第1个回答 2022-02-08
°´¼ü¾«Áé 9.63.12960°æ
Environment = 1280x1024|32|Windows Server 2012 R2 Datacenter
Type = 0xC0000005
Address = 0x72A8287C
LineNum = 25(34)
Registers:
EAX=00000000 EBX=04C796A0 ECX=00000000 EDX=0F347990
ESI=008F6DE0 EDI=0F347990 ESP=059FFE84 EBP=059FFE88
Current Modules:
Name = °´¼ü¾«Áé9.exe, Base = 0x400000, Top = 0xEDB000, Size = 11382784
Name = ntdll.dll, Base = 0x773B0000, Top = 0x7751F000, Size = 1503232
Name = KERNEL32.DLL, Base = 0x771A0000, Top = 0x772E0000, Size = 1310720
Name = KERNELBASE.dll, Base = 0x74F80000, Top = 0x75057000, Size = 880640
Name = comctl32.dll, Base = 0x73B40000, Top = 0x73D47000, Size = 2125824
Name = msvcrt.dll, Base = 0x74CF0000, Top = 0x74DB3000, Size = 798720
Name = GDI32.dll, Base = 0x75790000, Top = 0x7589D000, Size = 1101824
Name = USER32.dll, Base = 0x74B60000, Top = 0x74CB4000, Size = 1392640
Name = IMM32.DLL, Base = 0x74CC0000, Top = 0x74CE7000, Size = 159744
Name = MSCTF.dll, Base = 0x75540000, Top = 0x75652000, Size = 1122304
Name = ADVAPI32.dll, Base = 0x75980000, Top = 0x759FD000, Size = 512000
Name = sechost.dll, Base = 0x75A00000, Top = 0x75A41000, Size = 266240
Name = RPCRT4.dll, Base = 0x756D0000, Top = 0x7578B000, Size = 765952
Name = SspiCli.dll, Base = 0x75520000, Top = 0x7553E000, Size = 122880
Name = CRYPTBASE.dll, Base = 0x74B20000, Top = 0x74B2A000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x74AC0000, Top = 0x74B14000, Size = 344064
Name = winmm.dll, Base = 0x72BE0000, Top = 0x72C03000, Size = 143360
Name = WINMMBASE.dll, Base = 0x72BB0000, Top = 0x72BD3000, Size = 143360
Name = cfgmgr32.dll, Base = 0x75C70000, Top = 0x75CAC000, Size = 245760
Name = DEVOBJ.dll, Base = 0x72B80000, Top = 0x72BA1000, Size = 135168
==>
Name = MFC42.DLL, Base = 0x72A50000, Top = 0x72B7F000, Size = 1241088
Name = ole32.dll, Base = 0x751E0000, Top = 0x75309000, Size = 1216512
Name = OLEAUT32.dll, Base = 0x758A0000, Top = 0x75937000, Size = 618496
Name = ODBC32.dll, Base = 0x729A0000, Top = 0x72A49000, Size = 692224
Name = combase.dll, Base = 0x75060000, Top = 0x751DD000, Size = 1560576
Name = SHELL32.dll, Base = 0x75D10000, Top = 0x76FCE000, Size = 19652608
Name = SHLWAPI.dll, Base = 0x75CB0000, Top = 0x75CF5000, Size = 282624
Name = urlmon.dll, Base = 0x73F40000, Top = 0x74095000, Size = 1396736
Name = NETAPI32.dll, Base = 0x73DC0000, Top = 0x73DD3000, Size = 77824
Name = iertutil.dll, Base = 0x743D0000, Top = 0x74609000, Size = 2330624
Name = WININET.dll, Base = 0x74620000, Top = 0x74A57000, Size = 4419584
Name = netutils.dll, Base = 0x73DB0000, Top = 0x73DBA000, Size = 40960
Name = srvcli.dll, Base = 0x73D90000, Top = 0x73DAD000, Size = 118784
Name = wkscli.dll, Base = 0x73D70000, Top = 0x73D81000, Size = 69632
Name = USERENV.dll, Base = 0x743B0000, Top = 0x743CB000, Size = 110592
Name = profapi.dll, Base = 0x743A0000, Top = 0x743AF000, Size = 61440
Name = MSVCP60.dll, Base = 0x72930000, Top = 0x7299F000, Size = 454656
Name = gdiplus.dll, Base = 0x727C0000, Top = 0x72930000, Size = 1507328
Name = dbghelp.dll, Base = 0x73DF0000, Top = 0x73F31000, Size = 1314816
