 0x65722065
008fd1df 0a646574 0x73657571
008fd1e3 00000000 0xa646574

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afccb8 5cd8dc08 node+0x2a2f20b
00afcfb7 6d203735 node+0xb2dc08
00afcfbb 4d203a73 0x6d203735
00afcfbf 2d6b7261 0x4d203a73
00afcfc3 65657773 0x2d6b7261
00afcfc7 30312070 0x65657773
00afcfcb 2820312e 0x30312070
00afcfcf 302e3231 0x2820312e
00afcfd3 3e2d2029 0x302e3231
00afcfd7 2e303120 0x3e2d2029
00afcfdb 31282030 0x2e303120
00afcfdf 29302e32 0x31282030
00afcfe3 2c424d20 0x29302e32
00afcfe7 2e313120 0x2c424d20
00afcfeb 202f2035 0x2e313120
00afcfef 20302e30 0x202f2035
00afcff3 2020736d 0x20302e30
00afcff7 65766128 0x2020736d
00afcffb 65676172 0x65766128
00afcfff 20756d20 0x65676172
00afd003 2e30203d 0x20756d20
00afd007 2c393939 0x2e30203d
00afd00b 7275631f 0x2c393939
00afd013 20756d20 dbghelp!InitModuleEntry+0x2
00afd017 2e30203d 0x20756d20
00afd01b 29333030 0x2e30203d
00afd01f 776f6c20 0x29333030
00afd023 6d656d20 0x776f6c20
00afd027 2079726f 0x6d656d20
00afd02b 69746f6e 0x2079726f
00afd02f 61636966 0x69746f6e
00afd033 6e6f6974 ntasn1!ASN1_OBJECT_CrlEntry+0x13a
00afd037 20434720 0x6e6f6974
00afd03b 6f206e69 0x20434720
00afd03f 7320646c 0x6f206e69
00afd043 65636170 0x7320646c
00afd047 71657220 0x65636170
00afd04b 74736575 wininet!WPP_659e66eaf6c039f49471d35f5b428e14_Traceguids+0xc7a88
00afd04f 5b0a6465 shell32!`FileExplorerTelemetry::AreAllItemsAvailable::Stop'::`12'::_TlgEvent+0x1c
00afd053 38363938 0x5b0a6465
00afd057 4334303a 0x38363938
00afd05b 44324346 0x4334303a
00afd05f 20205d30 0x44324346
00afd063 32333031 0x20205d30
00afd067 20373535 0x32333031
00afd06b 203a736d 0x20373535
00afd06f 6b72614d 0x203a736d
00afd073 6577732d 0x6b72614d
00afd077 31207065 0x6577732d
00afd07b 20362e30 0x31207065
00afd07f 2e323128 0x20362e30
00afd083 2d202930 0x2e323128
00afd087 3031203e 0x2d202930
00afd08b 2820312e 0x3031203e
00afd08f 302e3231 0x2820312e
00afd093 424d2029 0x302e3231
00afd097 3132202c 0x424d2029
00afd09b 2f20352e 0x3132202c
00afd09f 302e3020 0x2f20352e
00afd0a3 20736d20 0x302e3020
00afd0a7 76612820 0x20736d20
00afd0ab 67617265 clbcatq!g_acolmetaregMETA_CS_CLASSESEXPORT+0x3f8
00afd0af 756d2065 0x67617265
00afd0b3 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xff2065)
00afd0b7 3030302e 0x31203d20
00afd0bb 7563202c 0x3030302e
00afd0bf 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xf5202c)
00afd0c3 756d2074 0x6e657272
00afd0c7 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xff2074)
00afd0cb 3030302e 0x31203d20
00afd0cf 6f6c2029 0x3030302e
00afd0d3 656d2077 0x6f6c2029
00afd0d7 79726f6d 0x656d2077
00afd0db 746f6e20 0x79726f6d
00afd0df 63696669 shell32!CColumnListCommand::`vftable'+0x4
00afd0e3 6f697461 0x63696669
00afd0e7 4347206e 0x6f697461
00afd0eb 206e6920 0x4347206e
00afd0ef 20646c6f 0x206e6920
00afd0f3 63617073 0x20646c6f
00afd0f7 65722065 0x63617073
00afd0fb 73657571 0x65722065
00afd0ff 0a646574 0x73657571
00afd103 3639385b 0xa646574
00afd107 34303a38 0x3639385b
00afd10b 32434643 0x34303a38
00afd10f 205d3044 0x32434643
00afd113 33303120 0x205d3044
00afd117 35363532 0x33303120
00afd11b 3a736d20 0x35363532
00afd11f 72614d20 0x3a736d20
00afd123 77732d6b 0x72614d20
00afd127 20706565 0x77732d6b
00afd12b 312e3031 0x20706565
00afd12f 32312820 0x312e3031
00afd133 2029302e 0x32312820
00afd137 31203e2d 0x2029302e
00afd13b 20302e30 0x31203e2d
00afd13f 2e323128 0x20302e30
00afd143 4d202930 0x2e323128
00afd147 38202c42 0x4d202930
00afd14b 2f20352e 0x38202c42
00afd14f 302e3020 0x2f20352e
00afd153 20736d20 0x302e3020
00afd157 76612820 0x20736d20
00afd15b 67617265 clbcatq!g_acolmetaregMETA_CS_CLASSESEXPORT+0x3f8
00afd15f 756d2065 0x67617265
00afd163 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xff2065)
00afd167 3939392e 0x30203d20
00afd16b 7563202c 0x3939392e
00afd16f 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xf5202c)
00afd173 756d2074 0x6e657272
00afd177 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xff2074)
00afd17b 3330302e 0x30203d20
00afd17f 6f6c2029 0x3330302e
00afd183 656d2077 0x6f6c2029
00afd187 79726f6d 0x656d2077
00afd18b 746f6e20 0x79726f6d
00afd18f 63696669 shell32!CColumnListCommand::`vftable'+0x4
00afd193 6f697461 0x63696669
00afd197 4347206e 0x6f697461
00afd19b 206e6920 0x4347206e
00afd19f 20646c6f 0x206e6920
00afd1a3 63617073 0x20646c6f
00afd1a7 65722065 0x63617073
00afd1ab 73657571 0x65722065
00afd1af 0a646574 0x73657571
00afd1b3 00000000 0xa646574

Top 5: total counts = 1

ChildEBP RetAddr  
0784f458 6c3fe87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0784f530 6c4489d7 node+0x12ae87c
0784f550 6b1b284b node+0x12f89d7
0784f554 00601e6f node+0x6284b
0784f558 0ce8cef4 0x601e6f
0784f55c 00180793 0xce8cef4
0784f560 0010050e 0x180793
0784f564 16301474 0x10050e
0784f568 0ce8cec8 0x16301474
0784f56c 0ce8cec8 0xce8cec8
0784f570 0784f61c 0xce8cec8
0784f574 6b1b27d8 0x784f61c
0784f61c 6c988dab node+0x627d8
0784f634 6b720539 node+0x1838dab
0784f650 6b71d4a9 node+0x5d0539
0784f76c 6b713632 node+0x5cd4a9
0784f86c 6b7133f1 node+0x5c3632
0784f870 00000000 node+0x5c33f1

