MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
MyMacroBasic7.01.4239
Type = 0xC0000005
Address = 0x63B6BB9F
Registers:
EAX=00000000 EBX=00804065 ECX=00000003 EDX=00000074
ESI=0080CE20 EDI=059E8740 ESP=05C5FDDC EBP=05C5FE8C
Current Modules:
Name = LJ.exe, Base = 0x400000, Top = 0x5B7000, Size = 1798144
Name = ntdll.dll, Base = 0x77D90000, Top = 0x77F10000, Size = 1572864
Name = kernel32.dll, Base = 0x76ED0000, Top = 0x76FE0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x77620000, Top = 0x77667000, Size = 290816
Name = MFC42.DLL, Base = 0x71A30000, Top = 0x71B4C000, Size = 1163264
Name = msvcrt.dll, Base = 0x776B0000, Top = 0x7775C000, Size = 704512
Name = USER32.dll, Base = 0x76060000, Top = 0x76160000, Size = 1048576
Name = GDI32.dll, Base = 0x755E0000, Top = 0x75670000, Size = 589824
Name = LPK.dll, Base = 0x77D60000, Top = 0x77D6A000, Size = 40960
Name = USP10.dll, Base = 0x756A0000, Top = 0x7573D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x761A0000, Top = 0x76241000, Size = 659456
Name = sechost.dll, Base = 0x77290000, Top = 0x772A9000, Size = 102400
Name = RPCRT4.dll, Base = 0x77360000, Top = 0x77450000, Size = 983040
Name = SspiCli.dll, Base = 0x75250000, Top = 0x752B0000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x75240000, Top = 0x7524C000, Size = 49152
Name = ole32.dll, Base = 0x75D60000, Top = 0x75EBC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x77140000, Top = 0x771CF000, Size = 585728
Name = ODBC32.dll, Base = 0x719A0000, Top = 0x71A2C000, Size = 573440
Name = SHELL32.dll, Base = 0x76250000, Top = 0x76E9B000, Size = 12890112
Name = SHLWAPI.dll, Base = 0x75580000, Top = 0x755D7000, Size = 356352
Name = COMCTL32.dll, Base = 0x750B0000, Top = 0x75134000, Size = 540672
Name = urlmon.dll, Base = 0x774D0000, Top = 0x7761A000, Size = 1351680
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x77270000, Top = 0x77274000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x77280000, Top = 0x77284000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x776A0000, Top = 0x776A5000, Size = 20480
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x75690000, Top = 0x75694000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x75740000, Top = 0x75744000, Size = 16384
Name = version.DLL, Base = 0x75170000, Top = 0x75179000, Size = 36864
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x75F40000, Top = 0x75F43000, Size = 12288
Name = normaliz.DLL, Base = 0x75670000, Top = 0x75673000, Size = 12288
Name = iertutil.dll, Base = 0x75B10000, Top = 0x75D44000, Size = 2310144
Name = WININET.dll, Base = 0x75890000, Top = 0x75A9D000, Size = 2150400
Name = USERENV.dll, Base = 0x77250000, Top = 0x77267000, Size = 94208
Name = profapi.dll, Base = 0x75D50000, Top = 0x75D5B000, Size = 45056
Name = MSVCP60.dll, Base = 0x64B10000, Top = 0x64B76000, Size = 417792
Name = WS2_32.dll, Base = 0x75F50000, Top = 0x75F85000, Size = 217088
Name = NSI.dll, Base = 0x76190000, Top = 0x76196000, Size = 24576
Name = WINMM.dll, Base = 0x75ED0000, Top = 0x75F02000, Size = 204800
Name = IMM32.DLL, Base = 0x77760000, Top = 0x777C0000, Size = 393216
Name = MSCTF.dll, Base = 0x75F90000, Top = 0x7605C000, Size = 835584
Name = odbcint.dll, Base = 0x71960000, Top = 0x71998000, Size = 229376
Name = UxTheme.dll, Base = 0x70B10000, Top = 0x70B90000, Size = 524288
Name = dwmapi.dll, Base = 0x77340000, Top = 0x77353000, Size = 77824
