按键精灵 2014.05.17762 版
environment = 1920x1080|32|windows 10 enterprise
type = 0xc0000005
address = 0x48d152
linenum = 0(0)
registers:
eax=ffffffff ebx=00000000 ecx=06813330 edx=ffffffff
esi=06810904 edi=06810900 esp=0019da94 ebp=0019dc14
current modules:
==>
name = 按键精灵2014.exe, base = 0x400000, top = 0x1179000, size = 14127104
name = ntdll.dll, base = 0x77d30000, top = 0x77ed4000, size = 1720320
name = kernel32.dll, base = 0x76db0000, top = 0x76ea0000, size = 983040
name = kernelbase.dll, base = 0x76210000, top = 0x76428000, size = 2195456
name = comctl32.dll, base = 0x710f0000, top = 0x71300000, size = 2162688
name = msvcrt.dll, base = 0x77520000, top = 0x775df000, size = 782336
name = gdi32.dll, base = 0x76440000, top = 0x76463000, size = 143360
name = win32u.dll, base = 0x75dd0000, top = 0x75de8000, size = 98304
name = gdi32full.dll, base = 0x76120000, top = 0x761fc000, size = 901120
name = msvcp_win.dll, base = 0x77780000, top = 0x777fb000, size = 503808
name = ucrtbase.dll, base = 0x76ea0000, top = 0x76fc0000, size = 1179648
name = user32.dll, base = 0x775e0000, top = 0x7777c000, size = 1687552
name = imm32.dll, base = 0x77970000, top = 0x77995000, size = 151552
name = advapi32.dll, base = 0x778f0000, top = 0x7796b000, size = 503808
name = sechost.dll, base = 0x76530000, top = 0x765a6000, size = 483328
name = rpcrt4.dll, base = 0x779a0000, top = 0x77a5e000, size = 778240
name = winmm.dll, base = 0x73410000, top = 0x73438000, size = 163840
name = msimg32.dll, base = 0x71800000, top = 0x71806000, size = 24576
name = comdlg32.dll, base = 0x76070000, top = 0x7611f000, size = 716800
name = combase.dll, base = 0x75df0000, top = 0x7606f000, size = 2617344
name = shcore.dll, base = 0x77050000, top = 0x770d7000, size = 552960
name = shlwapi.dll, base = 0x75c80000, top = 0x75cc5000, size = 282624
name = shell32.dll, base = 0x766a0000, top = 0x76c56000, size = 5988352
name = winspool.drv, base = 0x714a0000, top = 0x71512000, size = 466944
name = ole32.dll, base = 0x765b0000, top = 0x76693000, size = 929792
name = oleaut32.dll, base = 0x76470000, top = 0x76506000, size = 614400
name = oledlg.dll, base = 0x71e00000, top = 0x71e2c000, size = 180224
name = urlmon.dll, base = 0x72430000, top = 0x725d8000, size = 1736704
name = iertutil.dll, base = 0x721e0000, top = 0x7240d000, size = 2281472
name = srvcli.dll, base = 0x72410000, top = 0x7242d000, size = 118784
name = netutils.dll, base = 0x74d80000, top = 0x74d8b000, size = 45056
name = gdiplus.dll, base = 0x70f80000, top = 0x710e7000, size = 1470464
name = psapi.dll, base = 0x76200000, top = 0x76206000, size = 24576
name = version.dll, base = 0x75bf0000, top = 0x75bf8000, size = 32768
name = dinput8.dll, base = 0x71b40000, top = 0x71b77000, size = 225280
name = sensapi.dll, base = 0x719d0000, top = 0x719d8000, size = 32768
name = wininet.dll, base = 0x74e90000, top = 0x752e4000, size = 4538368
name = inputhost.dll, base = 0x71a50000, top = 0x71b3d000, size = 970752
name = wintypes.dll, base = 0x6c300000, top = 0x6c3db000, size = 897024
