On Windows 7 x64
If run ccsetup519.exe it hangs out with exception:
Сигнатура проблемы:
Имя события проблемы: BEX
Имя приложения: ccsetup519.exe
Версия приложения: 2.0.0.0
Отметка времени приложения: 5682fc79
Имя модуля с ошибкой: syschk.DLL
Версия модуля с ошибкой: 0.0.0.0
Отметка времени модуля с ошибкой: 55001a35
Смещение исключения: 00016515
Код исключения: c0000417
Данные исключения: 00000000
Версия ОС: 6.1.7601.2.1.0.256.4
Код языка: 1049
Дополнительные сведения 1: f113
Дополнительные сведения 2: f1135b92ba945f43e0444893a7432171
Дополнительные сведения 3: bf76
Дополнительные сведения 4: bf76086053ea10816674af9f8fb203aa
----------------------------------------------------------------------------------------
If I choose debug with:
In VS2012:
> ccsetup519.exe!00403a1c() Unknown
[Frames below may be incorrect and/or missing, no symbols loaded for ccsetup519.exe]
ntdll.dll!77389902() Unknown
ntdll.dll!773898d5() Unknown
004039FA cmp eax,0FFFFFFFFh
004039FD je 00403A09
004039FF push eax
00403A00 call esi
00403A02 or dword ptr ds:[40C014h],0FFFFFFFFh
00403A09 call 00403EAF
00403A0E push 7
00403A10 push 4DC0D0h
00403A15 call 00407133
00403A1A pop esi
00403A1B ret
00403A1C sub esp,2D4h
00403A22 push ebx
00403A23 push ebp
00403A24 push esi
00403A25 push edi
00403A26 push 20h
00403A28 pop esi
00403A29 xor ebp,ebp
00403A2B push 8001h
ESP 0018FF8C
ESI 00000000
If I run it in x64dbg:
Database file: D:\Work\radare\x64dbg\release\x32\db\ccsetup519.exe.dd32
Process Started: 00400000 D:\Distr\ccsetup519.exe
Breakpoint at 00403A1C set!
DLL Loaded: 77350000 C:\Windows\SysWOW64\ntdll.dll
DLL Unloaded: 76F50000 ???
DLL Unloaded: 76310000 ???
DLL Unloaded: 76F50000 ???
DLL Unloaded: 77070000 ???
DLL Loaded: 76310000 C:\Windows\SysWOW64\kernel32.dll
DLL Loaded: 76C80000 C:\Windows\SysWOW64\KernelBase.dll
DLL Loaded: 76D80000 C:\Windows\SysWOW64\user32.dll
DLL Loaded: 752D0000 C:\Windows\SysWOW64\gdi32.dll
DLL Loaded: 76A90000 C:\Windows\SysWOW64\lpk.dll
DLL Loaded: 76750000 C:\Windows\SysWOW64\usp10.dll
DLL Loaded: 76020000 C:\Windows\SysWOW64\msvcrt.dll
DLL Loaded: 75150000 C:\Windows\SysWOW64\advapi32.dll
DLL Loaded: 76BF0000 C:\Windows\SysWOW64\sechost.dll
DLL Loaded: 76B00000 C:\Windows\SysWOW64\rpcrt4.dll
DLL Loaded: 74CA0000 C:\Windows\SysWOW64\sspicli.dll
DLL Loaded: 74C90000 C:\Windows\SysWOW64\cryptbase.dll
DLL Loaded: 753D0000 C:\Windows\SysWOW64\shell32.dll
DLL Loaded: 75260000 C:\Windows\SysWOW64\shlwapi.dll
DLL Loaded: 72C10000 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
DLL Loaded: 76930000 C:\Windows\SysWOW64\ole32.dll
System breakpoint reached!
DLL Loaded: 73980000 C:\Windows\SysWOW64\apphelp.dll
DLL Loaded: 666B0000 C:\Windows\AppPatch\AcLayers.dll
DLL Loaded: 76420000 C:\Windows\SysWOW64\oleaut32.dll
DLL Loaded: 753A0000 C:\Windows\SysWOW64\userenv.dll
DLL Loaded: 75250000 C:\Windows\SysWOW64\profapi.dll
DLL Loaded: 74B60000 C:\Windows\SysWOW64\winspool.drv
DLL Loaded: 71220000 C:\Windows\SysWOW64\mpr.dll
DLL Loaded: 764B0000 C:\Windows\SysWOW64\imm32.dll
DLL Loaded: 76E80000 C:\Windows\SysWOW64\msctf.dll
INT3 breakpoint “entry breakpoint” at <ccsetup519.EntryPoint> (00403A1C)!
DLL Loaded: 703F0000 C:\Windows\SysWOW64\uxtheme.dll
DLL Loaded: 001F0000 C:\Windows\SysWOW64\userenv.dll
DLL Unloaded: 001F0000 userenv.dll
DLL Loaded: 74D00000 C:\Windows\SysWOW64\setupapi.dll
DLL Loaded: 76D50000 C:\Windows\SysWOW64\cfgmgr32.dll
DLL Loaded: 76550000 C:\Windows\SysWOW64\devobj.dll
DLL Loaded: 74BC0000 C:\Windows\SysWOW64\version.dll
DLL Loaded: 716D0000 C:\Windows\SysWOW64\shfolder.dll
Thread 1AD0 created, Entry: 773A7AD8
DLL Loaded: 750B0000 C:\Windows\SysWOW64\clbcatq.dll
DLL Loaded: 701B0000 C:\Windows\SysWOW64\propsys.dll
Thread 1850 created, Entry: 773A7AD8
DLL Loaded: 74B30000 C:\Windows\SysWOW64\ntmarta.dll
DLL Loaded: 75200000 C:\Windows\SysWOW64\Wldap32.dll
DLL Loaded: 10000000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\System.dll
DLL Unloaded: 10000000 system.dll
DLL Loaded: 10000000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\System.dll
DLL Loaded: 031E0000 C:\Windows\SysWOW64\ole32.dll
DLL Unloaded: 031E0000 ole32.dll
DLL Loaded: 003F0000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\UserInfo.dll
DLL Unloaded: 003F0000 userinfo.dll
DLL Loaded: 66D30000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\g\gtapi_signed.dll
DLL Unloaded: 66D30000 gtapi_signed.dll
TLS Callbacks: 1
Breakpoint at 66D1BB90 set!
DLL Loaded: 66D10000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\g\gcapi_dll.dll
DLL Loaded: 71240000 C:\Windows\SysWOW64\winmm.dll
INT3 breakpoint “TLS Callback 1 (gcapi_dll.dll)” at gcapi_dll.66D1BB90 (66D1BB90)!
DLL Unloaded: 66D10000 gcapi_dll.dll
DLL Unloaded: 71240000 winmm.dll
DLL Loaded: 003F0000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\nsExec.dll
DLL Loaded: 00820000 C:\Windows\SysWOW64\PING.EXE
DLL Unloaded: 00820000 ping.exe
DLL Unloaded: 003F0000 nsexec.dll
DLL Loaded: 65E70000 C:\Users\a.kochkov\AppData\Local\Temp\nshDF2F.tmp\p\syschk.dll
DLL Loaded: 723D0000 C:\Windows\SysWOW64\winhttp.dll
DLL Loaded: 72380000 C:\Windows\SysWOW64\webio.dll
DLL Loaded: 75360000 C:\Windows\SysWOW64\ws2_32.dll
DLL Loaded: 753C0000 C:\Windows\SysWOW64\nsi.dll
Thread 1E74 created, Entry: 773A1697
DLL Loaded: 73AF0000 C:\Windows\SysWOW64\cryptsp.dll
DLL Loaded: 709E0000 C:\Windows\SysWOW64\credssp.dll
DLL Unloaded: 73AF0000 cryptsp.dll
DLL Loaded: 55600000 C:\Program Files (x86)\Microsoft Firewall Client 2004\FwcWsp.dll
DLL Loaded: 03E80000 C:\Windows\SysWOW64\advapi32.dll
DLL Unloaded: 03E80000 advapi32.dll
Thread 14F4 created, Entry: 5561F0FB
DLL Loaded: 73A70000 C:\Windows\SysWOW64\mswsock.dll
DLL Loaded: 73A60000 C:\Windows\SysWOW64\WSHTCPIP.DLL
DLL Loaded: 73A50000 C:\Windows\SysWOW64\wship6.dll
DLL Loaded: 73A00000 C:\Windows\SysWOW64\dnsapi.dll
Thread F6C created, Entry: 5561F0FB
DLL Loaded: 73900000 C:\Program Files (x86)\Bonjour\mdnsNSP.dll
DLL Loaded: 73BB0000 C:\Windows\SysWOW64\IPHLPAPI.DLL
DLL Loaded: 73BA0000 C:\Windows\SysWOW64\winnsi.dll
DLL Loaded: 70B20000 C:\Windows\SysWOW64\rasadhlp.dll
DLL Loaded: 6FED0000 C:\Windows\SysWOW64\FWPUCLNT.DLL
Thread 1EA8 created, Entry: 773A7AD8
DLL Loaded: 739F0000 C:\Windows\SysWOW64\dhcpcsvc6.dll
DLL Loaded: 739D0000 C:\Windows\SysWOW64\dhcpcsvc.dll
Thread 1850 exit
Thread 176C exit
Thread 14F4 exit
Thread 1E74 exit
Thread 1AD0 exit
Thread F6C exit
Process stopped with exit code 0xC0000417
Saving database…110ms
Debugging stopped!