|
|
按键精灵 6.71.2192版
Type = 0xC0000005
Address = 0x73D311C7
Registers:
EAX=00000000 EBX=013F0000 ECX=00000000 EDX=00000000
ESI=01402CB8 EDI=00000001 ESP=0217FD18 EBP=0217FD48
Current Modules:
Name = 按键精灵6.exe, Base = 0x400000, Top = 0x8E1000
Name = ntdll.dll, Base = 0x7C920000, Top = 0x7C9B4000
Name = kernel32.dll, Base = 0x7C800000, Top = 0x7C91D000
Name = qmhelper.dll, Base = 0x10000000, Top = 0x10008000
Name = USER32.dll, Base = 0x77D10000, Top = 0x77D9F000
Name = GDI32.dll, Base = 0x77EF0000, Top = 0x77F37000
Name = IMM32.DLL, Base = 0x76300000, Top = 0x7631D000
Name = ADVAPI32.dll, Base = 0x77DA0000, Top = 0x77E49000
Name = RPCRT4.dll, Base = 0x77E50000, Top = 0x77EE1000
Name = LPK.DLL, Base = 0x62C20000, Top = 0x62C29000
Name = USP10.dll, Base = 0x73FA0000, Top = 0x7400B000
Name = msvcrt.dll, Base = 0x77BE0000, Top = 0x77C38000
==>
Name = MFC42.DLL, Base = 0x73D30000, Top = 0x73E2E000
Name = MFC42LOC.DLL, Base = 0x61BE0000, Top = 0x61BED000
Name = SHELL32.dll, Base = 0x7D590000, Top = 0x7DD83000
Name = SHLWAPI.dll, Base = 0x77F40000, Top = 0x77FB6000
Name = comctl32.dll, Base = 0x77180000, Top = 0x77283000
Name = ole32.dll, Base = 0x76990000, Top = 0x76ACD000
Name = OLEAUT32.dll, Base = 0x770F0000, Top = 0x7717B000
Name = urlmon.dll, Base = 0x75C60000, Top = 0x75CFE000
Name = VERSION.dll, Base = 0x77BD0000, Top = 0x77BD8000
Name = WINMM.dll, Base = 0x76B10000, Top = 0x76B3A000
Name = MSVCP60.dll, Base = 0x75FF0000, Top = 0x76055000
Name = WINIO.dll, Base = 0xF90000, Top = 0xFA0000
Name = helper.dll, Base = 0xFB0000, Top = 0xFC1000
Name = BException.dll, Base = 0xFE0000, Top = 0xFED000
Name = WS2_32.dll, Base = 0x71A20000, Top = 0x71A37000
Name = WS2HELP.dll, Base = 0x71A10000, Top = 0x71A18000
Name = comdlg32.dll, Base = 0x76320000, Top = 0x76367000
Name = uxtheme.dll, Base = 0x5ADC0000, Top = 0x5ADF7000
Name = msimg32.dll, Base = 0x762F0000, Top = 0x762F5000
Name = fgmgr.dll, Base = 0xFF0000, Top = 0xFF8000
Name = MSCTF.dll, Base = 0x74680000, Top = 0x746CB000
Name = iphlpapi.dll, Base = 0x76D30000, Top = 0x76D48000
Name = cooper.dll, Base = 0x13F0000, Top = 0x145D000
Name = WININET.dll, Base = 0x76680000, Top = 0x76722000
Name = CRYPT32.dll, Base = 0x765E0000, Top = 0x76672000
Name = MSASN1.dll, Base = 0x76DB0000, Top = 0x76DC2000
Name = msctfime.ime, Base = 0x73640000, Top = 0x7366E000
Name = Secur32.dll, Base = 0x77FC0000, Top = 0x77FD1000
Name = mswsock.dll, Base = 0x719C0000, Top = 0x719FE000
Name = hnetcfg.dll, Base = 0x60FD0000, Top = 0x61025000
Name = wshtcpip.dll, Base = 0x71A00000, Top = 0x71A08000
Name = CLBCATQ.DLL, Base = 0x76FA0000, Top = 0x7701F000
Name = COMRes.dll, Base = 0x77020000, Top = 0x770BA000
Name = shdocvw.dll, Base = 0x7E550000, Top = 0x7E6BF000
Name = CRYPTUI.dll, Base = 0x75430000, Top = 0x754A1000
Name = WINTRUST.dll, Base = 0x76C00000, Top = 0x76C2E000