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ac988 586adc08 node+0x2a2f20b
002acc87 6b72614d node+0xb2dc08
002acc8b 6577732d 0x6b72614d
002acc8f 31207065 0x6577732d
002acc93 20342e30 0x31207065
002acc97 2e323128 0x20342e30
002acc9b 2d202933 0x2e323128
002acc9f 3031203e 0x2d202933
002acca3 2820342e 0x3031203e
002acca7 332e3231 0x2820342e
002accab 424d2029 0x332e3231
002accaf 3232202c 0x424d2029
002accb3 2f20322e 0x3232202c
002accb7 302e3020 0x2f20322e
002accbb 20736d20 0x302e3020
002accbf 76612820 0x20736d20
002accc3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x5a2820)
002accc7 756d2065 0x67617265
002acccb 30203d20 0x756d2065
002acccf 3939392e 0x30203d20
002accd3 7563202c 0x3939392e
002accd7 6e657272 usp10!chAttr+0x37d4
002accdb 756d2074 0x6e657272
002accdf 30203d20 0x756d2074
002acce3 3130302e 0x30203d20
002acce7 6f6c2029 0x3130302e
002acceb 656d2077 0x6f6c2029
002accef 79726f6d 0x656d2077
002accf3 746f6e20 0x79726f6d
002accf7 63696669 0x746f6e20
002accfb 6f697461 0x63696669
002accff 4347206e 0x6f697461
002acd03 206e6920 0x4347206e
002acd07 20646c6f 0x206e6920
002acd0b 63617073 0x20646c6f
002acd0f 65722065 0x63617073
002acd13 73657571 0x65722065
002acd17 0a646574 0x73657571
002acd1b 3933335b 0xa646574
002acd1f 303a3032 0x3933335b
002acd23 31424330 0x303a3032
002acd27 5d303936 0x31424330
002acd2b 37353220 0x5d303936
002acd2f 39313430 0x37353220
002acd33 20313732 0x39313430
002acd37 203a736d 0x20313732
002acd3b 6b72614d 0x203a736d
002acd3f 6577732d 0x6b72614d
002acd43 31207065 0x6577732d
002acd47 20392e30 0x31207065
002acd4b 2e323128 0x20392e30
002acd4f 2d202933 0x2e323128
002acd53 3031203e 0x2d202933
002acd57 2820342e 0x3031203e
002acd5b 332e3231 0x2820342e
002acd5f 424d2029 0x332e3231
002acd63 3432202c 0x424d2029
002acd67 2f20312e 0x3432202c
002acd6b 302e3020 0x2f20312e
002acd6f 20736d20 0x302e3020
002acd73 76612820 0x20736d20
002acd77 67617265 shell32!__dyn_tls_init_callback  (shell32+0x5a2820)
002acd7b 756d2065 0x67617265
002acd7f 30203d20 0x756d2065
002acd83 3939392e 0x30203d20
002acd87 7563202c 0x3939392e
002acd8b 6e657272 usp10!chAttr+0x37d4
002acd8f 756d2074 0x6e657272
002acd93 31203d20 0x756d2074
002acd97 3030302e 0x31203d20
002acd9b 6f6c2029 0x3030302e
002acd9f 656d2077 0x6f6c2029
002acda3 79726f6d 0x656d2077
002acda7 746f6e20 0x79726f6d
002acdab 63696669 0x746f6e20
002acdaf 6f697461 0x63696669
002acdb3 4347206e 0x6f697461
002acdb7 206e6920 0x4347206e
002acdbb 20646c6f 0x206e6920
002acdbf 63617073 0x20646c6f
002acdc3 65722065 0x63617073
002acdc7 73657571 0x65722065
002acdcb 0a646574 0x73657571
002acdcf 3933335b 0xa646574
002acdd3 303a3032 0x3933335b
002acdd7 31424330 0x303a3032
002acddb 5d303936 0x31424330
002acddf 37353220 0x5d303936
002acde3 39313430 0x37353220
002acde7 20303932 0x39313430
002acdeb 203a736d 0x20303932
002acdef 6b72614d 0x203a736d
002acdf3 6577732d 0x6b72614d
002acdf7 31207065 0x6577732d
002acdfb 20342e30 0x31207065
002acdff 2e323128 0x20342e30
002ace03 2d202933 0x2e323128
002ace07 3031203e 0x2d202933
002ace0b 2820342e 0x3031203e
002ace0f 332e3231 0x2820342e
002ace13 424d2029 0x332e3231
002ace17 3831202c 0x424d2029
002ace1b 2f20352e 0x3831202c
002ace1f 302e3020 0x2f20352e
002ace23 20736d20 0x302e3020
002ace27 76612820 0x20736d20
002ace2b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x5a2820)
002ace2f 756d2065 0x67617265
002ace33 30203d20 0x756d2065
002ace37 3939392e 0x30203d20
002ace3b 7563202c 0x3939392e
002ace3f 6e657272 usp10!chAttr+0x37d4
002ace43 756d2074 0x6e657272
002ace47 30203d20 0x756d2074
002ace4b 3230302e 0x30203d20
002ace4f 6f6c2029 0x3230302e
002ace53 656d2077 0x6f6c2029
002ace57 79726f6d 0x656d2077
002ace5b 746f6e20 0x79726f6d
002ace5f 63696669 0x746f6e20
002ace63 6f697461 0x63696669
002ace67 4347206e 0x6f697461
002ace6b 206e6920 0x4347206e
002ace6f 20646c6f 0x206e6920
002ace73 63617073 0x20646c6f
002ace77 65722065 0x63617073
002ace7b 73657571 0x65722065
002ace7f 0a646574 0x73657571
002ace83 00000000 0xa646574

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04fefa24 5957f812 node+0x17fccf0
04fefa90 595889e6 node+0x12bf812
04fefb5c 5958875e node+0x12c89e6
04fefbb4 595615c2 node+0x12c875e
04fefbec 59560acb node+0x12a15c2
04fefc2c 595723d2 node+0x12a0acb
04fefc74 595722e2 node+0x12b23d2
04fefce4 762b344d node+0x12b22e2
04fefcf0 77b09802 kernel32!BaseThreadInitThunk+0xe
04fefd30 77b097d5 ntdll!__RtlUserThreadStart+0x70
04fefd48 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 1

ChildEBP RetAddr  
0052e53c 5e042d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
0052e5e8 5c68d8be node+0x2a12d3c
0052e614 184785d0 node+0x105d8be
0052e67c 5c6b4501 0x184785d0
0052e698 5c6d55ea node+0x1084501
0052e6b4 5c6a8046 node+0x10a55ea
0052e6dc 5c68ab9b node+0x1078046
0052e708 5c2744bc node+0x105ab9b
0052e790 5c274913 node+0xc444bc
0052e79c 0207ab60 node+0xc44913
0052e7a0 00000000 0x207ab60

Top 9: total counts = 1

03caf75c 6df98c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
03caf788 6cca1422 node+0x12f8c7a
03caf814 6f78898d node+0x1422
00000000 00000000 node+0x2ae898d

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x12cdb78

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0118ca70 591fdc08 node+0x2a2f20b
0118cd6f 37323137 node+0xb2dc08
0118cd73 3a736d20 0x37323137
0118cd77 72614d20 0x3a736d20
0118cd7b 77732d6b 0x72614d20
0118cd7f 20706565 ntdll!__guard_fids_table+0xf83
0118cd83 322e3031 0x20706565
0118cd87 32312820 0x322e3031
0118cd8b 2029332e 0x32312820
0118cd8f 31203e2d 0x2029332e
0118cd93 20322e30 0x31203e2d
0118cd97 2e323128 0x20322e30
0118cd9b 4d202933 0x2e323128
0118cd9f 35202c42 0x4d202933
0118cda3 2f20382e 0x35202c42
0118cda7 302e3020 0x2f20382e
0118cdab 20736d20 0x302e3020
0118cdaf 76612820 0x20736d20
0118cdb3 67617265 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x32a30
0118cdb7 756d2065 0x67617265
0118cdbb 31203d20 shell32!ATL::CComContainedObject::`vftable'+0x1
0118cdbf 3030302e 0x31203d20
0118cdc3 7563202c 0x3030302e
0118cddb 656d2077 msvcrt!_execve+0x6c
0118cdeb 6f697461 0x656d2077
0118cdef 4347206e 0x6f697461
0118cdf3 206e6920 0x4347206e
0118cdf7 20646c6f 0x206e6920
0118cdfb 63617073 0x20646c6f
0118cdff 65722065 0x63617073
0118ce03 73657571 0x65722065
0118ce0b 3838375b oleacc!CProgressBar::GetPropertyValue+0x21
0118ce1b 32363034 0x3838375b
0118ce1f 31333137 0x32363034
0118ce23 3a736d20 0x31333137
0118ce27 72614d20 0x3a736d20
0118ce2b 77732d6b 0x72614d20
0118ce2f 20706565 ntdll!__guard_fids_table+0xf83
0118ce33 372e3031 0x20706565
0118ce37 32312820 0x372e3031
0118ce3b 2029332e 0x32312820
0118ce3f 31203e2d 0x2029332e
0118ce43 20322e30 0x31203e2d
0118ce47 2e323128 0x20322e30
0118ce4b 4d202933 0x2e323128
0118ce4f 34202c42 0x4d202933
0118ce53 2f20392e 0x34202c42
0118ce57 302e3020 0x2f20392e
0118ce5b 20736d20 0x302e3020
0118ce5f 76612820 0x20736d20
0118ce63 67617265 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x32a30
0118ce67 756d2065 0x67617265
0118ce6b 31203d20 shell32!ATL::CComContainedObject::`vftable'+0x1
0118ce6f 3030302e 0x31203d20
0118ce73 7563202c 0x3030302e
0118ce8b 656d2077 msvcrt!_execve+0x6c
0118ce9b 6f697461 0x656d2077
0118ce9f 4347206e 0x6f697461
0118cea3 206e6920 0x4347206e
0118cea7 20646c6f 0x206e6920
0118ceab 63617073 0x20646c6f
0118ceaf 65722065 0x63617073
0118ceb3 73657571 0x65722065
0118cebb 3838375b oleacc!CProgressBar::GetPropertyValue+0x21
0118cecb 32363034 0x3838375b
0118cecf 36333137 0x32363034
0118ced3 3a736d20 0x36333137
0118ced7 72614d20 0x3a736d20
0118cedb 77732d6b 0x72614d20
0118cedf 20706565 ntdll!__guard_fids_table+0xf83
0118cee3 322e3031 0x20706565
0118cee7 32312820 0x322e3031
0118ceeb 2029332e 0x32312820
0118ceef 31203e2d 0x2029332e
0118cef3 20322e30 0x31203e2d
0118cef7 2e323128 0x20322e30
0118cefb 4d202933 0x2e323128
0118ceff 35202c42 0x4d202933
0118cf03 2f20342e 0x35202c42
0118cf07 302e3020 0x2f20342e
0118cf0b 20736d20 0x302e3020
0118cf0f 76612820 0x20736d20
0118cf13 67617265 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x32a30
0118cf17 756d2065 0x67617265
0118cf1b 31203d20 shell32!ATL::CComContainedObject::`vftable'+0x1
0118cf1f 3030302e 0x31203d20
0118cf23 7563202c 0x3030302e
0118cf3b 656d2077 msvcrt!_execve+0x6c
0118cf4b 6f697461 0x656d2077
0118cf4f 4347206e 0x6f697461
0118cf53 206e6920 0x4347206e
0118cf57 20646c6f 0x206e6920
0118cf5b 63617073 0x20646c6f
0118cf5f 65722065 0x63617073
0118cf63 73657571 0x65722065
0118cf6b 00000000 oleacc!CProgressBar::GetPropertyValue+0x21

