|
|
发表于 2022-12-27 20:41:06
|
显示全部楼层
按键精灵 2014.06.19469 版
Environment = 1920x1080|32|Windows 10 Home China
Type = 0xC0000005
Address = 0x48B7F2
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=068A4068 EDX=FFFFFFFF
ESI=05D5D544 EDI=05D5D540 ESP=0019DA8C EBP=0019DC0C
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x113C000, Size = 13877248
Name = ntdll.dll, Base = 0x76F80000, Top = 0x7712F000, Size = 1765376
Name = KERNEL32.DLL, Base = 0x76D30000, Top = 0x76E20000, Size = 983040
Name = KERNELBASE.dll, Base = 0x75570000, Top = 0x757DB000, Size = 2535424
Name = apphelp.dll, Base = 0x675B0000, Top = 0x67655000, Size = 675840
Name = comctl32.dll, Base = 0x69590000, Top = 0x697B4000, Size = 2244608
Name = msvcrt.dll, Base = 0x74E30000, Top = 0x74EF4000, Size = 802816
Name = GDI32.dll, Base = 0x757E0000, Top = 0x75802000, Size = 139264
Name = win32u.dll, Base = 0x76F50000, Top = 0x76F6A000, Size = 106496
Name = gdi32full.dll, Base = 0x75880000, Top = 0x7595D000, Size = 905216
Name = msvcp_win.dll, Base = 0x75490000, Top = 0x75509000, Size = 495616
Name = ucrtbase.dll, Base = 0x76B20000, Top = 0x76C32000, Size = 1122304
Name = USER32.dll, Base = 0x760F0000, Top = 0x76296000, Size = 1728512
Name = IMM32.DLL, Base = 0x76000000, Top = 0x76026000, Size = 155648
Name = ADVAPI32.dll, Base = 0x76E20000, Top = 0x76E9C000, Size = 507904
Name = sechost.dll, Base = 0x75E60000, Top = 0x75EE2000, Size = 532480
Name = RPCRT4.dll, Base = 0x76030000, Top = 0x760E9000, Size = 757760
Name = winmm.dll, Base = 0x74780000, Top = 0x747B1000, Size = 200704
Name = MSIMG32.dll, Base = 0x69350000, Top = 0x69356000, Size = 24576
Name = COMDLG32.dll, Base = 0x75370000, Top = 0x75420000, Size = 720896
Name = combase.dll, Base = 0x75B90000, Top = 0x75E0C000, Size = 2605056
Name = shcore.dll, Base = 0x74CA0000, Top = 0x74D60000, Size = 786432
Name = SHLWAPI.dll, Base = 0x75E10000, Top = 0x75E5B000, Size = 307200
Name = SHELL32.dll, Base = 0x764B0000, Top = 0x76B11000, Size = 6688768
Name = WINSPOOL.DRV, Base = 0x691C0000, Top = 0x69235000, Size = 479232
Name = ole32.dll, Base = 0x75A40000, Top = 0x75B8D000, Size = 1363968
Name = OLEAUT32.dll, Base = 0x76EB0000, Top = 0x76F4C000, Size = 638976
Name = oledlg.dll, Base = 0x5C530000, Top = 0x5C55D000, Size = 184320
Name = urlmon.dll, Base = 0x6B470000, Top = 0x6B612000, Size = 1712128
Name = iertutil.dll, Base = 0x6B220000, Top = 0x6B44E000, Size = 2285568
Name = srvcli.dll, Base = 0x6B450000, Top = 0x6B46D000, Size = 118784
Name = netutils.dll, Base = 0x74560000, Top = 0x7456B000, Size = 45056
Name = gdiplus.dll, Base = 0x73100000, Top = 0x7326D000, Size = 1495040
Name = PSAPI.DLL, Base = 0x76EA0000, Top = 0x76EA6000, Size = 24576
Name = VERSION.dll, Base = 0x74C90000, Top = 0x74C98000, Size = 32768
Name = DINPUT8.dll, Base = 0x5B1A0000, Top = 0x5B1D8000, Size = 229376
Name = SensApi.dll, Base = 0x71C40000, Top = 0x71C48000, Size = 32768
Name = inputhost.dll, Base = 0x52CA0000, Top = 0x52DE6000, Size = 1335296
Name = CoreMessaging.dll, Base = 0x69470000, Top = 0x6953D000, Size = 839680
Name = WININET.dll, Base = 0x73710000, Top = 0x73B98000, Size = 4751360
Name = WS2_32.dll, Base = 0x74DD0000, Top = 0x74E2F000, Size = 389120
