按键精灵 2014.06.19549 版
Environment = 1920x1200|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x78C51F
LineNum = 0(0)
Registers:
EAX=00000000 EBX=0019EECC ECX=6967756C EDX=00000000
ESI=18AC0260 EDI=758E3320 ESP=0019EEA0 EBP=0019EF34
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1144000, Size = 13910016
Name = ntdll.dll, Base = 0x779F0000, Top = 0x77B94000, Size = 1720320
Name = KERNEL32.DLL, Base = 0x758C0000, Top = 0x759B0000, Size = 983040
Name = KERNELBASE.dll, Base = 0x76BD0000, Top = 0x76E0A000, Size = 2334720
Name = comctl32.dll, Base = 0x6A900000, Top = 0x6AB10000, Size = 2162688
Name = msvcrt.dll, Base = 0x776C0000, Top = 0x7777F000, Size = 782336
Name = GDI32.dll, Base = 0x76000000, Top = 0x76024000, Size = 147456
Name = win32u.dll, Base = 0x76E90000, Top = 0x76EA8000, Size = 98304
Name = gdi32full.dll, Base = 0x775D0000, Top = 0x776B8000, Size = 950272
Name = msvcp_win.dll, Base = 0x76E10000, Top = 0x76E8B000, Size = 503808
Name = ucrtbase.dll, Base = 0x77320000, Top = 0x77440000, Size = 1179648
Name = USER32.dll, Base = 0x76390000, Top = 0x7652C000, Size = 1687552
Name = IMM32.DLL, Base = 0x75890000, Top = 0x758B5000, Size = 151552
Name = ADVAPI32.dll, Base = 0x75F80000, Top = 0x75FFC000, Size = 507904
Name = sechost.dll, Base = 0x76AE0000, Top = 0x76B56000, Size = 483328
Name = RPCRT4.dll, Base = 0x76170000, Top = 0x7622F000, Size = 782336
Name = winmm.dll, Base = 0x74410000, Top = 0x74438000, Size = 163840
Name = MSIMG32.dll, Base = 0x6B240000, Top = 0x6B246000, Size = 24576
Name = COMDLG32.dll, Base = 0x771A0000, Top = 0x7724F000, Size = 716800
Name = combase.dll, Base = 0x76F20000, Top = 0x771A0000, Size = 2621440
Name = shcore.dll, Base = 0x76090000, Top = 0x76117000, Size = 552960
Name = SHLWAPI.dll, Base = 0x76120000, Top = 0x76165000, Size = 282624
Name = SHELL32.dll, Base = 0x759B0000, Top = 0x75F67000, Size = 5992448
Name = WINSPOOL.DRV, Base = 0x69B80000, Top = 0x69BFD000, Size = 512000
Name = ole32.dll, Base = 0x77780000, Top = 0x77863000, Size = 929792
Name = OLEAUT32.dll, Base = 0x76230000, Top = 0x762C6000, Size = 614400
Name = oledlg.dll, Base = 0x5C830000, Top = 0x5C85C000, Size = 180224
Name = urlmon.dll, Base = 0x72D40000, Top = 0x72EE9000, Size = 1740800
Name = iertutil.dll, Base = 0x72A50000, Top = 0x72C86000, Size = 2318336
Name = netutils.dll, Base = 0x74FA0000, Top = 0x74FAB000, Size = 45056
Name = srvcli.dll, Base = 0x73410000, Top = 0x7342D000, Size = 118784
Name = gdiplus.dll, Base = 0x73190000, Top = 0x732F7000, Size = 1470464
Name = PSAPI.DLL, Base = 0x77250000, Top = 0x77256000, Size = 24576
Name = VERSION.dll, Base = 0x74FC0000, Top = 0x74FC8000, Size = 32768
Name = DINPUT8.dll, Base = 0x5C7F0000, Top = 0x5C827000, Size = 225280
Name = SensApi.dll, Base = 0x5C620000, Top = 0x5C628000, Size = 32768
Name = inputhost.dll, Base = 0x64CD0000, Top = 0x64DBD000, Size = 970752
Name = CoreMessaging.dll, Base = 0x6A740000, Top = 0x6A7DB000, Size = 634880
