User:Mook/win64debug
From MozillaWiki
Contents
WinDbg Command
This might be useful for windbg debugging.
!htrace -enable;gh;bp /1 ADVAPI32!RegOpenKeyExW "$$ print args info;!handle rcx;!htrace rcx;du rdx;r r8;r r9;dp rsp+28h;dp poi(rsp+28h);r rsp;bp /1 ADVAPI32!LocalBaseRegOpenKey \"r rcx;r rdx;gh;\";bp /1 ADVAPI32!LocalBaseRegOpenKey+0x25 \"r xmm6;\";gh;";gh;
Crash Stack
# Child-SP RetAddr Call Site 00 00000000`0022ad30 000007fe`ff8d98c4 ADVAPI32!LocalBaseRegOpenKey 01 00000000`0022ad38 000007fe`ff8d9921 ADVAPI32!RegOpenKeyExInternalW+0x1f2 02 00000000`0022adc8 000007fe`ff9c44f5 ADVAPI32!RegOpenKeyExW+0x19 rcx = 000004fe hKey Type Key rdx = 0022aeb8 lpSubKey "CLSID\{4657278A-411B-11D2-839A-00C04FD918D0}" r8 = 0 ulOptions r9 = 00020019 samDesired KEY_EXECUTE / KEY_READ rsp+28h = 0022ae68 phkResult (null) rsp = 0022ae00 03 00000000`0022ae08 000007fe`ff9c3bb7 ole32!CComRegCatalog::GetClassInfoW+0x121 04 00000000`0022b038 000007fe`ff9e3a93 ole32!CComCatalog::GetClassInfoInternal+0x3ec 05 00000000`0022b188 000007fe`ff9e3e50 ole32!CComCatalog::GetClassInfoW+0x27 06 00000000`0022b1d8 000007fe`ff9da518 ole32!LookForConfiguredClsid+0x80 07 00000000`0022b228 000007fe`ff9da2cb ole32!ICoCreateInstanceEx+0x198 08 00000000`0022b458 00000000`6437ff45 ole32!CoCreateInstance+0x17b 09 00000000`0022b548 00000000`643e0ef0 gkwidget!NSGetModule+0x3da1d 0a 00000000`0022b550 00000000`05ec41d0 gkwidget!NSGetModule+0x9e9c8 0b 00000000`0022b558 00000000`643c9938 0x5ec41d0 0c 00000000`0022b560 00000000`0022b588 gkwidget!NSGetModule+0x87410 0d 00000000`0022b568 00000000`05ec41d8 0x22b588 0e 00000000`0022b570 00000000`0022b4f8 0x5ec41d8 0f 00000000`0022b578 00000000`6434a645 0x22b4f8 10 00000000`0022b580 00000000`64349f3c gkwidget!NSGetModule+0x811d 11 00000000`0022b588 00000000`0022b698 gkwidget!NSGetModule+0x7a14 12 00000000`0022b590 00000000`6434a70c 0x22b698 13 00000000`0022b598 00000000`05ec41a0 gkwidget!NSGetModule+0x81e4
The handle in frame 2
0:000> !handle rcx Handle 4fe Type Key 0:000> !htrace rcx -------------------------------------- Handle = 0x00000000000004fc - OPEN Thread ID = 0x0000000000000c0c, Process ID = 0x0000000000001304 0x0000000077a95b9a: ntdll!NtOpenKey+0x000000000000000a 0x000007feff8d0670: ADVAPI32!RegOpenUserClassesRoot+0x00000000000001ed 0x000007feff9c1d17: ole32!OpenClassesRootKeyExW+0x000000000000009b 0x000007feff9cbaf6: ole32!GetRegCatalogObject+0x0000000000000066 0x000007feff9cc2be: ole32!CComCatalog::InitializeCatalogIfNeccessary+0x000000000000004a 0x000007feff9cc248: ole32!GetCatalogHelper+0x000000000000001c 0x000007feff9cc1c2: ole32!InitializeCatalogIfNecessary+0x000000000000003c 0x000007feff9e3e1d: ole32!LookForConfiguredClsid+0x0000000000000051 0x000007feff9da518: ole32!ICoCreateInstanceEx+0x0000000000000198 0x000007feff9da2cb: ole32!CoCreateInstance+0x000000000000017b 0x00000000712137d8: xpcom_core!Z25NS_NewFastLoadFileUpdaterPP21nsIObjectOutputStreamP15nsIOutputStreamP20nsIObjectIputStream+0x0000000000002049
