User:Mook/win64debug

From MozillaWiki
Jump to: navigation, search

WinDbg Command

This might be useful for windbg debugging.

!htrace -enable;gh;bp /1 ADVAPI32!RegOpenKeyExW "$$ print args info;!handle rcx;!htrace rcx;du rdx;r r8;r r9;dp rsp+28h;dp poi(rsp+28h);r rsp;bp /1 ADVAPI32!LocalBaseRegOpenKey \"r rcx;r rdx;gh;\";bp /1 ADVAPI32!LocalBaseRegOpenKey+0x25 \"r xmm6;\";gh;";gh;

Crash Stack

 # Child-SP          RetAddr           Call Site
00 00000000`0022ad30 000007fe`ff8d98c4 ADVAPI32!LocalBaseRegOpenKey
01 00000000`0022ad38 000007fe`ff8d9921 ADVAPI32!RegOpenKeyExInternalW+0x1f2
02 00000000`0022adc8 000007fe`ff9c44f5 ADVAPI32!RegOpenKeyExW+0x19
    rcx     = 000004fe   hKey              Type Key
    rdx     = 0022aeb8   lpSubKey          "CLSID\{4657278A-411B-11D2-839A-00C04FD918D0}"
    r8      = 0          ulOptions
    r9      = 00020019   samDesired        KEY_EXECUTE / KEY_READ
    rsp+28h = 0022ae68   phkResult         (null)
    rsp     = 0022ae00
03 00000000`0022ae08 000007fe`ff9c3bb7 ole32!CComRegCatalog::GetClassInfoW+0x121
04 00000000`0022b038 000007fe`ff9e3a93 ole32!CComCatalog::GetClassInfoInternal+0x3ec
05 00000000`0022b188 000007fe`ff9e3e50 ole32!CComCatalog::GetClassInfoW+0x27
06 00000000`0022b1d8 000007fe`ff9da518 ole32!LookForConfiguredClsid+0x80
07 00000000`0022b228 000007fe`ff9da2cb ole32!ICoCreateInstanceEx+0x198
08 00000000`0022b458 00000000`6437ff45 ole32!CoCreateInstance+0x17b
09 00000000`0022b548 00000000`643e0ef0 gkwidget!NSGetModule+0x3da1d
0a 00000000`0022b550 00000000`05ec41d0 gkwidget!NSGetModule+0x9e9c8
0b 00000000`0022b558 00000000`643c9938 0x5ec41d0
0c 00000000`0022b560 00000000`0022b588 gkwidget!NSGetModule+0x87410
0d 00000000`0022b568 00000000`05ec41d8 0x22b588
0e 00000000`0022b570 00000000`0022b4f8 0x5ec41d8
0f 00000000`0022b578 00000000`6434a645 0x22b4f8
10 00000000`0022b580 00000000`64349f3c gkwidget!NSGetModule+0x811d
11 00000000`0022b588 00000000`0022b698 gkwidget!NSGetModule+0x7a14
12 00000000`0022b590 00000000`6434a70c 0x22b698
13 00000000`0022b598 00000000`05ec41a0 gkwidget!NSGetModule+0x81e4

The handle in frame 2

0:000> !handle rcx
Handle 4fe
  Type         	Key

0:000> !htrace rcx
--------------------------------------
Handle = 0x00000000000004fc - OPEN
Thread ID = 0x0000000000000c0c, Process ID = 0x0000000000001304  

0x0000000077a95b9a: ntdll!NtOpenKey+0x000000000000000a
0x000007feff8d0670: ADVAPI32!RegOpenUserClassesRoot+0x00000000000001ed
0x000007feff9c1d17: ole32!OpenClassesRootKeyExW+0x000000000000009b
0x000007feff9cbaf6: ole32!GetRegCatalogObject+0x0000000000000066
0x000007feff9cc2be: ole32!CComCatalog::InitializeCatalogIfNeccessary+0x000000000000004a
0x000007feff9cc248: ole32!GetCatalogHelper+0x000000000000001c
0x000007feff9cc1c2: ole32!InitializeCatalogIfNecessary+0x000000000000003c
0x000007feff9e3e1d: ole32!LookForConfiguredClsid+0x0000000000000051
0x000007feff9da518: ole32!ICoCreateInstanceEx+0x0000000000000198
0x000007feff9da2cb: ole32!CoCreateInstance+0x000000000000017b
0x00000000712137d8: xpcom_core!Z25NS_NewFastLoadFileUpdaterPP21nsIObjectOutputStreamP15nsIOutputStreamP20nsIObjectIputStream+0x0000000000002049

disassembly around caller (frame 9)

00000000`6437fe56 55              push    rbp
00000000`6437fe57 4889e5          mov     rbp,rsp
00000000`6437fe5a 53              push    rbx
00000000`6437fe5b 4883ec38        sub     rsp,38h
00000000`6437fe5f 48894d10        mov     qword ptr [rbp+10h],rcx
00000000`6437fe63 48895518        mov     qword ptr [rbp+18h],rdx
00000000`6437fe67 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fe6b 4889c1          mov     rcx,rax
00000000`6437fe6e e835b70200      call    gkwidget!NSGetModule+0x69080 (00000000`643ab5a8)
00000000`6437fe73 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fe77 488d1532560500  lea     rdx,[gkwidget!NSGetModule+0x92f88 (00000000`643d54b0)]
00000000`6437fe7e 488910          mov     qword ptr [rax],rdx
