发新话题
打印

[活动] 秋高气爽_网①【雷★诺】11月份车队娱乐活动公告

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

按键精灵 2014.02.15042 版
Environment = 1366x768|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x771C2228
LineNum = 494(494)

Registers:
EAX=00000000 EBX=FFFFFFFC ECX=00000000 EDX=00000004
ESI=00A08564 EDI=00A08568 ESP=0495F480 EBP=0495F4D0

Current Modules:
Name = 按键精灵2014.exe, Base = 0x400000, Top = 0x115F000, Size = 14020608
==>
Name = ntdll.dll, Base = 0x77190000, Top = 0x772D1000, Size = 1314816
Name = kernel32.dll, Base = 0x76D00000, Top = 0x76DD4000, Size = 868352
Name = KERNELBASE.dll, Base = 0x75560000, Top = 0x755AB000, Size = 307200
Name = comctl32.dll, Base = 0x741A0000, Top = 0x7433E000, Size = 1695744
Name = msvcrt.dll, Base = 0x76380000, Top = 0x7642C000, Size = 704512
Name = GDI32.dll, Base = 0x772E0000, Top = 0x7732E000, Size = 319488
Name = USER32.dll, Base = 0x76EB0000, Top = 0x76F79000, Size = 823296
Name = LPK.dll, Base = 0x755F0000, Top = 0x755FA000, Size = 40960
Name = USP10.dll, Base = 0x75640000, Top = 0x756DD000, Size = 643072
Name = SHLWAPI.dll, Base = 0x76430000, Top = 0x76487000, Size = 356352
Name = IMM32.DLL, Base = 0x76590000, Top = 0x765AF000, Size = 126976
Name = MSCTF.dll, Base = 0x76DE0000, Top = 0x76EAC000, Size = 835584
Name = ADVAPI32.dll, Base = 0x77330000, Top = 0x773D0000, Size = 655360
Name = sechost.dll, Base = 0x76900000, Top = 0x76919000, Size = 102400
Name = RPCRT4.dll, Base = 0x76BC0000, Top = 0x76C62000, Size = 663552
Name = winmm.dll, Base = 0x73130000, Top = 0x73162000, Size = 204800
Name = MSIMG32.dll, Base = 0x73840000, Top = 0x73845000, Size = 20480
Name = COMDLG32.dll, Base = 0x76880000, Top = 0x768FB000, Size = 503808
Name = SHELL32.dll, Base = 0x756E0000, Top = 0x7632B000, Size = 12890112
Name = WINSPOOL.DRV, Base = 0x723D0000, Top = 0x72421000, Size = 331776
Name = ole32.dll, Base = 0x76A60000, Top = 0x76BBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x765B0000, Top = 0x7663F000, Size = 585728
Name = oledlg.dll, Base = 0x6B130000, Top = 0x6B14C000, Size = 114688
Name = urlmon.dll, Base = 0x76920000, Top = 0x76A60000, Size = 1310720
Name = XmlLite.dll, Base = 0x753F0000, Top = 0x7541F000, Size = 192512
Name = WININET.dll, Base = 0x76490000, Top = 0x76585000, Size = 1003520
Name = iertutil.dll, Base = 0x76F80000, Top = 0x77181000, Size = 2101248
Name = CRYPT32.dll, Base = 0x75420000, Top = 0x75540000, Size = 1179648
Name = MSASN1.dll, Base = 0x75320000, Top = 0x7532C000, Size = 49152
Name = gdiplus.dll, Base = 0x73D50000, Top = 0x73EE0000, Size = 1638400
Name = DINPUT8.dll, Base = 0x71990000, Top = 0x719C0000, Size = 196608
Name = WS2_32.dll, Base = 0x75600000, Top = 0x75635000, Size = 217088
Name = NSI.dll, Base = 0x76670000, Top = 0x76676000, Size = 24576
Name = dbghelp.dll, Base = 0x6A970000, Top = 0x6AA5B000, Size = 962560
Name = Syntconv.dll, Base = 0x10000000, Top = 0x10053000, Size = 339968
Name = MFC42.DLL, Base = 0x6B250000, Top = 0x6B36C000, Size = 1163264
Name = ODBC32.dll, Base = 0x6B1C0000, Top = 0x6B24C000, Size = 573440
Name = MSVCP60.dll, Base = 0x6B150000, Top = 0x6B1B6000, Size = 417792
Name = odbcint.dll, Base = 0x6AF50000, Top = 0x6AF88000, Size = 229376
Name = refs.dll, Base = 0x63B90000, Top = 0x63D26000, Size = 1662976
Name = OLEACC.dll, Base = 0x738E0000, Top = 0x7391C000, Size = 245760
Name = UxTheme.dll, Base = 0x74030000, Top = 0x74070000, Size = 262144
