Analyzed 122 dump

Top 1: total counts = 21

ChildEBP RetAddr  
00cfe7ec 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 11

079cfce4 5654aeed rightsmanager!RM_AutorunScan+0x176
079cfde0 75b5344d ffi_bindings!ffi_call_win32+0x11
079cfdec 77a09802 kernel32!BaseThreadInitThunk+0xe
079cfe2c 77a097d5 ntdll!__RtlUserThreadStart+0x70
079cfe44 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 11

0103fbe4 7c46aeed rightsmanager!RM_AutorunScan+0x176
0103fce0 7657fa29 ffi_bindings!ffi_call_win32+0x11
0103fcf0 77047a7e kernel32!BaseThreadInitThunk+0x19
0103fd4c 77047a4e ntdll!__RtlUserThreadStart+0x2f
0103fd5c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 8

ChildEBP RetAddr  
003feb5c 59e7e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003feb70 005fcff2 node+0x12ae479
003feb74 00000000 0x5fcff2

Top 5: total counts = 6

ChildEBP RetAddr  
0034e4a4 592be479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0034e4b8 00193201 node+0x12ae479
0034e4bc 00000000 0x193201

Top 6: total counts = 6

ChildEBP RetAddr  
06f1f118 651fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
06f1f158 6520738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
06f1f3a8 652012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
06f2f9f0 651fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
06f2fa68 65237f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
06f2fc3c 75d0343d rightsmanager!RM_AutorunScan+0x176
06f2fc48 76f99802 kernel32!BaseThreadInitThunk+0xe
06f2fc88 76f997d5 ntdll!__RtlUserThreadStart+0x70
06f2fca0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 5

0565f864 5a97aeed rightsmanager!RM_AutorunScan+0x176
0565f960 761f5d49 ffi_bindings!ffi_call_win32+0x11
0565f970 7752d03b kernel32!BaseThreadInitThunk+0x19
0565f9c8 7752cfc1 ntdll!__RtlUserThreadStart+0x2b
0565f9d8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 9: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 10: total counts = 3

ChildEBP RetAddr  
067aece0 7aa7e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
067aed20 7aa8738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
067aef70 7aa812a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
067bf5b8 7aa7e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
067bf630 7aab7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
067bf804 76435d49 rightsmanager!RM_AutorunScan+0x176
067bf814 76fed09b kernel32!BaseThreadInitThunk+0x19
067bf86c 76fed021 ntdll!__RtlUserThreadStart+0x2b
067bf87c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 3

ChildEBP RetAddr  
053ef3a0 7b82e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
053ef3e0 7b83738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
053ef630 7b8312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
053ffc78 7b82e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
053ffcf0 7b867f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
053ffec4 757bfcc9 rightsmanager!RM_AutorunScan+0x176
053ffed4 778782ae kernel32!BaseThreadInitThunk+0x19
053fff30 7787827e ntdll!__RtlUserThreadStart+0x2f
053fff40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 2

ChildEBP RetAddr  
0b70ef08 5065e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0b70ef48 5066738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0b70f198 506612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0b71f7e0 5065e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0b71f858 50697f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0b71fa2c 7692344d rightsmanager!RM_AutorunScan+0x176
0b71fa38 77059802 kernel32!BaseThreadInitThunk+0xe
0b71fa78 770597d5 ntdll!__RtlUserThreadStart+0x70
0b71fa90 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 2

ChildEBP RetAddr  
04daec98 7ae6e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
04daecd8 7ae7738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04daef28 7ae712a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04dbf570 7ae6e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04dbf5e8 7aea7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04dbf7bc 761b6359 rightsmanager!RM_AutorunScan+0x176
04dbf7cc 778d7a94 kernel32!BaseThreadInitThunk+0x19
04dbf828 778d7a64 ntdll!__RtlUserThreadStart+0x2f
04dbf838 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 2

ChildEBP RetAddr  
0fd2f640 69010081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0fd2f67c 6901351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0fd2fb7c 69014624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0fd2fbb0 690185a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0fd2fcdc 6901917a rightsextension!CRegData::MonitorFunction+0x4b3
0fd2fcfc 69018a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0fd2fd04 6912864a rightsextension!std::_Pad::_Call_func+0xa
0fd2fd3c 75f67ba9 rightsextension!thread_start+0x58
0fd2fd4c 7764c36b kernel32!BaseThreadInitThunk+0x19
0fd2fda4 7764c2ef ntdll!__RtlUserThreadStart+0x2b
0fd2fdb4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 15: total counts = 2

ChildEBP RetAddr  
0030ea8c 5d07e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0030eaa0 005fcff0 node+0x12ae479
0030eaa4 00000000 0x5fcff0

Top 16: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522427

Top 17: total counts = 1

ChildEBP RetAddr  
0037f4d8 6922e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0037f5b8 692789d7 node+0x12ae87c
0037f610 692f4486 node+0x12f89d7
0037f688 692f4308 node+0x1374486
0037f6f4 69300029 node+0x1374308
0037f6f8 00000000 node+0x1380029

