|
|
发表于 2022-9-12 12:23:49
|
显示全部楼层
SGuoBrowser 版本：0/1.0.0.17772
Environment = 1440x900|32|Windows 7 Ultimate
Type = 0xC0000005
Address = 0x6EA19ACC
LineNum = -1(-1)
Registers:
EAX=00000000 EBX=05E9FD18 ECX=6EA1996C EDX=00652094
ESI=00000004 EDI=6EA31074 ESP=05E9FCB8 EBP=05E9FCCC
Current Modules:
Name = Runner.exe, Base = 0x400000, Top = 0xB4E000, Size = 7659520
Name = ntdll.dll, Base = 0x76FF0000, Top = 0x77170000, Size = 1572864
Name = kernel32.dll, Base = 0x74DC0000, Top = 0x74ED0000, Size = 1114112
Name = KERNELBASE.dll, Base = 0x75CB0000, Top = 0x75CF7000, Size = 290816
Name = comctl32.dll, Base = 0x71930000, Top = 0x71ACE000, Size = 1695744
Name = msvcrt.dll, Base = 0x75D00000, Top = 0x75DAC000, Size = 704512
Name = GDI32.dll, Base = 0x74ED0000, Top = 0x74F60000, Size = 589824
Name = USER32.dll, Base = 0x75BB0000, Top = 0x75CB0000, Size = 1048576
Name = ADVAPI32.dll, Base = 0x75F00000, Top = 0x75FA0000, Size = 655360
Name = sechost.dll, Base = 0x757F0000, Top = 0x75809000, Size = 102400
Name = RPCRT4.dll, Base = 0x75440000, Top = 0x75530000, Size = 983040
Name = SspiCli.dll, Base = 0x74B10000, Top = 0x74B70000, Size = 393216
Name = CRYPTBASE.dll, Base = 0x74B00000, Top = 0x74B0C000, Size = 49152
Name = LPK.dll, Base = 0x74BA0000, Top = 0x74BAA000, Size = 40960
Name = USP10.dll, Base = 0x75090000, Top = 0x7512D000, Size = 643072
Name = SHLWAPI.dll, Base = 0x75A10000, Top = 0x75A67000, Size = 356352
Name = IMM32.DLL, Base = 0x75280000, Top = 0x752E0000, Size = 393216
Name = MSCTF.dll, Base = 0x75130000, Top = 0x751FC000, Size = 835584
Name = winmm.dll, Base = 0x72570000, Top = 0x725A2000, Size = 204800
Name = MSIMG32.dll, Base = 0x71800000, Top = 0x71805000, Size = 20480
Name = COMDLG32.dll, Base = 0x75200000, Top = 0x7527B000, Size = 503808
Name = SHELL32.dll, Base = 0x75FA0000, Top = 0x76BEA000, Size = 12886016
Name = WINSPOOL.DRV, Base = 0x71810000, Top = 0x71861000, Size = 331776
Name = ole32.dll, Base = 0x752E0000, Top = 0x7543C000, Size = 1425408
Name = OLEAUT32.dll, Base = 0x75DB0000, Top = 0x75E3F000, Size = 585728
Name = oledlg.dll, Base = 0x73450000, Top = 0x7346C000, Size = 114688
Name = gdiplus.dll, Base = 0x74210000, Top = 0x743A0000, Size = 1638400
Name = VERSION.dll, Base = 0x74A30000, Top = 0x74A39000, Size = 36864
==>
Name = DINPUT8.dll, Base = 0x6EA10000, Top = 0x6EA40000, Size = 196608
Name = WININET.dll, Base = 0x74F80000, Top = 0x75075000, Size = 1003520
