date/time            : 2023-06-25, 00:17:13, 837ms
computer name        : DESKTOP-HCH2EQO
user name            : vkdfkc
registered owner     : vkdfkc
operating system     : Windows 10 Tablet PC x64 build 19042
system language      : Chinese (Simplified)
system up time       : 17 hours
program up time      : 9 seconds
processors           : 8x Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
physical memory      : 1181/8023 MB (free/total)
free disk space      : (C:) 10.75 GB (D:) 46.32 GB
display mode         : 1920x1080, 32 bit
process id           : $323c
allocated memory     : 311.68 MB
largest free block   : 1.99 GB
executable           : WinLicense64.exe
exec. date/time      : 2022-04-26 17:58
version              : 3.1.3.0
compiled with        : Delphi 10.1 Berlin
madExcept version    : 4.0.21
WinLicense64.exe.mad : $001cafe8, $4e57549a, $9385ef84
callstack crc        : $675d0227, $51fcc224, $51fcc224
count                : 2
exception number     : 1
exception class      : EAccessViolation
exception message    : Access violation at address 0191AD59 in module 'WinLicense64.exe'. Read of address 0000002C.

main thread ($dc8):
0191ad59 +009 WinLicense64.exe segment%331  public%74088
02a70c16 +032 WinLicense64.exe segment%1129 public%181829
02a707f0 +088 WinLicense64.exe segment%1129 public%181827
02a777a1 +229 WinLicense64.exe segment%1134 public%181932
02a77413 +057 WinLicense64.exe segment%1134 public%181929
02a8970a +04e WinLicense64.exe segment%1142 public%182078
02a89811 +031 WinLicense64.exe segment%1142 public%182081
02a8b537 +08b WinLicense64.exe segment%1142 public%182107
0113d445 +015 WinLicense64.exe segment%94   public%16774
01141cb1 +0a9 WinLicense64.exe segment%94   public%16902
01056972 +2be WinLicense64.exe segment%73   public%11546
0105b4bd +5e9 WinLicense64.exe segment%73   public%11708
0113df05 +64d WinLicense64.exe segment%94   public%16791
011f54a3 +007 WinLicense64.exe segment%122  public%21925
01be3679 +009 WinLicense64.exe segment%488  public%89471
01be3b33 +007 WinLicense64.exe segment%488  public%89496
01be4b6a +072 WinLicense64.exe segment%488  public%89543
011f5723 +007 WinLicense64.exe segment%122  public%21942
010565ac +024 WinLicense64.exe segment%73   public%11539
0105a885 +10d WinLicense64.exe segment%73   public%11699
0105a994 +0bc WinLicense64.exe segment%73   public%11700
0105d612 +026 WinLicense64.exe segment%73   public%11800
01056972 +2be WinLicense64.exe segment%73   public%11546
0105b4bd +5e9 WinLicense64.exe segment%73   public%11708
0113df05 +64d WinLicense64.exe segment%94   public%16791
011f54a3 +007 WinLicense64.exe segment%122  public%21925
01be3679 +009 WinLicense64.exe segment%488  public%89471
01be3b33 +007 WinLicense64.exe segment%488  public%89496
01be4b6a +072 WinLicense64.exe segment%488  public%89543
011f5723 +007 WinLicense64.exe segment%122  public%21942
010565ac +024 WinLicense64.exe segment%73   public%11539
01054f5e +026 WinLicense64.exe segment%73   public%11455
0113d721 +03d WinLicense64.exe segment%94   public%16786
0114798f +0b3 WinLicense64.exe segment%94   public%17106
02e502ec +254 WinLicense64.exe segment%1805 public%203362
7713fa27 +017 KERNEL32.DLL                  BaseThreadInitThunk

thread $2a30:
7713fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $18f0:
7713fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $19e4:
7713fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $35a4: <priority:2>
75e85b0f +4f user32.dll                  GetMessageA
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
749534b5 +00 winmm.dll

thread $19f8:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
76943ff7 +00 combase.dll

thread $36b0:
7713fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $3660:
7713fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $4d4 (TdxBackgroundFormatter.TWorkThread): <priority:-1>
76e9b30d +fd KERNELBASE.dll               WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll               WaitForMultipleObjects
0226f2bb +2b WinLicense64.exe segment%730 public%134328
0226f23f +07 WinLicense64.exe segment%730 public%134325
00f41e3f +2b WinLicense64.exe segment%34  public%4271
00fd2521 +49 WinLicense64.exe segment%45  public%7541
00e9b274 +28 WinLicense64.exe segment%0   public%362
00f41d25 +0d WinLicense64.exe segment%34  public%4269
00f41d8a +32 WinLicense64.exe segment%34  public%4270
7713fa27 +17 KERNEL32.DLL                 BaseThreadInitThunk
>> created by main thread ($dc8) at:
0226f20b +1b WinLicense64.exe segment%730 public%134324

thread $8a8:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $21c8:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $2df0:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $3594:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $bf8:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $236c:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $2820:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $21c0:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $9d0:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $7fc:
76e9b30d +fd KERNELBASE.dll              WaitForMultipleObjectsEx
76e9b1f3 +13 KERNELBASE.dll              WaitForMultipleObjects
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $ef0:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $220c:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $2a2c:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $203c:
76ea4ad5 +45 KERNELBASE.dll              SleepEx
76ea4a7a +0a KERNELBASE.dll              Sleep
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $2498:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $1884:
76ea4ad5 +45 KERNELBASE.dll              SleepEx
76ea4a7a +0a KERNELBASE.dll              Sleep
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +00 libmysqld.dll

thread $308:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $3268:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $283c:
77316318 +138 ntdll.dll                   RtlSleepConditionVariableCS
76f3307a +01a KERNELBASE.dll              SleepConditionVariableCS
00f41d25 +00d WinLicense64.exe segment%34 public%4269
00f41d8a +032 WinLicense64.exe segment%34 public%4270
7713fa27 +017 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
52daaa5c +000 libmysqld.dll

thread $2de0:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $2ff4:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $15c4:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $2494:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $130c:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $2058:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

thread $25ac:
76e91263 +93 KERNELBASE.dll              WaitForSingleObjectEx
00f41d25 +0d WinLicense64.exe segment%34 public%4269
00f41d8a +32 WinLicense64.exe segment%34 public%4270
7713fa27 +17 KERNEL32.DLL                BaseThreadInitThunk
>> created by main thread ($dc8) at:
555cd700 +00 VCOMP140.DLL

