按键精灵 2014.06.19549 版
Environment = 1680x1050|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x59A831
LineNum = 0(0)
Registers:
EAX=00000000 EBX=00000000 ECX=00000000 EDX=00000000
ESI=0018F6A0 EDI=0018F6A0 ESP=0018F638 EBP=0018F648
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1144000, Size = 13910016
Name = ntdll.dll, Base = 0x77E50000, Top = 0x77FD0000, Size = 1572864
Name = kernel32.dll, Base = 0x77900000, Top = 0x77A10000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x75770000, Top = 0x757B7000, Size = 290816
Name = comctl32.dll, Base = 0x72660000, Top = 0x727FE000, Size = 1695744
Name = msvcrt.dll, Base = 0x762F0000, Top = 0x7639C000, Size = 704512
Name = GDI32.dll, Base = 0x75B60000, Top = 0x75BF0000, Size = 589824
Name = USER32.dll, Base = 0x77780000, Top = 0x77880000, Size = 1048576
Name = ADVAPI32.dll, Base = 0x763A0000, Top = 0x76441000, Size = 659456
Name = sechost.dll, Base = 0x762D0000, Top = 0x762E9000, Size = 102400
Name = RPCRT4.dll, Base = 0x75D50000, Top = 0x75E40000, Size = 983040
Name = SspiCli.dll, Base = 0x75700000, Top = 0x75760000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x756F0000, Top = 0x756FC000, Size = 49152
Name = LPK.dll, Base = 0x75F00000, Top = 0x75F0A000, Size = 40960
Name = USP10.dll, Base = 0x776E0000, Top = 0x7777D000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76670000, Top = 0x766C7000, Size = 356352
Name = IMM32.DLL, Base = 0x75C90000, Top = 0x75CF0000, Size = 393216
Name = MSCTF.dll, Base = 0x75A90000, Top = 0x75B5D000, Size = 839680
Name = winmm.dll, Base = 0x730C0000, Top = 0x730F2000, Size = 204800
Name = MSIMG32.dll, Base = 0x71630000, Top = 0x71635000, Size = 20480
Name = COMDLG32.dll, Base = 0x75E40000, Top = 0x75EBB000, Size = 503808
Name = SHELL32.dll, Base = 0x76890000, Top = 0x774DC000, Size = 12894208
Name = WINSPOOL.DRV, Base = 0x702C0000, Top = 0x70311000, Size = 331776
Name = ole32.dll, Base = 0x77580000, Top = 0x776DD000, Size = 1429504
Name = OLEAUT32.dll, Base = 0x75BF0000, Top = 0x75C81000, Size = 593920
Name = oledlg.dll, Base = 0x6D5B0000, Top = 0x6D5CC000, Size = 114688
Name = urlmon.dll, Base = 0x76180000, Top = 0x762CB000, Size = 1355776
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77880000, Top = 0x77884000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x75D40000, Top = 0x75D44000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x75EE0000, Top = 0x75EE5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x76660000, Top = 0x76664000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75F20000, Top = 0x75F24000, Size = 16384
Name = version.DLL, Base = 0x73630000, Top = 0x73639000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75760000, Top = 0x75763000, Size = 12288
Name = normaliz.DLL, Base = 0x75EF0000, Top = 0x75EF3000, Size = 12288
Name = iertutil.dll, Base = 0x75F30000, Top = 0x76165000, Size = 2314240