Name = urlmon.dll, Base = 0x75A70000, Top = 0x75BB0000, Size = 1310720
Name = XmlLite.dll, Base = 0x74B70000, Top = 0x74B9F000, Size = 192512
Name = CRYPT32.dll, Base = 0x75840000, Top = 0x75960000, Size = 1179648
Name = MSASN1.dll, Base = 0x76FC0000, Top = 0x76FCC000, Size = 49152
Name = iertutil.dll, Base = 0x74BB0000, Top = 0x74DB1000, Size = 2101248
Name = OLEACC.dll, Base = 0x71AD0000, Top = 0x71B0C000, Size = 245760
Name = imagehlp.dll, Base = 0x75810000, Top = 0x7583B000, Size = 176128
Name = UxTheme.dll, Base = 0x71890000, Top = 0x71910000, Size = 524288
Name = dwmapi.dll, Base = 0x71870000, Top = 0x71883000, Size = 77824
Name = profapi.dll, Base = 0x749F0000, Top = 0x749FB000, Size = 45056
Name = HydraDMH.dll, Base = 0x73660000, Top = 0x73689000, Size = 167936
Name = MSVCR110.dll, Base = 0x73580000, Top = 0x73656000, Size = 876544
Name = CLBCatQ.DLL, Base = 0x75E70000, Top = 0x75EF3000, Size = 536576
Name = msscript.ocx, Base = 0x6E950000, Top = 0x6E96A000, Size = 106496
Name = dbghelp.dll, Base = 0x72CB0000, Top = 0x72D9B000, Size = 962560
Name = qdisp.dll, Base = 0x6E440000, Top = 0x6E492000, Size = 335872
Name = vbscript.dll, Base = 0x6E3D0000, Top = 0x6E43C000, Size = 442368
Name = ieframe.dll, Base = 0x6F280000, Top = 0x6FD06000, Size = 11034624
Name = PSAPI.DLL, Base = 0x75080000, Top = 0x75085000, Size = 20480
Name = SXS.DLL, Base = 0x6F220000, Top = 0x6F27F000, Size = 389120
Name = cfgdll.dll, Base = 0x10000000, Top = 0x1000F000, Size = 61440
Name = HID.DLL, Base = 0x6E9A0000, Top = 0x6E9A9000, Size = 36864
Name = SETUPAPI.DLL, Base = 0x75530000, Top = 0x756CD000, Size = 1691648
Name = CFGMGR32.dll, Base = 0x75E40000, Top = 0x75E67000, Size = 159744
Name = DEVOBJ.dll, Base = 0x74F60000, Top = 0x74F72000, Size = 73728
Name = WINTRUST.dll, Base = 0x757C0000, Top = 0x757EE000, Size = 188416
Name = CRYPTSP.dll, Base = 0x74600000, Top = 0x74616000, Size = 90112
Name = rsaenh.dll, Base = 0x745C0000, Top = 0x745FB000, Size = 241664
Name = WindowsCodecs.dll, Base = 0x6E690000, Top = 0x6E7C0000, Size = 1245184
Name = FILE.dll, Base = 0x77D0000, Top = 0x77DB000, Size = 45056
Name = MFC42.DLL, Base = 0x6ECE0000, Top = 0x6EDFC000, Size = 1163264
Name = ODBC32.dll, Base = 0x6EC50000, Top = 0x6ECDC000, Size = 573440
Name = odbcint.dll, Base = 0x6EBA0000, Top = 0x6EBD8000, Size = 229376
Name = ws2_32.DLL, Base = 0x756E0000, Top = 0x75715000, Size = 217088
