|
|
发表于 2021-1-12 15:35:34
|
显示全部楼层
按键精灵 2014.05.17762 版
Environment = 1920x1080|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x48D152
LineNum = 0(0)
Registers:
EAX=FFFFFFFF EBX=00000000 ECX=07154198 EDX=FFFFFFFF
ESI=07150BD4 EDI=07150BD0 ESP=0019DA94 EBP=0019DC14
Current Modules:
==>
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x1179000, Size = 14127104
Name = ntdll.dll, Base = 0x77D00000, Top = 0x77EA3000, Size = 1716224
Name = KERNEL32.DLL, Base = 0x77460000, Top = 0x77550000, Size = 983040
Name = KERNELBASE.dll, Base = 0x76100000, Top = 0x76314000, Size = 2179072
Name = comctl32.dll, Base = 0x74E70000, Top = 0x75082000, Size = 2170880
Name = msvcrt.dll, Base = 0x77C30000, Top = 0x77CEF000, Size = 782336
Name = GDI32.dll, Base = 0x77B10000, Top = 0x77B33000, Size = 143360
Name = win32u.dll, Base = 0x76AE0000, Top = 0x76AF8000, Size = 98304
Name = gdi32full.dll, Base = 0x776F0000, Top = 0x777CB000, Size = 897024
Name = msvcp_win.dll, Base = 0x77060000, Top = 0x770DB000, Size = 503808
Name = ucrtbase.dll, Base = 0x77150000, Top = 0x77270000, Size = 1179648
Name = USER32.dll, Base = 0x77550000, Top = 0x776E6000, Size = 1662976
Name = IMM32.DLL, Base = 0x76320000, Top = 0x76345000, Size = 151552
Name = ADVAPI32.dll, Base = 0x75C20000, Top = 0x75C9A000, Size = 499712
Name = sechost.dll, Base = 0x77270000, Top = 0x772E6000, Size = 483328
Name = RPCRT4.dll, Base = 0x77930000, Top = 0x779F0000, Size = 786432
Name = winmm.dll, Base = 0x75510000, Top = 0x75538000, Size = 163840
Name = MSIMG32.dll, Base = 0x74270000, Top = 0x74276000, Size = 24576
Name = COMDLG32.dll, Base = 0x76BA0000, Top = 0x76C4F000, Size = 716800
Name = combase.dll, Base = 0x76DD0000, Top = 0x77051000, Size = 2625536
Name = shcore.dll, Base = 0x76490000, Top = 0x76518000, Size = 557056
Name = SHLWAPI.dll, Base = 0x779F0000, Top = 0x77A35000, Size = 282624
Name = SHELL32.dll, Base = 0x76520000, Top = 0x76AD3000, Size = 5976064
Name = WINSPOOL.DRV, Base = 0x74D40000, Top = 0x74DAD000, Size = 446464
Name = ole32.dll, Base = 0x76CE0000, Top = 0x76DC3000, Size = 929792
Name = OLEAUT32.dll, Base = 0x76B00000, Top = 0x76B96000, Size = 614400
Name = oledlg.dll, Base = 0x6CFD0000, Top = 0x6CFFC000, Size = 180224
Name = urlmon.dll, Base = 0x726C0000, Top = 0x72869000, Size = 1740800
Name = iertutil.dll, Base = 0x728A0000, Top = 0x72ACB000, Size = 2273280
Name = gdiplus.dll, Base = 0x749D0000, Top = 0x74B37000, Size = 1470464
Name = PSAPI.DLL, Base = 0x778D0000, Top = 0x778D6000, Size = 24576
Name = VERSION.dll, Base = 0x757D0000, Top = 0x757D8000, Size = 32768
