Jump to content

XVilka

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by XVilka

  1. On Windows 7 x64

     

    If run ccsetup519.exe it hangs out with exception:

     

     

    Сигнатура проблемы:
      Имя события проблемы:    BEX
      Имя приложения:    ccsetup519.exe
      Версия приложения:    2.0.0.0
      Отметка времени приложения:    5682fc79
      Имя модуля с ошибкой:    syschk.DLL
      Версия модуля с ошибкой:    0.0.0.0
      Отметка времени модуля с ошибкой:    55001a35
      Смещение исключения:    00016515
      Код исключения:    c0000417
      Данные исключения:    00000000
      Версия ОС:    6.1.7601.2.1.0.256.4
      Код языка:    1049
      Дополнительные сведения 1:    f113
      Дополнительные сведения 2:    f1135b92ba945f43e0444893a7432171
      Дополнительные сведения 3:    bf76
      Дополнительные сведения 4:    bf76086053ea10816674af9f8fb203aa

    ----------------------------------------------------------------------------------------

    If I choose debug with:
    In VS2012:

    >    ccsetup519.exe!00403a1c()    Unknown
         [Frames below may be incorrect and/or missing, no symbols loaded for ccsetup519.exe]    
         ntdll.dll!77389902()    Unknown
         ntdll.dll!773898d5()    Unknown

    004039FA  cmp         eax,0FFFFFFFFh  
    004039FD  je          00403A09  
    004039FF  push        eax  
    00403A00  call        esi  
    00403A02  or          dword ptr ds:[40C014h],0FFFFFFFFh  
    00403A09  call        00403EAF  
    00403A0E  push        7  
    00403A10  push        4DC0D0h  
    00403A15  call        00407133  
    00403A1A  pop         esi  
    00403A1B  ret  
    00403A1C  sub         esp,2D4h  
    00403A22  push        ebx  
    00403A23  push        ebp  
    00403A24  push        esi  
    00403A25  push        edi  
    00403A26  push        20h  
    00403A28  pop         esi  
    00403A29  xor         ebp,ebp  
    00403A2B  push        8001h

            ESP    0018FF8C    
            ESI    00000000    

    ----------------------------------------------------------------------------------------------

    If I run it in x64dbg:

    Database file: D:\Work\radare\x64dbg\release\x32\db\ccsetup519.exe.dd32
    Process Started: 00400000 D:\Distr\ccsetup519.exe
    Breakpoint at 00403A1C set!
    DLL Loaded: 77350000 C:\Windows\SysWOW64\ntdll.dll
    DLL Unloaded: 76F50000 ???
    DLL Unloaded: 76310000 ???
    DLL Unloaded: 76F50000 ???
    DLL Unloaded: 77070000 ???
    DLL Loaded: 76310000 C:\Windows\SysWOW64\kernel32.dll
    DLL Loaded: 76C80000 C:\Windows\SysWOW64\KernelBase.dll
    DLL Loaded: 76D80000 C:\Windows\SysWOW64\user32.dll
    DLL Loaded: 752D0000 C:\Windows\SysWOW64\gdi32.dll
    DLL Loaded: 76A90000 C:\Windows\SysWOW64\lpk.dll
    DLL Loaded: 76750000 C:\Windows\SysWOW64\usp10.dll
    DLL Loaded: 76020000 C:\Windows\SysWOW64\msvcrt.dll
    DLL Loaded: 75150000 C:\Windows\SysWOW64\advapi32.dll
    DLL Loaded: 76BF0000 C:\Windows\SysWOW64\sechost.dll
    DLL Loaded: 76B00000 C:\Windows\SysWOW64\rpcrt4.dll
    DLL Loaded: 74CA0000 C:\Windows\SysWOW64\sspicli.dll
    DLL Loaded: 74C90000 C:\Windows\SysWOW64\cryptbase.dll
    DLL Loaded: 753D0000 C:\Windows\SysWOW64\shell32.dll
    DLL Loaded: 75260000 C:\Windows\SysWOW64\shlwapi.dll
    DLL Loaded: 72C10000 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
    DLL Loaded: 76930000 C:\Windows\SysWOW64\ole32.dll
    System breakpoint reached!
    DLL Loaded: 73980000 C:\Windows\SysWOW64\apphelp.dll
    DLL Loaded: 666B0000 C:\Windows\AppPatch\AcLayers.dll
    DLL Loaded: 76420000 C:\Windows\SysWOW64\oleaut32.dll
    DLL Loaded: 753A0000 C:\Windows\SysWOW64\userenv.dll
    DLL Loaded: 75250000 C:\Windows\SysWOW64\profapi.dll
    DLL Loaded: 74B60000 C:\Windows\SysWOW64\winspool.drv
    DLL Loaded: 71220000 C:\Windows\SysWOW64\mpr.dll
    DLL Loaded: 764B0000 C:\Windows\SysWOW64\imm32.dll
    DLL Loaded: 76E80000 C:\Windows\SysWOW64\msctf.dll
    INT3 breakpoint "entry breakpoint" at <ccsetup519.EntryPoint> (00403A1C)!
    DLL Loaded: 703F0000 C:\Windows\SysWOW64\uxtheme.dll
    DLL Loaded: 001F0000 C:\Windows\SysWOW64\userenv.dll
    DLL Unloaded: 001F0000 userenv.dll
    DLL Loaded: 74D00000 C:\Windows\SysWOW64\setupapi.dll
    DLL Loaded: 76D50000 C:\Windows\SysWOW64\cfgmgr32.dll
    DLL Loaded: 76550000 C:\Windows\SysWOW64\devobj.dll
    DLL Loaded: 74BC0000 C:\Windows\SysWOW64\version.dll
    DLL Loaded: 716D0000 C:\Windows\SysWOW64\shfolder.dll
    Thread 1AD0 created, Entry: 773A7AD8
    DLL Loaded: 750B0000 C:\Windows\SysWOW64\clbcatq.dll
    DLL Loaded: 701B0000 C:\Windows\SysWOW64\propsys.dll
    Thread 1850 created, Entry: 773A7AD8
    DLL Loaded: 74B30000 C:\Windows\SysWOW64\ntmarta.dll
    DLL Loaded: 75200000 C:\Windows\SysWOW64\Wldap32.dll
    DLL Loaded: 10000000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\System.dll
    DLL Unloaded: 10000000 system.dll
    DLL Loaded: 10000000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\System.dll
    DLL Loaded: 031E0000 C:\Windows\SysWOW64\ole32.dll
    DLL Unloaded: 031E0000 ole32.dll
    DLL Loaded: 003F0000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\UserInfo.dll
    DLL Unloaded: 003F0000 userinfo.dll
    DLL Loaded: 66D30000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\g\gtapi_signed.dll
    DLL Unloaded: 66D30000 gtapi_signed.dll
    TLS Callbacks: 1
    Breakpoint at 66D1BB90 set!
    DLL Loaded: 66D10000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\g\gcapi_dll.dll
    DLL Loaded: 71240000 C:\Windows\SysWOW64\winmm.dll
    INT3 breakpoint "TLS Callback 1 (gcapi_dll.dll)" at gcapi_dll.66D1BB90 (66D1BB90)!
    DLL Unloaded: 66D10000 gcapi_dll.dll
    DLL Unloaded: 71240000 winmm.dll
    DLL Loaded: 003F0000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\nsExec.dll
    DLL Loaded: 00820000 C:\Windows\SysWOW64\PING.EXE
    DLL Unloaded: 00820000 ping.exe
    DLL Unloaded: 003F0000 nsexec.dll
    DLL Loaded: 65E70000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\p\syschk.dll
    DLL Loaded: 723D0000 C:\Windows\SysWOW64\winhttp.dll
    DLL Loaded: 72380000 C:\Windows\SysWOW64\webio.dll
    DLL Loaded: 75360000 C:\Windows\SysWOW64\ws2_32.dll
    DLL Loaded: 753C0000 C:\Windows\SysWOW64\nsi.dll
    Thread 1E74 created, Entry: 773A1697
    DLL Loaded: 73AF0000 C:\Windows\SysWOW64\cryptsp.dll
    DLL Loaded: 709E0000 C:\Windows\SysWOW64\credssp.dll
    DLL Unloaded: 73AF0000 cryptsp.dll
    DLL Loaded: 55600000 C:\Program Files (x86)\Microsoft Firewall Client 2004\FwcWsp.dll
    DLL Loaded: 03E80000 C:\Windows\SysWOW64\advapi32.dll
    DLL Unloaded: 03E80000 advapi32.dll
    Thread 14F4 created, Entry: 5561F0FB
    DLL Loaded: 73A70000 C:\Windows\SysWOW64\mswsock.dll
    DLL Loaded: 73A60000 C:\Windows\SysWOW64\WSHTCPIP.DLL
    DLL Loaded: 73A50000 C:\Windows\SysWOW64\wship6.dll
    DLL Loaded: 73A00000 C:\Windows\SysWOW64\dnsapi.dll
    Thread F6C created, Entry: 5561F0FB
    DLL Loaded: 73900000 C:\Program Files (x86)\Bonjour\mdnsNSP.dll
    DLL Loaded: 73BB0000 C:\Windows\SysWOW64\IPHLPAPI.DLL
    DLL Loaded: 73BA0000 C:\Windows\SysWOW64\winnsi.dll
    DLL Loaded: 70B20000 C:\Windows\SysWOW64\rasadhlp.dll
    DLL Loaded: 6FED0000 C:\Windows\SysWOW64\FWPUCLNT.DLL
    Thread 1EA8 created, Entry: 773A7AD8
    DLL Loaded: 739F0000 C:\Windows\SysWOW64\dhcpcsvc6.dll
    DLL Loaded: 739D0000 C:\Windows\SysWOW64\dhcpcsvc.dll
    Thread 1850 exit
    Thread 176C exit
    Thread 14F4 exit
    Thread 1E74 exit
    Thread 1AD0 exit
    Thread F6C exit
    Process stopped with exit code 0xC0000417
    Saving database...110ms
    Debugging stopped!
     

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.