date/time : 2025-01-09 14:01 computer name : KDN-QC-NB-002 user name : Andywu operating system : Windows NT New build 9200 system language : Chinese (Simplified) system up time : 23 hours 48 minutes program up time : 21 seconds processors : 4x Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz physical memory : 2048/2048 MB (空闲/总计) free disk space : (C:) 6.65 GB (D:) 136.98 GB display mode : 1366x768, 32 bit process id : $c28 allocated memory : 70.70 MB executable : flashfxp.exe executable hash : 15D0A73E1243FEDCFF34548F8F44AA64 exec. date/time : 2024-01-11 09:09 version : 3.4.1.1175 madExcept version : 2.7i exception class : EAccessViolation exception message : 存取错误在地址 00404CDD 在模块“flashfxp.exe”。读取 地址 00000000. main thread ($5c68): 00404cdd flashfxp.exe System WideCharToStrVar 00404cd0 flashfxp.exe System WideCharToString 00510c05 flashfxp.exe UPTShellControls 2369 +15 GetFriendlyName 0051572f flashfxp.exe UPTShellControls 5108 +27 TPTCustomShellTree.AddNewShellNode 00517404 flashfxp.exe UPTShellControls 6089 +75 DoRefresh 005175b2 flashfxp.exe UPTShellControls 6150 +32 TPTCustomShellTree.RefreshNodes 00514a37 flashfxp.exe UPTShellControls 4548 +31 TPTCustomShellTree.TimerElapsed 00505e8a flashfxp.exe TimerEx 189 +1 TTimerEx.Timer 00505ca4 flashfxp.exe TimerEx 102 +7 TTimerEx.AppWinProcEx 004524d5 flashfxp.exe Forms 6303 +4 TApplication.WndProc 0044a91c flashfxp.exe Forms 1458 +8 StdWndProc 7675843b user32.dll DispatchMessageA 00453007 flashfxp.exe Forms 6702 +34 TApplication.ProcessMessage 0045303e flashfxp.exe Forms 6740 +1 TApplication.HandleMessage 0045325e flashfxp.exe Forms 6829 +20 TApplication.Run 00628873 flashfxp.exe FlashFXP 559 +437 initialization 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $520c: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $5d68: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $18b0: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $5bdc: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $1e44: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $4df0: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $61f8: 77aa304c ntdll.dll NtRemoveIoCompletion 77125cb4 KERNELBASE.dll GetQueuedCompletionStatus 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $5c94: 7597586c win32u.dll NtUserMsgWaitForMultipleObjectsEx 7676c9a7 user32.dll MsgWaitForMultipleObjectsEx 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $2780: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $59b8: 7597586c win32u.dll NtUserMsgWaitForMultipleObjectsEx 7676c9a7 user32.dll MsgWaitForMultipleObjectsEx 7676c94a user32.dll MsgWaitForMultipleObjects 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $6200: 77aa358c ntdll.dll NtWaitForMultipleObjects 7710a81d KERNELBASE.dll WaitForMultipleObjectsEx 00488429 flashfxp.exe madExcept CallThreadProc 0048846b flashfxp.exe madExcept ThreadExceptFrame 776dfcc7 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($5c68) at: 75f0ce57 combase.dll thread $4590: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $606c: 77aa4d2c ntdll.dll NtWaitForWorkViaWorkerFactory 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $36a4: 7597586c win32u.dll NtUserMsgWaitForMultipleObjectsEx 7676c9a7 user32.dll MsgWaitForMultipleObjectsEx 00488429 flashfxp.exe madExcept CallThreadProc 0048846b flashfxp.exe madExcept ThreadExceptFrame 776dfcc7 KERNEL32.DLL BaseThreadInitThunk >> created by main thread ($5c68) at: 7764c3d3 shcore.dll thread $5604: 7597586c win32u.dll NtUserMsgWaitForMultipleObjectsEx 7676c9a7 user32.dll MsgWaitForMultipleObjectsEx 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $5b08: 77aa358c ntdll.dll NtWaitForMultipleObjects 7710a81d KERNELBASE.dll WaitForMultipleObjectsEx 7710a703 KERNELBASE.dll WaitForMultipleObjects 00513749 flashfxp.exe UPTShellControls 3855 +11 TChangeHandlerThread.Execute 0041b30c flashfxp.exe Classes 6898 +1 ThreadProc 00403f38 flashfxp.exe System ThreadWrapper 776dfcc7 KERNEL32.DLL BaseThreadInitThunk thread $10b8: 77aa358c ntdll.dll NtWaitForMultipleObjects 7710a81d KERNELBASE.dll WaitForMultipleObjectsEx 7710a703 KERNELBASE.dll WaitForMultipleObjects 00513749 flashfxp.exe UPTShellControls 3855 +11 TChangeHandlerThread.Execute 0041b30c flashfxp.exe Classes 6898 +1 ThreadProc 00403f38 flashfxp.exe System ThreadWrapper 776dfcc7 KERNEL32.DLL BaseThreadInitThunk 组件: 00400000 flashfxp.exe 3.4.1.1175 D:\1z88共962m备份202401\FlashFXP 05450000 pthreadGC2.dll 2.9.1.0 d:\iFlytek\iFlyIME\3.0.1734 08ed0000 ssleay32.dll 0.9.8.5 D:\1z88共962m备份202401\FlashFXP 10000000 libeay32.dll 0.9.8.5 D:\1z88共962m备份202401\FlashFXP 50000000 drprov.dll 6.2.19041.3636 C:\Windows\System32 53f60000 DAVHLPR.dll 6.2.19041.3636 C:\Windows\System32 5c920000 GetWordNT.dll 5.1.1.251 C:\MicLink 60200000 mfperfhelper.dll 6.2.19041.1 C:\Windows\system32 605a0000 CoreUIComponents.dll 6.2.19041.3636 C:\Windows\System32 60910000 CoreMessaging.dll 6.2.19041.4474 C:\Windows\System32 609b0000 textinputframework.dll 6.2.19041.5198 C:\Windows\SYSTEM32 60cd0000 MMDevApi.dll 6.2.19041.4355 C:\Windows\System32 61570000 TextShaping.dll C:\Windows\SYSTEM32 61610000 twinapi.appcore.dll 6.2.19041.4597 C:\Windows\system32 617c0000 dcomp.dll 6.2.19041.4597 C:\Windows\system32 61950000 BaseGUI.dll 4.2.1.2 d:\iFlytek\iFlyIME\3.0.1734 61c30000 libxml2.dll 2.9.11.0 d:\iFlytek\iFlyIME\3.0.1734 622c0000 iflycommon.dll d:\iFlytek\iFlyIME\3.0.1734 62410000 WINHTTP.dll 6.2.19041.4717 C:\Windows\SYSTEM32 624e0000 xfplatformbusiness.dll d:\iFlytek\iFlyIME\3.0.1734 629c0000 iflybaselogic.dll d:\iFlytek\iFlyIME\3.0.1734 62a70000 iflybuilder.dll d:\iFlytek\iFlyIME\3.0.1734 62b30000 MSVCR120.dll 12.0.21005.1 d:\iFlytek\iFlyIME\3.0.1734\Microsoft.Windows.PrivateCPlusPlusRuntime 62c20000 MSVCP120.dll 12.0.21005.1 d:\iFlytek\iFlyIME\3.0.1734\Microsoft.Windows.PrivateCPlusPlusRuntime 63270000 WindowsCodecs.dll 6.2.19041.5129 C:\Windows\SYSTEM32 63410000 MSVCR120.dll 12.0.40660.0 C:\Windows\SYSTEM32 63500000 MSVCP120.dll 12.0.40660.0 C:\Windows\SYSTEM32 