Name = DINPUT8.dll, Base = 0x5CE50000, Top = 0x5CE87000, Size = 225280
Name = SensApi.dll, Base = 0x73ED0000, Top = 0x73ED8000, Size = 32768
Name = inputhost.dll, Base = 0x6EC80000, Top = 0x6ED6D000, Size = 970752
Name = CoreMessaging.dll, Base = 0x6F3D0000, Top = 0x6F46B000, Size = 634880
Name = CoreUIComponents.dll, Base = 0x6F150000, Top = 0x6F3CE000, Size = 2613248
Name = wintypes.dll, Base = 0x724E0000, Top = 0x725BE000, Size = 909312
Name = PROPSYS.dll, Base = 0x740F0000, Top = 0x741B3000, Size = 798720
Name = WS2_32.dll, Base = 0x770E0000, Top = 0x77143000, Size = 405504
Name = bcryptPrimitives.dll, Base = 0x75BC0000, Top = 0x75C1D000, Size = 380928
Name = ntmarta.dll, Base = 0x742C0000, Top = 0x742E9000, Size = 167936
Name = kernel.appcore.dll, Base = 0x74310000, Top = 0x7431F000, Size = 61440
Name = WININET.dll, Base = 0x750B0000, Top = 0x75508000, Size = 4554752
Name = dbghelp.dll, Base = 0x73D40000, Top = 0x73EC8000, Size = 1605632
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MSVCP60.dll, Base = 0x6CEE0000, Top = 0x6CF50000, Size = 458752
Name = MFC42.DLL, Base = 0x6CCF0000, Top = 0x6CE14000, Size = 1196032
Name = refs.dll, Base = 0x6CB50000, Top = 0x6CCE6000, Size = 1662976
Name = OLEACC.dll, Base = 0x71C20000, Top = 0x71C73000, Size = 339968
Name = UxTheme.dll, Base = 0x70830000, Top = 0x708A4000, Size = 475136
Name = dwmapi.dll, Base = 0x70530000, Top = 0x70556000, Size = 155648
Name = windows.storage.dll, Base = 0x743B0000, Top = 0x749BA000, Size = 6332416
Name = Wldp.dll, Base = 0x74360000, Top = 0x74384000, Size = 147456
Name = profapi.dll, Base = 0x742F0000, Top = 0x7430D000, Size = 118784
Name = SspiCli.dll, Base = 0x725E0000, Top = 0x72608000, Size = 163840
Name = MSCTF.dll, Base = 0x763B0000, Top = 0x76484000, Size = 868352
Name = clbcatq.dll, Base = 0x76C50000, Top = 0x76CCE000, Size = 516096
Name = ieframe.dll, Base = 0x6C040000, Top = 0x6C66A000, Size = 6463488
Name = WINHTTP.dll, Base = 0x75A90000, Top = 0x75B52000, Size = 794624
Name = USERENV.dll, Base = 0x757A0000, Top = 0x757C5000, Size = 151552
Name = NETAPI32.dll, Base = 0x75BA0000, Top = 0x75BB3000, Size = 77824
Name = WKSCLI.DLL, Base = 0x72E40000, Top = 0x72E50000, Size = 65536
Name = NETUTILS.DLL, Base = 0x75790000, Top = 0x7579B000, Size = 45056
Name = ondemandconnroutehelper.dll, Base = 0x71CD0000, Top = 0x71CE2000, Size = 73728
Name = mswsock.dll, Base = 0x73CB0000, Top = 0x73D02000, Size = 335872
Name = IPHLPAPI.DLL, Base = 0x75B60000, Top = 0x75B92000, Size = 204800
