Analyzed 177 dump

Top 1: total counts = 30

ChildEBP RetAddr  
00b5e6e4 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 14

0a12fc7c 502eaeed rightsmanager!RM_AutorunScan+0x176
0a12fd78 7754ef1c ffi_bindings!ffi_call_win32+0x11
0a12fd84 77643648 kernel32!BaseThreadInitThunk+0xe
0a12fdc4 7764361b ntdll!__RtlUserThreadStart+0x70
0a12fddc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 10

05effbe4 673eaeed rightsmanager!RM_AutorunScan+0x176
05effce0 75c3fa29 ffi_bindings!ffi_call_win32+0x11
05effcf0 77da7bbe kernel32!BaseThreadInitThunk+0x19
05effd4c 77da7b8e ntdll!__RtlUserThreadStart+0x2f
05effd5c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 8

ChildEBP RetAddr  
0035eaec 633ee479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0035eb00 005fcff2 node+0x12ae479
0035eb04 00000000 0x5fcff2

Top 5: total counts = 7

ChildEBP RetAddr  
059ef220 0b3be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
059ef260 0b3c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
059ef4b0 0b3c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
059ffaf8 0b3be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
059ffb70 0b3f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
059ffd44 7791fcc9 rightsmanager!RM_AutorunScan+0x176
059ffd54 77dd82ae kernel32!BaseThreadInitThunk+0x19
059ffdb0 77dd827e ntdll!__RtlUserThreadStart+0x2f
059ffdc0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 6

0584fc5c 7984aeed rightsmanager!RM_AutorunScan+0x176
0584fd58 76175d49 ffi_bindings!ffi_call_win32+0x11
0584fd68 76eed03b kernel32!BaseThreadInitThunk+0x19
0584fdc0 76eecfc1 ntdll!__RtlUserThreadStart+0x2b
0584fdd0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 6

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

Top 8: total counts = 6

ChildEBP RetAddr  
051fef58 79c5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
051fef98 79c6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
051ff1e8 79c612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0520f830 79c5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0520f8a8 79c97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0520fa7c 75f75d49 rightsmanager!RM_AutorunScan+0x176
0520fa8c 7754d03b kernel32!BaseThreadInitThunk+0x19
0520fae4 7754cfc1 ntdll!__RtlUserThreadStart+0x2b
0520faf4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 5

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 10: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 11: total counts = 4

ChildEBP RetAddr  
05aeec70 0f15e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05aeecb0 0f16738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05aeef00 0f1612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05aff548 0f15e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05aff5c0 0f197f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05aff794 774d343d rightsmanager!RM_AutorunScan+0x176
05aff7a0 779e9802 kernel32!BaseThreadInitThunk+0xe
05aff7e0 779e97d5 ntdll!__RtlUserThreadStart+0x70
05aff7f8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093f584 70a88cc5 node+0x12ae60a
0093f624 6e743961 node+0x2a18cc5
0093f698 6f3389e6 node+0x6d3961
0093f764 6f33875e node+0x12c89e6
0093f7c0 6f310ec3 node+0x12c875e
0093f7fc 6f310acb node+0x12a0ec3
0093f83c 6f3223d2 node+0x12a0acb
0093f884 6f3222e2 node+0x12b23d2
0093f8c8 6e73bd42 node+0x12b22e2
0093f8f0 6e73d47d node+0x6cbd42
0093f930 6e67ed6c node+0x6cd47d
0093f98c 6e67f379 node+0x60ed6c
0093f9b0 6e67ea8a node+0x60f379
0093fa48 77bdd6de node+0x60ea8a
0093fa54 00000000 ntdll!RtlAllocateHeap+0x3e

Top 13: total counts = 3

ChildEBP RetAddr  
0046e534 6849e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0046e548 005fcff0 node+0x12ae479
0046e54c 00000000 0x5fcff0

Top 14: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522427

Top 15: total counts = 3

ChildEBP RetAddr  
0fa0f4b0 07860081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0fa0f4ec 0786351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0fa0f9ec 07864624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0fa0fa20 078685a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0fa0fb4c 0786917a rightsextension!CRegData::MonitorFunction+0x4b3
0fa0fb6c 07868a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0fa0fb74 0797864a rightsextension!std::_Pad::_Call_func+0xa
0fa0fbac 77713d12 rightsextension!thread_start+0x58
0fa0fbb8 77d49732 kernel32!BaseThreadInitThunk+0xe
0fa0fbf8 77d49705 ntdll!__RtlUserThreadStart+0x70
0fa0fc10 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 2

ChildEBP RetAddr  
05caf2a0 7c0de731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05caf2e0 7c0e738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05caf530 7c0e12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05cbfb78 7c0de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05cbfbf0 7c117f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05cbfdc4 7747fcc9 rightsmanager!RM_AutorunScan+0x176
05cbfdd4 779e82ae kernel32!BaseThreadInitThunk+0x19
05cbfe30 779e827e ntdll!__RtlUserThreadStart+0x2f
05cbfe40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 17: total counts = 2

