|
|
按键精灵 2014.06.19469 版
Environment = 1920x1080|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x48B7F2
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=064B3278 EDX=FFFFFFFF
ESI=064B5774 EDI=064B5770 ESP=0019DA94 EBP=0019DC14
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x113C000, Size = 13877248
Name = ntdll.dll, Base = 0x773C0000, Top = 0x77563000, Size = 1716224
Name = KERNEL32.DLL, Base = 0x75370000, Top = 0x75460000, Size = 983040
Name = KERNELBASE.dll, Base = 0x76030000, Top = 0x76248000, Size = 2195456
Name = comctl32.dll, Base = 0x6E5E0000, Top = 0x6E7F0000, Size = 2162688
Name = msvcrt.dll, Base = 0x76980000, Top = 0x76A3F000, Size = 782336
Name = GDI32.dll, Base = 0x76940000, Top = 0x76963000, Size = 143360
Name = win32u.dll, Base = 0x76B30000, Top = 0x76B48000, Size = 98304
Name = gdi32full.dll, Base = 0x77260000, Top = 0x7733C000, Size = 901120
Name = msvcp_win.dll, Base = 0x76C60000, Top = 0x76CDB000, Size = 503808
Name = ucrtbase.dll, Base = 0x76E60000, Top = 0x76F80000, Size = 1179648
Name = USER32.dll, Base = 0x75620000, Top = 0x757BC000, Size = 1687552
Name = IMM32.DLL, Base = 0x77380000, Top = 0x773A5000, Size = 151552
Name = ADVAPI32.dll, Base = 0x75E60000, Top = 0x75EDB000, Size = 503808
Name = sechost.dll, Base = 0x752F0000, Top = 0x75366000, Size = 483328
Name = RPCRT4.dll, Base = 0x75460000, Top = 0x7551E000, Size = 778240
Name = winmm.dll, Base = 0x74A30000, Top = 0x74A58000, Size = 163840
Name = MSIMG32.dll, Base = 0x6FC10000, Top = 0x6FC16000, Size = 24576
Name = COMDLG32.dll, Base = 0x76BB0000, Top = 0x76C5F000, Size = 716800
Name = combase.dll, Base = 0x76F80000, Top = 0x771FF000, Size = 2617344
Name = shcore.dll, Base = 0x76250000, Top = 0x762D7000, Size = 552960
Name = SHLWAPI.dll, Base = 0x75F00000, Top = 0x75F45000, Size = 282624
Name = SHELL32.dll, Base = 0x762E0000, Top = 0x76896000, Size = 5988352
Name = WINSPOOL.DRV, Base = 0x6D160000, Top = 0x6D1D2000, Size = 466944
Name = ole32.dll, Base = 0x75C00000, Top = 0x75CE3000, Size = 929792
Name = OLEAUT32.dll, Base = 0x768A0000, Top = 0x76936000, Size = 614400
Name = oledlg.dll, Base = 0x51E40000, Top = 0x51E6C000, Size = 180224
Name = urlmon.dll, Base = 0x723C0000, Top = 0x72568000, Size = 1736704
Name = iertutil.dll, Base = 0x72A70000, Top = 0x72C9D000, Size = 2281472
Name = netutils.dll, Base = 0x745D0000, Top = 0x745DB000, Size = 45056
Name = srvcli.dll, Base = 0x723A0000, Top = 0x723BD000, Size = 118784
Name = gdiplus.dll, Base = 0x72570000, Top = 0x726D7000, Size = 1470464
Name = PSAPI.DLL, Base = 0x76E50000, Top = 0x76E56000, Size = 24576
Name = VERSION.dll, Base = 0x75280000, Top = 0x75288000, Size = 32768
Name = DINPUT8.dll, Base = 0x51E00000, Top = 0x51E37000, Size = 225280
Name = SensApi.dll, Base = 0x67310000, Top = 0x67318000, Size = 32768
Name = WININET.dll, Base = 0x73FF0000, Top = 0x74444000, Size = 4538368
Name = inputhost.dll, Base = 0x6A220000, Top = 0x6A30D000, Size = 970752
Name = wintypes.dll, Base = 0x6A450000, Top = 0x6A52B000, Size = 897024
Name = bcryptPrimitives.dll, Base = 0x75290000, Top = 0x752EF000, Size = 389120