00000000`6437fe81 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fe85 c7400800000000  mov     dword ptr [rax+8],0
00000000`6437fe8c 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fe90 c7400c00000000  mov     dword ptr [rax+0Ch],0
00000000`6437fe97 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fe9b c7401801000000  mov     dword ptr [rax+18h],1
00000000`6437fea2 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fea6 c7402000000000  mov     dword ptr [rax+20h],0
00000000`6437fead 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437feb1 488b5518        mov     rdx,qword ptr [rbp+18h]
00000000`6437feb5 48895028        mov     qword ptr [rax+28h],rdx
00000000`6437feb9 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437febd 48c7403800000000 mov     qword ptr [rax+38h],0
00000000`6437fec5 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fec9 488b4028        mov     rax,qword ptr [rax+28h]
00000000`6437fecd 488b00          mov     rax,qword ptr [rax]
00000000`6437fed0 4805c8010000    add     rax,1C8h
00000000`6437fed6 488b18          mov     rbx,qword ptr [rax]
00000000`6437fed9 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fedd 488b4028        mov     rax,qword ptr [rax+28h]
00000000`6437fee1 ba00000000      mov     edx,0
00000000`6437fee6 4889c1          mov     rcx,rax
00000000`6437fee9 ffd3            call    rbx
00000000`6437feeb 4889c2          mov     rdx,rax
00000000`6437feee 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fef2 48895010        mov     qword ptr [rax+10h],rdx
00000000`6437fef6 488b4510        mov     rax,qword ptr [rbp+10h]
00000000`6437fefa 4883c030        add     rax,30h
00000000`6437fefe 4889c2          mov     rdx,rax
00000000`6437ff01 488d0de80f0600  lea     rcx,[gkwidget!NSGetModule+0x9e9c8 (00000000`643e0ef0)]
00000000`6437ff08 e82b820200      call    gkwidget!NSGetModule+0x65c10 (00000000`643a8138)
00000000`6437ff0d 488b0584360700  mov     rax,qword ptr [gkwidget!NSGetModule+0xb1070 (00000000`643f3598)]
00000000`6437ff14 ffd0            call    rax                                                             ; ::DebugBreak();
00000000`6437ff16 488b4510        mov     rax,qword ptr [rbp+10h] ss:00000000`0022b598=0000000005cc41a0
00000000`6437ff1a 4883c038        add     rax,38h
00000000`6437ff1e 4889442420      mov     qword ptr [rsp+20h],rax
00000000`6437ff23 4c8d0d96990600  lea     r9,[gkwidget!NSGetModule+0xa7398 (00000000`643e98c0)]          ; IID_IDropTargetHelper
00000000`6437ff2a 41b801000000    mov     r8d,1                                                          ; CLSCTX_INPROC_SERVER
00000000`6437ff30 ba00000000      mov     edx,0                                                          ; (null)
00000000`6437ff35 488d0dc4900600  lea     rcx,[gkwidget!NSGetModule+0xa6ad8 (00000000`643e9000)]         ; CLSID_DragDropHelper
00000000`6437ff3c 488b05153a0700  mov     rax,qword ptr [gkwidget!NSGetModule+0xb1430 (00000000`643f3958)]
00000000`6437ff43 ffd0            call    rax                                                            ; ::CoCreateInstance();

call trace

0:000> wt -oR
   25     0 [  0] ole32!CoCreateInstance
    1     0 [  1]   ole32!memcmp
   23     0 [  1]   msvcrt!memcmp rax = 1
   78    24 [  0] ole32!CoCreateInstance
   27     0 [  1]   ole32!ICoCreateInstanceEx
   58     0 [  2]     ole32!ValidateAndRemapParams rax = 0
   41    58 [  1]   ole32!ICoCreateInstanceEx
   22     0 [  2]     ole32!IsInternalCLSID
    1     0 [  3]       ole32!memcmp
   23     0 [  3]       msvcrt!memcmp rax = ffffffff
   28    24 [  2]     ole32!IsInternalCLSID
    1     0 [  3]       ole32!memcmp
   23     0 [  3]       msvcrt!memcmp rax = 1
   34    48 [  2]     ole32!IsInternalCLSID
    6     0 [  3]       ole32!_security_check_cookie rax = 0
   42    54 [  2]     ole32!IsInternalCLSID rax = 0
   51   154 [  1]   ole32!ICoCreateInstanceEx
   18     0 [  2]     ole32!LookForConfiguredClsid
    8     0 [  3]       ole32!InitializeCatalogIfNecessary rax = 0