Name = NSI.dll, Base = 0x77AA0000, Top = 0x77AA7000, Size = 28672
Name = WINNSI.DLL, Base = 0x74290000, Top = 0x74298000, Size = 32768
Name = dataexchange.dll, Base = 0x6E390000, Top = 0x6E3C2000, Size = 204800
Name = dcomp.dll, Base = 0x67600000, Top = 0x67766000, Size = 1466368
Name = d3d11.dll, Base = 0x70560000, Top = 0x70740000, Size = 1966080
Name = dxgi.dll, Base = 0x70460000, Top = 0x70522000, Size = 794624
Name = twinapi.appcore.dll, Base = 0x6EAE0000, Top = 0x6EC71000, Size = 1642496
Name = sxs.dll, Base = 0x6CAC0000, Top = 0x6CB48000, Size = 557056
Name = DNSAPI.dll, Base = 0x732E0000, Top = 0x73372000, Size = 598016
Name = coml2.dll, Base = 0x76350000, Top = 0x763AE000, Size = 385024
Name = rasadhlp.dll, Base = 0x720F0000, Top = 0x720F8000, Size = 32768
Name = msscript.ocx, Base = 0x6CEC0000, Top = 0x6CEDC000, Size = 114688
Name = vbscript.dll, Base = 0x6CA30000, Top = 0x6CABA000, Size = 565248
Name = amsi.dll, Base = 0x72D50000, Top = 0x72D62000, Size = 73728
Name = WindowsCodecs.dll, Base = 0x565D0000, Top = 0x56740000, Size = 1507328
Name = bcrypt.dll, Base = 0x77AF0000, Top = 0x77B09000, Size = 102400
Name = fwpuclnt.dll, Base = 0x72090000, Top = 0x720E8000, Size = 360448
Name = TextShaping.dll, Base = 0x6EEF0000, Top = 0x6EF84000, Size = 606208
Name = textinputframework.dll, Base = 0x6F470000, Top = 0x6F52A000, Size = 761856
Name = SogouTSF.ime, Base = 0x6F530000, Top = 0x6F6A5000, Size = 1527808
Name = SogouPy.ime, Base = 0xAB60000, Top = 0xB182000, Size = 6430720
Name = Resource.dll, Base = 0xBF80000, Top = 0xC09D000, Size = 1167360
Name = PicFace.dll, Base = 0x6EF90000, Top = 0x6F14B000, Size = 1814528
Name = msIso.dll, Base = 0x6C9E0000, Top = 0x6CA23000, Size = 274432
Name = MSHTML.dll, Base = 0x6ADE0000, Top = 0x6C034000, Size = 19218432
Name = powrprof.dll, Base = 0x75540000, Top = 0x75584000, Size = 278528
Name = UMPDC.dll, Base = 0x74350000, Top = 0x7435D000, Size = 53248
Name = CRYPTBASE.DLL, Base = 0x74CC0000, Top = 0x74CCA000, Size = 40960
Name = schannel.dll, Base = 0x71F50000, Top = 0x71FC8000, Size = 491520
Name = mskeyprotect.dll, Base = 0x74280000, Top = 0x74290000, Size = 65536
Name = NTASN1.dll, Base = 0x71F20000, Top = 0x71F48000, Size = 163840
Name = CRYPT32.dll, Base = 0x777D0000, Top = 0x778CF000, Size = 1044480
Name = MSASN1.dll, Base = 0x749C0000, Top = 0x749CE000, Size = 57344
Name = DPAPI.DLL, Base = 0x72050000, Top = 0x72058000, Size = 32768
Name = WINTRUST.dll, Base = 0x778E0000, Top = 0x77927000, Size = 290816
Name = CRYPTSP.dll, Base = 0x74390000, Top = 0x743A3000, Size = 77824
