Analyzed 20 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009cec28 6657d1dd node+0x128dd80
009ced68 6766e32a node+0x128d1dd
009ced6c 009ced78 node+0x237e32a
009ced70 00054288 0x9ced78
009ced78 00000000 0x54288

Top 2: total counts = 1

ChildEBP RetAddr  
0598f138 6b1de87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0598f20c 6b2289d7 node+0x12ae87c
0598f22c 6b1f5caf node+0x12f89d7
0598f230 071f5550 node+0x12c5caf
0598f234 00170595 0x71f5550
0598f238 0598f2a8 0x170595
0598f23c 00000000 0x598f2a8

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ad93c 77ee7602 node+0xc9ff60
77e61665 b8900010 ntdll!RtlpWakeConditionVariable+0xd4
77e61675 00000000 0xb8900010

Top 4: total counts = 1

ChildEBP RetAddr  
0a41e078 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x50
0a41e0d8 06bbe343 ModeIdentify!TiXmlElement::Parse+0x277
0a41e114 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0a41e174 06bbe343 ModeIdentify!TiXmlElement::Parse+0x277
0a41e1b0 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0a41e210 06bbe343 ModeIdentify!TiXmlElement::Parse+0x277
0a41e24c 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0a41e2ac 06bbe343 ModeIdentify!TiXmlElement::Parse+0x277
0a41e2e8 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0a41e348 06bbe343 ModeIdentify!TiXmlElement::Parse+0x277
0a41e384 06bbd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0a41e3e4 06bbd34b ModeIdentify!TiXmlElement::Parse+0x277
0a41e414 06ba2287 ModeIdentify!TiXmlDocument::Parse+0x12b
0a41e4c8 06b95f65 ModeIdentify!LocalDataDaoXMLImpl::ReadLocalAppData+0x127
0a41e50c 06b9e3e4 ModeIdentify!GameModeIdentify::Init+0x75
0a41ea60 06b9dfe8 ModeIdentify!GameModeAndWebStateIdentifyImp::Init+0x154
0a41f188 06ba9307 ModeIdentify!GameModeAndWebStateIdentifyImp::IdentifyGameByPath+0x28
0a41f678 06ba9796 ModeIdentify!ProcessMgr::IsProcessModeNeedSaved+0x157
0a41f77c 06baa28d ModeIdentify!ProcessMgr::OnProcessCreateEvent+0x106
0a41fc00 755c62fa ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticWindowProc+0x16d
0a41fc2c 755c6d3a user32!InternalCallWinProc+0x23
0a41fca4 755c77c4 user32!UserCallWinProcCheckWow+0x109
0a41fd04 755c788a user32!DispatchMessageWorker+0x3bc
0a41fd14 06baa0cc user32!DispatchMessageW+0xf
0a41fd70 770c344d ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticThreadProc+0x12c
0a41fd7c 77bd9802 kernel32!BaseThreadInitThunk+0xe
0a41fdbc 77bd97d5 ntdll!__RtlUserThreadStart+0x70
0a41fdd4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 1

004fd18f 7320646c 0x6f206e69
004fd193 65636170 dhcpcsvc6!Dhcpv6RequestCachedParams+0x1c4c
004fd197 71657220 0x65636170
004fd19b 74736575 0x71657220
004fd19f 5b0a6465 0x74736575
004fd1a3 33383131 node+0x1cc6465
004fd1a7 32303a32 0x33383131
004fd1ab 34363539 0x32303a32
004fd1af 205d3030 0x34363539
004fd1b3 32323220 0x205d3030
004fd1b7 37363031 0x32323220
004fd1bb 3a736d20 0x37363031
004fd1bf 72614d20 0x3a736d20
004fd1d3 2029332e propsys!std::basic_string,std::allocator >::_Reallocate_grow_by<,unsigned int,unsigned short>+0x24
004fd1e7 35202c42 0x2029332e
004fd1eb 2f20372e 0x35202c42
004fd1ef 302e3020 0x2f20372e
004fd1f3 20736d20 0x302e3020
004fd1f7 76612820 0x20736d20
004fd1ff 756d2065 combase!CreateTlgAggregateSession+0x2
004fd20b 7563202c WinTypes!Windows::Foundation::Collections::Internal::Impl::Vector,Windows::Foundation::Collections::Internal::DefaultLifetimeTraits,Windows::Foundation::Collections::Internal::VectorOptions >::Vector,Windows::Foundation::Collections::Internal::DefaultLifetimeTraits,Windows::Foundation::Collections::Internal::VectorOptions >+0x17
004fd21b 3430302e imm32!CalcCharacterPositionAtoW+0x34
004fd223 656d2077 0x3430302e
004fd227 79726f6d 0x656d2077
004fd22b 746f6e20 0x79726f6d
004fd22f 63696669 secur32!_NULL_IMPORT_DESCRIPTOR+0xc80
004fd233 6f697461 0x63696669
004fd237 4347206e 0x6f697461
004fd23b 206e6920 0x4347206e
004fd23f 20646c6f 0x206e6920
004fd243 63617073 0x20646c6f
004fd247 65722065 0x63617073
004fd24b 73657571 0x65722065
004fd24f 0a646574 iertutil!SettingStore::s_rgValueTree+0x14969
004fd253 00000000 0xa646574