Name = CoreUIComponents.dll, Base = 0x6A4C0000, Top = 0x6A73F000, Size = 2617344
Name = PROPSYS.dll, Base = 0x73530000, Top = 0x735F2000, Size = 794624
Name = wintypes.dll, Base = 0x5BE20000, Top = 0x5BEFC000, Size = 901120
Name = WS2_32.dll, Base = 0x76A70000, Top = 0x76AD3000, Size = 405504
Name = bcryptPrimitives.dll, Base = 0x762D0000, Top = 0x7632F000, Size = 389120
Name = kernel.appcore.dll, Base = 0x74D50000, Top = 0x74D5F000, Size = 61440
Name = ntmarta.dll, Base = 0x6B2C0000, Top = 0x6B2E9000, Size = 167936
Name = WININET.dll, Base = 0x73780000, Top = 0x73BD5000, Size = 4542464
Name = dbghelp.dll, Base = 0x694B0000, Top = 0x69638000, Size = 1605632
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x69C00000, Top = 0x69C70000, Size = 458752
Name = MFC42.DLL, Base = 0x5C4F0000, Top = 0x5C614000, Size = 1196032
Name = refs.dll, Base = 0x55200000, Top = 0x55396000, Size = 1662976
Name = OLEACC.dll, Base = 0x6AF80000, Top = 0x6AFD3000, Size = 339968
Name = UxTheme.dll, Base = 0x74A10000, Top = 0x74A84000, Size = 475136
Name = dwmapi.dll, Base = 0x6B6C0000, Top = 0x6B6E6000, Size = 155648
Name = windows.storage.dll, Base = 0x75270000, Top = 0x75883000, Size = 6369280
Name = Wldp.dll, Base = 0x75240000, Top = 0x75264000, Size = 147456
Name = profapi.dll, Base = 0x74D60000, Top = 0x74D7C000, Size = 114688
Name = SspiCli.dll, Base = 0x74CA0000, Top = 0x74CC1000, Size = 135168
Name = MSCTF.dll, Base = 0x77900000, Top = 0x779D4000, Size = 868352
Name = clbcatq.dll, Base = 0x77260000, Top = 0x772DE000, Size = 516096
Name = ieframe.dll, Base = 0x546A0000, Top = 0x54CDD000, Size = 6541312
Name = USERENV.dll, Base = 0x74740000, Top = 0x74765000, Size = 151552
Name = WINHTTP.dll, Base = 0x6B950000, Top = 0x6BA1A000, Size = 827392
Name = NETAPI32.dll, Base = 0x74FD0000, Top = 0x74FE4000, Size = 81920
Name = WKSCLI.DLL, Base = 0x74F80000, Top = 0x74F91000, Size = 69632
Name = ondemandconnroutehelper.dll, Base = 0x6A8A0000, Top = 0x6A8B2000, Size = 73728
Name = mswsock.dll, Base = 0x74850000, Top = 0x748A2000, Size = 335872
Name = IPHLPAPI.DLL, Base = 0x74C60000, Top = 0x74C92000, Size = 204800
Name = NSI.dll, Base = 0x76EB0000, Top = 0x76EB7000, Size = 28672
Name = WINNSI.DLL, Base = 0x74840000, Top = 0x74848000, Size = 32768
Name = dataexchange.dll, Base = 0x673C0000, Top = 0x673F1000, Size = 200704
Name = dcomp.dll, Base = 0x65690000, Top = 0x657F4000, Size = 1458176
Name = d3d11.dll, Base = 0x64500000, Top = 0x646E0000, Size = 1966080
Name = dxgi.dll, Base = 0x640D0000, Top = 0x64192000, Size = 794624
Name = twinapi.appcore.dll, Base = 0x64B30000, Top = 0x64CC4000, Size = 1654784
Name = sxs.dll, Base = 0x5C460000, Top = 0x5C4E7000, Size = 552960
Name = DNSAPI.dll, Base = 0x747B0000, Top = 0x74840000, Size = 589824
Name = mdnsNSP.dll, Base = 0x74780000, Top = 0x747A1000, Size = 135168
Name = rasadhlp.dll, Base = 0x74770000, Top = 0x74778000, Size = 32768
