|
|
发表于 2023-10-7 13:06:41
|
显示全部楼层
简单百宝箱版本 7.4.1046正式版
Environment = 1920x1080|32|Windows 10 Enterprise
Type = 0xC0000005
Address = 0x632AF9CE
LineNum = 0(0)
Registers:
EAX=007AAD20 EBX=05110A20 ECX=007AC9D0 EDX=00000000
ESI=00000030 EDI=05110A20 ESP=0019E528 EBP=0019E7C4
Current Modules:
Name = 简单百宝箱.exe, Base = 0x400000, Top = 0x470000, Size = 458752
Name = ntdll.dll, Base = 0x77120000, Top = 0x772C4000, Size = 1720320
Name = KERNEL32.DLL, Base = 0x75A30000, Top = 0x75B20000, Size = 983040
Name = KERNELBASE.dll, Base = 0x76B90000, Top = 0x76DCA000, Size = 2334720
Name = MSVCRT.dll, Base = 0x76040000, Top = 0x760FF000, Size = 782336
Name = SHELL32.dll, Base = 0x753A0000, Top = 0x75957000, Size = 5992448
Name = msvcp_win.dll, Base = 0x766B0000, Top = 0x7672B000, Size = 503808
Name = ucrtbase.dll, Base = 0x76F40000, Top = 0x77060000, Size = 1179648
Name = USER32.dll, Base = 0x76100000, Top = 0x7629C000, Size = 1687552
Name = win32u.dll, Base = 0x75200000, Top = 0x75218000, Size = 98304
Name = GDI32.dll, Base = 0x765A0000, Top = 0x765C4000, Size = 147456
Name = gdi32full.dll, Base = 0x752B0000, Top = 0x75398000, Size = 950272
Name = gdiplus.dll, Base = 0x730C0000, Top = 0x73227000, Size = 1470464
Name = combase.dll, Base = 0x767B0000, Top = 0x76A30000, Size = 2621440
Name = RPCRT4.dll, Base = 0x76A30000, Top = 0x76AEF000, Size = 782336
Name = dbghelp.dll, Base = 0x72DB0000, Top = 0x72F38000, Size = 1605632
Name = MFC42.DLL, Base = 0x64790000, Top = 0x648B4000, Size = 1196032
Name = OLEAUT32.dll, Base = 0x75100000, Top = 0x75196000, Size = 614400
Name = OLE32.dll, Base = 0x76430000, Top = 0x76513000, Size = 929792
Name = IMM32.DLL, Base = 0x765D0000, Top = 0x765F5000, Size = 151552
Name = kernel.appcore.dll, Base = 0x74060000, Top = 0x7406F000, Size = 61440
Name = bcryptPrimitives.dll, Base = 0x77060000, Top = 0x770BF000, Size = 389120
Name = uxtheme.dll, Base = 0x70C00000, Top = 0x70C74000, Size = 475136
Name = WS2_32.dll, Base = 0x76730000, Top = 0x76793000, Size = 405504
Name = windows.storage.dll, Base = 0x748A0000, Top = 0x74EB3000, Size = 6369280
Name = Wldp.dll, Base = 0x74870000, Top = 0x74895000, Size = 151552
Name = advapi32.dll, Base = 0x76B10000, Top = 0x76B8B000, Size = 503808
Name = sechost.dll, Base = 0x763B0000, Top = 0x76426000, Size = 483328
Name = shcore.dll, Base = 0x75070000, Top = 0x750F7000, Size = 552960
Name = clbcatq.dll, Base = 0x76520000, Top = 0x7659E000, Size = 516096
Name = shlwapi.dll, Base = 0x76600000, Top = 0x76645000, Size = 282624
Name = CFGMGR32.dll, Base = 0x75960000, Top = 0x7599B000, Size = 241664
Name = propsys.dll, Base = 0x6DEF0000, Top = 0x6DFB2000, Size = 794624
Name = MainFrame.dll, Base = 0x10000000, Top = 0x10194000, Size = 1654784
