按键精灵 2014.05.17762 版
Environment = 1920x1080|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x48D152
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=06813330 EDX=FFFFFFFF
ESI=06810904 EDI=06810900 ESP=0019DA94 EBP=0019DC14
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1179000, Size = 14127104
Name = ntdll.dll, Base = 0x77D30000, Top = 0x77ED4000, Size = 1720320
Name = KERNEL32.DLL, Base = 0x76DB0000, Top = 0x76EA0000, Size = 983040
Name = KERNELBASE.dll, Base = 0x76210000, Top = 0x76428000, Size = 2195456
Name = comctl32.dll, Base = 0x710F0000, Top = 0x71300000, Size = 2162688
Name = msvcrt.dll, Base = 0x77520000, Top = 0x775DF000, Size = 782336
Name = GDI32.dll, Base = 0x76440000, Top = 0x76463000, Size = 143360
Name = win32u.dll, Base = 0x75DD0000, Top = 0x75DE8000, Size = 98304
Name = gdi32full.dll, Base = 0x76120000, Top = 0x761FC000, Size = 901120
Name = msvcp_win.dll, Base = 0x77780000, Top = 0x777FB000, Size = 503808
Name = ucrtbase.dll, Base = 0x76EA0000, Top = 0x76FC0000, Size = 1179648
Name = USER32.dll, Base = 0x775E0000, Top = 0x7777C000, Size = 1687552
Name = IMM32.DLL, Base = 0x77970000, Top = 0x77995000, Size = 151552
Name = ADVAPI32.dll, Base = 0x778F0000, Top = 0x7796B000, Size = 503808
Name = sechost.dll, Base = 0x76530000, Top = 0x765A6000, Size = 483328
Name = RPCRT4.dll, Base = 0x779A0000, Top = 0x77A5E000, Size = 778240
Name = winmm.dll, Base = 0x73410000, Top = 0x73438000, Size = 163840
Name = MSIMG32.dll, Base = 0x71800000, Top = 0x71806000, Size = 24576
Name = COMDLG32.dll, Base = 0x76070000, Top = 0x7611F000, Size = 716800
Name = combase.dll, Base = 0x75DF0000, Top = 0x7606F000, Size = 2617344
Name = shcore.dll, Base = 0x77050000, Top = 0x770D7000, Size = 552960
Name = SHLWAPI.dll, Base = 0x75C80000, Top = 0x75CC5000, Size = 282624
Name = SHELL32.dll, Base = 0x766A0000, Top = 0x76C56000, Size = 5988352
Name = WINSPOOL.DRV, Base = 0x714A0000, Top = 0x71512000, Size = 466944
Name = ole32.dll, Base = 0x765B0000, Top = 0x76693000, Size = 929792
Name = OLEAUT32.dll, Base = 0x76470000, Top = 0x76506000, Size = 614400
Name = oledlg.dll, Base = 0x71E00000, Top = 0x71E2C000, Size = 180224
Name = urlmon.dll, Base = 0x72430000, Top = 0x725D8000, Size = 1736704
Name = iertutil.dll, Base = 0x721E0000, Top = 0x7240D000, Size = 2281472
Name = srvcli.dll, Base = 0x72410000, Top = 0x7242D000, Size = 118784
Name = netutils.dll, Base = 0x74D80000, Top = 0x74D8B000, Size = 45056
Name = gdiplus.dll, Base = 0x70F80000, Top = 0x710E7000, Size = 1470464
Name = PSAPI.DLL, Base = 0x76200000, Top = 0x76206000, Size = 24576
Name = VERSION.dll, Base = 0x75BF0000, Top = 0x75BF8000, Size = 32768
Name = DINPUT8.dll, Base = 0x71B40000, Top = 0x71B77000, Size = 225280
Name = SensApi.dll, Base = 0x719D0000, Top = 0x719D8000, Size = 32768
Name = WININET.dll, Base = 0x74E90000, Top = 0x752E4000, Size = 4538368
Name = inputhost.dll, Base = 0x71A50000, Top = 0x71B3D000, Size = 970752
Name = wintypes.dll, Base = 0x6C300000, Top = 0x6C3DB000, Size = 897024
