====================================================================== Summary ====================================================================== Exception: 0xC0000005 - STATUS_ACCESS_VIOLATION Details: Memory at 00000000 could not be read errno: 0x00000000 - No error LastError: 0x00000012 - Больше файлов не осталось. NTSTATUS: 0x80000006 - {Больше нет файлов} Не найдены другие файлы, соответствующие заданному шаблону. Address: 0x002BF2B0 - Far.exe!ConvertPanelItemToAnsi(struct PluginPanelItem const &,struct oldfar::PluginPanelItem &,unsigned int)+0x240 (PluginA.obj) Location: Open, PluginA.cpp(5014) Module: C:\Soft\Shells\Far3\Plugins\ShellLink\shellink.dll Plugin: shellink 1.21.0.0 (Shell link support FAR plugin, Oscar Sacaev) ====================================================================== System information ====================================================================== Far: 3.0.6262.0 x86 (bd2ec80) Compiler: Microsoft Visual C++, version 19.38.33130.0 PE time: 2024-01-29 20:24:49.000 File time: 2024-01-29 20:24:50.842 Time: 2024-01-30 03:02:38.323 Local: 2024-01-30 11:02:38.323 +0800, RTZ 7 (зима) Uptime: 00:00:17 OS: Windows NT Workstation 10.0.19044, 0x100/0x30 (Windows 10 Pro, version 21H2, OS build 19044.1415) Locale: ru-RU | LCID=00000419 (Lang=0419 (Primary=019 Sub=01) Sort=0 SortVersion=0) | ANSI=1251 OEM=866 Host: 0xC0000003 - {Недопустимый параметр} Указанный класс сведений не является допустимым классом сведений для выбранного объекта. Parent: C:\Windows\explorer.exe 10.0.19041.1320 (WinBuild.160101.0800) Command: "C:\Soft\Shells\Far3\Far.exe" Access: Administrator Memory: 6.17 Г out of 16.9 Г free (36%); 23.8 М used by the process ====================================================================== Exception ====================================================================== ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 002BF2B0 Far.exe!ConvertPanelItemToAnsi(struct PluginPanelItem const &,struct oldfar::PluginPanelItem &,unsigned int)+0x240 (PluginA.obj) 002C997D Far.exe!``oldpluginapi::FarPanelControlA(void *,int,void *)'::`2'::::operator()(void)const '::`18'::::operator()(enum FILE_CONTROL_COMMANDS,struct oldfar::PluginPanelItem * &,unsigned int)const +0x21D (PluginA.obj) 002C8D5D Far.exe!`oldpluginapi::FarPanelControlA(void *,int,void *)'::`2'::::operator()(void)const +0x1AD (PluginA.obj) 002D260F Far.exe!`function_ref::function_ref,struct detail::no_handler,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: >(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: const &,struct detail::no_handler const &,struct source_location const &)'::`7':: >(class `cpp_try,struct detail::no_handler,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: >(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: const &,struct detail::no_handler const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0xF (PluginA.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 002C9A4F Far.exe!cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)+0x6F (PluginA.obj) 002C8B88 Far.exe!oldpluginapi::FarPanelControlA(void *,int,void *)+0x58 (PluginA.obj) 0000275B shellink.dll!OpenPlugin+0x33 002D3648 Far.exe!`function_ref::function_ref,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)'::`2':: >(class `Plugin::ExecuteFunction,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)'::`2':: &&)'::`1'::::(int)+0x18 (PluginA.obj) 002AEA87 Far.exe!`function_ref::function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &>(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &)'::`1'::::(int)+0x47 (plclass.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 002ADDF2 Far.exe!cpp_try,struct source_location const &)'::`2'::::operator()(void)const '::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: >(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &,struct source_location const &)+0x32 (plclass.obj) 002AEBE0 Far.exe!