name = coreuicomponents.dll, base = 0x6c3e0000, top = 0x6c65e000, size = 2613248
name = coremessaging.dll, base = 0x6c660000, top = 0x6c6fb000, size = 634880
name = propsys.dll, base = 0x71730000, top = 0x717f2000, size = 794624
name = bcryptprimitives.dll, base = 0x77850000, top = 0x778af000, size = 389120
name = ws2_32.dll, base = 0x77cb0000, top = 0x77d13000, size = 405504
name = ntmarta.dll, base = 0x74c60000, top = 0x74c89000, size = 167936
name = kernel.appcore.dll, base = 0x74c50000, top = 0x74c5f000, size = 61440
name = dbghelp.dll, base = 0x744d0000, top = 0x74658000, size = 1605632
name = syntconv.dll, base = 0x10000000, top = 0x10053000, size = 339968
name = msvcp60.dll, base = 0x71340000, top = 0x713b0000, size = 458752
name = mfc42.dll, base = 0x71870000, top = 0x71994000, size = 1196032
name = refs.dll, base = 0x6ffa0000, top = 0x70136000, size = 1662976
name = oleacc.dll, base = 0x72760000, top = 0x727b3000, size = 339968
name = uxtheme.dll, base = 0x713b0000, top = 0x71424000, size = 475136
name = dwmapi.dll, base = 0x6cd20000, top = 0x6cd46000, size = 155648
name = windows.storage.dll, base = 0x754f0000, top = 0x75afc000, size = 6340608
name = wldp.dll, base = 0x754c0000, top = 0x754e4000, size = 147456
name = profapi.dll, base = 0x74a50000, top = 0x74a68000, size = 98304
name = sspicli.dll, base = 0x73360000, top = 0x73381000, size = 135168
name = msctf.dll, base = 0x76cd0000, top = 0x76da4000, size = 868352
name = clbcatq.dll, base = 0x77a60000, top = 0x77ade000, size = 516096
name = ondemandconnroutehelper.dll, base = 0x63d80000, top = 0x63d92000, size = 73728
name = ieframe.dll, base = 0x57ad0000, top = 0x5810c000, size = 6537216
name = netapi32.dll, base = 0x75330000, top = 0x75345000, size = 86016
name = winhttp.dll, base = 0x72c10000, top = 0x72cd9000, size = 823296
name = userenv.dll, base = 0x75bc0000, top = 0x75be5000, size = 151552
name = wkscli.dll, base = 0x74d90000, top = 0x74da1000, size = 69632
name = mswsock.dll, base = 0x748d0000, top = 0x74922000, size = 335872
name = iphlpapi.dll, base = 0x752f0000, top = 0x75322000, size = 204800
name = nsi.dll, base = 0x76430000, top = 0x76437000, size = 28672
name = winnsi.dll, base = 0x728c0000, top = 0x728c8000, size = 32768
name = dataexchange.dll, base = 0x6bf80000, top = 0x6bfb1000, size = 200704
name = dcomp.dll, base = 0x6a780000, top = 0x6a8e5000, size = 1462272
name = d3d11.dll, base = 0x6cb30000, top = 0x6cd10000, size = 1966080
name = dxgi.dll, base = 0x6ca60000, top = 0x6cb23000, size = 798720
name = twinapi.appcore.dll, base = 0x6bc50000, top = 0x6bddf000, size = 1634304
name = sxs.dll, base = 0x6ec30000, top = 0x6ecb8000, size = 557056
name = dnsapi.dll, base = 0x74000000, top = 0x74091000, size = 593920
name = rasadhlp.dll, base = 0x74120000, top = 0x74128000, size = 32768
name = coml2.dll, base = 0x77ae0000, top = 0x77b3e000, size = 385024
name = fwpuclnt.dll, base = 0x73dd0000, top = 0x73e29000, size = 364544
name = bcrypt.dll, base = 0x75c60000, top = 0x75c79000, size = 102400