ChildEBP RetAddr  
00d1f3cc 7b5e91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
00d1f3f8 7b5e1b3e rightsmanager!AutorunItem::AutorunItem+0x34
00d2fa40 7b5de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
00d2fab8 7b617f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
00d2fc8c 7782fcc9 rightsmanager!RM_AutorunScan+0x176
00d2fc9c 77ac82ae kernel32!BaseThreadInitThunk+0x19
00d2fcf8 77ac827e ntdll!__RtlUserThreadStart+0x2f
00d2fd08 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 18: total counts = 2

ChildEBP RetAddr  
077aed78 7c4ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
077aedb8 7c4b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
077af008 7c4b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
077bf650 7c4ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
077bf6c8 7c4e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
077bf89c 76335d49 rightsmanager!RM_AutorunScan+0x176
077bf8ac 7773d03b kernel32!BaseThreadInitThunk+0x19
077bf904 7773cfc1 ntdll!__RtlUserThreadStart+0x2b
077bf914 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 2

ChildEBP RetAddr  
1841f250 557a0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
1841f28c 557a351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1841f78c 557a4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1841f7c0 557a85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1841f8ec 557a917a rightsextension!CRegData::MonitorFunction+0x4b3
1841f90c 557a8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1841f914 558b864a rightsextension!std::_Pad::_Call_func+0xa
1841f94c 75c1fcc9 rightsextension!thread_start+0x58
1841f95c 76f982ae kernel32!BaseThreadInitThunk+0x19
1841f9b8 76f9827e ntdll!__RtlUserThreadStart+0x2f
1841f9c8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

09dff8d4 51fc44e8 kernel32!RegisterWaitForSingleObject+0x3d
WARNING: Stack unwind information not available. Following frames may be wrong.
09dff8f0 51fc45b8 node+0x12f44e8
09dff8f4 00000000 node+0x12f45b8

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
081ffe38 6966e8da node+0xc6bd50
081ffe90 6ab493e5 node+0xcee8da
081ffedc 7736343d node+0x21c93e5
081ffee8 77c29802 kernel32!BaseThreadInitThunk+0xe
081fff28 77c297d5 ntdll!__RtlUserThreadStart+0x70
081fff40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001af170 77b5299d node+0xc8fac5
001af17c 00ed1000 ntdll!RtlQueryPerformanceCounter+0x45
001af184 6f0e95e5 0xed1000
001af1b4 6f0e95ae node+0x2a095e5
001af1d0 41643863 node+0x2a095ae
001af1d4 00000000 0x41643863

Top 23: total counts = 1

ChildEBP RetAddr  
0133ea74 0133eb58 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0133ea88 0133ea98 0x133eb58
0133ea8c c0000017 0x133ea98
0133ea98 00000000 0xc0000017

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af2d4 12748d6c node+0x12ae60a
003af33c 10403961 node+0x2a18d6c
003af3b0 10ff89e6 node+0x6d3961
003af47c 10ff875e node+0x12c89e6
003af4d8 10fd0ec3 node+0x12c875e
003af514 10fd0acb node+0x12a0ec3
003af554 10fe23d2 node+0x12a0acb
003af59c 10fe22e2 node+0x12b23d2
003af5e0 103fbd42 node+0x12b22e2
003af608 103fd47d node+0x6cbd42
003af648 1033ed6c node+0x6cd47d
003af6a4 1033f379 node+0x60ed6c
003af6c8 1033ea8a node+0x60f379
003af6cc 10fba300 node+0x60ea8a
003af6d0 003a0000 node+0x128a300
003af6d4 00000000 0x3a0000

Top 25: total counts = 1

ChildEBP RetAddr  
0025f390 77b46396 ntdll!RtlpFreeHeap+0x49e
0025f3b0 76b7c5d4 ntdll!RtlFreeHeap+0x142
0025f3c4 737b721d kernel32!HeapFree+0x14
0025f3d8 737b88fa GdiPlus!GpFree+0x1c
0025f3ec 737e9379 GdiPlus!GpFontFamilyList::DeleteList+0x23
0025f3f8 737e974b GdiPlus!GpFontFamilyList::`scalar deleting destructor'+0xd
0025f404 737e9d0a GdiPlus!GpFontTable::~GpFontTable+0x13
0025f410 737e9d3b GdiPlus!GpFontTable::`scalar deleting destructor'+0xd
0025f41c 737e9e86 GdiPlus!GpInstalledFontCollection::~GpInstalledFontCollection+0x19
0025f428 737c9e4d GdiPlus!GpInstalledFontCollection::`scalar deleting destructor'+0xd
0025f43c 7379570f GdiPlus!InternalGdiplusShutdown+0x1d4
0025f448 0c5648be GdiPlus!GdiplusShutdown+0x2c
0025f468 0c578ac3 rightsmanager!Assoc::~Assoc+0x2e
0025f480 0c5dd53f rightsmanager!std::default_delete::operator()+0x83
0025f488 0c5c2eda rightsmanager!`dynamic atexit destructor for 'RightsManager_''+0xf
0025f4b0 0c5c2c9e rightsmanager!::operator()+0x77
0025f4e4 0c5c2f80 rightsmanager!__crt_seh_guarded_call::operator()<, &, >+0x27
0025f508 0c5c24d8 rightsmanager!_execute_onexit_table+0x2b
0025f53c 0c5c244b rightsmanager!::operator()+0x6d
0025f56c 0c5c25a1 rightsmanager!__crt_seh_guarded_call::operator()<, &, >+0x23
0025f598 0c5c26a8 rightsmanager!common_exit+0x53
0025f5a8 0c596e10 rightsmanager!_cexit+0xb
0025f5dc 0c596cc8 rightsmanager!dllmain_crt_process_detach+0x39
0025f5e8 0c596f18 rightsmanager!dllmain_crt_dispatch+0x4e
0025f628 0c596fb6 rightsmanager!dllmain_dispatch+0xaf
0025f63c 77b487cc rightsmanager!_DllMainCRTStartup+0x1c
0025f65c 77b4df0a ntdll!LdrpCallInitRoutine+0x14
0025f700 77b4dfa5 ntdll!LdrShutdownProcess+0x1aa
0025f714 76b8be9e ntdll!RtlExitUserProcess+0x74
0025f7c0 76b7ef6c kernel32!ExitProcessStub+0x12
0025f7cc 77b53618 kernel32!BaseThreadInitThunk+0xe
0025f80c 77b535eb ntdll!__RtlUserThreadStart+0x70
0025f824 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