Name = CoreMessaging.dll, Base = 0x6A180000, Top = 0x6A21B000, Size = 634880
Name = CoreUIComponents.dll, Base = 0x69F00000, Top = 0x6A17E000, Size = 2613248
Name = PROPSYS.dll, Base = 0x720A0000, Top = 0x72162000, Size = 794624
Name = WS2_32.dll, Base = 0x75F60000, Top = 0x75FC3000, Size = 405504
Name = kernel.appcore.dll, Base = 0x749F0000, Top = 0x749FF000, Size = 61440
Name = ntmarta.dll, Base = 0x6FBE0000, Top = 0x6FC09000, Size = 167936
Name = dbghelp.dll, Base = 0x730F0000, Top = 0x73278000, Size = 1605632
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x6D0F0000, Top = 0x6D160000, Size = 458752
Name = MFC42.DLL, Base = 0x51CD0000, Top = 0x51DF4000, Size = 1196032
Name = refs.dll, Base = 0x51B30000, Top = 0x51CC6000, Size = 1662976
Name = OLEACC.dll, Base = 0x74600000, Top = 0x74653000, Size = 339968
Name = UxTheme.dll, Base = 0x6E560000, Top = 0x6E5D4000, Size = 475136
Name = dwmapi.dll, Base = 0x6FC90000, Top = 0x6FCB6000, Size = 155648
Name = windows.storage.dll, Base = 0x73310000, Top = 0x7391C000, Size = 6340608
Name = Wldp.dll, Base = 0x73060000, Top = 0x73084000, Size = 147456
Name = profapi.dll, Base = 0x72E20000, Top = 0x72E38000, Size = 98304
Name = SspiCli.dll, Base = 0x74A00000, Top = 0x74A21000, Size = 135168
Name = MSCTF.dll, Base = 0x76D70000, Top = 0x76E44000, Size = 868352
Name = clbcatq.dll, Base = 0x76A40000, Top = 0x76ABE000, Size = 516096
Name = ieframe.dll, Base = 0x64A30000, Top = 0x65069000, Size = 6524928
Name = NETAPI32.dll, Base = 0x74A60000, Top = 0x74A75000, Size = 86016
Name = WINHTTP.dll, Base = 0x74BC0000, Top = 0x74C89000, Size = 823296
Name = USERENV.dll, Base = 0x75240000, Top = 0x75265000, Size = 151552
Name = WKSCLI.DLL, Base = 0x745E0000, Top = 0x745F1000, Size = 69632
Name = ondemandconnroutehelper.dll, Base = 0x72960000, Top = 0x72972000, Size = 73728
Name = dataexchange.dll, Base = 0x69650000, Top = 0x69681000, Size = 200704
Name = dcomp.dll, Base = 0x694E0000, Top = 0x69644000, Size = 1458176
Name = d3d11.dll, Base = 0x69300000, Top = 0x694E0000, Size = 1966080
Name = dxgi.dll, Base = 0x6FE50000, Top = 0x6FF12000, Size = 794624
Name = mswsock.dll, Base = 0x74500000, Top = 0x74552000, Size = 335872
Name = IPHLPAPI.DLL, Base = 0x75100000, Top = 0x75132000, Size = 204800
Name = twinapi.appcore.dll, Base = 0x69D70000, Top = 0x69EFF000, Size = 1634304
Name = NSI.dll, Base = 0x75F50000, Top = 0x75F57000, Size = 28672
Name = WINNSI.DLL, Base = 0x72990000, Top = 0x72998000, Size = 32768
Name = sxs.dll, Base = 0x649A0000, Top = 0x64A28000, Size = 557056
Name = DNSAPI.dll, Base = 0x73DF0000, Top = 0x73E81000, Size = 593920
Name = rasadhlp.dll, Base = 0x749C0000, Top = 0x749C8000, Size = 32768
Name = coml2.dll, Base = 0x75FD0000, Top = 0x7602E000, Size = 385024
Name = msscript.ocx, Base = 0x53440000, Top = 0x5345C000, Size = 114688
Name = vbscript.dll, Base = 0x51AA0000, Top = 0x51B26000, Size = 548864
Name = amsi.dll, Base = 0x6F250000, Top = 0x6F269000, Size = 102400
Name = WindowsCodecs.dll, Base = 0x6E170000, Top = 0x6E2E1000, Size = 1511424
Name = bcrypt.dll, Base = 0x76B10000, Top = 0x76B29000, Size = 102400
Name = fwpuclnt.dll, Base = 0x71240000, Top = 0x71299000, Size = 364544