modules:
00e90000 WinLicense64.exe          3.1.3.0             D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
10000000 MainDll.dll                                   D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
46480000 security.dll              10.0.19041.1        C:\WINDOWS\SYSTEM32
52a60000 libmysqld.dll             5.6.21.0            D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
536a0000 bcp47mrm.dll              10.0.19041.1266     C:\Windows\System32
536d0000 Windows.Globalization.dll 10.0.19041.746      C:\Windows\System32
54000000 FaultRep.dll              10.0.19041.1387     C:\WINDOWS\SYSTEM32
54070000 libspv.dll                                    D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
555b0000 9c02e3a.dll                                   C:\Users\vkdfkc\AppData\Local\Temp
555c0000 VCOMP140.DLL              14.0.24212.0        D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
555f0000 WinlicenseSDK.DLL         3.0.5.0             D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
59500000 WindowsCodecs.dll         10.0.19041.1151     C:\WINDOWS\SYSTEM32
59680000 oledlg.dll                10.0.19041.746      C:\WINDOWS\SYSTEM32
65840000 textinputframework.dll    10.0.19041.1320     C:\WINDOWS\SYSTEM32
65900000 dwmapi.dll                10.0.19041.746      C:\WINDOWS\SYSTEM32
65930000 mlang.dll                 10.0.19041.746      C:\WINDOWS\system32
65970000 twinapi.appcore.dll       10.0.19041.746      C:\WINDOWS\system32
65b00000 dcomp.dll                 10.0.19041.1387     C:\WINDOWS\system32
65c70000 dataexchange.dll          10.0.19041.1387     C:\WINDOWS\system32
67990000 d3d11.dll                 10.0.19041.1202     C:\WINDOWS\system32
67e80000 oleacc.dll                7.2.19041.746       C:\WINDOWS\SYSTEM32
68da0000 comctl32.dll              6.10.19041.1110     C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
69db0000 DWrite.dll                10.0.19041.1165     C:\WINDOWS\SYSTEM32
6a720000 TextShaping.dll                               C:\WINDOWS\SYSTEM32
6a7c0000 atlthunk.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
6a7d0000 msimg32.dll               10.0.19041.1466     C:\WINDOWS\SYSTEM32
6b230000 Bcp47Langs.dll            10.0.19041.1266     C:\Windows\System32
6f6e0000 CoreUIComponents.dll      10.0.19041.546      C:\WINDOWS\SYSTEM32
6f960000 CoreMessaging.dll         10.0.19041.867      C:\WINDOWS\SYSTEM32
6fa00000 wintypes.dll              10.0.19041.1348     C:\WINDOWS\SYSTEM32
70df0000 gdiplus.dll               10.0.19041.1466     C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.1466_none_d951c753e1040cbe
71310000 winspool.drv              10.0.19041.1288     C:\WINDOWS\SYSTEM32
71780000 propsys.dll               7.0.19041.1023      C:\WINDOWS\system32
71ec0000 rasadhlp.dll              10.0.19041.546      C:\Windows\System32
71ed0000 winrnr.dll                10.0.19041.546      C:\WINDOWS\System32
71ee0000 NLAapi.dll                10.0.19041.546      C:\WINDOWS\system32
71f00000 wshbth.dll                10.0.19041.546      C:\WINDOWS\system32
71f10000 pnrpnsp.dll               10.0.19041.546      C:\WINDOWS\system32
71f30000 napinsp.dll               10.0.19041.546      C:\WINDOWS\system32
72000000 uxtheme.dll               10.0.19041.1266     C:\WINDOWS\system32
72080000 dbgcore.DLL               10.0.19041.546      C:\WINDOWS\SYSTEM32
720b0000 cscapi.dll                10.0.19041.546      C:\WINDOWS\SYSTEM32
72140000 wkscli.dll                10.0.19041.1466     C:\WINDOWS\SYSTEM32
72160000 NETUTILS.DLL              10.0.19041.1466     C:\WINDOWS\SYSTEM32
72320000 dbghelp.dll               10.0.19041.1052     C:\WINDOWS\SYSTEM32
72a40000 SHFolder.dll              10.0.19041.1        C:\WINDOWS\SYSTEM32
72a50000 profapi.dll               10.0.19041.844      C:\WINDOWS\SYSTEM32
72aa0000 wsock32.dll               10.0.19041.1        C:\WINDOWS\SYSTEM32
737b0000 netapi32.dll              10.0.19041.1466     C:\WINDOWS\SYSTEM32
73940000 Wldp.dll                  10.0.19041.1320     C:\WINDOWS\SYSTEM32
73970000 windows.storage.dll       10.0.19041.1466     C:\WINDOWS\SYSTEM32
73f80000 ntmarta.dll               10.0.19041.546      C:\WINDOWS\SYSTEM32
74080000 mswsock.dll               10.0.19041.546      C:\WINDOWS\System32
74210000 SSPICLI.DLL               10.0.19041.906      C:\WINDOWS\SYSTEM32
74240000 SECUR32.DLL               10.0.19041.546      C:\WINDOWS\SYSTEM32
74250000 DNSAPI.dll                10.0.19041.1320     C:\WINDOWS\SYSTEM32
74930000 dhcpcsvc.DLL              10.0.19041.546      C:\WINDOWS\SYSTEM32
74950000 winmm.dll                 10.0.19041.546      C:\WINDOWS\SYSTEM32
74b20000 WINSTA.dll                10.0.19041.546      C:\WINDOWS\SYSTEM32
74c60000 Iphlpapi.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
74de0000 version.dll               10.0.19041.546      C:\WINDOWS\SYSTEM32
74df0000 wtsapi32.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
74e00000 advapi32.dll              10.0.19041.1466     C:\WINDOWS\System32
74e80000 kernel.appcore.dll        10.0.19041.546      C:\WINDOWS\System32
74e90000 shell32.dll               10.0.19041.1466     C:\WINDOWS\System32
75450000 bcrypt.dll                10.0.19041.1023     C:\WINDOWS\System32
75470000 CRYPT32.dll               10.0.19041.1320     C:\WINDOWS\System32
75570000 SETUPAPI.DLL              10.0.19041.1237     C:\WINDOWS\System32
75a60000 SHLWAPI.dll               10.0.19041.1023     C:\WINDOWS\System32
75ab0000 cfgmgr32.dll              10.0.19041.1151     C:\WINDOWS\System32
75af0000 clbcatq.dll               2001.12.10941.16384 C:\WINDOWS\System32
75b70000 bcryptPrimitives.dll      10.0.19041.1415     C:\WINDOWS\System32
75bf0000 MSCTF.dll                 10.0.19041.1466     C:\WINDOWS\System32
75e60000 user32.dll                10.0.19041.1466     C:\WINDOWS\System32
76000000 USP10.dll                 10.0.19041.546      C:\WINDOWS\System32
76110000 ole32.dll                 10.0.19041.1202     C:\WINDOWS\System32
76200000 gdi32full.dll             10.0.19041.1466     C:\WINDOWS\System32
762e0000 GDI32.dll                 10.0.19041.1202     C:\WINDOWS\System32
76310000 win32u.dll                10.0.19041.1466     C:\WINDOWS\System32
76330000 IMM32.dll                 10.0.19041.546      C:\WINDOWS\System32
76360000 oleaut32.dll              10.0.19041.985      C:\WINDOWS\System32
76400000 msvcp_win.dll             10.0.19041.789      C:\WINDOWS\System32
76480000 shcore.dll                10.0.19041.1387     C:\WINDOWS\System32
76510000 ucrtbase.dll              10.0.19041.789      C:\WINDOWS\System32
767a0000 WS2_32.dll                10.0.19041.546      C:\WINDOWS\System32
76810000 RPCRT4.dll                10.0.19041.1466     C:\WINDOWS\System32
768d0000 combase.dll               10.0.19041.1348     C:\WINDOWS\System32
76b60000 msvcrt.dll                7.0.19041.546       C:\WINDOWS\System32
76cd0000 comdlg32.dll              10.0.19041.906      C:\WINDOWS\System32
76d80000 KERNELBASE.dll            10.0.19041.1466     C:\WINDOWS\System32
76fa0000 NSI.dll                   10.0.19041.610      C:\WINDOWS\System32
76fb0000 sechost.dll               10.0.19041.1466     C:\WINDOWS\System32
77030000 IMAGEHLP.DLL              10.0.19041.1415     C:\WINDOWS\System32
77050000 dxgi.dll                  10.0.19041.1266     C:\WINDOWS\System32
77120000 KERNEL32.DLL              10.0.19041.1466     C:\WINDOWS\System32
77230000 ntdll.dll                 10.0.19041.1466     C:\WINDOWS\SYSTEM32
78e70000 RICHED20.DLL              5.31.23.1231        C:\WINDOWS\SYSTEM32
7a380000 msls31.dll                3.10.349.0          C:\WINDOWS\SYSTEM32
7a800000 DUser.dll                 10.0.19041.546      C:\WINDOWS\SYSTEM32
7b5c0000 globinputhost.dll         10.0.19041.546      C:\WINDOWS\SYSTEM32
7b9e0000 Msftedit.dll              10.0.19041.1288     C:\WINDOWS\SYSTEM32
7c040000 c_is2022.dll              10.0.19041.1        C:\WINDOWS\system32
7c070000 c_g18030.dll              10.0.19041.1        C:\WINDOWS\system32
7c0b0000 c_iscii.dll               10.0.19041.1        C:\WINDOWS\system32