`function_ref::function_ref,struct source_location const &)'::`2':: const &>(class `Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2':: const &)'::`1'::::(int)+0x80 (plclass.obj) 001A5690 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x40 (exception_handler.obj) 002ADDAE Far.exe!Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)+0x6E (plclass.obj) 002D2DA0 Far.exe!Plugin::ExecuteFunction,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)+0x40 (PluginA.obj) 002CDBE8 Far.exe!PluginA::Open(struct OpenInfo *)+0x1D8 (PluginA.obj) 002DDB13 Far.exe!PluginManager::Open(class Plugin *,int,struct _GUID const &,int)const +0x53 (plugins.obj) 002DA324 Far.exe!PluginManager::CommandsMenu(int,int,wchar_t const *)const +0xAC4 (plugins.obj) 0027450D Far.exe!Manager::PluginsMenu(void)const +0xBD (manager.obj) 0027421C Far.exe!Manager::ProcessKey(class Manager::Key)+0x23C (manager.obj) 00273B1D Far.exe!Manager::ProcessMainLoop(void)+0x1DD (manager.obj) 0027391E Far.exe!Manager::EnterMainLoop(void)+0x8E (manager.obj) 0026CBD6 Far.exe!MainProcess(class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,int,int)+0x836 (main.obj) 00270785 Far.exe!`function_ref::function_ref)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)'::`7':: >(class `cpp_try)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0x95 (main.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 0026FBE2 Far.exe!cpp_try)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)+0x72 (main.obj) 0026F60F Far.exe!mainImpl(class std::span)+0xA7F (main.obj) 0026FFAE Far.exe!`wmain_seh(void)'::`2'::::operator()(void)const +0x3E (main.obj) 0027080F Far.exe!`function_ref::function_ref,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)'::`7':: >(class `cpp_try,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0xF (main.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 00270102 Far.exe!cpp_try,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)+0x72 (main.obj) 0026FEA9 Far.exe!wmain_seh(void)+0x189 (main.obj) 002708A7 Far.exe!`function_ref::function_ref,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &,class `main(void)'::`2':: const &)'::`3':: >(class `seh_try,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &,class `main(void)'::`2':: const &)'::`3':: &&)'::`1'::::(int)+0x57 (main.obj) 001A5690 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x40 (exception_handler.obj) 002701C4 Far.exe!_main+0x94 (main.obj) 0034A490 Far.exe!__scrt_common_main_seh(void)+0xFA (LIBCMT:exe_main.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 038686D6 EBX = 038685A6 ECX = 00000000 EDX = 00CFB840 ESI = 00000002 EDI = 039FD830 EIP = 006AF2B0 ESP = 00CFB840 EBP = 00CFB884 EFL = 00210202 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 002BF2B0 Far.exe!ConvertPanelItemToAnsi(struct PluginPanelItem const &,struct oldfar::PluginPanelItem &,unsigned int)+0x240 (PluginA.obj): 006af28e 8d8330010000 lea eax,[ebx+130h] 006af294 8bcc mov ecx,esp 006af296 83ec08 sub esp,8 006af299 8bd4 mov edx,esp 006af29b 8901 mov dword ptr [ecx],eax 006af29d c741040e000000 mov dword ptr [ecx+4],0Eh 006af2a4 8b4f34 mov ecx,dword ptr [edi+34h] 006af2a7 890a mov dword ptr [edx],ecx 006af2a9 8d7102 lea esi,[ecx+2] 006af2ac 8d642400 lea esp,[esp] 006af2b0 668b01 mov ax,word ptr [ecx] 002C997D Far.exe!``oldpluginapi::FarPanelControlA(void *,int,void *)'::`2'::::operator()(void)const '::`18'::::operator()(enum FILE_CONTROL_COMMANDS,struct oldfar::PluginPanelItem * &,unsigned int)const +0x21D (PluginA.obj): 006b995f 83e800 sub eax,0 006b9962 7468 je Far+0x2c99cc (006b99cc) 006b9964 8b4dc8 mov ecx,dword ptr [ebp-38h] 006b9967 83e801 sub eax,1 006b996a 7503 jne Far+0x2c996f (006b996f) 006b996c 8d4dc8 lea ecx,[ebp-38h] 006b996f 8b55f0 mov edx,dword ptr [ebp-10h] 006b9972 6a00 push 0 006b9974 c645fc01 mov byte ptr [ebp-4],1 006b9978 e8f356ffff call Far+0x2bf070 (006af070) 006b997d 83c404 add esp,4 002C8D5D Far.exe!