Name = WS2_32.dll, Base = 0x75A50000, Top = 0x75A9F000, Size = 323584
Name = NSI.dll, Base = 0x75D00000, Top = 0x75D07000, Size = 28672
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = UxTheme.dll, Base = 0x726D0000, Top = 0x727BD000, Size = 970752
Name = refs.dll, Base = 0x72690000, Top = 0x726C8000, Size = 229376
Name = WINSPOOL.DRV, Base = 0x72620000, Top = 0x72686000, Size = 417792
Name = DINPUT8.dll, Base = 0x725E0000, Top = 0x72616000, Size = 221184
Name = MSIMG32.dll, Base = 0x73720000, Top = 0x73726000, Size = 24576
Name = comdlg32.dll, Base = 0x74DC0000, Top = 0x74E5B000, Size = 634880
Name = SHCORE.DLL, Base = 0x74300000, Top = 0x7438C000, Size = 573440
Name = OLEPRO32.DLL, Base = 0x725C0000, Top = 0x725D8000, Size = 98304
Name = dwmapi.dll, Base = 0x725A0000, Top = 0x725BA000, Size = 106496
Name = kernel.appcore.dll, Base = 0x742F0000, Top = 0x742F9000, Size = 36864
Name = CRYPTSP.dll, Base = 0x739A0000, Top = 0x739B9000, Size = 102400
Name = rsaenh.dll, Base = 0x73970000, Top = 0x739A0000, Size = 196608
Name = bcrypt.dll, Base = 0x739C0000, Top = 0x739DE000, Size = 122880
Name = asycfilt.dll, Base = 0x72580000, Top = 0x72596000, Size = 90112
Name = Secur32.dll, Base = 0x74390000, Top = 0x7439A000, Size = 40960
Name = ondemandconnroutehelper.dll, Base = 0x742E0000, Top = 0x742EA000, Size = 40960
Name = winhttp.dll, Base = 0x74240000, Top = 0x742DE000, Size = 647168
Name = mswsock.dll, Base = 0x741B0000, Top = 0x741FB000, Size = 307200
Name = IPHLPAPI.DLL, Base = 0x74A60000, Top = 0x74A80000, Size = 131072
Name = WINNSI.DLL, Base = 0x74610000, Top = 0x74618000, Size = 32768
Name = DNSAPI.dll, Base = 0x74130000, Top = 0x741AE000, Size = 516096
Name = rasadhlp.dll, Base = 0x740C0000, Top = 0x740C8000, Size = 32768
Name = fwpuclnt.dll, Base = 0x740D0000, Top = 0x74116000, Size = 286720
Name = clbcatq.dll, Base = 0x74EF0000, Top = 0x74F7D000, Size = 577536
Name = ieframe.dll, Base = 0x71830000, Top = 0x72573000, Size = 13905920
Name = sxs.dll, Base = 0x717B0000, Top = 0x7182E000, Size = 516096
Name = msscript.ocx, Base = 0x71790000, Top = 0x717AC000, Size = 114688
Name = qdisp.dll, Base = 0x5720000, Top = 0x572A000, Size = 40960
Name = vbscript.dll, Base = 0x71710000, Top = 0x7178E000, Size = 516096
Name = PROPSYS.dll, Base = 0x73A00000, Top = 0x73B3A000, Size = 1286144
Name = apphelp.dll, Base = 0x738A0000, Top = 0x73940000, Size = 655360
Name = mshtml.dll, Base = 0x702A0000, Top = 0x71704000, Size = 21381120
Name = MLANG.dll, Base = 0x70260000, Top = 0x70293000, Size = 208896
Name = windowscodecs.dll, Base = 0x700F0000, Top = 0x7025B000, Size = 1486848
Name = CRYPT32.dll, Base = 0x75320000, Top = 0x75520000, Size = 2097152
Name = MSASN1.dll, Base = 0x756C0000, Top = 0x756CE000, Size = 57344
Name = schannel.dll, Base = 0x70090000, Top = 0x700ED000, Size = 380928
Name = WINTRUST.dll, Base = 0x75940000, Top = 0x7597D000, Size = 249856
Name = gpapi.dll, Base = 0x70070000, Top = 0x70090000, Size = 131072
Name = ncrypt.dll, Base = 0x70050000, Top = 0x70070000, Size = 131072
Name = NTASN1.dll, Base = 0x70020000, Top = 0x70049000, Size = 167936