Name = NSI.dll, Base = 0x757B0000, Top = 0x757B6000, Size = 24576
Name = dnsapi.DLL, Base = 0x74620000, Top = 0x74664000, Size = 278528
Name = iphlpapi.DLL, Base = 0x749D0000, Top = 0x749EC000, Size = 114688
Name = WINNSI.DLL, Base = 0x749C0000, Top = 0x749C7000, Size = 28672
Name = RASAPI32.dll, Base = 0x72C00000, Top = 0x72C52000, Size = 335872
Name = rasman.dll, Base = 0x72BE0000, Top = 0x72BF5000, Size = 86016
Name = rtutils.dll, Base = 0x74200000, Top = 0x7420D000, Size = 53248
Name = sensapi.dll, Base = 0x73500000, Top = 0x73506000, Size = 24576
Name = NLAapi.dll, Base = 0x72AC0000, Top = 0x72AD0000, Size = 65536
Name = rasadhlp.dll, Base = 0x73D20000, Top = 0x73D26000, Size = 24576
Name = napinsp.dll, Base = 0x72AB0000, Top = 0x72AC0000, Size = 65536
Name = pnrpnsp.dll, Base = 0x72A90000, Top = 0x72AA2000, Size = 73728
Name = mswsock.dll, Base = 0x73D70000, Top = 0x73DAC000, Size = 245760
Name = winrnr.dll, Base = 0x72A80000, Top = 0x72A88000, Size = 32768
Name = wshbth.dll, Base = 0x72A70000, Top = 0x72A7D000, Size = 53248
Name = wshtcpip.dll, Base = 0x721E0000, Top = 0x721E5000, Size = 20480
Name = wship6.dll, Base = 0x721F0000, Top = 0x721F6000, Size = 24576
Name = fwpuclnt.dll, Base = 0x73D30000, Top = 0x73D68000, Size = 229376
Name = ntmarta.dll, Base = 0x71B10000, Top = 0x71B31000, Size = 135168
Name = WLDAP32.dll, Base = 0x75960000, Top = 0x759A5000, Size = 282624
Name = USERENV.dll, Base = 0x74A00000, Top = 0x74A17000, Size = 94208
Name = schannel.DLL, Base = 0x6EA70000, Top = 0x6EAAF000, Size = 258048
Name = credssp.dll, Base = 0x6FE90000, Top = 0x6FE98000, Size = 32768
Name = secur32.dll, Base = 0x72290000, Top = 0x72298000, Size = 32768
Name = ncrypt.dll, Base = 0x744A0000, Top = 0x744D8000, Size = 229376
Name = bcrypt.dll, Base = 0x74080000, Top = 0x74097000, Size = 94208
Name = bcryptprimitives.dll, Base = 0x74040000, Top = 0x7407D000, Size = 249856
Name = GPAPI.dll, Base = 0x721C0000, Top = 0x721D6000, Size = 90112
Name = cryptnet.dll, Base = 0x71FC0000, Top = 0x71FDC000, Size = 114688
Name = SYS.dll, Base = 0x6E80000, Top = 0x6E89000, Size = 36864
Name = MSVCP60.dll, Base = 0x6EBE0000, Top = 0x6EC46000, Size = 417792
Name = REGDLL.dll, Base = 0x6E90000, Top = 0x6E97000, Size = 28672
Name = SGUOBROWSER.dll, Base = 0x7C30000, Top = 0x7C58000, Size = 163840
Name = scrrun.dll, Base = 0x6E3A0000, Top = 0x6E3CA000, Size = 172032