Name = WININET.dll, Base = 0x757C0000, Top = 0x75A6B000, Size = 2797568
Name = USERENV.dll, Base = 0x75EC0000, Top = 0x75ED7000, Size = 94208
Name = profapi.dll, Base = 0x76170000, Top = 0x7617B000, Size = 45056
Name = gdiplus.dll, Base = 0x71EE0000, Top = 0x72071000, Size = 1642496
Name = PSAPI.DLL, Base = 0x77570000, Top = 0x77575000, Size = 20480
Name = DINPUT8.dll, Base = 0x6D580000, Top = 0x6D5B0000, Size = 196608
Name = SensApi.dll, Base = 0x71420000, Top = 0x71426000, Size = 24576
Name = WS2_32.dll, Base = 0x76620000, Top = 0x76655000, Size = 217088
Name = NSI.dll, Base = 0x75F10000, Top = 0x75F16000, Size = 24576
Name = dbghelp.dll, Base = 0x6FDF0000, Top = 0x6FEDB000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6D460000, Top = 0x6D57C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6D3D0000, Top = 0x6D45C000, Size = 573440
Name = MSVCP60.dll, Base = 0x70250000, Top = 0x702B6000, Size = 417792
Name = odbcint.dll, Base = 0x6D390000, Top = 0x6D3C8000, Size = 229376
Name = refs.dll, Base = 0x6D1F0000, Top = 0x6D386000, Size = 1662976
Name = OLEACC.dll, Base = 0x6FC20000, Top = 0x6FC5C000, Size = 245760
Name = UxTheme.dll, Base = 0x70A50000, Top = 0x70AD0000, Size = 524288
Name = dwmapi.dll, Base = 0x73DC0000, Top = 0x73DD3000, Size = 77824
Name = Secur32.dll, Base = 0x73010000, Top = 0x73018000, Size = 32768
Name = CLBCatQ.DLL, Base = 0x774E0000, Top = 0x77563000, Size = 536576
Name = ieframe.dll, Base = 0x6C4D0000, Top = 0x6D1E1000, Size = 13701120
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x6C4C0000, Top = 0x6C4C4000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x734D0000, Top = 0x734D4000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x67B60000, Top = 0x67B64000, Size = 16384
Name = SXS.DLL, Base = 0x67A90000, Top = 0x67AEF000, Size = 389120
Name = IPHLPAPI.DLL, Base = 0x73460000, Top = 0x7347C000, Size = 114688
Name = WINNSI.DLL, Base = 0x73450000, Top = 0x73457000, Size = 28672
Name = mswsock.dll, Base = 0x71680000, Top = 0x716BC000, Size = 245760
Name = wship6.dll, Base = 0x715C0000, Top = 0x715C6000, Size = 24576
Name = DNSAPI.dll, Base = 0x728C0000, Top = 0x72904000, Size = 278528
Name = wshtcpip.dll, Base = 0x715B0000, Top = 0x715B5000, Size = 20480
Name = CRYPTSP.dll, Base = 0x72640000, Top = 0x72657000, Size = 94208
Name = rasadhlp.dll, Base = 0x715D0000, Top = 0x715D6000, Size = 24576
Name = rsaenh.dll, Base = 0x725B0000, Top = 0x725EB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x730B0000, Top = 0x730BE000, Size = 57344
Name = msscript.ocx, Base = 0x6C4A0000, Top = 0x6C4BA000, Size = 106496
Name = vbscript.dll, Base = 0x6C380000, Top = 0x6C3FE000, Size = 516096
Name = fwpuclnt.dll, Base = 0x70880000, Top = 0x708B8000, Size = 229376
Name = WindowsCodecs.dll, Base = 0x70EB0000, Top = 0x70FE1000, Size = 1249280
Name = NLAapi.dll, Base = 0x73DB0000, Top = 0x73DC0000, Size = 65536
Name = napinsp.dll, Base = 0x73DA0000, Top = 0x73DB0000, Size = 65536