name = msscript.ocx, base = 0x71850000, top = 0x7186c000, size = 114688
name = vbscript.dll, base = 0x6ff10000, top = 0x6ff96000, size = 548864
name = amsi.dll, base = 0x6ebe0000, top = 0x6ebf9000, size = 102400
name = windowscodecs.dll, base = 0x55cf0000, top = 0x55e61000, size = 1511424
name = textshaping.dll, base = 0x51d20000, top = 0x51db4000, size = 606208
name = textinputframework.dll, base = 0x6c700000, top = 0x6c7b9000, size = 757760
name = sogouwbtsf.ime, base = 0x6c7c0000, top = 0x6c893000, size = 864256
name = sogouwb.ime, base = 0xa0b0000, top = 0xa834000, size = 7880704
name = usp10.dll, base = 0x70f60000, top = 0x70f77000, size = 94208
name = secur32.dll, base = 0x71490000, top = 0x7149a000, size = 40960
name = wintrust.dll, base = 0x77800000, top = 0x7784c000, size = 311296
name = crypt32.dll, base = 0x75cd0000, top = 0x75dca000, size = 1024000
name = msasn1.dll, base = 0x74930000, top = 0x7493e000, size = 57344
name = cryptsp.dll, base = 0x749a0000, top = 0x749b3000, size = 77824
name = rsaenh.dll, base = 0x74970000, top = 0x7499f000, size = 192512
name = cryptbase.dll, base = 0x74960000, top = 0x7496a000, size = 40960
name = imagehlp.dll, base = 0x76510000, top = 0x76529000, size = 102400
name = gpapi.dll, base = 0x6eba0000, top = 0x6ebbe000, size = 122880
name = cryptnet.dll, base = 0x6eb70000, top = 0x6eb96000, size = 155648
name = manualnewword.dll, base = 0x12050000, top = 0x12101000, size = 724992
name = dbgcore.dll, base = 0x71820000, top = 0x71846000, size = 155648
code before:
8b c8 e8 6b d2 31 00 85 c0 75 04 33 d2 eb 0e 8b d0 8d 5a 01
current code:
8a 0a 42 84 c9 75 f9 2b d3 52 50 8d 4f 08 e8 6b b2 f7 ff 68
call stack:
00440ade ===> 按键精灵2014.exe
current stack:
[0019da94] = cf163460
[0019da98] = 975e3600
[0019da9c] = 0019dc18
[0019daa0] = 0019dac0
[0019daa4] = 0681f338
[0019daa8] = 0019d974
[0019daac] = 00000107
[0019dab0] = 00000000
[0019dab4] = 0019db50
[0019dab8] = 068953d0
[0019dabc] = 0681f308
[0019dac0] = 0019d974
[0019dac4] = 00000107
[0019dac8] = 00000000
[0019dacc] = 0019dc68
[0019dad0] = 00000000
[0019dad4] = 009e7390
[0019dad8] = 06873da8
[0019dadc] = 06810d98
[0019dae0] = 064c8fe8
[0019dae4] = 0681bab8
[0019dae8] = 06810ba8
[0019daec] = 00000008
[0019daf0] = 00000000
[0019daf4] = 00000001
[0019daf8] = 064c9458
[0019dafc] = 0681ba88
[0019db00] = 00000000
[0019db04] = 00000000
[0019db08] = 00000000
[0019db0c] = 00000000
[0019db10] = 00000000
[0019db14] = 064c9458
[0019db18] = 00000002
[0019db1c] = 00000000
[0019db20] = 00000004
[0019db24] = 0000003c
[0019db28] = 0000003f
[0019db2c] = 00000000
[0019db30] = 064c9458
[0019db34] = 064c9494
[0019db38] = 064c9494
[0019db3c] = 064c9494
[0019db40] = 0019daa4
[0019db44] = 00000000
[0019db48] = 0019db68
[0019db4c] = 77d75dde
[0019db50] = 00000013
[0019db54] = 00000000
[0019db58] = 0000000f
[0019db5c] = 00000000
[0019db60] = 00010001
[0019db64] = 0681bb88
[0019db68] = 068109c8
[0019db6c] = 00000008
[0019db70] = 00000000
[0019db74] = 00000001
[0019db78] = 06815f00
[0019db7c] = 0681bbb8
[0019db80] = 00000000
[0019db84] = 00000000
[0019db88] = 00000000
[0019db8c] = 00000000
[0019db90] = 009e7380
[0019db94] = 068133c0
[0019db98] = 00408290
[0019db9c] = 06815f10
[0019dba0] = 00000002
[0019dba4] = 0000002d
[0019dba8] = 0000002f
[0019dbac] = 006bc0e7
[0019dbb0] = 068133c0
[0019dbb4] = 068133ed
[0019dbb8] = 068133ed
[0019dbbc] = 068133ed
[0019dbc0] = 0019dabc
[0019dbc4] = 00408400
[0019dbc8] = 06815f10
[0019dbcc] = 00000002
[0019dbd0] = 00965b28
[0019dbd4] = 00000000
[0019dbd8] = 0000000f
[0019dbdc] = 06810900
[0019dbe0] = 00010001
[0019dbe4] = 0019dc10
[0019dbe8] = 064c91d0
[0019dbec] = 00965b28
[0019dbf0] = 00000000
[0019dbf4] = cf163464
[0019dbf8] = 0000003c
[0019dbfc] = 0000003f
[0019dc00] = 0019dc18
[0019dc04] = cf163460
[0019dc08] = 0019e0bc
[0019dc0c] = 008a1f25
[0019dc10] = 0000000a
[0019dc14] = 0019e0cc
[0019dc18] = 00440ade
[0019dc1c] = cf163454
[0019dc20] = 77603c40
[0019dc24] = 0681bb58
[0019dc28] = 06810d98
[0019dc2c] = 00000006
[0019dc30] = 06810900
[0019dc34] = 77974601
[0019dc38] = 06873170
[0019dc3c] = 06816070
[0019dc40] = 00000004
[0019dc44] = 0019dc74
[0019dc48] = 009e7390
[0019dc4c] = 06873170
[0019dc50] = 00000003
[0019dc54] = 00000003
[0019dc58] = 0019dc74
[0019dc5c] = 009e7390
[0019dc60] = 06873080
[0019dc64] = 009e7390
[0019dc68] = 0689ae18
[0019dc6c] = 06895ba0
[0019dc70] = 77d7627f
[0019dc74] = 0019dc94
[0019dc78] = 776073c5
[0019dc7c] = 01bbf320
[0019dc80] = 00000000
[0019dc84] = 00000287
[0019dc88] = 00000006
[0019dc8c] = 00000000
[0019dc90] = 00000001
[0019dc94] = 0019dcc0
[0019dc98] = 776211fb
[0019dc9c] = 003a05cc
[0019dca0] = 00000287
[0019dca4] = 00000006
[0019dca8] = 00000000
[0019dcac] = 003a05cc
[0019dcb0] = dcbaabcd
[0019dcb4] = 776073a0
[0019dcb8] = 00000287
[0019dcbc] = 003a05cc
[0019dcc0] = 0019dda4
[0019dcc4] = 776181ca
[0019dcc8] = 776073a0
[0019dccc] = 726a2957
[0019dcd0] = 0019df48
[0019dcd4] = 0019df0c
[0019dcd8] = 006c2b52
[0019dcdc] = 005a964e
[0019dce0] = cf163778
[0019dce4] = 009e7390
[0019dce8] = 0019df3c
[0019dcec] = 00000002
[0019dcf0] = 015e0b58
[0019dcf4] = 77db7904
[0019dcf8] = 11b26a58
[0019dcfc] = 01190000
[0019dd00] = 00000000
[0019dd04] = 77d75dde
[0019dd08] = 00000000
[0019dd0c] = 00000000
[0019dd10] = 00000000
[0019dd14] = 00000022
[0019dd18] = 00000064
[0019dd1c] = 00000000
[0019dd20] = 08b530a8
[0019dd24] = 00000024
[0019dd28] = 00000001
[0019dd2c] = 0019df10
[0019dd30] = 00000000
[0019dd34] = 00000070
[0019dd38] = ffe620ef
[0019dd3c] = ffffffff
[0019dd40] = 77617fde
[0019dd44] = 7761840f
[0019dd48] = 00000000
[0019dd4c] = 00000000
[0019dd50] = 000211c8
[0019dd54] = 00000000
[0019dd58] = 80006011
[0019dd5c] = 00000000
[0019dd60] = 00000000
[0019dd64] = 00021348
[0019dd68] = 00000000
[0019dd6c] = 00000000
[0019dd70] = 00000000
[0019dd74] = 776073a0
[0019dd78] = 00000000
[0019dd7c] = 00000001
[0019dd80] = 00000000
[0019dd84] = 003a05cc
[0019dd88] = 80006011
[0019dd8c] = 76dcbb22
[0019dd90] = 0019ddb0
[0019dd94] = 0019de6c
[0019dd98] = 776231a0
[0019dd9c] = a019e1b7
[0019dda0] = fffffffe
[0019dda4] = 0019dddc
[0019dda8] = 77617897
[0019ddac] = 776073a0
[0019ddb0] = 00000000