Name = dbghelp.dll, Base = 0x71A60000, Top = 0x71C32000, Size = 1908736
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x5B120000, Top = 0x5B194000, Size = 475136
Name = MFC42.DLL, Base = 0x54A30000, Top = 0x54B6D000, Size = 1298432
Name = bcryptPrimitives.dll, Base = 0x75810000, Top = 0x75872000, Size = 401408
Name = refs.dll, Base = 0x52B00000, Top = 0x52C96000, Size = 1662976
Name = OLEACC.dll, Base = 0x69A80000, Top = 0x69AD4000, Size = 344064
Name = UxTheme.dll, Base = 0x6B890000, Top = 0x6B90F000, Size = 520192
Name = dwmapi.dll, Base = 0x6A1E0000, Top = 0x6A204000, Size = 147456
Name = CRYPTBASE.DLL, Base = 0x73470000, Top = 0x7347B000, Size = 45056
Name = windows.storage.dll, Base = 0x73E70000, Top = 0x7453D000, Size = 7131136
Name = wintypes.dll, Base = 0x73DA0000, Top = 0x73E67000, Size = 815104
Name = profapi.dll, Base = 0x73450000, Top = 0x73469000, Size = 102400
Name = kernel.appcore.dll, Base = 0x74640000, Top = 0x74653000, Size = 77824
Name = AudioDevProps2.dll, Base = 0x69F00000, Top = 0x69FFF000, Size = 1044480
Name = SspiCli.dll, Base = 0x74690000, Top = 0x746B5000, Size = 151552
Name = MSCTF.dll, Base = 0x75960000, Top = 0x75A3B000, Size = 897024
Name = clbcatq.dll, Base = 0x76CA0000, Top = 0x76D27000, Size = 552960
Name = ieframe.dll, Base = 0x5BA50000, Top = 0x5C0AB000, Size = 6664192
Name = WINHTTP.dll, Base = 0x71DC0000, Top = 0x71E96000, Size = 876544
Name = USERENV.dll, Base = 0x74C60000, Top = 0x74C7F000, Size = 126976
Name = msIso.dll, Base = 0x5BA10000, Top = 0x5BA48000, Size = 229376
Name = ondemandconnroutehelper.dll, Base = 0x69360000, Top = 0x69374000, Size = 81920
Name = mswsock.dll, Base = 0x733F0000, Top = 0x73441000, Size = 331776
Name = IPHLPAPI.DLL, Base = 0x74B20000, Top = 0x74B44000, Size = 147456
Name = NSI.dll, Base = 0x74D60000, Top = 0x74D67000, Size = 28672
Name = WINNSI.DLL, Base = 0x6C990000, Top = 0x6C99A000, Size = 40960
Name = dataexchange.dll, Base = 0x5B050000, Top = 0x5B09C000, Size = 311296
Name = twinapi.appcore.dll, Base = 0x5AE80000, Top = 0x5B04F000, Size = 1896448
Name = sxs.dll, Base = 0x6A350000, Top = 0x6A3DB000, Size = 569344
Name = DNSAPI.dll, Base = 0x735C0000, Top = 0x73679000, Size = 757760
Name = rasadhlp.dll, Base = 0x72D60000, Top = 0x72D68000, Size = 32768
Name = coml2.dll, Base = 0x75510000, Top = 0x75570000, Size = 393216
Name = msscript.ocx, Base = 0x5B100000, Top = 0x5B11D000, Size = 118784
Name = vbscript.dll, Base = 0x52A70000, Top = 0x52AF9000, Size = 561152
Name = amsi.dll, Base = 0x70940000, Top = 0x70955000, Size = 86016
Name = WLDP.DLL, Base = 0x6AED0000, Top = 0x6AF13000, Size = 274432
Name = WindowsCodecs.dll, Base = 0x5AD20000, Top = 0x5AE80000, Size = 1441792
Name = fwpuclnt.dll, Base = 0x704C0000, Top = 0x7051D000, Size = 380928
Name = napinsp.dll, Base = 0x705B0000, Top = 0x705C2000, Size = 73728
Name = pnrpnsp.dll, Base = 0x70590000, Top = 0x705A6000, Size = 90112
Name = winrnr.dll, Base = 0x70580000, Top = 0x7058E000, Size = 57344
Name = wshbth.dll, Base = 0x70540000, Top = 0x70551000, Size = 69632
Name = nlansp_c.dll, Base = 0x70520000, Top = 0x70538000, Size = 98304
Name = TextShaping.dll, Base = 0x5AC80000, Top = 0x5AD15000, Size = 610304