disassembly around caller (frame 9)
00000000`6437fe56 55 push rbp 00000000`6437fe57 4889e5 mov rbp,rsp 00000000`6437fe5a 53 push rbx 00000000`6437fe5b 4883ec38 sub rsp,38h 00000000`6437fe5f 48894d10 mov qword ptr [rbp+10h],rcx 00000000`6437fe63 48895518 mov qword ptr [rbp+18h],rdx 00000000`6437fe67 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fe6b 4889c1 mov rcx,rax 00000000`6437fe6e e835b70200 call gkwidget!NSGetModule+0x69080 (00000000`643ab5a8) 00000000`6437fe73 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fe77 488d1532560500 lea rdx,[gkwidget!NSGetModule+0x92f88 (00000000`643d54b0)] 00000000`6437fe7e 488910 mov qword ptr [rax],rdx 00000000`6437fe81 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fe85 c7400800000000 mov dword ptr [rax+8],0 00000000`6437fe8c 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fe90 c7400c00000000 mov dword ptr [rax+0Ch],0 00000000`6437fe97 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fe9b c7401801000000 mov dword ptr [rax+18h],1 00000000`6437fea2 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fea6 c7402000000000 mov dword ptr [rax+20h],0 00000000`6437fead 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437feb1 488b5518 mov rdx,qword ptr [rbp+18h] 00000000`6437feb5 48895028 mov qword ptr [rax+28h],rdx 00000000`6437feb9 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437febd 48c7403800000000 mov qword ptr [rax+38h],0 00000000`6437fec5 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fec9 488b4028 mov rax,qword ptr [rax+28h] 00000000`6437fecd 488b00 mov rax,qword ptr [rax] 00000000`6437fed0 4805c8010000 add rax,1C8h 00000000`6437fed6 488b18 mov rbx,qword ptr [rax] 00000000`6437fed9 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fedd 488b4028 mov rax,qword ptr [rax+28h] 00000000`6437fee1 ba00000000 mov edx,0 00000000`6437fee6 4889c1 mov rcx,rax 00000000`6437fee9 ffd3 call rbx 00000000`6437feeb 4889c2 mov rdx,rax 00000000`6437feee 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fef2 48895010 mov qword ptr [rax+10h],rdx 00000000`6437fef6 488b4510 mov rax,qword ptr [rbp+10h] 00000000`6437fefa 4883c030 add rax,30h 00000000`6437fefe 4889c2 mov rdx,rax 00000000`6437ff01 488d0de80f0600 lea rcx,[gkwidget!NSGetModule+0x9e9c8 (00000000`643e0ef0)] 00000000`6437ff08 e82b820200 call gkwidget!NSGetModule+0x65c10 (00000000`643a8138) 00000000`6437ff0d 488b0584360700 mov rax,qword ptr [gkwidget!NSGetModule+0xb1070 (00000000`643f3598)] 00000000`6437ff14 ffd0 call rax ; ::DebugBreak(); 00000000`6437ff16 488b4510 mov rax,qword ptr [rbp+10h] ss:00000000`0022b598=0000000005cc41a0 00000000`6437ff1a 4883c038 add rax,38h 00000000`6437ff1e 4889442420 mov qword ptr [rsp+20h],rax 