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003acdc0 6853dc08 node+0x2a2f20b
003ad0bf 614d203a node+0xb2dc08
003ad0c3 732d6b72 0x614d203a
003ad0c7 70656577 0x732d6b72
003ad0cb 2e303120 0x70656577
003ad0cf 31282039 0x2e303120
003ad0d3 29352e32 0x31282039
003ad0d7 203e2d20 0x29352e32
003ad0db 342e3031 0x203e2d20
003ad0df 32312820 0x342e3031
003ad0e3 2029332e 0x32312820
003ad0e7 202c424d 0x2029332e
003ad0eb 322e3535 0x202c424d
003ad0ef 30202f20 0x322e3535
003ad0f3 6d20302e 0x30202f20
003ad0f7 28202073 0x6d20302e
003ad0fb 72657661 0x28202073
003ad0ff 20656761 0x72657661
003ad103 3d20756d 0x20656761
003ad107 392e3020 0x3d20756d
003ad10b 202c3939 0x392e3020
003ad10f 72727563 0x202c3939
003ad113 20746e65 0x72727563
003ad117 3d20756d 0x20746e65
003ad11b 392e3020 0x3d20756d
003ad11f 20293939 0x392e3020
003ad123 20776f6c 0x20293939
003ad127 6f6d656d 0x20776f6c
003ad12b 6e207972 0x6f6d656d
003ad12f 6669746f 0x6e207972
003ad133 74616369 0x6669746f
003ad137 206e6f69 0x74616369
003ad13b 69204347 0x206e6f69
003ad13f 6c6f206e node+0x17f4347
003ad143 70732064 0x6c6f206e
003ad147 20656361 0x70732064
003ad14b 75716572 0x20656361
003ad14f 65747365 gdi32!___PchSym_+0x4f56
003ad153 325b0a64 0x65747365
003ad157 3a343433 0x325b0a64
003ad15b 44423030 0x3a343433
003ad15f 30393342 0x44423030
003ad163 3631205d 0x30393342
003ad167 38393437 0x3631205d
003ad16b 30323039 0x38393437
003ad16f 3a736d20 0x30323039
003ad173 72614d20 0x3a736d20
003ad177 77732d6b 0x72614d20
003ad18b 31203e2d ntdll!ResCGetIndexedName+0x2d8
003ad1a3 2e30202f 0x31203e2d
003ad1a7 736d2030 0x2e30202f
003ad1ab 61282020 0x736d2030
003ad1af 61726576 0x61282020
003ad1b3 6d206567 0x61726576
003ad1b7 203d2075 0x6d206567
003ad1bb 39392e30 0x203d2075
003ad1bf 63202c38 0x39392e30
003ad1c3 65727275 0x63202c38
003ad1c7 6d20746e 0x65727275
003ad1cb 203d2075 0x6d20746e
003ad1cf 30302e30 0x203d2075
003ad1d3 6c202931 0x30302e30
003ad1db 726f6d65 oleacc!AccWrap_LocationEtcFix::AccWrap_LocationEtcFix+0x36
003ad1e7 69746163 0x726f6d65
003ad1eb 47206e6f node+0x1d36163
003ad1ef 6e692043 0x47206e6f
003ad1f3 646c6f20 0x6e692043
003ad1f7 61707320 0x646c6f20
003ad1fb 72206563 0x61707320
003ad1ff 65757165 0x72206563
003ad203 64657473 0x65757165
003ad207 33325b0a 0x64657473
003ad20b 303a3434 0x33325b0a
003ad20f 42444230 0x303a3434
003ad213 5d303933 0x42444230
003ad217 37363120 0x5d303933
003ad21b 38343035 0x37363120
003ad21f 20383539 0x38343035
003ad223 203a736d 0x20383539
003ad227 6b72614d 0x203a736d
003ad22b 6577732d node+0x3d1614d
003ad22f 31207065 0x6577732d
003ad233 20392e30 0x31207065
003ad237 2e323128 0x20392e30
003ad23b 2d202935 0x2e323128
003ad23f 3031203e 0x2d202935
003ad243 2820342e 0x3031203e
003ad247 332e3231 0x2820342e
003ad24b 424d2029 0x332e3231
003ad24f 3433202c 0x424d2029
003ad253 2f20382e 0x3433202c
003ad257 302e3020 0x2f20382e
003ad25b 20736d20 0x302e3020
003ad25f 76612820 0x20736d20
003ad263 67617265 clbcatq!g_rgCOMReg1xBeta2SchemaDataRW+0x178
003ad267 756d2065 0x67617265
003ad26b 30203d20 gdi32!InvertRgn+0x29
003ad277 6e657272 0x30203d20
003ad27b 756d2074 0x6e657272
003ad27f 30203d20 gdi32!InvertRgn+0x90
003ad28b 656d2077 0x30203d20
003ad28f 79726f6d 0x656d2077
003ad293 746f6e20 0x79726f6d
003ad297 63696669 0x746f6e20
003ad29b 6f697461 0x63696669
003ad29f 4347206e 0x6f697461
003ad2a3 206e6920 0x4347206e
003ad2a7 20646c6f 0x206e6920
003ad2ab 63617073 0x20646c6f
003ad2af 65722065 0x63617073
003ad2b3 73657571 0x65722065
003ad2b7 0a646574 0x73657571
003ad2bb 00000000 0xa646574