Name = CoreUIComponents.dll, Base = 0x6C3E0000, Top = 0x6C65E000, Size = 2613248
Name = CoreMessaging.dll, Base = 0x6C660000, Top = 0x6C6FB000, Size = 634880
Name = PROPSYS.dll, Base = 0x71730000, Top = 0x717F2000, Size = 794624
Name = bcryptPrimitives.dll, Base = 0x77850000, Top = 0x778AF000, Size = 389120
Name = WS2_32.dll, Base = 0x77CB0000, Top = 0x77D13000, Size = 405504
Name = ntmarta.dll, Base = 0x74C60000, Top = 0x74C89000, Size = 167936
Name = kernel.appcore.dll, Base = 0x74C50000, Top = 0x74C5F000, Size = 61440
Name = dbghelp.dll, Base = 0x744D0000, Top = 0x74658000, Size = 1605632
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x71340000, Top = 0x713B0000, Size = 458752
Name = MFC42.DLL, Base = 0x71870000, Top = 0x71994000, Size = 1196032
Name = refs.dll, Base = 0x6FFA0000, Top = 0x70136000, Size = 1662976
Name = OLEACC.dll, Base = 0x72760000, Top = 0x727B3000, Size = 339968
Name = UxTheme.dll, Base = 0x713B0000, Top = 0x71424000, Size = 475136
Name = dwmapi.dll, Base = 0x6CD20000, Top = 0x6CD46000, Size = 155648
Name = windows.storage.dll, Base = 0x754F0000, Top = 0x75AFC000, Size = 6340608
Name = Wldp.dll, Base = 0x754C0000, Top = 0x754E4000, Size = 147456
Name = profapi.dll, Base = 0x74A50000, Top = 0x74A68000, Size = 98304
Name = SspiCli.dll, Base = 0x73360000, Top = 0x73381000, Size = 135168
Name = MSCTF.dll, Base = 0x76CD0000, Top = 0x76DA4000, Size = 868352
Name = clbcatq.dll, Base = 0x77A60000, Top = 0x77ADE000, Size = 516096
Name = ondemandconnroutehelper.dll, Base = 0x63D80000, Top = 0x63D92000, Size = 73728
Name = ieframe.dll, Base = 0x57AD0000, Top = 0x5810C000, Size = 6537216
Name = NETAPI32.dll, Base = 0x75330000, Top = 0x75345000, Size = 86016
Name = WINHTTP.dll, Base = 0x72C10000, Top = 0x72CD9000, Size = 823296
Name = USERENV.dll, Base = 0x75BC0000, Top = 0x75BE5000, Size = 151552
Name = WKSCLI.DLL, Base = 0x74D90000, Top = 0x74DA1000, Size = 69632
Name = mswsock.dll, Base = 0x748D0000, Top = 0x74922000, Size = 335872
Name = IPHLPAPI.DLL, Base = 0x752F0000, Top = 0x75322000, Size = 204800
Name = NSI.dll, Base = 0x76430000, Top = 0x76437000, Size = 28672
Name = WINNSI.DLL, Base = 0x728C0000, Top = 0x728C8000, Size = 32768
Name = dataexchange.dll, Base = 0x6BF80000, Top = 0x6BFB1000, Size = 200704
Name = dcomp.dll, Base = 0x6A780000, Top = 0x6A8E5000, Size = 1462272
Name = d3d11.dll, Base = 0x6CB30000, Top = 0x6CD10000, Size = 1966080
Name = dxgi.dll, Base = 0x6CA60000, Top = 0x6CB23000, Size = 798720
Name = twinapi.appcore.dll, Base = 0x6BC50000, Top = 0x6BDDF000, Size = 1634304
Name = sxs.dll, Base = 0x6EC30000, Top = 0x6ECB8000, Size = 557056
Name = DNSAPI.dll, Base = 0x74000000, Top = 0x74091000, Size = 593920
Name = rasadhlp.dll, Base = 0x74120000, Top = 0x74128000, Size = 32768
Name = coml2.dll, Base = 0x77AE0000, Top = 0x77B3E000, Size = 385024
Name = fwpuclnt.dll, Base = 0x73DD0000, Top = 0x73E29000, Size = 364544
Name = bcrypt.dll, Base = 0x75C60000, Top = 0x75C79000, Size = 102400
Name = msscript.ocx, Base = 0x71850000, Top = 0x7186C000, Size = 114688