00000000`6437ff23 4c8d0d96990600 lea r9,[gkwidget!NSGetModule+0xa7398 (00000000`643e98c0)] ; IID_IDropTargetHelper 00000000`6437ff2a 41b801000000 mov r8d,1 ; CLSCTX_INPROC_SERVER 00000000`6437ff30 ba00000000 mov edx,0 ; (null) 00000000`6437ff35 488d0dc4900600 lea rcx,[gkwidget!NSGetModule+0xa6ad8 (00000000`643e9000)] ; CLSID_DragDropHelper 00000000`6437ff3c 488b05153a0700 mov rax,qword ptr [gkwidget!NSGetModule+0xb1430 (00000000`643f3958)] 00000000`6437ff43 ffd0 call rax ; ::CoCreateInstance();
call trace
0:000> wt -oR 25 0 [ 0] ole32!CoCreateInstance 1 0 [ 1] ole32!memcmp 23 0 [ 1] msvcrt!memcmp rax = 1 78 24 [ 0] ole32!CoCreateInstance 27 0 [ 1] ole32!ICoCreateInstanceEx 58 0 [ 2] ole32!ValidateAndRemapParams rax = 0 41 58 [ 1] ole32!ICoCreateInstanceEx 22 0 [ 2] ole32!IsInternalCLSID 1 0 [ 3] ole32!memcmp 23 0 [ 3] msvcrt!memcmp rax = ffffffff 28 24 [ 2] ole32!IsInternalCLSID 1 0 [ 3] ole32!memcmp 23 0 [ 3] msvcrt!memcmp rax = 1 34 48 [ 2] ole32!IsInternalCLSID 6 0 [ 3] ole32!_security_check_cookie rax = 0 42 54 [ 2] ole32!IsInternalCLSID rax = 0 51 154 [ 1] ole32!ICoCreateInstanceEx 18 0 [ 2] ole32!LookForConfiguredClsid 8 0 [ 3] ole32!InitializeCatalogIfNecessary rax = 0 30 8 [ 2] ole32!LookForConfiguredClsid 8 0 [ 3] ole32!CComCatalog::GetClassInfoW 85 0 [ 4] ole32!CComCatalog::GetClassInfoInternal 11 0 [ 5] ole32!CComSxSCatalog::GetClassInfoW 39 0 [ 6] kernel32!FindActCtxSectionGuid 1 0 [ 7] kernel32!memset 63 0 [ 7] ntdll!memset rax = 22aed8 47 64 [ 6] kernel32!FindActCtxSectionGuid 18 0 [ 7] ntdll!RtlFindActivationContextSectionGuid 20 0 [ 8] ntdll!RtlpFindActivationContextSection_CheckParameters rax = 0 35 20 [ 7] ntdll!RtlFindActivationContextSectionGuid 43 0 [ 8] ntdll!RtlpFindNextActivationContextSection 59 0 [ 9] ntdll!RtlpLocateActivationContextSection 37 0 [ 10] ntdll!bsearch 8 0 [ 11] ntdll!RtlpCompareActivationContextDataTOCEntryById rax = 0 50 8 [ 10] ntdll!bsearch rax = 2400d4 92 58 [ 9] ntdll!RtlpLocateActivationContextSection rax = 0 68 150 [ 8] ntdll!RtlpFindNextActivationContextSection rax = 0 50 238 [ 7] ntdll!RtlFindActivationContextSectionGuid 18 0 [ 8] ntdll!RtlpFindGuidInSection 6 0 [ 9] ntdll!_security_check_cookie rax = c0150008 20 6 [ 8] ntdll!RtlpFindGuidInSection rax = c0150008 59 264 [ 7] ntdll!RtlFindActivationContextSectionGuid 45 0 [ 8] ntdll!RtlpFindNextActivationContextSection 59 0 [ 9] ntdll!RtlpLocateActivationContextSection 37 0 [ 10] ntdll!bsearch 8 0 [ 11] ntdll!RtlpCompareActivationContextDataTOCEntryById rax = 0 50 8 [ 10] ntdll!bsearch rax = 23011c 92 58 [ 9] ntdll!RtlpLocateActivationContextSection rax = 0 68 150 [ 8] ntdll!RtlpFindNextActivationContextSection rax = 0 71 482 [ 7] ntdll!RtlFindActivationContextSectionGuid 46 0 [ 8] ntdll!RtlpFindGuidInSection 37 0 [ 9] ntdll!bsearch 2 0 [ 10] ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid 23 0 [ 10] ntdll!memcmp rax = 1 57 25 [ 9] ntdll!bsearch 2 0 [ 10] ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid 23 0 [ 10] ntdll!memcmp rax = 1 74 50 [ 9] ntdll!bsearch 2 0 [ 10] ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid 23 0 [ 10] ntdll!memcmp rax = ffffffff 87 75 [ 9] ntdll!bsearch rax = 0 61 162 [ 8] ntdll!RtlpFindGuidInSection 6 0 [ 9] ntdll!