Name = COMCTL32.dll, Base = 0x74700000, Top = 0x7478D000, Size = 577536
Name = WININET.dll, Base = 0x74260000, Top = 0x746B5000, Size = 4542464
Name = MSVCP60.dll, Base = 0x68BC0000, Top = 0x68C30000, Size = 458752
Name = Definition.dll, Base = 0xB00000, Top = 0xB07000, Size = 28672
Name = Msimg32.dll, Base = 0x72F40000, Top = 0x72F46000, Size = 24576
Name = MSCTF.dll, Base = 0x75F60000, Top = 0x76034000, Size = 868352
Name = ieframe.dll, Base = 0x64150000, Top = 0x6478D000, Size = 6541312
Name = iertutil.dll, Base = 0x6EB60000, Top = 0x6ED96000, Size = 2318336
Name = NETAPI32.dll, Base = 0x74790000, Top = 0x747A4000, Size = 81920
Name = VERSION.dll, Base = 0x74FB0000, Top = 0x74FB8000, Size = 32768
Name = USERENV.dll, Base = 0x74EE0000, Top = 0x74F05000, Size = 151552
Name = WINHTTP.dll, Base = 0x71040000, Top = 0x7110A000, Size = 827392
Name = NETUTILS.DLL, Base = 0x74170000, Top = 0x7417B000, Size = 45056
Name = WKSCLI.DLL, Base = 0x74120000, Top = 0x74133000, Size = 77824
Name = comctl32.dll, Base = 0x73230000, Top = 0x73440000, Size = 2162688
Name = urlmon.dll, Base = 0x6F050000, Top = 0x6F1F9000, Size = 1740800
Name = srvcli.dll, Base = 0x72550000, Top = 0x7256E000, Size = 122880
Name = sxs.dll, Base = 0x6C030000, Top = 0x6C0B7000, Size = 552960
Name = iphlpapi.dll, Base = 0x746C0000, Top = 0x746F2000, Size = 204800
Name = NSI.dll, Base = 0x759A0000, Top = 0x759A7000, Size = 28672
Name = dhcpcsvc.DLL, Base = 0x73D30000, Top = 0x73D46000, Size = 90112
Name = Loading.dll, Base = 0x2BB0000, Top = 0x2BDC000, Size = 180224
Name = OLEPRO32.DLL, Base = 0x72060000, Top = 0x72079000, Size = 102400
Name = FloatingWnd.dll, Base = 0x2BE0000, Top = 0x2BFC000, Size = 114688
Name = Setting.dll, Base = 0x2C00000, Top = 0x2C25000, Size = 151552
Name = ToolManagement.dll, Base = 0x2D60000, Top = 0x2DD2000, Size = 466944
Name = GuessYouLike.dll, Base = 0x2DE0000, Top = 0x2E01000, Size = 135168
Name = JdbbxTop.dll, Base = 0x2E10000, Top = 0x2E8E000, Size = 516096
Name = WebFrame.dll, Base = 0x2E90000, Top = 0x2ED0000, Size = 262144
Name = SspiCli.dll, Base = 0x72A80000, Top = 0x72AA1000, Size = 135168
Name = profapi.dll, Base = 0x73E30000, Top = 0x73E4C000, Size = 114688
Name = WindowsCodecs.dll, Base = 0x71D50000, Top = 0x71EC1000, Size = 1511424
Name = bcrypt.dll, Base = 0x76AF0000, Top = 0x76B09000, Size = 102400
Name = ondemandconnroutehelper.dll, Base = 0x6E620000, Top = 0x6E632000, Size = 73728
Name = mswsock.dll, Base = 0x73610000, Top = 0x73662000, Size = 335872
Name = WINNSI.DLL, Base = 0x70B10000, Top = 0x70B18000, Size = 32768
Name = textinputframework.dll, Base = 0x6BCC0000, Top = 0x6BD7A000, Size = 761856
Name = CoreMessaging.dll, Base = 0x6BC20000, Top = 0x6BCBB000, Size = 634880