Name = atl.dll, Base = 0x6E9B0000, Top = 0x6E9C4000, Size = 81920
Name = dm.dll, Base = 0x1BA20000, Top = 0x1BB96000, Size = 1531904
Code Before:
08 39 77 10 0F 86 80 00 00 00 53 8B 5D 0C FF 75 FC 8B 47 04
Current Code:
F6 04 B0 13 FF 75 10 56 74 19 FF 34 1E 57 E8 AD FE FF FF 85
Call Stack:
6EA19F63 ===> DINPUT8.dll
Current Stack:
[05E9FCB8] = 001CE569
[05E9FCBC] = 00000400
[05E9FCC0] = 05E9FD50
[05E9FCC4] = 10000003
[05E9FCC8] = 001CE569
[05E9FCCC] = 05E9FCE0
[05E9FCD0] = 6EA19F63
[05E9FCD4] = 00000001
[05E9FCD8] = 05E9FD18
[05E9FCDC] = 215A0F1C
[05E9FCE0] = 05E9FD30
[05E9FCE4] = 6EA124A7
[05E9FCE8] = 05E9FD18
[05E9FCEC] = 215A0F1C
[05E9FCF0] = 10000003
[05E9FCF4] = 056201BF
[05E9FCF8] = 05E9FD50
[05E9FCFC] = FFFFFFFE
[05E9FD00] = 7700FF02
[05E9FD04] = 00000007
[05E9FD08] = 0106D0B0
[05E9FD0C] = 0000C240
[05E9FD10] = 000C02CE
[05E9FD14] = 2C000000
[05E9FD18] = EFEE33D4
[05E9FD1C] = 9DEB8E61
[05E9FD20] = FFF736F0
[05E9FD24] = 00000000
[05E9FD28] = 00000000
[05E9FD2C] = 52E5AA5E
[05E9FD30] = 05E9FF54
[05E9FD34] = 6EA125D6
[05E9FD38] = 05E9FD50
[05E9FD3C] = 000E02D4
[05E9FD40] = 00000000
[05E9FD44] = 74DD1691
[05E9FD48] = 00000000
[05E9FD4C] = 00000028
[05E9FD50] = 00000000
[05E9FD54] = 00000028
[05E9FD58] = 000B0039
[05E9FD5C] = 00000001
[05E9FD60] = 00000000
[05E9FD64] = 00000000
[05E9FD68] = 00000000
[05E9FD6C] = FFFFFFFF
[05E9FD70] = FFFFFFFF
[05E9FD74] = 00000000
[05E9FD78] = 00000000
[05E9FD7C] = 00000000
[05E9FD80] = 0000C240
[05E9FD84] = 00000000
[05E9FD88] = 00000000
[05E9FD8C] = 05E9FD9C
[05E9FD90] = 75BC6210
[05E9FD94] = 75C30230
[05E9FD98] = 0000C240
[05E9FD9C] = 05E9FDD8
[05E9FDA0] = 75BC6B34
[05E9FDA4] = 75BC6B00
[05E9FDA8] = 75133B5A
[05E9FDAC] = 51684D76
[05E9FDB0] = 00000000
[05E9FDB4] = 05E9FE5C
[05E9FDB8] = 00000000
[05E9FDBC] = 00000001
[05E9FDC0] = 05E9FED0
[05E9FDC4] = 00000000
[05E9FDC8] = 05E9FED0
[05E9FDCC] = 7519319B
[05E9FDD0] = 05E9FE14
[05E9FDD4] = 000E02D4
[05E9FDD8] = 05E9FDF8
[05E9FDDC] = 75BC6A8C
[05E9FDE0] = 0106CF40
[05E9FDE4] = 00000000
[05E9FDE8] = 000000FF
[05E9FDEC] = 00000001
[05E9FDF0] = 503102A5
[05E9FDF4] = 52F79DFF
[05E9FDF8] = 05E9FE28
[05E9FDFC] = 75BD8336
[05E9FE00] = 00000000
[05E9FE04] = 00000001
[05E9FE08] = 05E9FED0
[05E9FE0C] = 000000FF
[05E9FE10] = 05E9FEC0
[05E9FE14] = 05E9FED0
[05E9FE18] = 00000000
[05E9FE1C] = 00000001
[05E9FE20] = 00000000
[05E9FE24] = 75CC1662
[05E9FE28] = 05E9FE68
