|
|
按键精灵 2014.05.17762 版
Environment = 1366x768|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x48D152
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=064037B8 EDX=FFFFFFFF
ESI=064050BC EDI=064050B8 ESP=0019DA94 EBP=0019DC14
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1179000, Size = 14127104
Name = ntdll.dll, Base = 0x77A80000, Top = 0x77C1A000, Size = 1679360
Name = KERNEL32.DLL, Base = 0x75AE0000, Top = 0x75BC0000, Size = 917504
Name = KERNELBASE.dll, Base = 0x76360000, Top = 0x7655C000, Size = 2080768
Name = comctl32.dll, Base = 0x75030000, Top = 0x7523F000, Size = 2158592
Name = msvcrt.dll, Base = 0x76D50000, Top = 0x76E0F000, Size = 782336
Name = combase.dll, Base = 0x75D40000, Top = 0x75FB6000, Size = 2580480
Name = ucrtbase.dll, Base = 0x77790000, Top = 0x778AF000, Size = 1175552
Name = RPCRT4.dll, Base = 0x76680000, Top = 0x7673B000, Size = 765952
Name = SspiCli.dll, Base = 0x75250000, Top = 0x75270000, Size = 131072
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524A000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x77A10000, Top = 0x77A6F000, Size = 389120
Name = sechost.dll, Base = 0x76790000, Top = 0x76806000, Size = 483328
Name = GDI32.dll, Base = 0x75270000, Top = 0x75291000, Size = 135168
Name = win32u.dll, Base = 0x778B0000, Top = 0x778C7000, Size = 94208
Name = gdi32full.dll, Base = 0x770B0000, Top = 0x7720A000, Size = 1417216
Name = msvcp_win.dll, Base = 0x75BC0000, Top = 0x75C3C000, Size = 507904
Name = USE**.dll, Base = 0x76F10000, Top = 0x770A7000, Size = 1667072
Name = IMM32.DLL, Base = 0x76820000, Top = 0x76845000, Size = 151552
Name = ADVAPI32.dll, Base = 0x76560000, Top = 0x765D9000, Size = 495616
Name = winmm.dll, Base = 0x749F0000, Top = 0x74A14000, Size = 147456
Name = winmmbase.dll, Base = 0x74810000, Top = 0x74833000, Size = 143360
Name = cfgmg**.dll, Base = 0x77950000, Top = 0x7798B000, Size = 241664
Name = MSIMG32.dll, Base = 0x70FB0000, Top = 0x70FB6000, Size = 24576
Name = COMDLG32.dll, Base = 0x76850000, Top = 0x76900000, Size = 720896
Name = shcore.dll, Base = 0x765E0000, Top = 0x76664000, Size = 540672
Name = SHLWAPI.dll, Base = 0x75350000, Top = 0x75394000, Size = 278528
Name = SHELL32.dll, Base = 0x77210000, Top = 0x7778A000, Size = 5742592
Name = windows.storage.dll, Base = 0x75460000, Top = 0x75A25000, Size = 6049792
Name = profapi.dll, Base = 0x778F0000, Top = 0x77907000, Size = 94208
Name = powrprof.dll, Base = 0x752A0000, Top = 0x752E3000, Size = 274432
Name = UMPDC.dll, Base = 0x76670000, Top = 0x7667D000, Size = 53248
Name = kernel.appcore.dll, Base = 0x76810000, Top = 0x7681F000, Size = 61440
Name = cryptsp.dll, Base = 0x778D0000, Top = 0x778E3000, Size = 77824
Name = WINSPOOL.DRV, Base = 0x6FB90000, Top = 0x6FBFB000, Size = 438272
Name = bcrypt.dll, Base = 0x760C0000, Top = 0x760D9000, Size = 102400
Name = PROPSYS.dll, Base = 0x70550000, Top = 0x70615000, Size = 806912
Name = IPHLPAPI.DLL, Base = 0x74E80000, Top = 0x74EB2000, Size = 204800
Name = OLEAUT32.dll, Base = 0x76E70000, Top = 0x76F02000, Size = 598016
Name = ole32.dll, Base = 0x75C40000, Top = 0x75D37000, Size = 1011712