_security_check_cookie rax = c0150008 63 168 [ 8] ntdll!RtlpFindGuidInSection rax = c0150008 80 713 [ 7] ntdll!RtlFindActivationContextSectionGuid 48 0 [ 8] ntdll!RtlpFindNextActivationContextSection rax = c0150001 93 761 [ 7] ntdll!RtlFindActivationContextSectionGuid rax = c0150008 51 918 [ 6] kernel32!FindActCtxSectionGuid 3 0 [ 7] kernel32!BaseSetLastNTError 8 0 [ 8] ntdll!RtlNtStatusToDosError 1233 0 [ 9] ntdll!RtlNtStatusToDosErrorNoTeb rax = 36b7 10 1233 [ 8] ntdll!RtlNtStatusToDosError rax = 36b7 6 1243 [ 7] kernel32!BaseSetLastNTError 14 0 [ 8] ntdll!RtlSetLastWin32Error rax = 0 10 1257 [ 7] kernel32!BaseSetLastNTError rax = 36b7 63 2185 [ 6] kernel32!FindActCtxSectionGuid rax = 0 14 2248 [ 5] ole32!CComSxSCatalog::GetClassInfoW 3 0 [ 6] kernel32!GetLastError rax = 36b7 21 2251 [ 5] ole32!CComSxSCatalog::GetClassInfoW rax = 80040154 110 2272 [ 4] ole32!CComCatalog::GetClassInfoInternal 64 0 [ 5] ole32!CCache::GetElement 6 0 [ 5] ole32!alloca_probe 6 0 [ 6] ole32!`anonymous namespace'::OurRtlAllocateStringRoutine 32 0 [ 6] ntdll!RtlAllocateHeap 34 0 [ 7] ntdll!RtlpAllocateHeap 5 0 [ 7] ntdll! ?? ::FNODOBFM::`string' 17 0 [ 8] ntdll!RtlDebugAllocateHeap 9 0 [ 9] ntdll!RtlpCheckHeapSignature rax = 7fffffff`ffffff01 38 9 [ 8] ntdll!RtlDebugAllocateHeap 51 0 [ 9] ntdll!RtlEnterCriticalSection rax = 0 44 60 [ 8] ntdll!RtlDebugAllocateHeap 18 0 [ 9] ntdll!RtlpValidateHeap 14 0 [ 10] ntdll!RtlpValidateHeapHeaders rax = 22a801 36 14 [ 9] ntdll!RtlpValidateHeap rax = 22a801 48 110 [ 8] ntdll!RtlDebugAllocateHeap 32 0 [ 9] ntdll!RtlAllocateHeap 34 0 [ 10] ntdll!RtlpAllocateHeap 2 0 [ 10] ntdll! ?? ::FNODOBFM::`string' 250 0 [ 10] ntdll!RtlpAllocateHeap 48 0 [ 11] ntdll!RtlCompareMemoryUlong rax = 90 592 48 [ 10] ntdll!RtlpAllocateHeap 6 0 [ 11] ntdll!RtlpGetExtraStuffPointer rax = 67c2f0 638 54 [ 10] ntdll!RtlpAllocateHeap rax = 67c2c0 50 728 [ 9] ntdll!RtlAllocateHeap rax = 67c2c0 53 888 [ 8] ntdll!RtlDebugAllocateHeap 14 0 [ 9] ntdll!RtlpValidateHeapHeaders rax = 67c201 72 902 [ 8] ntdll!RtlDebugAllocateHeap 6 0 [ 9] ntdll!RtlpGetExtraStuffPointer rax = 67c2f0 96 908 [ 8] ntdll!RtlDebugAllocateHeap 4 0 [ 9] ntdll!RtlGetNtGlobalFlags rax = 70 103 912 [ 8] ntdll!RtlDebugAllocateHeap 17 0 [ 9] ntdll!RtlLeaveCriticalSection rax = 0 112 929 [ 8] ntdll!RtlDebugAllocateHeap rax = 67c2c0 7 1041 [ 7] ntdll! ?? ::FNODOBFM::`string' 9 0 [ 7] ntdll!RtlpAllocateHeap rax = 67c2c0 50 1091 [ 6] ntdll!RtlAllocateHeap