Name = fwpuclnt.dll, Base = 0x6B8F0000, Top = 0x6B948000, Size = 360448
Name = bcrypt.dll, Base = 0x775B0000, Top = 0x775C9000, Size = 102400
Name = coml2.dll, Base = 0x76030000, Top = 0x7608E000, Size = 385024
Name = msscript.ocx, Base = 0x5C440000, Top = 0x5C45C000, Size = 114688
Name = vbscript.dll, Base = 0x5C3B0000, Top = 0x5C436000, Size = 548864
Name = amsi.dll, Base = 0x74950000, Top = 0x74968000, Size = 98304
Name = WindowsCodecs.dll, Base = 0x6B6F0000, Top = 0x6B861000, Size = 1511424
Name = napinsp.dll, Base = 0x69420000, Top = 0x69431000, Size = 69632
Name = pnrpnsp.dll, Base = 0x68B70000, Top = 0x68B86000, Size = 90112
Name = wshbth.dll, Base = 0x68B60000, Top = 0x68B70000, Size = 65536
Name = NLAapi.dll, Base = 0x67FC0000, Top = 0x67FD6000, Size = 90112
Name = winrnr.dll, Base = 0x68B50000, Top = 0x68B5E000, Size = 57344
Name = TextShaping.dll, Base = 0x6B2F0000, Top = 0x6B385000, Size = 610304
Name = textinputframework.dll, Base = 0x6A7E0000, Top = 0x6A89A000, Size = 761856
Name = msIso.dll, Base = 0x5C120000, Top = 0x5C166000, Size = 286720
Name = MSHTML.dll, Base = 0x52370000, Top = 0x535C3000, Size = 19214336
Name = powrprof.dll, Base = 0x6B270000, Top = 0x6B2B4000, Size = 278528
Name = UMPDC.dll, Base = 0x6B260000, Top = 0x6B26D000, Size = 53248
Name = CRYPTBASE.DLL, Base = 0x74360000, Top = 0x7436A000, Size = 40960
Name = cfgdll.dll, Base = 0xA770000, Top = 0xA77F000, Size = 61440
Name = HID.DLL, Base = 0x5C3A0000, Top = 0x5C3AA000, Size = 40960
Name = SETUPAPI.DLL, Base = 0x76630000, Top = 0x76A68000, Size = 4423680
Name = cfgmgr32.dll, Base = 0x772E0000, Top = 0x7731B000, Size = 241664
Name = DEVOBJ.dll, Base = 0x65250000, Top = 0x65279000, Size = 167936
Name = WINTRUST.dll, Base = 0x76B60000, Top = 0x76BAC000, Size = 311296
Name = CRYPT32.dll, Base = 0x76530000, Top = 0x7662F000, Size = 1044480
Name = MSASN1.dll, Base = 0x74030000, Top = 0x7403E000, Size = 57344
Name = srpapi.dll, Base = 0x5C2D0000, Top = 0x5C2F5000, Size = 151552
Name = Secur32.dll, Base = 0x74520000, Top = 0x7452A000, Size = 40960
Name = MLANG.dll, Base = 0x5C010000, Top = 0x5C044000, Size = 212992
Name = schannel.dll, Base = 0x6B870000, Top = 0x6B8EC000, Size = 507904
Name = CloudHelper.dll, Base = 0x54F90000, Top = 0x551F3000, Size = 2502656
Name = mskeyprotect.dll, Base = 0x73400000, Top = 0x73410000, Size = 65536
Name = NTASN1.dll, Base = 0x6B500000, Top = 0x6B528000, Size = 163840
Name = DPAPI.DLL, Base = 0x69F40000, Top = 0x69F48000, Size = 32768
Name = CRYPTSP.dll, Base = 0x74D80000, Top = 0x74D93000, Size = 77824
Name = rsaenh.dll, Base = 0x736E0000, Top = 0x7370F000, Size = 192512
Name = cryptnet.dll, Base = 0x67820000, Top = 0x67846000, Size = 155648
Name = msimtf.dll, Base = 0x5C290000, Top = 0x5C29E000, Size = 57344
Name = msls31.dll, Base = 0x6A0E0000, Top = 0x6A111000, Size = 200704
Name = d2d1.dll, Base = 0x54180000, Top = 0x54695000, Size = 5328896
