|
|
发表于 2018-5-19 23:57:15
|
显示全部楼层
2014.05.145683
Environment = 1920x1080|32|Windows 10 Pro
Type = 0xC0000005
Address = 0x470913
LineNum = 0(0)
Registers:
EAX=00000000 EBX=0000000A ECX=00000000 EDX=0036C000
ESI=00000000 EDI=77417450 ESP=0019F6B0 EBP=0019F6B4
Current Modules:
==>
Name = 华夏.exe, Base = 0x400000, Top = 0xBBC000, Size = 8110080
Name = ntdll.dll, Base = 0x77560000, Top = 0x776E3000, Size = 1585152
Name = KERNEL32.DLL, Base = 0x773F0000, Top = 0x774D0000, Size = 917504
Name = KERNELBASE.dll, Base = 0x74330000, Top = 0x744D1000, Size = 1708032
Name = apphelp.dll, Base = 0x71D20000, Top = 0x71DB2000, Size = 598016
Name = comctl32.dll, Base = 0x730F0000, Top = 0x73184000, Size = 606208
Name = ADVAPI32.dll, Base = 0x75000000, Top = 0x75077000, Size = 487424
Name = msvcrt.dll, Base = 0x771F0000, Top = 0x772AE000, Size = 778240
Name = sechost.dll, Base = 0x756C0000, Top = 0x75701000, Size = 266240
Name = RPCRT4.dll, Base = 0x755F0000, Top = 0x756B1000, Size = 790528
Name = SspiCli.dll, Base = 0x74020000, Top = 0x7403E000, Size = 122880
Name = CRYPTBASE.dll, Base = 0x74010000, Top = 0x7401A000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x75800000, Top = 0x7585A000, Size = 368640
Name = GDI32.dll, Base = 0x75DC0000, Top = 0x75DEB000, Size = 176128
Name = gdi32full.dll, Base = 0x753A0000, Top = 0x754FB000, Size = 1421312
Name = USER32.dll, Base = 0x740C0000, Top = 0x7421F000, Size = 1437696
Name = win32u.dll, Base = 0x771D0000, Top = 0x771E5000, Size = 86016
Name = IMM32.DLL, Base = 0x758F0000, Top = 0x75915000, Size = 151552
Name = winmm.dll, Base = 0x72C50000, Top = 0x72C74000, Size = 147456
Name = WINMMBASE.dll, Base = 0x72B60000, Top = 0x72B83000, Size = 143360
Name = cfgmgr32.dll, Base = 0x75D30000, Top = 0x75D66000, Size = 221184
Name = MSIMG32.dll, Base = 0x707E0000, Top = 0x707E6000, Size = 24576
Name = COMDLG32.dll, Base = 0x75710000, Top = 0x757F5000, Size = 937984
Name = combase.dll, Base = 0x75920000, Top = 0x75B31000, Size = 2166784
Name = ucrtbase.dll, Base = 0x77310000, Top = 0x773F0000, Size = 917504
Name = shcore.dll, Base = 0x774D0000, Top = 0x77558000, Size = 557056
Name = SHLWAPI.dll, Base = 0x75D70000, Top = 0x75DB6000, Size = 286720
Name = SHELL32.dll, Base = 0x75DF0000, Top = 0x771C9000, Size = 20811776
Name = windows.storage.dll, Base = 0x74A90000, Top = 0x74FFE000, Size = 5693440
Name = powrprof.dll, Base = 0x772B0000, Top = 0x772F5000, Size = 282624
Name = kernel.appcore.dll, Base = 0x74A80000, Top = 0x74A8D000, Size = 53248
Name = profapi.dll, Base = 0x77300000, Top = 0x7730F000, Size = 61440
Name = WINSPOOL.DRV, Base = 0x72F30000, Top = 0x72F9A000, Size = 434176
