ChildEBP RetAddr Args to Child 1800f600 75c66079 1800f634 1800f638 0b34a538 SHELL32!GetSyncTransferStatus+0x5d 1800f8c4 75a6e121 00000002 1800f900 00000000 SHELL32!`anonymous namespace'::_GetItemStatusHelper+0x277 1800f8e8 75a6e0ce 1800f994 1800f900 80004005 SHELL32!CBaseOverlayHandler::_GetItemStatus+0x50 1800f904 75a6b8b0 0b34a530 1800f994 00000011 SHELL32!CBaseOverlayHandler::IsMemberOf+0x1c 1800f93c 75bed394 1800f994 00000011 00000064 SHELL32!CFSIconOverlayManager::_GetFileOverlayInfo+0xa9 1800f958 75a6e2f6 002c65c0 1800f994 00000011 SHELL32!CFSIconOverlayManager::GetFileOverlayInfo+0x20 1800fba0 75a6e1b2 00000000 1800fc64 00000001 SHELL32!CFSFolder::_GetOverlayInfo+0x12c 1800fbb4 75caa022 0b3847a8 00000000 1800fc64 SHELL32!CFSFolder::GetOverlayIndex+0x21 1800fc20 75a6ae8f 08a02538 1800fc64 00000000 SHELL32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+0x56c5 1800fc40 61c12b49 089bf188 08a02538 1800fc64 SHELL32!CRegFolder::GetOverlayIndex+0x2d 1800fc5c 61c12ad3 ffffffff 08a02538 00000000 explorerframe!CNscOverlayTask::_Extract+0x32 1800fc78 61c0770f 08a05ef0 08a05788 00200000 explorerframe!CNscOverlayTask::InternalResumeRT+0x32 1800fc94 75a00665 00a05ef0 0000ea60 003128e0 explorerframe!CRunnableTask::Run+0xab 1800fcac 759b8a1b 1800fcfb 00265ed0 003128e0 SHELL32!CShellTask::TT_Run+0x2c 1800fd5c 759b8bc3 0abbf8b0 1800fd78 751f1f86 SHELL32!CShellTaskThread::ThreadProc+0x136 1800fd68 751f1f86 003128e0 089dfc88 1800fdf4 SHELL32!CShellTaskThread::s_ThreadProc+0x2b 1800fd78 77e40e92 0abbf8b0 e94ddd00 00265ed0 SHCORE!ExecuteWorkItemThreadProc+0xe 1800fdf4 77e3f6c0 0abbf8b0 089dfc88 e94ddf78 ntdll!RtlpTpWorkCallback+0xe6 1800ff8c 7721495d 00265ed0 1800ffdc 77e698ee ntdll!TppWorkerThread+0x487 1800ff98 77e698ee 00265ed0 e94ddf28 00000000 KERNEL32!BaseThreadInitThunk+0xe 1800ffdc 77e698c4 ffffffff 77e5e0e8 00000000 ntdll!__RtlUserThreadStart+0x20 1800ffec 00000000 77e35658 00265ed0 00000000 ntdll!_RtlUserThreadStart+0x1b