   30     8 [  2]     ole32!LookForConfiguredClsid
    8     0 [  3]       ole32!CComCatalog::GetClassInfoW
   85     0 [  4]         ole32!CComCatalog::GetClassInfoInternal
   11     0 [  5]           ole32!CComSxSCatalog::GetClassInfoW
   39     0 [  6]             kernel32!FindActCtxSectionGuid
    1     0 [  7]               kernel32!memset
   63     0 [  7]               ntdll!memset rax = 22aed8
   47    64 [  6]             kernel32!FindActCtxSectionGuid
   18     0 [  7]               ntdll!RtlFindActivationContextSectionGuid
   20     0 [  8]                 ntdll!RtlpFindActivationContextSection_CheckParameters rax = 0
   35    20 [  7]               ntdll!RtlFindActivationContextSectionGuid
   43     0 [  8]                 ntdll!RtlpFindNextActivationContextSection
   59     0 [  9]                   ntdll!RtlpLocateActivationContextSection
   37     0 [ 10]                     ntdll!bsearch
    8     0 [ 11]                       ntdll!RtlpCompareActivationContextDataTOCEntryById rax = 0
   50     8 [ 10]                     ntdll!bsearch rax = 2400d4
   92    58 [  9]                   ntdll!RtlpLocateActivationContextSection rax = 0
   68   150 [  8]                 ntdll!RtlpFindNextActivationContextSection rax = 0
   50   238 [  7]               ntdll!RtlFindActivationContextSectionGuid
   18     0 [  8]                 ntdll!RtlpFindGuidInSection
    6     0 [  9]                   ntdll!_security_check_cookie rax = c0150008
   20     6 [  8]                 ntdll!RtlpFindGuidInSection rax = c0150008
   59   264 [  7]               ntdll!RtlFindActivationContextSectionGuid
   45     0 [  8]                 ntdll!RtlpFindNextActivationContextSection
   59     0 [  9]                   ntdll!RtlpLocateActivationContextSection
   37     0 [ 10]                     ntdll!bsearch
    8     0 [ 11]                       ntdll!RtlpCompareActivationContextDataTOCEntryById rax = 0
   50     8 [ 10]                     ntdll!bsearch rax = 23011c
   92    58 [  9]                   ntdll!RtlpLocateActivationContextSection rax = 0
   68   150 [  8]                 ntdll!RtlpFindNextActivationContextSection rax = 0
   71   482 [  7]               ntdll!RtlFindActivationContextSectionGuid
   46     0 [  8]                 ntdll!RtlpFindGuidInSection
   37     0 [  9]                   ntdll!bsearch
    2     0 [ 10]                     ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid
   23     0 [ 10]                     ntdll!memcmp rax = 1
   57    25 [  9]                   ntdll!bsearch
    2     0 [ 10]                     ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid
   23     0 [ 10]                     ntdll!memcmp rax = 1
   74    50 [  9]                   ntdll!bsearch
    2     0 [ 10]                     ntdll!RtlpCompareActivationContextGuidSectionEntryByGuid
   23     0 [ 10]                     ntdll!memcmp rax = ffffffff
   87    75 [  9]                   ntdll!bsearch rax = 0
   61   162 [  8]                 ntdll!RtlpFindGuidInSection
    6     0 [  9]                   ntdll!_security_check_cookie rax = c0150008
   63   168 [  8]                 ntdll!RtlpFindGuidInSection rax = c0150008
   80   713 [  7]               ntdll!RtlFindActivationContextSectionGuid
   48     0 [  8]                 ntdll!RtlpFindNextActivationContextSection rax = c0150001
   93   761 [  7]               ntdll!RtlFindActivationContextSectionGuid rax = c0150008
   51   918 [  6]             kernel32!FindActCtxSectionGuid
    3     0 [  7]               kernel32!BaseSetLastNTError
    8     0 [  8]                 ntdll!RtlNtStatusToDosError
 1233     0 [  9]                   ntdll!RtlNtStatusToDosErrorNoTeb rax = 36b7
   10  1233 [  8]                 ntdll!RtlNtStatusToDosError rax = 36b7
    6  1243 [  7]               kernel32!BaseSetLastNTError
   14     0 [  8]                 ntdll!RtlSetLastWin32Error rax = 0