Top 12: total counts = 1

ChildEBP RetAddr  
004ced5c 63d72d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 13: total counts = 1

0032cff7 732d6b72 0x614d203a
0032cffb 70656577 360Conf+0x36b72
0032cfff 2e303120 node+0x45d6577
0032d003 31282038 0x2e303120
0032d007 29382e32 0x31282038
0032d00b 203e2d20 0x29382e32
0032d00f 332e3031 0x203e2d20
0032d013 32312820 0x332e3031
0032d017 2029352e 0x32312820
0032d01b 202c424d 0x2029352e
0032d01f 39393435 0x202c424d
0032d023 2f20312e 0x39393435
0032d027 312e3420 0x2f20312e
0032d02b 20736d20 0x312e3420
0032d02f 76612820 0x20736d20
0032d033 67617265 shell32!__dyn_tls_init_callback  (shell32+0x422820)
0032d037 756d2065 0x67617265
0032d03b 30203d20 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xe2065)
0032d03f 3433392e 0x30203d20
0032d043 7563202c 0x3433392e
0032d05f 79726f6d rpcrt4!RpcBindingSetAuthInfoExW+0x1cc
0032d07f 65722065 0x79726f6d
0032d083 73657571 0x65722065
0032d087 0a646574 0x73657571
0032d08b 00000000 0xa646574

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0017cef0 6c50dc08 node+0x2a2f20b
0017d1ef 6d203839 node+0xb2dc08
0017d1f3 4d203a73 node+0x1823839
0017d1f7 2d6b7261 0x4d203a73
0017d1fb 65657773 0x2d6b7261
0017d1ff 30312070 0x65657773
0017d203 2820342e 0x30312070
0017d207 352e3231 0x2820342e
0017d20b 3e2d2029 0x352e3231
0017d20f 2e303120 0x3e2d2029
0017d213 31282034 0x2e303120
0017d217 29352e32 0x31282034
0017d21b 2c424d20 0x29352e32
0017d21f 392e3720 0x2c424d20
0017d223 30202f20 0x392e3720
0017d227 6d20302e 0x30202f20
0017d22b 28202073 node+0x182302e
0017d22f 72657661 0x28202073
0017d233 20656761 0x72657661
0017d237 3d20756d 0x20656761
0017d23b 302e3120 0x3d20756d
0017d23f 202c3030 0x302e3120
0017d243 72727563 0x202c3030
0017d247 20746e65 0x72727563
0017d24b 3d20756d 0x20746e65
0017d24f 302e3020 0x3d20756d
0017d253 20293330 0x302e3020
0017d257 20776f6c 0x20293330
0017d25b 6f6d656d 0x20776f6c
0017d25f 6e207972 node+0x3cf656d
0017d263 6669746f node+0x2827972
0017d267 74616369 0x6669746f
0017d26b 206e6f69 0x74616369
0017d26f 69204347 0x206e6f69
0017d273 6c6f206e 0x69204347
0017d277 70732064 node+0xd1206e
0017d27b 20656361 0x70732064
0017d27f 75716572 0x20656361
0017d283 65747365 shell32!__dyn_tls_init_callback  (shell32+0x406572)
0017d287 325b0a64 0x65747365
0017d28b 3a363530 0x325b0a64
0017d28f 39463130 0x3a363530
0017d293 38464542 0x39463130
0017d297 3132205d 0x38464542
0017d29b 35333733 0x3132205d
0017d29f 20303933 0x35333733
0017d2a3 203a736d 0x20303933
0017d2a7 6b72614d 0x203a736d
0017d2ab 6577732d 0x6b72614d
0017d2af 31207065 0x6577732d
0017d2b3 20382e30 0x31207065
0017d2b7 2e323128 0x20382e30
0017d2bb 2d202935 0x2e323128
0017d2bf 3031203e 0x2d202935
0017d2c3 2820342e 0x3031203e
0017d2c7 352e3231 0x2820342e
0017d2cb 424d2029 0x352e3231
0017d2cf 2e37202c 0x424d2029
0017d2d3 202f2032 0x2e37202c
0017d2d7 20302e30 0x202f2032
0017d2db 2020736d 0x20302e30
0017d2df 65766128 0x2020736d
0017d2e3 65676172 0x65766128
0017d2e7 20756d20 0x65676172
0017d2eb 2e31203d 0x20756d20
0017d2ef 2c303030 0x2e31203d
0017d2f3 72756320 0x2c303030
0017d2f7 746e6572 0x72756320
0017d2fb 20756d20 0x746e6572
0017d2ff 2e31203d 0x20756d20
0017d303 29303030 0x2e31203d
0017d307 776f6c20 0x29303030
0017d30b 6d656d20 0x776f6c20
0017d30f 2079726f node+0x1c76d20
0017d313 69746f6e 0x2079726f
0017d317 61636966 0x69746f6e
0017d31b 6e6f6974 0x61636966
0017d31f 20434720 node+0x2d16974
0017d323 6f206e69 0x20434720
0017d327 7320646c node+0x3826e69
0017d32b 65636170 0x7320646c
0017d32f 71657220 0x65636170
0017d333 74736575 0x71657220
0017d337 5b0a6465 0x74736575
0017d33b 36353032 0x5b0a6465
0017d33f 4631303a 0x36353032
0017d343 46454239 0x4631303a
0017d347 32205d38 0x46454239
0017d34b 33373331 0x32205d38
0017d34f 38393335 0x33373331
0017d353 3a736d20 0x38393335
0017d357 72614d20 0x3a736d20
0017d377 2e323128 bcryptprimitives!AesCbcEncrypt+0x1a5
0017d37f 38202c42 0x2e323128
0017d383 2f20352e 0x38202c42
0017d387 302e3020 0x2f20352e
0017d38b 20736d20 0x302e3020
0017d38f 76612820 0x20736d20
0017d393 67617265 0x76612820
0017d397 756d2065 0x67617265
0017d39b 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLN+0x3755
0017d39f 3030302e 0x31203d20
0017d3a3 7563202c 0x3030302e
0017d3bf 79726f6d shell32!CListViewHost::SetIDList+0x46
0017d3cb 6f697461 0x79726f6d
0017d3cf 4347206e node+0x3cb7461
0017d3d3 206e6920 0x4347206e
0017d3d7 20646c6f 0x206e6920
0017d3db 63617073 0x20646c6f
0017d3df 65722065 0x63617073
0017d3e3 73657571 0x65722065
0017d3e7 0a646574 0x73657571
0017d3eb 00000000 0xa646574

