[分享] 《LOL英雄聯盟外掛》LeagueSharp.Common 腳本庫 1.0.0.39 繁化 05/22

261層

hudson0217 2015-8-1 14:15:02

??游 - cv5490
Environment = 1366x768|32|Windows 10 Home
Type = 0xC0000005
Address = 0xC92D27C
LineNum = 0(0)
Registers:
EAX=000000CF EBX=0E8204C8 ECX=0E820463 EDX=6A979423
ESI=63B409EC EDI=00000004 ESP=0C92D26C EBP=00000001
Current Modules:
Name = Play.exe, Base = 0x400000, Top = 0xD6C000, Size = 9879552
Name = ntdll.dll, Base = 0x770C0000, Top = 0x77239000, Size = 1544192
Name = KERNEL32.DLL, Base = 0x74580000, Top = 0x74670000, Size = 983040
Name = KERNELBASE.dll, Base = 0x74240000, Top = 0x743B6000, Size = 1531904
Name = apphelp.dll, Base = 0x6DBF0000, Top = 0x6DC81000, Size = 593920
Name = MSVCRT.dll, Base = 0x76D20000, Top = 0x76DDE000, Size = 778240
Name = USER32.dll, Base = 0x75EF0000, Top = 0x76030000, Size = 1310720
Name = GDI32.dll, Base = 0x76040000, Top = 0x7618D000, Size = 1363968
Name = ADVAPI32.dll, Base = 0x76DE0000, Top = 0x76E5B000, Size = 503808
Name = sechost.dll, Base = 0x76340000, Top = 0x76383000, Size = 274432
Name = RPCRT4.dll, Base = 0x76E60000, Top = 0x76F0C000, Size = 704512
Name = SspiCli.dll, Base = 0x741D0000, Top = 0x741EE000, Size = 122880
Name = CRYPTBASE.dll, Base = 0x741C0000, Top = 0x741CA000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x74160000, Top = 0x741B9000, Size = 364544
Name = SHELL32.dll, Base = 0x74730000, Top = 0x75AED000, Size = 20697088
Name = windows.storage.dll, Base = 0x763F0000, Top = 0x768CC000, Size = 5095424
Name = combase.dll, Base = 0x76A20000, Top = 0x76BDA000, Size = 1810432
Name = shlwapi.dll, Base = 0x75EA0000, Top = 0x75EE4000, Size = 278528
Name = kernel.appcore.dll, Base = 0x743C0000, Top = 0x743CC000, Size = 49152
Name = shcore.dll, Base = 0x76C90000, Top = 0x76D1D000, Size = 577536
Name = powrprof.dll, Base = 0x768D0000, Top = 0x76914000, Size = 278528
Name = profapi.dll, Base = 0x76A10000, Top = 0x76A1F000, Size = 61440
Name = ole32.dll, Base = 0x75AF0000, Top = 0x75BDA000, Size = 958464
Name = OLEAUT32.dll, Base = 0x76BE0000, Top = 0x76C72000, Size = 598016
Name = MFC42.DLL, Base = 0x6A970000, Top = 0x6AA9F000, Size = 1241088
Name = WS2_32.dll, Base = 0x769B0000, Top = 0x76A0C000, Size = 376832
Name = NSI.dll, Base = 0x76030000, Top = 0x76037000, Size = 28672
Name = comdlg32.dll, Base = 0x74670000, Top = 0x7472E000, Size = 778240
Name = MSVCP60.dll, Base = 0x5DDF0000, Top = 0x5DE60000, Size = 458752
Name = COMCTL32.dll, Base = 0x6C970000, Top = 0x6CA02000, Size = 598016
Name = OLEPRO32.DLL, Base = 0x63600000, Top = 0x63619000, Size = 102400
Name = gdiplus.dll, Base = 0x6FC50000, Top = 0x6FDBB000, Size = 1486848
Name = WININET.dll, Base = 0x73AB0000, Top = 0x73CD4000, Size = 2244608
Name = dbghelp.dll, Base = 0x71420000, Top = 0x7155F000, Size = 1306624
Name = UxTheme.dll, Base = 0x6CF60000, Top = 0x6CFD5000, Size = 479232
Name = DINPUT8.dll, Base = 0x64760000, Top = 0x64796000, Size = 221184
Name = WINMM.dll, Base = 0x6D010000, Top = 0x6D034000, Size = 147456
Name = ODBC32.dll, Base = 0x6BD30000, Top = 0x6BDC9000, Size = 626688
Name = WINMMBASE.dll, Base = 0x1100000, Top = 0x1123000, Size = 143360
Name = cfgmgr32.dll, Base = 0x77080000, Top = 0x770B6000, Size = 221184
Name = DPAPI.dll, Base = 0x72D70000, Top = 0x72D78000, Size = 32768
Name = DEVOBJ.dll, Base = 0x6F270000, Top = 0x6F291000, Size = 135168
Name = IMM32.DLL, Base = 0x75D60000, Top = 0x75D8B000, Size = 176128
Name = MSCTF.dll, Base = 0x75C40000, Top = 0x75D60000, Size = 1179648
Name = comctl32.DLL, Base = 0x6D0A0000, Top = 0x6D2A9000, Size = 2134016
Name = clbcatq.dll, Base = 0x76920000, Top = 0x769A2000, Size = 532480
Name = ieframe.dll, Base = 0x666D0000, Top = 0x67197000, Size = 11300864
Name = iertutil.dll, Base = 0x727E0000, Top = 0x72AA1000, Size = 2887680
