|
|
按键精灵 2014.05.17762 版
Environment = 1366x768|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x48D152
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=06363828 EDX=FFFFFFFF
ESI=0636529C EDI=06365298 ESP=0019DA94 EBP=0019DC14
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1179000, Size = 14127104
Name = ntdll.dll, Base = 0x771C0000, Top = 0x7735A000, Size = 1679360
Name = KERNEL32.DLL, Base = 0x755E0000, Top = 0x756C0000, Size = 917504
Name = KERNELBASE.dll, Base = 0x74C20000, Top = 0x74E1C000, Size = 2080768
Name = comctl32.dll, Base = 0x74770000, Top = 0x7497F000, Size = 2158592
Name = msvcrt.dll, Base = 0x76470000, Top = 0x7652F000, Size = 782336
Name = combase.dll, Base = 0x756C0000, Top = 0x75936000, Size = 2580480
Name = ucrtbase.dll, Base = 0x76FB0000, Top = 0x770CF000, Size = 1175552
Name = RPCRT4.dll, Base = 0x76220000, Top = 0x762DB000, Size = 765952
Name = SspiCli.dll, Base = 0x74990000, Top = 0x749B0000, Size = 131072
Name = CRYPTBASE.dll, Base = 0x74980000, Top = 0x7498A000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x74AC0000, Top = 0x74B1F000, Size = 389120
Name = sechost.dll, Base = 0x749B0000, Top = 0x74A26000, Size = 483328
Name = GDI32.dll, Base = 0x763F0000, Top = 0x76411000, Size = 135168
Name = win32u.dll, Base = 0x76F90000, Top = 0x76FA7000, Size = 94208
Name = gdi32full.dll, Base = 0x767F0000, Top = 0x7694A000, Size = 1417216
Name = msvcp_win.dll, Base = 0x75500000, Top = 0x7557C000, Size = 507904
Name = USE**.dll, Base = 0x76950000, Top = 0x76AE7000, Size = 1667072
Name = IMM32.DLL, Base = 0x75AB0000, Top = 0x75AD5000, Size = 151552
Name = ADVAPI32.dll, Base = 0x74EB0000, Top = 0x74F29000, Size = 495616
Name = winmm.dll, Base = 0x743E0000, Top = 0x74404000, Size = 147456
Name = winmmbase.dll, Base = 0x73F50000, Top = 0x73F73000, Size = 143360
Name = cfgmg**.dll, Base = 0x74BE0000, Top = 0x74C1B000, Size = 241664
Name = MSIMG32.dll, Base = 0x64370000, Top = 0x64376000, Size = 24576
Name = COMDLG32.dll, Base = 0x76530000, Top = 0x765E0000, Size = 720896
Name = shcore.dll, Base = 0x74E20000, Top = 0x74EA4000, Size = 540672
Name = SHLWAPI.dll, Base = 0x76770000, Top = 0x767B4000, Size = 278528
Name = SHELL32.dll, Base = 0x75AF0000, Top = 0x7606A000, Size = 5742592
Name = windows.storage.dll, Base = 0x74F30000, Top = 0x754F5000, Size = 6049792
Name = profapi.dll, Base = 0x76F60000, Top = 0x76F77000, Size = 94208
Name = powrprof.dll, Base = 0x75590000, Top = 0x755D3000, Size = 274432
Name = UMPDC.dll, Base = 0x76F80000, Top = 0x76F8D000, Size = 53248
Name = kernel.appcore.dll, Base = 0x762E0000, Top = 0x762EF000, Size = 61440
Name = cryptsp.dll, Base = 0x76AF0000, Top = 0x76B03000, Size = 77824
Name = WINSPOOL.DRV, Base = 0x68C80000, Top = 0x68CEB000, Size = 438272
Name = bcrypt.dll, Base = 0x76750000, Top = 0x76769000, Size = 102400
Name = PROPSYS.dll, Base = 0x68AD0000, Top = 0x68B95000, Size = 806912
Name = IPHLPAPI.DLL, Base = 0x745C0000, Top = 0x745F2000, Size = 204800