63580000 iFlyIMEQuickLaunch.dll d:\iFlytek\iFlyIME\3.0.1734 635c0000 iflyclient.dll d:\iFlytek\iFlyIME\3.0.1734 636a0000 iFlyTsfIme.dll d:\iFlytek\iFlyIME\3.0.1734 640f0000 UIAutomationCore.DLL 7.2.19041.4355 C:\Windows\SYSTEM32 64700000 PortableDeviceApi.dll 6.2.19041.4842 C:\Windows\System32 6d8f0000 atlthunk.dll 6.2.19041.3636 C:\Windows\SYSTEM32 70880000 OLEACC.dll 7.2.19041.3636 C:\Windows\SYSTEM32 708e0000 dataexchange.dll 6.2.19041.4355 C:\Windows\system32 70920000 wsock32.dll 6.2.19041.1 C:\Windows\SYSTEM32 70970000 winspool.drv 6.2.19041.4597 C:\Windows\SYSTEM32 72190000 uxtheme.dll 6.2.19041.5247 C:\Windows\system32 72210000 MSIMG32.dll 6.2.19041.3636 C:\Windows\SYSTEM32 72280000 MPR.dll 6.2.19041.3636 C:\Windows\SYSTEM32 722d0000 Secur32.dll 6.2.19041.3636 C:\Windows\SYSTEM32 72420000 srvcli.dll 6.2.19041.3636 C:\Windows\System32 72440000 iertutil.dll 11.0.19041.5198 C:\Windows\System32 72680000 urlmon.dll 11.0.19041.5072 C:\Windows\System32 72850000 wintypes.dll 6.2.19041.4717 C:\Windows\SYSTEM32 729b0000 WINSTA.dll 6.2.19041.3636 C:\Windows\System32 72a30000 Windows.StateRepositoryPS.dll 6.2.19041.4842 C:\Windows\System32 73280000 DEVOBJ.dll 6.2.19041.4355 C:\Windows\System32 732b0000 Windows.FileExplorer.Common.dll 6.2.19041.4957 C:\Windows\System32 73300000 propsys.dll 7.0.19041.4355 C:\Windows\system32 733d0000 dbgcore.DLL 6.2.19041.4355 C:\Windows\SYSTEM32 735e0000 profapi.dll 6.2.19041.4355 C:\Windows\SYSTEM32 73600000 apphelp.dll 6.2.19041.5198 C:\Windows\SYSTEM32 736b0000 cscapi.dll 6.2.19041.3636 C:\Windows\SYSTEM32 736c0000 SSPICLI.DLL 6.2.19041.4239 C:\Windows\SYSTEM32 73710000 wkscli.dll 6.2.19041.3636 C:\Windows\System32 73730000 gdiplus.dll 6.2.19041.4597 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4597_none_d954b6f7e1016a2a 738a0000 winmm.dll 6.2.19041.3636 C:\Windows\SYSTEM32 73b70000 WININET.dll 11.0.19041.4717 C:\Windows\SYSTEM32 73fd0000 comctl32.dll 6.10.19041.4355 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c 741e0000 netapi32.dll 6.2.19041.3636 C:\Windows\SYSTEM32 74320000 dbghelp.dll 6.2.19041.3996 C:\Windows\SYSTEM32 74540000 windows.storage.dll 6.2.19041.5247 C:\Windows\SYSTEM32 74b70000 netutils.dll 6.2.19041.3636 C:\Windows\System32 74c10000 ntmarta.dll 6.2.19041.3636 C:\Windows\SYSTEM32 74ca0000 CRYPTBASE.DLL 6.2.19041.3636 C:\Windows\SYSTEM32 74cd0000 MSASN1.dll 6.2.19041.3636 C:\Windows\System32 74ce0000 Wldp.dll 6.2.19041.4780 C:\Windows\SYSTEM32 74d10000 kernel.appcore.dll 6.2.19041.3758 C:\Windows\SYSTEM32 74d50000 d3d11.dll 6.2.19041.4355 C:\Windows\system32 74f30000 dxgi.dll 6.2.19041.5198 C:\Windows\system32 75390000 USERENV.dll 6.2.19041.4355 C:\Windows\SYSTEM32 753c0000 WTSAPI32.dll 6.2.19041.3636 C:\Windows\SYSTEM32 75400000 version.dll 6.2.19041.3636 C:\Windows\SYSTEM32 75470000 IPHLPAPI.DLL 6.2.19041.3636 C:\Windows\SYSTEM32 758b0000 msvcrt.dll 7.0.19041.3636 C:\Windows\System32 75970000 win32u.dll 6.2.19041.5247 C:\Windows\System32 75990000 WINTRUST.dll 6.2.19041.4957 