Name = oledlg.dll, Base = 0x6FB60000, Top = 0x6FB8C000, Size = 180224
Name = urlmon.dll, Base = 0x74840000, Top = 0x749EB000, Size = 1748992
Name = iertutil.dll, Base = 0x745E0000, Top = 0x74809000, Size = 2265088
Name = gdiplus.dll, Base = 0x74EC0000, Top = 0x75029000, Size = 1478656
Name = PSAPI.DLL, Base = 0x77940000, Top = 0x77946000, Size = 24576
Name = VERSION.dll, Base = 0x734F0000, Top = 0x734F8000, Size = 32768
Name = DINPUT8.dll, Base = 0x6FF70000, Top = 0x6FFA7000, Size = 225280
Name = SensApi.dll, Base = 0x67380000, Top = 0x67388000, Size = 32768
Name = WININET.dll, Base = 0x74A20000, Top = 0x74E7C000, Size = 4571136
Name = inputhost.dll, Base = 0x6FEA0000, Top = 0x6FF62000, Size = 794624
Name = CoreMessaging.dll, Base = 0x73FE0000, Top = 0x74069000, Size = 561152
Name = wintypes.dll, Base = 0x73C70000, Top = 0x73D4A000, Size = 892928
Name = CoreUIComponents.dll, Base = 0x73D80000, Top = 0x73FDE000, Size = 2482176
Name = ntmarta.dll, Base = 0x73D50000, Top = 0x73D79000, Size = 167936
Name = WS2_32.dll, Base = 0x752F0000, Top = 0x7534E000, Size = 385024
Name = dbghelp.dll, Base = 0x72730000, Top = 0x728BF000, Size = 1634304
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x671E0000, Top = 0x67250000, Size = 458752
Name = MFC42.DLL, Base = 0x67250000, Top = 0x67374000, Size = 1196032
Name = refs.dll, Base = 0x67040000, Top = 0x671D6000, Size = 1662976
Name = OLEACC.dll, Base = 0x6FB00000, Top = 0x6FB53000, Size = 339968
Name = UxTheme.dll, Base = 0x74560000, Top = 0x745DA000, Size = 499712
Name = dwmapi.dll, Base = 0x6C090000, Top = 0x6C0**00, Size = 151552
Name = MSCTF.dll, Base = 0x760E0000, Top = 0x761E3000, Size = 1060864
Name = clbcatq.dll, Base = 0x77990000, Top = 0x77A10000, Size = 524288
Name = ondemandconnroutehelper.dll, Base = 0x723F0000, Top = 0x72402000, Size = 73728
Name = winhttp.dll, Base = 0x72330000, Top = 0x723EE000, Size = 778240
Name = ieframe.dll, Base = 0x71280000, Top = 0x7187A000, Size = 6266880
Name = NETAPI32.dll, Base = 0x73060000, Top = 0x73073000, Size = 77824
Name = WKSCLI.DLL, Base = 0x71270000, Top = 0x71280000, Size = 65536
Name = NETUTILS.DLL, Base = 0x71260000, Top = 0x7126B000, Size = 45056
Name = msIso.dll, Base = 0x71210000, Top = 0x71253000, Size = 274432
Name = mswsock.dll, Base = 0x72F90000, Top = 0x72FE2000, Size = 335872
Name = NSI.dll, Base = 0x75AD0000, Top = 0x75AD7000, Size = 28672
Name = WINNSI.DLL, Base = 0x72320000, Top = 0x72328000, Size = 32768
Name = dataexchange.dll, Base = 0x71EE0000, Top = 0x71F11000, Size = 200704
Name = d3d11.dll, Base = 0x71D00000, Top = 0x71EDE000, Size = 1957888
Name = dcomp.dll, Base = 0x71B90000, Top = 0x71CF9000, Size = 1478656
Name = dxgi.dll, Base = 0x71AC0000, Top = 0x71B81000, Size = 790528
Name = dxcore.dll, Base = 0x72560000, Top = 0x72579000, Size = 102400
Name = twinapi.appcore.dll, Base = 0x718D0000, Top = 0x71AB4000, Size = 1982464
Name = RMCLIENT.dll, Base = 0x718B0000, Top = 0x718CF000, Size = 126976
Name = sxs.dll, Base = 0x71060000, Top = 0x710E8000, Size = 557056
Name = DNSAPI.dll, Base = 0x72EB0000, Top = 0x72F41000, Size = 593920
