Код:
> k
# Child-SP RetAddr Call Site
00 000000b9`9873d330 00007ffd`2b697a72 ntdll!RtlReportCriticalFailure+0x97
01 000000b9`9873d440 00007ffd`2b64573a ntdll!RtlpHeapHandleError+0x12
02 000000b9`9873d470 00007ffd`2b5c5784 ntdll!RtlpLogHeapFailure+0x96
03 000000b9`9873d4a0 00007ffd`2b5c3b95 ntdll!RtlpAllocateHeap+0xa94
04 000000b9`9873d780 00007ffd`27f5e429 ntdll!RtlpAllocateHeapInternal+0x1115
05 000000b9`9873d8c0 00007ffd`27f5d7fb KERNELBASE!NlsUpdateCacheInfo+0x79
06 000000b9`9873d950 00007ffd`27f5d523 KERNELBASE!UpdateNlsInfoCache+0x83
07 000000b9`9873d990 00007ffd`27f5d450 KERNELBASE!GetNlsTebCache+0x87
08 000000b9`9873d9c0 00007ffd`27f57a0d KERNELBASE!GetCurrentNlsCache+0x80
09 000000b9`9873d9f0 00007ffc`fde5417e KERNELBASE!lstrcmpiW+0x2d
0a 000000b9`9873daa0 000000b9`00000000 hpinkstsc32aLM+0x1417e
0b 000000b9`9873daa8 00000000`0002e470 0x000000b9`00000000
0c 000000b9`9873dab0 00000000`00000000 0x2e470
Код:
> lmvm hpinkstsc32aLM
Browse full module list
start end module name
00007ffc`fde40000 00007ffc`fdeb6000 hpinkstsc32aLM T (no symbols)
Loaded symbol image file: hpinkstsc32aLM.dll
Image path: C:\Windows\System32\hpinkstsc32aLM.dll
Image name: hpinkstsc32aLM.dll
Browse all global symbols functions data
Timestamp: Mon May 06 20:59:04 2019 (5CD059C8)
CheckSum: 00081E6B
ImageSize: 00076000
File version: 48.3.4527.19126
Product version: 48.3.4527.19126
File flags: 0 (Mask 3F)
File OS: 10004 DOS Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