C:\Windows\System32 759f0000 clbcatq.dll 2001.12.10941.16384 C:\Windows\System32 75a70000 RPCRT4.dll 6.2.19041.4957 C:\Windows\System32 75b40000 PSAPI.DLL 6.2.19041.3636 C:\Windows\System32 75bb0000 gdi32full.dll 6.2.19041.5247 C:\Windows\System32 75d30000 crypt32.dll 6.2.19041.5072 C:\Windows\System32 75e30000 combase.dll 6.2.19041.4894 C:\Windows\System32 760b0000 bcrypt.dll 6.2.19041.3636 C:\Windows\System32 760d0000 shell32.dll 6.2.19041.5198 C:\Windows\System32 766b0000 sechost.dll 6.2.19041.5072 C:\Windows\System32 76730000 user32.dll 6.2.19041.5247 C:\Windows\System32 768d0000 SETUPAPI.dll 6.2.19041.4355 C:\Windows\System32 76d10000 advapi32.dll 6.2.19041.5072 C:\Windows\System32 76d90000 comdlg32.dll 6.2.19041.4355 C:\Windows\System32 76e40000 SHLWAPI.dll 6.2.19041.4355 C:\Windows\System32 76e90000 IMM32.DLL 6.2.19041.4474 C:\Windows\System32 76ec0000 MSCTF.dll 6.2.19041.5007 C:\Windows\System32 76fa0000 CFGMGR32.dll 6.2.19041.3996 C:\Windows\System32 76fe0000 KERNELBASE.dll 6.2.19041.5247 C:\Windows\System32 77220000 msvcp_win.dll 6.2.19041.3636 C:\Windows\System32 772a0000 oleaut32.dll 6.2.19041.3636 C:\Windows\System32 77340000 GDI32.dll 6.2.19041.4474 C:\Windows\System32 774e0000 ole32.dll 6.2.19041.4355 C:\Windows\System32 77630000 shcore.dll 6.2.19041.4522 C:\Windows\System32 776c0000 KERNEL32.DLL 6.2.19041.5198 C:\Windows\System32 777d0000 ucrtbase.dll 6.2.19041.3636 C:\Windows\System32 77950000 WS2_32.dll 6.2.19041.3636 C:\Windows\System32 779c0000 bcryptPrimitives.dll 6.2.19041.5007 C:\Windows\System32 77a30000 ntdll.dll 6.2.19041.5007 C:\Windows\SYSTEM32 791c0000 policymanager.dll 6.2.19041.4597 C:\Windows\SYSTEM32 79250000 msvcp110_win.dll 6.2.19041.3636 C:\Windows\SYSTEM32 792c0000 ntshrui.dll 6.2.19041.4355 C:\Windows\SYSTEM32 79ae0000 thumbcache.dll 6.2.19041.4355 C:\Windows\System32 7abb0000 davclnt.dll 6.2.19041.3636 C:\Windows\System32 7b3b0000 ntlanman.dll 6.2.19041.4842 C:\Windows\System32 7b3d0000 dlnashext.dll 6.2.19041.4355 C:\Windows\System32 7b420000 PlayToDevice.dll 6.2.19041.3636 C:\Windows\System32 7b470000 DevDispItemProvider.dll 6.2.19041.3636 C:\Windows\System32 7b490000 FileSyncShell.dll 24.226.1110.4 C:\Program Files\Microsoft OneDrive\24.226.1110.0004\i386 7b630000 YunShellExtV1.dll 7.51.0.133 D:\baidunetdisk 7b850000 ecloudshell.dll 6.6.0.0 D:\ecloud 7b890000 wpdshext.dll 6.2.19041.4842 C:\Windows\system32 7b920000 audiodev.dll 6.2.19041.1 C:\Windows\system32 7b960000 WMVCore.DLL 12.0.19041.3996 C:\Windows\system32 7bb70000 WMASF.DLL 12.0.19041.1 C:\Windows\system32 disassembling: 00404cd8 public System.WideCharToStrVar: ; function entry point 00404cd8 xor ecx, ecx 00404cda jmp loc_404cdd 00404cda 00404cda ; --------------------------------------------------------- 00404cda 00404cdc loc_404cdc: 00404cdc inc ecx 00404cda 00404cdd loc_404cdd: 00404cdd > cmp word ptr [eax+ecx*2], 0 00404ce2 jnz loc_404cdc 00404ce2 00404ce4 xchg ecx, edx 00404ce6 call +1 ($404cec) ; System.WideCharLenToStrVar 00404ce6 00404ceb ret