   10  1257 [  7]               kernel32!BaseSetLastNTError rax = 36b7
   63  2185 [  6]             kernel32!FindActCtxSectionGuid rax = 0
   14  2248 [  5]           ole32!CComSxSCatalog::GetClassInfoW
    3     0 [  6]             kernel32!GetLastError rax = 36b7
   21  2251 [  5]           ole32!CComSxSCatalog::GetClassInfoW rax = 80040154
  110  2272 [  4]         ole32!CComCatalog::GetClassInfoInternal
   64     0 [  5]           ole32!CCache::GetElement
    6     0 [  5]           ole32!alloca_probe
    6     0 [  6]             ole32!`anonymous namespace'::OurRtlAllocateStringRoutine
   32     0 [  6]             ntdll!RtlAllocateHeap
   34     0 [  7]               ntdll!RtlpAllocateHeap
    5     0 [  7]               ntdll! ?? ::FNODOBFM::`string'
   17     0 [  8]                 ntdll!RtlDebugAllocateHeap
    9     0 [  9]                   ntdll!RtlpCheckHeapSignature rax = 7fffffff`ffffff01
   38     9 [  8]                 ntdll!RtlDebugAllocateHeap
   51     0 [  9]                   ntdll!RtlEnterCriticalSection rax = 0
   44    60 [  8]                 ntdll!RtlDebugAllocateHeap
   18     0 [  9]                   ntdll!RtlpValidateHeap
   14     0 [ 10]                     ntdll!RtlpValidateHeapHeaders rax = 22a801
   36    14 [  9]                   ntdll!RtlpValidateHeap rax = 22a801
   48   110 [  8]                 ntdll!RtlDebugAllocateHeap
   32     0 [  9]                   ntdll!RtlAllocateHeap
   34     0 [ 10]                     ntdll!RtlpAllocateHeap
    2     0 [ 10]                     ntdll! ?? ::FNODOBFM::`string'
  250     0 [ 10]                     ntdll!RtlpAllocateHeap
   48     0 [ 11]                       ntdll!RtlCompareMemoryUlong rax = 90
  592    48 [ 10]                     ntdll!RtlpAllocateHeap
    6     0 [ 11]                       ntdll!RtlpGetExtraStuffPointer rax = 67c2f0
  638    54 [ 10]                     ntdll!RtlpAllocateHeap rax = 67c2c0
   50   728 [  9]                   ntdll!RtlAllocateHeap rax = 67c2c0
   53   888 [  8]                 ntdll!RtlDebugAllocateHeap
   14     0 [  9]                   ntdll!RtlpValidateHeapHeaders rax = 67c201
   72   902 [  8]                 ntdll!RtlDebugAllocateHeap
    6     0 [  9]                   ntdll!RtlpGetExtraStuffPointer rax = 67c2f0
   96   908 [  8]                 ntdll!RtlDebugAllocateHeap
    4     0 [  9]                   ntdll!RtlGetNtGlobalFlags rax = 70
  103   912 [  8]                 ntdll!RtlDebugAllocateHeap
   17     0 [  9]                   ntdll!RtlLeaveCriticalSection rax = 0
  112   929 [  8]                 ntdll!RtlDebugAllocateHeap rax = 67c2c0
    7  1041 [  7]               ntdll! ?? ::FNODOBFM::`string'
    9     0 [  7]               ntdll!RtlpAllocateHeap rax = 67c2c0
   50  1091 [  6]             ntdll!RtlAllocateHeap rax = 67c2c0
   12  1147 [  5]           ole32!alloca_probe
   11     0 [  5]           ole32!CCache::GetElement
    1     0 [  6]             ole32!memcpy
    1     0 [  6]             msvcrt!memcpy
   27     0 [  6]             msvcrt!memmove rax = 67c2c8
   40    29 [  5]           ole32!CCache::GetElement
    1     0 [  6]             ole32!memcpy
    1     0 [  6]             msvcrt!memcpy
   29     0 [  6]             msvcrt!memmove rax = 67c2d8
   55    60 [  5]           ole32!CCache::GetElement
   21     0 [  6]             ole32!CCache::GetElement
   14     0 [  7]               ntdll!RtlAcquireSRWLockShared rax = 0
   32    14 [  6]             ole32!CCache::GetElement
    8     0 [  7]               ntdll!RtlReleaseSRWLockShared rax = 11
   45    22 [  6]             ole32!CCache::GetElement rax = a0000002
   61   127 [  5]           ole32!CCache::GetElement
    1     0 [  5]           ole32!alloca_probe
    1     0 [  6]             ole32!`anonymous namespace'::OurRtlFreeStringRoutine
    5     0 [  6]             ole32!SafeAllocaFreeToHeap
   35     0 [  6]             ntdll!RtlFreeHeap