Name = bcrypt.dll, Base = 0x73FA0000, Top = 0x73FBB000, Size = 110592
Name = ole32.dll, Base = 0x75500000, Top = 0x755EA000, Size = 958464
Name = OLEAUT32.dll, Base = 0x752F0000, Top = 0x75384000, Size = 606208
Name = msvcp_win.dll, Base = 0x74040000, Top = 0x740BB000, Size = 503808
Name = oledlg.dll, Base = 0x70540000, Top = 0x7055F000, Size = 126976
Name = urlmon.dll, Base = 0x72630000, Top = 0x727C4000, Size = 1654784
Name = iertutil.dll, Base = 0x723B0000, Top = 0x725D9000, Size = 2265088
Name = gdiplus.dll, Base = 0x6F2D0000, Top = 0x6F439000, Size = 1478656
Name = WS2_32.dll, Base = 0x74220000, Top = 0x74283000, Size = 405504
Name = PSAPI.DLL, Base = 0x75390000, Top = 0x75396000, Size = 24576
Name = dbghelp.dll, Base = 0x72FA0000, Top = 0x730E5000, Size = 1331200
Name = SensApi.dll, Base = 0x707B0000, Top = 0x707B8000, Size = 32768
Name = WININET.dll, Base = 0x73C50000, Top = 0x73E7E000, Size = 2285568
Name = OLEACC.dll, Base = 0x6A410000, Top = 0x6A464000, Size = 344064
Name = UxTheme.dll, Base = 0x72110000, Top = 0x72185000, Size = 479232
Name = dwmapi.dll, Base = 0x722E0000, Top = 0x722FF000, Size = 126976
Name = knb3rdhmpg.dll, Base = 0x10000000, Top = 0x100A7000, Size = 684032
Name = VERSION.dll, Base = 0x73C30000, Top = 0x73C38000, Size = 32768
Name = MSCTF.dll, Base = 0x751B0000, Top = 0x752E5000, Size = 1265664
Name = clbcatq.dll, Base = 0x75860000, Top = 0x758E4000, Size = 540672
Name = ieframe.dll, Base = 0x6C320000, Top = 0x6CEC8000, Size = 12222464
Name = NETAPI32.dll, Base = 0x73E80000, Top = 0x73E93000, Size = 77824
Name = NETUTILS.DLL, Base = 0x72B90000, Top = 0x72B9B000, Size = 45056
Name = WKSCLI.DLL, Base = 0x72B50000, Top = 0x72B60000, Size = 65536
Name = comctl32.dll, Base = 0x72CD0000, Top = 0x72EDA000, Size = 2138112
Name = dataexchange.dll, Base = 0x703C0000, Top = 0x70404000, Size = 278528
Name = d3d11.dll, Base = 0x6E990000, Top = 0x6EBBF000, Size = 2289664
Name = dcomp.dll, Base = 0x6C200000, Top = 0x6C313000, Size = 1126400
Name = dxgi.dll, Base = 0x72080000, Top = 0x72104000, Size = 540672
Name = twinapi.appcore.dll, Base = 0x6E120000, Top = 0x6E211000, Size = 987136
Name = sxs.dll, Base = 0x70600000, Top = 0x70681000, Size = 528384
Name = QXDLbs0q.dll, Base = 0x704A0000, Top = 0x704DB000, Size = 241664
Name = mswsock.dll, Base = 0x739C0000, Top = 0x73A0E000, Size = 319488
Name = DNSAPI.dll, Base = 0x73650000, Top = 0x736CC000, Size = 507904
Name = NSI.dll, Base = 0x75B40000, Top = 0x75B47000, Size = 28672
Name = IPHLPAPI.DLL, Base = 0x73A90000, Top = 0x73ABF000, Size = 192512
Name = napinsp.dll, Base = 0x71F90000, Top = 0x71FA2000, Size = 73728