Name = pnrpnsp.dll, Base = 0x73D80000, Top = 0x73D92000, Size = 73728
Name = winrnr.dll, Base = 0x73D70000, Top = 0x73D78000, Size = 32768
Name = apphelp.dll, Base = 0x71360000, Top = 0x713AC000, Size = 311296
Name = MSHTML.dll, Base = 0x6AEC0000, Top = 0x6C31E000, Size = 21356544
Name = cfgdll.dll, Base = 0x8B10000, Top = 0x8B1F000, Size = 61440
Name = HID.DLL, Base = 0x6E290000, Top = 0x6E299000, Size = 36864
Name = SETUPAPI.DLL, Base = 0x76480000, Top = 0x7661D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x77A10000, Top = 0x77A37000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75A70000, Top = 0x75A82000, Size = 73728
Name = WINTRUST.dll, Base = 0x77A40000, Top = 0x77A6F000, Size = 192512
Name = CRYPT32.dll, Base = 0x766D0000, Top = 0x767F2000, Size = 1187840
Name = MSASN1.dll, Base = 0x77890000, Top = 0x7789C000, Size = 49152
Name = MLANG.dll, Base = 0x6C400000, Top = 0x6C42E000, Size = 188416
Name = PROPSYS.dll, Base = 0x71750000, Top = 0x71845000, Size = 1003520
Name = CloudHelper.dll, Base = 0x6AC50000, Top = 0x6AEB3000, Size = 2502656
Name = credssp.dll, Base = 0x704F0000, Top = 0x704F8000, Size = 32768
Name = schannel.dll, Base = 0x6E410000, Top = 0x6E451000, Size = 266240
Name = ncrypt.dll, Base = 0x71CC0000, Top = 0x71CF9000, Size = 233472
Name = bcrypt.dll, Base = 0x725F0000, Top = 0x72607000, Size = 94208
Name = bcryptprimitives.dll, Base = 0x71C80000, Top = 0x71CBD000, Size = 249856
Name = msimtf.dll, Base = 0x6C490000, Top = 0x6C49B000, Size = 45056
Name = msls31.dll, Base = 0x6C450000, Top = 0x6C481000, Size = 200704
Name = jscript9.dll, Base = 0x5E4D0000, Top = 0x5E926000, Size = 4546560
Name = GPAPI.dll, Base = 0x71E10000, Top = 0x71E26000, Size = 90112
Name = d2d1.dll, Base = 0x6A4B0000, Top = 0x6A7F7000, Size = 3436544
Name = DWrite.dll, Base = 0x6A370000, Top = 0x6A4A6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A320000, Top = 0x6A36C000, Size = 311296
Name = d3d11.dll, Base = 0x6A1A0000, Top = 0x6A315000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x69FB0000, Top = 0x6A199000, Size = 2002944
Name = cryptnet.dll, Base = 0x71BA0000, Top = 0x71BBD000, Size = 118784
Name = WLDAP32.dll, Base = 0x75CF0000, Top = 0x75D35000, Size = 282624
Name = windowscodecsext.dll, Base = 0x6AC10000, Top = 0x6AC47000, Size = 225280
Name = msxml6.dll, Base = 0x6AAB0000, Top = 0x6AC08000, Size = 1409024
Name = XmlLite.dll, Base = 0x72610000, Top = 0x7263F000, Size = 192512
Name = QMColorActionCtl.ocx, Base = 0x133A0000, Top = 0x133C2000, Size = 139264
Name = MSVBVM60.DLL, Base = 0x72940000, Top = 0x72A93000, Size = 1388544
Name = asycfilt.dll, Base = 0x6D5E0000, Top = 0x6D5F4000, Size = 81920
Name = ntmarta.dll, Base = 0x71640000, Top = 0x71661000, Size = 135168
Name = YunShellExtV1.dll, Base = 0x6A890000, Top = 0x6AAA8000, Size = 2195456
Name = api-ms-win-core-synch-l1-2-0.DLL, Base = 0x73440000, Top = 0x73443000, Size = 12288