Name = napinsp.dll, Base = 0x71300000, Top = 0x71311000, Size = 69632
Name = pnrpnsp.dll, Base = 0x712E0000, Top = 0x712F6000, Size = 90112
Name = wshbth.dll, Base = 0x712D0000, Top = 0x712E0000, Size = 65536
Name = NLAapi.dll, Base = 0x712B0000, Top = 0x712C6000, Size = 90112
Name = winrnr.dll, Base = 0x712A0000, Top = 0x712AE000, Size = 57344
Name = TextShaping.dll, Base = 0x69CD0000, Top = 0x69D64000, Size = 606208
Name = textinputframework.dll, Base = 0x6A390000, Top = 0x6A449000, Size = 757760
Name = msIso.dll, Base = 0x68CF0000, Top = 0x68D37000, Size = 290816
Name = MSHTML.dll, Base = 0x63740000, Top = 0x64993000, Size = 19214336
Name = powrprof.dll, Base = 0x6E300000, Top = 0x6E344000, Size = 278528
Name = UMPDC.dll, Base = 0x6E2F0000, Top = 0x6E2FD000, Size = 53248
Name = CRYPTBASE.DLL, Base = 0x72920000, Top = 0x7292A000, Size = 40960
Name = schannel.dll, Base = 0x58FA0000, Top = 0x59018000, Size = 491520
Name = mskeyprotect.dll, Base = 0x590C0000, Top = 0x590D0000, Size = 65536
Name = NTASN1.dll, Base = 0x58AC0000, Top = 0x58AE8000, Size = 163840
Name = CRYPT32.dll, Base = 0x75520000, Top = 0x7561A000, Size = 1024000
Name = MSASN1.dll, Base = 0x749D0000, Top = 0x749DE000, Size = 57344
Name = DPAPI.DLL, Base = 0x72980000, Top = 0x72988000, Size = 32768
Name = WINTRUST.dll, Base = 0x76AC0000, Top = 0x76B0D000, Size = 315392
Name = CRYPTSP.dll, Base = 0x729D0000, Top = 0x729E3000, Size = 77824
Name = rsaenh.dll, Base = 0x729A0000, Top = 0x729CF000, Size = 192512
Name = ncrypt.dll, Base = 0x58A90000, Top = 0x58AB1000, Size = 135168
Name = ncryptsslp.dll, Base = 0x58A70000, Top = 0x58A8F000, Size = 126976
Code Before:
8B C8 E8 8B AC 33 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 9B CA F7 FF 68
Call Stack:
0043F56E ===> 按键精灵2014.exe
Current Stack:
[0019DA94] = F31BB53C
[0019DA98] = 66DA3730
[0019DA9C] = 0019DC18
[0019DAA0] = 0019DAC0
[0019DAA4] = 066AB830
[0019DAA8] = 0019D974
[0019DAAC] = 00000107
[0019DAB0] = 00000000
[0019DAB4] = 0019DB50
[0019DAB8] = 066AAFE0
[0019DABC] = 066AB9F8
[0019DAC0] = 0019D974
[0019DAC4] = 00000107
[0019DAC8] = 00000000
[0019DACC] = 0019DC68
[0019DAD0] = 00000000
[0019DAD4] = 009E4390
[0019DAD8] = 0654ED98
[0019DADC] = 064B55C8
[0019DAE0] = 066A9390
[0019DAE4] = 066AC380
[0019DAE8] = 064B5860
[0019DAEC] = 00000008
[0019DAF0] = 00000000
[0019DAF4] = 00000001
[0019DAF8] = 066A9218
[0019DAFC] = 066AC270
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 00000000
[0019DB0C] = 00000000
[0019DB10] = 00000000
[0019DB14] = 066A8F90
[0019DB18] = 00000002
[0019DB1C] = 00000000
[0019DB20] = 00000004
[0019DB24] = 0000003E
[0019DB28] = 0000003F
[0019DB2C] = 00000000
[0019DB30] = 066A8F90
[0019DB34] = 066A8FCE
[0019DB38] = 066A8FCE
[0019DB3C] = 066A8FCE
[0019DB40] = 0019DAA4
[0019DB44] = 00000000
[0019DB48] = 0019DB68
[0019DB4C] = 77405DCE
[0019DB50] = 00000013
[0019DB54] = 00000000
[0019DB58] = 0000000F
[0019DB5C] = 00000000
[0019DB60] = 00010001
[0019DB64] = 066AC330
[0019DB68] = 064B5798
[0019DB6C] = 00000008
[0019DB70] = 00000000
[0019DB74] = 00000001
[0019DB78] = 06522348
[0019DB7C] = 066AC240