Name = pnrpnsp.dll, Base = 0x70B60000, Top = 0x70B76000, Size = 90112
Name = NLAapi.dll, Base = 0x70B40000, Top = 0x70B54000, Size = 81920
Name = winrnr.dll, Base = 0x722C0000, Top = 0x722CC000, Size = 49152
Name = mdnsNSP.dll, Base = 0x72600000, Top = 0x72621000, Size = 135168
Name = wshbth.dll, Base = 0x70B20000, Top = 0x70B31000, Size = 69632
Name = fwpuclnt.dll, Base = 0x72190000, Top = 0x721D9000, Size = 299008
Name = rasadhlp.dll, Base = 0x72260000, Top = 0x72268000, Size = 32768
Name = dhcpcsvc.DLL, Base = 0x725E0000, Top = 0x725F4000, Size = 81920
Name = PROPSYS.dll, Base = 0x6FDF0000, Top = 0x6FF3F000, Size = 1372160
Name = ActXPrxy.dll, Base = 0x6C070000, Top = 0x6C1F6000, Size = 1597440
Code Before:
9D 52 FF FF 59 8B C6 5E 5D C2 04 00 8B FF 55 8B EC 56 8B F1
Current Code:
83 7E 6C 00 75 2F FF 76 20 90 E8 4E B0 C6 73 8D 48 01 51 8B
Call Stack:
00449215 ===> 华夏.exe
Current Stack:
[0019F6B0] = 00000000
[0019F6B4] = 0019F708
[0019F6B8] = 00449215
[0019F6BC] = 0019F6F4
[0019F6C0] = B1D5242E
[0019F6C4] = 05928818
[0019F6C8] = 05928AC8
[0019F6CC] = 00000000
[0019F6D0] = 00C65320
[0019F6D4] = 007B1778
[0019F6D8] = 05928818
[0019F6DC] = 05903E28
[0019F6E0] = 0487AFC8
[0019F6E4] = 04871280
[0019F6E8] = 0487AD88
[0019F6EC] = 007AF814
[0019F6F0] = 04871280
[0019F6F4] = 007A0BF0
[0019F6F8] = 05986BD8
[0019F6FC] = 0019F840
[0019F700] = 006C23F0
[0019F704] = 00000001
[0019F708] = 0019F84C
[0019F70C] = 00460326
[0019F710] = B1D52B6A
[0019F714] = 0487BA18
[0019F718] = 05928AC8
[0019F71C] = 00000000
[0019F720] = 0048DA50
[0019F724] = 00469B96
[0019F728] = 00469B2D
[0019F72C] = 0046EE40
[0019F730] = 0598A7A8
[0019F734] = 004713D4
[0019F738] = 0000001E
[0019F73C] = 00000000
[0019F740] = 00000000
[0019F744] = 00400000
[0019F748] = 000007D1
[0019F74C] = 001102D8
[0019F750] = 0000001E
[0019F754] = 0000027E
[0019F758] = 00000000
[0019F75C] = 00000000
[0019F760] = 52000000
[0019F764] = 0071DA14
[0019F768] = 006F40A8
[0019F76C] = 00000000
[0019F770] = 0019F7B0
[0019F774] = 0046E0D9
[0019F778] = 00000000
[0019F77C] = 00000000
[0019F780] = 0071DA14
[0019F784] = 52000000
[0019F788] = 00000000
[0019F78C] = 00000000
[0019F790] = 0000027E
[0019F794] = 0000001E
[0019F798] = 001102D8
[0019F79C] = 000007D1
[0019F7A0] = 00000000
[0019F7A4] = 000007D1
[0019F7A8] = 0598A894
[0019F7AC] = FFFFFFFF
[0019F7B0] = 0019F7F4
[0019F7B4] = 005ADE5F
[0019F7B8] = 00000000
[0019F7BC] = 0071DA14
[0019F7C0] = 52000000
[0019F7C4] = 0598A894
[0019F7C8] = 0593A020
[0019F7CC] = 000007D1
[0019F7D0] = 00000000
[0019F7D4] = B1D524D2
[0019F7D8] = 05928AC8
[0019F7DC] = 00000000
[0019F7E0] = 05928AC8
[0019F7E4] = 0487BA18
[0019F7E8] = 0019F80C
[0019F7EC] = 006D2C98
[0019F7F0] = FFFFFFFF