Name = DWrite.dll, Base = 0x6CE80000, Top = 0x6D08C000, Size = 2146304
Name = d3d10warp.dll, Base = 0x53BB0000, Top = 0x54172000, Size = 6037504
Name = dxcore.dll, Base = 0x61D30000, Top = 0x61D5C000, Size = 180224
Name = ncrypt.dll, Base = 0x6B4D0000, Top = 0x6B4F1000, Size = 135168
Name = ncryptsslp.dll, Base = 0x6B4B0000, Top = 0x6B4CF000, Size = 126976
Name = virtdisk.dll, Base = 0x6B230000, Top = 0x6B23F000, Size = 61440
Name = FLTLIB.DLL, Base = 0x74510000, Top = 0x74518000, Size = 32768
Name = uiautomationcore.dll, Base = 0x53930000, Top = 0x53BA3000, Size = 2568192
Name = jscript9.dll, Base = 0x51A70000, Top = 0x51E26000, Size = 3891200
Name = XmlLite.dll, Base = 0x5C360000, Top = 0x5C38B000, Size = 176128
Name = QMColorActionCtl.ocx, Base = 0x8810000, Top = 0x8832000, Size = 139264
Name = MSVBVM60.DLL, Base = 0x54E30000, Top = 0x54F8D000, Size = 1429504
Name = asycfilt.dll, Base = 0x5C100000, Top = 0x5C116000, Size = 90112
Name = policymanager.dll, Base = 0x6A430000, Top = 0x6A4B3000, Size = 536576
Name = msvcp110_win.dll, Base = 0x74DA0000, Top = 0x74E05000, Size = 413696
Name = thumbcache.dll, Base = 0x5C960000, Top = 0x5C9A8000, Size = 294912
Name = explorerframe.dll, Base = 0x5D190000, Top = 0x5D35B000, Size = 1880064
Code Before:
8B 3D 30 E5 8A 00 74 22 8B 46 34 50 FF D7 8B 8E 3C 01 00 00
Current Code:
8B 51 2C 6A FF 52 90 E8 45 6E 15 75 C7 86 3C 01 00 00 00 00
Call Stack:
005A2DB9 ===> 按键精灵2014.exe
Current Stack:
[0019EEA0] = 16BEAFA0
[0019EEA4] = 0657B130
[0019EEA8] = 0078C121
[0019EEAC] = 16BF6988
[0019EEB0] = 00443DB4
[0019EEB4] = 130B5ACE
[0019EEB8] = 16BF6988
[0019EEBC] = 00000000
[0019EEC0] = 00443C30
[0019EEC4] = 16BF6988
[0019EEC8] = 0019EE94
[0019EECC] = 00000000
[0019EED0] = 00000000
[0019EED4] = 00000000
[0019EED8] = 00000000
[0019EEDC] = 00000000
[0019EEE0] = 00000000
[0019EEE4] = 00000000
[0019EEE8] = 00000000
[0019EEEC] = 00000000
[0019EEF0] = 00000000
[0019EEF4] = 00000000
[0019EEF8] = 00000000
[0019EEFC] = 00000000
[0019EF00] = 00000000
[0019EF04] = 009E5390
[0019EF08] = 009E5390
[0019EF0C] = 009E5390
[0019EF10] = 009E5390
[0019EF14] = 009E5390
[0019EF18] = 009E5390
[0019EF1C] = 00000000
[0019EF20] = 0064E017
[0019EF24] = 0019EFD8
[0019EF28] = 0089DCC8
[0019EF2C] = FFFFFFFF
[0019EF30] = 00000007
[0019EF34] = 0019EFE4
[0019EF38] = 005A2DB9
[0019EF3C] = 130B5B92
[0019EF40] = 00000002
[0019EF44] = 16BF6988
[0019EF48] = 16BF6988
[0019EF4C] = 0019F070
[0019EF50] = 763D2E50
[0019EF54] = 5AAA230B
[0019EF58] = FFFFFFFE
[0019EF5C] = 0019EF94
[0019EF60] = 763C7537
[0019EF64] = 77A77FD0
[0019EF68] = 00000000
[0019EF6C] = 00000047
[0019EF70] = 00000000
[0019EF74] = 0019F27C
[0019EF78] = 013AFC94
[0019EF7C] = 00000000
[0019EF80] = 00000047
[0019EF84] = 16BF6988
[0019EF88] = 16BF6988
[0019EF8C] = 77A77FD0
[0019EF90] = 00000000
[0019EF94] = 0019EFAC
[0019EF98] = 763B3FCB
[0019EF9C] = 00000047
[0019EFA0] = 00000000
[0019EFA4] = 0019F27C
[0019EFA8] = 00000001
[0019EFAC] = 0019EFCC