Name = OLEAUT32.dll, Base = 0x76080000, Top = 0x76112000, Size = 598016
Name = ole32.dll, Base = 0x76120000, Top = 0x76217000, Size = 1011712
Name = oledlg.dll, Base = 0x64340000, Top = 0x6436C000, Size = 180224
Name = urlmon.dll, Base = 0x74410000, Top = 0x745BB000, Size = 1748992
Name = iertutil.dll, Base = 0x73D20000, Top = 0x73F49000, Size = 2265088
Name = gdiplus.dll, Base = 0x74600000, Top = 0x74769000, Size = 1478656
Name = PSAPI.DLL, Base = 0x767E0000, Top = 0x767E6000, Size = 24576
Name = VERSION.dll, Base = 0x73010000, Top = 0x73018000, Size = 32768
Name = DINPUT8.dll, Base = 0x64300000, Top = 0x64337000, Size = 225280
Name = SensApi.dll, Base = 0x642F0000, Top = 0x642F8000, Size = 32768
Name = WININET.dll, Base = 0x73F80000, Top = 0x743DC000, Size = 4571136
Name = inputhost.dll, Base = 0x68530000, Top = 0x685F2000, Size = 794624
Name = CoreMessaging.dll, Base = 0x73720000, Top = 0x737A9000, Size = 561152
Name = wintypes.dll, Base = 0x733B0000, Top = 0x7348A000, Size = 892928
Name = CoreUIComponents.dll, Base = 0x734C0000, Top = 0x7371E000, Size = 2482176
Name = ntmarta.dll, Base = 0x73490000, Top = 0x734B9000, Size = 167936
Name = WS2_32.dll, Base = 0x765E0000, Top = 0x7663E000, Size = 385024
Name = dbghelp.dll, Base = 0x68F00000, Top = 0x6908F000, Size = 1634304
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x64150000, Top = 0x641C0000, Size = 458752
Name = MFC42.DLL, Base = 0x641C0000, Top = 0x642E4000, Size = 1196032
Name = refs.dll, Base = 0x63FB0000, Top = 0x64146000, Size = 1662976
Name = OLEACC.dll, Base = 0x67900000, Top = 0x67953000, Size = 339968
Name = UxTheme.dll, Base = 0x73CA0000, Top = 0x73D1A000, Size = 499712
Name = dwmapi.dll, Base = 0x67E80000, Top = 0x67EA5000, Size = 151552
Name = MSCTF.dll, Base = 0x76640000, Top = 0x76743000, Size = 1060864
Name = clbcatq.dll, Base = 0x77130000, Top = 0x771B0000, Size = 524288
Name = ondemandconnroutehelper.dll, Base = 0x63F90000, Top = 0x63FA2000, Size = 73728
Name = winhttp.dll, Base = 0x68BC0000, Top = 0x68C7E000, Size = 778240
Name = ieframe.dll, Base = 0x63990000, Top = 0x63F8A000, Size = 6266880
Name = NETAPI32.dll, Base = 0x63970000, Top = 0x63983000, Size = 77824
Name = WKSCLI.DLL, Base = 0x68AA0000, Top = 0x68AB0000, Size = 65536
Name = NETUTILS.DLL, Base = 0x68A90000, Top = 0x68A9B000, Size = 45056
Name = msIso.dll, Base = 0x63920000, Top = 0x63963000, Size = 274432
Name = mswsock.dll, Base = 0x67110000, Top = 0x67162000, Size = 335872
Name = NSI.dll, Base = 0x76070000, Top = 0x76077000, Size = 28672
Name = WINNSI.DLL, Base = 0x63910000, Top = 0x63918000, Size = 32768
Name = dataexchange.dll, Base = 0x682F0000, Top = 0x68321000, Size = 200704
Name = d3d11.dll, Base = 0x68110000, Top = 0x682EE000, Size = 1957888
Name = dcomp.dll, Base = 0x67FA0000, Top = 0x68109000, Size = 1478656
Name = dxgi.dll, Base = 0x67ED0000, Top = 0x67F91000, Size = 790528
Name = dxcore.dll, Base = 0x67EB0000, Top = 0x67EC9000, Size = 102400