processes:
0000 Idle                                 0 0    0
0004 System                               0 0    0
007c Registry                             0 0    0
0224 smss.exe                             0 0    0
0304 csrss.exe                            0 0    0
036c wininit.exe                          0 0    0
037c csrss.exe                            1 0    0
03b4 services.exe                         0 0    0
03c8 lsass.exe                            0 0    0
02d0 svchost.exe                          0 0    0
02dc fontdrvhost.exe                      0 0    0
0408 WUDFHost.exe                         0 0    0
0460 winlogon.exe                         1 0    0
0480 svchost.exe                          0 0    0
04b4 fontdrvhost.exe                      1 0    0
04c8 svchost.exe                          0 0    0
0534 WUDFHost.exe                         0 0    0
057c dwm.exe                              1 0    0
05fc svchost.exe                          0 0    0
0608 svchost.exe                          0 0    0
0610 svchost.exe                          0 0    0
0674 svchost.exe                          0 0    0
0684 svchost.exe                          0 0    0
0690 svchost.exe                          0 0    0
0698 svchost.exe                          0 0    0
06a4 svchost.exe                          0 0    0
0724 svchost.exe                          0 0    0
075c svchost.exe                          0 0    0
076c svchost.exe                          0 0    0
078c svchost.exe                          0 0    0
07b0 svchost.exe                          0 0    0
083c svchost.exe                          0 0    0
0860 svchost.exe                          0 0    0
0870 svchost.exe                          0 0    0
08f4 igfxCUIService.exe                   0 0    0
0954 svchost.exe                          0 0    0
0998 svchost.exe                          0 0    0
09b4 NVDisplay.Container.exe              0 0    0
09bc svchost.exe                          0 0    0
09d8 svchost.exe                          0 0    0
0a20 svchost.exe                          0 0    0
0a68 svchost.exe                          0 0    0
0a7c svchost.exe                          0 0    0
0a94 svchost.exe                          0 0    0
0aa0 svchost.exe                          0 0    0
0b20 svchost.exe                          0 0    0
0b28 svchost.exe                          0 0    0
0b58 Memory Compression                   0 0    0
0bb0 svchost.exe                          0 0    0
0c2c svchost.exe                          0 0    0
0ce4 NVDisplay.Container.exe              1 0    0
0d2c svchost.exe                          0 0    0
0d98 svchost.exe                          0 0    0
0e3c svchost.exe                          0 0    0
0eb0 svchost.exe                          0 0    0
0ee8 ZhuDongFangYu.exe                    0 0    0
0efc svchost.exe                          0 0    0
0f40 svchost.exe                          0 0    0
0f48 svchost.exe                          0 0    0
0fd0 spoolsv.exe                          0 0    0
0c98 svchost.exe                          0 0    0
1014 svchost.exe                          0 0    0
1030 svchost.exe                          0 0    0
1140 svchost.exe                          0 0    0
1148 svchost.exe                          0 0    0
11ec svchost.exe                          0 0    0
11f4 esif_uf.exe                          0 0    0
11fc svchost.exe                          0 0    0
1204 FNPLicensingService.exe              0 0    0
120c gameinputsvc.exe                     0 0    0
1214 AdminService.exe                     0 0    0
121c svchost.exe                          0 0    0
1224 svchost.exe                          0 0    0
122c IntelCpHDCPSvc.exe                   0 0    0
1234 svchost.exe                          0 0    0
1248 OfficeClickToRun.exe                 0 0    0
1258 OneApp.IGCC.WinService.exe           0 0    0
1268 svchost.exe                          0 0    0
1274 IntelAudioService.exe                0 0    0
1280 svchost.exe                          0 0    0
132c LMS.exe                              0 0    0
135c NahimicService.exe                   0 0    0
1368 svchost.exe                          0 0    0
13b0 NIHardwareService.exe                0 0    0
13c0 nvcontainer.exe                      0 0    0
13dc KCleanSrv.exe                        0 0    0
13e8 MSOfficePLUSService.exe              0 0    0
113c QcomWlanSrvx64.exe                   0 0    0
1404 QQProtect.exe                        0 0    0
1438 svchost.exe                          0 0    0
1450 RstMwService.exe                     0 0    0
1458 svchost.exe                          0 0    0
1464 vmware-authd.exe                     0 0    0
146c svchost.exe                          0 0    0
1474 vmware-usbarbitrator64.exe           0 0    0
147c RtkAudUService64.exe                 0 0    0
1484 vmnat.exe                            0 0    0
148c jhi_service.exe                      0 0    0
1498 sqlwriter.exe                        0 0    0
14a4 svchost.exe                          0 0    0
14ac svchost.exe                          0 0    0
14f0 phpStudyServer.exe                   0 0    0
1548 vmnetdhcp.exe                        0 0    0
1578 mysqld.exe                           0 0    0
1594 svchost.exe                          0 0    0
15b0 gameinputsvc.exe                     1 0    0
166c IntelCpHeciSvc.exe                   0 0    0
17a8 svchost.exe                          0 0    0
18dc dasHost.exe                          0 0    0
1980 svchost.exe                          0 0    0
1be4 gamingservicesnet.exe                0 0    0
1860 gamingservices.exe                   0 0    0
1680 svchost.exe                          0 0    0
09a8 rundll32.exe                         1 0    0
1f74 svchost.exe                          0 0    0
1fdc svchost.exe                          0 0    0
1ff8 svchost.exe                          0 0    0
05dc svchost.exe                          0 0    0
11cc svchost.exe                          0 0    0
2238 dllhost.exe                          0 0    0
22cc svchost.exe                          0 0    0
22d4 svchost.exe                          0 0    0
2318 svchost.exe                          0 0    0
049c dptf_helper.exe                      1 2    5    normal       C:\Windows\System32\Intel\DPTF
06bc nvcontainer.exe                      1 0    20   normal       C:\Program Files\NVIDIA Corporation\NvContainer
0a0c sihost.exe                           1 0    7    normal       C:\Windows\System32
0aec svchost.exe                          1 0    1    normal       C:\Windows\System32
0ec8 PresentationFontCache.exe            0 0    0
0f14 svchost.exe                          1 0    4    normal       C:\Windows\System32
12d8 taskhostw.exe                        1 8    6    normal       C:\Windows\System32
12e4 clash-core-service.exe               0 0    0
12ec conhost.exe                          0 0    0
12fc svchost.exe                          0 0    0
1ac0 igfxEM.exe                           1 10   18   normal       C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cb5b3ac4d6a4f65a
21e8 explorer.exe                         1 1672 1275 normal       C:\Windows
0afc svchost.exe                          0 0    0
1d08 NVIDIA Web Helper.exe                1 2    12   below normal C:\Program Files (x86)\NVIDIA Corporation\NvNode
2204 conhost.exe                          1 10   3    below normal C:\Windows\System32
065c GoogleCrashHandler.exe               0 0    0
11d4 GoogleCrashHandler64.exe             0 0    0
2444 RtkAudUService64.exe                 1 0    0
2478 svchost.exe                          1 0    5    normal       C:\Windows\System32
2590 SearchIndexer.exe                    0 0    0
27e0 StartMenuExperienceHost.exe          1 0    17   normal       C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
24b4 svchost.exe                          0 0    0
0da0 RuntimeBroker.exe                    1 8    1    normal       C:\Windows\System32
28d8 SearchApp.exe                        1 12   59   normal       C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy
294c RuntimeBroker.exe                    1 0    7    normal       C:\Windows\System32
2b3c ctfmon.exe                           1 0    0
2bb8 SettingSyncHost.exe                  1 0    4    below normal C:\Windows\System32
1b28 SecurityHealthSystray.exe            1 7    5    normal       C:\Windows\System32
2960 SecurityHealthService.exe            0 0    0
142c RtkAudUService64.exe                 1 7    7    normal       C:\Windows\System32
0ecc CCXProcess.exe                       1 0    0    normal       C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience
0f28 node.exe                             1 0    4    normal       C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs
2180 conhost.exe                          1 10   3    normal       C:\Windows\System32
03dc msedge.exe                           1 257  123  normal       C:\Program Files (x86)\Microsoft\Edge\Application
2c04 msedge.exe                           1 0    3    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2cd4 msedge.exe                           1 12   29   above normal C:\Program Files (x86)\Microsoft\Edge\Application
2cdc msedge.exe                           1 0    3    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2d3c msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2e3c msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2e88 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2eb4 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2ee4 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
2db0 svchost.exe                          0 0    0
3030 AdobeIPCBroker.exe                   1 0    7    normal       C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox
31e8 IGCCTray.exe                         1 19   16   normal       C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4979.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray
32bc TextInputHost.exe                    1 0    58   normal       C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
3398 IGCC.exe                             1 0    7    normal       C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4979.0_x64__8j3eq9eme6ctt
2f5c GoogleIMEJaConverter.exe             1 0    1    normal       C:\Program Files (x86)\Google\Google Japanese Input
313c GoogleIMEJaRenderer.exe              1 13   6    normal       C:\Program Files (x86)\Google\Google Japanese Input
3098 GoogleIMEJaCacheService.exe          0 0    0
2658 SgrmBroker.exe                       0 0    0
12d4 sqlbrowser.exe                       0 0    0
0394 svchost.exe                          0 0    0
2228 svchost.exe                          1 0    1    normal       C:\Windows\System32
2334 msedge.exe                           1 0    5    normal       C:\Program Files (x86)\Microsoft\Edge\Application
1ca8 RuntimeBroker.exe                    1 0    4    normal       C:\Windows\System32
1718 ShellExperienceHost.exe              1 13   49   normal       C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
1710 RuntimeBroker.exe                    1 0    3    normal       C:\Windows\System32
29d0 CompPkgSrv.exe                       1 0    1    normal       C:\Windows\System32
2408 IntelSoftwareAssetManagerService.exe 0 0    0
2564 UserOOBEBroker.exe                   1 0    1    normal       C:\Windows\System32\oobe
2350 svchost.exe                          0 0    0
07e8 svchost.exe                          0 0    0
2470 svchost.exe                          0 0    0
3214 svchost.exe                          0 0    0
36ec SDXHelper.exe                        1 0    15   idle         C:\Program Files (x86)\Microsoft Office\root\Office16
05a4 bds.exe                              1 3293 1014 normal       D:\Program Files (x86)\Embarcadero\Studio\21.0\bin
0754 bds.exe                              1 2798 757  normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
0d28 DelphiLsp.exe                        1 0    6    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
2b7c conhost.exe                          1 10   9    normal       C:\Windows\System32
31bc DelphiLsp.exe                        1 0    3    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
1520 DelphiLsp.exe                        1 0    1    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
19c0 winchm.exe                           1 394  323  normal       D:\Program Files (x86)\Softany\WinCHM
0128 svchost.exe                          0 0    0
0718 msedge.exe                           1 0    1    normal       C:\Program Files (x86)\Microsoft\Edge\Application
3420 rundll32.exe                         1 0    2    normal       C:\Windows\System32
0d14 IntelSoftwareAssetManagerService.exe 0 0    0
22a4 ApplicationFrameHost.exe             1 28   17   normal       C:\Windows\System32
0310 dllhost.exe                          1 1    4    normal       C:\Windows\System32
1dec msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
2538 GameCenter.exe                       1 150  99   normal       D:\MirServerXS
0ea0 bds.exe                              1 3554 806  normal       D:\Program Files (x86)\CodeGear\RAD Studio\5.0\bin
32c4 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
1b20 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
20ec msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
2130 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
0d44 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
07a8 DBServer.exe                         1 99   94   normal       D:\MirServerXS\DBServer
29b0 LoginSrv.exe                         1 100  93   normal       D:\MirServerXS\LoginSrv
1ef8 LogDataServer.exe                    1 39   36   normal       D:\MirServerXS\LogServer
3540 RunGate.exe                          1 121  63   normal       D:\MirServerXS\RunGate
3440 SelGate.exe                          1 72   59   normal       D:\MirServerXS\SelGate
16d8 LoginGate.exe                        1 81   65   normal       D:\MirServerXS\LoginGate
1a28 audiodg.exe                          0 0    0
2d84 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
0ea4 CalculatorApp.exe                    1 6    20   normal       C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe
23f0 RuntimeBroker.exe                    1 0    4    normal       C:\Windows\System32
2220 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
23e0 QQ.exe                               1 102  162  normal       C:\Program Files (x86)\Tencent\QQ\Bin
341c TXPlatform.exe                       1 0    2    normal       C:\Program Files (x86)\Tencent\QQ\Bin
3600 QQGuild.exe                          1 16   56   normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\1.3.24-192
0db8 QQGuild.exe                          1 3    15   above normal C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\1.3.24-192
3458 QQGuild.exe                          1 0    1    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\1.3.24-192
2fe8 QQGuild.exe                          1 0    1    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\1.3.24-192
08c8 QQGuild.exe                          1 0    1    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\1.3.24-192
222c M2Server.exe                         1 147  121  normal       D:\MirServerXS\Mir200
2a3c MirClinet.exe                        1 469  169  normal       D:\Program Files\盛大网络\DATA版
104c msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
0ee4 svchost.exe                          0 0    0
323c WinLicense64.exe                     1 621  327  normal       D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
33a4 WinLicense.exe                       1 0    1    normal       D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
  - Fax
  - Microsoft Print to PDF
  - Microsoft XPS Document Writer
  - OneNote (Desktop)
  - OneNote for Windows 10
  - 根打印队列
+ {36fc9e60-c465-11cf-8056-444553540000}
  - Intel(R) USB 3.1 可扩展主机控制器 - 1.10 (Microsoft)
  - USB Composite Device
  - USB Composite Device
  - USB 根集线器(USB 3.0)
+ {4d36e966-e325-11ce-bfc1-08002be10318}
  - 基于 ACPI x64 的电脑
+ {4d36e967-e325-11ce-bfc1-08002be10318}
  - PC SN520 NVMe WDC 128GB
  - ST1000LM035-1RK172
+ {4d36e968-e325-11ce-bfc1-08002be10318}
  - Intel(R) UHD Graphics 630 (driver 26.20.100.8141)
  - NVIDIA GeForce GTX 1650 (driver 30.0.14.9613)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
  - HID Keyboard Device
  - HID Keyboard Device
  - HID Keyboard Device
  - HID Keyboard Device
  - PS/2 标准键盘
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
  - NVIDIA High Definition Audio (driver 1.3.38.92)
  - NVIDIA Virtual Audio Device (Wave Extensible) (WDM) (driver 4.45.0.0)
  - Realtek(R) Audio (driver 6.0.8996.1)
  - 英特尔(R) 显示器音频 (driver 10.27.0.9)
  - 英特尔® 智音技术 (driver 10.23.0.3349)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
  - 通用即插即用监视器
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
  - HID-compliant mouse
  - HID-compliant mouse
  - HID-compliant mouse
  - HID-Compliant Mouse (driver 14.27.40.873)
  - PS/2 兼容鼠标
+ {4d36e972-e325-11ce-bfc1-08002be10318}
  - Microsoft Kernel Debug Network Adapter
  - Microsoft Wi-Fi Direct Virtual Adapter
  - Microsoft Wi-Fi Direct Virtual Adapter #3
  - Qualcomm QCA9377 802.11ac Wireless Adapter (driver 12.0.0.1118)
  - Realtek PCIe GbE Family Controller (driver 10.50.511.2021)
  - VMware Virtual Ethernet Adapter for VMnet1 #2 (driver 14.0.0.5)
  - VMware Virtual Ethernet Adapter for VMnet8 #2 (driver 14.0.0.5)
  - WAN Miniport (IKEv2)
  - WAN Miniport (IP)
  - WAN Miniport (IPv6)
  - WAN Miniport (L2TP)
  - WAN Miniport (Network Monitor)
  - WAN Miniport (PPPOE)
  - WAN Miniport (PPTP)
  - WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
  - Intel(R) Chipset SATA/PCIe RST Premium Controller (driver 17.11.0.1000)
  - Microsoft 存储空间控制器
  - Xvdd SCSI Miniport (driver 10.0.22011.3)
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
  - ACPI 唤醒警报
  - ACPI 处理器聚合器
  - ACPI 热区域
  - ACPI 电源按钮
  - ACPI 盖子
  - ACPI 睡眠按钮
  - Detection Verification (driver 1.0.1236.0)
  - High Definition Audio 控制器
  - Intel(R) 300 Series Chipset Family LPC Controller (HM370) - A30D (driver 10.1.16.6)
  - Intel(R) Dynamic Platform and Thermal Framework Processor Participant (driver 8.5.10103.7263)
  - Intel(R) Dynamic Tuning Generic Participant (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Generic Participant (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Manager (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Memory Participant (driver 8.7.10200.12510)
  - Intel(R) Gaussian Mixture Model - 1911 (driver 10.1.7.3)
  - Intel(R) Host Bridge/DRAM Registers - 3E10 (driver 10.1.14.7)
  - Intel(R) Management Engine Interface #1 (driver 2108.100.0.1053)
  - Intel(R) PCI Express Root Port #14 - A335 (driver 10.1.16.6)
  - Intel(R) PCI Express Root Port #15 - A336 (driver 10.1.16.6)
  - Intel(R) PCIe Controller (x16) - 1901 (driver 10.1.7.3)
  - Intel(R) Power Engine Plug-in
  - Intel(R) Serial IO GPIO Host Controller - INT3450 (driver 30.100.2020.7)
  - Intel(R) Serial IO I2C Host Controller - A368 (driver 30.100.2020.7)
  - Intel(R) Serial IO I2C Host Controller - A369 (driver 30.100.2020.7)
  - Intel(R) SMBus - A323 (driver 10.1.16.6)
  - Intel(R) SPI (flash) Controller - A324 (driver 10.1.16.6)
  - Intel(R) Thermal Subsystem - A379 (driver 10.1.16.6)
  - Intel(R) Watchdog Timer Driver (Intel(R) WDT) (driver 11.7.0.1000)
  - Microsoft ACPI 兼容的嵌入式控制器
  - Microsoft ACPI-Compliant System
  - Microsoft Hyper-V 虚拟化基础结构驱动程序
  - Microsoft System Management BIOS Driver
  - Microsoft UEFI 兼容系统
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft 基本呈现驱动程序
  - Microsoft 基本显示驱动程序
  - Microsoft 虚拟驱动器枚举器
  - NDIS 虚拟网络适配器枚举器
  - NVVHCI Enumerator (driver 3.5.3090.2760)
  - PCI Express 根复合体
  - PCI 标准 RAM 控制器
  - UMBus Root Bus Enumerator
  - VMware VMCI Host Device (driver 9.8.16.0)
  - 充电均衡驱动程序
  - 即插即用软件设备枚举器
  - 卷管理器
  - 可编程中断控制器
  - 复合总线枚举器
  - 数值数据处理器
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 系统计时器
  - 英特尔(R)智音技术 OED (driver 10.23.3349.212)
  - 英特尔(R)智音技术音频控制器 (driver 10.23.0.3349)
  - 远程桌面设备重定向程序总线
  - 高精度事件计时器
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
  - A-Volute Nh3 Audio Effects Component (driver 1.8.3.0)
  - Intel(R) Dynamic Application Loader Host Interface (driver 1.41.2021.121)
  - Intel(R) Dynamic Application Loader Host Interface (driver 1.41.2021.121)
  - Intel(R) Graphics Command Center (driver 26.20.100.8141)
  - Intel(R) Graphics Control Panel (driver 26.20.100.8141)
  - Intel(R) iCLS Client (driver 1.62.321.1)
  - Intel(R) iCLS Client (driver 1.62.321.1)
  - Intel(R) Management and Security Application Local Management (driver 2109.0.52.0)
  - Intel(R) Management and Security Application Local Management (driver 2109.0.52.0)
  - Intel(R) Optane(TM) Memory and Storage Management Component (driver 17.9.0.1)
  - Intel(R) Optane(TM) Pinning Shell Extensions (driver 17.9.6.1019)
  - Intel(R) Optane(TM) Pinning Shell Extensions (driver 17.9.6.1019)
  - Realtek Asio Component (driver 1.0.0.5)
  - Realtek Audio Effects Component (driver 11.0.6000.799)
  - Realtek Audio Effects Component (INT) (driver 11.0.6000.799)
  - Realtek Audio Universal Service (driver 1.0.0.279)
  - Realtek Hardware Support Application (driver 11.0.6000.226)
  - Realtek Speech Preprocessing IP DLL Component (driver 1.0.25.776)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
  - Microsoft Device Association Root Enumerator
  - Microsoft GS 波表合成器
  - Microsoft Radio Device Enumeration Bus
  - Microsoft RRAS Root Enumerator
  - WLAN
  - 蓝牙
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
  - Microsoft AC 适配器
  - Microsoft ACPI 兼容的控制方法电池
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
  - I2C HID 设备
  - Intel(R) HID Event Filter (driver 2.2.1.377)
  - Microsoft Input Configuration Device
  - Pentablet HID (driver 6.1.7600.16385)
  - USB 输入设备
  - USB 输入设备
  - 便携式设备控制装置
  - 已转换便携式设备控制装置
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的数字化器
  - 符合 HID 标准的无线通信控制
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的触摸板
+ {aa018edf-4915-415e-9c17-d7ebec8917d2}
  - NvModuleTracker Device (driver 6.14.25214.24630)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
  - 扬声器 (Realtek(R) Audio)
  - 耳机 (Realtek(R) Audio)
  - 麦克风 (Realtek(R) Audio)
  - 麦克风阵列 (英特尔® 智音技术)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
  - Integrated Webcam
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
  - 受信任的平台模块 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
  - Qualcomm QCA9377 Bluetooth (driver 10.0.0.1118)
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
  - System Firmware 1.11.1 (driver 0.1.11.1)