[0019EFB0] = 0059DC0F
[0019EFB4] = 77A77FD0
[0019EFB8] = 000606F2
[0019EFBC] = 00000047
[0019EFC0] = 00000000
[0019EFC4] = 0019EFCC
[0019EFC8] = 763C858D
[0019EFCC] = 00A00DB0
[0019EFD0] = 7FFFFFFF
[0019EFD4] = 00000000
[0019EFD8] = 0019F08C
[0019EFDC] = 008658F2
[0019EFE0] = 00000000
[0019EFE4] = 0019F004
[0019EFE8] = 0059DD7F
[0019EFEC] = 00000002
[0019EFF0] = 00000000
[0019EFF4] = 00957E88
[0019EFF8] = 0019F000
[0019EFFC] = 16BF6988
[0019F000] = 00000000
[0019F004] = 0019F024
[0019F008] = 005DE7F8
[0019F00C] = 00000002
[0019F010] = 00000000
[0019F014] = 00000000
[0019F018] = 00000002
[0019F01C] = 16BF6988
[0019F020] = 013AD270
[0019F024] = 0019F098
[0019F028] = 005A11F1
[0019F02C] = 00000002
[0019F030] = 00000000
[0019F034] = 00000000
[0019F038] = 130B44EE
[0019F03C] = 00000002
[0019F040] = 000606F2
[0019F044] = 005A124A
[0019F048] = 000E08A8
[0019F04C] = 00000111
[0019F050] = 000080E5
[0019F054] = 00000000
[0019F058] = 00000000
[0019F05C] = 00000000
[0019F060] = 00000000
[0019F064] = 0086C5A0
[0019F068] = FFFFFFFF
[0019F06C] = 013AD270
[0019F070] = 00000000
[0019F074] = 00000000
[0019F078] = 00000000
[0019F07C] = 00000000
[0019F080] = 00000000
[0019F084] = 130B44EE
[0019F088] = 0019F038
[0019F08C] = 0019F1B8
[0019F090] = 008657E1
[0019F094] = 00000000
[0019F098] = 0019F0B8
[0019F09C] = 005A1280
[0019F0A0] = 16BF6988
[0019F0A4] = 000606F2
[0019F0A8] = 00000002
[0019F0AC] = 00000000
[0019F0B0] = 00000000
[0019F0B4] = 000606F2
[0019F0B8] = 0019F0E4
[0019F0BC] = 763D0EAB
[0019F0C0] = 000606F2
[0019F0C4] = 00000002
[0019F0C8] = 00000000
[0019F0CC] = 00000000
[0019F0D0] = 000606F2
[0019F0D4] = DCBAABCD
[0019F0D8] = 005A124A
[0019F0DC] = 00000002
[0019F0E0] = 000606F2
[0019F0E4] = 0019F1C8
[0019F0E8] = 763C7E5A
[0019F0EC] = 005A124A
[0019F0F0] = 000606F2
[0019F0F4] = 00000002
[0019F0F8] = 00000000
[0019F0FC] = 00000000
[0019F100] = 2CF17413
[0019F104] = 40000000
[0019F108] = C0000388
[0019F10C] = 00000002
[0019F110] = 2CF17403
[0019F114] = 40000000
[0019F118] = C0000388
[0019F11C] = 0000000F
[0019F120] = 013AFC94
[0019F124] = 00000070
[0019F128] = FFE603BB
[0019F12C] = 00000024
[0019F130] = 00000001
[0019F134] = 0019FC44
[0019F138] = 013AFC94
[0019F13C] = 00000070
[0019F140] = FFE603BB
[0019F144] = FEC5036B
[0019F148] = 00000024
[0019F14C] = 00000001
[0019F150] = 0019FC44
[0019F154] = 013AFC94
[0019F158] = 00000030
[0019F15C] = FFE603BB
[0019F160] = FEC5036B
[0019F164] = 763C7C6E
[0019F168] = 00000000
[0019F16C] = 00000000
[0019F170] = 00000000
[0019F174] = 000211C8
[0019F178] = 00000000
[0019F17C] = 80006011
[0019F180] = 00000000
[0019F184] = 00000000
[0019F188] = 00021348
[0019F18C] = 00000000
[0019F190] = 00000000
[0019F194] = 00000000
[0019F198] = 005A124A
[0019F19C] = 00000000
[0019F1A0] = 00000001
[0019F1A4] = 00000000
[0019F1A8] = 000606F2
[0019F1AC] = 80006011
[0019F1B0] = 00000004
[0019F1B4] = 0019E8D4
[0019F1B8] = 0019F21C
[0019F1BC] = 763D2E50
闽公网安备 35010002000112号