ChildEBP RetAddr  
0a2af030 51a7e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0a2af070 51a8738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0a2af2c0 51a84ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0a2af8d8 51a83ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
0a2afae8 51a7e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
0a2afb60 51ab7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0a2afd34 75ae343d rightsmanager!RM_AutorunScan+0x176
0a2afd40 779b9812 kernel32!BaseThreadInitThunk+0xe
0a2afd80 779b97e5 ntdll!__RtlUserThreadStart+0x70
0a2afd98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0037f5b4 706a8d6c node+0x12ae60a
0037f624 6e363961 node+0x2a18d6c
0037f698 6ef589e6 node+0x6d3961
0037f764 6ef5875e node+0x12c89e6
0037f7c0 6ef30ec3 node+0x12c875e
0037f7fc 6ef30acb node+0x12a0ec3
0037f83c 6ef423d2 node+0x12a0acb
0037f884 6ef422e2 node+0x12b23d2
0037f8c8 6e35bd42 node+0x12b22e2
0037f8f0 6e35d47d node+0x6cbd42
0037f930 6e29ed6c node+0x6cd47d
0037f98c 6e29f379 node+0x60ed6c
0037f9b0 6e29ea8a node+0x60f379
0037f9b4 6ef1a300 node+0x60ea8a
0037f9b8 00370000 node+0x128a300
0037f9bc 00000000 0x370000

Top 28: total counts = 1

ChildEBP RetAddr  
0098e7f4 0098e8d0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0098e808 0098e818 0x98e8d0
0098e80c 02c30000 0x98e818
0098e818 00000000 0x2c30000

Top 29: total counts = 1

ChildEBP RetAddr  
003ae76c 64ede479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003ae780 00193201 node+0x12ae479
003ae784 00000000 0x193201

Top 30: total counts = 1

ChildEBP RetAddr  
1b66f970 79d753e7 rightsextension!DuiLib::CPaintManagerUI::MessageHandler+0x89d
1b66f998 79d723dd rightsextension!DuiLib::WindowImplBase::HandleMessage+0x265
1b66f9b8 76a60deb rightsextension!DuiLib::CWindowWnd::__WndProc+0x38
1b66f9e4 76a57daa user32!_InternalCallWinProc+0x2b
1b66fac8 76a579aa user32!UserCallWinProcCheckWow+0x33a
1b66fb2c 76a5b56f user32!DispatchClientMessage+0xea
1b66fb68 772e4e7d user32!__fnDWORD+0x3f
1b66fba0 76a55ab1 ntdll!KiUserCallbackDispatcher+0x4d
1b66fbfc 76a558e0 user32!DispatchMessageWorker+0x1c1
1b66fc08 79d6e862 user32!DispatchMessageW+0x10
1b66fc34 79cfd321 rightsextension!DuiLib::CPaintManagerUI::MessageLoop+0x37
1b66fd3c 79cff054 rightsextension!Rights::CCloudPopWindow::PopSingleWindow+0x431
1b66fd74 79cda3ca rightsextension!std::_LaunchPad >,std::default_delete > > > >::_Go+0xc4
1b66fd7c 79def16a rightsextension!std::_Pad::_Call_func+0xa
1b66fdb4 75dbfa29 rightsextension!thread_start+0x58
1b66fdc4 772d7a7e kernel32!BaseThreadInitThunk+0x19
1b66fe20 772d7a4e ntdll!__RtlUserThreadStart+0x2f
1b66fe30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 31: total counts = 1

ChildEBP RetAddr  
012fe874 012fe950 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe888 012fe898 0x12fe950
012fe88c 03480000 0x12fe898
012fe898 00000000 0x3480000