rax = 67c2c0 12 1147 [ 5] ole32!alloca_probe 11 0 [ 5] ole32!CCache::GetElement 1 0 [ 6] ole32!memcpy 1 0 [ 6] msvcrt!memcpy 27 0 [ 6] msvcrt!memmove rax = 67c2c8 40 29 [ 5] ole32!CCache::GetElement 1 0 [ 6] ole32!memcpy 1 0 [ 6] msvcrt!memcpy 29 0 [ 6] msvcrt!memmove rax = 67c2d8 55 60 [ 5] ole32!CCache::GetElement 21 0 [ 6] ole32!CCache::GetElement 14 0 [ 7] ntdll!RtlAcquireSRWLockShared rax = 0 32 14 [ 6] ole32!CCache::GetElement 8 0 [ 7] ntdll!RtlReleaseSRWLockShared rax = 11 45 22 [ 6] ole32!CCache::GetElement rax = a0000002 61 127 [ 5] ole32!CCache::GetElement 1 0 [ 5] ole32!alloca_probe 1 0 [ 6] ole32!`anonymous namespace'::OurRtlFreeStringRoutine 5 0 [ 6] ole32!SafeAllocaFreeToHeap 35 0 [ 6] ntdll!RtlFreeHeap 32 0 [ 7] ntdll!RtlpFreeHeap 4 0 [ 7] ntdll! ?? ::FNODOBFM::`string' 18 0 [ 8] ntdll!RtlDebugFreeHeap 9 0 [ 9] ntdll!RtlpCheckHeapSignature rax = 22af01 28 9 [ 8] ntdll!RtlDebugFreeHeap 13 0 [ 9] ntdll!RtlEnterCriticalSection rax = 0 34 22 [ 8] ntdll!RtlDebugFreeHeap 18 0 [ 9] ntdll!RtlpValidateHeap 14 0 [ 10] ntdll!RtlpValidateHeapHeaders rax = 22ab01 36 14 [ 9] ntdll!RtlpValidateHeap rax = 22ab01 42 72 [ 8] ntdll!RtlDebugFreeHeap 53 0 [ 9] ntdll!RtlpValidateHeapEntry 2 0 [ 9] ntdll! ?? ::FNODOBFM::`string' 52 0 [ 10] ntdll!RtlpCheckBusyBlockTail 33 0 [ 11] ntdll!RtlCompareMemory rax = 10 62 33 [ 10] ntdll!RtlpCheckBusyBlockTail rax = 1 5 95 [ 9] ntdll! ?? ::FNODOBFM::`string' 16 0 [ 9] ntdll!RtlpValidateHeapEntry rax = 640001 47 241 [ 8] ntdll!RtlDebugFreeHeap 4 0 [ 9] ntdll!RtlGetNtGlobalFlags rax = 70 53 245 [ 8] ntdll!RtlDebugFreeHeap 35 0 [ 9] ntdll!RtlFreeHeap 32 0 [ 10] ntdll!RtlpFreeHeap 2 0 [ 10] ntdll! ?? ::FNODOBFM::`string' 185 0 [ 10] ntdll!RtlpFreeHeap 28 0 [ 11] ntdll!RtlCompareMemoryUlong rax = 40 469 28 [ 10] ntdll!RtlpFreeHeap rax = 2cf84801 42 531 [ 9] ntdll!RtlFreeHeap rax = 2cf84801 58 818 [ 8] ntdll!RtlDebugFreeHeap 14 0 [ 9] ntdll!RtlpValidateHeapHeaders rax = 2cf84801 61 832 [ 8] ntdll!RtlDebugFreeHeap 18 0 [ 9] ntdll!RtlpValidateHeap 14 0 [ 10] ntdll!RtlpValidateHeapHeaders rax = 22ab01 36 14 [ 9] ntdll!RtlpValidateHeap rax = 22ab01 66 882 [ 8] ntdll!RtlDebugFreeHeap 17 0 [ 9] ntdll!RtlLeaveCriticalSection rax = 0 75 899 [ 8] ntdll!RtlDebugFreeHeap rax = 1 6 974 [ 7] ntdll! ?? ::FNODOBFM::`string' 9 0 [ 7] ntdll!RtlpFreeHeap rax = 1 42 1021 [ 6] ntdll!RtlFreeHeap rax = 1 3 1069 [ 5] ole32!alloca_probe 4 0 [ 5] ole32!CCache::GetElement 6 0 [ 6] ole32!