Top 15: total counts = 1

004ecabb 76612820 0x20736d20
004ecc67 20646c6f urlmon!CIEBrowserModeFilter::CXMLParser::processAttributes+0x213
004ecc6f 65722065 0x20646c6f
004ecc73 73657571 0x65722065
004ecc77 0a646574 0x73657571
004ecc7b 00000000 0xa646574

Top 16: total counts = 1

72614d98 1044d904 0x844d906
72614d9c dfd9de04 2345PINYIN+0x44d904
72614da0 05c4f6e0 0xdfd9de04
72614da4 068b357b 0x5c4f6e0
72614da8 d90804d9 0x68b357b
72614dac d9de1004 0xd90804d9
72614db0 c4f6e0df 0xd9de1004
72614db4 b8077541 0xc4f6e0df
72614db8 ffffffff 0xb8077541
72614dbc 368b39eb 0xffffffff
72614dc0 d90e04d9 0x368b39eb
72614dc4 d9de1604 0xd90e04d9
72614dc8 c4f6e0df 0xd9de1604
72614dcc 8b0c7b05 0xc4f6e0df
72614dd0 5b8b107f 0x8b0c7b05
72614dd4 7cfb3b10 0x5b8b107f
72614dd8 33057e0f 0x7cfb3b10
72614ddc 17eb40c0 0x33057e0f
72614de0 3b10458b 0x17eb40c0
72614de4 057d0845 0x3b10458b
72614de8 ebffc883 0x57d0845
72614dec 3bc9330a 0xebffc883
72614df0 9f0f0845 0x3bc9330a
72614df4 5ec18bc1 0x9f0f0845
72614df8 c25d5b5f 0x5ec18bc1
72614dfc cccc000c 0xc25d5b5f
72614e00 8bcccccc 0xcccc000c
72614e04 ec8b55ff 0x8bcccccc
72614e08 8b0c558b 0xec8b55ff
72614e0c 418b084d 0x8b0c558b
72614e10 8b565308 0x418b084d
72614e14 5e8b1075 0x8b565308
72614e18 7a8b5714 0x5e8b1075
72614e1c f844d914 0x7a8b5714
72614e20 d844d904 0xf844d914
72614e24 dfd9de04 0xd844d904
72614e28 41c4f6e0 0xdfd9de04
72614e2c ffb80775 0x41c4f6e0
72614e30 ebffffff 0xffb80775
72614e34 08418b5d 0xebffffff
72614e38 04f844d9 0x8418b5d
72614e3c 04d844d9 0x4f844d9
72614e40 e0dfd9de 0x4d844d9
72614e44 7a05c4f6 0xe0dfd9de
72614e48 40c03305 0x7a05c4f6
72614e4c 418b44eb 0x40c03305
72614e50 10528b08 0x418b44eb
72614e54 04d044d9 0x10528b08
72614e58 d910768b 0x4d044d9
72614e5c de04f044 0xd910768b
72614e60 f6e0dfd9 0xde04f044
72614e64 c67441c4 0xf6e0dfd9
72614e68 d908498b 0xc67441c4
72614e6c d904d144 0xd908498b
72614e70 de04f144 0xd904d144
72614e74 f6e0dfd9 0xde04f144
72614e78 cd7b05c4 0xf6e0dfd9
72614e7c 057dd63b 0xcd7b05c4
72614e80 ebffc883 0x57dd63b
72614e84 3bc27f0d 0xebffc883
72614e88 33f57cfb 0x3bc27f0d
72614e8c 0ffb3bc0 0x33f57cfb
72614e90 5e5fc09f 0xffb3bc0
72614e94 0cc25d5b 0x5e5fc09f
72614e98 cccccc00 0xcc25d5b
72614e9c ff8bcccc 0xcccccc00
72614ea0 51ec8b55 0xff8bcccc
72614ea4 5608458b 0x51ec8b55
72614ea8 f883f18b 0x5608458b
72614eac d90875ff 0xf883f18b
72614eb0 593c3805 0xd90875ff
72614eb4 8b10eb72 0x593c3805
72614eb8 c06b444e 0x8b10eb72
72614ebc 01448b24 0xc06b444e
72614ec0 084e8b10 0x1448b24
72614ec4 8bc104d9 0x84e8b10
72614ec8 5dd95846 0x8bc104d9
72614ecc fff88308 0x5dd95846
72614ed0 8b535f74 0xfff88308
72614ed4 8b57085e 0x8b535f74
72614ed8 c06b444e 0x8b57085e
72614edc 083c8d24 0xc06b444e
72614ee0 d914478b 0x83c8d24
72614ee4 5dd9c304 0xd914478b
72614ee8 0845d9fc 0x5dd9c304
72614eec defc45d9 0x845d9fc
72614ef0 f6e0dfd9 0xdefc45d9
72614ef4 2f7a05c4 0xf6e0dfd9
72614ef8 d9fc45d9 0x2f7a05c4
72614efc d9de0446 0xd9fc45d9
72614f00 c4f6e0df 0xd9de0446
72614f04 d9207a05 0xc4f6e0df
72614f08 51510446 0xd9207a05
72614f0c 04245cd9 0x51510446
72614f10 45d9ce8b 0x4245cd9
72614f14 241cd9fc 0x45d9ce8b
72614f18 ffe95fe8 0x241cd9fc
72614f1c 75c085ff 0xffe95fe8
72614f20 fc45d906 shell32!__dyn_tls_init_callback  (shell32+0x5085ff)
72614f24 8b085dd9 0xfc45d906
72614f28 f8830447 0x8b085dd9
72614f2c 5fa875ff 0xf8830447
72614f30 3805d95b 0x5fa875ff
72614f34 d872593c 0x3805d95b
72614f38 e0df085d 0xd872593c
72614f3c 7b44c4f6 0xe0df085d
72614f40 0845d90b 0x7b44c4f6
72614f44 5ed9c033 0x845d90b
72614f48 02eb4004 0x5ed9c033
72614f4c c95ec033 0x2eb4004
72614f50 cc0004c2 0xc95ec033
72614f54 cccccccc 0xcc0004c2
72614f58 8b55ff8b 0xcccccccc
72614f5c f63356ec 0x8b55ff8b
72614f60 00fcb121 0xf63356ec
72614f64 c0330000 0xfcb121
72614f68 40798b57 0xc0330000
72614f6c 7df73b40 0x40798b57
72614f70 6bd68b22 0x7df73b40
72614f74 510314d2 node+0x40b8b22
72614f78 107a8330 0x510314d2
72614f7c 830c7500 0x107a8330
72614f80 74000c7a 0x830c7500
72614f84 fc81891a ncrypt!_imp__LoadStringW  (ncrypt+0xc7a)
72614f88 8b000000 0xfc81891a
72614f8c fe830472 0x8b000000
72614f90 8bda75ff 0xfe830472
72614f94 0983084d 0x8bda75ff
72614f98 5d5e5fff 0x983084d
72614f9c 8b0004c2 0x5d5e5fff
72614fa0 30890845 0x8b0004c2
72614fa4 f1ebc033 0x30890845
72614fa8 cccccccc 0xf1ebc033
72614fac 55ff8bcc 0xcccccccc
72614fb0 5151ec8b 0x55ff8bcc
72614fb4 8bd98b53 0x5151ec8b
72614fb8 8b560843 0x8bd98b53
72614fbc 048d0875 0x8b560843
72614fc0 1c4b8df0 0x48d0875
72614fc4 e290e850 0x1c4b8df0
72614fc8 c085ffff 0xe290e850
72614fcc c0330774 0xc085ffff
72614fd0 00000000 0xc0330774