Name = CoreUIComponents.dll, Base = 0x6B9A0000, Top = 0x6BC1E000, Size = 2613248
Name = ntmarta.dll, Base = 0x74030000, Top = 0x74059000, Size = 167936
Name = wintypes.dll, Base = 0x6B8C0000, Top = 0x6B99C000, Size = 901120
Name = coml2.dll, Base = 0x76650000, Top = 0x766AE000, Size = 385024
Name = asycfilt.dll, Base = 0x71ED0000, Top = 0x71EE6000, Size = 90112
Name = DNSAPI.dll, Base = 0x73530000, Top = 0x735C0000, Size = 589824
Name = rasadhlp.dll, Base = 0x73440000, Top = 0x73448000, Size = 32768
Name = dataexchange.dll, Base = 0x6D0C0000, Top = 0x6D0F1000, Size = 200704
Name = dcomp.dll, Base = 0x6CF50000, Top = 0x6D0B4000, Size = 1458176
Name = d3d11.dll, Base = 0x70400000, Top = 0x705E0000, Size = 1966080
Name = dxgi.dll, Base = 0x70330000, Top = 0x703F2000, Size = 794624
Name = twinapi.appcore.dll, Base = 0x6CDB0000, Top = 0x6CF44000, Size = 1654784
Name = fwpuclnt.dll, Base = 0x725A0000, Top = 0x725F9000, Size = 364544
Name = RICHED32.DLL, Base = 0x71F40000, Top = 0x71F46000, Size = 24576
Name = RICHED20.dll, Base = 0x70B80000, Top = 0x70BFA000, Size = 499712
Name = msls31.dll, Base = 0x70B40000, Top = 0x70B71000, Size = 200704
Name = USP10.dll, Base = 0x70D70000, Top = 0x70D87000, Size = 94208
Name = msIso.dll, Base = 0x68B10000, Top = 0x68B56000, Size = 286720
==>
Name = MSHTML.dll, Base = 0x62EF0000, Top = 0x64143000, Size = 19214336
Name = powrprof.dll, Base = 0x72D50000, Top = 0x72D94000, Size = 278528
Name = UMPDC.dll, Base = 0x726A0000, Top = 0x726AD000, Size = 53248
Name = CRYPTBASE.DLL, Base = 0x73D20000, Top = 0x73D2A000, Size = 40960
Name = edputil.dll, Base = 0x68AF0000, Top = 0x68B0B000, Size = 110592
Name = virtdisk.dll, Base = 0x6C6A0000, Top = 0x6C6AF000, Size = 61440
Name = FLTLIB.DLL, Base = 0x73510000, Top = 0x73518000, Size = 32768
Name = Windows.StateRepositoryPS.dll, Base = 0x68EF0000, Top = 0x68F83000, Size = 602112
Name = appresolver.dll, Base = 0x68E70000, Top = 0x68EE1000, Size = 462848
Name = Bcp47Langs.dll, Base = 0x68E00000, Top = 0x68E48000, Size = 294912
Name = SLC.dll, Base = 0x68E50000, Top = 0x68E6F000, Size = 126976
Name = sppc.dll, Base = 0x68DE0000, Top = 0x68DFC000, Size = 114688
Name = OneCoreCommonProxyStub.dll, Base = 0x68AB0000, Top = 0x68AED000, Size = 249856
Name = OneCoreUAPCommonProxyStub.dll, Base = 0x62B30000, Top = 0x62EEA000, Size = 3907584
Name = srpapi.dll, Base = 0x68790000, Top = 0x687B5000, Size = 151552
Name = CRYPT32.dll, Base = 0x762A0000, Top = 0x763A0000, Size = 1048576
Name = pcacli.dll, Base = 0x68770000, Top = 0x68781000, Size = 69632
Name = MPR.dll, Base = 0x73930000, Top = 0x73949000, Size = 102400
Name = sfc_os.dll, Base = 0x6DFC0000, Top = 0x6DFD0000, Size = 65536
Name = SETUPAPI.dll, Base = 0x75B20000, Top = 0x75F58000, Size = 4423680