   32     0 [  7]               ntdll!RtlpFreeHeap
    4     0 [  7]               ntdll! ?? ::FNODOBFM::`string'
   18     0 [  8]                 ntdll!RtlDebugFreeHeap
    9     0 [  9]                   ntdll!RtlpCheckHeapSignature rax = 22af01
   28     9 [  8]                 ntdll!RtlDebugFreeHeap
   13     0 [  9]                   ntdll!RtlEnterCriticalSection rax = 0
   34    22 [  8]                 ntdll!RtlDebugFreeHeap
   18     0 [  9]                   ntdll!RtlpValidateHeap
   14     0 [ 10]                     ntdll!RtlpValidateHeapHeaders rax = 22ab01
   36    14 [  9]                   ntdll!RtlpValidateHeap rax = 22ab01
   42    72 [  8]                 ntdll!RtlDebugFreeHeap
   53     0 [  9]                   ntdll!RtlpValidateHeapEntry
    2     0 [  9]                   ntdll! ?? ::FNODOBFM::`string'
   52     0 [ 10]                     ntdll!RtlpCheckBusyBlockTail
   33     0 [ 11]                       ntdll!RtlCompareMemory rax = 10
   62    33 [ 10]                     ntdll!RtlpCheckBusyBlockTail rax = 1
    5    95 [  9]                   ntdll! ?? ::FNODOBFM::`string'
   16     0 [  9]                   ntdll!RtlpValidateHeapEntry rax = 640001
   47   241 [  8]                 ntdll!RtlDebugFreeHeap
    4     0 [  9]                   ntdll!RtlGetNtGlobalFlags rax = 70
   53   245 [  8]                 ntdll!RtlDebugFreeHeap
   35     0 [  9]                   ntdll!RtlFreeHeap
   32     0 [ 10]                     ntdll!RtlpFreeHeap
    2     0 [ 10]                     ntdll! ?? ::FNODOBFM::`string'
  185     0 [ 10]                     ntdll!RtlpFreeHeap
   28     0 [ 11]                       ntdll!RtlCompareMemoryUlong rax = 40
  469    28 [ 10]                     ntdll!RtlpFreeHeap rax = 2cf84801
   42   531 [  9]                   ntdll!RtlFreeHeap rax = 2cf84801
   58   818 [  8]                 ntdll!RtlDebugFreeHeap
   14     0 [  9]                   ntdll!RtlpValidateHeapHeaders rax = 2cf84801
   61   832 [  8]                 ntdll!RtlDebugFreeHeap
   18     0 [  9]                   ntdll!RtlpValidateHeap
   14     0 [ 10]                     ntdll!RtlpValidateHeapHeaders rax = 22ab01
   36    14 [  9]                   ntdll!RtlpValidateHeap rax = 22ab01
   66   882 [  8]                 ntdll!RtlDebugFreeHeap
   17     0 [  9]                   ntdll!RtlLeaveCriticalSection rax = 0
   75   899 [  8]                 ntdll!RtlDebugFreeHeap rax = 1
    6   974 [  7]               ntdll! ?? ::FNODOBFM::`string'
    9     0 [  7]               ntdll!RtlpFreeHeap rax = 1
   42  1021 [  6]             ntdll!RtlFreeHeap rax = 1
    3  1069 [  5]           ole32!alloca_probe
    4     0 [  5]           ole32!CCache::GetElement
    6     0 [  6]             ole32!_security_check_cookie rax = a0000002
   14     6 [  5]           ole32!CCache::GetElement rax = a0000002
  134  4775 [  4]         ole32!CComCatalog::GetClassInfoInternal
   16     0 [  5]           CLBCatQ!CComCLBCatalog::GetClassInfoW
   16     0 [  6]             CLBCatQ!CComClass::Create
    9     0 [  7]               ole32!CoTaskMemAlloc
   32     0 [  7]               ntdll!RtlAllocateHeap
   34     0 [  8]                 ntdll!RtlpAllocateHeap
    5     0 [  8]                 ntdll! ?? ::FNODOBFM::`string'
   17     0 [  9]                   ntdll!RtlDebugAllocateHeap
    9     0 [ 10]                     ntdll!RtlpCheckHeapSignature rax = 7fffffff`ffffff01
   38     9 [  9]                   ntdll!RtlDebugAllocateHeap
   13     0 [ 10]                     ntdll!RtlEnterCriticalSection rax = 0
   44    22 [  9]                   ntdll!RtlDebugAllocateHeap
   18     0 [ 10]                     ntdll!RtlpValidateHeap
   14     0 [ 11]                       ntdll!RtlpValidateHeapHeaders rax = 22a801
   36    14 [ 10]                     ntdll!RtlpValidateHeap rax = 22a801
   48    72 [  9]                   ntdll!RtlDebugAllocateHeap
   32     0 [ 10]                     ntdll!RtlAllocateHeap