Name = cryptnet.dll, Base = 0x6FFF0000, Top = 0x70015000, Size = 151552
Name = WLDAP32.dll, Base = 0x75660000, Top = 0x756B4000, Size = 344064
Name = ncryptsslp.dll, Base = 0x6FFD0000, Top = 0x6FFE8000, Size = 98304
Name = cfgdll.dll, Base = 0x8150000, Top = 0x815F000, Size = 61440
Name = msimtf.dll, Base = 0x6FFC0000, Top = 0x6FFCE000, Size = 57344
Name = msls31.dll, Base = 0x6FF80000, Top = 0x6FFB3000, Size = 208896
Name = jscript9.dll, Base = 0x6FB80000, Top = 0x6FF77000, Size = 4157440
Name = d2d1.dll, Base = 0x6F790000, Top = 0x6FB76000, Size = 4087808
Name = DWrite.dll, Base = 0x6F600000, Top = 0x6F781000, Size = 1576960
Name = dxgi.dll, Base = 0x6F590000, Top = 0x6F5F9000, Size = 430080
Name = d3d11.dll, Base = 0x6F3B0000, Top = 0x6F589000, Size = 1937408
Name = d3d10warp.dll, Base = 0x6F190000, Top = 0x6F3A8000, Size = 2195456
Name = XmlLite.dll, Base = 0x6F160000, Top = 0x6F18E000, Size = 188416
Name = SETUPAPI.dll, Base = 0x75AA0000, Top = 0x75C51000, Size = 1773568
Name = Dxtrans.dll, Base = 0x6F110000, Top = 0x6F159000, Size = 299008
Name = ATL.DLL, Base = 0x6F0F0000, Top = 0x6F10A000, Size = 106496
Name = ddrawex.dll, Base = 0x6F0E0000, Top = 0x6F0EE000, Size = 57344
Name = DDRAW.dll, Base = 0x6EFF0000, Top = 0x6F0DC000, Size = 966656
Name = DCIMAN32.dll, Base = 0x6EFE0000, Top = 0x6EFE7000, Size = 28672
Name = windowscodecsext.dll, Base = 0x6EF90000, Top = 0x6EFD1000, Size = 266240
Name = msxml6.dll, Base = 0x6EDB0000, Top = 0x6EF82000, Size = 1908736
Name = Bkgnd.dll, Base = 0x81E0000, Top = 0x81EB000, Size = 45056
Name = BkgndColor.dll, Base = 0x86F0000, Top = 0x86F9000, Size = 36864
Name = Color.dll, Base = 0x8700000, Top = 0x870B000, Size = 45056
Name = ColorEx.dll, Base = 0x8710000, Top = 0x871C000, Size = 49152
Name = Console.dll, Base = 0x8720000, Top = 0x8728000, Size = 32768
Name = Encrypt.dll, Base = 0x8730000, Top = 0x873A000, Size = 40960
Name = File.dll, Base = 0x8740000, Top = 0x874B000, Size = 45056
Name = GetSysInfo.dll, Base = 0x8750000, Top = 0x8758000, Size = 32768
Name = Media.dll, Base = 0x8760000, Top = 0x8769000, Size = 36864
Name = Memory.dll, Base = 0x8770000, Top = 0x877B000, Size = 45056
Name = Msg.dll, Base = 0x8780000, Top = 0x878B000, Size = 45056
Name = Net.dll, Base = 0x8790000, Top = 0x8797000, Size = 28672
Name = MSVBVM60.DLL, Base = 0x66000000, Top = 0x66153000, Size = 1388544
Name = Office.dll, Base = 0x87A0000, Top = 0x87A9000, Size = 36864
Name = Pic.dll, Base = 0x87B0000, Top = 0x87B8000, Size = 32768
Name = Sys.dll, Base = 0x87C0000, Top = 0x87C9000, Size = 36864
Name = Web.dll, Base = 0x8800000, Top = 0x880F000, Size = 61440
Name = Window.dll, Base = 0x87D0000, Top = 0x87DC000, Size = 49152
Name = QMColorActionCtl.ocx, Base = 0x8810000, Top = 0x8832000, Size = 139264
Name = ntmarta.dll, Base = 0x73740000, Top = 0x73768000, Size = 163840
Name = thumbcache.dll, Base = 0x6ED80000, Top = 0x6EDA3000, Size = 143360
Code Before:
84 01 15 00 00 8B F0 EB C4 8B 58 08 E9 03 FF FF FF 8B 4A 04
Current Code:
89 01 EB 2D 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
Call Stack:
004EA97C ===> °´¼ü¾«Áé9.exe
Current Stack: