v3590
QMacroNE.Document
QMacro Document
Type = 0xC0000005
Address = 0x32F2F7E
Registers:
EAX=00000000 EBX=00000000 ECX=00000000 EDX=7C92E4F4
ESI=003C49B8 EDI=0012FC5C ESP=0012FC0C EBP=0012FC88
Current Modules:
Name = Play.exe, Base = 0x400000, Top = 0x7D5000
Name = ntdll.dll, Base = 0x7C920000, Top = 0x7C9B3000
Name = kernel32.dll, Base = 0x7C800000, Top = 0x7C91E000
Name = MFC42.DLL, Base = 0x73D30000, Top = 0x73E2E000
Name = msvcrt.dll, Base = 0x77BE0000, Top = 0x77C38000
Name = GDI32.dll, Base = 0x77EF0000, Top = 0x77F39000
Name = USER32.dll, Base = 0x77D10000, Top = 0x77DA0000
Name = ADVAPI32.dll, Base = 0x77DA0000, Top = 0x77E49000
Name = RPCRT4.dll, Base = 0x77E50000, Top = 0x77EE2000
Name = Secur32.dll, Base = 0x77FC0000, Top = 0x77FD1000
Name = SHELL32.dll, Base = 0x7D590000, Top = 0x7DD84000
Name = SHLWAPI.dll, Base = 0x77F40000, Top = 0x77FB6000
Name = COMCTL32.dll, Base = 0x5D170000, Top = 0x5D20A000
Name = ole32.dll, Base = 0x76990000, Top = 0x76ACD000
Name = OLEPRO32.DLL, Base = 0x5EFE0000, Top = 0x5EFF7000
Name = OLEAUT32.dll, Base = 0x770F0000, Top = 0x7717B000
Name = MSVCP60.dll, Base = 0x75FF0000, Top = 0x76055000
Name = RECOMP.dll, Base = 0x10000000, Top = 0x10033000
Name = helper.dll, Base = 0x390000, Top = 0x3A1000
Name = BException.dll, Base = 0x3B0000, Top = 0x3BD000
Name = VERSION.dll, Base = 0x77BD0000, Top = 0x77BD8000
Name = WS2_32.dll, Base = 0x71A20000, Top = 0x71A37000
Name = WS2HELP.dll, Base = 0x71A10000, Top = 0x71A18000
Name = WININET.dll, Base = 0x76680000, Top = 0x76726000
Name = CRYPT32.dll, Base = 0x765E0000, Top = 0x76673000
Name = MSASN1.dll, Base = 0x76DB0000, Top = 0x76DC2000
Name = WINMM.dll, Base = 0x76B10000, Top = 0x76B3A000
Name = IMM32.DLL, Base = 0x76300000, Top = 0x7631D000
Name = LPK.DLL, Base = 0x62C20000, Top = 0x62C29000
Name = USP10.dll, Base = 0x73FA0000, Top = 0x7400B000
Name = kmon.dll, Base = 0x60000000, Top = 0x60074000
Name = MFC42LOC.DLL, Base = 0x61BE0000, Top = 0x61BED000
Name = comctl32.dll, Base = 0x77180000, Top = 0x77283000
Name = comx3.dll, Base = 0xDF0000, Top = 0xE1E000
Name = Syslay.dll, Base = 0xE30000, Top = 0xE49000
Name = Wtsapi32.dll, Base = 0x76F20000, Top = 0x76F28000
Name = WINSTA.dll, Base = 0x762D0000, Top = 0x762E0000
Name = NETAPI32.dll, Base = 0x5FDD0000, Top = 0x5FE25000
Name = urlmon.dll, Base = 0x75C60000, Top = 0x75D00000
Name = ijt_base.dll, Base = 0x70000000, Top = 0x70019000
Name = olemon.dll, Base = 0x75000000, Top = 0x7500F000
Name = UxTheme.dll, Base = 0x5ADC0000, Top = 0x5ADF7000
Name = MSCTF.dll, Base = 0x74680000, Top = 0x746CC000