`oldpluginapi::FarPanelControlA(void *,int,void *)'::`2'::::operator()(void)const +0x1AD (PluginA.obj): 006b8d36 8d8dd0f6ffff lea ecx,[ebp-930h] 006b8d3c e81f77ffff call Far+0x2c0460 (006b0460) 006b8d41 8b03 mov eax,dword ptr [ebx] 006b8d43 8d8da8f6ffff lea ecx,[ebp-958h] 006b8d49 ff761c push dword ptr [esi+1Ch] 006b8d4c 8985a8f6ffff mov dword ptr [ebp-958h],eax 006b8d52 8d4618 lea eax,[esi+18h] 006b8d55 50 push eax 006b8d56 6a15 push 15h 006b8d58 e8030a0000 call Far+0x2c9760 (006b9760) 006b8d5d ff7624 push dword ptr [esi+24h] 002D260F Far.exe!`function_ref::function_ref,struct detail::no_handler,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: >(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: const &,struct detail::no_handler const &,struct source_location const &)'::`7':: >(class `cpp_try,struct detail::no_handler,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: >(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,class `cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)'::`2':: const &,struct detail::no_handler const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0xF (PluginA.obj): 006c25fc cc int 3 006c25fd cc int 3 006c25fe cc int 3 006c25ff cc int 3 006c2600 55 push ebp 006c2601 8bec mov ebp,esp 006c2603 56 push esi 006c2604 8b7508 mov esi,dword ptr [ebp+8] 006c2607 8b4e04 mov ecx,dword ptr [esi+4] 006c260a e8a165ffff call Far+0x2c8bb0 (006b8bb0) 006c260f 8b0e mov ecx,dword ptr [esi] 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj): 005955c2 64a300000000 mov dword ptr fs:[00000000h],eax 005955c8 8965f0 mov dword ptr [ebp-10h],esp 005955cb 894dec mov dword ptr [ebp-14h],ecx 005955ce 803d99e1820000 cmp byte ptr [Far+0x43e199 (0082e199)],0 005955d5 740d je Far+0x1a55e4 (005955e4) 005955d7 837d1800 cmp dword ptr [ebp+18h],0 005955db 7449 je Far+0x1a5626 (00595626) 005955dd c745fc00000000 mov dword ptr [ebp-4],0 005955e4 ff7508 push dword ptr [ebp+8] 005955e7 ff550c call dword ptr [ebp+0Ch] 005955ea 83c404 add esp,4 002C9A4F Far.exe!cpp_try,int>(class `oldpluginapi::FarPanelControlA(void *,int,void *)'::`2':: const &,int,struct source_location const &)+0x6F (PluginA.obj): 006b9a26 c7400480b96a00 mov dword ptr [eax+4],offset Far+0x2bb980 (006ab980) 006b9a2d 8d44241c lea eax,[esp+1Ch] 006b9a31 8944242c mov dword ptr [esp+2Ch],eax 006b9a35 8bc4 mov eax,esp 006b9a37 894c2430 mov dword ptr [esp+30h],ecx 006b9a3b 8d4c242c lea ecx,[esp+2Ch] 006b9a3f 8908 mov dword ptr [eax],ecx 006b9a41 8bca mov ecx,edx 006b9a43 c7400400266c00 mov dword ptr [eax+4],offset Far+0x2d2600 (006c2600) 006b9a4a e851bbedff call Far+0x1a55a0 (005955a0) 006b9a4f 8b44241c mov eax,dword ptr [esp+1Ch] 002C8B88 Far.exe!oldpluginapi::FarPanelControlA(void *,int,void *)+0x58 (PluginA.obj): 006b8b62 8d4ddc lea ecx,[ebp-24h] 006b8b65 8d450c lea eax,[ebp+0Ch] 006b8b68 c745ec18a07e00 mov dword ptr [ebp-14h],offset Far+0x3fa018 (007ea018) 006b8b6f 8945e0 mov dword ptr [ebp-20h],eax 006b8b72 8d4510 lea eax,[ebp+10h] 006b8b75 8945e4 mov dword ptr [ebp-1Ch],eax 006b8b78 8d45e8 lea eax,[ebp-18h] 006b8b7b 50 push eax 006b8b7c c745f0fa0c0000 mov dword ptr [ebp-10h],0CFAh 006b8b83 e8580e0000 call Far+0x2c99e0 (006b99e0) 006b8b88 83c404 add esp,4 0000275B shellink.dll!OpenPlugin+0x33: 04be2743 fc cld 04be2744 8d85c0fcffff lea eax,[ebp-340h] 04be274a 53 push ebx 04be274b 56 push esi 04be274c 57 push edi 04be274d 8b7508 mov esi,dword ptr [ebp+8] 04be2750 50 push eax 04be2751 6a01 push 1 04be2753 6aff push 0FFFFFFFFh 04be2755 ff157cdebe04 call dword ptr [shellink!__CPPdebugHook+0x2d3e (04bede7c)] 04be275b 83cbff or ebx,0FFFFFFFFh 002D3648 Far.exe!