学习下 谢谢分享
sadasdasdsad
看看看看看看看看
111111111111111111111111111111111111
0000000000000000000000000000
好好学习 天天学习
简单百宝箱版本 7.3.1025正式版
Environment = 1920x1080|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x6D21A2AB
LineNum = 0(0)
Registers:
EAX=00000000 EBX=053D6358 ECX=053D6374 EDX=00001100
ESI=00000000 EDI=0D5F60B8 ESP=0018EA74 EBP=0018EBFC
Current Modules:
Name = 简单百宝箱.exe, Base = 0x400000, Top = 0x470000, Size = 458752
Name = ntdll.dll, Base = 0x777C0000, Top = 0x77940000, Size = 1572864
Name = kernel32.dll, Base = 0x756B0000, Top = 0x757C0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x75570000, Top = 0x755B7000, Size = 290816
Name = MFC42.DLL, Base = 0x703C0000, Top = 0x704DC000, Size = 1163264
Name = msvcrt.dll, Base = 0x76C70000, Top = 0x76D1C000, Size = 704512
Name = USER32.dll, Base = 0x752B0000, Top = 0x753B0000, Size = 1048576
Name = GDI32.dll, Base = 0x755C0000, Top = 0x75650000, Size = 589824
Name = LPK.dll, Base = 0x75260000, Top = 0x7526A000, Size = 40960
Name = USP10.dll, Base = 0x75AA0000, Top = 0x75B3D000, Size = 643072
Name = ADVAPI32.dll, Base = 0x77250000, Top = 0x772F0000, Size = 655360
Name = sechost.dll, Base = 0x76D20000, Top = 0x76D39000, Size = 102400
Name = RPCRT4.dll, Base = 0x759B0000, Top = 0x75AA0000, Size = 983040
Name = SspiCli.dll, Base = 0x751E0000, Top = 0x75240000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x751D0000, Top = 0x751DC000, Size = 49152
Name = ole32.dll, Base = 0x75850000, Top = 0x759AC000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x75F00000, Top = 0x75F8F000, Size = 585728
Name = ODBC32.dll, Base = 0x70330000, Top = 0x703BC000, Size = 573440
Name = gdiplus.dll, Base = 0x74CA0000, Top = 0x74E30000, Size = 1638400
Name = dbghelp.dll, Base = 0x69E00000, Top = 0x69EEB000, Size = 962560
Name = SHELL32.dll, Base = 0x75FA0000, Top = 0x76BEA000, Size = 12886016
Name = SHLWAPI.dll, Base = 0x76FC0000, Top = 0x77017000, Size = 356352
Name = IMM32.DLL, Base = 0x75650000, Top = 0x756B0000, Size = 393216
Name = MSCTF.dll, Base = 0x77060000, Top = 0x7712C000, Size = 835584
Name = odbcint.dll, Base = 0x702F0000, Top = 0x70328000, Size = 229376
Name = uxtheme.dll, Base = 0x725F0000, Top = 0x72670000, Size = 524288
Name = ksfmon.dll, Base = 0x10000000, Top = 0x10150000, Size = 1376256
Name = WS2_32.dll, Base = 0x75270000, Top = 0x752A5000, Size = 217088
Name = NSI.dll, Base = 0x76D50000, Top = 0x76D56000, Size = 24576
Name = kwsui.dll, Base = 0x1E10000, Top = 0x1E85000, Size = 479232
Name = PSAPI.DLL, Base = 0x76D60000, Top = 0x76D65000, Size = 20480
Name = WTSAPI32.dll, Base = 0x74E40000, Top = 0x74E4D000, Size = 53248