cpu registers:
eax = 00000000
ebx = 00000000
ecx = 00000000
edx = 00000000
esi = 00000000
edi = 00000000
eip = 0191ad59
esp = 0019f8b0
ebp = 0019f8d8

stack dump:
0019f8b0  9c f9 19 00 dc 46 1c 0e - 00 00 00 00 1b 0c a7 02  .....F..........
0019f8c0  ec f8 19 00 28 a9 e9 00 - d8 f8 19 00 28 f9 19 00  ....(.......(...
0019f8d0  00 00 00 00 f0 e2 ab 0f - 60 f9 19 00 f5 07 a7 02  ........`.......
0019f8e0  24 0a a7 02 34 97 5f 0d - 00 00 00 00 68 f9 19 00  $...4._.....h...
0019f8f0  28 a9 e9 00 60 f9 19 00 - 00 00 00 00 00 00 00 00  (...`...........
0019f900  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f910  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f920  00 00 00 00 00 00 00 00 - 00 00 00 00 7c 60 2a 0e  ............|`*.
0019f930  11 00 00 00 00 00 00 00 - 00 00 00 00 27 00 00 00  ............'...
0019f940  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f950  00 00 00 00 27 00 00 00 - bc f9 19 00 f0 e2 ab 0f  ....'...........
0019f960  a8 f9 19 00 a6 77 a7 02 - b0 f9 19 00 28 a9 e9 00  .....w......(...
0019f970  a8 f9 19 00 c0 f2 40 0b - 30 d4 13 01 c0 f2 40 0b  ......@.0.....@.
0019f980  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f990  20 0b 6b 0d 00 00 00 00 - 0d 00 00 00 00 00 00 00   .k.............
0019f9a0  bc f9 19 00 c0 f0 ac 0b - d0 f9 19 00 18 74 a7 02  .............t..
0019f9b0  d8 f9 19 00 28 a9 e9 00 - d0 f9 19 00 00 00 00 00  ....(...........
0019f9c0  62 00 00 00 06 00 00 00 - e4 f9 19 00 c0 f0 ac 0b  b...............
0019f9d0  f0 f9 19 00 0f 97 a8 02 - 14 fa 19 00 28 a9 e9 00  ............(...
0019f9e0  f0 f9 19 00 00 00 00 00 - 48 48 13 01 40 18 ce 0b  ........HH..@...

disassembling:
[...]
0191ad51   push    esi
0191ad52   push    edi
0191ad53   mov     edi, edx
0191ad55   mov     esi, eax
0191ad57   mov     ecx, edi
0191ad59 > mov     eax, [esi+$2c]
0191ad5c   mov     edx, esi
0191ad5e   mov     ebx, [eax]
0191ad60   call    dword ptr [ebx+$484]
0191ad66   pop     edi
0191ad67   pop     esi
[...]

date/time          : 2023-09-27, 12:51:38, 451ms
computer name      : DESKTOP-HCH2EQO
user name          : vkdfkc
registered owner   : vkdfkc
operating system   : Windows 10 Tablet PC x64 build 19042
system language    : Chinese (Simplified)
system up time     : 3 hours 46 minutes
program up time    : 9 seconds
processors         : 8x Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
physical memory    : 1136/8023 MB (free/total)
free disk space    : (C:) 10.79 GB (D:) 35.67 GB
display mode       : 1920x1080, 32 bit
process id         : $3ad8
allocated memory   : 830.25 MB
largest free block : 1.99 GB
command line       : WinLicense /protect V2Suit /software Mir2
executable         : WinLicense.exe
exec. date/time    : 2022-04-26 17:58
version            : 3.1.3.0
compiled with      : Delphi 10.1 Berlin
madExcept version  : 4.0.21
WinLicense.exe.mad : $001cafe8, $4e57549a, $9385ef84
callstack crc      : $622cace3, $272dfa8b, $272dfa8b
exception number   : 1
exception class    : EAccessViolation
exception message  : Access violation at address 0172AD59 in module 'WinLicense.exe'. Read of address 0000002C.