Name = EhStorShell.dll, Base = 0x6A810000, Top = 0x6A841000, Size = 200704
Name = ntshrui.dll, Base = 0x69F40000, Top = 0x69FB0000, Size = 458752
Name = srvcli.dll, Base = 0x72E10000, Top = 0x72E29000, Size = 102400
Name = cscapi.dll, Base = 0x6D5D0000, Top = 0x6D5DB000, Size = 45056
Name = slc.dll, Base = 0x6C440000, Top = 0x6C44A000, Size = 40960
Name = explorerframe.dll, Base = 0x69DD0000, Top = 0x69F40000, Size = 1507328
Name = DUser.dll, Base = 0x6A860000, Top = 0x6A88F000, Size = 192512
Name = DUI70.dll, Base = 0x69D10000, Top = 0x69DC2000, Size = 729088
Name = MMDevAPI.DLL, Base = 0x5F060000, Top = 0x5F099000, Size = 233472
Name = wdmaud.drv, Base = 0x69CE0000, Top = 0x69D10000, Size = 196608
Name = ksuser.dll, Base = 0x6C430000, Top = 0x6C434000, Size = 16384
Name = AVRT.dll, Base = 0x6A850000, Top = 0x6A857000, Size = 28672
Name = AUDIOSES.DLL, Base = 0x5F0A0000, Top = 0x5F0D6000, Size = 221184
Name = msacm32.drv, Base = 0x6A800000, Top = 0x6A808000, Size = 32768
Name = MSACM32.dll, Base = 0x69CC0000, Top = 0x69CD4000, Size = 81920
Name = midimap.dll, Base = 0x69CB0000, Top = 0x69CB7000, Size = 28672
Name = uiautomationcore.dll, Base = 0x69C20000, Top = 0x69CAC000, Size = 573440
Code Before:
5E 5B 5D C2 0C 00 8B FF 55 8B EC 53 56 8B 75 08 57 8B D9 56
Current Code:
FF 73 20 90 E8 7B 9B 20 77 8D 7E 08 57 FF 73 20 90 E8 6E 9B
Call Stack:
00706645 ===> 按键精灵2014.exe
Current Stack:
[0018F638] = 0018F6A0
[0018F63C] = 0018F6A0
[0018F640] = 092E9698
[0018F644] = 09349858
[0018F648] = 0018F680
[0018F64C] = 00706645
[0018F650] = 0018F6A0
[0018F654] = 1B48989C
[0018F658] = 00000003
[0018F65C] = 092E9698
[0018F660] = 092E9698
[0018F664] = 0018F694
[0018F668] = 00640609
[0018F66C] = 00640693
[0018F670] = 1B489888
[0018F674] = 0018F6B4
[0018F678] = 008766E0
[0018F67C] = FFFFFFFF
[0018F680] = 0018F6C0
[0018F684] = 0070B316
[0018F688] = 0018F6A0
[0018F68C] = 1B4898DC
[0018F690] = 00000003
[0018F694] = 092E9698
[0018F698] = 14A4F26C
[0018F69C] = 006407B0
[0018F6A0] = 000002BE
[0018F6A4] = 000001C8
[0018F6A8] = 000002FA
[0018F6AC] = 000001F1
[0018F6B0] = 1B4898DC
[0018F6B4] = 0018F73C
[0018F6B8] = 008769FB
[0018F6BC] = FFFFFFFF
[0018F6C0] = 0018F748
[0018F6C4] = 00469C27
[0018F6C8] = 00000001
[0018F6CC] = 1B4898CC
[0018F6D0] = 14A4F0B4
[0018F6D4] = 092E9698
[0018F6D8] = 00000003
[0018F6DC] = 004D4FDF
[0018F6E0] = 53F69C7A
[0018F6E4] = 4B621A72
[0018F6E8] = 1FCAA9BC
[0018F6EC] = 0ADD24E5
[0018F6F0] = 00000000
[0018F6F4] = 6B170FFC
[0018F6F8] = 08BD00F0
[0018F6FC] = 00000013
[0018F700] = 00000000
[0018F704] = 00006D1B
[0018F708] = 00000000
[0018F70C] = 00000013
[0018F710] = 015A6AE0
[0018F714] = 53F69C7A
[0018F718] = 4B621A72
[0018F71C] = 1FCAA9BC
[0018F720] = 0ADD24E5
[0018F724] = 00A0406C
[0018F728] = 0018F768
[0018F72C] = 7779702C
[0018F730] = 015A71C0
[0018F734] = 1B4898C4
[0018F738] = 14A4F0B4
[0018F73C] = 0018F800
[0018F740] = 0088B868
[0018F744] = 00000000