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040c930 5c06dc08 node+0x2a2f20b
0040cc2f 736d2033 node+0xb2dc08
0040cc33 614d203a winsta!`string'+0x17
0040cc37 732d6b72 0x614d203a
0040cc3b 70656577 0x732d6b72
0040cc3f 2e303120 0x70656577
0040cc43 31282033 0x2e303120
0040cc47 29332e32 0x31282033
0040cc4b 203e2d20 0x29332e32
0040cc4f 322e3031 0x203e2d20
0040cc53 32312820 0x322e3031
0040cc57 2029332e 0x32312820
0040cc5b 202c424d 0x2029332e
0040cc5f 382e3231 0x202c424d
0040cc63 30202f20 0x382e3231
0040cc67 6d20302e 0x30202f20
0040cc6b 28202073 0x6d20302e
0040cc6f 72657661 0x28202073
0040cc73 20656761 0x72657661
0040cc77 3d20756d 0x20656761
0040cc7b 392e3020 0x3d20756d
0040cc7f 202c3939 0x392e3020
0040cc83 72727563 0x202c3939
0040cc87 20746e65 0x72727563
0040cc8b 3d20756d 0x20746e65
0040cc8f 302e3020 0x3d20756d
0040cc93 20293330 0x302e3020
0040cc97 20776f6c 0x20293330
0040cc9b 6f6d656d 0x20776f6c
0040cc9f 6e207972 0x6f6d656d
0040cca3 6669746f 0x6e207972
0040cca7 74616369 0x6669746f
0040ccab 206e6f69 0x74616369
0040ccaf 69204347 0x206e6f69
0040ccb3 6c6f206e 0x69204347
0040ccb7 70732064 0x6c6f206e
0040ccbb 20656361 0x70732064
0040ccbf 75716572 0x20656361
0040ccc3 65747365 kernel32!`string'+0x12
0040ccc7 345b0a64 0x65747365
0040cccb 3a343632 0x345b0a64
0040cccf 36463130 0x3a343632
0040ccd3 30434544 0x36463130
0040ccd7 3532205d 0x30434544
0040ccdb 37323236 0x3532205d
0040ccdf 6d203235 0x37323236
0040cce3 4d203a73 0x6d203235
0040cce7 2d6b7261 0x4d203a73
0040cceb 65657773 0x2d6b7261
0040ccef 30312070 0x65657773
0040ccf3 2820372e 0x30312070
0040ccf7 332e3231 0x2820372e
0040ccfb 3e2d2029 0x332e3231
0040ccff 2e303120 0x3e2d2029
0040cd03 31282032 0x2e303120
0040cd07 29332e32 0x31282032
0040cd0b 2c424d20 0x29332e32
0040cd0f 2e313120 0x2c424d20
0040cd13 202f2035 0x2e313120
0040cd17 20302e30 0x202f2035
0040cd1b 2020736d 0x20302e30
0040cd1f 65766128 0x2020736d
0040cd23 65676172 0x65766128
0040cd27 20756d20 0x65676172
0040cd2b 2e31203d 0x20756d20
0040cd2f 2c303030 0x2e31203d
0040cd33 72756320 0x2c303030
0040cd37 746e6572 0x72756320
0040cd3b 20756d20 0x746e6572
0040cd3f 2e31203d 0x20756d20
0040cd43 29303030 0x2e31203d
0040cd47 776f6c20 0x29303030
0040cd4b 6d656d20 ntdll!TppWorkerpInnerExceptionFilter+0x52
0040cd5b 6e6f6974 0x6d656d20
0040cd5f 20434720 0x6e6f6974
0040cd63 6f206e69 0x20434720
0040cd67 7320646c 0x6f206e69
0040cd6b 65636170 0x7320646c
0040cd6f 71657220 0x65636170
0040cd73 74736575 0x71657220
0040cd77 5b0a6465 0x74736575
0040cd7b 34363234 0x5b0a6465
0040cd7f 4631303a 0x34363234
0040cd83 43454436 0x4631303a
0040cd87 32205d30 0x43454436
0040cd8b 32323635 0x32205d30
0040cd8f 20393637 0x32323635
0040cd93 203a736d 0x20393637
0040cd97 6b72614d 0x203a736d
0040cd9b 6577732d 0x6b72614d
0040cd9f 31207065 0x6577732d
0040cda3 20322e30 0x31207065
0040cda7 2e323128 0x20322e30
0040cdab 2d202933 0x2e323128
0040cdaf 3031203e 0x2d202933
0040cdb3 2820322e 0x3031203e
0040cdb7 332e3231 0x2820322e
0040cdbb 424d2029 0x332e3231
0040cdbf 3631202c 0x424d2029
0040cdc3 2f20362e 0x3631202c
0040cdc7 302e3020 0x2f20362e
0040cdcb 20736d20 0x302e3020
0040cdcf 76612820 0x20736d20
0040cdd3 67617265 shell32!__dyn_tls_init_callback  (shell32+0xaf2820)
0040cdd7 756d2065 0x67617265
0040cddb 30203d20 kernel32!_imp__DebugBreak  (kernel32+0x2065)
0040cddf 3939392e 0x30203d20
0040cde3 7563202c 0x3939392e
0040ce17 20646c6f msvcrt!_strtod_l+0x9f
0040ce27 0a646574 0x20646c6f
0040ce2b 00000000 0xa646574

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034cc88 5899dc08 node+0x2a2f20b
0034cf87 33303333 node+0xb2dc08
0034cf8b 3a736d20 0x33303333
0034cf8f 72614d20 0x3a736d20
0034cf93 77732d6b 0x72614d20
0034cf97 20706565 msvcrt!`string'+0xc277
0034cf9b 342e3031 0x20706565
0034cf9f 32312820 0x342e3031
0034cfa3 2029302e 0x32312820
0034cfa7 31203e2d 0x2029302e
0034cfab 20332e30 0x31203e2d
0034cfaf 2e323128 0x20332e30
0034cfb3 4d202930 0x2e323128
0034cfb7 37202c42 0x4d202930
0034cfbb 2f20312e 0x37202c42
0034cfbf 302e3020 0x2f20312e
0034cfc3 20736d20 0x302e3020
0034cfc7 76612820 0x20736d20
0034cfcb 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa02820)
0034cfcf 756d2065 0x67617265
0034cfef 6f6c2029 oleaut32!CTypeInfo2::TypeDescrFromTYPEDESC+0x1ca
0034cfff 63696669 0x6f6c2029
0034d003 6f697461 0x63696669
0034d007 4347206e 0x6f697461
0034d00b 206e6920 0x4347206e
0034d00f 20646c6f 0x206e6920
0034d013 63617073 0x20646c6f
0034d017 65722065 0x63617073
0034d01b 73657571 0x65722065
0034d01f 0a646574 0x73657571
0034d023 3136335b 0xa646574
0034d027 30303a32 0x3136335b
0034d02b 46444644 0x30303a32
0034d02f 205d3842 0x46444644
0034d033 38313237 0x205d3842
0034d037 37393233 0x38313237
0034d03b 3a736d20 0x37393233
0034d03f 72614d20 0x3a736d20
0034d043 77732d6b 0x72614d20
0034d047 20706565 msvcrt!`string'+0xc277
0034d04b 382e3031 0x20706565
0034d04f 32312820 0x382e3031
0034d053 2029302e 0x32312820
0034d057 31203e2d 0x2029302e
0034d05b 20342e30 0x31203e2d
0034d05f 2e323128 0x20342e30
0034d063 4d202930 0x2e323128
0034d067 39202c42 0x4d202930
0034d06b 2f20312e 0x39202c42
0034d06f 302e3020 0x2f20312e
0034d073 20736d20 0x302e3020
0034d077 76612820 0x20736d20
0034d07b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa02820)
0034d07f 756d2065 0x67617265
0034d09f 6f6c2029 oleaut32!CTypeInfo2::TypeDescrFromTYPEDESC+0x1ca
0034d0af 63696669 0x6f6c2029
0034d0b3 6f697461 0x63696669
0034d0b7 4347206e 0x6f697461
0034d0bb 206e6920 0x4347206e
0034d0bf 20646c6f 0x206e6920
0034d0c3 63617073 0x20646c6f
0034d0c7 65722065 0x63617073
0034d0cb 73657571 0x65722065
0034d0cf 0a646574 0x73657571
0034d0d3 3136335b 0xa646574
0034d0d7 30303a32 0x3136335b
0034d0db 46444644 0x30303a32
0034d0df 205d3842 0x46444644
0034d0e3 38313237 0x205d3842
0034d0e7 36303333 0x38313237
0034d0eb 3a736d20 0x36303333
0034d0ef 72614d20 0x3a736d20
0034d0f3 77732d6b 0x72614d20
0034d0f7 20706565 msvcrt!`string'+0xc277
0034d0fb 342e3031 0x20706565
0034d0ff 32312820 0x342e3031
0034d103 2029302e 0x32312820
0034d107 31203e2d 0x2029302e
0034d10b 20332e30 0x31203e2d
0034d10f 2e323128 0x20332e30
0034d113 4d202930 0x2e323128
0034d117 38202c42 0x4d202930
0034d11b 2f20352e 0x38202c42
0034d11f 302e3020 0x2f20352e
0034d123 20736d20 0x302e3020
0034d127 76612820 0x20736d20
0034d12b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa02820)
0034d12f 756d2065 0x67617265
0034d14f 6f6c2029 oleaut32!CTypeInfo2::TypeDescrFromTYPEDESC+0x1ca
0034d15f 63696669 0x6f6c2029
0034d163 6f697461 0x63696669
0034d167 4347206e 0x6f697461
0034d16b 206e6920 0x4347206e
0034d16f 20646c6f 0x206e6920
0034d173 63617073 0x20646c6f
0034d177 65722065 0x63617073
0034d17b 73657571 0x65722065
0034d17f 0a646574 0x73657571
0034d183 00000000 0xa646574