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0f26f218 00000000 node+0x128dd80

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0039f480 770e622d SogouPY+0x1a14c5
0039f5c8 00000000 user32!MonitorFromPoint+0x2c

Top 8: total counts = 1

ChildEBP RetAddr  
0733dde4 7be9e35b ModeIdentify!TiXmlBase::SkipWhiteSpace+0x10
0733de1c 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x17b
0733de7c 7be9e343 ModeIdentify!TiXmlElement::Parse+0x277
0733deb8 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0733df18 7be9e343 ModeIdentify!TiXmlElement::Parse+0x277
0733df54 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0733dfb4 7be9e343 ModeIdentify!TiXmlElement::Parse+0x277
0733dff0 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0733e050 7be9e343 ModeIdentify!TiXmlElement::Parse+0x277
0733e08c 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0733e0ec 7be9e343 ModeIdentify!TiXmlElement::Parse+0x277
0733e128 7be9d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
0733e188 7be9d34b ModeIdentify!TiXmlElement::Parse+0x277
0733e1b8 7be82287 ModeIdentify!TiXmlDocument::Parse+0x12b
0733e26c 7be75fa0 ModeIdentify!LocalDataDaoXMLImpl::ReadLocalAppData+0x127
0733e2b0 7be7e3e4 ModeIdentify!GameModeIdentify::Init+0xb0
0733e804 7be7dfe8 ModeIdentify!GameModeAndWebStateIdentifyImp::Init+0x154
0733ef2c 7be89307 ModeIdentify!GameModeAndWebStateIdentifyImp::IdentifyGameByPath+0x28
0733f41c 7be89796 ModeIdentify!ProcessMgr::IsProcessModeNeedSaved+0x157
0733f520 7be8a28d ModeIdentify!ProcessMgr::OnProcessCreateEvent+0x106
0733f9a4 76a33a0f ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticWindowProc+0x16d
0733f9d0 76a243a6 user32!_InternalCallWinProc+0x2b
0733fac8 76a22bb8 user32!UserCallWinProcCheckWow+0x4c6
0733fb44 76a22720 user32!DispatchMessageWorker+0x488
0733fb50 7be8a0cc user32!DispatchMessageW+0x10
0733fbac 76437ba9 ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticThreadProc+0x12c
0733fbbc 7771c36b kernel32!BaseThreadInitThunk+0x19
0733fc14 7771c2ef ntdll!__RtlUserThreadStart+0x2b
0733fc24 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 1

ChildEBP RetAddr  
0035f4b8 1074e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0035f590 107989d7 node+0x12ae87c
0035f624 1075f812 node+0x12f89d7
0035f690 107689e6 node+0x12bf812
0035f75c 1076875e node+0x12c89e6
0035f7b8 10740ec3 node+0x12c875e
0035f7f4 10740acb node+0x12a0ec3
0035f834 107523d2 node+0x12a0acb
0035f87c 107522e2 node+0x12b23d2
0035f8c0 0fb6bd42 node+0x12b22e2
0035f8e8 0fb6d47d node+0x6cbd42
0035f928 0faaed6c node+0x6cd47d
0035f984 0faaf379 node+0x60ed6c
0035f9a8 0faaea8a node+0x60f379
0035f9ac 1072a300 node+0x60ea8a
0035f9b0 00350000 node+0x128a300
0035f9b4 00000000 0x350000