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ae1a8 6c3eac33 node+0xd6e653
002ae1ac 002ae1d4 node+0xd5ac33
002ae1b0 00cffe00 0x2ae1d4
002ae1d4 10de4020 0xcffe00
002ae1d8 002ae2a8 0x10de4020
002ae1dc 002ae318 0x2ae2a8
002ae2a8 00000000 0x2ae318

Top 20: total counts = 1

0e4ef9f0 12dfc1eb kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0e4efa30 12e03e96 ipcService+0x5c1eb
0e4efa64 77b693c5 ipcService+0x63e96
0e4efa80 77b8216f ntdll!RtlProcessFlsData+0x57
0e4efb18 77b82403 ntdll!LdrShutdownThread+0x35
0e4efb28 77b8f5ca ntdll!RtlExitUserThread+0x2a
0e4efc74 75c6343d ntdll!TppWorkerThread+0x846
0e4efc80 77b69802 kernel32!BaseThreadInitThunk+0xe
0e4efcc0 77b697d5 ntdll!__RtlUserThreadStart+0x70
0e4efcd8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001fcc38 69e2dc08 node+0x2a2f20b
001fcf37 72614d20 node+0xb2dc08
001fcf3b 77732d6b 0x72614d20
001fcf3f 20706565 0x77732d6b
001fcf43 322e3031 0x20706565
001fcf47 32312820 0x322e3031
001fcf4b 2029302e 0x32312820
001fcf4f 31203e2d 0x2029302e
001fcf53 20322e30 0x31203e2d
001fcf57 2e323128 0x20322e30
001fcf5b 4d202933 0x2e323128
001fcf5f 36202c42 0x4d202933
001fcf63 20352e30 0x36202c42
001fcf67 2e30202f 0x20352e30
001fcf6b 736d2030 0x2e30202f
001fcf6f 61282020 0x736d2030
001fcf73 61726576 0x61282020
001fcf77 6d206567 0x61726576
001fcf7b 203d2075 node+0x3f06567
001fcf7f 31392e30 0x203d2075
001fcf83 63202c35 0x31392e30
001fcf87 65727275 0x63202c35
001fcf8b 6d20746e 0x65727275
001fcf8f 203d2075 node+0x3f0746e
001fcf93 36392e30 0x203d2075
001fcf97 6c202930 0x36392e30
001fcf9b 6d20776f node+0x2f02930
001fcf9f 726f6d65 node+0x3f0776f
001fcfa3 6f6e2079 0x726f6d65
001fcfa7 69666974 0x6f6e2079
001fcfab 69746163 node+0x366974
001fcfaf 47206e6f node+0x446163
001fcfb3 6e692043 0x47206e6f
001fcfb7 646c6f20 0x6e692043
001fcfbb 61707320 0x646c6f20
001fcfbf 72206563 0x61707320
001fcfc3 65757165 0x72206563
001fcfc7 64657473 0x65757165
001fcfcb 30355b0a 0x64657473
001fcfcf 303a3034 0x30355b0a
001fcfd3 44343232 0x303a3034
001fcfd7 5d383942 0x44343232
001fcfdb 38383820 0x5d383942
001fcfdf 36363439 0x38383820
001fcfe3 736d2037 0x36363439
001fcfe7 614d203a 0x736d2037
001fcfeb 732d6b72 0x614d203a
001fcfef 70656577 0x732d6b72
001fcff3 2e303120 0x70656577
001fcff7 31282036 0x2e303120
001fcffb 29332e32 0x31282036
001fcfff 203e2d20 0x29332e32
001fd003 322e3031 0x203e2d20
001fd007 32312820 0x322e3031
001fd00b 2029302e 0x32312820
001fd00f 202c424d 0x2029302e
001fd013 31393031 0x202c424d
001fd017 20352e39 0x31393031
001fd01b 3131202f 0x20352e39
001fd01f 20332e39 0x3131202f
001fd023 2020736d 0x20332e39
001fd027 65766128 0x2020736d
001fd02b 65676172 0x65766128
001fd02f 20756d20 0x65676172
001fd033 2e30203d 0x20756d20
001fd037 2c303538 0x2e30203d
001fd03b 72756320 0x2c303538
001fd03f 746e6572 0x72756320
001fd043 20756d20 crypt32!`string'+0x1686
001fd047 2e30203d 0x20756d20
001fd04b 29383238 0x2e30203d
001fd04f 776f6c20 0x29383238
001fd053 6d656d20 0x776f6c20
001fd057 2079726f node+0x4356d20
001fd05b 69746f6e 0x2079726f
001fd05f 61636966 node+0x446f6e
001fd063 6e6f6974 0x61636966
001fd067 20434720 0x6e6f6974
001fd06b 6f206e69 0x20434720
001fd06f 7320646c 0x6f206e69
001fd073 65636170 0x7320646c
001fd077 71657220 0x65636170
001fd1bb 00000000 winhttp!CAutoProxy::GetHostAddresses+0x1a2

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00e3ec6c 6c1d242a 0x80014300
00000000 00000000 node+0x252242a