Name = cryptsp.dll, Base = 0x73510000, Top = 0x73523000, Size = 77824
Name = bcrypt.dll, Base = 0x734B0000, Top = 0x734CB000, Size = 110592
Name = rsaenh.dll, Base = 0x734E0000, Top = 0x7350F000, Size = 192512
Name = dataexchange.dll, Base = 0x6AAB0000, Top = 0x6AAEF000, Size = 258048
Name = d3d11.dll, Base = 0x65D00000, Top = 0x65F13000, Size = 2174976
Name = dcomp.dll, Base = 0x65BE0000, Top = 0x65C7C000, Size = 638976
Name = d2d1.dll, Base = 0x68420000, Top = 0x688A8000, Size = 4751360
Name = dxgi.dll, Base = 0x65C80000, Top = 0x65CFE000, Size = 516096
Name = twinapi.appcore.dll, Base = 0x68360000, Top = 0x6841C000, Size = 770048
Name = USERENV.dll, Base = 0x72DB0000, Top = 0x72DC9000, Size = 102400
Name = PROPSYS.dll, Base = 0x6FF00000, Top = 0x70042000, Size = 1318912
Name = urlmon.dll, Base = 0x6CD90000, Top = 0x6CEF0000, Size = 1441792
Name = dwmapi.dll, Base = 0x6C0A0000, Top = 0x6C0BD000, Size = 118784
Name = IMTCTIP.DLL, Base = 0x6B960000, Top = 0x6BA7D000, Size = 1167360
Name = DUI70.dll, Base = 0x6A800000, Top = 0x6A967000, Size = 1470464
Name = VERSION.dll, Base = 0x73CE0000, Top = 0x73CE8000, Size = 32768
Name = imetip.dll, Base = 0x6B2C0000, Top = 0x6B3CE000, Size = 1105920
Name = OLEACC.dll, Base = 0x6D040000, Top = 0x6D093000, Size = 339968
Name = IMTCCFG.DLL, Base = 0x6D340000, Top = 0x6D376000, Size = 221184
Name = IMTCCORE.DLL, Base = 0x6B620000, Top = 0x6B6FA000, Size = 892928
Name = mscand20.dll, Base = 0x6A400000, Top = 0x6A563000, Size = 1454080
Name = DUser.dll, Base = 0x6A780000, Top = 0x6A7FA000, Size = 499712
Name = MSIMG32.dll, Base = 0x6D2B0000, Top = 0x6D2B6000, Size = 24576
Name = UIAutomationCore.DLL, Base = 0x6B170000, Top = 0x6B285000, Size = 1134592
Name = ondemandconnroutehelper.dll, Base = 0x725D0000, Top = 0x725E1000, Size = 69632
Name = IPHLPAPI.DLL, Base = 0x73940000, Top = 0x73970000, Size = 196608
Name = WINNSI.DLL, Base = 0x73880000, Top = 0x73888000, Size = 32768
Name = winhttp.dll, Base = 0x73A00000, Top = 0x73AA7000, Size = 684032
Name = mswsock.dll, Base = 0x724E0000, Top = 0x7252E000, Size = 319488
Name = DNSAPI.dll, Base = 0x73970000, Top = 0x739F4000, Size = 540672
Name = dhcpcsvc6.DLL, Base = 0x724C0000, Top = 0x724D3000, Size = 77824
Name = mdnsNSP.dll, Base = 0x6EA80000, Top = 0x6EAA1000, Size = 135168
Name = rasadhlp.dll, Base = 0x6E200000, Top = 0x6E208000, Size = 32768
Name = dhcpcsvc.DLL, Base = 0x72430000, Top = 0x72444000, Size = 81920
Name = fwpuclnt.dll, Base = 0x6E930000, Top = 0x6E976000, Size = 286720
Name = cfgdll.dll, Base = 0x10000000, Top = 0x1000F000, Size = 61440
Name = msscript.ocx, Base = 0x6C650000, Top = 0x6C66C000, Size = 114688
Name = qdisp.dll, Base = 0x63B10000, Top = 0x63B60000, Size = 327680
Name = WINSPOOL.DRV, Base = 0x6CEF0000, Top = 0x6CF57000, Size = 421888
Name = vbscript.dll, Base = 0x5DD70000, Top = 0x5DDEF000, Size = 520192
Name = amsi.dll, Base = 0x6C640000, Top = 0x6C64D000, Size = 53248
Name = MpOav.dll, Base = 0x636D0000, Top = 0x636E6000, Size = 90112
Name = coml2.dll, Base = 0x75D90000, Top = 0x75DE8000, Size = 360448
Name = WLDP.DLL, Base = 0x6C630000, Top = 0x6C63D000, Size = 53248
Name = CRYPT32.dll, Base = 0x761C0000, Top = 0x76335000, Size = 1527808
Name = MSASN1.dll, Base = 0x75DF0000, Top = 0x75DFE000, Size = 57344
Name = WINTRUST.dll, Base = 0x741F0000, Top = 0x74232000, Size = 270336
Name = WindowsCodecs.dll, Base = 0x66290000, Top = 0x66401000, Size = 1511424
Name = imecfm.dll, Base = 0x6D320000, Top = 0x6D33C000, Size = 114688
Name = wer.dll, Base = 0x5E0E0000, Top = 0x5E165000, Size = 544768
Name = napinsp.dll, Base = 0x6EB00000, Top = 0x6EB12000, Size = 73728
Name = pnrpnsp.dll, Base = 0x6EAE0000, Top = 0x6EAF6000, Size = 90112