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0020cd20 0fc3dc08 node+0x2a2f20b
0020d0af 75716572 node+0xb2dc08
0020d11b 2e31203d shell32!CFolderMenu::_InsertCommandToMenu+0x2f1
0020d14f 20434720 0x2e31203d
0020d153 6f206e69 0x20434720
0020d157 7320646c 0x6f206e69
0020d15b 65636170 0x7320646c
0020d15f 7165721f 0x65636170
0020d163 74736575 comctl32!DirectUI::DUIXmlParser::ParseLiteralColorInt+0x21
0020d16f 30303a30 0x74736575
0020d173 32434442 0x30303a30
0020d177 205d3046 0x32434442
0020d17b 30373134 0x205d3046
0020d17f 35303731 0x30373134
0020d183 3a736d20 0x35303731
0020d187 72614d20 0x3a736d20
0020d18b 77732d6b 0x72614d20
0020d19f 31203e2d crypt32!Asn1RC2CBCParametersEncodeEx+0x2f
0020d1bf 76612820 0x31203e2d
0020d41b 00000000 kernel32!PEWriteResource<_IMAGE_NT_HEADERS>+0x11f9

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ae668 6e445035 node+0xc247b0
003ae6dc 6e448d4b node+0xff5035
003ae8a8 18683e01 node+0xff8d4b
003ae8ac 2f2dbaa1 0x18683e01
003ae8b0 00000000 0x2f2dbaa1

Top 34: total counts = 1

0656f854 68b5e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0656f85c 68b5e8c1 node+0x2f3e6e0
0656f860 0bfe598c node+0x2f3e8c1
0656f864 68b5e7dd 0xbfe598c
0656f868 0041e83c node+0x2f3e7dd
0656f86c 00000000 0x41e83c

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
002dced0 8eb94195 0x5024b564
002dced4 752d110b 0x8eb94195
002dced8 002dcf4c kernel32!SleepStub+0xc
002dcedc 503c1b24 0x2dcf4c
002dcf4c 032e9af0 0x503c1b24
00000000 00000000 0x32e9af0

Top 36: total counts = 1

00dff8a0 00c2266c node+0x111f
00dff8ec 76825d49 PCManage+0x266c
00dff8fc 771cd03b kernel32!BaseThreadInitThunk+0x19
00dff954 771ccfc1 ntdll!__RtlUserThreadStart+0x2b
00dff964 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 37: total counts = 1

008fcb7f 75716572 0x20656361
008fcb83 65747365 360Base+0xa6572
008fcb87 355b0a64 0x65747365
008fcb8b 3a343630 0x355b0a64
008fcb8f 41443030 0x3a343630
008fcb93 30343242 0x41443030
008fcb97 3031205d 0x30343242
008fcb9b 33313231 0x3031205d
008fcb9f 20373139 0x33313231
008fcba3 203a736d 0x20373139
008fcba7 6b72614d 0x203a736d
008fcbab 6577732d node+0x3f5614d
008fcbaf 31207065 0x6577732d
008fcbb3 20392e30 0x31207065
008fcbb7 2e323128 0x20392e30
008fcbbb 2d202933 0x2e323128
008fcbbf 3031203e 0x2d202933
008fcbc3 2820342e 0x3031203e
008fcbc7 332e3231 0x2820342e
008fcbcb 424d2029 0x332e3231
008fcbcf 2e38202c 0x424d2029
008fcbd3 202f2030 0x2e38202c
008fcbd7 20302e30 0x202f2030
008fcbdb 2020736d 0x20302e30
008fcbdf 65766128 0x2020736d
008fcbe3 65676172 0x65766128
008fcbe7 20756d20 0x65676172
008fcbeb 2e31203d 0x20756d20
008fcbef 2c303030 0x2e31203d
008fcbf3 72756320 0x2c303030
008fcbf7 746e6572 0x72756320
008fcc1f 20434720 windows_storage!CBaseOperation::_ChangeNotify+0x38
008fcc2f 71657220 0x20434720
008fcc33 74736575 0x71657220
008fce77 00000000 windows_storage!CFSFolder::_DiscoverLocalizedName+0xf5

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff194 70798d6c node+0x12ae60a
004ff204 6e453961 node+0x2a18d6c
004ff278 6f0489e6 node+0x6d3961
004ff344 6f04875e node+0x12c89e6
004ff3a0 6f020ec3 node+0x12c875e
004ff3dc 6f020acb node+0x12a0ec3
004ff41c 6f0323d2 node+0x12a0acb
004ff464 6f0322e2 node+0x12b23d2
004ff4a8 6e44bd42 node+0x12b22e2
004ff4d0 6e44d47d node+0x6cbd42
004ff510 6e38ed6c node+0x6cd47d
004ff56c 6e38f379 node+0x60ed6c
004ff590 6e38ea8a node+0x60f379
004ff594 6f00a300 node+0x60ea8a
004ff598 004f0000 node+0x128a300
004ff59c 00000000 0x4f0000

Top 39: total counts = 1

ChildEBP RetAddr  
012fec7c 773c1078 KERNELBASE!RaiseException+0x62
012feca0 012fece4 ntdll!RtlRunOnceExecuteOnce+0x18
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fecb4 03717a30 0x12fece4
012fece4 00000000 0x3717a30