Top 23: total counts = 1

ChildEBP RetAddr  
08b5f6cc 6af9e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
08b5f708 69d5284b node+0x12ae479
08b5f70c 00d8444b node+0x6284b
08b5f710 6afad75a 0xd8444b
08b5f714 0036110a node+0x12bd75a
08b5f718 00240b5d 0x36110a
08b5f71c 1ad92db0 0x240b5d
08b5f720 09efdfe0 0x1ad92db0
08b5f724 09efdfe0 0x9efdfe0
08b5f728 08b5f7d4 0x9efdfe0
08b5f72c 69d527d8 0x8b5f7d4
08b5f7d4 6b5289ab node+0x627d8
08b5f7ec 6a2c0539 node+0x18389ab
08b5f808 6a2bd4a9 node+0x5d0539
08b5f924 6a2b3632 node+0x5cd4a9
08b5fa24 6a2b33f1 node+0x5c3632
08b5fa28 00000000 node+0x5c33f1

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0041ce80 6ef9dc08 node+0x2a2f20b
0041d17f 3a736d20 node+0xb2dc08
0041d183 72614d20 0x3a736d20
0041d187 77732d6b node+0x41a4d20
0041d18b 20706565 0x77732d6b
0041d18f 332e3031 0x20706565
0041d193 32312820 0x332e3031
0041d197 2029352e 0x32312820
0041d19b 31203e2d 0x2029352e
0041d19f 20332e30 0x31203e2d
0041d1a3 2e323128 0x20332e30
0041d1a7 4d202935 0x2e323128
0041d1ab 34202c42 0x4d202935
0041d1af 20392e33 0x34202c42
0041d1b3 2e30202f 0x20392e33
0041d1b7 736d2030 0x2e30202f
0041d1bb 61282020 0x736d2030
0041d1bf 61726576 0x61282020
0041d1c3 6d206567 0x61726576
0041d1c7 203d2075 0x6d206567
0041d1cb 39392e30 0x203d2075
0041d1cf 63202c33 0x39392e30
0041d1d3 65727275 0x63202c33
0041d1d7 6d20746e 0x65727275
0041d1db 203d2075 0x6d20746e
0041d1df 30302e30 0x203d2075
0041d1e3 6c202933 0x30302e30
0041d1e7 6d20776f 0x6c202933
0041d1eb 726f6d65 0x6d20776f
0041d1ef 6f6e2079 node+0x4286d65
0041d1f3 69666974 node+0x1272079
0041d1f7 69746163 0x69666974
0041d1fb 47206e6f propsys!___PchSym_  (propsys+0xb6163)
0041d1ff 6e692043 0x47206e6f
0041d203 646c6f20 node+0x222043
0041d207 61707320 0x646c6f20
0041d20b 72206563 0x61707320
0041d20f 65757165 node+0x3d96563
0041d213 64657473 0x65757165
0041d217 38325b0a 0x64657473
0041d21b 303a3436 0x38325b0a
0041d21f 42304330 0x303a3436
0041d223 5d383842 0x42304330
0041d227 30362020 0x5d383842
0041d22b 37333336 0x30362020
0041d22f 736d2039 0x37333336
0041d233 614d203a 0x736d2039
0041d237 732d6b72 0x614d203a
0041d23b 70656577 0x732d6b72
0041d23f 2e303120 node+0x21e6577
0041d243 31282038 0x2e303120
0041d247 29352e32 0x31282038
0041d24b 203e2d20 0x29352e32
0041d24f 332e3031 0x203e2d20
0041d253 32312820 0x332e3031
0041d257 2029332e 0x32312820
0041d25b 202c424d 0x2029332e
0041d25f 2e353231 0x202c424d
0041d263 202f2034 0x2e353231
0041d267 20302e30 0x202f2034
0041d26b 2020736d 0x20302e30
0041d26f 65766128 0x2020736d
0041d273 65676172 0x65766128
0041d277 20756d20 0x65676172
0041d27b 2e30203d 0x20756d20
0041d27f 2c363939 0x2e30203d
0041d283 72756320 0x2c363939
0041d287 746e6572 node+0x42e6320
0041d28b 20756d20 0x746e6572
0041d28f 2e30203d 0x20756d20
0041d293 29383939 0x2e30203d
0041d297 776f6c20 0x29383939
0041d29b 6d656d20 0x776f6c20
0041d29f 2079726f 0x6d656d20
0041d2a3 69746f6e 0x2079726f
0041d2a7 61636966 propsys!___PchSym_  (propsys+0xb6f6e)
0041d2ab 6e6f6974 0x61636966
0041d2af 20434720 node+0x286974
0041d2b3 6f206e69 0x20434720
0041d2b7 7320646c node+0xd96e69
0041d2bb 65636170 0x7320646c
0041d2bf 71657220 0x65636170
0041d2c3 74736575 node+0x31e7220
0041d2c7 5b0a6465 0x74736575
0041d2cb 34363832 0x5b0a6465
0041d2cf 4330303a 0x34363832
0041d2d3 38424230 0x4330303a
0041d2d7 20205d38 0x38424230
0041d2db 33363036 0x20205d38
0041d2df 20383534 0x33363036
0041d2e3 203a736d 0x20383534
0041d2e7 6b72614d 0x203a736d
0041d2eb 6577732d 0x6b72614d
0041d2ef 31207065 0x6577732d
0041d2f3 20332e30 0x31207065
0041d2f7 2e323128 0x20332e30
0041d2fb 2d202933 0x2e323128
0041d2ff 3031203e 0x2d202933
0041d303 2820332e 0x3031203e
0041d307 352e3231 0x2820332e
0041d30b 424d2029 0x352e3231
0041d30f 3837202c 0x424d2029
0041d313 2f20332e 0x3837202c
0041d317 302e3020 0x2f20332e
0041d31b 20736d20 0x302e3020
0041d31f 76612820 0x20736d20
0041d7d3 00000000 urlmon!CTransaction::StartEx+0xcab