Name = IMAGEHLP.dll, Base = 0x76C60000, Top = 0x76C88000
Name = NETAPI32.dll, Base = 0x5FDD0000, Top = 0x5FE24000
Name = WLDAP32.dll, Base = 0x76F30000, Top = 0x76F5C000
Name = DNSAPI.dll, Base = 0x76EF0000, Top = 0x76F17000
Name = wsock32.dll, Base = 0x71A40000, Top = 0x71A4B000
Name = appHelp.dll, Base = 0x76D70000, Top = 0x76D92000
Name = SXS.DLL, Base = 0x75E00000, Top = 0x75EAE000
Name = shdoclc.dll, Base = 0x20000000, Top = 0x2007C000
Name = xpsp2res.dll, Base = 0x1930000, Top = 0x1E79000
Name = mlang.dll, Base = 0x74CF0000, Top = 0x74D81000
Name = RASAPI32.DLL, Base = 0x76EB0000, Top = 0x76EEC000
Name = rasman.dll, Base = 0x76E60000, Top = 0x76E72000
Name = TAPI32.dll, Base = 0x76E80000, Top = 0x76EAF000
Name = rtutils.dll, Base = 0x76E50000, Top = 0x76E5E000
Name = winrnr.dll, Base = 0x76F80000, Top = 0x76F88000
Name = msv1_0.dll, Base = 0x77C40000, Top = 0x77C63000
Name = USERENV.dll, Base = 0x759D0000, Top = 0x75A7E000
Name = mxuxgq.dll, Base = 0x2730000, Top = 0x2739000
Name = rasadhlp.dll, Base = 0x76F90000, Top = 0x76F96000
Name = mshtml.dll, Base = 0x7E210000, Top = 0x7E506000
Name = msls31.dll, Base = 0x74620000, Top = 0x74647000
Name = PSAPI.DLL, Base = 0x76BC0000, Top = 0x76BCB000
Name = msimtf.dll, Base = 0x74650000, Top = 0x7467A000
Name = SETUPAPI.dll, Base = 0x76060000, Top = 0x761B6000
Name = wdmaud.drv, Base = 0x72C90000, Top = 0x72C99000
Name = msacm32.drv, Base = 0x72C80000, Top = 0x72C88000
Name = MSACM32.dll, Base = 0x77BB0000, Top = 0x77BC5000
Name = midimap.dll, Base = 0x77BA0000, Top = 0x77BA7000
Name = jscript.dll, Base = 0x75BC0000, Top = 0x75C2E000
Name = mps.dll, Base = 0x3CC0000, Top = 0x3DAA000
Name = msdmo.dll, Base = 0x73620000, Top = 0x73627000
Name = score.dll, Base = 0x42C0000, Top = 0x42C9000
Name = sexpert.dll, Base = 0x42D0000, Top = 0x42D7000
Name = sprobe.dll, Base = 0x42E0000, Top = 0x42E9000
Name = splayers.dll, Base = 0x42F0000, Top = 0x4350000
Name = SubDecoder.dll, Base = 0x4370000, Top = 0x4442000
Name = WINSPOOL.DRV, Base = 0x72F70000, Top = 0x72F96000
Name = rndrmgr.dll, Base = 0x44B0000, Top = 0x44CD000
Name = WMVCORE.DLL, Base = 0x44D0000, Top = 0x46DB000
Name = DRMClien.DLL, Base = 0x46E0000, Top = 0x472F000
Name = MSVFW32.dll, Base = 0x73B40000, Top = 0x73B60000
Name = WMASF.DLL, Base = 0x59A10000, Top = 0x59A4C000
Name = wmidx.dll, Base = 0x4BE60000, Top = 0x4BE89000
Name = mshtmled.dll, Base = 0x753B0000, Top = 0x75421000
Name = VBScript.dll, Base = 0x73270000, Top = 0x732D7000
Name = msadco.dll, Base = 0x4D0B0000, Top = 0x4D0D3000
Name = MSDART.DLL, Base = 0x75B50000, Top = 0x75B75000
Name = msadcor.dll, Base = 0xE790000, Top = 0xE794000
Name = MSScript.ocx, Base = 0x6B980000, Top = 0x6B999000
Name = BkgndColor.dll, Base = 0x26F0000, Top = 0x2705000
Name = Console.dll, Base = 0x2720000, Top = 0x272D000
Name = File.dll, Base = 0xEBA0000, Top = 0xEBAF000