Name = VERSION.dll, Base = 0x74E30000, Top = 0x74E39000, Size = 36864
Name = comctl32.dll, Base = 0x71780000, Top = 0x7191E000, Size = 1695744
Name = SETUPAPI.dll, Base = 0x75B50000, Top = 0x75CED000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x77150000, Top = 0x77177000, Size = 159744
Name = DEVOBJ.dll, Base = 0x76BF0000, Top = 0x76C02000, Size = 73728
Name = MainFrame.dll, Base = 0x29B0000, Top = 0x2B43000, Size = 1650688
Name = Definition.dll, Base = 0x4C0000, Top = 0x4C7000, Size = 28672
Name = WSOCK32.dll, Base = 0x71CA0000, Top = 0x71CA7000, Size = 28672
Name = COMCTL32.dll, Base = 0x70130000, Top = 0x701B4000, Size = 540672
Name = MSVCP60.dll, Base = 0x74AA0000, Top = 0x74B06000, Size = 417792
Name = Msimg32.dll, Base = 0x71CB0000, Top = 0x71CB5000, Size = 20480
Name = dwmapi.dll, Base = 0x724C0000, Top = 0x724D3000, Size = 77824
Name = CLBCatQ.DLL, Base = 0x77180000, Top = 0x77203000, Size = 536576
Name = ieframe.dll, Base = 0x6DE80000, Top = 0x6EBA5000, Size = 13783040
Name = api-ms-win-downlevel-advapi32-l1-1-0.dll, Base = 0x75B40000, Top = 0x75B45000, Size = 20480
Name = api-ms-win-downlevel-ole32-l1-1-0.dll, Base = 0x75240000, Top = 0x75244000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l2-1-0.dll, Base = 0x72680000, Top = 0x72684000, Size = 16384
Name = api-ms-win-downlevel-shlwapi-l1-1-0.dll, Base = 0x75250000, Top = 0x75254000, Size = 16384
Name = api-ms-win-downlevel-version-l1-1-0.dll, Base = 0x76D40000, Top = 0x76D44000, Size = 16384
Name = api-ms-win-downlevel-user32-l1-1-0.dll, Base = 0x77790000, Top = 0x77794000, Size = 16384
Name = api-ms-win-downlevel-advapi32-l2-1-0.dll, Base = 0x725D0000, Top = 0x725D4000, Size = 16384
Name = api-ms-win-downlevel-shell32-l1-1-0.dll, Base = 0x6DE70000, Top = 0x6DE74000, Size = 16384
Name = api-ms-win-downlevel-normaliz-l1-1-0.dll, Base = 0x77050000, Top = 0x77053000, Size = 12288
Name = normaliz.DLL, Base = 0x75CF0000, Top = 0x75CF3000, Size = 12288
Name = iertutil.dll, Base = 0x75D00000, Top = 0x75EFA000, Size = 2072576
Name = urlmon.dll, Base = 0x76E90000, Top = 0x76FBB000, Size = 1224704
Name = WININET.dll, Base = 0x753B0000, Top = 0x75566000, Size = 1794048
Name = USERENV.dll, Base = 0x77130000, Top = 0x77147000, Size = 94208
Name = profapi.dll, Base = 0x77210000, Top = 0x7721B000, Size = 45056
Name = SXS.DLL, Base = 0x6DD00000, Top = 0x6DD5F000, Size = 389120
Name = iphlpapi.dll, Base = 0x74B20000, Top = 0x74B3C000, Size = 114688
Name = WINNSI.DLL, Base = 0x74B10000, Top = 0x74B17000, Size = 28672
Name = dhcpcsvc.DLL, Base = 0x74A80000, Top = 0x74A92000, Size = 73728
Name = Loading.dll, Base = 0x1FA0000, Top = 0x1FCC000, Size = 180224
Name = OLEPRO32.DLL, Base = 0x69740000, Top = 0x69759000, Size = 102400
Name = FloatingWnd.dll, Base = 0x21C0000, Top = 0x21DC000, Size = 114688
Name = Setting.dll, Base = 0x2220000, Top = 0x2245000, Size = 151552
Name = CRYPTSP.dll, Base = 0x729D0000, Top = 0x729E6000, Size = 90112
Name = ToolManagement.dll, Base = 0x2F50000, Top = 0x2FC5000, Size = 479232
Name = rsaenh.dll, Base = 0x72990000, Top = 0x729CB000, Size = 241664
Name = GuessYouLike.dll, Base = 0x2250000, Top = 0x2271000, Size = 135168
Name = JdbbxTop.dll, Base = 0x2FD0000, Top = 0x304E000, Size = 516096
Name = WebFrame.dll, Base = 0x3050000, Top = 0x3090000, Size = 262144
Name = RpcRtRemote.dll, Base = 0x73BE0000, Top = 0x73BEE000, Size = 57344
Name = WindowsCodecs.dll, Base = 0x73C60000, Top = 0x73D90000, Size = 1245184
Name = Secur32.dll, Base = 0x725E0000, Top = 0x725E8000, Size = 32768
Name = mswsock.dll, Base = 0x71FA0000, Top = 0x71FDC000, Size = 245760
Name = wship6.dll, Base = 0x71F80000, Top = 0x71F86000, Size = 24576
Name = DNSAPI.dll, Base = 0x71F30000, Top = 0x71F74000, Size = 278528
Name = wshtcpip.dll, Base = 0x71F90000, Top = 0x71F95000, Size = 20480
Name = mdnsNSP.dll, Base = 0x71F00000, Top = 0x71F21000, Size = 135168
Name = rasadhlp.dll, Base = 0x724E0000, Top = 0x724E6000, Size = 24576
Name = fwpuclnt.dll, Base = 0x71EC0000, Top = 0x71EF8000, Size = 229376
Name = iClickPM.dll, Base = 0x3750000, Top = 0x377B000, Size = 176128
Name = imagehlp.dll, Base = 0x77020000, Top = 0x7704B000, Size = 176128
Name = asycfilt.dll, Base = 0x69720000, Top = 0x69734000, Size = 81920
Name = TaobaoProtectSE.dll, Base = 0x67A00000, Top = 0x67A91000, Size = 593920
Name = lblocker.dll, Base = 0x3AE0000, Top = 0x3B3E000, Size = 385024
Name = NLAapi.dll, Base = 0x71C90000, Top = 0x71CA0000, Size = 65536
Name = napinsp.dll, Base = 0x71BF0000, Top = 0x71C00000, Size = 65536
Name = pnrpnsp.dll, Base = 0x71B40000, Top = 0x71B52000, Size = 73728
Name = winrnr.dll, Base = 0x71BE0000, Top = 0x71BE8000, Size = 32768
Name = PROPSYS.dll, Base = 0x719D0000, Top = 0x71AC5000, Size = 1003520
Name = ntmarta.dll, Base = 0x749C0000, Top = 0x749E1000, Size = 135168
Name = WLDAP32.dll, Base = 0x77370000, Top = 0x773B5000, Size = 282624
Name = apphelp.dll, Base = 0x72890000, Top = 0x728DC000, Size = 311296
Name = RICHED32.DLL, Base = 0x69710000, Top = 0x69716000, Size = 24576
Name = RICHED20.dll, Base = 0x71B60000, Top = 0x71BD6000, Size = 483328
==>
Name = MSHTML.dll, Base = 0x6CF40000, Top = 0x6DCFA000, Size = 14393344
Name = MLANG.dll, Base = 0x6DE40000, Top = 0x6DE6E000, Size = 188416
Name = jscript9.dll, Base = 0x6CB10000, Top = 0x6CDD1000, Size = 2887680
Name = msimtf.dll, Base = 0x6DDF0000, Top = 0x6DDFB000, Size = 45056
Name = d2d1.dll, Base = 0x6C7C0000, Top = 0x6CB07000, Size = 3436544
Name = DWrite.dll, Base = 0x6C680000, Top = 0x6C7B5000, Size = 1265664
Name = dxgi.dll, Base = 0x6DDA0000, Top = 0x6DDEC000, Size = 311296
Name = WINTRUST.dll, Base = 0x77220000, Top = 0x7724D000, Size = 184320
Name = CRYPT32.dll, Base = 0x76D70000, Top = 0x76E90000, Size = 1179648
Name = MSASN1.dll, Base = 0x75F90000, Top = 0x75F9C000, Size = 49152
Name = d3d11.dll, Base = 0x6C500000, Top = 0x6C675000, Size = 1527808
Name = D3D10Warp.dll, Base = 0x6C310000, Top = 0x6C4F9000, Size = 2002944
Name = msls31.dll, Base = 0x6B140000, Top = 0x6B16B000, Size = 176128
Name = XmlLite.dll, Base = 0x73800000, Top = 0x7382F000, Size = 192512
Name = Flash32_15_0_0_223.ocx, Base = 0x6B1F0000, Top = 0x6C30E000, Size = 17948672
Name = WINMM.dll, Base = 0x74FF0000, Top = 0x75022000, Size = 204800
Name = DSOUND.dll, Base = 0x75030000, Top = 0x750A2000, Size = 466944
Name = POWRPROF.dll, Base = 0x74FC0000, Top = 0x74FE5000, Size = 151552
Name = DINPUT8.dll, Base = 0x6DD70000, Top = 0x6DDA0000, Size = 196608
Name = COMDLG32.dll, Base = 0x772F0000, Top = 0x7736B000, Size = 503808
Name = mscms.dll, Base = 0x6B170000, Top = 0x6B1E9000, Size = 495616
Name = windowscodecsext.dll, Base = 0x6DE00000, Top = 0x6DE37000, Size = 225280
Name = msxml6.dll, Base = 0x6CDE0000, Top = 0x6CF37000, Size = 1404928
Name = msxml3.dll, Base = 0x604C0000, Top = 0x605F3000, Size = 1257472
Name = Dxtrans.dll, Base = 0x607A0000, Top = 0x607DB000, Size = 241664
Name = ATL.DLL, Base = 0x69DE0000, Top = 0x69DF4000, Size = 81920
Name = ddrawex.dll, Base = 0x60790000, Top = 0x6079A000, Size = 40960
Name = DDRAW.dll, Base = 0x61650000, Top = 0x61737000, Size = 946176
Name = DCIMAN32.dll, Base = 0x61CE0000, Top = 0x61CE6000, Size = 24576
Name = Dxtmsft.dll, Base = 0x60730000, Top = 0x6078B000, Size = 372736
Name = IMGUTIL.DLL, Base = 0x6DD60000, Top = 0x6DD6D000, Size = 53248
Name = pngfilt.dll, Base = 0x696F0000, Top = 0x69702000, Size = 73728
Name = credssp.dll, Base = 0x72540000, Top = 0x72548000, Size = 32768
Name = schannel.dll, Base = 0x696B0000, Top = 0x696EF000, Size = 258048
Name = wmp.dll, Base = 0x68BB0000, Top = 0x696A4000, Size = 11485184
Name = wmploc.dll, Base = 0x5ED10000, Top = 0x5F91C000, Size = 12632064
Name = MMDevApi.dll, Base = 0x6ACE0000, Top = 0x6AD19000, Size = 233472
Name = MFPlat.DLL, Base = 0x68650000, Top = 0x686A9000, Size = 364544
Name = AVRT.dll, Base = 0x69DD0000, Top = 0x69DD7000, Size = 28672