Top 25: total counts = 1

ChildEBP RetAddr  
0543f22c 7a1a91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0543f258 7a1a1b3e rightsmanager!AutorunItem::AutorunItem+0x34
0544f8a0 7a19e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0544f918 7a1d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0544faec 7614f989 rightsmanager!RM_AutorunScan+0x176
0544fafc 774874b4 kernel32!BaseThreadInitThunk+0x19
0544fb58 77487484 ntdll!__RtlUserThreadStart+0x2f
0544fb68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0043e670 6976883d node+0x35bb108
0043e674 11580020 node+0x12f883d
0043e678 00000000 0x11580020

Top 27: total counts = 1

ChildEBP RetAddr  
002ee6a8 6634e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
002ee788 66398a79 node+0x12ae87c
002ee78c 005fcff0 node+0x12f8a79
002ee790 00cac3d0 0x5fcff0
005fcff0 00000000 0xcac3d0

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009cf7d4 65ee8cc5 node+0x12ae60a
009cf874 63ba3961 node+0x2a18cc5
009cf8e8 647989e6 node+0x6d3961
009cf9b4 6479875e node+0x12c89e6
009cfa10 64770ec3 node+0x12c875e
009cfa4c 64770acb node+0x12a0ec3
009cfa8c 647823d2 node+0x12a0acb
009cfad4 647822e2 node+0x12b23d2
009cfb18 63b9bd42 node+0x12b22e2
009cfb40 63b9d47d node+0x6cbd42
009cfb80 63aded6c node+0x6cd47d
009cfbdc 63adf379 node+0x60ed6c
009cfc00 63adea8a node+0x60f379
009cfc04 6475a300 node+0x60ea8a
009cfc08 009c0000 node+0x128a300
009cfc0c 00000000 0x9c0000

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0014cd20 6e09dc08 node+0x2a2f20b
Map C:\Windows\SysWOW64\shell32.dll:
  Image region 400:3caa00 does not fit in mapping
0014d0af 73657571 node+0xb2dc08
0014d0bb 30303a30 winmm!InternalLoadDriver+0xbd
0014d0d3 614d203a 0x30303a30
0014d0d7 732d6b72 0x614d203a
0014d0db 70656577 0x732d6b72
0014d0df 2e303120 node+0x30e6577
0014d0e3 31282039 0x2e303120
0014d0e7 29302e32 0x31282039
0014d0eb 203e2d20 wpdshext!CTempFileStream::CreateInstance+0x81
0014d0ff 392e3331 0x203e2d20
0014d103 30202f20 0x392e3331
0014d107 6d20302e 0x30202f20
0014d10b 28202073 0x6d20302e
0014d10f 72657661 0x28202073
0014d213 73657571 GdiPlus!GdipBitmapSetResolution+0x6a
0014d22b 00000000 winmm!InternalLoadDriver+0xbd

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfc560 63c7dc08 node+0x2a2ee0b
00cfc85f 2e30203d node+0xb2dc08
00cfc863 2c393939 0x2e30203d
00cfc867 72756320 0x2c393939
00cfc883 2079726f oleacc!ReadProcessMemoryHWND+0x2a
00cfc88f 6e6f6974 0x2079726f
00cfc893 20434720 0x6e6f6974
00cfc897 6f206e69 0x20434720
00cfc89b 7320646c 0x6f206e69
00cfc8ab 5b0a6465 GdiPlus!LsdnFinishRegular+0x73
00cfc8bf 36373734 0x5b0a6465
00cfc8c3 36353631 0x36373734
00cfc8c7 3a736d20 0x36353631
00cfc8cb 72614d20 0x3a736d20
00cfc8cf 77732d6b UIAutomationCore!UiaNode::CrossProcess_ScopeCheck+0x30
00cfc9f7 7320656c user32!ext-ms-win-edputil-policy-l1-1-0_NULL_THUNK_DATA_DLA  (user32+0x172d6b)
00cfca07 616d2066 GdiPlus!LsdnFinishRegular+0x173
00cfca1b 67617265 0x616d2066
00cfca1f 756d2065 node+0x44c7265
00cfca23 31203d20 0x756d2065
00cfca27 3030302e 0x31203d20
00cfca2b 7563202c 0x3030302e
00cfca2f 6e657272 0x7563202c
00cfca33 756d2074 0x6e657272
00cfca37 31203d20 0x756d2074
00cfca3b 3030302e 0x31203d20
00cfca3f 69662029 0x3030302e
00cfca43 696c616e 0x69662029
00cfca47 6920657a 0x696c616e
00cfca4b 6572636e 0x6920657a
00cfca4f 746e656d node+0x25d636e
00cfca53 6d206c61 windows_storage!CFSTransfer::_ShouldRetryCopy+0xe
00cfca5f 00000000 0x6d206c61