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030c968 6f7ddc08 node+0x2a2f20b
0030cc67 736d2037 node+0xb2dc08
0030cc6b 614d203a tiptsf!__dyn_tls_init_callback  (tiptsf+0x42037)
0030cc6f 732d6b72 0x614d203a
0030cc73 70656577 node+0x4626b72
0030cc77 2e303120 node+0x19a6577
0030cc7b 31282033 0x2e303120
0030cc7f 29332e32 0x31282033
0030cc83 203e2d20 0x29332e32
0030cc87 332e3031 0x203e2d20
0030cc8b 32312820 0x332e3031
0030cc8f 2029332e 0x32312820
0030cc93 202c424d 0x2029332e
0030cc97 392e3631 0x202c424d
0030cc9b 30202f20 0x392e3631
0030cc9f 6d20302e 0x30202f20
0030cca3 28202073 0x6d20302e
0030cca7 72657661 0x28202073
0030ccab 20656761 node+0x39a7661
0030ccaf 3d20756d 0x20656761
0030ccb3 392e3020 0x3d20756d
0030ccb7 202c3939 0x392e3020
0030ccbb 72727563 0x202c3939
0030ccbf 20746e65 node+0x3a77563
0030ccc3 3d20756d 0x20746e65
0030ccc7 302e3020 0x3d20756d
0030cccb 20293330 0x302e3020
0030cccf 20776f6c 0x20293330
0030ccd3 6f6d656d 0x20776f6c
0030ccd7 6e207972 node+0xa2656d
0030ccdb 6669746f 0x6e207972
0030ccdf 74616369 0x6669746f
0030cdcb 203a736d WindowsCodecs!CMetadataIPTCReaderWriter::CalculateIPTCHash+0x134
0030cdd3 6577732d 0x203a736d
0030cdd7 31207065 0x6577732d
0030cddb 20332e30 0x31207065
0030cddf 2e323128 0x20332e30
0030cde3 2d202933 0x2e323128
0030cde7 3031203e 0x2d202933
0030cdeb 2820332e 0x3031203e
0030cdef 332e3231 0x2820332e
0030cdf3 424d2029 0x332e3231
0030cdf7 3631202c 0x424d2029
0030cdfb 2f20382e 0x3631202c
0030cdff 302e3020 0x2f20382e
0030ce03 20736d20 0x302e3020
0030ce07 76612820 0x20736d20
0030ce0b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x4f2820)
0030ce0f 756d2065 0x67617265
0030ce13 30203d20 oleaut32!$$VProc_ImageExportDirectory+0xa3d
0030ce17 3939392e 0x30203d20
0030ce1b 7563202c 0x3939392e
0030ce1f 6e657272 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xd202c)
0030cf63 00000000 rsaenh!SHATransformP3+0xf65

Top 41: total counts = 1

ChildEBP RetAddr  
00cfe974 00cfea58 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe988 00cfe998 0xcfea58
00cfe98c c0000017 0xcfe998
00cfe998 00000000 0xc0000017

Top 42: total counts = 1

ChildEBP RetAddr  
0042e828 6e6ce87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0042e908 6e718a79 node+0x12ae87c
0042e90c 001964f9 node+0x12f8a79
0042e910 0102d020 0x1964f9
0042e914 00000000 0x102d020