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0035c8b0 60dbdc08 node+0x2a2f20b
0035cbaf 736d2039 node+0xb2dc08
0035cbb3 614d203a 0x736d2039
0035cbb7 732d6b72 node+0x124203a
0035cbbb 70656577 0x732d6b72
0035cbbf 2e303120 0x70656577
0035cbc3 31282035 0x2e303120
0035cbc7 29352e32 0x31282035
0035cbcb 203e2d20 0x29352e32
0035cbcf 352e3031 0x203e2d20
0035cbd3 32312820 0x352e3031
0035cbd7 2029352e 0x32312820
0035cbdb 202c424d 0x2029352e
0035cbdf 392e3532 0x202c424d
0035cbe3 30202f20 0x392e3532
0035cbe7 6d20302e 0x30202f20
0035cbeb 28202073 0x6d20302e
0035cbef 72657661 0x28202073
0035cbf3 20656761 0x72657661
0035cbf7 3d20756d 0x20656761
0035cbfb 392e3020 0x3d20756d
0035cbff 202c3839 0x392e3020
0035cc03 72727563 0x202c3839
0035cc07 20746e65 0x72727563
0035cc0b 3d20756d 0x20746e65
0035cc0f 302e3020 0x3d20756d
0035cc13 20293130 0x302e3020
0035cc17 20776f6c 0x20293130
0035cc1b 6f6d656d 0x20776f6c
0035cc1f 6e207972 0x6f6d656d
0035cc23 6669746f 0x6e207972
0035cc27 74616369 0x6669746f
0035cc2b 206e6f69 0x74616369
0035cc2f 69204347 0x206e6f69
0035cc33 6c6f206e 0x69204347
0035cc37 70732064 d2d1!CCustomKernel::s_variableKernelShaderBlobs+0x87e
0035cc3b 20656361 0x70732064
0035cc3f 75716572 0x20656361
0035cc4b 3a323333 clbcatq!StgIO::MapFileToMem+0xf3
0035cc57 3539205d 0x3a323333
0035cc5b 39333733 0x3539205d
0035cc5f 20333732 0x39333733
0035cc63 203a736d 0x20333732
0035cc67 6b72614d 0x203a736d
0035cc6b 6577732d 0x6b72614d
0035cc6f 31207065 0x6577732d
0035cc73 20302e31 0x31207065
0035cc77 2e323128 0x20302e31
0035cc7b 2d202935 0x2e323128
0035cc7f 3031203e 0x2d202935
0035cc83 2820352e 0x3031203e
0035cc87 352e3231 0x2820352e
0035cc8b 424d2029 0x352e3231
0035cc8f 2e36202c 0x424d2029
0035cc93 202f2038 0x2e36202c
0035cc97 20302e30 0x202f2038
0035cc9b 2020736d 0x20302e30
0035cc9f 65766128 0x2020736d
0035cca3 65676172 0x65766128
0035cca7 20756d20 0x65676172
0035ccab 2e31203d 0x20756d20
0035ccaf 2c303030 0x2e31203d
0035ccb3 72756320 0x2c303030
0035ccb7 746e6572 0x72756320
0035ccbb 20756d20 0x746e6572
0035ccbf 2e31203d 0x20756d20
0035ccc3 29303030 0x2e31203d
0035ccc7 776f6c20 0x29303030
0035cccb 6d656d20 0x776f6c20
0035cccf 2079726f 0x6d656d20
0035ccd3 69746f6e 0x2079726f
0035ccd7 61636966 0x69746f6e
0035ccdb 6e6f6974 node+0x13a6966
0035ccdf 20434720 0x6e6f6974
0035cce3 6f206e69 0x20434720
0035cce7 7320646c 0x6f206e69
0035cceb 65636170 0x7320646c
0035ccef 71657220 0x65636170
0035ccf3 74736575 0x71657220
0035ccf7 5b0a6465 0x74736575
0035ccfb 32333332 0x5b0a6465
0035ccff 3532303a 0x32333332
0035cd03 38364645 0x3532303a
0035cd07 39205d38 0x38364645
0035cd0b 33373335 0x39205d38
0035cd0f 32383239 0x33373335
0035cd13 3a736d20 0x32383239
0035cd17 72614d20 0x3a736d20
0035cd1b 77732d6b 0x72614d20
0035cd1f 20706565 0x77732d6b
0035cd23 352e3031 0x20706565
0035cd27 32312820 0x352e3031
0035cd2b 2029352e 0x32312820
0035cd2f 31203e2d 0x2029352e
0035cd33 20352e30 0x31203e2d
0035cd37 2e323128 0x20352e30
0035cd3b 4d202935 0x2e323128
0035cd3f 39202c42 0x4d202935
0035cd43 2f20332e 0x39202c42
0035cd47 302e3020 0x2f20332e
0035cd4b 20736d20 0x302e3020
0035cd4f 76612820 0x20736d20
0035cd53 67617265 urlmon!bcrypt_NULL_THUNK_DATA_DLA  (urlmon+0x112820)
0035cd57 756d2065 0x67617265
0035cd5b 30203d20 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xe2065)
0035cd5f 3939392e 0x30203d20
0035cd63 7563202c 0x3939392e
0035cd7f 79726f6d rpcrt4!RpcBindingSetAuthInfoExW+0x1bc
0035cd9f 65722065 0x79726f6d
0035cda3 73657571 0x65722065
0035cda7 0a646574 0x73657571
0035cdab 00000000 0xa646574

Top 20: total counts = 1

ChildEBP RetAddr  
04b1f2c4 04b1f3a8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
04b1f2d8 04b1f2e8 0x4b1f3a8
04b1f2dc 00000000 0x4b1f2e8

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fce78 5a17dc08 node+0x2a2f20b
004fd177 3a736d20 node+0xb2dc08
004fd17b 72614d20 0x3a736d20
004fd17f 77732d6b 0x72614d20
004fd183 20706565 0x77732d6b
004fd187 322e3031 0x20706565
004fd18b 32312820 0x322e3031
004fd18f 2029302e 0x32312820
004fd193 31203e2d 0x2029302e
004fd197 20322e30 0x31203e2d
004fd19b 2e323128 0x20322e30
004fd19f 4d202930 0x2e323128
004fd1a3 32202c42 0x4d202930
004fd1a7 20312e36 0x32202c42
004fd1ab 2e30202f 0x20312e36
004fd1af 736d2030 0x2e30202f
004fd1b3 61282020 0x736d2030
004fd1b7 61726576 0x61282020
004fd1bb 6d206567 0x61726576
004fd1bf 203d2075 0x6d206567
004fd1c3 39392e30 0x203d2075
004fd1c7 63202c38 0x39392e30
004fd1cb 65727275 0x63202c38
004fd1cf 6d20746e 0x65727275
004fd1d3 203d2075 0x6d20746e
004fd1d7 30302e30 0x203d2075
004fd1db 6c202931 0x30302e30
004fd1df 6d20776f 0x6c202931
004fd1e3 726f6d65 0x6d20776f
004fd1e7 6f6e2079 0x726f6d65
004fd1eb 69666974 0x6f6e2079
004fd1ef 69746163 0x69666974
004fd1f3 47206e6f 0x69746163
004fd1f7 6e692043 0x47206e6f
004fded7 00000000 dbghelp!PDBCommon::OpenValidate5+0x109

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0456f964 0fb88aa4 node+0x102e006
0456f968 174ddd34 0xfb88aa4
0456f96c 58882550 0x174ddd34
0456f970 0fc208d8 node+0x1002550
0456f974 174b4f20 0xfc208d8
0456f978 00000000 0x174b4f20