[05E9FE2C] = 75BC80A9
[05E9FE30] = 00000000
[05E9FE34] = 00000001
[05E9FE38] = 00000003
[05E9FE3C] = 75BC80BB
[05E9FE40] = 516885B6
[05E9FE44] = 000000FF
[05E9FE48] = 05E9FEC0
[05E9FE4C] = 05E9FED0
[05E9FE50] = 05E9FE40
[05E9FE54] = 75CC152D
[05E9FE58] = 05E9FEB8
[05E9FE5C] = 75C2A61E
[05E9FE60] = 213DFB1E
[05E9FE64] = FFFFFFFE
[05E9FE68] = 75BC80BB
[05E9FE6C] = 7700F8EA
[05E9FE70] = 75BC8BD3
[05E9FE74] = 05E9FE8C
[05E9FE78] = 00000018
[05E9FE7C] = 00000000
[05E9FE80] = 05E9FF6C
[05E9FE84] = 00000102
[05E9FE88] = 00000000
[05E9FE8C] = 00000000
[05E9FE90] = 00000000
[05E9FE94] = 00000038
[05E9FE98] = 05E9FFC4
[05E9FE9C] = 05D9E788
[05E9FEA0] = 00000000
[05E9FEA4] = 00000000
[05E9FEA8] = 05E9FF18
[05E9FEAC] = 7700010A
[05E9FEB0] = 05E9FEC0
[05E9FEB4] = 00000000
[05E9FEB8] = 05E9FFC4
[05E9FEBC] = 77000070
[05E9FEC0] = 00030000
[05E9FEC4] = 00000001
[05E9FEC8] = 7366A760
[05E9FECC] = 7705E5FC
[05E9FED0] = 000E02D4
[05E9FED4] = 000000FF
[05E9FED8] = 00000001
[05E9FEDC] = 056201BF
[05E9FEE0] = 215A0F1C
[05E9FEE4] = 000001C8
[05E9FEE8] = 0000001E
[05E9FEEC] = 00000003
[05E9FEF0] = 75BD0735
[05E9FEF4] = 75BD06EB
[05E9FEF8] = 05E9FF6C
[05E9FEFC] = 00000000
[05E9FF00] = 00000000
[05E9FF04] = 00000000
[05E9FF08] = 00000001
[05E9FF0C] = 010D27F0
[05E9FF10] = 7EF3D800
[05E9FF14] = 00000000
[05E9FF18] = 05E9FF44
[05E9FF1C] = 75BD0751
[05E9FF20] = 05E9FF6C
[05E9FF24] = 00000000
[05E9FF28] = 00000000
[05E9FF2C] = 00000001
[05E9FF30] = 00000001
[05E9FF34] = 00000000
[05E9FF38] = 000E02D4
[05E9FF3C] = 00000000
[05E9FF40] = 74DD1691
[05E9FF44] = 05E9FF88
[05E9FF48] = 6EA192BC
[05E9FF4C] = 05E9FF6C
[05E9FF50] = 52E5A83A
[05E9FF54] = 05E9FF88
[05E9FF58] = 6EA19325
[05E9FF5C] = 05E9FF6C
[05E9FF60] = 00000000
[05E9FF64] = 00000000
[05E9FF68] = 00C5E8D8
[05E9FF6C] = 000E02D4
[05E9FF70] = 000000FF
[05E9FF74] = 00000001
[05E9FF78] = 056201BF
[05E9FF7C] = 215A0F1C
[05E9FF80] = 000001C8
[05E9FF84] = 0000001E
[05E9FF88] = 05E9FF94
[05E9FF8C] = 74DD338A
[05E9FF90] = 00C5E8D8
[05E9FF94] = 05E9FFD4
[05E9FF98] = 77029F72
[05E9FF9C] = 00C5E8D8
[05E9FFA0] = 68FF43E8
[05E9FFA4] = 00000000
[05E9FFA8] = 00000000
[05E9FFAC] = 00C5E8D8
[05E9FFB0] = C0000005
[05E9FFB4] = 74DF76F7
[05E9FFB8] = 74DF76F7
[05E9FFBC] = 05E9FFA0
[05E9FFC0] = 05E9F704
[05E9FFC4] = FFFFFFFF
[05E9FFC8] = 770671F5
[05E9FFCC] = 1A17796C
[05E9FFD0] = 00000000
[05E9FFD4] = 05E9FFEC
|
|
[复制链接]
.gif)
.gif)
.gif)
.gif)