_security_check_cookie rax = a0000002 14 6 [ 5] ole32!CCache::GetElement rax = a0000002 134 4775 [ 4] ole32!CComCatalog::GetClassInfoInternal 16 0 [ 5] CLBCatQ!CComCLBCatalog::GetClassInfoW 16 0 [ 6] CLBCatQ!CComClass::Create 9 0 [ 7] ole32!CoTaskMemAlloc 32 0 [ 7] ntdll!RtlAllocateHeap 34 0 [ 8] ntdll!RtlpAllocateHeap 5 0 [ 8] ntdll! ?? ::FNODOBFM::`string' 17 0 [ 9] ntdll!RtlDebugAllocateHeap 9 0 [ 10] ntdll!RtlpCheckHeapSignature rax = 7fffffff`ffffff01 38 9 [ 9] ntdll!RtlDebugAllocateHeap 13 0 [ 10] ntdll!RtlEnterCriticalSection rax = 0 44 22 [ 9] ntdll!RtlDebugAllocateHeap 18 0 [ 10] ntdll!RtlpValidateHeap 14 0 [ 11] ntdll!RtlpValidateHeapHeaders rax = 22a801 36 14 [ 10] ntdll!RtlpValidateHeap rax = 22a801 48 72 [ 9] ntdll!RtlDebugAllocateHeap 32 0 [ 10] ntdll!RtlAllocateHeap 34 0 [ 11] ntdll!RtlpAllocateHeap 2 0 [ 11] ntdll! ?? ::FNODOBFM::`string' 260 0 [ 11] ntdll!RtlpAllocateHeap 380 0 [ 12] ntdll!RtlCompareMemoryUlong rax = 5c0 785 380 [ 11] ntdll!RtlpAllocateHeap 6 0 [ 12] ntdll!RtlpGetExtraStuffPointer rax = 67e0d0 831 386 [ 11] ntdll!RtlpAllocateHeap rax = 67de00 50 1253 [ 10] ntdll!RtlAllocateHeap rax = 67de00 53 1375 [ 9] ntdll!RtlDebugAllocateHeap 14 0 [ 10] ntdll!RtlpValidateHeapHeaders rax = 67de01 72 1389 [ 9] ntdll!RtlDebugAllocateHeap 6 0 [ 10] ntdll!RtlpGetExtraStuffPointer rax = 67e0d0 96 1395 [ 9] ntdll!RtlDebugAllocateHeap 4 0 [ 10] ntdll!RtlGetNtGlobalFlags rax = 70 103 1399 [ 9] ntdll!RtlDebugAllocateHeap 17 0 [ 10] ntdll!RtlLeaveCriticalSection rax = 0 112 1416 [ 9] ntdll!RtlDebugAllocateHeap rax = 67de00 7 1528 [ 8] ntdll! ?? ::FNODOBFM::`string' 9 0 [ 8] ntdll!RtlpAllocateHeap rax = 67de00 50 1578 [ 7] ntdll!RtlAllocateHeap rax = 67de00 23 1637 [ 6] CLBCatQ!CComClass::Create 100 0 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 25 0 [ 8] msvcrt!memset rax = 67de84 104 26 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 25 0 [ 8] msvcrt!memset rax = 67de94 108 52 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 25 0 [ 8] msvcrt!memset rax = 67dea4 112 78 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 25 0 [ 8] msvcrt!memset rax = 67dec8 116 104 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 25 0 [ 8] msvcrt!memset rax = 67df6c 120 130 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 42 0 [ 8] msvcrt!memset rax = 67dee0 125 173 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 37 0 [ 8] msvcrt!memset rax = 67def8 129 211 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 37 0 [ 8] msvcrt!memset rax = 67df20 133 249 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 42 0 [ 8] msvcrt!memset rax = 67df48 139 292 [ 7] CLBCatQ!CComClass::CComClass 1 0 [ 8] CLBCatQ!memset 41 0 [ 8] msvcrt!memset rax = 67e088 145 334 [ 7] CLBCatQ!CComClass::CComClass rax = 67de00 30 2116 [ 6] CLBCatQ!CComClass::Create 4 0 [ 7] CLBCatQ!CComClass::AddRef rax = 1 37 2120 [ 6] CLBCatQ!CComClass::Create 37 0 [ 7] CLBCatQ!CComClass::Init 18 0 [ 8] CLBCatQ!IsComplusComponent 7 0 [ 9] CLBCatQ!IsVersionOneCLB 8 0 [ 10] CLBCatQ!GetCatalogVersionFromRegistry 12 0 [ 11] CLBCatQ!InitializeCatalogSectionIfNeeded rax = 0 22 12 [ 10] CLBCatQ!GetCatalogVersionFromRegistry rax = 0 15 34 [ 9] CLBCatQ!IsVersionOneCLB rax = 0 108 49 [ 8] CLBCatQ!IsComplusComponent rax = 0 56 157 [ 7] CLBCatQ!CComClass::Init 6 0 [ 8] CLBCatQ!