[0019F7F4] = 0019F818
[0019F7F8] = 0059F55C
[0019F7FC] = B1D52B3E
[0019F800] = 05928AC8
[0019F804] = 00000000
[0019F808] = B1D52B56
[0019F80C] = 05928AC8
[0019F810] = 005A798C
[0019F814] = FFFFFFFF
[0019F818] = 0019F844
[0019F81C] = 0059F5E0
[0019F820] = 0598A81C
[0019F824] = 05944E08
[0019F828] = B1D52B62
[0019F82C] = 05928AC8
[0019F830] = 00000004
[0019F834] = 0019F820
[0019F838] = 0019F864
[0019F83C] = B1D52B6A
[0019F840] = 0019F86C
[0019F844] = 006C4999
[0019F848] = FFFFFFFF
[0019F84C] = 0019F878
[0019F850] = 00449892
[0019F854] = B1D52B5E
[0019F858] = 0487BA18
[0019F85C] = 05928AC8
[0019F860] = FFFFFFFF
[0019F864] = 0019F8AC
[0019F868] = 006D3C10
[0019F86C] = 0019F8AC
[0019F870] = 006C2478
[0019F874] = FFFFFFFF
[0019F878] = 0019F8B8
[0019F87C] = 005A3155
[0019F880] = B1D52B9E
[0019F884] = 00000000
[0019F888] = 05928AC8
[0019F88C] = 001102D8
[0019F890] = 05928AC8
[0019F894] = 0487BA18
[0019F898] = 059016C0
[0019F89C] = 0593ECA0
[0019F8A0] = 05928818
[0019F8A4] = 0487BA18
[0019F8A8] = 0019F878
[0019F8AC] = 0019F9D0
[0019F8B0] = 006D3358
[0019F8B4] = 00000003
[0019F8B8] = 0019F8DC
[0019F8BC] = 0059BEE8
[0019F8C0] = 00000110
[0019F8C4] = 001102D8
[0019F8C8] = 00000000
[0019F8CC] = 0019F878
[0019F8D0] = 00000110
[0019F8D4] = 05928818
[0019F8D8] = 0047B36E
[0019F8DC] = 0019F904
[0019F8E0] = 0045D9DE
[0019F8E4] = 001102D8
[0019F8E8] = 00000110
[0019F8EC] = 0019F910
[0019F8F0] = 0019F914
[0019F8F4] = 0019F900
[0019F8F8] = 05928818
[0019F8FC] = 05928818
[0019F900] = 00000001
[0019F904] = 0019F9DC
[0019F908] = 0046ECED
[0019F90C] = 00000110
[0019F910] = 001102D8
[0019F914] = 00000000
[0019F918] = 05928818
[0019F91C] = 0047B3C7
[0019F920] = 05928818
[0019F924] = 00000000
[0019F928] = 00471A79
[0019F92C] = 001102D8
[0019F930] = 00000000
[0019F934] = B1D52AFA
[0019F938] = 00000110
[0019F93C] = 05928818
[0019F940] = 00C65320
[0019F944] = 40000501
[0019F948] = 00000000
[0019F94C] = 00000000
[0019F950] = 00000000
[0019F954] = 0000018D
[0019F958] = 740D3535
[0019F95C] = 00000000
[0019F960] = 00000000
[0019F964] = 00000000
[0019F968] = 00000000
[0019F96C] = 00000000
[0019F970] = 00000000
[0019F974] = 00000000
[0019F978] = 00000000
[0019F97C] = 01525260
[0019F980] = 01525260
[0019F984] = 00000000
[0019F988] = FFFFFFF0
[0019F98C] = 001102D8
[0019F990] = 00C65320
[0019F994] = 00000000
[0019F998] = 00000000
[0019F99C] = 0019F9E4
[0019F9A0] = 740E236F
[0019F9A4] = 01525260
[0019F9A8] = 00000000
[0019F9AC] = 510AA868
[0019F9B0] = 00000110
[0019F9B4] = 05928818
[0019F9B8] = 00C65320
[0019F9BC] = 00000000
[0019F9C0] = 00000000
[0019F9C4] = 007AF918
[0019F9C8] = 7FFFFFFF
[0019F9CC] = 00000000
|
|
[复制链接]
x 0
狗仔卡
显身卡