main thread ($3ae4):
0172ad59 +009 WinLicense.exe segment%331  public%74088
02880c16 +032 WinLicense.exe segment%1129 public%181829
028807f0 +088 WinLicense.exe segment%1129 public%181827
028877a1 +229 WinLicense.exe segment%1134 public%181932
02887413 +057 WinLicense.exe segment%1134 public%181929
0289b2b5 +025 WinLicense.exe segment%1142 public%182104
0289b30c +010 WinLicense.exe segment%1142 public%182105
028be366 +022 WinLicense.exe segment%1148 public%182560
00f52511 +055 WinLicense.exe segment%94   public%16911
00f52439 +021 WinLicense.exe segment%94   public%16910
00f567db +23b WinLicense.exe segment%94   public%17078
00de62dc +014 WinLicense.exe segment%45   public%7749
77484e9b +04b ntdll.dll                   KiUserCallbackDispatcher
00f5653d +02d WinLicense.exe segment%94   public%17076
00f567a9 +209 WinLicense.exe segment%94   public%17078
00de62dc +014 WinLicense.exe segment%45   public%7749
77484e9b +04b ntdll.dll                   KiUserCallbackDispatcher
7544dd09 +169 user32.dll                  PeekMessageW
00f57550 +014 WinLicense.exe segment%94   public%17099
00f5765a +00a WinLicense.exe segment%94   public%17100
0288e84f +0a3 WinLicense.exe segment%1141 public%182023
02897a8a +b12 WinLicense.exe segment%1142 public%182074
0289b600 +044 WinLicense.exe segment%1142 public%182108
00f4d445 +015 WinLicense.exe segment%94   public%16774
00f51cb1 +0a9 WinLicense.exe segment%94   public%16902
00e66972 +2be WinLicense.exe segment%73   public%11546
00e6b4bd +5e9 WinLicense.exe segment%73   public%11708
00f4df05 +64d WinLicense.exe segment%94   public%16791
010054a3 +007 WinLicense.exe segment%122  public%21925
019f3679 +009 WinLicense.exe segment%488  public%89471
019f3b33 +007 WinLicense.exe segment%488  public%89496
019f4b6a +072 WinLicense.exe segment%488  public%89543
01005723 +007 WinLicense.exe segment%122  public%21942
00e665ac +024 WinLicense.exe segment%73   public%11539
00e6a885 +10d WinLicense.exe segment%73   public%11699
00e6a994 +0bc WinLicense.exe segment%73   public%11700
00e6d612 +026 WinLicense.exe segment%73   public%11800
00e66972 +2be WinLicense.exe segment%73   public%11546
00e6b4bd +5e9 WinLicense.exe segment%73   public%11708
00f4df05 +64d WinLicense.exe segment%94   public%16791
010054a3 +007 WinLicense.exe segment%122  public%21925
019f3679 +009 WinLicense.exe segment%488  public%89471
019f3b33 +007 WinLicense.exe segment%488  public%89496
019f4b6a +072 WinLicense.exe segment%488  public%89543
01005723 +007 WinLicense.exe segment%122  public%21942
00e665ac +024 WinLicense.exe segment%73   public%11539
00e64f5e +026 WinLicense.exe segment%73   public%11455
00f4d721 +03d WinLicense.exe segment%94   public%16786
00f5798f +0b3 WinLicense.exe segment%94   public%17106
02c602ec +254 WinLicense.exe segment%1805 public%203362
7700fa27 +017 KERNEL32.DLL                BaseThreadInitThunk

thread $2c48:
7700fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $1cc0:
7700fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $1328:
7700fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $2914: <priority:2>
75435b0f +4f user32.dll                GetMessageA
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
74b334b5 +00 winmm.dll

thread $2370:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
76573ff7 +00 combase.dll

thread $140c:
7700fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $31fc:
7700fa27 +17 KERNEL32.DLL  BaseThreadInitThunk

thread $19a4 (TdxBackgroundFormatter.TWorkThread): <priority:-1>
7530b30d +fd KERNELBASE.dll             WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll             WaitForMultipleObjects
0207f2bb +2b WinLicense.exe segment%730 public%134328
0207f23f +07 WinLicense.exe segment%730 public%134325
00d51e3f +2b WinLicense.exe segment%34  public%4271
00de2521 +49 WinLicense.exe segment%45  public%7541
00cab274 +28 WinLicense.exe segment%0   public%362
00d51d25 +0d WinLicense.exe segment%34  public%4269
00d51d8a +32 WinLicense.exe segment%34  public%4270
7700fa27 +17 KERNEL32.DLL               BaseThreadInitThunk
>> created by main thread ($3ae4) at:
0207f20b +1b WinLicense.exe segment%730 public%134324

thread $2038:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $2414:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $1b3c:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $3850:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $1e64:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $2048:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $20d0:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $3900:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $17ac:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $22e0:
7530b30d +fd KERNELBASE.dll            WaitForMultipleObjectsEx
7530b1f3 +13 KERNELBASE.dll            WaitForMultipleObjects
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $2b38:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $1688:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $1a94:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $e00:
75314ad5 +45 KERNELBASE.dll            SleepEx
75314a7a +0a KERNELBASE.dll            Sleep
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $2860:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $a04:
75314ad5 +45 KERNELBASE.dll            SleepEx
75314a7a +0a KERNELBASE.dll            Sleep
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +00 libmysqld.dll

thread $2d80:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $1b4:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $2e80:
774f6318 +138 ntdll.dll                 RtlSleepConditionVariableCS
753a307a +01a KERNELBASE.dll            SleepConditionVariableCS
00d51d25 +00d WinLicense.exe segment%34 public%4269
00d51d8a +032 WinLicense.exe segment%34 public%4270
7700fa27 +017 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
7905aa5c +000 libmysqld.dll

thread $17e8:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $1d74:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $5f8:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $698:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $28e8:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $3aec:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $35a4:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
5e11d700 +00 VCOMP140.DLL

thread $1ca4:
75314ad5 +45 KERNELBASE.dll            SleepEx
75314a7a +0a KERNELBASE.dll            Sleep
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by main thread ($3ae4) at:
217db0bc +00 SogouPy.ime

thread $135c (TProtectionThread):
77455dd9 +39 ntdll.dll                  RtlAllocateHeap
10053475 +25 MainDll.dll                Fn8197
0191cac4 +10 WinLicense.exe segment%440 public%84003
00d51e3f +2b WinLicense.exe segment%34  public%4271
00de2521 +49 WinLicense.exe segment%45  public%7541
00cab274 +28 WinLicense.exe segment%0   public%362
00d51d25 +0d WinLicense.exe segment%34  public%4269
00d51d8a +32 WinLicense.exe segment%34  public%4270
7700fa27 +17 KERNEL32.DLL               BaseThreadInitThunk
>> created by main thread ($3ae4) at:
0191cb1e +52 WinLicense.exe segment%440 public%84004

thread $3b08:
75314ad5 +45 KERNELBASE.dll            SleepEx
75314a7a +0a KERNELBASE.dll            Sleep
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
1005b2d3 +00 MainDll.dll

thread $378:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $28cc:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $13b4:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $f58:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $201c:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $430:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $484:
75301263 +93 KERNELBASE.dll            WaitForSingleObjectEx
00d51d25 +0d WinLicense.exe segment%34 public%4269
00d51d8a +32 WinLicense.exe segment%34 public%4270
7700fa27 +17 KERNEL32.DLL              BaseThreadInitThunk
>> created by thread $135c (TProtectionThread) at:
5e11d700 +00 VCOMP140.DLL

thread $3a80:
02810210 +0a8 WinLicense.exe segment%1086 public%180646
028102c6 +15e WinLicense.exe segment%1086 public%180646
028402bf +11f WinLicense.exe segment%1102 public%181156
>> created by thread $135c (TProtectionThread) at:
100dad28 +000 MainDll.dll