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d7cc30 66b3dc08 node+0x2a2ee0b
00d7cf2f 33353120 node+0xb2dc08
00d7cf33 33363638 0x33353120
00d7cf37 6d203830 0x33363638
00d7cf3b 4d203a73 0x6d203830
00d7cf3f 2d6b7261 0x4d203a73
00d7cf43 65657773 0x2d6b7261
00d7cf47 2e372070 OneCoreUAPCommonProxyStub!IID___x_Windows_CGaming_CPreview_CGamesEnumeration_CIGameModeUserConfigurationStatics+0xb
00d7cf4b 31282037 0x2e372070
00d7cf4f 29322e30 0x31282037
00d7cf53 203e2d20 0x29322e30
00d7cf57 20372e37 0x203e2d20
00d7cf5b 2e303128 0x20372e37
00d7cf5f 4d202932 0x2e303128
00d7cf63 35202c42 0x4d202932
00d7cf67 2f20352e 0x35202c42
00d7cf6b 302e3020 0x2f20352e
00d7cf6f 20736d20 0x302e3020
00d7cf73 76612820 0x20736d20
00d7cf77 67617265 shell32!CConflictDialogData::GetInterruptResponseAndCleanup+0x70
00d7cf83 3030302e node+0x1607265
00d7cf87 7563202c 0x3030302e
00d7cf8b 6e657272 0x7563202c
00d7cf8f 756d2074 0x6e657272
00d7cf93 30203d20 0x756d2074
00d7cf97 3430302e 0x30203d20
00d7cf9b 6f6c2029 0x3430302e
00d7cf9f 656d2077 0x6f6c2029
00d7cfa3 79726f6d OneCoreUAPCommonProxyStub!ext-ms-win-rtcore-ntuser-window-ext-l1-1-0_NULL_THUNK_DATA_DLA  (OneCoreUAPCommonProxyStub+0x342077)
00d7cfa7 746f6e20 0x79726f6d
00d7cfab 63696669 windows_storage!`string'+0x4
00d7cfaf 6f697461 0x63696669
00d7cfb3 4347206e 0x6f697461
00d7cfb7 206e6920 0x4347206e
00d7cfbb 20646c6f 0x206e6920
00d7cfbf 63617073 0x20646c6f
00d7cfc3 65722065 0x63617073
00d7cfc7 73657571 OneCoreUAPCommonProxyStub!ext-ms-win-rtcore-ntuser-window-ext-l1-1-0_NULL_THUNK_DATA_DLA  (OneCoreUAPCommonProxyStub+0x392065)
65722065 0c310831 DWrite!OpenTypeFontFaceBuilder::ReadRenderingModeRanges+0x1de
65722069 14311031 0xc310831
6572206d 1c311831 0x14311031
65722071 24312031 0x1c311831
65722075 2c312831 0x24312031
65722079 34313031 0x2c312831
6572207d 3c313831 0x34313031
65722081 44314031 0x3c313831
65722085 4c314831 0x44314031
65722089 54315031 0x4c314831
6572208d 5c315831 0x54315031
65722091 64316031 0x5c315831
65722095 6c316831 0x64316031
65722099 74317031 0x6c316831
6572209d 7c317831 0x74317031
657220a1 84318031 0x7c317831
657220a5 8c318831 0x84318031
657220a9 94319031 0x8c318831
657220ad 9c319831 0x94319031
657220b1 a431a031 0x9c319831
657220b5 ac31a831 0xa431a031
657220b9 b431b031 0xac31a831
657220bd bc31b831 0xb431b031
657220c1 c431c031 0xbc31b831
657220c5 cc31c831 0xc431c031
657220c9 d431d031 0xcc31c831
657220cd dc31d831 0xd431d031
657220d1 e431e031 0xdc31d831
657220d5 ec31e831 0xe431e031
657220d9 f431f031 0xec31e831
657220dd fc31f831 0xf431f031
657220e1 04320031 0xfc31f831
657220e5 0c320832 0x4320031
657220e9 14321032 0xc320832
657220ed 1c321832 0x14321032
657220f1 24322032 0x1c321832
657220f5 2c322832 0x24322032
657220f9 34323032 0x2c322832
657220fd 3c323832 0x34323032
65722101 44324032 0x3c323832
65722105 4c324832 0x44324032
65722109 54325032 0x4c324832
6572210d 5c325832 0x54325032
65722111 64326032 0x5c325832
65722115 6c326832 0x64326032
65722119 74327032 0x6c326832
6572211d 7c327832 0x74327032
65722121 84328032 0x7c327832
65722125 8c328832 0x84328032
65722129 94329032 0x8c328832
6572212d 9c329832 0x94329032
65722131 a432a032 0x9c329832
65722135 ac32a832 0xa432a032
65722139 b432b032 0xac32a832
6572213d bc32b832 0xb432b032
65722141 c432c032 0xbc32b832
65722145 cc32c832 0xc432c032
65722149 d432d032 0xcc32c832
6572214d dc32d832 0xd432d032
65722151 e432e032 0xdc32d832
65722155 ec32e832 0xe432e032
65722159 f432f032 0xec32e832
6572215d fc32f832 0xf432f032
65722161 04330032 0xfc32f832
65722165 0c330833 0x4330032
65722169 14331033 0xc330833
6572216d 1c331833 0x14331033
65722171 24332033 0x1c331833
65722175 2c332833 0x24332033
65722179 34333033 0x2c332833
6572217d 3c333833 0x34333033
65722181 44334033 0x3c333833
65722185 4c334833 0x44334033
65722189 54335033 0x4c334833
6572218d 5c335833 0x54335033
65722191 64336033 0x5c335833
65722195 6c336833 0x64336033
65722199 74337033 0x6c336833
6572219d 7c337833 0x74337033
657221a1 84338033 0x7c337833
657221a5 8c338833 0x84338033
657221a9 94339033 0x8c338833
657221ad 9c339833 0x94339033
657221b1 a433a033 0x9c339833
657221b5 ac33a833 0xa433a033
657221b9 b433b033 0xac33a833
657221bd bc33b833 0xb433b033
657221c1 c433c033 0xbc33b833
657221c5 cc33c833 0xc433c033
657221c9 d433d033 0xcc33c833
657221cd dc33d833 0xd433d033
657221d1 e433e033 0xdc33d833
657221d5 ec33e833 0xe433e033
657221d9 f433f033 0xec33e833
657221dd fc33f833 0xf433f033
657221e1 04340033 0xfc33f833
657221e5 0c340834 0x4340033
657221e9 14341034 0xc340834
657221ed 1c341834 0x14341034
657221f1 24342034 0x1c341834
657221f5 2c342834 0x24342034
657221f9 34343034 0x2c342834
657221fd 3c343834 0x34343034
65722201 44344034 0x3c343834
65722205 4c344834 0x44344034
65722209 54345034 0x4c344834
6572220d 5c345834 0x54345034
65722211 64346034 0x5c345834
65722215 6c346834 0x64346034
65722219 74347034 0x6c346834
6572221d 7c347834 0x74347034
65722221 84348034 0x7c347834
65722225 8c348834 0x84348034
65722229 94349034 0x8c348834
6572222d 9c349834 0x94349034
65722231 a434a034 0x9c349834
65722235 ac34a834 0xa434a034
65722239 b434b034 0xac34a834
6572223d bc34b834 0xb434b034
65722241 c434c034 0xbc34b834
65722245 cc34c834 0xc434c034
65722249 d434d034 0xcc34c834
6572224d dc34d834 0xd434d034
65722251 e434e034 0xdc34d834
65722255 ec34e834 0xe434e034
65722259 f434f034 0xec34e834
6572225d fc34f834 0xf434f034
65722261 04350034 0xfc34f834
65722265 0c350835 0x4350034
65722269 14351035 0xc350835
6572226d 1c351835 0x14351035
65722271 24352035 0x1c351835
65722275 2c352835 0x24352035
65722279 34353035 0x2c352835
6572227d 3c353835 0x34353035
65722281 44354035 0x3c353835
65722285 4c354835 0x44354035
65722289 54355035 0x4c354835
6572228d 5c355835 0x54355035
65722291 64356035 0x5c355835
65722295 6c356835 0x64356035
65722299 74357035 0x6c356835
6572229d 7c357835 0x74357035
657222a1 84358035 0x7c357835
657222a5 8c358835 0x84358035
657222a9 94359035 0x8c358835
657222ad 9c359835 0x94359035
657222b1 a435a035 0x9c359835
657222b5 ac35a835 0xa435a035
657222b9 b435b035 0xac35a835
657222bd bc35b835 0xb435b035
657222c1 c435c035 0xbc35b835
657222c5 cc35c835 0xc435c035
657222c9 d435d035 0xcc35c835
657222cd dc35d835 0xd435d035
657222d1 e435e035 0xdc35d835
657222d5 ec35e835 0xe435e035
657222d9 f435f035 0xec35e835
657222dd fc35f835 0xf435f035
657222e1 04360035 0xfc35f835
657222e5 0c360836 0x4360035
657222e9 14361036 0xc360836
657222ed 1c361836 0x14361036
657222f1 24362036 0x1c361836
657222f5 2c362836 0x24362036
657222f9 34363036 0x2c362836
657222fd 3c363836 0x34363036
65722301 44364036 0x3c363836
65722305 4c364836 0x44364036
65722309 54365036 0x4c364836
6572230d 5c365836 0x54365036
65722311 64366036 0x5c365836
65722315 6c366836 0x64366036
65722319 74367036 0x6c366836
6572231d 7c367836 0x74367036
65722321 84368036 0x7c367836
65722325 8c368836 0x84368036
65722329 94369036 0x8c368836
6572232d 9c369836 0x94369036
65722331 a436a036 0x9c369836
65722335 ac36a836 0xa436a036
65722339 b436b036 0xac36a836
6572233d bc36b836 0xb436b036
65722341 c436c036 0xbc36b836
65722345 cc36c836 0xc436c036
65722349 d436d036 0xcc36c836
6572234d dc36d836 0xd436d036
65722351 e436e036 0xdc36d836
65722355 ec36e836 0xe436e036
65722359 f436f036 0xec36e836
6572235d fc36f836 0xf436f036
65722361 04370036 0xfc36f836
65722365 0c370837 0x4370036
65722369 14371037 0xc370837
6572236d 1c371837 0x14371037
65722371 24372037 0x1c371837
65722375 2c372837 0x24372037
65722379 34373037 0x2c372837
6572237d 3c373837 0x34373037
65722381 44374037 0x3c373837
65722385 4c374837 0x44374037
65722389 54375037 0x4c374837
6572238d 5c375837 0x54375037
65722391 64376037 0x5c375837
65722395 6c376837 0x64376037
65722399 74377037 0x6c376837
6572239d 7c377837 0x74377037
657223a1 84378037 0x7c377837
657223a5 8c378837 0x84378037
657223a9 94379037 0x8c378837
657223ad 9c379837 0x94379037
657223b1 a437a037 0x9c379837
657223b5 ac37a837 0xa437a037
657223b9 b437b037 0xac37a837
657223bd bc37b837 0xb437b037
657223c1 c437c037 0xbc37b837
657223c5 cc37c837 0xc437c037
657223c9 d437d037 0xcc37c837