Name = dwmapi.dll, Base = 0x73F30000, Top = 0x73F43000, Size = 77824
Name = profapi.dll, Base = 0x752B0000, Top = 0x752BB000, Size = 45056
Name = CRYPTBASE.dll, Base = 0x75230000, Top = 0x7523C000, Size = 49152
Name = adsPop32.dll, Base = 0x65940000, Top = 0x65965000, Size = 151552
Name = PSAPI.DLL, Base = 0x773D0000, Top = 0x773D5000, Size = 20480
Name = adsNet32.dll, Base = 0x6E5B0000, Top = 0x6E5CE000, Size = 122880
Name = VERSION.dll, Base = 0x74F10000, Top = 0x74F19000, Size = 36864
Name = CLBCatQ.DLL, Base = 0x76C70000, Top = 0x76CF3000, Size = 536576
Name = ieframe.dll, Base = 0x65F40000, Top = 0x669C9000, Size = 11046912
Name = SXS.DLL, Base = 0x75240000, Top = 0x7529F000, Size = 389120
Name = msscript.ocx, Base = 0x6E310000, Top = 0x6E32A000, Size = 106496
Name = CRYPTSP.dll, Base = 0x74AD0000, Top = 0x74AE6000, Size = 90112
Name = rsaenh.dll, Base = 0x74870000, Top = 0x748AB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x752A0000, Top = 0x752AE000, Size = 57344
Name = qdisp.dll, Base = 0x64CE0000, Top = 0x64D30000, Size = 327680
Name = vbscript.dll, Base = 0x65110000, Top = 0x6517C000, Size = 442368
Name = WindowsCodecs.dll, Base = 0x73B50000, Top = 0x73C4B000, Size = 1028096
Name = ntmarta.dll, Base = 0x73810000, Top = 0x73831000, Size = 135168
Name = WLDAP32.dll, Base = 0x76330000, Top = 0x76375000, Size = 282624
Name = SspiCli.dll, Base = 0x751C0000, Top = 0x751DB000, Size = 110592
Name = dnsapi.DLL, Base = 0x74950000, Top = 0x74994000, Size = 278528
Name = iphlpapi.DLL, Base = 0x735F0000, Top = 0x7360C000, Size = 114688
Name = WINNSI.DLL, Base = 0x735E0000, Top = 0x735E7000, Size = 28672
Name = RASAPI32.dll, Base = 0x73940000, Top = 0x73992000, Size = 335872
Name = rasman.dll, Base = 0x73920000, Top = 0x73935000, Size = 86016
Name = rtutils.dll, Base = 0x74850000, Top = 0x7485D000, Size = 53248
Name = sensapi.dll, Base = 0x704B0000, Top = 0x704B6000, Size = 24576
Name = mswsock.dll, Base = 0x74A90000, Top = 0x74ACC000, Size = 245760
Name = wshtcpip.dll, Base = 0x74FA0000, Top = 0x74FA5000, Size = 20480
Name = Normaliz.dll, Base = 0x755E0000, Top = 0x755E3000, Size = 12288
Name = NLAapi.dll, Base = 0x73760000, Top = 0x73770000, Size = 65536
Name = rasadhlp.dll, Base = 0x6DC50000, Top = 0x6DC56000, Size = 24576
Name = wship6.dll, Base = 0x74A80000, Top = 0x74A86000, Size = 24576
Name = fwpuclnt.dll, Base = 0x70A80000, Top = 0x70AB8000, Size = 229376
Name = apphelp.dll, Base = 0x751E0000, Top = 0x7522C000, Size = 311296
Name = MLANG.dll, Base = 0x65910000, Top = 0x6593E000, Size = 188416
Name = cfgdll.dll, Base = 0x4F60000, Top = 0x4F6F000, Size = 61440
Name = mshtml.dll, Base = 0x65970000, Top = 0x65F35000, Size = 6049792
Name = msls31.dll, Base = 0x6B370000, Top = 0x6B39A000, Size = 172032
Name = CloudHelper.dll, Base = 0x60B80000, Top = 0x60DE1000, Size = 2494464
Name = msimtf.dll, Base = 0x65320000, Top = 0x6532B000, Size = 45056
Name = jscript.dll, Base = 0x651A0000, Top = 0x65252000, Size = 729088
Name = DSOUND.dll, Base = 0x6B0B0000, Top = 0x6B122000, Size = 466944
Name = POWRPROF.dll, Base = 0x73F80000, Top = 0x73FA5000, Size = 151552
Name = SETUPAPI.dll, Base = 0x76680000, Top = 0x7681D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x755B0000, Top = 0x755D7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75540000, Top = 0x75552000, Size = 73728
Name = ieproxy.dll, Base = 0x641A0000, Top = 0x641CB000, Size = 176128