Name = mlang.dll, Base = 0x6FA40000, Top = 0x6FA74000, Size = 212992
Name = msimtf.dll, Base = 0x6B3E0000, Top = 0x6B3EE000, Size = 57344
Name = vaultcli.dll, Base = 0x62720000, Top = 0x62757000, Size = 225280
Name = Secur32.dll, Base = 0x72DA0000, Top = 0x72DAA000, Size = 40960
Name = jscript9.dll, Base = 0x62360000, Top = 0x62716000, Size = 3891200
Name = d2d1.dll, Base = 0x705E0000, Top = 0x70AF5000, Size = 5328896
Name = DWrite.dll, Base = 0x6FB20000, Top = 0x6FD2C000, Size = 2146304
Name = d3d10warp.dll, Base = 0x6FD60000, Top = 0x70322000, Size = 6037504
Name = dxcore.dll, Base = 0x6FD30000, Top = 0x6FD5C000, Size = 180224
Name = TextShaping.dll, Base = 0x6CCE0000, Top = 0x6CD74000, Size = 606208
Name = uiautomationcore.dll, Base = 0x620E0000, Top = 0x62353000, Size = 2568192
Name = WINMM.dll, Base = 0x72CD0000, Top = 0x72CF8000, Size = 163840
Code Before:
DD D8 A1 2C AC F3 63 8B 04 81 8B 70 0C 83 C6 30 89 74 24 64
Current Code:
8B 4E 04 85 C9 75 76 8B 0D 78 AD F3 63 BA F4 00 00 00 E8 9B
Call Stack:
632AD8D6 ===> MSHTML.dll
Current Stack:
[0019E528] = 05110A20
[0019E52C] = 0019E860
[0019E530] = 00000005
[0019E534] = 00000070
[0019E538] = FF00FFFF
[0019E53C] = 0019E860
[0019E540] = 76137DFE
[0019E544] = 7613822F
[0019E548] = 00000000
[0019E54C] = 00000000
[0019E550] = FFF9FFFA
[0019E554] = 05110A20
[0019E558] = 80006010
[0019E55C] = 00000000
[0019E560] = 00000000
[0019E564] = 00060005
[0019E568] = 00000000
[0019E56C] = 00000000
[0019E570] = 0019E58C
[0019E574] = 00000000
[0019E578] = 00000000
[0019E57C] = 00000001
[0019E580] = 00000000
[0019E584] = FFFFFFFE
[0019E588] = 80006010
[0019E58C] = 00000030
[0019E590] = 632B1000
[0019E594] = 05110A20
[0019E598] = 00000000
[0019E59C] = 00000004
[0019E5A0] = 632B1339
[0019E5A4] = 00000000
[0019E5A8] = 00000000
[0019E5AC] = 0019E870
[0019E5B0] = 3F800000
[0019E5B4] = 05110A20
[0019E5B8] = 05110A64
[0019E5BC] = 00000001
[0019E5C0] = FFFFFFFA
[0019E5C4] = 3F800000
[0019E5C8] = 00000005
[0019E5CC] = 00000000
[0019E5D0] = 00F5ACF0
[0019E5D4] = 00000005
[0019E5D8] = 00000005
[0019E5DC] = 00000000
[0019E5E0] = 0019E5FC
[0019E5E4] = 00000000
[0019E5E8] = 00000000
[0019E5EC] = 00000000
[0019E5F0] = 05110A20
[0019E5F4] = 05110A20
[0019E5F8] = 00000001
[0019E5FC] = 00000000
[0019E600] = 0019E701
[0019E604] = 05110A20
[0019E608] = 00000004
[0019E60C] = 5479E1FD
[0019E610] = 00000000
[0019E614] = 00000000
[0019E618] = 00F5ACF0
[0019E61C] = 00000000
[0019E620] = 00030762
[0019E624] = 00000082
[0019E628] = 00000000
[0019E62C] = 70C2FC66
[0019E630] = 5479E249
[0019E634] = 0019DB28
[0019E638] = FFFFFFFF
[0019E63C] = 0019E834
[0019E640] = 7719ADE0
[0019E644] = 2342BBF5
[0019E648] = 00000005
[0019E64C] = 0019E740
[0019E650] = 7715BB8C
[0019E654] = 10000000
[0019E658] = 00F7F2EE
[0019E65C] = 0019E68C
[0019E660] = 0019E6A8
[0019E664] = 01080000
[0019E668] = C000008A
[0019E66C] = 0019E8A0
[0019E670] = 7715BC54
[0019E674] = 00000000
[0019E678] = 00F7F2EE
[0019E67C] = 00000001
[0019E680] = C00B0006
[0019E684] = 00000000
[0019E688] = 0019E898
[0019E68C] = 00000000
[0019E690] = 10000000
[0019E694] = 00000000
[0019E698] = 00000000
[0019E69C] = 0019E818
[0019E6A0] = 00000000
[0019E6A4] = 00000000
[0019E6A8] = 00000000
[0019E6AC] = 2342C4AD
[0019E6B0] = FFFFFFFE
[0019E6B4] = 0019E73C
[0019E6B8] = 7715F2EE
[0019E6BC] = 00000001
[0019E6C0] = 10000000
[0019E6C4] = 00000000
[0019E6C8] = 00000000
[0019E6CC] = 0019E710
[0019E6D0] = 5479E339
[0019E6D4] = 1005F000
[0019E6D8] = 0005F000
[0019E6DC] = 00080000
[0019E6E0] = 10000000
[0019E6E4] = 00000000
[0019E6E8] = 1005F000
[0019E6EC] = 00194000
[0019E6F0] = 00000000
[0019E6F4] = 00000000
[0019E6F8] = 0019E734
[0019E6FC] = 771A6FC7
[0019E700] = 00000016
[0019E704] = 1005F000
[0019E708] = 1005F048
[0019E70C] = 0019E733
[0019E710] = 10000000
[0019E714] = 00000000
[0019E718] = 00080000
[0019E71C] = 1005F048
[0019E720] = 00194000
[0019E724] = 00000000
[0019E728] = 1005F040
[0019E72C] = 00000000
[0019E730] = 0119ADE0
[0019E734] = 0019E844
[0019E738] = 7715D2F9
[0019E73C] = 5479E271
[0019E740] = 0019E844
[0019E744] = 7715D386
[0019E748] = 00000003
[0019E74C] = 01080000
[0019E750] = 0019E898
[0019E754] = 5479EC41
[0019E758] = 7FFE0385
[0019E75C] = 7FFE0384
[0019E760] = 7715D477
[0019E764] = 000036E4
[0019E768] = 00007D0A
[0019E76C] = 00000040
[0019E770] = 00000024
[0019E774] = 1005F018
[0019E778] = 00000000
[0019E77C] = 00000008
[0019E780] = 765BD4F8
[0019E784] = 0070ED10
[0019E788] = FF7D107C
[0019E78C] = 1005F000
[0019E790] = 000036E4
[0019E794] = 00000001
[0019E798] = 00000007
[0019E79C] = 00194000
[0019E7A0] = 00000000
[0019E7A4] = 00000000
[0019E7A8] = 10000000
[0019E7AC] = 000A7D0A
[0019E7B0] = 0019E8A4
[0019E7B4] = 00000000
[0019E7B8] = FFFF0007
[0019E7BC] = 5D52C025
[0019E7C0] = 00000000
[0019E7C4] = 0019E834
[0019E7C8] = 632AD8D6
[0019E7CC] = 0019E860
[0019E7D0] = 00000005
[0019E7D4] = 00060000
[0019E7D8] = 00000000
[0019E7DC] = 00000000
[0019E7E0] = 00000000
[0019E7E4] = 00000000
[0019E7E8] = 0019E98C
[0019E7EC] = 05110A20
[0019E7F0] = 05110A20
[0019E7F4] = 05110A20
[0019E7F8] = 00000000
[0019E7FC] = 0000EEEE
[0019E800] = 00000000
[0019E804] = 00000004
[0019E808] = 632B94A2
[0019E80C] = 00000000
[0019E810] = 00000000
[0019E814] = 0019E828
[0019E818] = 00000000
[0019E81C] = 00000004
[0019E820] = 00000005
[0019E824] = 6488F030
[0019E828] = 6488F030
[0019E82C] = 5D52C2E5
[0019E830] = 6488F04C
[0019E834] = 0019E8D8
[0019E838] = 6326E84A
[0019E83C] = 0019E860
[0019E840] = 00000005
[0019E844] = 00060000
|
|
楼主: 佛爷
[复制链接]