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003dc908 6bb1dc08 node+0x2a2f20b
003dcc07 20313531 node+0xb2dc08
003dcc0b 203a736d 0x20313531
003dcc0f 6b72614d 0x203a736d
003dcc13 6577732d node+0x73614d
003dcc17 31207065 0x6577732d
003dcc1b 20322e30 0x31207065
003dcc1f 2e323128 0x20322e30
003dcc23 2d202930 0x2e323128
003dcc27 3031203e 0x2d202930
003dcc2b 2820322e 0x3031203e
003dcc2f 302e3231 0x2820322e
003dcc33 424d2029 0x302e3231
003dcc37 3031202c 0x424d2029
003dcc3b 2f20352e 0x3031202c
003dcc3f 302e3020 0x2f20352e
003dcc43 20736d20 0x302e3020
003dcc47 76612820 0x20736d20
003dcc4b 67617265 0x76612820
003dcc4f 756d2065 0x67617265
003dcc53 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x602065)
003dcc57 3030302e 0x31203d20
003dcc5b 7563202c 0x3030302e
003dcc5f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x56202c)
003dcc63 756d2074 node+0x3667272
003dcc67 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x602074)
003dcc6b 3330302e 0x30203d20
003dcc6f 6f6c2029 0x3330302e
003dcc73 656d2077 node+0x46d2029
003dcc77 79726f6d 0x656d2077
003dcc7b 746f6e20 0x79726f6d
003dcc7f 63696669 0x746f6e20
003dcc83 6f697461 0x63696669
003dcc87 4347206e node+0x46a7461
003dcc8b 206e6920 0x4347206e
003dcc8f 20646c6f 0x206e6920
003dcc93 63617073 0x20646c6f
003dcc97 65722065 0x63617073
003dcc9b 73657571 0x65722065
003dcc9f 0a646574 0x73657571
003dcca3 3734325b 0xa646574
003dcca7 32303a36 0x3734325b
003dccab 42394338 0x32303a36
003dccaf 205d3842 0x42394338
003dccb3 36363432 0x205d3842
003dccb7 39333134 0x36363432
003dccbb 3a736d20 0x39333134
003dccbf 72614d20 0x3a736d20
003dccc3 77732d6b 0x72614d20
003dccc7 20706565 0x77732d6b
003dcccb 372e3031 0x20706565
003dcccf 32312820 0x372e3031
003dccd3 2029302e 0x32312820
003dccd7 31203e2d 0x2029302e
003dccdb 20322e30 0x31203e2d
003dccdf 2e323128 0x20322e30
003dcce3 4d202930 0x2e323128
003dcce7 34202c42 0x4d202930
003dcceb 2f20392e 0x34202c42
003dccef 302e3020 0x2f20392e
003dccf3 20736d20 0x302e3020
003dccf7 76612820 0x20736d20
003dccfb 67617265 0x76612820
003dccff 756d2065 0x67617265
003dcd03 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x602065)
003dcd07 3030302e 0x31203d20
003dcd0b 7563202c 0x3030302e
003dcd0f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x56202c)
003dcd13 756d2074 node+0x3667272
003dcd17 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x602074)
003dcd1b 3030302e 0x31203d20
003dcd1f 6f6c2029 0x3030302e
003dcd23 656d2077 node+0x46d2029
003dcd27 79726f6d 0x656d2077
003dcd2b 746f6e20 0x79726f6d
003dcd2f 63696669 0x746f6e20
003dcd33 6f697461 0x63696669
003dcd37 4347206e node+0x46a7461
003dcd3b 206e6920 0x4347206e
003dcd3f 20646c6f 0x206e6920
003dcd43 63617073 0x20646c6f
003dcd47 65722065 0x63617073
003dcd4b 73657571 0x65722065
003dcd4f 0a646574 0x73657571
003dcd53 3734325b 0xa646574
003dcd57 32303a36 0x3734325b
003dcd5b 42394338 0x32303a36
003dcd5f 205d3842 0x42394338
003dcd63 36363432 0x205d3842
003dcd67 34343134 0x36363432
003dcd6b 3a736d20 0x34343134
003dcd6f 72614d20 0x3a736d20
003dcd73 77732d6b 0x72614d20
003dcd77 20706565 0x77732d6b
003dcd7b 322e3031 0x20706565
003dcd7f 32312820 0x322e3031
003dcd83 2029302e 0x32312820
003dcd87 31203e2d 0x2029302e
003dcd8b 20322e30 0x31203e2d
003dcd8f 2e323128 0x20322e30
003dcd93 4d202930 0x2e323128
003dcd97 35202c42 0x4d202930
003dcd9b 2f20332e 0x35202c42
003dcd9f 302e3020 0x2f20332e
003dcda3 20736d20 0x302e3020
003dcda7 76612820 0x20736d20
003dcdab 67617265 0x76612820
003dcdaf 756d2065 0x67617265
003dcdb3 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x602065)
003dcdb7 3030302e 0x31203d20
003dcdbb 7563202c 0x3030302e
003dcdbf 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x56202c)
003dcdc3 756d2074 node+0x3667272
003dcdc7 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x602074)
003dcdcb 3430302e 0x30203d20
003dcdcf 6f6c2029 0x3430302e
003dcdd3 656d2077 node+0x46d2029
003dcdd7 79726f6d 0x656d2077
003dcddb 746f6e20 0x79726f6d
003dcddf 63696669 0x746f6e20
003dcde3 6f697461 0x63696669
003dcde7 4347206e node+0x46a7461
003dcdeb 206e6920 0x4347206e
003dcdef 20646c6f 0x206e6920
003dcdf3 63617073 0x20646c6f
003dcdf7 65722065 0x63617073
003dcdfb 73657571 0x65722065
003dcdff 0a646574 0x73657571
003dce03 00000000 0xa646574