Name = twinapi.appcore.dll, Base = 0x68700000, Top = 0x688E4000, Size = 1982464
Name = RMCLIENT.dll, Base = 0x68A70000, Top = 0x68A8F000, Size = 126976
Name = sxs.dll, Base = 0x66C60000, Top = 0x66CE8000, Size = 557056
Name = DNSAPI.dll, Base = 0x689B0000, Top = 0x68A41000, Size = 593920
Name = rasadhlp.dll, Base = 0x67860000, Top = 0x67868000, Size = 32768
Name = coml2.dll, Base = 0x74B20000, Top = 0x74B7E000, Size = 385024
Name = msscript.ocx, Base = 0x638F0000, Top = 0x6390C000, Size = 114688
Name = vbscript.dll, Base = 0x63860000, Top = 0x638E5000, Size = 544768
Name = amsi.dll, Base = 0x739E0000, Top = 0x739EF000, Size = 61440
Name = USERENV.dll, Base = 0x739C0000, Top = 0x739DE000, Size = 122880
Name = WLDP.DLL, Base = 0x63830000, Top = 0x63852000, Size = 139264
Name = CRYPT32.dll, Base = 0x762F0000, Top = 0x763EB000, Size = 1028096
Name = MSASN1.dll, Base = 0x75580000, Top = 0x7558E000, Size = 57344
Name = WI**UST.dll, Base = 0x76420000, Top = 0x76466000, Size = 286720
Name = WindowsCodecs.dll, Base = 0x73850000, Top = 0x739B9000, Size = 1478656
Name = fwpuclnt.dll, Base = 0x65200000, Top = 0x65251000, Size = 331776
Name = TextInputFramework.dll, Base = 0x737B0000, Top = 0x73834000, Size = 540672
Name = MSHTML.dll, Base = 0x62540000, Top = 0x63783000, Size = 19148800
Code Before:
8B C8 E8 6B D2 31 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 6B B2 F7 FF 68
Call Stack:
00440ADE ===> 按键精灵2014.exe
Current Stack:
[0019DA94] = 5DF40859
[0019DA98] = 5D9E3AF8
[0019DA9C] = 0019DC18
[0019DAA0] = 00000000
[0019DAA4] = 0636A670
[0019DAA8] = 0019D974
[0019DAAC] = 00000107
[0019DAB0] = 00000000
[0019DAB4] = 0019D**
[0019DAB8] = 063E8E50
[0019DABC] = 0636A7D8
[0019DAC0] = 0019D974
[0019DAC4] = 00000107
[0019DAC8] = 00000000
[0019DACC] = 0019DC68
[0019DAD0] = 00000000
[0019DAD4] = 009E7390
[0019DAD8] = 063C3E00
[0019DADC] = 063651B8
[0019DAE0] = 06366C70
[0019DAE4] = 0636C030
[0019DAE8] = 06365568
[0019DAEC] = 00000008
[0019DAF0] = 00000000
[0019DAF4] = 00000001
[0019DAF8] = 06366AF8
[0019DAFC] = 0636C070
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 00000000
[0019DB0C] = 00000000
[0019DB10] = 06365890
[0019DB14] = 06366B88
[0019DB18] = 05A80000
[0019DB1C] = 00000004
[0019DB20] = 00000000
[0019DB24] = 0000003D
[0019DB28] = 0000003F
[0019DB2C] = 05A201C8
[0019DB30] = 06366B88
[0019DB34] = 06366BC5
[0019DB38] = 06366BC5
[0019DB3C] = 06366BC5
[0019DB40] = 0019DAA4
[0019DB44] = 00000000
[0019DB48] = 0019DB68
[0019DB4C] = 771FADEE
[0019D**] = 00000013
[0019DB54] = 00000000
[0019D**] = 0000000F
[0019DB5C] = 00000000
[0019DB60] = 00010001
[0019DB64] = 0636C0E0
[0019DB68] = 06365158
[0019DB6C] = 00000008
[0019DB70] = 00000000
[0019DB74] = 00000001
[0019DB78] = 06365D40
[0019DB7C] = 0636C050
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 00000000
[0019DB8C] = 00000000
[0019DB90] = 009E7380
[0019DB94] = 063636C0
[0019DB98] = 00408290
[0019DB9C] = 06365D50