Name = rsaenh.dll, Base = 0x74320000, Top = 0x7434F000, Size = 192512
Name = cryptnet.dll, Base = 0x74240000, Top = 0x74266000, Size = 155648
Name = ncrypt.dll, Base = 0x71EF0000, Top = 0x71F11000, Size = 135168
Name = ncryptsslp.dll, Base = 0x71ED0000, Top = 0x71EEF000, Size = 126976
Name = dbgcore.DLL, Base = 0x71580000, Top = 0x715A6000, Size = 155648
Name = apphelp.dll, Base = 0x73EE0000, Top = 0x73F7F000, Size = 651264
Code Before:
8B C8 E8 6B D2 31 00 85 C0 75 04 33 D2 EB 0E 8B D0 8D 5A 01
Current Code:
8A 0A 42 84 C9 75 F9 2B D3 52 50 8D 4F 08 E8 6B B2 F7 FF 68
Call Stack:
00440ADE ===> 按键精灵2014.exe
Current Stack:
[0019DA94] = 8A48F793
[0019DA98] = 1F2E5AE8
[0019DA9C] = 0019DC18
[0019DAA0] = 0000009F
[0019DAA4] = 0715B850
[0019DAA8] = 0019D974
[0019DAAC] = 00000107
[0019DAB0] = 00000000
[0019DAB4] = 0019DB50
[0019DAB8] = 0640B040
[0019DABC] = 0715B820
[0019DAC0] = 0019D974
[0019DAC4] = 00000107
[0019DAC8] = 00000000
[0019DACC] = 0019DC68
[0019DAD0] = 00000000
[0019DAD4] = 009E7390
[0019DAD8] = 0640C740
[0019DADC] = 07156500
[0019DAE0] = 0640C6B0
[0019DAE4] = 0640B518
[0019DAE8] = 07156568
[0019DAEC] = 00000008
[0019DAF0] = 00000000
[0019DAF4] = 00000001
[0019DAF8] = 000000BA
[0019DAFC] = 0640B5E8
[0019DB00] = 00000000
[0019DB04] = 00000000
[0019DB08] = 00000000
[0019DB0C] = 00000000
[0019DB10] = 05A90000
[0019DB14] = 0640C028
[0019DB18] = 00000000
[0019DB1C] = 00000002
[0019DB20] = 06400000
[0019DB24] = 0000003E
[0019DB28] = 0000003F
[0019DB2C] = 05A901C8
[0019DB30] = 0640C028
[0019DB34] = 0640C066
[0019DB38] = 0640C066
[0019DB3C] = 0640C066
[0019DB40] = 0019DAA4
[0019DB44] = 00000000
[0019DB48] = 0019DB68
[0019DB4C] = 77D453FE
[0019DB50] = 00000013
[0019DB54] = 00000000
[0019DB58] = 0000000F
[0019DB5C] = 00000000
[0019DB60] = 00010001
[0019DB64] = 0640B5C8
[0019DB68] = 07150B58
[0019DB6C] = 00000008
[0019DB70] = 00000000
[0019DB74] = 00000001
[0019DB78] = 071E86B0
[0019DB7C] = 0640B548
[0019DB80] = 00000000
[0019DB84] = 00000000
[0019DB88] = 00000000
[0019DB8C] = 00000000
[0019DB90] = 009E7380
[0019DB94] = 071544C8
[0019DB98] = 00408290
[0019DB9C] = 071E86C0
[0019DBA0] = 00000002
[0019DBA4] = 0000002D
[0019DBA8] = 0000002F
[0019DBAC] = 006BC0E7
[0019DBB0] = 071544C8
[0019DBB4] = 071544F5
[0019DBB8] = 071544F5
[0019DBBC] = 071544F5
[0019DBC0] = 0019DABC
[0019DBC4] = 00408400
[0019DBC8] = 071E86C0
[0019DBCC] = 00000002
[0019DBD0] = 00965B28
[0019DBD4] = 00000000
[0019DBD8] = 0000000F
[0019DBDC] = 07150BD0
[0019DBE0] = 00010001
[0019DBE4] = 0019DC10