Name = vbscript.dll, Base = 0x6FF10000, Top = 0x6FF96000, Size = 548864
Name = amsi.dll, Base = 0x6EBE0000, Top = 0x6EBF9000, Size = 102400
Name = WindowsCodecs.dll, Base = 0x55CF0000, Top = 0x55E61000, Size = 1511424
Name = TextShaping.dll, Base = 0x51D20000, Top = 0x51DB4000, Size = 606208
Name = textinputframework.dll, Base = 0x6C700000, Top = 0x6C7B9000, Size = 757760
Name = SogouWBTSF.ime, Base = 0x6C7C0000, Top = 0x6C893000, Size = 864256
Name = SogouWb.ime, Base = 0xA0B0000, Top = 0xA834000, Size = 7880704
Name = USP10.dll, Base = 0x70F60000, Top = 0x70F77000, Size = 94208
Name = Secur32.dll, Base = 0x71490000, Top = 0x7149A000, Size = 40960
Name = Wintrust.dll, Base = 0x77800000, Top = 0x7784C000, Size = 311296
Name = CRYPT32.dll, Base = 0x75CD0000, Top = 0x75DCA000, Size = 1024000
Name = MSASN1.dll, Base = 0x74930000, Top = 0x7493E000, Size = 57344
Name = CRYPTSP.dll, Base = 0x749A0000, Top = 0x749B3000, Size = 77824
Name = rsaenh.dll, Base = 0x74970000, Top = 0x7499F000, Size = 192512
Name = CRYPTBASE.dll, Base = 0x74960000, Top = 0x7496A000, Size = 40960
Name = imagehlp.dll, Base = 0x76510000, Top = 0x76529000, Size = 102400
Name = gpapi.dll, Base = 0x6EBA0000, Top = 0x6EBBE000, Size = 122880
Name = cryptnet.dll, Base = 0x6EB70000, Top = 0x6EB96000, Size = 155648
Name = ManualNewWord.dll, Base = 0x12050000, Top = 0x12101000, Size = 724992
Name = dbgcore.DLL, Base = 0x71820000, Top = 0x71846000, Size = 155648
Code Before:
8B C8 E8 6B D2 31 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 6B B2 F7 FF 68
Call Stack:
00440ADE ===> 按键精灵2014.exe
Current Stack:
[0019DA94] = CF163460
[0019DA98] = 975E3600
[0019DA9C] = 0019DC18
[0019DAA0] = 0019DAC0
[0019DAA4] = 0681F338
[0019DAA8] = 0019D974
[0019DAAC] = 00000107
[0019DAB0] = 00000000
[0019DAB4] = 0019DB50
[0019DAB8] = 068953D0
[0019DABC] = 0681F308
[0019DAC0] = 0019D974
[0019DAC4] = 00000107
[0019DAC8] = 00000000
[0019DACC] = 0019DC68
[0019DAD0] = 00000000
[0019DAD4] = 009E7390
[0019DAD8] = 06873DA8
[0019DADC] = 06810D98
[0019DAE0] = 064C8FE8
[0019DAE4] = 0681BAB8
[0019DAE8] = 06810BA8
[0019DAEC] = 00000008
[0019DAF0] = 00000000
[0019DAF4] = 00000001
[0019DAF8] = 064C9458
[0019DAFC] = 0681BA88
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 00000000
[0019DB0C] = 00000000
[0019DB10] = 00000000
[0019DB14] = 064C9458
[0019DB18] = 00000002
[0019DB1C] = 00000000
[0019DB20] = 00000004
[0019DB24] = 0000003C
[0019DB28] = 0000003F
[0019DB2C] = 00000000
[0019DB30] = 064C9458
[0019DB34] = 064C9494
[0019DB38] = 064C9494
[0019DB3C] = 064C9494
[0019DB40] = 0019DAA4
[0019DB44] = 00000000
[0019DB48] = 0019DB68
[0019DB4C] = 77D75DDE
[0019DB50] = 00000013
[0019DB54] = 00000000
[0019DB58] = 0000000F
[0019DB5C] = 00000000
[0019DB60] = 00010001
[0019DB64] = 0681BB88
[0019DB68] = 068109C8
[0019DB6C] = 00000008
[0019DB70] = 00000000
[0019DB74] = 00000001
[0019DB78] = 06815F00
[0019DB7C] = 0681BBB8
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 00000000
[0019DB8C] = 00000000
[0019DB90] = 009E7380