Name = NLAapi.dll, Base = 0x6EAC0000, Top = 0x6EAD3000, Size = 77824
Name = winrnr.dll, Base = 0x6EAB0000, Top = 0x6EABB000, Size = 45056
Name = xunyoucall.dll, Base = 0x5530000, Top = 0x5585000, Size = 348160
Name = PSAPI.DLL, Base = 0x761B0000, Top = 0x761B6000, Size = 24576
Name = sxs.dll, Base = 0x700A0000, Top = 0x70120000, Size = 524288
Name = MSHTML.dll, Base = 0x56510000, Top = 0x57892000, Size = 20455424
Name = cfgdll.dll, Base = 0x4F00000, Top = 0x4F0F000, Size = 61440
Name = Secur32.dll, Base = 0x6EB20000, Top = 0x6EB2A000, Size = 40960
Name = MLANG.dll, Base = 0x5D8F0000, Top = 0x5D923000, Size = 208896
Name = ieapfltr.dll, Base = 0x6DA70000, Top = 0x6DBE2000, Size = 1515520
Name = msimtf.dll, Base = 0x6BCD0000, Top = 0x6BCDE000, Size = 57344
Name = jscript9.dll, Base = 0x68A30000, Top = 0x68DA2000, Size = 3612672
Name = XmlLite.dll, Base = 0x5DF60000, Top = 0x5DF8D000, Size = 184320
Name = msls31.dll, Base = 0x6BB70000, Top = 0x6BB9D000, Size = 184320
Name = Flash.ocx, Base = 0x60F50000, Top = 0x62292000, Size = 20193280
Name = mscms.dll, Base = 0x6A5A0000, Top = 0x6A61F000, Size = 520192
Name = DSOUND.dll, Base = 0x6B4B0000, Top = 0x6B536000, Size = 548864
Name = atlthunk.dll, Base = 0x6B540000, Top = 0x6B54D000, Size = 53248
Name = DWrite.dll, Base = 0x68170000, Top = 0x68360000, Size = 2031616
Name = d3d10warp.dll, Base = 0x58350000, Top = 0x58568000, Size = 2195456
Name = msxml3.dll, Base = 0x5D760000, Top = 0x5D8F0000, Size = 1638400
Name = schannel.dll, Base = 0x6CC80000, Top = 0x6CCE0000, Size = 393216
Name = MMDevApi.dll, Base = 0x65F20000, Top = 0x65F74000, Size = 344064
Name = MFPlat.DLL, Base = 0x69F80000, Top = 0x6A061000, Size = 921600
Name = RTWorkQ.DLL, Base = 0x6C100000, Top = 0x6C124000, Size = 147456
Name = AVRT.dll, Base = 0x6C1F0000, Top = 0x6C1F9000, Size = 36864
Name = AUDIOSES.DLL, Base = 0x648B0000, Top = 0x64918000, Size = 425984
Name = wintypes.dll, Base = 0x647E0000, Top = 0x648A5000, Size = 806912
Name = npGoogleUpdate3.dll, Base = 0x5BF50000, Top = 0x5BFE6000, Size = 614400
Name = NETAPI32.dll, Base = 0x72E20000, Top = 0x72E33000, Size = 77824
Name = WTSAPI32.dll, Base = 0x70050000, Top = 0x7005F000, Size = 61440
Name = netutils.dll, Base = 0x72D80000, Top = 0x72D8A000, Size = 40960
Name = srvcli.dll, Base = 0x72D90000, Top = 0x72DAC000, Size = 114688
Name = wkscli.dll, Base = 0x734D0000, Top = 0x734E0000, Size = 65536
Name = AcroPDF.dll, Base = 0x5B500000, Top = 0x5B5A0000, Size = 655360
Name = MSVCP100.dll, Base = 0x722C0000, Top = 0x72329000, Size = 430080
Name = MPR.dll, Base = 0x6C350000, Top = 0x6C367000, Size = 94208
Name = MSVCR100.dll, Base = 0x72200000, Top = 0x722BF000, Size = 782336
Name = windowscodecsext.dll, Base = 0x63D20000, Top = 0x63D5F000, Size = 258048
Name = msxml6.dll, Base = 0x5D570000, Top = 0x5D759000, Size = 2002944
Name = jscript.dll, Base = 0x5B450000, Top = 0x5B4F3000, Size = 667648
Name = ActXPrxy.dll, Base = 0x66080000, Top = 0x66287000, Size = 2125824
Code Before:
00 00 00 00 EC 09 B4 63 80 D2 92 0C 14 D3 92 0C CF 45 B1 63
Current Code:
01 00 00 00 C0 A5 B2 63 4D 34 B2 63 D0 BF B2 63 EF AF 53 63
Call Stack:
63B145CF ===> qdisp.dll
Current Stack:
[0C92D26C] = 63B409EC
[0C92D270] = 0C92D280
[0C92D274] = 0C92D314
[0C92D278] = 63B145CF
[0C92D27C] = 00000001
[0C92D280] = 63B2A5C0
[0C92D284] = 63B2344D
[0C92D288] = 63B2BFD0
[0C92D28C] = 6353AFEF
[0C92D290] = FFFFFFFE
[0C92D294] = 63B17163
[0C92D298] = 00000014
[0C92D29C] = 63B233D2
[0C92D2A0] = 00000000
[0C92D2A4] = 63B23384
[0C92D2A8] = 0C751473
[0C92D2AC] = 00000000
[0C92D2B0] = 63B3FB08
[0C92D2B4] = 00000000
[0C92D2B8] = 8D00038E
[0C92D2BC] = 63B41990
[0C92D2C0] = 00000000
[0C92D2C4] = 00000000
[0C92D2C8] = 00000000
[0C92D2CC] = 00000000
[0C92D2D0] = 1AC00003
[0C92D2D4] = 00000001
[0C92D2D8] = 00000285
[0C92D2DC] = 00000002
[0C92D2E0] = 0000002A
[0C92D2E4] = 035304C8
[0C92D2E8] = 035304A0
[0C92D2EC] = 0C92D2A0
[0C92D2F0] = 00000009
[0C92D2F4] = 63B145C0
[0C92D2F8] = 00000044
[0C92D2FC] = 00000000
[0C92D300] = 0C751473
[0C92D304] = 0C92D280
[0C92D308] = 0C92D3A0
[0C92D30C] = 63B3D52E
[0C92D310] = 00000002
[0C92D314] = 0C92D3AC
[0C92D318] = 63B23BE5
[0C92D31C] = 63B3FB08
[0C92D320] = 00000001
[0C92D324] = 0C92D730
[0C92D328] = 0C92D370
[0C92D32C] = 0C92D394
[0C92D330] = 0C7514CB
[0C92D334] = 63B2385A
[0C92D338] = 0C92D730
[0C92D33C] = 0C92D3D8
[0C92D340] = 0000000A
[0C92D344] = 00000003
[0C92D348] = 002C0000
[0C92D34C] = 00000044
[0C92D350] = 00000000
[0C92D354] = 00000000
[0C92D358] = 00000000
[0C92D35C] = 00000000
[0C92D360] = 008201F8
[0C92D364] = 00000006
[0C92D368] = 0000001C
[0C92D36C] = 770FD2D9
[0C92D370] = 14DA6348
[0C92D374] = 00000000
[0C92D378] = 00000000
[0C92D37C] = 00000000
[0C92D380] = 5DD8DAB0
[0C92D384] = 8A5C5C13
[0C92D388] = 0C92D3BC
[0C92D38C] = 00000000
[0C92D390] = 035304A0
[0C92D394] = FFFFFFFF
[0C92D398] = 00000000
[0C92D39C] = 0C92D330
[0C92D3A0] = 0C92D7B4
[0C92D3A4] = 63B3D55B
[0C92D3A8] = 00000000
[0C92D3AC] = 0C92D4F4
[0C92D3B0] = 5DD7C70D
[0C92D3B4] = 00000001
[0C92D3B8] = 00000002
[0C92D3BC] = 5DD7229C
[0C92D3C0] = 00000409
[0C92D3C4] = 00000001
[0C92D3C8] = 00000000
[0C92D3CC] = 0C92D730
[0C92D3D0] = 0C92D428
[0C92D3D4] = 0C92D418
[0C92D3D8] = 035304B0
[0C92D3DC] = 00000000
[0C92D3E0] = 0C92D7E0
[0C92D3E4] = 0053028C
[0C92D3E8] = 06177428
[0C92D3EC] = 0E824E98
[0C92D3F0] = 00000000
[0C92D3F4] = 0C92D410
[0C92D3F8] = 035304B0
[0C92D3FC] = 00000000
[0C92D400] = 0E90B360
[0C92D404] = 742F0A46
[0C92D408] = 14DA6348
[0C92D40C] = 00000000
[0C92D410] = 00000000
[0C92D414] = 00000000
[0C92D418] = 03530260
[0C92D41C] = 00000000
[0C92D420] = 03530000
[0C92D424] = 03530400
[0C92D428] = 00000000
[0C92D42C] = 00000000
[0C92D430] = 00000000
[0C92D434] = 00000000
[0C92D438] = 00000000
[0C92D43C] = 00000000
[0C92D440] = 00000000
[0C92D444] = 00000000
[0C92D448] = 03530260
[0C92D44C] = 0000001C
[0C92D450] = 03530260
[0C92D454] = 012F06CA
[0C92D458] = 00000001
[0C92D45C] = 63B4B6D4
[0C92D460] = 0C92D7B4
[0C92D464] = 77130D40
[0C92D468] = 861830B3
[0C92D46C] = FFFFFFFE
[0C92D470] = 0C92D4A4
[0C92D474] = 7713C650
[0C92D478] = 00000000
[0C92D47C] = 035304C8
[0C92D480] = 035304B0
[0C92D484] = 63B3FB98
[0C92D488] = 00000000
[0C92D48C] = C1F9706F
[0C92D490] = 035304C8
[0C92D494] = 0C92D4B4
[0C92D498] = 63B1A4F3
[0C92D49C] = 00000409
[0C92D4A0] = 00000001
[0C92D4A4] = 0C92D4B4
[0C92D4A8] = 770FC72C
[0C92D4AC] = 00000000
[0C92D4B0] = FFFFFFFF
[0C92D4B4] = 0C92D4C8
[0C92D4B8] = 63B2C17B
[0C92D4BC] = 03530000
[0C92D4C0] = 00000000
[0C92D4C4] = 035304C8
[0C92D4C8] = 0C92D4D4
[0C92D4CC] = 63B17D5C
[0C92D4D0] = 035304C8
[0C92D4D4] = 0C92D4F0
[0C92D4D8] = 63B112BB
[0C92D4DC] = 035304C8
[0C92D4E0] = 00000040
[0C92D4E4] = 035304B0
[0C92D4E8] = 0E824E98
[0C92D4EC] = 8A5C5C7F
[0C92D4F0] = 00001F80
[0C92D4F4] = 0C92D774
[0C92D4F8] = 5DD7E966
[0C92D4FC] = 00000002
[0C92D500] = 00000001
[0C92D504] = 0C92D730
[0C92D508] = 00000000
[0C92D50C] = 14DA6348
[0C92D510] = 06177428
[0C92D514] = 00000000
[0C92D518] = 0C92D7E0
[0C92D51C] = 57000453
[0C92D520] = 00000046
[0C92D524] = 14DA5D48
[0C92D528] = 01313CF0
[0C92D52C] = 0000077F
[0C92D530] = 013100C0
[0C92D534] = 0C92D57C
[0C92D538] = 77117B7D
[0C92D53C] = 00000001
[0C92D540] = 000007FF
[0C92D544] = 00002759
[0C92D548] = 14D89B00
[0C92D54C] = 01310000
[0C92D550] = 00000000
[0C92D554] = 5DD86F41
[0C92D558] = 0000077F
[0C92D55C] = 00001DFC
[0C92D560] = 0C92D584
[0C92D564] = 00002759
[0C92D568] = 00002759
[0C92D56C] = 00000000
[0C92D570] = 00002759
[0C92D574] = 14B10000
[0C92D578] = 00000001
[0C92D57C] = 0C92D5C8
[0C92D580] = 77117638
[0C92D584] = 00000000
[0C92D588] = 01310000??游 - cv5490
Environment = 1366x768|32|Windows 10 Home
Type = 0xC0000005
Address = 0xC92D27C
LineNum = 0(0)
Registers:
EAX=000000CF EBX=0E8204C8 ECX=0E820463 EDX=6A979423
ESI=63B409EC EDI=00000004 ESP=0C92D26C EBP=00000001
Current Modules:
Name = Play.exe, Base = 0x400000, Top = 0xD6C000, Size = 9879552
Name = ntdll.dll, Base = 0x770C0000, Top = 0x77239000, Size = 1544192
Name = KERNEL32.DLL, Base = 0x74580000, Top = 0x74670000, Size = 983040
Name = KERNELBASE.dll, Base = 0x74240000, Top = 0x743B6000, Size = 1531904
Name = apphelp.dll, Base = 0x6DBF0000, Top = 0x6DC81000, Size = 593920
Name = MSVCRT.dll, Base = 0x76D20000, Top = 0x76DDE000, Size = 778240
Name = USER32.dll, Base = 0x75EF0000, Top = 0x76030000, Size = 1310720
Name = GDI32.dll, Base = 0x76040000, Top = 0x7618D000, Size = 1363968
Name = ADVAPI32.dll, Base = 0x76DE0000, Top = 0x76E5B000, Size = 503808
Name = sechost.dll, Base = 0x76340000, Top = 0x76383000, Size = 274432
Name = RPCRT4.dll, Base = 0x76E60000, Top = 0x76F0C000, Size = 704512
Name = SspiCli.dll, Base = 0x741D0000, Top = 0x741EE000, Size = 122880
Name = CRYPTBASE.dll, Base = 0x741C0000, Top = 0x741CA000, Size = 40960
Name = bcryptPrimitives.dll, Base = 0x74160000, Top = 0x741B9000, Size = 364544
Name = SHELL32.dll, Base = 0x74730000, Top = 0x75AED000, Size = 20697088
Name = windows.storage.dll, Base = 0x763F0000, Top = 0x768CC000, Size = 5095424
Name = combase.dll, Base = 0x76A20000, Top = 0x76BDA000, Size = 1810432
Name = shlwapi.dll, Base = 0x75EA0000, Top = 0x75EE4000, Size = 278528
Name = kernel.appcore.dll, Base = 0x743C0000, Top = 0x743CC000, Size = 49152
Name = shcore.dll, Base = 0x76C90000, Top = 0x76D1D000, Size = 577536
Name = powrprof.dll, Base = 0x768D0000, Top = 0x76914000, Size = 278528
Name = profapi.dll, Base = 0x76A10000, Top = 0x76A1F000, Size = 61440
Name = ole32.dll, Base = 0x75AF0000, Top = 0x75BDA000, Size = 958464
Name = OLEAUT32.dll, Base = 0x76BE0000, Top = 0x76C72000, Size = 598016
Name = MFC42.DLL, Base = 0x6A970000, Top = 0x6AA9F000, Size = 1241088
Name = WS2_32.dll, Base = 0x769B0000, Top = 0x76A0C000, Size = 376832
Name = NSI.dll, Base = 0x76030000, Top = 0x76037000, Size = 28672
Name = comdlg32.dll, Base = 0x74670000, Top = 0x7472E000, Size = 778240
Name = MSVCP60.dll, Base = 0x5DDF0000, Top = 0x5DE60000, Size = 458752
Name = COMCTL32.dll, Base = 0x6C970000, Top = 0x6CA02000, Size = 598016
Name = OLEPRO32.DLL, Base = 0x63600000, Top = 0x63619000, Size = 102400
Name = gdiplus.dll, Base = 0x6FC50000, Top = 0x6FDBB000, Size = 1486848
Name = WININET.dll, Base = 0x73AB0000, Top = 0x73CD4000, Size = 2244608
Name = dbghelp.dll, Base = 0x71420000, Top = 0x7155F000, Size = 1306624
Name = UxTheme.dll, Base = 0x6CF60000, Top = 0x6CFD5000, Size = 479232
Name = DINPUT8.dll, Base = 0x64760000, Top = 0x64796000, Size = 221184
Name = WINMM.dll, Base = 0x6D010000, Top = 0x6D034000, Size = 147456
Name = ODBC32.dll, Base = 0x6BD30000, Top = 0x6BDC9000, Size = 626688
Name = WINMMBASE.dll, Base = 0x1100000, Top = 0x1123000, Size = 143360
Name = cfgmgr32.dll, Base = 0x77080000, Top = 0x770B6000, Size = 221184
Name = DPAPI.dll, Base = 0x72D70000, Top = 0x72D78000, Size = 32768
Name = DEVOBJ.dll, Base = 0x6F270000, Top = 0x6F291000, Size = 135168
Name = IMM32.DLL, Base = 0x75D60000, Top = 0x75D8B000, Size = 176128
Name = MSCTF.dll, Base = 0x75C40000, Top = 0x75D60000, Size = 1179648
Name = comctl32.DLL, Base = 0x6D0A0000, Top = 0x6D2A9000, Size = 2134016
Name = clbcatq.dll, Base = 0x76920000, Top = 0x769A2000, Size = 532480
Name = ieframe.dll, Base = 0x666D0000, Top = 0x67197000, Size = 11300864
Name = iertutil.dll, Base = 0x727E0000, Top = 0x72AA1000, Size = 2887680
Name = cryptsp.dll, Base = 0x73510000, Top = 0x73523000, Size = 77824
Name = bcrypt.dll, Base = 0x734B0000, Top = 0x734CB000, Size = 110592
Name = rsaenh.dll, Base = 0x734E0000, Top = 0x7350F000, Size = 192512
Name = dataexchange.dll, Base = 0x6AAB0000, Top = 0x6AAEF000, Size = 258048
Name = d3d11.dll, Base = 0x65D00000, Top = 0x65F13000, Size = 2174976
Name = dcomp.dll, Base = 0x65BE0000, Top = 0x65C7C000, Size = 638976
Name = d2d1.dll, Base = 0x68420000, Top = 0x688A8000, Size = 4751360
Name = dxgi.dll, Base = 0x65C80000, Top = 0x65CFE000, Size = 516096
Name = twinapi.appcore.dll, Base = 0x68360000, Top = 0x6841C000, Size = 770048
Name = USERENV.dll, Base = 0x72DB0000, Top = 0x72DC9000, Size = 102400
Name = PROPSYS.dll, Base = 0x6FF00000, Top = 0x70042000, Size = 1318912
Name = urlmon.dll, Base = 0x6CD90000, Top = 0x6CEF0000, Size = 1441792
Name = dwmapi.dll, Base = 0x6C0A0000, Top = 0x6C0BD000, Size = 118784
Name = IMTCTIP.DLL, Base = 0x6B960000, Top = 0x6BA7D000, Size = 1167360
Name = DUI70.dll, Base = 0x6A800000, Top = 0x6A967000, Size = 1470464
Name = VERSION.dll, Base = 0x73CE0000, Top = 0x73CE8000, Size = 32768
Name = imetip.dll, Base = 0x6B2C0000, Top = 0x6B3CE000, Size = 1105920
Name = OLEACC.dll, Base = 0x6D040000, Top = 0x6D093000, Size = 339968
Name = IMTCCFG.DLL, Base = 0x6D340000, Top = 0x6D376000, Size = 221184
Name = IMTCCORE.DLL, Base = 0x6B620000, Top = 0x6B6FA000, Size = 892928
Name = mscand20.dll, Base = 0x6A400000, Top = 0x6A563000, Size = 1454080
Name = DUser.dll, Base = 0x6A780000, Top = 0x6A7FA000, Size = 499712
Name = MSIMG32.dll, Base = 0x6D2B0000, Top = 0x6D2B6000, Size = 24576
Name = UIAutomationCore.DLL, Base = 0x6B170000, Top = 0x6B285000, Size = 1134592
Name = ondemandconnroutehelper.dll, Base = 0x725D0000, Top = 0x725E1000, Size = 69632
Name = IPHLPAPI.DLL, Base = 0x73940000, Top = 0x73970000, Size = 196608
Name = WINNSI.DLL, Base = 0x73880000, Top = 0x73888000, Size = 32768
Name = winhttp.dll, Base = 0x73A00000, Top = 0x73AA7000, Size = 684032
Name = mswsock.dll, Base = 0x724E0000, Top = 0x7252E000, Size = 319488
Name = DNSAPI.dll, Base = 0x73970000, Top = 0x739F4000, Size = 540672
Name = dhcpcsvc6.DLL, Base = 0x724C0000, Top = 0x724D3000, Size = 77824
Name = mdnsNSP.dll, Base = 0x6EA80000, Top = 0x6EAA1000, Size = 135168
Name = rasadhlp.dll, Base = 0x6E200000, Top = 0x6E208000, Size = 32768
Name = dhcpcsvc.DLL, Base = 0x72430000, Top = 0x72444000, Size = 81920
Name = fwpuclnt.dll, Base = 0x6E930000, Top = 0x6E976000, Size = 286720
Name = cfgdll.dll, Base = 0x10000000, Top = 0x1000F000, Size = 61440
Name = msscript.ocx, Base = 0x6C650000, Top = 0x6C66C000, Size = 114688
Name = qdisp.dll, Base = 0x63B10000, Top = 0x63B60000, Size = 327680
Name = WINSPOOL.DRV, Base = 0x6CEF0000, Top = 0x6CF57000, Size = 421888
Name = vbscript.dll, Base = 0x5DD70000, Top = 0x5DDEF000, Size = 520192
Name = amsi.dll, Base = 0x6C640000, Top = 0x6C64D000, Size = 53248
Name = MpOav.dll, Base = 0x636D0000, Top = 0x636E6000, Size = 90112
Name = coml2.dll, Base = 0x75D90000, Top = 0x75DE8000, Size = 360448
Name = WLDP.DLL, Base = 0x6C630000, Top = 0x6C63D000, Size = 53248
Name = CRYPT32.dll, Base = 0x761C0000, Top = 0x76335000, Size = 1527808
Name = MSASN1.dll, Base = 0x75DF0000, Top = 0x75DFE000, Size = 57344
Name = WINTRUST.dll, Base = 0x741F0000, Top = 0x74232000, Size = 270336
Name = WindowsCodecs.dll, Base = 0x66290000, Top = 0x66401000, Size = 1511424
Name = imecfm.dll, Base = 0x6D320000, Top = 0x6D33C000, Size = 114688
Name = wer.dll, Base = 0x5E0E0000, Top = 0x5E165000, Size = 544768
Name = napinsp.dll, Base = 0x6EB00000, Top = 0x6EB12000, Size = 73728
Name = pnrpnsp.dll, Base = 0x6EAE0000, Top = 0x6EAF6000, Size = 90112
Name = NLAapi.dll, Base = 0x6EAC0000, Top = 0x6EAD3000, Size = 77824
Name = winrnr.dll, Base = 0x6EAB0000, Top = 0x6EABB000, Size = 45056
Name = xunyoucall.dll, Base = 0x5530000, Top = 0x5585000, Size = 348160
Name = PSAPI.DLL, Base = 0x761B0000, Top = 0x761B6000, Size = 24576
Name = sxs.dll, Base = 0x700A0000, Top = 0x70120000, Size = 524288
Name = MSHTML.dll, Base = 0x56510000, Top = 0x57892000, Size = 20455424
Name = cfgdll.dll, Base = 0x4F00000, Top = 0x4F0F000, Size = 61440
Name = Secur32.dll, Base = 0x6EB20000, Top = 0x6EB2A000, Size = 40960
Name = MLANG.dll, Base = 0x5D8F0000, Top = 0x5D923000, Size = 208896
Name = ieapfltr.dll, Base = 0x6DA70000, Top = 0x6DBE2000, Size = 1515520
Name = msimtf.dll, Base = 0x6BCD0000, Top = 0x6BCDE000, Size = 57344
Name = jscript9.dll, Base = 0x68A30000, Top = 0x68DA2000, Size = 3612672
Name = XmlLite.dll, Base = 0x5DF60000, Top = 0x5DF8D000, Size = 184320
Name = msls31.dll, Base = 0x6BB70000, Top = 0x6BB9D000, Size = 184320
Name = Flash.ocx, Base = 0x60F50000, Top = 0x62292000, Size = 20193280
Name = mscms.dll, Base = 0x6A5A0000, Top = 0x6A61F000, Size = 520192
Name = DSOUND.dll, Base = 0x6B4B0000, Top = 0x6B536000, Size = 548864
Name = atlthunk.dll, Base = 0x6B540000, Top = 0x6B54D000, Size = 53248
Name = DWrite.dll, Base = 0x68170000, Top = 0x68360000, Size = 2031616
Name = d3d10warp.dll, Base = 0x58350000, Top = 0x58568000, Size = 2195456
Name = msxml3.dll, Base = 0x5D760000, Top = 0x5D8F0000, Size = 1638400
Name = schannel.dll, Base = 0x6CC80000, Top = 0x6CCE0000, Size = 393216
Name = MMDevApi.dll, Base = 0x65F20000, Top = 0x65F74000, Size = 344064
Name = MFPlat.DLL, Base = 0x69F80000, Top = 0x6A061000, Size = 921600
Name = RTWorkQ.DLL, Base = 0x6C100000, Top = 0x6C124000, Size = 147456
Name = AVRT.dll, Base = 0x6C1F0000, Top = 0x6C1F9000, Size = 36864
Name = AUDIOSES.DLL, Base = 0x648B0000, Top = 0x64918000, Size = 425984
Name = wintypes.dll, Base = 0x647E0000, Top = 0x648A5000, Size = 806912
Name = npGoogleUpdate3.dll, Base = 0x5BF50000, Top = 0x5BFE6000, Size = 614400
Name = NETAPI32.dll, Base = 0x72E20000, Top = 0x72E33000, Size = 77824
Name = WTSAPI32.dll, Base = 0x70050000, Top = 0x7005F000, Size = 61440
Name = netutils.dll, Base = 0x72D80000, Top = 0x72D8A000, Size = 40960
Name = srvcli.dll, Base = 0x72D90000, Top = 0x72DAC000, Size = 114688
Name = wkscli.dll, Base = 0x734D0000, Top = 0x734E0000, Size = 65536
Name = AcroPDF.dll, Base = 0x5B500000, Top = 0x5B5A0000, Size = 655360
Name = MSVCP100.dll, Base = 0x722C0000, Top = 0x72329000, Size = 430080
Name = MPR.dll, Base = 0x6C350000, Top = 0x6C367000, Size = 94208
Name = MSVCR100.dll, Base = 0x72200000, Top = 0x722BF000, Size = 782336
Name = windowscodecsext.dll, Base = 0x63D20000, Top = 0x63D5F000, Size = 258048
Name = msxml6.dll, Base = 0x5D570000, Top = 0x5D759000, Size = 2002944
Name = jscript.dll, Base = 0x5B450000, Top = 0x5B4F3000, Size = 667648
Name = ActXPrxy.dll, Base = 0x66080000, Top = 0x66287000, Size = 2125824
Code Before:
00 00 00 00 EC 09 B4 63 80 D2 92 0C 14 D3 92 0C CF 45 B1 63
Current Code:
01 00 00 00 C0 A5 B2 63 4D 34 B2 63 D0 BF B2 63 EF AF 53 63
Call Stack:
63B145CF ===> qdisp.dll
Current Stack:
[0C92D26C] = 63B409EC
[0C92D270] = 0C92D280
[0C92D274] = 0C92D314
[0C92D278] = 63B145CF
[0C92D27C] = 00000001
[0C92D280] = 63B2A5C0
[0C92D284] = 63B2344D
[0C92D288] = 63B2BFD0
[0C92D28C] = 6353AFEF
[0C92D290] = FFFFFFFE
[0C92D294] = 63B17163
[0C92D298] = 00000014
[0C92D29C] = 63B233D2
[0C92D2A0] = 00000000
[0C92D2A4] = 63B23384
[0C92D2A8] = 0C751473
[0C92D2AC] = 00000000
[0C92D2B0] = 63B3FB08
[0C92D2B4] = 00000000
[0C92D2B8] = 8D00038E
[0C92D2BC] = 63B41990
[0C92D2C0] = 00000000
[0C92D2C4] = 00000000
[0C92D2C8] = 00000000
[0C92D2CC] = 00000000
[0C92D2D0] = 1AC00003
[0C92D2D4] = 00000001
[0C92D2D8] = 00000285
[0C92D2DC] = 00000002
[0C92D2E0] = 0000002A
[0C92D2E4] = 035304C8
[0C92D2E8] = 035304A0
[0C92D2EC] = 0C92D2A0
[0C92D2F0] = 00000009
[0C92D2F4] = 63B145C0
[0C92D2F8] = 00000044
[0C92D2FC] = 00000000
[0C92D300] = 0C751473
[0C92D304] = 0C92D280
[0C92D308] = 0C92D3A0
[0C92D30C] = 63B3D52E
[0C92D310] = 00000002
[0C92D314] = 0C92D3AC
[0C92D318] = 63B23BE5
[0C92D31C] = 63B3FB08
[0C92D320] = 00000001
[0C92D324] = 0C92D730
[0C92D328] = 0C92D370
[0C92D32C] = 0C92D394
[0C92D330] = 0C7514CB
[0C92D334] = 63B2385A
[0C92D338] = 0C92D730
[0C92D33C] = 0C92D3D8
[0C92D340] = 0000000A
[0C92D344] = 00000003
[0C92D348] = 002C0000
[0C92D34C] = 00000044
[0C92D350] = 00000000
[0C92D354] = 00000000
[0C92D358] = 00000000
[0C92D35C] = 00000000
[0C92D360] = 008201F8
[0C92D364] = 00000006
[0C92D368] = 0000001C
[0C92D36C] = 770FD2D9
[0C92D370] = 14DA6348
[0C92D374] = 00000000
[0C92D378] = 00000000
[0C92D37C] = 00000000
[0C92D380] = 5DD8DAB0
[0C92D384] = 8A5C5C13
[0C92D388] = 0C92D3BC
[0C92D38C] = 00000000
[0C92D390] = 035304A0
[0C92D394] = FFFFFFFF
[0C92D398] = 00000000
[0C92D39C] = 0C92D330
[0C92D3A0] = 0C92D7B4
[0C92D3A4] = 63B3D55B
[0C92D3A8] = 00000000
[0C92D3AC] = 0C92D4F4
[0C92D3B0] = 5DD7C70D
[0C92D3B4] = 00000001
[0C92D3B8] = 00000002
[0C92D3BC] = 5DD7229C
[0C92D3C0] = 00000409
[0C92D3C4] = 00000001
[0C92D3C8] = 00000000
[0C92D3CC] = 0C92D730
[0C92D3D0] = 0C92D428
[0C92D3D4] = 0C92D418
[0C92D3D8] = 035304B0
[0C92D3DC] = 00000000
[0C92D3E0] = 0C92D7E0
[0C92D3E4] = 0053028C
[0C92D3E8] = 06177428
[0C92D3EC] = 0E824E98
[0C92D3F0] = 00000000
[0C92D3F4] = 0C92D410
[0C92D3F8] = 035304B0
[0C92D3FC] = 00000000
[0C92D400] = 0E90B360
[0C92D404] = 742F0A46
[0C92D408] = 14DA6348
[0C92D40C] = 00000000
[0C92D410] = 00000000
[0C92D414] = 00000000
[0C92D418] = 03530260
[0C92D41C] = 00000000
[0C92D420] = 03530000
[0C92D424] = 03530400
[0C92D428] = 00000000
[0C92D42C] = 00000000
[0C92D430] = 00000000
[0C92D434] = 00000000
[0C92D438] = 00000000
[0C92D43C] = 00000000
[0C92D440] = 00000000
[0C92D444] = 00000000
[0C92D448] = 03530260
[0C92D44C] = 0000001C
[0C92D450] = 03530260
[0C92D454] = 012F06CA
[0C92D458] = 00000001
[0C92D45C] = 63B4B6D4
[0C92D460] = 0C92D7B4
[0C92D464] = 77130D40
[0C92D468] = 861830B3
[0C92D46C] = FFFFFFFE
[0C92D470] = 0C92D4A4
[0C92D474] = 7713C650
[0C92D478] = 00000000
[0C92D47C] = 035304C8
[0C92D480] = 035304B0
[0C92D484] = 63B3FB98
[0C92D488] = 00000000
[0C92D48C] = C1F9706F
[0C92D490] = 035304C8
[0C92D494] = 0C92D4B4
[0C92D498] = 63B1A4F3
[0C92D49C] = 00000409
[0C92D4A0] = 00000001
[0C92D4A4] = 0C92D4B4
[0C92D4A8] = 770FC72C
[0C92D4AC] = 00000000
[0C92D4B0] = FFFFFFFF
[0C92D4B4] = 0C92D4C8
[0C92D4B8] = 63B2C17B
[0C92D4BC] = 03530000
[0C92D4C0] = 00000000
[0C92D4C4] = 035304C8
[0C92D4C8] = 0C92D4D4
[0C92D4CC] = 63B17D5C
[0C92D4D0] = 035304C8
[0C92D4D4] = 0C92D4F0
[0C92D4D8] = 63B112BB
[0C92D4DC] = 035304C8
[0C92D4E0] = 00000040
[0C92D4E4] = 035304B0
[0C92D4E8] = 0E824E98
[0C92D4EC] = 8A5C5C7F
[0C92D4F0] = 00001F80
[0C92D4F4] = 0C92D774
[0C92D4F8] = 5DD7E966
[0C92D4FC] = 00000002
[0C92D500] = 00000001
[0C92D504] = 0C92D730
[0C92D508] = 00000000
[0C92D50C] = 14DA6348
[0C92D510] = 06177428
[0C92D514] = 00000000
[0C92D518] = 0C92D7E0
[0C92D51C] = 57000453
[0C92D520] = 00000046
[0C92D524] = 14DA5D48
[0C92D528] = 01313CF0
[0C92D52C] = 0000077F
[0C92D530] = 013100C0
[0C92D534] = 0C92D57C
[0C92D538] = 77117B7D
[0C92D53C] = 00000001
[0C92D540] = 000007FF
[0C92D544] = 00002759
[0C92D548] = 14D89B00
[0C92D54C] = 01310000
[0C92D550] = 00000000
[0C92D554] = 5DD86F41
[0C92D558] = 0000077F
[0C92D55C] = 00001DFC
[0C92D560] = 0C92D584
[0C92D564] = 00002759
[0C92D568] = 00002759
[0C92D56C] = 00000000
[0C92D570] = 00002759
[0C92D574] = 14B10000
[0C92D578] = 00000001
[0C92D57C] = 0C92D5C8
[0C92D580] = 77117638
[0C92D584] = 00000000
[0C92D588] = 01310000