Top 32: total counts = 1

ChildEBP RetAddr  
006fe6c4 006fe7a0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe6d8 006fe6e8 0x6fe7a0
006fe6dc 02b90000 0x6fe6e8
006fe6e8 00000000 0x2b90000

Top 33: total counts = 1

ChildEBP RetAddr  
057ef390 7b8be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
057ef3d0 7b8c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
057ef620 7b8c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
057ffc68 7b8be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
057ffce0 7b8f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
057ffeb4 76906839 rightsmanager!RM_AutorunScan+0x176
057ffec4 7793906f kernel32!BaseThreadInitThunk+0x19
057fff1c 7793903d ntdll!__RtlUserThreadStart+0x2b
057fff2c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 34: total counts = 1

ChildEBP RetAddr  
08edf2e8 67d1e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
08edf328 67d2738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
08edf578 67d212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
08eefbc0 67d1e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
08eefc38 67d57f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
08eefe0c 76d7343d rightsmanager!RM_AutorunScan+0x176
08eefe18 777f9832 kernel32!BaseThreadInitThunk+0xe
08eefe58 777f9805 ntdll!__RtlUserThreadStart+0x70
08eefe70 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 35: total counts = 1

ChildEBP RetAddr  
00afe3a4 00afe480 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00afe3b8 00afe3c8 0xafe480
00afe3bc 02f00000 0xafe3c8
00afe3c8 00000000 0x2f00000

Top 36: total counts = 1

ChildEBP RetAddr  
1756f50c 78ad0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
1756f548 78ad351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1756fa48 78ad4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1756fa7c 78ad85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1756fba8 78ad917a rightsextension!CRegData::MonitorFunction+0x4b3
1756fbc8 78ad8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1756fbd0 78be864a rightsextension!std::_Pad::_Call_func+0xa
1756fc08 75fafcc9 rightsextension!thread_start+0x58
1756fc18 77257c5e kernel32!BaseThreadInitThunk+0x19
1756fc74 77257c2e ntdll!__RtlUserThreadStart+0x2f
1756fc84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 37: total counts = 1

2065638d 53550213 0x6045503
20656391 11301331 ichat_bundle+0x90213
20656395 04550306 0x11301331
20656399 570a1308 0x4550306
2065639d 69687361 0x570a1308
206563a1 6f74676e 0x69687361
206563a5 3010316e 0x6f74676e
206563a9 5503060e 0x3010316e
206563ad 07130704 0x5503060e
206563b1 6d646552 0x7130704
206563b5 31646e6f 0x6d646552
206563b9 061c301e 0x31646e6f
206563bd 0a045503 0x61c301e
206563c1 694d1513 0xa045503
206563c5 736f7263 0x694d1513
206563c9 2074666f 0x736f7263
206563cd 70726f43 0x2074666f
206563d1 7461726f 0x70726f43
206563d5 316e6f69 0x7461726f
206563d9 06243026 0x316e6f69
206563dd 03045503 0x6243026
206563e1 694d1d13 0x3045503
206563e5 736f7263 0x694d1d13
206563e9 2074666f 0x736f7263
206563ed 656d6954 0x2074666f
206563f1 6174532d 0x656d6954
206563f5 5020706d node+0x25e532d
206563f9 32204143 0x5020706d
206563fd 02303130 0x32204143
20656401 00000000 0x2303130

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0022f184 6d168d6c node+0x12ae60a
0022f1ec 6ae23961 node+0x2a18d6c
0022f260 6ba189e6 node+0x6d3961
0022f32c 6ba1875e node+0x12c89e6
0022f388 6b9f0ec3 node+0x12c875e
0022f3c4 6b9f0acb node+0x12a0ec3
0022f404 6ba023d2 node+0x12a0acb
0022f44c 6ba022e2 node+0x12b23d2
0022f490 6ae1bd42 node+0x12b22e2
0022f4b8 6ae1d47d node+0x6cbd42
0022f4f8 6ad5ed6c node+0x6cd47d
0022f554 6ad5f379 node+0x60ed6c
0022f578 6ad5ea8a node+0x60f379
0022f57c 6b9da300 node+0x60ea8a
0022f580 00220000 node+0x128a300
0022f584 00000000 0x220000

