用WINDBG抓个DUMP看看..

qqmusic.exe crash时的错误提示

异常类型： EXCEPTION_ACCESS_VIOLATION
异常地址： 0x5FE81B18
异常码：0xC0000005
异常原因： 对 0x5FE81B18 地址进行 Read 操作

以下是我进行 EAT hook 替换的地址
orig是原来函数的地址，fake是我写的替换函数的地址

orig:[0x60ac1f6f], fake[0x5fe813bb]
vtbl:60A933F0, addr:60A9341C, orig:[0x60a936cd], fake[0x5fe810e1]
vtbl:60A933F0, addr:60A93428, orig:[0x60acbf5a], fake[0x5fe819bf]
vtbl:60A933F0, addr:60A9343C, orig:[0x60a9378d], fake[0x5fe81b4a]

==============
另外有堆栈信息，和上面不是一次收集的

堆栈信息：
-----------------------------------
0x5FCF1B27 Error:0x0000007E <unknown module>: [0,178716240,0,1796326193]
0x05330000[71741] Program Files (x86)\Tencent\QQMusic\QQMediaPlayer.dll: DllGetClassObject[88228768,0,65552,0]
0x05330000[71840] Program Files (x86)\Tencent\QQMusic\QQMediaPlayer.dll: DllGetClassObject[65552,0,184974624,4608]
0x05330000[3D769] Program Files (x86)\Tencent\QQMusic\QQMediaPlayer.dll: [7142120,184974624,4608,116]
0x05330000[1CCBB] Program Files (x86)\Tencent\QQMusic\QQMediaPlayer.dll: [99471736,144570008,87351876,144570008]
0x05330000[1DB19] Program Files (x86)\Tencent\QQMusic\QQMediaPlayer.dll: [0,1986934391,99471736,178716628]
0x72DD0000[2A47] Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll: endthreadex[99471736,2093709558,0,0]
0x77400000[39F42] Windows\SysWOW64\ntdll.dll: RtlInitializeExceptionChain[1927096801,99471736,0,0]
0x77400000[39F15] Windows\SysWOW64\ntdll.dll: RtlInitializeExceptionChain[1927096801,99471736,0,0]

DLL启动的线程没关?