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
11c7f554 77574971 0x11f7e2c
11c7f584 7758f965 ntdll!RtlpFlsDataCleanup+0xa8
11c7f628 775abd0c ntdll!LdrShutdownThread+0x35
11c7f704 773db4c4 ntdll!RtlExitUserThread+0x4c
11c7f718 76858ad1 KERNELBASE!FreeLibraryAndExitThread+0x34
11c7f728 5c7af214 kernel32!FreeLibraryAndExitThreadStub+0x11
11c7f73c 5c7af302 rightsextension!common_end_thread+0x4d
11c7f748 5c7af16f rightsextension!_endthreadex+0xd
11c7f780 7685fcc9 rightsextension!thread_start+0x5d
11c7f790 775a82ae kernel32!BaseThreadInitThunk+0x19
11c7f7ec 775a827e ntdll!__RtlUserThreadStart+0x2f
11c7f7fc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 45: total counts = 1

ChildEBP RetAddr  
001aecec 6fd52d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 46: total counts = 1

ChildEBP RetAddr  
00dde68c 77005acb KERNELBASE!RaiseException+0x62
00dde698 00000000 ntdll!RtlpAllocateHeapInternal+0x103b

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00baee50 6718a345 node+0x250da39
00baeea0 66a36ff4 node+0x2c5a345
00baef28 67a72d21 node+0x2506ff4
00baf050 67a72821 node+0x3542d21
00000000 00000000 node+0x3542821