Name = GetSysInfo.dll, Base = 0xECC0000, Top = 0xECD2000
Name = Memory.dll, Base = 0xEDF0000, Top = 0xEE05000
Name = Window.dll, Base = 0xEF20000, Top = 0xEF28000
Name = WINSTA.dll, Base = 0x762D0000, Top = 0x762E0000
Name = msi.dll, Base = 0xF140000, Top = 0xF406000
Name = QMDISP~1.DLL, Base = 0x15C0000, Top = 0x160E000
Name = dbghelp.dll, Base = 0x68D60000, Top = 0x68E01000
Code Before:
56 8B C8 E8 3C DE 05 00 5E C2 04 00 CC CC CC CC CC 8B FF 56
Current Code:
8B 71 04 85 F6 75 04 33 C0 EB 22 57 8B 7C 24 0C 8B C7 33 D2
Call Stack:
73D38F06
013F116F
7C9211A7
7C943F31
7C81CD76
7C81CDEE
77C09D45
77C09E78
77C09EAC
77C0A3D5
7C80B683
00000000
Current Stack:
[0217FD18] = 01402CB8
[0217FD1C] = 73D36C03
[0217FD20] = 002A033E
[0217FD24] = 00000001
[0217FD28] = 013F0000
[0217FD2C] = 01402CB8
[0217FD30] = 73D325BF
[0217FD34] = 01402CB8
[0217FD38] = 01402CB8
[0217FD3C] = 0217FD58
[0217FD40] = 73DCEFCA
[0217FD44] = 00000000
[0217FD48] = 0217FD64
[0217FD4C] = 73D38F06
[0217FD50] = 01402CB8
[0217FD54] = 01402CB8
[0217FD58] = 0217FD74
[0217FD5C] = 73DCF10C
[0217FD60] = FFFFFFFF
[0217FD64] = 0217FDA4
[0217FD68] = 013F116F
[0217FD6C] = 011A1C68
[0217FD70] = 01402CB8
[0217FD74] = 0217FE38
[0217FD78] = 013FB5F6
[0217FD7C] = FFFFFFFF
[0217FD80] = 013FA886
[0217FD84] = 00000000
[0217FD88] = 013FA91B
[0217FD8C] = 013F0000
[0217FD90] = 00000000
[0217FD94] = 00000001
[0217FD98] = 00000000
[0217FD9C] = 0217FDB8
[0217FDA0] = 00253398
[0217FDA4] = 0217FDC4
[0217FDA8] = 7C9211A7
[0217FDAC] = 013F0000
[0217FDB0] = 00000001
[0217FDB4] = 00000001
[0217FDB8] = 00253398
[0217FDBC] = 00000000
[0217FDC0] = 002534A0
[0217FDC4] = 0217FE48
[0217FDC8] = 7C943F31
[0217FDCC] = 0145B860
[0217FDD0] = 013F0000
[0217FDD4] = 00000000
[0217FDD8] = 00000001
[0217FDDC] = C0000005
[0217FDE0] = 7C92E88E
[0217FDE4] = 00000000
[0217FDE8] = 00000014
[0217FDEC] = 00000001
[0217FDF0] = 00000000
[0217FDF4] = 00000000
[0217FDF8] = 00000010
[0217FDFC] = 77D1882A
[0217FE00] = 00000282
[0217FE04] = 00B11AC0
[0217FE08] = 00B11AD4
[0217FE0C] = 7C930945
[0217FE10] = 7C93094E
[0217FE14] = 00000000
[0217FE18] = 00000001
[0217FE1C] = 002534A0
[0217FE20] = 7FFDB000
[0217FE24] = 7FFDE000
[0217FE28] = 0145B860
[0217FE2C] = 00253398
[0217FE30] = 0217FDDC
[0217FE34] = 0217F93C
[0217FE38] = 0217FF2C
[0217FE3C] = 7C92EE18
[0217FE40] = 7C943E98
[0217FE44] = 00000001
[0217FE48] = 0217FF3C
[0217FE4C] = 7C81CD76
[0217FE50] = 00000000
[0217FE54] = 00000001
[0217FE58] = 00000000
[0217FE5C] = 00000000
[0217FE60] = 00000282
[0217FE64] = 00000002
[0217FE68] = 00000000
[0217FE6C] = 00B11AD4
[0217FE70] = 00000001
[0217FE74] = 001631F0
[0217FE78] = 0012D944
[0217FE7C] = 003C0000
[0217FE80] = 7C930732
[0217FE84] = 00000005
[0217FE88] = 003C0778
[0217FE8C] = 003C0000
[0217FE90] = 01236E90
[0217FE94] = 0012D91C
[0217FE98] = 00000002
[0217FE9C] = 0012DB60
[0217FEA0] = 7C92EE18
[0217FEA4] = 7C930738 |
|