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 00000000
[0019DB8C] = 00000000
[0019DB90] = 009E4380
[0019DB94] = 064B33B0
[0019DB98] = 00408150
[0019DB9C] = 06522358
[0019DBA0] = 00000002
[0019DBA4] = 0000002D
[0019DBA8] = 0000002F
[0019DBAC] = 006B9BDA
[0019DBB0] = 064B33B0
[0019DBB4] = 064B33DD
[0019DBB8] = 064B33DD
[0019DBBC] = 064B33DD
[0019DBC0] = 0019DABC
[0019DBC4] = 00408300
[0019DBC8] = 06522358
[0019DBCC] = 00000002
[0019DBD0] = 00962698
[0019DBD4] = 00000000
[0019DBD8] = 0000000F
[0019DBDC] = 064B5770
[0019DBE0] = 00010001
[0019DBE4] = 0019DC10
[0019DBE8] = 066A9068
[0019DBEC] = 00962698
[0019DBF0] = 00000000
[0019DBF4] = F31BB538
[0019DBF8] = 0000003E
[0019DBFC] = 0000003F
[0019DC00] = 0019DC18
[0019DC04] = F31BB53C
[0019DC08] = 0019E0BC
[0019DC0C] = 0089FCD5
[0019DC10] = 0000000A
[0019DC14] = 0019E0C8
[0019DC18] = 0043F56E
[0019DC1C] = F31BB508
[0019DC20] = 75643A00
[0019DC24] = 066AC2F0
[0019DC28] = 064B5870
[0019DC2C] = 00000064
[0019DC30] = 064B5770
[0019DC34] = 2F1B2B01
[0019DC38] = 06543268
[0019DC3C] = 065225D8
[0019DC40] = 00000004
[0019DC44] = 774E6878
[0019DC48] = 009E4390
[0019DC4C] = 06543268
[0019DC50] = 00000003
[0019DC54] = 00000003
[0019DC58] = 774E6878
[0019DC5C] = 009E4390
[0019DC60] = 06542D40
[0019DC64] = 009E4390
[0019DC68] = 0654ECF0
[0019DC6C] = 066AAEF0
[0019DC70] = 00000000
[0019DC74] = 00000001
[0019DC78] = 02000002
[0019DC7C] = 00000064
[0019DC80] = 6F00026D
[0019DC84] = 00000048
[0019DC88] = 0019DCCC
[0019DC8C] = 77403A6C
[0019DC90] = 10010011
[0019DC94] = 06552C78
[0019DC98] = 0654E7D0
[0019DC9C] = 0019DD68
[0019DCA0] = 0C000000
[0019DCA4] = 00000000
[0019DCA8] = 08902AB5
[0019DCAC] = 00000000
[0019DCB0] = 0000001F
[0019DCB4] = 00000009
[0019DCB8] = FFFFFD9E
[0019DCBC] = 05A80000
[0019DCC0] = 05A81788
[0019DCC4] = 00000020
[0019DCC8] = 0011001F
[0019DCCC] = 45926729
[0019DCD0] = 0019DDE4
[0019DCD4] = 066A0000
[0019DCD8] = 0000000B
[0019DCDC] = 0019DEC4
[0019DCE0] = 0000000B
[0019DCE4] = 066A0298
[0019DCE8] = 066A0000
[0019DCEC] = 00000031
[0019DCF0] = 0000000F
[0019DCF4] = 06553310
[0019DCF8] = 00000031
[0019DCFC] = 064B2880
[0019DD00] = 066AB471
[0019DD04] = 00000030
[0019DD08] = 00000000
[0019DD0C] = 0000000B
[0019DD10] = 00000001
[0019DD14] = 00000000
[0019DD18] = 00000000
[0019DD1C] = 0000000B
[0019DD20] = 00000025
[0019DD24] = 066A02D0
[0019DD28] = 00000001
[0019DD2C] = 05A80000
[0019DD30] = 00000003
[0019DD34] = 00000000
[0019DD38] = 00000000
[0019DD3C] = 05A80000
[0019DD40] = 05A80025
[0019DD44] = 00000000
[0019DD48] = 00000072
[0019DD4C] = 064B2888
[0019DD50] = 00000000
[0019DD54] = 01010000
[0019DD58] = 00000000
[0019DD5C] = 066A00C0
[0019DD60] = 25000025
[0019DD64] = 0000000B
[0019DD68] = 64BE5230
[0019DD6C] = 00190000
[0019DD70] = 7614B000
[0019DD74] = 0000002C
[0019DD78] = 066A0270
[0019DD7C] = 0000000B
[0019DD80] = 066A0270
[0019DD84] = 0101DDAC
[0019DD88] = 0000000B
[0019DD8C] = 0000000B
[0019DD90] = 64A38268
[0019DD94] = 0019DDB4
[0019DD98] = 0019DED0
[0019DD9C] = 7743AD20
[0019DDA0] = 32C77919
[0019DDA4] = FFFFFFFE
[0019DDA8] = 0019DE04
[0019DDAC] = 774478BD
[0019DDB0] = 00000000
|
|
[复制链接]
发表于 2022-6-14 09:08