Top 10: total counts = 1

ChildEBP RetAddr  
06c8fafc 777f2878 ntdll!RtlpLowFragHeapFree+0x31
06c8fb14 777bf81f ntdll!RtlFreeHeap+0x105
06c8fb3c 777cf6b2 ntdll!LdrpFreeTls+0x71
06c8fbd0 777cf4af ntdll!LdrShutdownThread+0x168
06c8fbe0 757d850c ntdll!RtlExitUserThread+0x2a
06c8fbf4 773405c8 KERNELBASE!FreeLibraryAndExitThread+0x5f
06c8fc04 063745e5 kernel32!FreeLibraryAndExitThreadStub+0x10
06c8fc18 063746c1 ModeIdentify!common_end_thread+0x56
06c8fc24 06374537 ModeIdentify!_endthreadex+0xd
06c8fc60 7734ef3c ModeIdentify!thread_start+0x5c
06c8fc6c 7780360c kernel32!BaseThreadInitThunk+0xe
06c8fcac 778035df ntdll!__RtlUserThreadStart+0x70
06c8fcc4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010ff0b8 103cd1dd node+0x128dd80
010ff1f8 114be32a node+0x128d1dd
010ff1fc 010ff208 node+0x237e32a
010ff200 001866f4 0x10ff208
010ff208 00000000 0x1866f4

Top 12: total counts = 1

00ffeb50 78f0af11 nativeutils!GetAllModeState+0x4b
00ffeb58 78f08ff0 ffi_bindings!ffi_call_win32+0x35
00ffeba0 78f0544a ffi_bindings!ffi_call+0xf0
00ffec84 3ebba108 ffi_bindings!FFI::FFI::FFICall+0x25a
WARNING: Frame IP not in any known module. Following frames may be wrong.
00ffec8c 78f06df9 0x3ebba108
00ffecf8 78f06d63 ffi_bindings!Napi::details::WrapCallback< >+0x59
00ffed04 213c76d5 ffi_bindings!Napi::details::CallbackData::Wrapper+0x13
00ffed18 00000000 0x213c76d5

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0021c890 63cedc08 node+0x2a2f20b
0021cb8f 3a736d20 node+0xb2dc08
0021cb93 72614d20 0x3a736d20
0021cb97 77732d6b 0x72614d20
0021cb9b 20706565 0x77732d6b
0021cb9f 332e3131 0x20706565
0021cba3 32312820 0x332e3131
0021cba7 2029382e 0x32312820
0021cbab 31203e2d 0x2029382e
0021cbaf 20382e30 0x31203e2d
0021cbb3 2e323128 0x20382e30
0021cbb7 4d202938 0x2e323128
0021cbbb 39202c42 0x4d202938
0021cbbf 2f20342e 0x39202c42
0021cbc3 302e3020 0x2f20342e
0021cbc7 20736d20 0x302e3020
0021cbcb 76612820 0x20736d20
0021cc67 4d202931 rpcrt4!LRPC_CASSOCIATION::AlpcConnect+0x3bd
0021cc7b 76612820 0x4d202931
0021cd17 4d202931 rpcrt4!LRPC_CASSOCIATION::AlpcConnect+0x3bd
0021cd2b 20736d20 0x4d202931
0021cd2f 76612820 0x20736d20
0021cdcb 00000000 rpcrt4!LRPC_CASSOCIATION::AlpcConnect+0x3bd

Top 14: total counts = 1

ChildEBP RetAddr  
06b4e018 794cca46 ModeIdentify!TiXmlBase::SkipWhiteSpace+0x10
06b4e038 794cd648 ModeIdentify!TiXmlAttribute::Parse+0x16
06b4e098 794ce343 ModeIdentify!TiXmlElement::Parse+0x1d8
06b4e0d4 794cd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
06b4e134 794ce343 ModeIdentify!TiXmlElement::Parse+0x277
06b4e170 794cd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
06b4e1d0 794ce343 ModeIdentify!TiXmlElement::Parse+0x277
06b4e20c 794cd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
06b4e26c 794ce343 ModeIdentify!TiXmlElement::Parse+0x277
06b4e2a8 794cd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
06b4e308 794ce343 ModeIdentify!TiXmlElement::Parse+0x277
06b4e344 794cd6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
06b4e3a4 794cd34b ModeIdentify!TiXmlElement::Parse+0x277
06b4e3d4 794b2287 ModeIdentify!TiXmlDocument::Parse+0x12b
06b4e488 794a5fa0 ModeIdentify!LocalDataDaoXMLImpl::ReadLocalAppData+0x127
06b4e4cc 794ae3e4 ModeIdentify!GameModeIdentify::Init+0xb0
06b4ea20 794adfe8 ModeIdentify!GameModeAndWebStateIdentifyImp::Init+0x154
06b4f148 794b9307 ModeIdentify!GameModeAndWebStateIdentifyImp::IdentifyGameByPath+0x28
06b4f638 794b9796 ModeIdentify!ProcessMgr::IsProcessModeNeedSaved+0x157
06b4f73c 794ba28d ModeIdentify!ProcessMgr::OnProcessCreateEvent+0x106
06b4fbc0 75c97dd3 ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticWindowProc+0x16d
06b4fbec 75c8644d user32!_InternalCallWinProc+0x2b
06b4fcf4 75c858da user32!UserCallWinProcCheckWow+0x49d
06b4fd68 75c85440 user32!DispatchMessageWorker+0x48a
06b4fd74 794ba0cc user32!DispatchMessageW+0x10
06b4fdd0 75425d49 ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticThreadProc+0x12c
06b4fde0 7705cf0b kernel32!BaseThreadInitThunk+0x19
06b4fe38 7705ce91 ntdll!__RtlUserThreadStart+0x2b
06b4fe48 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 15: total counts = 1