   34     0 [ 11]                       ntdll!RtlpAllocateHeap
    2     0 [ 11]                       ntdll! ?? ::FNODOBFM::`string'
  260     0 [ 11]                       ntdll!RtlpAllocateHeap
  380     0 [ 12]                         ntdll!RtlCompareMemoryUlong rax = 5c0
  785   380 [ 11]                       ntdll!RtlpAllocateHeap
    6     0 [ 12]                         ntdll!RtlpGetExtraStuffPointer rax = 67e0d0
  831   386 [ 11]                       ntdll!RtlpAllocateHeap rax = 67de00
   50  1253 [ 10]                     ntdll!RtlAllocateHeap rax = 67de00
   53  1375 [  9]                   ntdll!RtlDebugAllocateHeap
   14     0 [ 10]                     ntdll!RtlpValidateHeapHeaders rax = 67de01
   72  1389 [  9]                   ntdll!RtlDebugAllocateHeap
    6     0 [ 10]                     ntdll!RtlpGetExtraStuffPointer rax = 67e0d0
   96  1395 [  9]                   ntdll!RtlDebugAllocateHeap
    4     0 [ 10]                     ntdll!RtlGetNtGlobalFlags rax = 70
  103  1399 [  9]                   ntdll!RtlDebugAllocateHeap
   17     0 [ 10]                     ntdll!RtlLeaveCriticalSection rax = 0
  112  1416 [  9]                   ntdll!RtlDebugAllocateHeap rax = 67de00
    7  1528 [  8]                 ntdll! ?? ::FNODOBFM::`string'
    9     0 [  8]                 ntdll!RtlpAllocateHeap rax = 67de00
   50  1578 [  7]               ntdll!RtlAllocateHeap rax = 67de00
   23  1637 [  6]             CLBCatQ!CComClass::Create
  100     0 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   25     0 [  8]                 msvcrt!memset rax = 67de84
  104    26 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   25     0 [  8]                 msvcrt!memset rax = 67de94
  108    52 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   25     0 [  8]                 msvcrt!memset rax = 67dea4
  112    78 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   25     0 [  8]                 msvcrt!memset rax = 67dec8
  116   104 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   25     0 [  8]                 msvcrt!memset rax = 67df6c
  120   130 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   42     0 [  8]                 msvcrt!memset rax = 67dee0
  125   173 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   37     0 [  8]                 msvcrt!memset rax = 67def8
  129   211 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   37     0 [  8]                 msvcrt!memset rax = 67df20
  133   249 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   42     0 [  8]                 msvcrt!memset rax = 67df48
  139   292 [  7]               CLBCatQ!CComClass::CComClass
    1     0 [  8]                 CLBCatQ!memset
   41     0 [  8]                 msvcrt!memset rax = 67e088
  145   334 [  7]               CLBCatQ!CComClass::CComClass rax = 67de00
   30  2116 [  6]             CLBCatQ!CComClass::Create
    4     0 [  7]               CLBCatQ!CComClass::AddRef rax = 1
   37  2120 [  6]             CLBCatQ!CComClass::Create
   37     0 [  7]               CLBCatQ!CComClass::Init
   18     0 [  8]                 CLBCatQ!IsComplusComponent
    7     0 [  9]                   CLBCatQ!IsVersionOneCLB
    8     0 [ 10]                     CLBCatQ!GetCatalogVersionFromRegistry
   12     0 [ 11]                       CLBCatQ!InitializeCatalogSectionIfNeeded rax = 0
   22    12 [ 10]                     CLBCatQ!GetCatalogVersionFromRegistry rax = 0
   15    34 [  9]                   CLBCatQ!IsVersionOneCLB rax = 0
  108    49 [  8]                 CLBCatQ!IsComplusComponent rax = 0
   56   157 [  7]               CLBCatQ!CComClass::Init
    6     0 [  8]                 CLBCatQ!_security_check_cookie rax = 80040154
   66   163 [  7]               CLBCatQ!CComClass::Init rax = 80040154
   43  2349 [  6]             CLBCatQ!CComClass::Create
   11     0 [  7]               CLBCatQ!CComClass::Release