_security_check_cookie rax = 80040154 66 163 [ 7] CLBCatQ!CComClass::Init rax = 80040154 43 2349 [ 6] CLBCatQ!CComClass::Create 11 0 [ 7] CLBCatQ!CComClass::Release 1 0 [ 8] CLBCatQ!CComClass::`scalar deleting destructor' 5 0 [ 8] CLBCatQ!CComClass::`vector deleting destructor' 53 0 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 58 10 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 67 20 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 72 30 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 81 40 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 86 50 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 95 60 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 100 70 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 109 80 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 114 90 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 121 100 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 123 110 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 125 120 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 127 130 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 129 140 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 131 150 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 133 160 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 135 170 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 137 180 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 139 190 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 141 200 [ 9] CLBCatQ!CComClass::~CComClass 10 0 [ 10] ole32!CoTaskMemFree rax = 7fe`ff9e3090 153 210 [ 9] CLBCatQ!CComClass::~CComClass 7 0 [ 9] CLBCatQ!ClearSoapActivationInfo 5 0 [ 10] OLEAUT32!SysFreeString rax = 7fe`ff9e3090 9 5 [ 9] CLBCatQ!ClearSoapActivationInfo 5 0 [ 10] OLEAUT32!SysFreeString rax = 7fe`ff9e3090 11 10 [ 9] CLBCatQ!ClearSoapActivationInfo 5 0 [ 10] OLEAUT32!SysFreeString rax = 7fe`ff9e3090 13 15 [ 9] CLBCatQ!ClearSoapActivationInfo 5 0 [ 10] OLEAUT32!SysFreeString rax = 7fe`ff9e3090 15 20 [ 9] CLBCatQ!ClearSoapActivationInfo 5 0 [ 10] OLEAUT32!SysFreeString rax = 7fe`ff9e3090 18 25 [ 9] CLBCatQ!ClearSoapActivationInfo rax = 7fe`ff9e3090 9 406 [ 8] CLBCatQ!CComClass::`vector deleting destructor' 12 0 [ 9] ole32!CoTaskMemFree 2 0 [ 10] kernel32!HeapFree 35 0 [ 11] ntdll!RtlFreeHeap 32 0 [ 12] ntdll!RtlpFreeHeap 4 0 [ 12] ntdll! ?? ::FNODOBFM::`string' 18 0 [ 13] ntdll!RtlDebugFreeHeap 9 0 [ 14] ntdll!RtlpCheckHeapSignature rax = 22ae01 28 9 [ 13] ntdll!RtlDebugFreeHeap 13 0 [ 14] ntdll!RtlEnterCriticalSection rax = 0 34 22 [ 13] ntdll!RtlDebugFreeHeap 18 0 [ 14] ntdll!RtlpValidateHeap 14 0 [ 15] ntdll!RtlpValidateHeapHeaders rax = 22aa01 36 14 [ 14] ntdll!RtlpValidateHeap rax = 22aa01 42 72 [ 