[0019DBE8] = 0640BF50
[0019DBEC] = 00965B28
[0019DBF0] = 00000000
[0019DBF4] = 8A48F797
[0019DBF8] = 0000003E
[0019DBFC] = 0000003F
[0019DC00] = 0019DC18
[0019DC04] = 8A48F793
[0019DC08] = 0019E0BC
[0019DC0C] = 008A1F25
[0019DC10] = 0000000A
[0019DC14] = 0019E0CC
[0019DC18] = 00440ADE
[0019DC1C] = 8A48F7A7
[0019DC20] = 77571900
[0019DC24] = 0640B4A8
[0019DC28] = 07150B68
[0019DC2C] = 00000080
[0019DC30] = 07150BD0
[0019DC34] = 00000001
[0019DC38] = 071E7600
[0019DC3C] = 07151DB0
[0019DC40] = 00000004
[0019DC44] = 00000080
[0019DC48] = 009E7390
[0019DC4C] = 071E7600
[0019DC50] = 00000003
[0019DC54] = 00000003
[0019DC58] = 00000080
[0019DC5C] = 009E7390
[0019DC60] = 071E79C0
[0019DC64] = 009E7390
[0019DC68] = 071E0900
[0019DC6C] = 0640C668
[0019DC70] = 00000050
[0019DC74] = 071E08E8
[0019DC78] = 071E08F0
[0019DC7C] = 00000025
[0019DC80] = 00000000
[0019DC84] = 00000000
[0019DC88] = 00000060
[0019DC8C] = 064051D8
[0019DC90] = 06400000
[0019DC94] = 00010054
[0019DC98] = 064051FC
[0019DC9C] = 00000000
[0019DCA0] = 06400000
[0019DCA4] = 071E08E8
[0019DCA8] = 071E7278
[0019DCAC] = 06400000
[0019DCB0] = 77D4F7D5
[0019DCB4] = 00000060
[0019DCB8] = 0019DD98
[0019DCBC] = 77D48C69
[0019DCC0] = 00000001
[0019DCC4] = 071E08F0
[0019DCC8] = 00000060
[0019DCCC] = 77D48C9B
[0019DCD0] = 582248FA
[0019DCD4] = 071E08E8
[0019DCD8] = 06400000
[0019DCDC] = 00000000
[0019DCE0] = 50000050
[0019DCE4] = 0019DEC4
[0019DCE8] = 00000030
[0019DCEC] = 7620B3DA
[0019DCF0] = 07CBCF60
[0019DCF4] = 00000002
[0019DCF8] = 7FFA0002
[0019DCFC] = 00000031
[0019DD00] = 06400000
[0019DD04] = 00000010
[0019DD08] = 00000060
[0019DD0C] = 071E0900
[0019DD10] = 071E08E8
[0019DD14] = 0640A441
[0019DD18] = 071E0960
[0019DD1C] = 00000001
[0019DD20] = 6D000000
[0019DD24] = 00000000
[0019DD28] = 00000000
[0019DD2C] = 00000050
[0019DD30] = 0AAC4AD0
[0019DD34] = 064002E4
[0019DD38] = 00000001
[0019DD3C] = 00000080
[0019DD40] = 00110015
[0019DD44] = 0019DDE0
[0019DD48] = 00000072
[0019DD4C] = 071E7278
[0019DD50] = 00000000
[0019DD54] = 071E08F0
[0019DD58] = 0019DD6C
[0019DD5C] = 6C0EE35F
[0019DD60] = 0157EC20
[0019DD64] = 0157ED60
[0019DD68] = 6C1E37F0
[0019DD6C] = 0019DD84
[0019DD70] = 762195F7
[0019DD74] = 0157EC00
[0019DD78] = 6C10E070
[0019DD7C] = 76B3A700
[0019DD80] = 0157EC20
[0019DD84] = 0019DDAC
[0019DD88] = 6C10DE06
[0019DD8C] = 0157EC00
[0019DD90] = 6C047988
[0019DD94] = 0019DDB4
[0019DD98] = 76B1BFF2
[0019DD9C] = 0154ABD8
[0019DDA0] = 0154AC08
[0019DDA4] = 0019DDC0
[0019DDA8] = 6C1E4070
[0019DDAC] = 0154AC08
[0019DDB0] = 6C1E4070
|
|
楼主: 佛爷
[复制链接]