[0018F748] = 0018F754
[0018F74C] = 0046DBCB
[0018F750] = 0046DBB0
[0018F754] = 0018F80C
[0018F758] = 005A2FE2
[0018F75C] = 00000000
[0018F760] = 092E9698
[0018F764] = 1B489610
[0018F768] = 00000817
[0018F76C] = 14A4F0B4
[0018F770] = 002BEB48
[0018F774] = 0018F808
[0018F778] = 008658F2
[0018F77C] = FFFFFFFF
[0018F780] = 005A2C5D
[0018F784] = 0059DD7F
[0018F788] = 0000000E
[0018F78C] = 00000000
[0018F790] = 008C6390
[0018F794] = 0018F79C
[0018F798] = 054F3128
[0018F79C] = 00000002
[0018F7A0] = 0018F814
[0018F7A4] = 005A11F1
[0018F7A8] = 0000000E
[0018F7AC] = 006C0DE2
[0018F7B0] = 005A1247
[0018F7B4] = 1B489608
[0018F7B8] = 00000000
[0018F7BC] = 00050972
[0018F7C0] = 00000000
[0018F7C4] = 00000000
[0018F7C8] = 00000000
[0018F7CC] = 00000000
[0018F7D0] = 00000000
[0018F7D4] = 00000000
[0018F7D8] = 00000000
[0018F7DC] = 00000000
[0018F7E0] = 00A033B8
[0018F7E4] = 002BEB48
[0018F7E8] = 00A033D4
[0018F7EC] = 00A033B8
[0018F7F0] = 0018F808
[0018F7F4] = 00A00D8C
[0018F7F8] = 7FFFFFFF
[0018F7FC] = 00000000
[0018F800] = 0018F894
[0018F804] = 008658F2
[0018F808] = 00000000
[0018F80C] = 0018F82C
[0018F810] = 0059DD7F
[0018F814] = 00000817
[0018F818] = 00000000
[0018F81C] = 0095F658
[0018F820] = 0018F828
[0018F824] = 14A4F0B4
[0018F828] = 00000000
[0018F82C] = 0018F8A0
[0018F830] = 005A11F1
[0018F834] = 00000817
[0018F838] = 00000000
[0018F83C] = 092E9698
[0018F840] = 1B4896BC
[0018F844] = 00000000
[0018F848] = 0005070A
[0018F84C] = 00000000
[0018F850] = 000506D0
[0018F854] = 0000C088
[0018F858] = 00009068
[0018F85C] = 092FCF88
[0018F860] = 00000000
[0018F864] = 00000000
[0018F868] = 00000000
[0018F86C] = 0086C5A0
[0018F870] = FFFFFFFF
[0018F874] = 002BEB48
[0018F878] = 00000000
[0018F87C] = 00000000
[0018F880] = 00000000
[0018F884] = 00000000
[0018F888] = 00000000
[0018F88C] = 1B4896BC
[0018F890] = 0018F840
[0018F894] = 0018F954
[0018F898] = 008657E1
[0018F89C] = 00000000
[0018F8A0] = 0018F8C0
[0018F8A4] = 005A1280
[0018F8A8] = 14A4F0B4
[0018F8AC] = 0005070A
[0018F8B0] = 00000817
[0018F8B4] = 00000000
[0018F8B8] = 092E9698
[0018F8BC] = 005A124A
[0018F8C0] = 0018F8EC
[0018F8C4] = 777962FA
[0018F8C8] = 0005070A
[0018F8CC] = 00000817
[0018F8D0] = 00000000
[0018F8D4] = 092E9698
[0018F8D8] = 005A124A
[0018F8DC] = DCBAABCD
[0018F8E0] = 00000000
[0018F8E4] = 00000000
[0018F8E8] = 005A124A
[0018F8EC] = 0018F964
[0018F8F0] = 77796D3A
[0018F8F4] = 005A124A
[0018F8F8] = 0005070A
[0018F8FC] = 00000817
[0018F900] = 00000000
[0018F904] = 092E9698
[0018F908] = 1BF73489
[0018F90C] = 00000817
[0018F910] = 015E7090
[0018F914] = 000005D7
[0018F918] = 00000024
[0018F91C] = 00000001
[0018F920] = 0018FCCC
[0018F924] = 002D804C
[0018F928] = 00000030
[0018F92C] = FFE70333
[0018F930] = FFD27FB3
[0018F934] = 77796CE9
[0018F938] = 00000000
[0018F93C] = 00A033B8
[0018F940] = 00000001
[0018F944] = 00000000
[0018F948] = 00000000
[0018F94C] = 0018F908
[0018F950] = 0018F084
[0018F954] = 0018FAD4