    1     0 [  8]                 CLBCatQ!CComClass::`scalar deleting destructor'
    5     0 [  8]                 CLBCatQ!CComClass::`vector deleting destructor'
   53     0 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   58    10 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   67    20 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   72    30 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   81    40 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   86    50 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
   95    60 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  100    70 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  109    80 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  114    90 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  121   100 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  123   110 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  125   120 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  127   130 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  129   140 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  131   150 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  133   160 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  135   170 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  137   180 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  139   190 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  141   200 [  9]                   CLBCatQ!CComClass::~CComClass
   10     0 [ 10]                     ole32!CoTaskMemFree rax = 7fe`ff9e3090
  153   210 [  9]                   CLBCatQ!CComClass::~CComClass
    7     0 [  9]                   CLBCatQ!ClearSoapActivationInfo
    5     0 [ 10]                     OLEAUT32!SysFreeString rax = 7fe`ff9e3090
    9     5 [  9]                   CLBCatQ!ClearSoapActivationInfo
    5     0 [ 10]                     OLEAUT32!SysFreeString rax = 7fe`ff9e3090
   11    10 [  9]                   CLBCatQ!ClearSoapActivationInfo
    5     0 [ 10]                     OLEAUT32!SysFreeString rax = 7fe`ff9e3090
   13    15 [  9]                   CLBCatQ!ClearSoapActivationInfo
    5     0 [ 10]                     OLEAUT32!SysFreeString rax = 7fe`ff9e3090
   15    20 [  9]                   CLBCatQ!ClearSoapActivationInfo
    5     0 [ 10]                     OLEAUT32!SysFreeString rax = 7fe`ff9e3090
   18    25 [  9]                   CLBCatQ!ClearSoapActivationInfo rax = 7fe`ff9e3090
    9   406 [  8]                 CLBCatQ!CComClass::`vector deleting destructor'
   12     0 [  9]                   ole32!CoTaskMemFree
    2     0 [ 10]                     kernel32!HeapFree
   35     0 [ 11]                       ntdll!RtlFreeHeap
   32     0 [ 12]                         ntdll!RtlpFreeHeap
    4     0 [ 12]                         ntdll! ?? ::FNODOBFM::`string'
   18     0 [ 13]                           ntdll!RtlDebugFreeHeap
    9     0 [ 14]                             ntdll!RtlpCheckHeapSignature rax = 22ae01
   28     9 [ 13]                           ntdll!RtlDebugFreeHeap
   13     0 [ 14]                             ntdll!RtlEnterCriticalSection rax = 0
   34    22 [ 13]                           ntdll!RtlDebugFreeHeap
   18     0 [ 14]                             ntdll!RtlpValidateHeap
   14     0 [ 15]                               ntdll!RtlpValidateHeapHeaders rax = 22aa01
   36    14 [ 14]                             ntdll!RtlpValidateHeap rax = 22aa01
   42    72 [ 13]                           ntdll!RtlDebugFreeHeap
   53     0 [ 14]                             ntdll!RtlpValidateHeapEntry
    2     0 [ 14]                             ntdll! ?? ::FNODOBFM::`string'
   52     0 [ 15]                               ntdll!RtlpCheckBusyBlockTail
   30     0 [ 16]                                 ntdll!RtlCompareMemory rax = 10
   62    30 [ 15]                               ntdll!RtlpCheckBusyBlockTail rax = 1