00cfe788 55ecaf11 nativeutils!GetAllModeState+0x4b
00cfe790 55ec8ff0 ffi_bindings!ffi_call_win32+0x35
00cfe7d8 55ec544a ffi_bindings!ffi_call+0xf0
00cfe8bc bf272e98 ffi_bindings!FFI::FFI::FFICall+0x25a
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe8c4 55ec6df9 0xbf272e98
00cfe930 55ec6d63 ffi_bindings!Napi::details::WrapCallback< >+0x59
00cfe93c 00000000 ffi_bindings!Napi::details::CallbackData::Wrapper+0x13

Top 16: total counts = 1

ChildEBP RetAddr  
03e8f718 10ece87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
03e8f7f8 10f189d7 node+0x12ae87c
03e8f818 0fc8284b node+0x12f89d7
03e8f81c 009bde27 node+0x6284b
03e8f820 10eddb5a 0x9bde27
03e8f824 0026f781 node+0x12bdb5a
03e8f828 0019fa57 0x26f781
03e8f82c 1757e998 0x19fa57
03e8f830 0dce43d8 0x1757e998
03e8f834 0dce43d8 0xdce43d8
03e8f838 03e8f8e4 0xdce43d8
03e8f83c 0fc827d8 0x3e8f8e4
03e8f8e4 11458dab node+0x627d8
03e8f8fc 101f0539 node+0x1838dab
03e8f918 101ed4a9 node+0x5d0539
03e8fa34 101e3632 node+0x5cd4a9
03e8fb34 101e33f1 node+0x5c3632
03e8fb38 00000000 node+0x5c33f1

Top 17: total counts = 1

003ae590 0f62af11 nativeutils!GetAllModeState+0x4b
003ae598 0f628ff0 ffi_bindings!ffi_call_win32+0x35
003ae5e0 0f62544a ffi_bindings!ffi_call+0xf0
003ae6c4 df624bfe ffi_bindings!FFI::FFI::FFICall+0x25a
WARNING: Frame IP not in any known module. Following frames may be wrong.
003ae6cc 0f626df9 0xdf624bfe
003ae738 0f626d63 ffi_bindings!Napi::details::WrapCallback< >+0x59
003ae744 05187c69 ffi_bindings!Napi::details::CallbackData::Wrapper+0x13
003ae758 00000000 0x5187c69

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007af0c8 1100d1dd node+0x128dd80
007af208 120fe32a node+0x128d1dd
007af20c 007af218 node+0x237e32a
007af210 00000000 0x7af218