Top 39: total counts = 1

ChildEBP RetAddr  
006fe754 00000000 KERNELBASE!RaiseException+0x64

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0026ef8c 66a0202a 0x4f52475f
00000000 00000000 node+0x252202a

Top 41: total counts = 1

ChildEBP RetAddr  
0629f0f4 0bd591a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0629f120 0bd51b3e rightsmanager!AutorunItem::AutorunItem+0x34
062af768 0bd4e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
062af7e0 0bd87f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
062af9b4 767f7ba9 rightsmanager!RM_AutorunScan+0x176
062af9c4 77d7c36b kernel32!BaseThreadInitThunk+0x19
062afa1c 77d7c2ef ntdll!__RtlUserThreadStart+0x2b
062afa2c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af784 6f4f8cc5 node+0x12ae60a
003af81c 6d1b3961 node+0x2a18cc5
003af890 6dda89e6 node+0x6d3961
003af95c 6dda875e node+0x12c89e6
003af9b8 6dd80ec3 node+0x12c875e
003af9f4 6dd80acb node+0x12a0ec3
003afa34 6dd923d2 node+0x12a0acb
003afa7c 6dd922e2 node+0x12b23d2
003afac0 6d1abd42 node+0x12b22e2
003afae8 6d1ad47d node+0x6cbd42
003afb28 6d0eed6c node+0x6cd47d
003afb84 6d0ef379 node+0x60ed6c
003afba8 6d0eea8a node+0x60f379
003afbac 6dd6a300 node+0x60ea8a
003afbb0 003a0000 node+0x128a300
003afbb4 00000000 0x3a0000

Top 43: total counts = 1

0035d2bf 756d2065 node+0x2a87265
0035d2c3 30203d20 Wldap32!ldap_get_values+0xd2c0
0035d2c7 3939392e 0x30203d20
0035d2cb 7563202c 0x3939392e
0035d307 65722065 bcrypt!mp_mul22s+0x9f1
0035d323 00000000 node+0xb92065

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f3f434 63108cc5 node+0x12ae60a
00f3f4cc 60dc3961 node+0x2a18cc5
00f3f540 619b89e6 node+0x6d3961
00f3f60c 619b875e node+0x12c89e6
00f3f668 61990ec3 node+0x12c875e
00f3f6a4 61990acb node+0x12a0ec3
00f3f6e4 619a23d2 node+0x12a0acb
00f3f72c 619a22e2 node+0x12b23d2
00f3f770 60dbbd42 node+0x12b22e2
00f3f798 60dbd47d node+0x6cbd42
00f3f7d8 60cfed6c node+0x6cd47d
00f3f834 60cff379 node+0x60ed6c
00f3f858 60cfea8a node+0x60f379
00f3f8f0 77695efe node+0x60ea8a
00f3f9a4 77693d36 ntdll!RtlAllocateHeap+0x3e
00f3f9bc 72662d00 ntdll!RtlFreeHeap+0x46
00f3f9cc 00000000 0x72662d00

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003fcee8 6141dc08 node+0x2a2f20b
003fd1e7 3a736d20 node+0xb2dc08
003fd1eb 72614d20 0x3a736d20
003fd1ef 77732d6b 0x72614d20
003fd1f3 20706565 0x77732d6b
003fd1f7 342e3031 0x20706565
003fd1fb 32312820 0x342e3031
003fd1ff 2029332e 0x32312820
003fd203 31203e2d 0x2029332e
003fd207 20342e30 0x31203e2d
003fd20b 2e323128 0x20342e30
003fd20f 4d202933 0x2e323128
003fd213 36202c42 0x4d202933
003fd217 2f20352e 0x36202c42
003fd21b 302e3020 0x2f20352e
003fd21f 20736d20 0x302e3020
003fd223 76612820 0x20736d20
003fd227 67617265 shell32!`string'+0x68
003fd22b 756d2065 0x67617265
003fd36b 2820342e urlmon!CSoftDist::IsICDAdvertised+0x41
003fd377 3531202c 0x2820342e
003fd37b 2f20382e 0x3531202c
003fd37f 302e3020 0x2f20382e
003fd383 20736d20 0x302e3020
003fd387 76612820 0x20736d20
003fd38b 67617265 shell32!`string'+0x68
003fd38f 756d2065 0x67617265
003fd4cf 00000000 urlmon!CSoftDist::IsICDAdvertised+0x41

Top 46: total counts = 1

ChildEBP RetAddr  
0055e8e8 6d54e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0055e9c0 6d598a79 node+0x12ae87c
0055e9c4 001964f9 node+0x12f8a79
0055e9c8 01f20ac0 0x1964f9
0055e9cc 00000000 0x1f20ac0

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0037f088 77442a6d node+0x35bb9ac
0037f094 00ab0ed0 ntdll!RtlQueryPerformanceCounter+0x45
0037f09c 703095e5 0xab0ed0
0037f0cc 703095ae node+0x2a095e5
0037f0e8 4155d9f8 node+0x2a095ae
0037f0ec 00000000 0x4155d9f8