modules:
00ca0000 WinLicense.exe            3.1.3.0             D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
0bb40000 Msftedit.dll              10.0.19041.1288     C:\WINDOWS\SYSTEM32
10000000 MainDll.dll                                   D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
21460000 SogouPy.ime               11.3.0.5218         C:\WINDOWS\system32
22290000 Resource.dll              11.3.0.5218         C:\Program Files (x86)\SogouInput\11.3.0.5218
46480000 security.dll              10.0.19041.1        C:\WINDOWS\SYSTEM32
529b0000 bcp47mrm.dll              10.0.19041.1266     C:\Windows\System32
529e0000 Windows.Globalization.dll 10.0.19041.746      C:\Windows\System32
5d870000 SogouTSF.ime              11.3.0.5218         C:\Windows\System32
5db40000 RICHED20.DLL              5.31.23.1231        C:\WINDOWS\SYSTEM32
5dd00000 libspv.dll                                    D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
5e100000 2478f6d8.dll                                  C:\Users\vkdfkc\AppData\Local\Temp
5e110000 VCOMP140.DLL              14.0.24212.0        D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
5e150000 WinlicenseSDK.DLL         3.0.5.0             D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
655b0000 textinputframework.dll    10.0.19041.1320     C:\WINDOWS\SYSTEM32
65a10000 dwmapi.dll                10.0.19041.746      C:\WINDOWS\SYSTEM32
65a40000 mlang.dll                 10.0.19041.746      C:\WINDOWS\system32
65a80000 twinapi.appcore.dll       10.0.19041.746      C:\WINDOWS\system32
65c10000 dcomp.dll                 10.0.19041.1387     C:\WINDOWS\system32
663c0000 dataexchange.dll          10.0.19041.1387     C:\WINDOWS\system32
67600000 d3d11.dll                 10.0.19041.1202     C:\WINDOWS\system32
67c30000 oleacc.dll                7.2.19041.746       C:\WINDOWS\SYSTEM32
68b90000 comctl32.dll              6.10.19041.1110     C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
69d70000 TextShaping.dll                               C:\WINDOWS\SYSTEM32
69e10000 DWrite.dll                10.0.19041.1165     C:\WINDOWS\SYSTEM32
6a990000 cscapi.dll                10.0.19041.546      C:\WINDOWS\SYSTEM32
6a9a0000 atlthunk.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
6a9b0000 msimg32.dll               10.0.19041.1466     C:\WINDOWS\SYSTEM32
6b550000 Bcp47Langs.dll            10.0.19041.1266     C:\Windows\System32
6f290000 CoreUIComponents.dll      10.0.19041.546      C:\WINDOWS\SYSTEM32
6f510000 CoreMessaging.dll         10.0.19041.867      C:\WINDOWS\SYSTEM32
6f5b0000 wintypes.dll              10.0.19041.1348     C:\WINDOWS\SYSTEM32
70b20000 propsys.dll               7.0.19041.1023      C:\WINDOWS\system32
70bf0000 gdiplus.dll               10.0.19041.1466     C:\WINDOWS\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.1466_none_d951c753e1040cbe
71390000 winspool.drv              10.0.19041.1288     C:\WINDOWS\SYSTEM32
719f0000 uxtheme.dll               10.0.19041.1266     C:\WINDOWS\system32
71c60000 winrnr.dll                10.0.19041.546      C:\WINDOWS\System32
71c70000 NLAapi.dll                10.0.19041.546      C:\WINDOWS\system32
71c90000 wshbth.dll                10.0.19041.546      C:\WINDOWS\system32
71ca0000 pnrpnsp.dll               10.0.19041.546      C:\WINDOWS\system32
71cc0000 napinsp.dll               10.0.19041.546      C:\WINDOWS\system32
71ef0000 rasadhlp.dll              10.0.19041.546      C:\Windows\System32
72150000 dbgcore.DLL               10.0.19041.546      C:\WINDOWS\SYSTEM32
722f0000 SHFolder.dll              10.0.19041.1        C:\WINDOWS\SYSTEM32
72300000 wkscli.dll                10.0.19041.1466     C:\WINDOWS\SYSTEM32
72320000 NETUTILS.DLL              10.0.19041.1466     C:\WINDOWS\SYSTEM32
72540000 dbghelp.dll               10.0.19041.1052     C:\WINDOWS\SYSTEM32
72c30000 profapi.dll               10.0.19041.844      C:\WINDOWS\SYSTEM32
72ca0000 wsock32.dll               10.0.19041.1        C:\WINDOWS\SYSTEM32
739b0000 netapi32.dll              10.0.19041.1466     C:\WINDOWS\SYSTEM32
73b20000 WINHTTP.dll               10.0.19041.1320     C:\WINDOWS\SYSTEM32
73bf0000 Wldp.dll                  10.0.19041.1320     C:\WINDOWS\SYSTEM32
73c20000 windows.storage.dll       10.0.19041.1466     C:\WINDOWS\SYSTEM32
74230000 ntmarta.dll               10.0.19041.546      C:\WINDOWS\SYSTEM32
74260000 mswsock.dll               10.0.19041.546      C:\WINDOWS\System32
743f0000 SSPICLI.DLL               10.0.19041.906      C:\WINDOWS\SYSTEM32
74420000 SECUR32.DLL               10.0.19041.546      C:\WINDOWS\SYSTEM32
74430000 DNSAPI.dll                10.0.19041.1320     C:\WINDOWS\SYSTEM32
74b10000 dhcpcsvc.DLL              10.0.19041.546      C:\WINDOWS\SYSTEM32
74b30000 winmm.dll                 10.0.19041.546      C:\WINDOWS\SYSTEM32
74d00000 WINSTA.dll                10.0.19041.546      C:\WINDOWS\SYSTEM32
74e40000 Iphlpapi.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
74fc0000 wtsapi32.dll              10.0.19041.546      C:\WINDOWS\SYSTEM32
74fd0000 version.dll               10.0.19041.546      C:\WINDOWS\SYSTEM32
74fe0000 kernel.appcore.dll        10.0.19041.546      C:\WINDOWS\System32
74ff0000 IMAGEHLP.DLL              10.0.19041.1415     C:\WINDOWS\System32
75010000 dxgi.dll                  10.0.19041.1266     C:\WINDOWS\System32
75160000 shcore.dll                10.0.19041.1387     C:\WINDOWS\System32
751f0000 KERNELBASE.dll            10.0.19041.1466     C:\WINDOWS\System32
75410000 user32.dll                10.0.19041.1466     C:\WINDOWS\System32
755b0000 WS2_32.dll                10.0.19041.546      C:\WINDOWS\System32
756b0000 ole32.dll                 10.0.19041.1202     C:\WINDOWS\System32
75800000 SHLWAPI.dll               10.0.19041.1023     C:\WINDOWS\System32
75850000 win32u.dll                10.0.19041.1466     C:\WINDOWS\System32
75870000 GDI32.dll                 10.0.19041.1202     C:\WINDOWS\System32
758a0000 gdi32full.dll             10.0.19041.1466     C:\WINDOWS\System32
75980000 shell32.dll               10.0.19041.1466     C:\WINDOWS\System32
75f60000 clbcatq.dll               2001.12.10941.16384 C:\WINDOWS\System32
76030000 msvcp_win.dll             10.0.19041.789      C:\WINDOWS\System32
76220000 RPCRT4.dll                10.0.19041.1466     C:\WINDOWS\System32
762e0000 bcrypt.dll                10.0.19041.1023     C:\WINDOWS\System32
76300000 ucrtbase.dll              10.0.19041.789      C:\WINDOWS\System32
76420000 msvcrt.dll                7.0.19041.546       C:\WINDOWS\System32
764e0000 PSAPI.DLL                 10.0.19041.546      C:\WINDOWS\System32
76500000 combase.dll               10.0.19041.1348     C:\WINDOWS\System32
76880000 CRYPT32.dll               10.0.19041.1320     C:\WINDOWS\System32
769e0000 NSI.dll                   10.0.19041.610      C:\WINDOWS\System32
769f0000 SETUPAPI.DLL              10.0.19041.1237     C:\WINDOWS\System32
76e30000 advapi32.dll              10.0.19041.1466     C:\WINDOWS\System32
76eb0000 bcryptPrimitives.dll      10.0.19041.1415     C:\WINDOWS\System32
76f10000 sechost.dll               10.0.19041.1466     C:\WINDOWS\System32
76ff0000 KERNEL32.DLL              10.0.19041.1466     C:\WINDOWS\System32
770e0000 oleaut32.dll              10.0.19041.985      C:\WINDOWS\System32
77180000 MSCTF.dll                 10.0.19041.1466     C:\WINDOWS\System32
77260000 cfgmgr32.dll              10.0.19041.1151     C:\WINDOWS\System32
772a0000 IMM32.dll                 10.0.19041.546      C:\WINDOWS\System32
772e0000 USP10.dll                 10.0.19041.546      C:\WINDOWS\System32
77350000 comdlg32.dll              10.0.19041.906      C:\WINDOWS\System32
77410000 ntdll.dll                 10.0.19041.1466     C:\WINDOWS\SYSTEM32
77620000 oledlg.dll                10.0.19041.746      C:\WINDOWS\SYSTEM32
78d10000 libmysqld.dll             5.6.21.0            D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
799d0000 c_is2022.dll              10.0.19041.1        C:\WINDOWS\system32
799e0000 c_g18030.dll              10.0.19041.1        C:\WINDOWS\system32
79a20000 c_iscii.dll               10.0.19041.1        C:\WINDOWS\system32
7ad20000 msls31.dll                3.10.349.0          C:\WINDOWS\SYSTEM32
7ae40000 FaultRep.dll              10.0.19041.1387     C:\WINDOWS\SYSTEM32
7b0d0000 DUser.dll                 10.0.19041.546      C:\WINDOWS\SYSTEM32
7bdf0000 globinputhost.dll         10.0.19041.546      C:\WINDOWS\SYSTEM32
7c850000 WindowsCodecs.dll         10.0.19041.1151     C:\WINDOWS\SYSTEM32