Code Before:
85 1B DA FF FF 33 C0 89 45 0C 89 45 08 8B 06 83 F8 FF 74 03
Current Code:
FF 40 14 8B 5D F4 8B 7D F0 80 3D 82 03 FE 7F 00 0F 85 9A FF

Call Stack:
771C2137   ===> ntdll.dll

Current Stack:
[0495F480] = 00A08564
[0495F484] = 00A08568
[0495F488] = 08273490
[0495F48C] = 03EAAB80
[0495F490] = 0495F4A8
[0495F494] = 771E2D88
[0495F498] = 00000011
[0495F49C] = 00000100
[0495F4A0] = 00000001
[0495F4A4] = 03EAAB80
[0495F4A8] = 0495F4BC
[0495F4AC] = 76D4C4D4
[0495F4B0] = 03F00000
[0495F4B4] = 00000000
[0495F4B8] = 03EAAB88
[0495F4BC] = 00000000
[0495F4C0] = 00000000
[0495F4C4] = 00000000
[0495F4C8] = 7FF91000
[0495F4CC] = 000002E4
[0495F4D0] = 0495F4F8
[0495F4D4] = 771C2137
[0495F4D8] = 00000000
[0495F4DC] = 00000000
[0495F4E0] = 08273490
[0495F4E4] = 00000000
[0495F4E8] = 00000001
[0495F4EC] = 00000004
[0495F4F0] = 00000000
[0495F4F4] = 00000001
[0495F4F8] = 0495F51C
[0495F4FC] = 00705676
[0495F500] = 00A08564
[0495F504] = 22B91550
[0495F508] = 00000001
[0495F50C] = 00A08564
[0495F510] = 0495F608
[0495F514] = 008012D8
[0495F518] = FFFFFFFF
[0495F51C] = 0495F534
[0495F520] = 006FD75C
[0495F524] = 00000000
[0495F528] = 00000010
[0495F52C] = 0495F550
[0495F530] = 00000000
[0495F534] = 0495F54C
[0495F538] = 006FD7D6
[0495F53C] = 00000011
[0495F540] = 00000000
[0495F544] = 00000001
[0495F548] = 00000001
[0495F54C] = 0495F614
[0495F550] = 0060B41D
[0495F554] = 034E5B80
[0495F558] = 00000000
[0495F55C] = 00000001
[0495F560] = 005637B2
[0495F564] = 0495F614
[0495F568] = 00000020
[0495F56C] = 00563737
[0495F570] = 00000000
[0495F574] = 00000000
[0495F578] = 00000000
[0495F57C] = 00000000
[0495F580] = 00000002
[0495F584] = 223038B4
[0495F588] = 04950000
[0495F58C] = 00000000
[0495F590] = 00000000
[0495F594] = 00000000
[0495F598] = 00000000
[0495F59C] = 00000000
[0495F5A0] = 00000030
[0495F5A4] = 005636E9
[0495F5A8] = 22B91658
[0495F5AC] = 00000000
[0495F5B0] = 008D04A0
[0495F5B4] = 00000000
[0495F5B8] = 0495F600
[0495F5BC] = 00843660
[0495F5C0] = 00000000
[0495F5C4] = 00000000
[0495F5C8] = 00000000
[0495F5CC] = 00000000
[0495F5D0] = 132F4052
[0495F5D4] = 00000001
[0495F5D8] = 00000000
[0495F5DC] = 000007FF
[0495F5E0] = 76389C39
[0495F5E4] = 000007FF
[0495F5E8] = 08273490
[0495F5EC] = 0495F570
[0495F5F0] = 00000000
[0495F5F4] = 006FD7C0
[0495F5F8] = 00000000
[0495F5FC] = 00000000