Top 23: total counts = 1

0040d0fb 76612820 0x20736d20
0040d0ff 67617265 iertutil!`string'+0x60
0040d103 756d2065 0x67617265
0040d107 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x412065)
0040d10b 3739392e 0x30203d20
0040d10f 7563202c 0x3739392e
0040d127 656d2077 shell32!COpenSearchLocationCreator::_ParseTemplate+0x149
0040d133 63696669 0x656d2077
0040d137 6f697461 0x63696669
0040d13b 4347206e 0x6f697461
0040d13f 206e6920 0x4347206e
0040d143 20646c6f 0x206e6920
0040d147 63617073 0x20646c6f
0040d14b 65722065 0x63617073
0040d14f 73657571 0x65722065
0040d153 0a646574 0x73657571
0040d157 3638325b 0xa646574
0040d15b 30303a38 0x3638325b
0040d15f 36413236 0x30303a38
0040d163 205d3044 0x36413236
0040d167 32323836 0x205d3044
0040d16b 30313932 0x32323836
0040d16f 736d2039 0x30313932
0040d173 614d203a 0x736d2039
0040d177 732d6b72 0x614d203a
0040d17b 70656577 0x732d6b72
0040d17f 2e303120 0x70656577
0040d183 31282039 0x2e303120
0040d187 29332e32 0x31282039
0040d18b 203e2d20 0x29332e32
0040d18f 342e3031 0x203e2d20
0040d193 32312820 0x342e3031
0040d197 2029332e 0x32312820
0040d19b 202c424d 0x2029332e
0040d19f 392e3035 0x202c424d
0040d1a3 30202f20 0x392e3035
0040d1a7 6d20302e 0x30202f20
0040d1ab 28202073 node+0x30d302e
0040d1af 72657661 0x28202073
0040d1b3 20656761 0x72657661
0040d1b7 3d20756d 0x20656761
0040d1bb 392e3020 0x3d20756d
0040d1bf 202c3939 0x392e3020
0040d1c3 72727563 0x202c3939
0040d1c7 20746e65 0x72727563
0040d1cb 3d20756d 0x20746e65
0040d1cf 392e3020 0x3d20756d
0040d1d3 20293939 0x392e3020
0040d1d7 20776f6c 0x20293939
0040d1db 6f6d656d 0x20776f6c
0040d1df 6e207972 0x6f6d656d
0040d1e3 6669746f node+0x40d7972
0040d1e7 74616369 0x6669746f
0040d1eb 206e6f69 hid!HidP_XlateKbdPadCodesSubTable+0x19
0040d1ef 69204347 0x206e6f69
0040d1f3 6c6f206e 0x69204347
0040d1f7 70732064 node+0x25c206e
0040d1ff 75716572 oleacc!ReadProcessMemoryHWND+0x53
0040d213 30443641 shell32!__dyn_tls_init_callback  (shell32+0x456572)
0040d217 3836205d 0x30443641
0040d21b 39323232 0x3836205d
0040d21f 20303231 0x39323232
0040d223 203a736d 0x20303231
0040d227 6b72614d 0x203a736d
0040d22b 6577732d node+0x15f614d
0040d22f 31207065 0x6577732d
0040d233 20342e30 0x31207065
0040d237 2e323128 0x20342e30
0040d23b 2d202933 0x2e323128
0040d23f 3031203e 0x2d202933
0040d243 2820332e 0x3031203e
0040d247 332e3231 0x2820332e
0040d24b 424d2029 0x332e3231
0040d24f 3131202c 0x424d2029
0040d253 2f20332e 0x3131202c
0040d257 302e3020 0x2f20332e
0040d25b 20736d20 0x302e3020
0040d25f 76612820 0x20736d20
0040d263 67617265 iertutil!`string'+0x60
0040d267 756d2065 0x67617265
0040d26b 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x412065)
0040d26f 3839392e 0x30203d20
0040d273 7563202c 0x3839392e
0040d28b 656d2077 shell32!COpenSearchLocationCreator::_ParseTemplate+0x149
0040d297 63696669 0x656d2077
0040d29b 6f697461 0x63696669
0040d29f 4347206e 0x6f697461
0040d2a3 206e6920 0x4347206e
0040d2a7 20646c6f 0x206e6920
0040d2ab 63617073 0x20646c6f
0040d2af 65722065 0x63617073
0040d2b3 73657571 0x65722065
0040d2b7 0a646574 0x73657571
0040d2bb 00000000 0xa646574

Top 24: total counts = 1

75632040 10468904 0x4e890000
75632044 c6145689 SogouPY+0x468904
75632048 ff010846 0xc6145689
7563204c 15fff475 0xff010846
75632050 7571c188 0x15fff475
75632054 5e5fc78b iertutil!IsStringProperty+0xc9f8
7571c188 0020cf64 0x5e5fc78b
7571c18c 0020cf7c 0x20cf64
7571c190 0020cf94 0x20cf7c
7571c194 0020cfaa 0x20cf94
7571c198 0020cfbe 0x20cfaa
7571c19c 0020cfcc 0x20cfbe
7571c1a0 0020cfda 0x20cfcc
7571c1a4 0020cfec 0x20cfda
7571c1a8 0020cffe 0x20cfec
7571c1ac 0020d00e 0x20cffe
7571c1b0 0020d022 0x20d00e
7571c1b4 0020d032 0x20d022
7571c1b8 0020d03e 0x20d032
7571c1bc 0020d05a 0x20d03e
7571c1c0 0020d082 0x20d05a
7571c1c4 0020d09a 0x20d082
7571c1c8 0020d0a4 0x20d09a
7571c1cc 0020d0b0 0x20d0a4
7571c1d0 0020d0c2 0x20d0b0
7571c1d4 0020d0ce 0x20d0c2
7571c1d8 0020d0e4 0x20d0ce
7571c1dc 0020d0f4 0x20d0e4
7571c1e0 0020d106 0x20d0f4
7571c1e4 0020d120 0x20d106
7571c1e8 0020d12c 0x20d120
7571c1ec 0020d13a 0x20d12c
7571c1f0 0020d146 0x20d13a
7571c1f4 0020d152 0x20d146
7571c1f8 0020d160 0x20d152
7571c1fc 0020d16e 0x20d160
7571c200 0020d17c 0x20d16e
7571c204 0020d190 0x20d17c
7571c208 0020d1a6 0x20d190
7571c20c 0020d1c6 0x20d1a6
7571c210 0020d1e2 0x20d1c6
7571c214 0020d1f2 0x20d1e2
7571c218 0020d216 0x20d1f2
7571c21c 0020d226 0x20d216
7571c220 0020d234 0x20d226
7571c224 0020d24a 0x20d234
7571c228 0020d25c 0x20d24a
7571c22c 0020d26c 0x20d25c
7571c230 0020d282 0x20d26c
7571c234 0020d296 0x20d282
7571c238 0020d2a6 0x20d296
7571c23c 0020d2b4 0x20d2a6
7571c240 0020d2c6 0x20d2b4
7571c244 0020d2d2 0x20d2c6
7571c248 0020d2e8 0x20d2d2
7571c24c 0020d2fa 0x20d2e8
7571c250 0020d310 0x20d2fa
7571c254 0020d32a 0x20d310
7571c258 0020d332 0x20d32a
7571c25c 0020d34e 0x20d332
7571c260 0020d36c 0x20d34e
7571c264 0020d380 0x20d36c
7571c268 0020d39a 0x20d380
7571c26c 0020d3aa 0x20d39a
7571c270 0020d3be 0x20d3aa
7571c274 0020d3d0 0x20d3be
7571c278 0020d3ee 0x20d3d0
7571c27c 0020d3fe 0x20d3ee
7571c280 0020d414 0x20d3fe
7571c284 0020d420 0x20d414
7571c288 0020d43c 0x20d420
7571c28c 0020d44e 0x20d43c
7571c290 0020d45e 0x20d44e
7571c294 0020d47c 0x20d45e
7571c298 0020d490 0x20d47c
7571c29c 0020d4aa 0x20d490
7571c2a0 0020d4c4 0x20d4aa
7571c2a4 0020d4dc 0x20d4c4
7571c2a8 0020d4f4 0x20d4dc
7571c2ac 0020d510 0x20d4f4
7571c2b0 0020d51e 0x20d510
7571c2b4 0020d532 0x20d51e
7571c2b8 0020d540 0x20d532
7571c2bc 0020d550 0x20d540
7571c2c0 0020d560 0x20d550
7571c2c4 0020d570 0x20d560
7571c2c8 0020d58c 0x20d570
7571c2cc 0020d5aa 0x20d58c
7571c2d0 0020d5c2 0x20d5aa
7571c2d4 0020d5dc 0x20d5c2
7571c2d8 0020d5f8 0x20d5dc
7571c2dc 0020d60a 0x20d5f8
7571c2e0 0020d61e 0x20d60a
7571c2e4 0020d638 0x20d61e
7571c2e8 0020d648 0x20d638
7571c2ec 0020d658 0x20d648
7571c2f0 0020d668 0x20d658
7571c2f4 0020d674 0x20d668
7571c2f8 0020d686 0x20d674
7571c2fc 0020d698 0x20d686
7571c300 0020d6b4 0x20d698
7571c304 0020d6c6 0x20d6b4
7571c308 0020d6d8 0x20d6c6
7571c30c 00000000 0x20d6d8