Name = textinputframework.dll, Base = 0x69040000, Top = 0x69123000, Size = 929792
Name = CoreUIComponents.dll, Base = 0x677D0000, Top = 0x67A60000, Size = 2686976
Name = SogouTSF.ime, Base = 0x55160000, Top = 0x55312000, Size = 1777664
Name = SogouPy.ime, Base = 0xA4B0000, Top = 0xAB20000, Size = 6750208
Name = ntmarta.dll, Base = 0x716A0000, Top = 0x716C9000, Size = 167936
Name = Resource.dll, Base = 0xBB10000, Top = 0xBF79000, Size = 4624384
Name = PicFace.dll, Base = 0x54100000, Top = 0x542BD000, Size = 1822720
Name = PROPSYS.dll, Base = 0x703B0000, Top = 0x70476000, Size = 811008
Name = MSHTML.dll, Base = 0x52DF0000, Top = 0x540FB000, Size = 19968000
Name = wkscli.dll, Base = 0x71820000, Top = 0x71832000, Size = 73728
Name = powrprof.dll, Base = 0x69540000, Top = 0x69586000, Size = 286720
Name = UMPDC.dll, Base = 0x69D30000, Top = 0x69D3E000, Size = 57344
Name = schannel.dll, Base = 0x6A260000, Top = 0x6A2E4000, Size = 540672
Name = CRYPT32.dll, Base = 0x75EF0000, Top = 0x75FF3000, Size = 1060864
Name = MSASN1.dll, Base = 0x73370000, Top = 0x7337E000, Size = 57344
Name = DPAPI.DLL, Base = 0x70600000, Top = 0x70608000, Size = 32768
Name = WINTRUST.dll, Base = 0x75420000, Top = 0x75478000, Size = 360448
Name = CRYPTSP.dll, Base = 0x74610000, Top = 0x74625000, Size = 86016
Name = rsaenh.dll, Base = 0x73590000, Top = 0x735C0000, Size = 196608
Name = cryptnet.dll, Base = 0x70DB0000, Top = 0x70DD7000, Size = 159744
Name = bcrypt.dll, Base = 0x71F40000, Top = 0x71F5A000, Size = 106496
Name = ncrypt.dll, Base = 0x6B6A0000, Top = 0x6B6C5000, Size = 151552
Name = NTASN1.dll, Base = 0x6B670000, Top = 0x6B698000, Size = 163840
Name = ncryptsslp.dll, Base = 0x69EE0000, Top = 0x69F00000, Size = 131072
Name = dbgcore.DLL, Base = 0x57220000, Top = 0x57249000, Size = 167936
Code Before:
8B C8 E8 8B AC 33 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 9B CA F7 FF 68
Call Stack:
0043F56E ===> 按键精灵2014.exe
Current Stack:
[0019DA8C] = 48F5DCFF
[0019DA90] = CBC0ABF8
[0019DA94] = 0019DC18
[0019DA98] = 00000000
[0019DA9C] = 068EF1B0
[0019DAA0] = 0019D96C
[0019DAA4] = 00000107
[0019DAA8] = 00000000
[0019DAAC] = 00000000
[0019DAB0] = 05D5AA20
[0019DAB4] = 068EF198
[0019DAB8] = 0019D96C
[0019DABC] = 06934707
[0019DAC0] = 00000000
[0019DAC4] = 0019DC60
[0019DAC8] = 00000000
[0019DACC] = 009E4390
[0019DAD0] = 0692CC08
[0019DAD4] = 05D5D730
[0019DAD8] = 05D5C2B8
[0019DADC] = 068ABD80
[0019DAE0] = 05D5D6D0
[0019DAE4] = 00000008
[0019DAE8] = 00000000
[0019DAEC] = 00000001
[0019DAF0] = 00000020
[0019DAF4] = 068ABD90
[0019DAF8] = 00000000
[0019DAFC] = 00000000
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 069343C0
[0019DB0C] = 05D5BFD8
[0019DB10] = 00000000
[0019DB14] = 05D57550
[0019DB18] = 00000002
[0019DB1C] = 0000003E
[0019DB20] = 0000003F
[0019DB24] = 00000000
[0019DB28] = 05D5BFD8
[0019DB2C] = 05D5C016
[0019DB30] = 05D5C016
[0019DB34] = 05D5C016
[0019DB38] = 0019DA9C
[0019DB3C] = 05AE0900
[0019DB40] = 0000000A
[0019DB44] = 05AE0950
[0019DB48] = 0019DB60
[0019DB4C] = 00000000
[0019DB50] = 0000000F
[0019DB54] = 00000000
[0019DB58] = 00010001
[0019DB5C] = 068ABE40
[0019DB60] = 05D5D590
[0019DB64] = 00000008
[0019DB68] = 00000000