[0019DB94] = 068133C0
[0019DB98] = 00408290
[0019DB9C] = 06815F10
[0019DBA0] = 00000002
[0019DBA4] = 0000002D
[0019DBA8] = 0000002F
[0019DBAC] = 006BC0E7
[0019DBB0] = 068133C0
[0019DBB4] = 068133ED
[0019DBB8] = 068133ED
[0019DBBC] = 068133ED
[0019DBC0] = 0019DABC
[0019DBC4] = 00408400
[0019DBC8] = 06815F10
[0019DBCC] = 00000002
[0019DBD0] = 00965B28
[0019DBD4] = 00000000
[0019DBD8] = 0000000F
[0019DBDC] = 06810900
[0019DBE0] = 00010001
[0019DBE4] = 0019DC10
[0019DBE8] = 064C91D0
[0019DBEC] = 00965B28
[0019DBF0] = 00000000
[0019DBF4] = CF163464
[0019DBF8] = 0000003C
[0019DBFC] = 0000003F
[0019DC00] = 0019DC18
[0019DC04] = CF163460
[0019DC08] = 0019E0BC
[0019DC0C] = 008A1F25
[0019DC10] = 0000000A
[0019DC14] = 0019E0CC
[0019DC18] = 00440ADE
[0019DC1C] = CF163454
[0019DC20] = 77603C40
[0019DC24] = 0681BB58
[0019DC28] = 06810D98
[0019DC2C] = 00000006
[0019DC30] = 06810900
[0019DC34] = 77974601
[0019DC38] = 06873170
[0019DC3C] = 06816070
[0019DC40] = 00000004
[0019DC44] = 0019DC74
[0019DC48] = 009E7390
[0019DC4C] = 06873170
[0019DC50] = 00000003
[0019DC54] = 00000003
[0019DC58] = 0019DC74
[0019DC5C] = 009E7390
[0019DC60] = 06873080
[0019DC64] = 009E7390
[0019DC68] = 0689AE18
[0019DC6C] = 06895BA0
[0019DC70] = 77D7627F
[0019DC74] = 0019DC94
[0019DC78] = 776073C5
[0019DC7C] = 01BBF320
[0019DC80] = 00000000
[0019DC84] = 00000287
[0019DC88] = 00000006
[0019DC8C] = 00000000
[0019DC90] = 00000001
[0019DC94] = 0019DCC0
[0019DC98] = 776211FB
[0019DC9C] = 003A05CC
[0019DCA0] = 00000287
[0019DCA4] = 00000006
[0019DCA8] = 00000000
[0019DCAC] = 003A05CC
[0019DCB0] = DCBAABCD
[0019DCB4] = 776073A0
[0019DCB8] = 00000287
[0019DCBC] = 003A05CC
[0019DCC0] = 0019DDA4
[0019DCC4] = 776181CA
[0019DCC8] = 776073A0
[0019DCCC] = 726A2957
[0019DCD0] = 0019DF48
[0019DCD4] = 0019DF0C
[0019DCD8] = 006C2B52
[0019DCDC] = 005A964E
[0019DCE0] = CF163778
[0019DCE4] = 009E7390
[0019DCE8] = 0019DF3C
[0019DCEC] = 00000002
[0019DCF0] = 015E0B58
[0019DCF4] = 77DB7904
[0019DCF8] = 11B26A58
[0019DCFC] = 01190000
[0019DD00] = 00000000
[0019DD04] = 77D75DDE
[0019DD08] = 00000000
[0019DD0C] = 00000000
[0019DD10] = 00000000
[0019DD14] = 00000022
[0019DD18] = 00000064
[0019DD1C] = 00000000
[0019DD20] = 08B530A8
[0019DD24] = 00000024
[0019DD28] = 00000001
[0019DD2C] = 0019DF10
[0019DD30] = 00000000
[0019DD34] = 00000070
[0019DD38] = FFE620EF
[0019DD3C] = FFFFFFFF
[0019DD40] = 77617FDE
[0019DD44] = 7761840F
[0019DD48] = 00000000
[0019DD4C] = 00000000
[0019DD50] = 000211C8
[0019DD54] = 00000000
[0019DD58] = 80006011
[0019DD5C] = 00000000
[0019DD60] = 00000000
[0019DD64] = 00021348
[0019DD68] = 00000000
[0019DD6C] = 00000000
[0019DD70] = 00000000
[0019DD74] = 776073A0
[0019DD78] = 00000000
[0019DD7C] = 00000001
[0019DD80] = 00000000
[0019DD84] = 003A05CC
[0019DD88] = 80006011
[0019DD8C] = 76DCBB22
[0019DD90] = 0019DDB0
[0019DD94] = 0019DE6C
[0019DD98] = 776231A0
[0019DD9C] = A019E1B7
[0019DDA0] = FFFFFFFE
[0019DDA4] = 0019DDDC
[0019DDA8] = 77617897
[0019DDAC] = 776073A0
[0019DDB0] = 00000000
闽公网安备 35010002000112号