[0019DBA0] = 00000002
[0019DBA4] = 0000002D
[0019DBA8] = 0000002F
[0019DBAC] = 006BC0E7
[0019DBB0] = 063636C0
[0019DBB4] = 063636ED
[0019DBB8] = 063636ED
[0019DBBC] = 063636ED
[0019DBC0] = 0019DABC
[0019DBC4] = 00408400
[0019DBC8] = 06365D50
[0019DBCC] = 00000002
[0019DBD0] = 00965B28
[0019DBD4] = 00000000
[0019DBD8] = 0000000F
[0019DBDC] = 06365298
[0019DBE0] = 00010001
[0019DBE4] = 0019DC10
[0019DBE8] = 06366B40
[0019DBEC] = 00965B28
[0019DBF0] = 00000000
[0019DBF4] = 5DF4085D
[0019DBF8] = 0000003D
[0019DBFC] = 0000003F
[0019DC00] = 0019DC18
[0019DC04] = 5DF40859
[0019DC08] = 0019E0BC
[0019DC0C] = 008A1F25
[0019DC10] = 0000000A
[0019DC14] = 0019E0CC
[0019DC18] = 00440ADE
[0019DC1C] = 5DF4086D
[0019DC20] = 7698B000
[0019DC24] = 0636C0B0
[0019DC28] = 06360A20
[0019DC2C] = 00000000
[0019DC30] = 06365298
[0019DC34] = 00000001
[0019DC38] = 063F33C0
[0019DC3C] = 06365C10
[0019DC40] = 00000004
[0019DC44] = 00000060
[0019DC48] = 009E7390
[0019DC4C] = 063F33C0
[0019DC50] = 00000003
[0019DC54] = 00000003
[0019DC58] = 00000060
[0019DC5C] = 009E7390
[0019DC60] = 063F35A0
[0019DC64] = 009E7390
[0019DC68] = 063C3E00
[0019DC6C] = 063BBBE8
[0019DC70] = 00000002
[0019DC74] = 010901A4
[0019DC78] = 063EF6B8
[0019DC7C] = A4000AAE
[0019DC80] = 00000010
[0019DC84] = 00000001
[0019DC88] = 00000060
[0019DC8C] = 05A84F68
[0019DC90] = 05A80000
[0019DC94] = 00000050
[0019DC98] = 05A80000
[0019DC9C] = 063EF6B8
[0019DCA0] = 063F3038
[0019DCA4] = 02000002
[0019DCA8] = 00000000
[0019DCAC] = 05A80000
[0019DCB0] = 7721B783
[0019DCB4] = 00000060
[0019DCB8] = 0019DD98
[0019DCBC] = 771FE780
[0019DCC0] = 00000001
[0019DCC4] = 063EF6C0
[0019DCC8] = 00000060
[0019DCCC] = 771FE9F9
[0019DCD0] = C6E0B72F
[0019DCD4] = 063EF6B8
[0019DCD8] = 05A80000
[0019DCDC] = 00000000
[0019DCE0] = 50000050
[0019DCE4] = 0019DEC4
[0019DCE8] = 00000030
[0019DCEC] = 74D15A32
[0019DCF0] = 01400000
[0019DCF4] = 00000002
[0019DCF8] = 7FFA0002
[0019DCFC] = 00000031
[0019DD00] = 00000000
[0019DD04] = 05A80000
[0019DD08] = 00000010
[0019DD0C] = 063EF6D0
[0019DD10] = 00000060
[0019DD14] = 063E9331
[0019DD18] = 00000050
[0019DD1C] = 01403878
[0019DD20] = 0019DD34
[0019DD24] = 63B0BE9F
[0019DD28] = 01497040
[0019DD2C] = 01497180
[0019DD30] = 63B45B20
[0019DD34] = 0019DD4C
[0019DD38] = 74D26E37
[0019DD3C] = 01497020
[0019DD40] = 0019DDD0
[0019DD44] = 01497020
[0019DD48] = 639DB19C
[0019DD4C] = 0019DD74
[0019DD50] = 63A89605
[0019DD54] = 77246D02
[0019DD58] = 014B2828
[0019DD5C] = 01400000
[0019DD60] = 014B2828
[0019DD64] = 01497040
[0019DD68] = 63998AE0
[0019DD6C] = 63A895E0
[0019DD70] = 0149703C
[0019DD74] = 0019DD90
[0019DD78] = 00000064
[0019DD7C] = 00000000
[0019DD80] = 0149C2D0
[0019DD84] = 00000011
[0019DD88] = 00000000
[0019DD8C] = 002D0002
[0019DD90] = 014B2220
[0019DD94] = 014B2828
[0019DD98] = 0149C2C0
[0019DD9C] = 01400000
[0019DDA0] = 0019DDB4
[0019DDA4] = 0019DDC4
[0019DDA8] = 771FDC16
[0019DDAC] = 00000000
[0019DDB0] = 00000000
|
|
[复制链接]
发表于 2024-3-30 20:59:15