[0495F600] = 22B91658
[0495F604] = 0495F550
[0495F608] = 0495F6A0
[0495F60C] = 007EB3D6
[0495F610] = 00000002
[0495F614] = 0495F6AC
[0495F618] = 00563FE5
[0495F61C] = 008D04A0
[0495F620] = 00000001
[0495F624] = 00000000
[0495F628] = 0495F670
[0495F62C] = 0495F694
[0495F630] = 22B916E0
[0495F634] = 082734A0
[0495F638] = 0B009440
[0495F63C] = 00000000
[0495F640] = 03F0000A
[0495F644] = 00BA66BC
[0495F648] = 01290000
[0495F64C] = 01160065
[0495F650] = 00000000
[0495F654] = 00000000
[0495F658] = 00000000
[0495F65C] = 00000000
[0495F660] = 012E7FC0
[0495F664] = 01AE0066
[0495F668] = 000002A5
[0495F66C] = 75566E60
[0495F670] = 034E5B60
[0495F674] = 00000000
[0495F678] = 00000003
[0495F67C] = 00000000
[0495F680] = 00078000
[0495F684] = 00000000
[0495F688] = 0065004B
[0495F68C] = 00000000
[0495F690] = 08273490
[0495F694] = FFFFFFFF
[0495F698] = 00000000
[0495F69C] = 0495F630
[0495F6A0] = 0495F9A0
[0495F6A4] = 007EB43F
[0495F6A8] = 00000000
[0495F6AC] = 0495F6E8
[0495F6B0] = 6511371B
[0495F6B4] = 00000001
[0495F6B8] = 00000003
[0495F6BC] = 6511190C
[0495F6C0] = 00000409
[0495F6C4] = 00000001
[0495F6C8] = 00000003
[0495F6CC] = 00000000
[0495F6D0] = 0495F800
[0495F6D4] = 0495F844
[0495F6D8] = 0B009440
[0495F6DC] = 0B121EB0
[0495F6E0] = 00000000
[0495F6E4] = 0AF739D0
[0495F6E8] = 0495F724
[0495F6EC] = 6511368B
[0495F6F0] = 0B009440
[0495F6F4] = 082734A0
[0495F6F8] = 00000003
[0495F6FC] = 6511190C
[0495F700] = 00000409
[0495F704] = 00000001
[0495F708] = 0495F824
[0495F70C] = 00000000
[0495F710] = 0495F800
[0495F714] = 0495F844
[0495F718] = 082734A0
[0495F71C] = 00000000
[0495F720] = 00000001
[0495F724] = 0495F838
[0495F728] = 651130A5
[0495F72C] = 0B009440
[0495F730] = 082734A0
[0495F734] = 00000003
[0495F738] = 6511190C
[0495F73C] = 00000409
[0495F740] = 00000001
[0495F744] = 0495F824
[0495F748] = 00000000
[0495F74C] = 0495F800
[0495F750] = 0495F844
[0495F754] = 09B9CF94
[0495F758] = 00000030
[0495F75C] = 0495F9C0
[0495F760] = 01160065
[0495F764] = 000002A5
[0495F768] = 09B9CF94
[0495F76C] = 002323B8
[0495F770] = 00000000
[0495F774] = 03EA9F70
[0495F778] = 00000001
[0495F77C] = 03EAACE0
[0495F780] = 0495F798
[0495F784] = 771E2D88
[0495F788] = 008D13DC
[0495F78C] = 082734A0
[0495F790] = 00000000
[0495F794] = 03EAACE0
[0495F798] = 0495F7AC
[0495F79C] = 76D4C4D4

TOP

发新话题