Top 19: total counts = 1

ChildEBP RetAddr  
076bdbf0 7bc0d877 ModeIdentify!TiXmlParsingData::Stamp+0x60
076bdc4c 7bc0e343 ModeIdentify!TiXmlText::Parse+0x67
076bdc88 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bdce8 7bc0e343 ModeIdentify!TiXmlElement::Parse+0x277
076bdd24 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bdd84 7bc0e343 ModeIdentify!TiXmlElement::Parse+0x277
076bddc0 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bde20 7bc0e343 ModeIdentify!TiXmlElement::Parse+0x277
076bde5c 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bdebc 7bc0e343 ModeIdentify!TiXmlElement::Parse+0x277
076bdef8 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bdf58 7bc0e343 ModeIdentify!TiXmlElement::Parse+0x277
076bdf94 7bc0d6e7 ModeIdentify!TiXmlElement::ReadValue+0x163
076bdff4 7bc0d34b ModeIdentify!TiXmlElement::Parse+0x277
076be024 7bbf2287 ModeIdentify!TiXmlDocument::Parse+0x12b
076be0d8 7bbe5fa0 ModeIdentify!LocalDataDaoXMLImpl::ReadLocalAppData+0x127
076be11c 7bbee3e4 ModeIdentify!GameModeIdentify::Init+0xb0
076be670 7bbedfe8 ModeIdentify!GameModeAndWebStateIdentifyImp::Init+0x154
076bed98 7bbf9307 ModeIdentify!GameModeAndWebStateIdentifyImp::IdentifyGameByPath+0x28
076bf288 7bbf9796 ModeIdentify!ProcessMgr::IsProcessModeNeedSaved+0x157
076bf38c 7bbfa28d ModeIdentify!ProcessMgr::OnProcessCreateEvent+0x106
076bf810 75e33a0f ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticWindowProc+0x16d
076bf83c 75e243a6 user32!_InternalCallWinProc+0x2b
076bf934 75e22bb8 user32!UserCallWinProcCheckWow+0x4c6
076bf9b0 75e22720 user32!DispatchMessageWorker+0x488
076bf9bc 7bbfa0cc user32!DispatchMessageW+0x10
076bfa18 76037ba9 ModeIdentify!LdsEventNotify::CLdsEventNotifyHelper::_StaticThreadProc+0x12c
076bfa28 7776c36b kernel32!BaseThreadInitThunk+0x19
076bfa80 7776c2ef ntdll!__RtlUserThreadStart+0x2b
076bfa90 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00bac238 106ddc08 node+0x2a2f20b
00bac537 65747365 node+0xb2dc08
00bac53b 315b0a64 0x65747365
00bac53f 32313934 0x315b0a64
00bac543 3033303a 0x32313934
00bac547 34423537 0x3033303a
00bac54b 33205d38 0x34423537
00bac54f 38373633 0x33205d38
00bac553 34313133 0x38373633
00bac557 3a736d20 0x34313133
00bac55b 61635320 0x3a736d20
00bac55f 676e6576 0x61635320
00bac563 32312065 0x676e6576
00bac567 2820342e 0x32312065
00bac56b 362e3331 0x2820342e
00bac56f 3e2d2029 0x362e3331
00bac573 2e313120 0x3e2d2029
00bac577 31282035 0x2e313120
00bac57b 29362e33 0x31282035
00bac57f 2c424d20 0x29362e33
00bac583 312e3120 0x2c424d20
00bac587 30202f20 0x312e3120
00bac58b 6d20302e 0x30202f20
00bac58f 28202073 0x6d20302e
00bac593 72657661 0x28202073
00bac597 20656761 0x72657661
00bac59b 3d20756d 0x20656761
00bac59f 392e3020 0x3d20756d
00bac5a3 202c3939 0x392e3020
00bac6a3 77732d6b 0x202c3939
00bac6b3 2029362e shell32!wil::details::EnabledStateManager::SubscribeFeatureStateCacheToConfigurationChanges+0x1e
00bac6c3 4d202936 0x2029362e
00bac6c7 39202c42 0x4d202936
00bac6cb 2f20392e 0x39202c42
00bac6cf 302e3020 0x2f20392e
00bac6d3 20736d20 0x302e3020
00bac6d7 76612820 0x20736d20
00bac6db 67617265 ws2_32!GetAddrInfoW+0x10170
00bac6df 756d2065 0x67617265
00bac6e3 30203d20 winsta!_imp__CheckTokenMembership+0x1
00bac6e7 3939392e 0x30203d20
00bac6eb 7563202c 0x3939392e
00bac6ef 6e657272 0x7563202c
00bac6f3 756d2074 0x6e657272
00bac6f7 30203d20 winsta!api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
00bac6fb 3430302e 0x30203d20
00bac6ff 6f6c2029 0x3430302e
00bac703 656d2077 0x6f6c2029
00bac707 79726f6d 0x656d2077
00bac70b 746f6e20 0x79726f6d
00bac70f 63696669 wininet!WPP_da6caa0d439733861da0911a41cfb1c1_Traceguids+0x1369f0
00bac713 6f697461 0x63696669
00bac717 4347206e 0x6f697461
00bac71b 206e6920 0x4347206e
00bac71f 20646c6f 0x206e6920
00bac723 63617073 0x20646c6f
00bac727 65722065 0x63617073
00bac72b 73657571 0x65722065
00bac72f 0a646574 iertutil!`string'+0x21
00bac733 00000000 0xa646574