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x6F680000, Top = 0x6F684000, Size = 16384
Name = Secur32.dll, Base = 0x724C0000, Top = 0x724C8000, Size = 32768
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x738D0000, Top = 0x738D4000, Size = 16384
Name = mswsock.dll, Base = 0x74E40000, Top = 0x74E7C000, Size = 245760
Name = wship6.dll, Base = 0x74E20000, Top = 0x74E26000, Size = 24576
Name = IPHLPAPI.DLL, Base = 0x75150000, Top = 0x7516C000, Size = 114688
Name = WINNSI.DLL, Base = 0x75140000, Top = 0x75147000, Size = 28672
Name = DNSAPI.dll, Base = 0x74DD0000, Top = 0x74E14000, Size = 278528
Name = CLBCatQ.DLL, Base = 0x777C0000, Top = 0x77843000, Size = 536576
Name = netprofm.dll, Base = 0x6DC90000, Top = 0x6DCEA000, Size = 368640
Name = nlaapi.dll, Base = 0x74DC0000, Top = 0x74DD0000, Size = 65536
Name = dhcpcsvc6.DLL, Base = 0x74D70000, Top = 0x74D7D000, Size = 53248
Name = CRYPTSP.dll, Base = 0x74EE0000, Top = 0x74EF7000, Size = 94208
Name = wshtcpip.dll, Base = 0x74E30000, Top = 0x74E35000, Size = 20480
Name = rasadhlp.dll, Base = 0x74D60000, Top = 0x74D66000, Size = 24576
Name = rsaenh.dll, Base = 0x74EA0000, Top = 0x74EDB000, Size = 241664
Name = RpcRtRemote.dll, Base = 0x72570000, Top = 0x7257E000, Size = 57344
Name = dhcpcsvc.DLL, Base = 0x74E80000, Top = 0x74E92000, Size = 73728
Name = npmproxy.dll, Base = 0x6F660000, Top = 0x6F668000, Size = 32768
Name = ieframe.dll, Base = 0x6BB20000, Top = 0x6C852000, Size = 13836288
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x70F00000, Top = 0x70F04000, Size = 16384
Name = comctl32.dll, Base = 0x71E50000, Top = 0x71FEE000, Size = 1695744
Name = fwpuclnt.dll, Base = 0x74D20000, Top = 0x74D58000, Size = 229376
Name = yzjeto.dll, Base = 0x10000000, Top = 0x1000E000, Size = 57344
Name = SXS.DLL, Base = 0x709C0000, Top = 0x70A1F000, Size = 389120
Name = apphelp.dll, Base = 0x71DA0000, Top = 0x71DEC000, Size = 311296
==>
Name = mshtml.dll, Base = 0x63190000, Top = 0x64600000, Size = 21430272
Name = MLANG.dll, Base = 0x6AA80000, Top = 0x6AAAE000, Size = 188416
Name = PROPSYS.dll, Base = 0x71C00000, Top = 0x71CF5000, Size = 1003520
Name = msimtf.dll, Base = 0x70F20000, Top = 0x70F2B000, Size = 45056
Name = OLEACC.DLL, Base = 0x70A80000, Top = 0x70ABC000, Size = 245760
Name = jscript9.dll, Base = 0x65960000, Top = 0x65DCE000, Size = 4644864
Name = Flash32_22_0_0_192.ocx, Base = 0x61930000, Top = 0x62CCD000, Size = 20566016
Name = CRYPT32.dll, Base = 0x75450000, Top = 0x75571000, Size = 1183744
Name = MSASN1.dll, Base = 0x75EC0000, Top = 0x75ECC000, Size = 49152
Name = DSOUND.dll, Base = 0x771D0000, Top = 0x77242000, Size = 466944
Name = POWRPROF.dll, Base = 0x75F10000, Top = 0x75F35000, Size = 151552
Name = SETUPAPI.dll, Base = 0x752B0000, Top = 0x7544D000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x76EA0000, Top = 0x76EC7000, Size = 159744
Name = DEVOBJ.dll, Base = 0x75AF0000, Top = 0x75B02000, Size = 73728
Name = MSIMG32.dll, Base = 0x72440000, Top = 0x72445000, Size = 20480
Name = COMDLG32.dll, Base = 0x77450000, Top = 0x774CB000, Size = 503808
Name = mscms.dll, Base = 0x68420000, Top = 0x68499000, Size = 495616
Name = PSAPI.DLL, Base = 0x75680000, Top = 0x75685000, Size = 20480
Name = dinput8.dll, Base = 0x683F0000, Top = 0x68420000, Size = 196608
Name = msls31.dll, Base = 0x687B0000, Top = 0x687E1000, Size = 200704
Name = d2d1.dll, Base = 0x689C0000, Top = 0x68D07000, Size = 3436544
Name = DWrite.dll, Base = 0x68880000, Top = 0x689B6000, Size = 1269760