processes:
0000 Idle                                 0 0    0
0004 System                               0 0    0
007c Registry                             0 0    0
0230 smss.exe                             0 0    0
0308 csrss.exe                            0 0    0
0370 wininit.exe                          0 0    0
037c csrss.exe                            1 0    0
03b8 services.exe                         0 0    0
03cc lsass.exe                            0 0    0
02dc svchost.exe                          0 0    0
0054 fontdrvhost.exe                      0 0    0
0404 WUDFHost.exe                         0 0    0
0448 svchost.exe                          0 0    0
0478 svchost.exe                          0 0    0
04b0 winlogon.exe                         1 0    0
04ec fontdrvhost.exe                      1 0    0
053c WUDFHost.exe                         0 0    0
057c dwm.exe                              1 0    0
05d4 svchost.exe                          0 0    0
05e4 svchost.exe                          0 0    0
05ec svchost.exe                          0 0    0
063c svchost.exe                          0 0    0
0668 svchost.exe                          0 0    0
0670 svchost.exe                          0 0    0
0678 svchost.exe                          0 0    0
0680 svchost.exe                          0 0    0
072c svchost.exe                          0 0    0
0768 svchost.exe                          0 0    0
07c0 svchost.exe                          0 0    0
07dc svchost.exe                          0 0    0
07e4 svchost.exe                          0 0    0
07f8 svchost.exe                          0 0    0
086c svchost.exe                          0 0    0
08d8 svchost.exe                          0 0    0
0948 svchost.exe                          0 0    0
0950 svchost.exe                          0 0    0
09a4 igfxCUIService.exe                   0 0    0
09ac svchost.exe                          0 0    0
0a20 svchost.exe                          0 0    0
0a34 svchost.exe                          0 0    0
0a58 NVDisplay.Container.exe              0 0    0
0aac svchost.exe                          0 0    0
0acc svchost.exe                          0 0    0
0ad4 svchost.exe                          0 0    0
0afc svchost.exe                          0 0    0
0b30 Memory Compression                   0 0    0
0b60 svchost.exe                          0 0    0
0b68 svchost.exe                          0 0    0
0c0c svchost.exe                          0 0    0
0c9c NVDisplay.Container.exe              1 0    0
0cb8 svchost.exe                          0 0    0
0d48 svchost.exe                          0 0    0
0d88 svchost.exe                          0 0    0
0dc0 svchost.exe                          0 0    0
0e64 svchost.exe                          0 0    0
0e70 ZhuDongFangYu.exe                    0 0    0
0ebc svchost.exe                          0 0    0
0f34 svchost.exe                          0 0    0
0f88 spoolsv.exe                          0 0    0
0fe0 svchost.exe                          0 0    0
0c44 svchost.exe                          0 0    0
1010 svchost.exe                          0 0    0
104c svchost.exe                          0 0    0
1128 svchost.exe                          0 0    0
1130 svchost.exe                          0 0    0
11a4 svchost.exe                          0 0    0
11ac AdminService.exe                     0 0    0
11b4 OfficeClickToRun.exe                 0 0    0
11bc IntelCpHDCPSvc.exe                   0 0    0
11d4 svchost.exe                          0 0    0
11ec svchost.exe                          0 0    0
1208 svchost.exe                          0 0    0
121c svchost.exe                          0 0    0
1248 esif_uf.exe                          0 0    0
1278 FNPLicensingService.exe              0 0    0
1280 svchost.exe                          0 0    0
128c gameinputsvc.exe                     0 0    0
12a0 OneApp.IGCC.WinService.exe           0 0    0
1310 IntelAudioService.exe                0 0    0
131c svchost.exe                          0 0    0
1330 LMS.exe                              0 0    0
134c NahimicService.exe                   0 0    0
1374 KCleanSrv.exe                        0 0    0
13dc dasHost.exe                          0 0    0
1030 svchost.exe                          0 0    0
0f1c NIHardwareService.exe                0 0    0
0f14 nvcontainer.exe                      0 0    0
0ed8 MSOfficePLUSService.exe              0 0    0
1200 QcomWlanSrvx64.exe                   0 0    0
1418 QQProtect.exe                        0 0    0
1434 svchost.exe                          0 0    0
1480 RstMwService.exe                     0 0    0
1488 RtkAudUService64.exe                 0 0    0
14a8 sqlwriter.exe                        0 0    0
14d0 vmnetdhcp.exe                        0 0    0
14d8 vmnat.exe                            0 0    0
14e4 vmware-authd.exe                     0 0    0
14ec svchost.exe                          0 0    0
151c svchost.exe                          0 0    0
1534 phpStudyServer.exe                   0 0    0
153c svchost.exe                          0 0    0
155c svchost.exe                          0 0    0
1578 svchost.exe                          0 0    0
1590 vmware-usbarbitrator64.exe           0 0    0
15d8 gameinputsvc.exe                     1 0    0
15ec svchost.exe                          0 0    0
1620 IntelCpHeciSvc.exe                   0 0    0
163c mysqld.exe                           0 0    0
1710 jhi_service.exe                      0 0    0
1904 svchost.exe                          0 0    0
1a98 svchost.exe                          0 0    0
1864 rundll32.exe                         1 0    0
1d9c gamingservices.exe                   0 0    0
1da4 gamingservicesnet.exe                0 0    0
1ed8 svchost.exe                          0 0    0
1fe4 svchost.exe                          0 0    0
05c4 svchost.exe                          0 0    0
1270 svchost.exe                          0 0    0
21bc svchost.exe                          0 0    0
2208 svchost.exe                          0 0    0
210c dllhost.exe                          0 0    0
178c dptf_helper.exe                      1 2    5    normal       C:\Windows\System32\Intel\DPTF
185c nvcontainer.exe                      1 0    19   normal       C:\Program Files\NVIDIA Corporation\NvContainer
2220 sihost.exe                           1 0    7    normal       C:\Windows\System32
20fc svchost.exe                          1 0    1    normal       C:\Windows\System32
2420 svchost.exe                          1 0    4    normal       C:\Windows\System32
2428 PresentationFontCache.exe            0 0    0
2470 taskhostw.exe                        1 8    6    normal       C:\Windows\System32
24a4 clash-core-service.exe               0 0    0
24ac conhost.exe                          0 0    0
24e4 svchost.exe                          0 0    0
25d0 igfxEM.exe                           1 10   16   normal       C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_cb5b3ac4d6a4f65a
2670 explorer.exe                         1 1194 823  normal       C:\Windows
2694 svchost.exe                          0 0    0
2480 NVIDIA Web Helper.exe                1 2    12   below normal C:\Program Files (x86)\NVIDIA Corporation\NvNode
0998 conhost.exe                          1 10   3    below normal C:\Windows\System32
2744 svchost.exe                          1 0    5    normal       C:\Windows\System32
26ac RtkAudUService64.exe                 1 0    0
2848 SearchIndexer.exe                    0 0    0
295c StartMenuExperienceHost.exe          1 0    17   normal       C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy
28c8 svchost.exe                          0 0    0
02f8 RuntimeBroker.exe                    1 8    1    normal       C:\Windows\System32
2828 SearchApp.exe                        1 12   58   normal       C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy
2c08 RuntimeBroker.exe                    1 0    7    normal       C:\Windows\System32
2dc8 ctfmon.exe                           1 0    0
2e2c SettingSyncHost.exe                  1 1    4    below normal C:\Windows\System32
2f88 TextInputHost.exe                    1 0    60   normal       C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp
2dbc SecurityHealthSystray.exe            1 7    5    normal       C:\Windows\System32
0c1c SecurityHealthService.exe            0 0    0
0d08 RtkAudUService64.exe                 1 7    7    normal       C:\Windows\System32
0578 CCXProcess.exe                       1 0    0    normal       C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience
25bc node.exe                             1 0    4    normal       C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs
2f6c conhost.exe                          1 10   3    normal       C:\Windows\System32
1fb8 msedge.exe                           1 210  116  normal       C:\Program Files (x86)\Microsoft\Edge\Application
3024 msedge.exe                           1 0    3    normal       C:\Program Files (x86)\Microsoft\Edge\Application
311c msedge.exe                           1 13   23   above normal C:\Program Files (x86)\Microsoft\Edge\Application
3124 msedge.exe                           1 0    3    normal       C:\Program Files (x86)\Microsoft\Edge\Application
3194 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
3270 AdobeIPCBroker.exe                   1 0    7    normal       C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox
32c4 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
3364 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
338c msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
33bc msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
34cc svchost.exe                          0 0    0
36b4 IGCCTray.exe                         1 19   16   normal       C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5185.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray
36c0 svchost.exe                          0 0    0
3788 IGCC.exe                             1 0    7    normal       C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5185.0_x64__8j3eq9eme6ctt
33a4 GoogleIMEJaConverter.exe             1 0    1    normal       C:\Program Files (x86)\Google\Google Japanese Input
082c GoogleIMEJaRenderer.exe              1 13   6    normal       C:\Program Files (x86)\Google\Google Japanese Input
3224 GoogleIMEJaCacheService.exe          0 0    0
3078 GoogleUpdate.exe                     0 0    0
2ff4 GoogleCrashHandler.exe               0 0    0
04c8 GoogleCrashHandler64.exe             0 0    0
37dc SgrmBroker.exe                       0 0    0
3464 sqlbrowser.exe                       0 0    0
1358 svchost.exe                          0 0    0
1548 svchost.exe                          1 0    1    normal       C:\Windows\System32
0e4c msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
2294 QQ.exe                               1 158  164  normal       C:\Program Files (x86)\Tencent\QQ\Bin
24b0 TXPlatform.exe                       1 0    2    normal       C:\Program Files (x86)\Tencent\QQ\Bin
1ea0 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
2c88 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
372c QQGuild.exe                          1 16   61   normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\9.7.12-197
2ce8 QQGuild.exe                          1 3    17   above normal C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\9.7.12-197
0ca4 QQGuild.exe                          1 0    1    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\9.7.12-197
3204 QQGuild.exe                          1 0    0    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\9.7.12-197
21c8 QQGuild.exe                          1 0    0    normal       C:\Users\vkdfkc\AppData\Local\Tencent\QQGuild\9.7.12-197
06a4 CompPkgSrv.exe                       1 0    1    normal       C:\Windows\System32
2fec msedge.exe                           1 0    1    normal       C:\Program Files (x86)\Microsoft\Edge\Application
0c70 svchost.exe                          0 0    0
0a54 msedge.exe                           1 0    5    normal       C:\Program Files (x86)\Microsoft\Edge\Application
235c RuntimeBroker.exe                    1 0    4    normal       C:\Windows\System32
0008 rundll32.exe                         1 0    2    normal       C:\Windows\System32
1968 bds.exe                              1 3034 1063 normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
0bf0 ShellExperienceHost.exe              1 6    29   normal       C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy
1670 RuntimeBroker.exe                    1 0    3    normal       C:\Windows\System32
0b3c DelphiLsp.exe                        1 0    5    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
2430 conhost.exe                          1 10   9    normal       C:\Windows\System32
0b38 DelphiLsp.exe                        1 0    3    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
07b8 DelphiLsp.exe                        1 0    1    normal       E:\Program Files (x86)\Embarcadero\Studio\22.0\bin
0b70 IntelSoftwareAssetManagerService.exe 0 0    0
0d28 bds.exe                              1 2940 1851 normal       D:\Program Files (x86)\Embarcadero\Studio\21.0\bin
031c svchost.exe                          0 0    0
1778 GameCenter.exe                       1 150  99   normal       E:\MirServer
0ba4 DBServer.exe                         1 99   93   normal       E:\MirServer\DBServer
123c LoginSrv.exe                         1 100  92   normal       E:\MirServer\LoginSrv
1210 LogDataServer.exe                    1 39   35   normal       E:\MirServer\LogServer
1fc4 RunGate.exe                          1 121  61   normal       E:\MirServer\RunGate
17f8 SelGate.exe                          1 72   57   normal       E:\MirServer\SelGate
2514 LoginGate.exe                        1 81   64   normal       E:\MirServer\LoginGate
257c svchost.exe                          0 0    0
1c8c msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
2bb4 svchost.exe                          0 0    0
1eb8 MoUsoCoreWorker.exe                  0 0    0
0474 UserOOBEBroker.exe                   1 0    1    normal       C:\Windows\System32\oobe
0b04 SDXHelper.exe                        1 0    15   idle         C:\Program Files (x86)\Microsoft Office\root\Office16
2360 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
0edc svchost.exe                          0 0    0
0774 svchost.exe                          0 0    0
099c msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
27e4 msedge.exe                           1 0    0    normal       C:\Program Files (x86)\Microsoft\Edge\Application
1ce0 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
1234 notepad.exe                          1 199  55   normal       C:\Windows\System32
37a8 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
3948 IntelSoftwareAssetManagerService.exe 0 0    0
34c8 winchm.exe                           1 402  298  normal       D:\Program Files (x86)\Softany\WinCHM
3570 SDBEditor.exe                        1 699  188  normal       E:\MirServer\Mir200\SDB
2b4c notepad.exe                          1 188  52   normal       C:\Windows\System32
26a4 msedge.exe                           1 0    0    idle         C:\Program Files (x86)\Microsoft\Edge\Application
3b04 svchost.exe                          0 0    0
3670 svchost.exe                          0 0    0
2074 alg.exe                              0 0    0
3828 svchost.exe                          0 0    0
2fb0 svchost.exe                          0 0    0
3808 svchost.exe                          0 0    0
3988 svchost.exe                          0 0    0
38f4 svchost.exe                          0 0    0
32a8 svchost.exe                          0 0    0
13e4 audiodg.exe                          0 0    0
2ee8 MirClinet.exe                        1 577  176  normal       D:\Program Files\盛大网络\DATA版
3ad8 WinLicense.exe                       1 761  353  normal       D:\传奇源码\BlueCodePXL\WinLicense_3.1.3_Licensed
245c cmd.exe                              1 0    0    normal       C:\Windows\System32
2434 conhost.exe                          1 188  45   normal       C:\Windows\System32
0480 upx.exe                              1 0    0    normal       D:\传奇源码\BlueCodePXL\Release\MakeLogin\Packer