Name = rasadhlp.dll, Base = 0x710F0000, Top = 0x710F8000, Size = 32768
Name = coml2.dll, Base = 0x76E10000, Top = 0x76E6E000, Size = 385024
Name = msscript.ocx, Base = 0x67020000, Top = 0x6703C000, Size = 114688
Name = vbscript.dll, Base = 0x66F90000, Top = 0x67015000, Size = 544768
Name = amsi.dll, Base = 0x742A0000, Top = 0x742AF000, Size = 61440
Name = USERENV.dll, Base = 0x74280000, Top = 0x7429E000, Size = 122880
Name = WLDP.DLL, Base = 0x71030000, Top = 0x71052000, Size = 139264
Name = CRYPT32.dll, Base = 0x75FC0000, Top = 0x760BB000, Size = 1028096
Name = MSASN1.dll, Base = 0x75A30000, Top = 0x75A3E000, Size = 57344
Name = WI**UST.dll, Base = 0x76740000, Top = 0x76786000, Size = 286720
Name = WindowsCodecs.dll, Base = 0x74110000, Top = 0x74279000, Size = 1478656
Name = fwpuclnt.dll, Base = 0x71160000, Top = 0x711B1000, Size = 331776
Name = TextInputFramework.dll, Base = 0x74070000, Top = 0x740F4000, Size = 540672
Name = MSHTML.dll, Base = 0x6DB10000, Top = 0x6ED53000, Size = 19148800
Name = schannel.dll, Base = 0x66EB0000, Top = 0x66F26000, Size = 483328
Name = mskeyprotect.dll, Base = 0x66EA0000, Top = 0x66EB0000, Size = 65536
Name = ncrypt.dll, Base = 0x68180000, Top = 0x681A1000, Size = 135168
Name = NTASN1.dll, Base = 0x68150000, Top = 0x68178000, Size = 163840
Name = DPAPI.DLL, Base = 0x6ABF0000, Top = 0x6ABF8000, Size = 32768
Name = rsaenh.dll, Base = 0x67D20000, Top = 0x67D4F000, Size = 192512
Name = cryptnet.dll, Base = 0x67CF0000, Top = 0x67D16000, Size = 155648
Name = ncryptsslp.dll, Base = 0x66E80000, Top = 0x66E9F000, Size = 126976
Code Before:
8B C8 E8 6B D2 31 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 6B B2 F7 FF 68
Call Stack:
00440ADE ===> 按键精灵2014.exe
Current Stack:
[0019DA94] = 29B68417
[0019DA98] = 5D9E3AF8
[0019DA9C] = 0019DC18
[0019DAA0] = 00000000
[0019DAA4] = 06406C20
[0019DAA8] = 0019D974
[0019DAAC] = 00000107
[0019DAB0] = 00000000
[0019DAB4] = 0019D**
[0019DAB8] = 06495980
[0019DABC] = 06406C80
[0019DAC0] = 0019D974
[0019DAC4] = 00000107
[0019DAC8] = 00000000
[0019DACC] = 0019DC68
[0019DAD0] = 00000000
[0019DAD4] = 009E7390
[0019DAD8] = 064067C0
[0019DADC] = 06405348
[0019DAE0] = 0640EB10
[0019DAE4] = 0640B118
[0019DAE8] = 064051D0
[0019DAEC] = 00000008
[0019DAF0] = 00000000
[0019DAF4] = 00000001
[0019DAF8] = 0640E5A8
[0019DAFC] = 0640B0E8
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 00000000
[0019DB0C] = 00000000
[0019DB10] = 06405890
[0019DB14] = 0640EB90
[0019DB18] = 05B20000
[0019DB1C] = 00000004
[0019DB20] = 00000000
[0019DB24] = 0000003E
[0019DB28] = 0000003F
[0019DB2C] = 05A601C8
[0019DB30] = 0640EB90
[0019DB34] = 0640EBCE
[0019DB38] = 0640EBCE
[0019DB3C] = 0640EBCE
[0019DB40] = 0019DAA4
[0019DB44] = 00000000
[0019DB48] = 0019DB68
[0019DB4C] = 77ABADEE
[0019D**] = 00000013
[0019DB54] = 00000000
[0019D**] = 0000000F
[0019DB5C] = 00000000
[0019DB60] = 00010001
[0019DB64] = 0640B038
[0019DB68] = 064054F0
[0019DB6C] = 00000008
[0019DB70] = 00000000
[0019DB74] = 00000001
[0019DB78] = 06405AA0
[0019DB7C] = 0640B058
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 00000000