[0019DB6C] = 00000001
[0019DB70] = 06934838
[0019DB74] = 068ABD70
[0019DB78] = 00000000
[0019DB7C] = 00000000
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 009E4380
[0019DB8C] = 068A44B0
[0019DB90] = 00408150
[0019DB94] = 06934848
[0019DB98] = 00000002
[0019DB9C] = 0000002D
[0019DBA0] = 0000002F
[0019DBA4] = 006B9BDA
[0019DBA8] = 068A44B0
[0019DBAC] = 068A44DD
[0019DBB0] = 068A44DD
[0019DBB4] = 068A44DD
[0019DBB8] = 0019DAB4
[0019DBBC] = 00408300
[0019DBC0] = 06934848
[0019DBC4] = 00000002
[0019DBC8] = 00962698
[0019DBCC] = 00000000
[0019DBD0] = 0000000F
[0019DBD4] = 05D5D540
[0019DBD8] = 00010001
[0019DBDC] = 0019DC08
[0019DBE0] = 05D5BD50
[0019DBE4] = 00962698
[0019DBE8] = 00000000
[0019DBEC] = 48F5DCFB
[0019DBF0] = 0000003E
[0019DBF4] = 0000003F
[0019DBF8] = 0019DC18
[0019DBFC] = 48F5DCFF
[0019DC00] = 0019E0B4
[0019DC04] = 0089FCD5
[0019DC08] = 0000000A
[0019DC0C] = 0019E0C0
[0019DC10] = 0043F56E
[0019DC14] = 48F5DCEB
[0019DC18] = 761775D0
[0019DC1C] = 068ABDB0
[0019DC20] = 05D5D730
[0019DC24] = 00000011
[0019DC28] = 05D5D540
[0019DC2C] = 00000001
[0019DC30] = 06924238
[0019DC34] = 06934B48
[0019DC38] = 00000004
[0019DC3C] = 00000011
[0019DC40] = 009E4390
[0019DC44] = 06924238
[0019DC48] = 00000003
[0019DC4C] = 00000003
[0019DC50] = 00000011
[0019DC54] = 009E4390
[0019DC58] = 06923D88
[0019DC5C] = 009E4390
[0019DC60] = 068AE360
[0019DC64] = 05D5C420
[0019DC68] = FC40EA09
[0019DC6C] = 069032D8
[0019DC70] = 05D50000
[0019DC74] = 00000000
[0019DC78] = 069032E0
[0019DC7C] = 00000000
[0019DC80] = 00050100
[0019DC84] = 00010080
[0019DC88] = 02000002
[0019DC8C] = 05D502E8
[0019DC90] = 82000280
[0019DC94] = 00000011
[0019DC98] = 00000001
[0019DC9C] = 0000000E
[0019DCA0] = 23010022
[0019DCA4] = 00000010
[0019DCA8] = 00000000
[0019DCAC] = 00000016
[0019DCB0] = 069032E0
[0019DCB4] = 05D5004C
[0019DCB8] = 00000003
[0019DCBC] = 7569C967
[0019DCC0] = 000004CC
[0019DCC4] = 0000000F
[0019DCC8] = FFFFFD91
[0019DCCC] = 76FFED00
[0019DCD0] = 8B500559
[0019DCD4] = FFFFFFFE
[0019DCD8] = 0019DD68
[0019DCDC] = 76FCD222
[0019DCE0] = 00000011
[0019DCE4] = 05D50298
[0019DCE8] = 05D502E4
[0019DCEC] = 0019DD38
[0019DCF0] = 009E437C
[0019DCF4] = 069032D8
[0019DCF8] = 00000072
[0019DCFC] = 0000006F
[0019DD00] = 00000001
[0019DD04] = 00000000
[0019DD08] = 00000025
[0019DD0C] = 05D50000
[0019DD10] = 00000000
[0019DD14] = 00000000
[0019DD18] = 00000002
[0019DD1C] = 069032E0
[0019DD20] = 00000011
[0019DD24] = 00000011
[0019DD28] = 00000044
[0019DD2C] = 01010104
[0019DD30] = 05D50270
[0019DD34] = 0000007F
[0019DD38] = 25000025
[0019DD3C] = 00000003
[0019DD40] = 1000049A
[0019DD44] = 025F0204
[0019DD48] = 00000010
[0019DD4C] = 00000011
[0019DD50] = 00000072
[0019DD54] = 00000011
[0019DD58] = 0019DD6C
[0019DD5C] = 5BAF9D9F
[0019DD60] = 0AD68BD0
[0019DD64] = 0AD68D10
[0019DD68] = 5BC220F0
[0019DD6C] = 0019DD84
[0019DD70] = 756AE7E5
[0019DD74] = 0AD68BB0
[0019DD78] = 5BB17EC0
[0019DD7C] = 0AD68BB0
[0019DD80] = 76EF5AE0
[0019DD84] = 0019DDB0
[0019DD88] = 5BB17C56
[0019DD8C] = 0AD68BB0
[0019DD90] = 5BA58528
[0019DD94] = 5BA9B38C
[0019DD98] = 0019DDB8
[0019DD9C] = 76ECBC68
[0019DDA0] = 014E6738
[0019DDA4] = 014E6768
[0019DDA8] = 0019DDC4
|
|
[复制链接]