hardware:
+ {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}
  - Fax
  - Microsoft Print to PDF
  - Microsoft XPS Document Writer
  - OneNote (Desktop)
  - OneNote for Windows 10
  - 根打印队列
+ {36fc9e60-c465-11cf-8056-444553540000}
  - Intel(R) USB 3.1 可扩展主机控制器 - 1.10 (Microsoft)
  - USB Composite Device
  - USB Composite Device
  - USB 根集线器(USB 3.0)
+ {4d36e966-e325-11ce-bfc1-08002be10318}
  - 基于 ACPI x64 的电脑
+ {4d36e967-e325-11ce-bfc1-08002be10318}
  - PC SN520 NVMe WDC 128GB
  - ST1000LM035-1RK172
+ {4d36e968-e325-11ce-bfc1-08002be10318}
  - Intel(R) UHD Graphics 630 (driver 26.20.100.8141)
  - NVIDIA GeForce GTX 1650 (driver 30.0.14.9613)
+ {4d36e96b-e325-11ce-bfc1-08002be10318}
  - HID Keyboard Device
  - HID Keyboard Device
  - HID Keyboard Device
  - HID Keyboard Device
  - PS/2 标准键盘
+ {4d36e96c-e325-11ce-bfc1-08002be10318}
  - NVIDIA High Definition Audio (driver 1.3.38.92)
  - NVIDIA Virtual Audio Device (Wave Extensible) (WDM) (driver 4.45.0.0)
  - Realtek(R) Audio (driver 6.0.8996.1)
  - 英特尔(R) 显示器音频 (driver 10.27.0.9)
  - 英特尔® 智音技术 (driver 10.23.0.3349)
+ {4d36e96e-e325-11ce-bfc1-08002be10318}
  - 通用即插即用监视器
+ {4d36e96f-e325-11ce-bfc1-08002be10318}
  - HID-compliant mouse
  - HID-compliant mouse
  - HID-compliant mouse
  - HID-Compliant Mouse (driver 14.27.40.873)
  - PS/2 兼容鼠标
+ {4d36e972-e325-11ce-bfc1-08002be10318}
  - ASIX AX88772C USB2.0 to Fast Ethernet Adapter
  - Microsoft Kernel Debug Network Adapter
  - Microsoft Wi-Fi Direct Virtual Adapter
  - Microsoft Wi-Fi Direct Virtual Adapter #3
  - Qualcomm QCA9377 802.11ac Wireless Adapter (driver 12.0.0.1118)
  - Realtek PCIe GbE Family Controller (driver 10.50.511.2021)
  - VMware Virtual Ethernet Adapter for VMnet1 #2 (driver 14.0.0.5)
  - VMware Virtual Ethernet Adapter for VMnet8 #2 (driver 14.0.0.5)
  - WAN Miniport (IKEv2)
  - WAN Miniport (IP)
  - WAN Miniport (IPv6)
  - WAN Miniport (L2TP)
  - WAN Miniport (Network Monitor)
  - WAN Miniport (PPPOE)
  - WAN Miniport (PPTP)
  - WAN Miniport (SSTP)
+ {4d36e97b-e325-11ce-bfc1-08002be10318}
  - Intel(R) Chipset SATA/PCIe RST Premium Controller (driver 17.11.0.1000)
  - Microsoft 存储空间控制器
  - Xvdd SCSI Miniport (driver 10.0.22012.2)
+ {4d36e97d-e325-11ce-bfc1-08002be10318}
  - ACPI 唤醒警报
  - ACPI 处理器聚合器
  - ACPI 热区域
  - ACPI 电源按钮
  - ACPI 盖子
  - ACPI 睡眠按钮
  - Detection Verification (driver 1.0.1236.0)
  - High Definition Audio 控制器
  - Intel(R) 300 Series Chipset Family LPC Controller (HM370) - A30D (driver 10.1.16.6)
  - Intel(R) Dynamic Platform and Thermal Framework Processor Participant (driver 8.5.10103.7263)
  - Intel(R) Dynamic Tuning Generic Participant (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Generic Participant (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Manager (driver 8.7.10200.12510)
  - Intel(R) Dynamic Tuning Memory Participant (driver 8.7.10200.12510)
  - Intel(R) Gaussian Mixture Model - 1911 (driver 10.1.7.3)
  - Intel(R) Host Bridge/DRAM Registers - 3E10 (driver 10.1.14.7)
  - Intel(R) Management Engine Interface #1 (driver 2108.100.0.1053)
  - Intel(R) PCI Express Root Port #14 - A335 (driver 10.1.16.6)
  - Intel(R) PCI Express Root Port #15 - A336 (driver 10.1.16.6)
  - Intel(R) PCIe Controller (x16) - 1901 (driver 10.1.7.3)
  - Intel(R) Power Engine Plug-in
  - Intel(R) Serial IO GPIO Host Controller - INT3450 (driver 30.100.2020.7)
  - Intel(R) Serial IO I2C Host Controller - A368 (driver 30.100.2020.7)
  - Intel(R) Serial IO I2C Host Controller - A369 (driver 30.100.2020.7)
  - Intel(R) SMBus - A323 (driver 10.1.16.6)
  - Intel(R) SPI (flash) Controller - A324 (driver 10.1.16.6)
  - Intel(R) Thermal Subsystem - A379 (driver 10.1.16.6)
  - Intel(R) Watchdog Timer Driver (Intel(R) WDT) (driver 11.7.0.1000)
  - Microsoft ACPI 兼容的嵌入式控制器
  - Microsoft ACPI-Compliant System
  - Microsoft Hyper-V 虚拟化基础结构驱动程序
  - Microsoft System Management BIOS Driver
  - Microsoft UEFI 兼容系统
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft Windows Management Interface for ACPI
  - Microsoft 基本呈现驱动程序
  - Microsoft 基本显示驱动程序
  - Microsoft 虚拟驱动器枚举器
  - NDIS 虚拟网络适配器枚举器
  - NVVHCI Enumerator (driver 3.5.3090.2760)
  - PCI Express 根复合体
  - PCI 标准 RAM 控制器
  - UMBus Root Bus Enumerator
  - VMware VMCI Host Device (driver 9.8.16.0)
  - 充电均衡驱动程序
  - 即插即用软件设备枚举器
  - 卷管理器
  - 可编程中断控制器
  - 复合总线枚举器
  - 数值数据处理器
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 母板资源
  - 系统计时器
  - 英特尔(R)智音技术 OED (driver 10.23.3349.212)
  - 英特尔(R)智音技术音频控制器 (driver 10.23.0.3349)
  - 远程桌面设备重定向程序总线
  - 高精度事件计时器
+ {50127dc3-0f36-415e-a6cc-4cb3be910b65}
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
  - Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
+ {5c4c3332-344d-483c-8739-259e934c9cc8}
  - A-Volute Nh3 Audio Effects Component (driver 1.8.3.0)
  - Intel(R) Dynamic Application Loader Host Interface (driver 1.41.2021.121)
  - Intel(R) Dynamic Application Loader Host Interface (driver 1.41.2021.121)
  - Intel(R) Graphics Command Center (driver 26.20.100.8141)
  - Intel(R) Graphics Control Panel (driver 26.20.100.8141)
  - Intel(R) iCLS Client (driver 1.62.321.1)
  - Intel(R) iCLS Client (driver 1.62.321.1)
  - Intel(R) Management and Security Application Local Management (driver 2109.0.52.0)
  - Intel(R) Management and Security Application Local Management (driver 2109.0.52.0)
  - Intel(R) Optane(TM) Memory and Storage Management Component (driver 17.9.0.1)
  - Intel(R) Optane(TM) Pinning Shell Extensions (driver 17.9.6.1019)
  - Intel(R) Optane(TM) Pinning Shell Extensions (driver 17.9.6.1019)
  - Realtek Asio Component (driver 1.0.0.5)
  - Realtek Audio Effects Component (driver 11.0.6000.799)
  - Realtek Audio Effects Component (INT) (driver 11.0.6000.799)
  - Realtek Audio Universal Service (driver 1.0.0.279)
  - Realtek Hardware Support Application (driver 11.0.6000.226)
  - Realtek Speech Preprocessing IP DLL Component (driver 1.0.25.776)
+ {62f9c741-b25a-46ce-b54c-9bccce08b6f2}
  - Microsoft Device Association Root Enumerator
  - Microsoft GS 波表合成器
  - Microsoft Radio Device Enumeration Bus
  - Microsoft RRAS Root Enumerator
  - WLAN
  - 蓝牙
+ {72631e54-78a4-11d0-bcf7-00aa00b7b32a}
  - Microsoft AC 适配器
  - Microsoft ACPI 兼容的控制方法电池
+ {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
  - I2C HID 设备
  - Intel(R) HID Event Filter (driver 2.2.1.377)
  - Microsoft Input Configuration Device
  - Pentablet HID (driver 6.1.7600.16385)
  - USB 输入设备
  - USB 输入设备
  - 便携式设备控制装置
  - 已转换便携式设备控制装置
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的供应商定义设备
  - 符合 HID 标准的数字化器
  - 符合 HID 标准的无线通信控制
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的用户控制设备
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的系统控制器
  - 符合 HID 标准的触摸板
+ {aa018edf-4915-415e-9c17-d7ebec8917d2}
  - NvModuleTracker Device (driver 6.14.25214.24630)
+ {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
  - 扬声器 (Realtek(R) Audio)
  - 麦克风阵列 (英特尔® 智音技术)
+ {ca3e7ab9-b4c3-4ae6-8251-579ef933890f}
  - Integrated Webcam
+ {d94ee5d8-d189-4994-83d2-f68d7d41b0e6}
  - 受信任的平台模块 2.0
+ {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
  - Qualcomm QCA9377 Bluetooth (driver 10.0.0.1118)
+ {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
  - System Firmware 1.11.1 (driver 0.1.11.1)

cpu registers:
eax = 00000000
ebx = 00000000
ecx = 00000000
edx = 00000000
esi = 00000000
edi = 00000000
eip = 0172ad59
esp = 0019efa4
ebp = 0019efcc

stack dump:
0019efa4  90 f0 19 00 9c 69 75 0d - 00 00 00 00 1b 0c 88 02  .....iu.........
0019efb4  e0 ef 19 00 28 a9 ca 00 - cc ef 19 00 1c f0 19 00  ....(...........
0019efc4  00 00 00 00 80 8f 02 1e - 54 f0 19 00 f5 07 88 02  ........T.......
0019efd4  24 0a 88 02 44 4d 56 0d - 00 00 00 00 5c f0 19 00  $...DMV.....\...
0019efe4  28 a9 ca 00 54 f0 19 00 - 00 00 00 00 00 00 00 00  (...T...........
0019eff4  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f004  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f014  00 00 00 00 00 00 00 00 - 00 00 00 00 4c a2 70 12  ............L.p.
0019f024  11 00 00 00 00 00 00 00 - 00 00 00 00 27 00 00 00  ............'...
0019f034  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f044  00 00 00 00 27 00 00 00 - b0 f0 19 00 80 8f 02 1e  ....'...........
0019f054  9c f0 19 00 a6 77 88 02 - a4 f0 19 00 28 a9 ca 00  .....w......(...
0019f064  9c f0 19 00 10 00 00 00 - 32 1e 03 00 00 64 f9 0a  ........2....d..
0019f074  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0019f084  b0 a4 53 0d 00 00 00 00 - 0d 00 00 00 00 00 00 00  ..S.............
0019f094  b0 f0 19 00 d0 20 cb 0d - c4 f0 19 00 18 74 88 02  ..... .......t..
0019f0a4  cc f0 19 00 28 a9 ca 00 - c4 f0 19 00 00 00 00 00  ....(...........
0019f0b4  62 00 00 00 06 00 00 00 - d8 f0 19 00 d0 20 cb 0d  b............ ..
0019f0c4  e4 f0 19 00 ba b2 89 02 - 38 f1 19 00 28 a9 ca 00  ........8...(...
0019f0d4  e4 f0 19 00 00 00 00 00 - bc f1 19 00 00 4d 9b 0d  .............M..

disassembling:
[...]
0172ad51   push    esi
0172ad52   push    edi
0172ad53   mov     edi, edx
0172ad55   mov     esi, eax
0172ad57   mov     ecx, edi
0172ad59 > mov     eax, [esi+$2c]
0172ad5c   mov     edx, esi
0172ad5e   mov     ebx, [eax]
0172ad60   call    dword ptr [ebx+$484]
0172ad66   pop     edi
0172ad67   pop     esi
[...]