[0019DB8C] = 00000000
[0019DB90] = 009E7380
[0019DB94] = 06403308
[0019DB98] = 00408290
[0019DB9C] = 06405AB0
[0019DBA0] = 00000002
[0019DBA4] = 0000002D
[0019DBA8] = 0000002F
[0019DBAC] = 006BC0E7
[0019DBB0] = 06403308
[0019DBB4] = 06403335
[0019DBB8] = 06403335
[0019DBBC] = 06403335
[0019DBC0] = 0019DABC
[0019DBC4] = 00408400
[0019DBC8] = 06405AB0
[0019DBCC] = 00000002
[0019DBD0] = 00965B28
[0019DBD4] = 00000000
[0019DBD8] = 0000000F
[0019DBDC] = 064050B8
[0019DBE0] = 00010001
[0019DBE4] = 0019DC10
[0019DBE8] = 0640EBD8
[0019DBEC] = 00965B28
[0019DBF0] = 00000000
[0019DBF4] = 29B68413
[0019DBF8] = 0000003E
[0019DBFC] = 0000003F
[0019DC00] = 0019DC18
[0019DC04] = 29B68417
[0019DC08] = 0019E0BC
[0019DC0C] = 008A1F25
[0019DC10] = 0000000A
[0019DC14] = 0019E0CC
[0019DC18] = 00440ADE
[0019DC1C] = 29B68423
[0019DC20] = 76F4B000
[0019DC24] = 0640B088
[0019DC28] = 06400EF8
[0019DC2C] = 02000002
[0019DC30] = 064050B8
[0019DC34] = 00000001
[0019DC38] = 06494A78
[0019DC3C] = 06405970
[0019DC40] = 00000004
[0019DC44] = 00000011
[0019DC48] = 009E7390
[0019DC4C] = 06494A78
[0019DC50] = 00000003
[0019DC54] = 00000003
[0019DC58] = 00000011
[0019DC5C] = 009E7390
[0019DC60] = 06494910
[0019DC64] = 009E7390
[0019DC68] = 06472B80
[0019DC6C] = 0640DA48
[0019DC70] = 00000002
[0019DC74] = 0119DCA4
[0019DC78] = 06472B68
[0019DC7C] = 11001001
[0019DC80] = 00000010
[0019DC84] = 00000001
[0019DC88] = 00000011
[0019DC8C] = 05B20270
[0019DC90] = 05B20000
[0019DC94] = 05B2C298
[0019DC98] = 0000000C
[0019DC9C] = 05B20270
[0019DCA0] = 05B20000
[0019DCA4] = 02000002
[0019DCA8] = 05B20000
[0019DCAC] = 064738E8
[0019DCB0] = 06472B70
[0019DCB4] = 02000002
[0019DCB8] = 00000000
[0019DCBC] = 05B20000
[0019DCC0] = 77ADB783
[0019DCC4] = 0000000C
[0019DCC8] = 0019DDA8
[0019DCCC] = 77ABE780
[0019DCD0] = 00000001
[0019DCD4] = 064738F0
[0019DCD8] = 0000000C
[0019DCDC] = 77ABE9F9
[0019DCE0] = 95CFA26A
[0019DCE4] = 064738E8
[0019DCE8] = 05B20000
[0019DCEC] = 00000000
[0019DCF0] = 23010022
[0019DCF4] = 00000002
[0019DCF8] = 7FFA0002
[0019DCFC] = 00000031
[0019DD00] = 00000000
[0019DD04] = 05B20000
[0019DD08] = 00000011
[0019DD0C] = 06472B80
[0019DD10] = 00000011
[0019DD14] = 05B20000
[0019DD18] = 0000000C
[0019DD1C] = 01183710
[0019DD20] = 0000000C
[0019DD24] = 713FBE9F
[0019DD28] = 076F0EC8
[0019DD2C] = 076F1008
[0019DD30] = 71435B20
[0019DD34] = 0019DD4C
[0019DD38] = 064738E8
[0019DD3C] = 076F0EA8
[0019DD40] = 00000001
[0019DD44] = 076F0EA8
[0019DD48] = 00000000
[0019DD4C] = 05B202D4
[0019DD50] = 00000001
[0019DD54] = 00000000
[0019DD58] = 01223C88
[0019DD5C] = 01180011
[0019DD60] = 11000011
[0019DD64] = 076F0EC8
[0019DD68] = 71288AE0
[0019DD6C] = 0000000C
[0019DD70] = 076F0EC4
[0019DD74] = 00000000
[0019DD78] = 01010064
[0019DD7C] = 06473948
[0019DD80] = 01210000
[0019DD84] = 00000000
[0019DD88] = 0000000C
[0019DD8C] = 01010002
[0019DD90] = 012237E0
[0019DD94] = 01223C88
[0019DD98] = 0019DED0
[0019DD9C] = 77AF9F80
[0019DDA0] = E26E26F2
[0019DDA4] = FFFFFFFE
[0019DDA8] = 0019DE04
[0019DDAC] = 77B06CDB
[0019DDB0] = 00000000
|
|
[复制链接]
发表于 2024-4-2 19:29:59
感谢楼主分享，十分好用的模拟器