Name = safemon.dll, Base = 0xFA0000, Top = 0xFC9000
Name = PSAPI.DLL, Base = 0x76BC0000, Top = 0x76BCB000
Name = zmrn.dll, Base = 0xFD0000, Top = 0xFE1000
Name = wsock32.dll, Base = 0x71A40000, Top = 0x71A4B000
Name = RASAPI32.DLL, Base = 0x76EB0000, Top = 0x76EEC000
Name = rasman.dll, Base = 0x76E60000, Top = 0x76E72000
Name = TAPI32.dll, Base = 0x76E80000, Top = 0x76EAF000
Name = rtutils.dll, Base = 0x76E50000, Top = 0x76E5E000
Name = msv1_0.dll, Base = 0x77C40000, Top = 0x77C64000
Name = iphlpapi.dll, Base = 0x76D30000, Top = 0x76D48000
Name = USERENV.dll, Base = 0x759D0000, Top = 0x75A7F000
Name = mswsock.dll, Base = 0x719C0000, Top = 0x719FE000
Name = DNSAPI.dll, Base = 0x76EF0000, Top = 0x76F17000
Name = rasadhlp.dll, Base = 0x76F90000, Top = 0x76F96000
Name = xunyount.dll, Base = 0x1560000, Top = 0x157C000
Name = hnetcfg.dll, Base = 0x60FD0000, Top = 0x61025000
Name = wshtcpip.dll, Base = 0x71A00000, Top = 0x71A08000
Name = CLBCATQ.DLL, Base = 0x76FA0000, Top = 0x7701F000
Name = COMRes.dll, Base = 0x77020000, Top = 0x770BA000
Name = msctfime.ime, Base = 0x73640000, Top = 0x7366E000
Name = xpsp2res.dll, Base = 0x16E0000, Top = 0x1C29000
Name = shdocvw.dll, Base = 0x7E550000, Top = 0x7E6C1000
Name = CRYPTUI.dll, Base = 0x75430000, Top = 0x754A1000
Name = WINTRUST.dll, Base = 0x76C00000, Top = 0x76C2E000
Name = IMAGEHLP.dll, Base = 0x76C60000, Top = 0x76C88000
Name = WLDAP32.dll, Base = 0x76F30000, Top = 0x76F5C000
Name = msimg32.dll, Base = 0x762F0000, Top = 0x762F5000
Name = shdoclc.dll, Base = 0x71800000, Top = 0x7187C000
Name = mlang.dll, Base = 0x74CF0000, Top = 0x74D81000
Name = SXS.DLL, Base = 0x75E00000, Top = 0x75EAE000
Name = appHelp.dll, Base = 0x76D70000, Top = 0x76D92000
Name = mshtml.dll, Base = 0x7E210000, Top = 0x7E508000
Name = msls31.dll, Base = 0x74620000, Top = 0x74647000
Name = msimtf.dll, Base = 0x74650000, Top = 0x7467A000
Name = RavScrCh.dll, Base = 0x21E0000, Top = 0x21F6000
Name = MSVCP71.dll, Base = 0x7C3A0000, Top = 0x7C41B000
Name = MSVCR71.dll, Base = 0x7C340000, Top = 0x7C396000
Name = jscript.dll, Base = 0x75BC0000, Top = 0x75C3D000
Name = vbscript.dll, Base = 0x73270000, Top = 0x732D9000
==>
Name = cooper.dll, Base = 0x32F0000, Top = 0x3359000
Name = winrnr.dll, Base = 0x76F80000, Top = 0x76F88000
Name = SETUPAPI.dll, Base = 0x76060000, Top = 0x761B6000
Code Before:
E8 EB 76 00 00 3B C3 74 09 8B 10 8B C8 FF 52 7C EB 02 33 C0
Current Code:
8B 40 20 53 53 6A 02 50 FF 15 20 D5 2F 03 53 FF 15 28 D5 2F
Call Stack:
73D32047
73D31B9B
73D31B05
73D31A58
032FA9A2
77D18734
77D18816
77D189CD
77D196C7
73D3125A
00000465