Name = AUDIOSES.DLL, Base = 0x6AC50000, Top = 0x6AC86000, Size = 221184
Name = ieproxy.dll, Base = 0x6B0F0000, Top = 0x6B132000, Size = 270336
Code Before:
0F B6 C1 8B 4C 24 18 50 D1 EA 80 E2 01 0F B6 C2 50 FF 77 54
Current Code:
8B 86 44 01 00 00 FF 77 50 E8 4A 6F D6 FF 85 C0 0F 88 F1 E3
Call Stack:
6D21A45C ===> MSHTML.dll
Current Stack:
= 0000001A
= 00000000
= 00000000
= 0018EAA0
= 00000001
= 048A8410
= 00000000
= 00000000
= 6D07AFD8
= 053D6374
= 0D5F60B8
= 0018EAB4
= 00000000
= 00000000
= 00000000
= 00000000
= 00000000
= 00000000
= 00000000
= 0D5E88C8
= 00000000
= 053D85B8
= 0018EAF4
= 00000001
= 009A2470
= 00000000
= 00000000
= 0D5E7C78
= 80010000
= 00000000
= 009A2470
= 009A2470
= 0018EB34
= 8001177F
= 00000000
= 00000000
= 00000000
= 0D5E7C78
= 41D2E39B
= FFFFFFFF
= 01000000
= 0018EC60
= 6D506D89
= 0D5E7C78
= 00000000
= 00000000
= 00000000
= 6D506FCC
= 752C7038
= 72600F7F
= 00000000
= FFFFFFEC
= FFFFFFFF
= 00000000
= 00000047
= 0018EB68
= 72600F47
= 0001076C
= 0018EB70
= 0018EB64
= 00000000
= 0018EB78
= 72600F28
= 00000000
= 00000000
= 0018EB88
= 72600FA6
= 0001076C
= 0000181B
= 0018EBE4
= 72600D73
= 00000000
= 00000001
= 770641B5
= 0018ED20
= 0018EC44
= 00000001
= 00000001
= 770641B5
= 00000000
= 00000047
= 00000000
= 0018EBE8
= 752C62FA
= 0001076C
= 00000047
= 00000000
= 0018ED20
= 770641B5
= 00000000
= 00000000
= 00000000
= 0018EC60
= 0018EBF8
= 0018EC14
= 75330230
= 475239B4
= 0018EC60
= 0018EC74
= 6D21A45C
= 000003F0
= 80011791
= 6D07AFD8
= 00000000
= 00000000
= 00000001
= 00000000
= 00000000
= 00000000
= 0D5E7C78
= 053D6358
= 048A8410
= 00000000
= 00000000
= 00000000
= 0D5E7C78
= 0018EC94
= 6CF445C0
= 0018EC70
= 6CF7B3A5
= 0D5E7C78
= 00000000
= 00000000
= 0D5E7C78
= 6D49DCA6
= 0000003B
= 0018EC94
= 0018ECD4
= 0018ECD4
= 6D49DCCC
= 0D5F60B8
= 00000002
= 0D5E7C78
= 00000000
= 0018ECC0
= 053D85B8
= 0D5E7C78
= 00180003
= 06BB1C18
= 6CF445C0
= 00000001
= 0018ECC0
= 00000000
= 05186608
= 00000000
= 0018ECEC
= 00000000
= 00000000
= 00000000
= 00000000
= 00000000
= 0018ECF4
= 0018ECF4
= 6D49CDB7
= 06A52FE8
= 0D5E7C78
= 00000000
= 0D5E7C78
= 0D5E7C78
= 00180000
= 0018ED08
= 6D49CE93
= 00000002
= 00000000
= 0D59CEA0
= 0018ED24
= 6DFBECC1
= 0D5E7C78
= 00000000
= 05186608
= 051E99B8
= 00000000
= 0018ED40
= 6DFBED1D
= 00000000
= 0054F6E8
= 051E9A88
= 06A52FE8
= 06A52FE8
= 0018ED50
= 6DE996B9
= 00000000
= 051E9958
= 0018ED74
= 6DE984E2
= 0054F6E8
= 00000000
= 00000000
= 00000000
= 06B266E0
= 0054F6E8
= 00000001
= 0018ED8C
= 6DF3A4F2
= 00000000
= 06B266E4
= 00000000
= 6DE8A6A0
= 0018ED9C
= 6E0C0101
asdasdasdasdasdasd
{:6_518:}感谢分享
qqqqqqqqqqqqqqqqqqqqq