Name = dxgi.dll, Base = 0x6A6C0000, Top = 0x6A70C000, Size = 311296
Name = WINTRUST.dll, Base = 0x77670000, Top = 0x7769F000, Size = 192512
Name = d3d11.dll, Base = 0x69310000, Top = 0x69485000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x65770000, Top = 0x65959000, Size = 2002944
Name = XmlLite.dll, Base = 0x6D5F0000, Top = 0x6D61F000, Size = 192512
Name = windowscodecs.dll, Base = 0x74290000, Top = 0x743C1000, Size = 1249280
Name = Dxtrans.dll, Base = 0x68720000, Top = 0x68768000, Size = 294912
Name = ATL.DLL, Base = 0x6DE80000, Top = 0x6DE94000, Size = 81920
Name = ddrawex.dll, Base = 0x70EA0000, Top = 0x70EAA000, Size = 40960
Name = DDRAW.dll, Base = 0x76FE0000, Top = 0x770C7000, Size = 946176
Name = DCIMAN32.dll, Base = 0x770D0000, Top = 0x770D6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x684A0000, Top = 0x68508000, Size = 425984
Name = ntmarta.dll, Base = 0x70AD0000, Top = 0x70AF1000, Size = 135168
Name = WLDAP32.dll, Base = 0x75AA0000, Top = 0x75AE5000, Size = 282624
Code Before:
E8 EF EE 79 00 8B 55 F4 E9 FD 20 F7 FF 8B 07 89 65 B0 6A 00
Current Code:
8B 18 8B CB FF 15 A0 AF 44 64 8B CF FF D3 39 65 B0 74 07 B9
Call Stack:
63AE948B ===> mshtml.dll
Current Stack:
[05C5FDDC] = 00000000
[05C5FDE0] = 00200000
[05C5FDE4] = 0081677C
[05C5FDE8] = 000042D4
[05C5FDEC] = 0081677C
[05C5FDF0] = 00811244
[05C5FDF4] = 00816D8C
[05C5FDF8] = 0080CE20
[05C5FDFC] = 0081677C
[05C5FE00] = 00811288
[05C5FE04] = 00811298
[05C5FE08] = 00620000
[05C5FE0C] = 0081677C
[05C5FE10] = 008111FC
[05C5FE14] = 0081120C
[05C5FE18] = 00620000
[05C5FE1C] = 0081677C
[05C5FE20] = 00811288
[05C5FE24] = 00816F90
[05C5FE28] = 0080CE20
[05C5FE2C] = 0081677C
[05C5FE30] = 00811244
[05C5FE34] = 00811254
[05C5FE38] = 00620000
[05C5FE3C] = 05C5FDE0
[05C5FE40] = 0081677C
[05C5FE44] = 008111FC
[05C5FE48] = 00816B88
[05C5FE4C] = 0080CE20
[05C5FE50] = 00000000
[05C5FE54] = 00000002
[05C5FE58] = 00816994
[05C5FE5C] = 008112D0
[05C5FE60] = 00025D00
[05C5FE64] = 008110F4
[05C5FE68] = 0081C8A8
[05C5FE6C] = 0000001F
[05C5FE70] = 000000C6
[05C5FE74] = 0080CE20
[05C5FE78] = 00000020
[05C5FE7C] = 00804065
[05C5FE80] = 00000074
[05C5FE84] = 00811398
[05C5FE88] = 008040A0
[05C5FE8C] = 05C5FEA8
[05C5FE90] = 63AE948B
[05C5FE94] = 0081677C
[05C5FE98] = 00000800
[05C5FE9C] = 0081677C
[05C5FEA0] = 0080CE20
[05C5FEA4] = 0081677C
[05C5FEA8] = 05C5FECC
[05C5FEAC] = 63AE9415
[05C5FEB0] = 00200000
[05C5FEB4] = 63AE8E5E
[05C5FEB8] = 0080CE20
[05C5FEBC] = 00817B34
[05C5FEC0] = 00000002
[05C5FEC4] = 0080CE20
[05C5FEC8] = 7EFDE000
[05C5FECC] = 05C5FF10
[05C5FED0] = 63AE8C1B
[05C5FED4] = 77631776
[05C5FED8] = 00000000
[05C5FEDC] = 00000000
[05C5FEE0] = 0081D818
[05C5FEE4] = 00000000
[05C5FEE8] = FFFFFFFF
[05C5FEEC] = 63190000
[05C5FEF0] = FFFFFFFF
[05C5FEF4] = 00000440
[05C5FEF8] = 0000043C
[05C5FEFC] = 00000000
[05C5FF00] = 00000000
[05C5FF04] = 00000000
[05C5FF08] = 00000000
[05C5FF0C] = 44EDA942
[05C5FF10] = 05C5FF48
[05C5FF14] = 63AEAF6C
[05C5FF18] = 44EDA8EE
[05C5FF1C] = 00000000
[05C5FF20] = 00000000
[05C5FF24] = 0081D818
[05C5FF28] = 05C5F804
[05C5FF2C] = FFFFFFFF
[05C5FF30] = 05C5FF18
[05C5FF34] = 05C5F804
[05C5FF38] = 05C5FF70
[05C5FF3C] = 63B07F00
[05C5FF40] = 2286F8DE
[05C5FF44] = 00000000
[05C5FF48] = 05C5FF80
[05C5FF4C] = 776C1287
[05C5FF50] = 0080CE20
[05C5FF54] = 44BE86D4
[05C5FF58] = 00000000
[05C5FF5C] = 00000000
[05C5FF60] = 0081D818
[05C5FF64] = C0000005
[05C5FF68] = 05C5FF54