Top 48: total counts = 1

0020d3f7 76612820 0x20736d20
0020d3fb 67617265 iertutil!IsStringProperty+0x23090
0020d3ff 756d2065 0x67617265
0020d403 30203d20 gdi32!MRSETPALETTEENTRIES::bCheckRecord+0x41
0020d40b 7563202c 0x30203d20
0020d40f 6e657272 urlmon!bcrypt_NULL_THUNK_DATA_DLA  (urlmon+0x10202c)
0020d413 756d2073 node+0x1f67272
0020d417 30203d20 gdi32!MRSETPALETTEENTRIES::bCheckRecord+0x4f
0020d41b 3230302e 0x30203d20
0020d41f 6f6c2029 0x3230302e
0020d423 656d2077 node+0x2fd2029
0020d427 79726f6d 0x656d2077
0020d42b 746f6e20 0x79726f6d
0020d42f 63696669 shell32!CStartMenuCacheAndAppResolver::GetBestShortcutAndAppIDForAppPath+0xe
0020d443 63617073 0x63696669
0020d447 65722065 0x63617073
0020d44b 73657571 0x65722065
0020d44f 0a646574 0x73657571
0020d453 00000000 0xa646574

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efe43c 108ce479 KERNELBASE+0x12b552
00efe440 e0000008 node+0x12ae479
00efe444 00000000 0xe0000008

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002cce00 6a07dc08 node+0x2a2f20b
002cd0ff 30333638 node+0xb2dc08
002cd103 3a736d20 0x30333638
002cd107 72614d20 0x3a736d20
002cd10b 77732d6b 0x72614d20
002cd10f 20706565 0x77732d6b
002cd113 342e3031 0x20706565
002cd117 32312820 0x342e3031
002cd11b 2029302e 0x32312820
002cd11f 31203e2d 0x2029302e
002cd123 20332e30 0x31203e2d
002cd127 2e323128 0x20332e30
002cd12b 4d202930 0x2e323128
002cd12f 36202c42 0x4d202930
002cd133 2f20322e 0x36202c42
002cd137 302e3020 0x2f20322e
002cd13b 20736d20 0x302e3020
002cd13f 76612820 0x20736d20
002cd14f 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd15f 30203d20 0x3030302e
002cd163 3530302e 0x30203d20
002cd167 6f6c2029 0x3530302e
002cd16b 656d2077 jscript!`string'+0x5
002cd16f 79726f6d 0x656d2077
002cd173 746f6e20 0x79726f6d
002cd177 63696669 0x746f6e20
002cd17b 6f697461 0x63696669
002cd197 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd19f 32303a32 0xa646574
002cd1a3 44444339 0x32303a32
002cd1a7 205d3837 0x44444339
002cd1ab 39363039 0x205d3837
002cd1af 35323638 0x39363039
002cd1b3 3a736d20 0x35323638
002cd1b7 72614d20 0x3a736d20
002cd1bb 77732d6b 0x72614d20
002cd1bf 20706565 0x77732d6b
002cd1c3 392e3031 0x20706565
002cd1c7 32312820 0x392e3031
002cd1cb 2029302e 0x32312820
002cd1cf 31203e2d 0x2029302e
002cd1d3 20342e30 0x31203e2d
002cd1d7 2e323128 0x20342e30
002cd1db 4d202930 0x2e323128
002cd1df 36202c42 0x4d202930
002cd1e3 2f20372e 0x36202c42
002cd1e7 302e3020 0x2f20372e
002cd1eb 20736d20 0x302e3020
002cd1ef 76612820 0x20736d20
002cd1ff 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd20f 31203d20 0x3030302e
002cd213 3030302e 0x31203d20
002cd217 6f6c2029 0x3030302e
002cd21b 656d2077 jscript!`string'+0x5
002cd21f 79726f6d 0x656d2077
002cd223 746f6e20 0x79726f6d
002cd227 63696669 0x746f6e20
002cd22b 6f697461 0x63696669
002cd247 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd24f 32303a32 0xa646574
002cd253 44444339 0x32303a32
002cd257 205d3837 0x44444339
002cd25b 39363039 0x205d3837
002cd25f 33333638 0x39363039
002cd263 3a736d20 0x33333638
002cd267 72614d20 0x3a736d20
002cd26b 77732d6b 0x72614d20
002cd26f 20706565 0x77732d6b
002cd273 342e3031 0x20706565
002cd277 32312820 0x342e3031
002cd27b 2029302e 0x32312820
002cd27f 31203e2d 0x2029302e
002cd283 20332e30 0x31203e2d
002cd287 2e323128 0x20332e30
002cd28b 4d202930 0x2e323128
002cd28f 37202c42 0x4d202930
002cd293 2f20342e 0x37202c42
002cd297 302e3020 0x2f20342e
002cd29b 20736d20 0x302e3020
002cd29f 76612820 0x20736d20
002cd2af 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd2bf 30203d20 0x3030302e
002cd2c3 3430302e 0x30203d20
002cd2c7 6f6c2029 0x3430302e
002cd2cb 656d2077 jscript!`string'+0x5
002cd2cf 79726f6d 0x656d2077
002cd2d3 746f6e20 0x79726f6d
002cd2d7 63696669 0x746f6e20
002cd2db 6f697461 0x63696669
002cd2f7 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd2ff 00000000 0xa646574