    5    92 [ 14]                             ntdll! ?? ::FNODOBFM::`string'
   16     0 [ 14]                             ntdll!RtlpValidateHeapEntry rax = 640001
   47   238 [ 13]                           ntdll!RtlDebugFreeHeap
    4     0 [ 14]                             ntdll!RtlGetNtGlobalFlags rax = 70
   53   242 [ 13]                           ntdll!RtlDebugFreeHeap
   35     0 [ 14]                             ntdll!RtlFreeHeap
   32     0 [ 15]                               ntdll!RtlpFreeHeap
    2     0 [ 15]                               ntdll! ?? ::FNODOBFM::`string'
  185     0 [ 15]                               ntdll!RtlpFreeHeap
  192     0 [ 16]                                 ntdll!RtlCompareMemoryUlong rax = 2d0
  644   192 [ 15]                               ntdll!RtlpFreeHeap rax = 2cf84801
   42   870 [ 14]                             ntdll!RtlFreeHeap rax = 2cf84801
   58  1154 [ 13]                           ntdll!RtlDebugFreeHeap
   14     0 [ 14]                             ntdll!RtlpValidateHeapHeaders rax = 2cf84801
   61  1168 [ 13]                           ntdll!RtlDebugFreeHeap
   18     0 [ 14]                             ntdll!RtlpValidateHeap
   14     0 [ 15]                               ntdll!RtlpValidateHeapHeaders rax = 22aa01
   36    14 [ 14]                             ntdll!RtlpValidateHeap rax = 22aa01
   66  1218 [ 13]                           ntdll!RtlDebugFreeHeap
   17     0 [ 14]                             ntdll!RtlLeaveCriticalSection rax = 0
   75  1235 [ 13]                           ntdll!RtlDebugFreeHeap rax = 1
    6  1310 [ 12]                         ntdll! ?? ::FNODOBFM::`string'
    9     0 [ 12]                         ntdll!RtlpFreeHeap rax = 1
   42  1357 [ 11]                       ntdll!RtlFreeHeap rax = 1
    5  1399 [ 10]                     kernel32!HeapFree rax = 1
   14  1404 [  9]                   ole32!CoTaskMemFree rax = 1
   14  1824 [  8]                 CLBCatQ!CComClass::`vector deleting destructor' rax = 67de00
   15  1839 [  7]               CLBCatQ!CComClass::Release rax = 0
   52  4203 [  6]             CLBCatQ!CComClass::Create rax = 80040154
   18  4255 [  5]           CLBCatQ!CComCLBCatalog::GetClassInfoW rax = 80040154
  162  9048 [  4]         ole32!CComCatalog::GetClassInfoInternal
   15     0 [  5]           CLBCatQ!CLegacyCatalog::GetClassInfoW
   18     0 [  6]             CLBCatQ!IsComplusLegacyComponent
    7     0 [  7]               CLBCatQ!IsVersionOneCLB
    8     0 [  8]                 CLBCatQ!GetCatalogVersionFromRegistry
   12     0 [  9]                   CLBCatQ!InitializeCatalogSectionIfNeeded rax = 0
   22    12 [  8]                 CLBCatQ!GetCatalogVersionFromRegistry rax = 0
   15    34 [  7]               CLBCatQ!IsVersionOneCLB rax = 0
   34    49 [  6]             CLBCatQ!IsComplusLegacyComponent rax = 0
   29    83 [  5]           CLBCatQ!CLegacyCatalog::GetClassInfoW rax = 80040154
  203  9160 [  4]         ole32!CComCatalog::GetClassInfoInternal
   33     0 [  5]           ole32!CComRegCatalog::GetClassInfoW
  464     0 [  6]             ole32!StringCchCopyW rax = 0
   51   464 [  5]           ole32!CComRegCatalog::GetClassInfoW
  346     0 [  6]             ole32!GUIDToString rax = 2d
   59   810 [  5]           ole32!CComRegCatalog::GetClassInfoW
    5     0 [  6]             ADVAPI32!RegOpenKeyExW
   50     0 [  7]               ADVAPI32!RegOpenKeyExInternalW
   23     0 [  8]                 ADVAPI32!MapPredefinedHandle rax = da
   56    23 [  7]               ADVAPI32!RegOpenKeyExInternalW
   68     0 [  8]                 ntdll!RtlInitUnicodeStringEx rax = 0
   71    91 [  7]               ADVAPI32!RegOpenKeyExInternalW
(c20.11bc): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
ADVAPI32!LocalBaseRegOpenKey+0x25:
000007fe`ff8d9645 0f2970b8        movaps  xmmword ptr [rax-48h],xmm6 ds:00000000`0022ace8=0000000005ec420100000000008f0000