Top 25: total counts = 1

ChildEBP RetAddr  
043cf4e4 043cf5c8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
043cf4f8 043cf508 0x43cf5c8
043cf4fc c8059016 0x43cf508
043cf508 00000000 0xc8059016

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002abb50 6895dc08 node+0x2a2f20b
002abe4f 322e3120 node+0xb2dc08
002abe53 30202f20 0x322e3120
002abe57 6d20302e 0x30202f20
002abe9b 3231325b apphelp!SdbpVerQueryValue+0xce
002abeaf 31313932 0x3231325b
002abeb3 3a736d20 0x31313932
002abeb7 61635320 0x3a736d20
002abebb 676e6576 0x61635320
002abebf 31312065 0x676e6576
002abec3 2820332e 0x31312065
002abec7 302e3231 0x2820332e
002abecb 3e2d2029 0x302e3231
002abecf 2e303120 0x3e2d2029
002abed3 31282033 0x2e303120
002abed7 29302e32 0x31282033
002abedb 2c424d20 0x29302e32
002abedf 342e3020 0x2c424d20
002abee3 30202f20 0x342e3020
002abee7 6d20302e 0x30202f20
002abf2b 3231325b apphelp!SdbpVerQueryValue+0xce
002abf3f 37343336 0x3231325b
002abf43 3a736d20 0x37343336
002abf47 61635320 0x3a736d20
002abf4b 676e6576 0x61635320
002abf4f 31312065 0x676e6576
002abf53 2820332e 0x31312065
002abf57 302e3231 0x2820332e
002abf5b 3e2d2029 0x302e3231
002abf5f 2e303120 0x3e2d2029
002abf63 31282033 0x2e303120
002abf67 29302e32 0x31282033
002abf6b 2c424d20 0x29302e32
002abf6f 352e3020 0x2c424d20
002abf73 30202f20 0x352e3020
002abf77 6d20302e 0x30202f20
002abfbb 3231325b apphelp!SdbpVerQueryValue+0xce
002abfcf 32383739 0x3231325b
002abfd3 3a736d20 0x32383739
002abfd7 61635320 0x3a736d20
002abfdb 676e6576 0x61635320
002abfdf 31312065 0x676e6576
002abfe3 2820332e 0x31312065
002abfe7 302e3231 0x2820332e
002abfeb 3e2d2029 0x302e3231
002abfef 2e303120 0x3e2d2029
002abff3 31282033 0x2e303120
002abff7 29302e32 0x31282033
002abffb 2c424d20 0x29302e32
002abfff 342e3020 0x2c424d20
002ac003 30202f20 0x342e3020
002ac007 6d20302e 0x30202f20
002ac04b 00000000 apphelp!SdbpVerQueryValue+0xce

Top 27: total counts = 1

0019ce33 6b72614d 0x203a736d
0019ce37 6577732d ichat_bundle+0x22614d
0019ce3b 31207065 0x6577732d
0019ce3f 20342e30 0x31207065
0019ce43 2e323128 0x20342e30
0019ce47 2d202938 0x2e323128
0019ce4b 3031203e 0x2d202938
0019ce4f 2820342e 0x3031203e
0019ce53 382e3231 0x2820342e
0019ce57 424d2029 0x382e3231
0019ce5b 3232202c 0x424d2029
0019ce5f 2f20372e 0x3232202c
0019ce63 302e3020 0x2f20372e
0019ce67 20736d20 0x302e3020
0019ce6b 76612820 0x20736d20
0019ce6f 67617265 msctf!CRange::_UninitClass+0x10
0019ce73 756d2065 0x67617265
0019d293 00000000 shell32!CFilePropSheetPage::_SetAttributePromptText+0x5e

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fcde0 0fd2dc08 node+0x2a2f20b
004fd0df 3a736d20 node+0xb2dc08
004fd0e3 72614d20 0x3a736d20
004fd0e7 77732d6b 0x72614d20
004fd0eb 20706565 0x77732d6b
004fd0ef 332e3031 0x20706565
004fd0f3 32312820 0x332e3031
004fd0f7 2029332e 0x32312820
004fd0fb 31203e2d 0x2029332e
004fd0ff 20322e30 0x31203e2d
004fd103 2e323128 0x20322e30
004fd107 4d202930 0x2e323128
004fd10b 31202c42 0x4d202930
004fd10f 20332e35 0x31202c42
004fd113 2e30202f 0x20332e35
004fd117 736d2030 0x2e30202f
004fd11b 61282020 0x736d2030
004fd11f 61726576 0x61282020
004fd123 6d206567 0x61726576
004fd127 203d2075 0x6d206567
004fd12b 39392e30 0x203d2075
004fd12f 63202c38 0x39392e30
004fd133 65727275 0x63202c38
004fd137 6d20746e 0x65727275
004fd13b 203d2075 0x6d20746e
004fd13f 30302e30 0x203d2075
004fd143 6c202932 0x30302e30
004fd147 6d20776f 0x6c202932
004fd14b 726f6d65 0x6d20776f
004fd197 732d6b72 dnsapi!DnsGetProxyInformation+0x164
004fd1af 332e3031 0x732d6b72
004fd1b3 32312820 0x332e3031
004fd1b7 2029302e 0x32312820
004fd1bb 202c424d 0x2029302e
004fd1bf 2e333831 0x202c424d
004fd1c3 202f2037 0x2e333831
004fd1c7 20302e30 0x202f2037
004fd1cb 2020736d 0x20302e30
004fd1cf 65766128 0x2020736d
004fd1d3 65676172 0x65766128
004fd1d7 20756d20 0x65676172
004fd1db 2e30203d 0x20756d20
004fd1df 2c373939 0x2e30203d
004fd1e3 72756320 0x2c373939
004fd1e7 746e6572 0x72756320
004fd1eb 20756d20 0x746e6572
004fd1ef 2e30203d 0x20756d20
004fd1f3 29373939 0x2e30203d
004fd1f7 776f6c20 0x29373939
004fd1fb 6d656d20 0x776f6c20
004fd1ff 2079726f 0x6d656d20
004fd203 69746f6e 0x2079726f
004fd207 61636966 0x69746f6e
004fd20b 6e6f6974 0x61636966
004fd20f 20434720 0x6e6f6974
004fd213 6f206e69 0x20434720
004fd217 7320646c 0x6f206e69
004fd21b 65636170 0x7320646c
004fd21f 71657220 0x65636170
004fd223 74736575 winhttp!WINHTTP_SESSION::OpenRequest+0x16
004fd23b 36333138 0x74736575
004fd23f 20303831 0x36333138
004fd243 203a736d 0x20303831
004fd247 6b72614d 0x203a736d
004fd24b 6577732d 0x6b72614d
004fd24f 31207065 0x6577732d
004fd253 20332e30 0x31207065
004fd257 2e323128 0x20332e30
004fd25b 2d202930 0x2e323128
004fd25f 3031203e 0x2d202930
004fd263 2820322e 0x3031203e
004fd267 332e3231 0x2820322e
004fd26b 424d2029 0x332e3231
004fd26f 3534202c 0x424d2029
004fd273 2f20322e 0x3534202c
004fd277 302e3020 0x2f20322e
004fd27b 20736d20 0x302e3020
004fd27f 76612820 0x20736d20
004fd283 67617265 crypt32!iCryptIdentifyProtection+0x34
004fd29b 756d2074 0x67617265
004fd29f 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x602074)
004fd2a3 3130302e 0x30203d20
004fd2a7 6f6c2029 0x3130302e
004fd2ab 656d2077 0x6f6c2029
004fd2af 79726f6d 0x656d2077
004fd2b3 746f6e20 0x79726f6d
004fd2b7 63696669 0x746f6e20
004fd2bb 6f697461 0x63696669
004fd2bf 4347206e 0x6f697461
004fd2c3 206e6920 0x4347206e
004fd2c7 20646c6f 0x206e6920
004fd2cb 63617073 0x20646c6f
004fd2cf 65722065 0x63617073
004fd2d3 73657571 0x65722065
004fd2d7 0a646574 rsaenh!GetRSAStringResource+0x4e
004fd2df 00000000 0xa646574