13] ntdll!RtlDebugFreeHeap 53 0 [ 14] ntdll!RtlpValidateHeapEntry 2 0 [ 14] ntdll! ?? ::FNODOBFM::`string' 52 0 [ 15] ntdll!RtlpCheckBusyBlockTail 30 0 [ 16] ntdll!RtlCompareMemory rax = 10 62 30 [ 15] ntdll!RtlpCheckBusyBlockTail rax = 1 5 92 [ 14] ntdll! ?? ::FNODOBFM::`string' 16 0 [ 14] ntdll!RtlpValidateHeapEntry rax = 640001 47 238 [ 13] ntdll!RtlDebugFreeHeap 4 0 [ 14] ntdll!RtlGetNtGlobalFlags rax = 70 53 242 [ 13] ntdll!RtlDebugFreeHeap 35 0 [ 14] ntdll!RtlFreeHeap 32 0 [ 15] ntdll!RtlpFreeHeap 2 0 [ 15] ntdll! ?? ::FNODOBFM::`string' 185 0 [ 15] ntdll!RtlpFreeHeap 192 0 [ 16] ntdll!RtlCompareMemoryUlong rax = 2d0 644 192 [ 15] ntdll!RtlpFreeHeap rax = 2cf84801 42 870 [ 14] ntdll!RtlFreeHeap rax = 2cf84801 58 1154 [ 13] ntdll!RtlDebugFreeHeap 14 0 [ 14] ntdll!RtlpValidateHeapHeaders rax = 2cf84801 61 1168 [ 13] ntdll!RtlDebugFreeHeap 18 0 [ 14] ntdll!RtlpValidateHeap 14 0 [ 15] ntdll!RtlpValidateHeapHeaders rax = 22aa01 36 14 [ 14] ntdll!RtlpValidateHeap rax = 22aa01 66 1218 [ 13] ntdll!RtlDebugFreeHeap 17 0 [ 14] ntdll!RtlLeaveCriticalSection rax = 0 75 1235 [ 13] ntdll!RtlDebugFreeHeap rax = 1 6 1310 [ 12] ntdll! ?? ::FNODOBFM::`string' 9 0 [ 12] ntdll!RtlpFreeHeap rax = 1 42 1357 [ 11] ntdll!RtlFreeHeap rax = 1 5 1399 [ 10] kernel32!HeapFree rax = 1 14 1404 [ 9] ole32!CoTaskMemFree rax = 1 14 1824 [ 8] CLBCatQ!CComClass::`vector deleting destructor' rax = 67de00 15 1839 [ 7] CLBCatQ!CComClass::Release rax = 0 52 4203 [ 6] CLBCatQ!CComClass::Create rax = 80040154 18 4255 [ 5] CLBCatQ!CComCLBCatalog::GetClassInfoW rax = 80040154 162 9048 [ 4] ole32!CComCatalog::GetClassInfoInternal 15 0 [ 5] CLBCatQ!CLegacyCatalog::GetClassInfoW 18 0 [ 6] CLBCatQ!IsComplusLegacyComponent 7 0 [ 7] CLBCatQ!IsVersionOneCLB 8 0 [ 8] CLBCatQ!GetCatalogVersionFromRegistry 12 0 [ 9] CLBCatQ!InitializeCatalogSectionIfNeeded rax = 0 22 12 [ 8] CLBCatQ!GetCatalogVersionFromRegistry rax = 0 15 34 [ 7] CLBCatQ!IsVersionOneCLB rax = 0 34 49 [ 6] CLBCatQ!IsComplusLegacyComponent rax = 0 29 83 [ 5] CLBCatQ!CLegacyCatalog::GetClassInfoW rax = 80040154 203 9160 [ 4] ole32!CComCatalog::GetClassInfoInternal 33 0 [ 5] ole32!CComRegCatalog::GetClassInfoW 464 0 [ 6] ole32!StringCchCopyW rax = 0 51 464 [ 5] ole32!CComRegCatalog::GetClassInfoW 346 0 [ 6] ole32!GUIDToString rax = 2d 59 810 [ 5] ole32!CComRegCatalog::GetClassInfoW 5 0 [ 6] ADVAPI32!RegOpenKeyExW 50 0 [ 7] ADVAPI32!RegOpenKeyExInternalW 23 0 [ 8] ADVAPI32!MapPredefinedHandle rax = da 56 23 [ 7] ADVAPI32!RegOpenKeyExInternalW 68 0 [ 8] ntdll!RtlInitUnicodeStringEx rax = 0 71 91 [ 7] ADVAPI32!RegOpenKeyExInternalW (c20.11bc): Access violation - code c0000005 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ADVAPI32!LocalBaseRegOpenKey+0x25: 000007fe`ff8d9645 0f2970b8 movaps xmmword ptr [rax-48h],xmm6 ds:00000000`0022ace8=0000000005ec420100000000008f0000