`function_ref::function_ref,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)'::`2':: >(class `Plugin::ExecuteFunction,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)'::`2':: &&)'::`1'::::(int)+0x18 (PluginA.obj): 006c3631 8bec mov ebp,esp 006c3633 56 push esi 006c3634 8b7508 mov esi,dword ptr [ebp+8] 006c3637 8b06 mov eax,dword ptr [esi] 006c3639 8b480c mov ecx,dword ptr [eax+0Ch] 006c363c 8b460c mov eax,dword ptr [esi+0Ch] 006c363f ff30 push dword ptr [eax] 006c3641 8b4608 mov eax,dword ptr [esi+8] 006c3644 ff30 push dword ptr [eax] 006c3646 ffd1 call ecx 006c3648 8b4e04 mov ecx,dword ptr [esi+4] 002AEA87 Far.exe!`function_ref::function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &>(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)'::`2'::::operator()(void)const '::`2':: const &)'::`1'::::(int)+0x47 (plclass.obj): 0069ea6a a140b08200 mov eax,dword ptr [Far+0x43b040 (0082b040)] 0069ea6f 33c5 xor eax,ebp 0069ea71 50 push eax 0069ea72 8d45f4 lea eax,[ebp-0Ch] 0069ea75 64a300000000 mov dword ptr fs:[00000000h],eax 0069ea7b 8b7b08 mov edi,dword ptr [ebx+8] 0069ea7e 8b07 mov eax,dword ptr [edi] 0069ea80 ff30 push dword ptr [eax] 0069ea82 8b4804 mov ecx,dword ptr [eax+4] 0069ea85 ffd1 call ecx 0069ea87 e8a4aeffff call Far+0x2a9930 (00699930) ====================================================================== Exception handler thread ====================================================================== ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 001A28B3 Far.exe!collect_information(class exception_context const &,struct source_location const &,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,struct error_state_ex const &,class std::span)+0x1393 (exception_handler.obj) 001A39E8 Far.exe!handle_generic_exception(class exception_context const &,struct source_location const &,class Plugin const * const,class std::basic_string_view >,class std::basic_string_view >,struct error_state_ex const &,class std::span)+0x498 (exception_handler.obj) 001A4C7D Far.exe!handle_seh_exception(class exception_context const &,class Plugin const * const,struct source_location const &)+0x20D (exception_handler.obj) 001A58C5 Far.exe!detail::seh_filter(struct _EXCEPTION_POINTERS const *,class Plugin const *,struct source_location const &)+0x1A5 (exception_handler.obj) 002708E5 Far.exe!`function_ref::function_ref,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &>(class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &)'::`1'::::(int,struct _EXCEPTION_POINTERS *)+0x15 (main.obj) 001A56C0 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x70 (exception_handler.obj) 002ADDAE Far.exe!Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const &)+0x6E (plclass.obj) 002D2DA0 Far.exe!Plugin::ExecuteFunction,int &,int &>(struct Plugin::ExecuteStruct<2,0> &,int &,int &)+0x40 (PluginA.obj) 002CDBE8 Far.exe!PluginA::Open(struct OpenInfo *)+0x1D8 (PluginA.obj) 002DDB13 Far.exe!PluginManager::Open(class Plugin *,int,struct _GUID const &,int)const +0x53 (plugins.obj) 002DA324 Far.exe!PluginManager::CommandsMenu(int,int,wchar_t const *)const +0xAC4 (plugins.obj) 0027450D Far.exe!Manager::PluginsMenu(void)const +0xBD (manager.obj) 0027421C Far.exe!Manager::ProcessKey(class Manager::Key)+0x23C (manager.obj) 00273B1D Far.exe!Manager::ProcessMainLoop(void)+0x1DD (manager.obj) 0027391E Far.exe!Manager::EnterMainLoop(void)+0x8E (manager.obj) 0026CBD6 Far.exe!MainProcess(class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,int,int)+0x836 (main.obj) 00270785 Far.exe!`function_ref::function_ref)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)'::`7':: >(class `cpp_try)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0x95 (main.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 0026FBE2 Far.exe!cpp_try)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,class `mainImpl(class std::span)'::`2':: const &,struct source_location const &)+0x72 (main.obj) 0026F60F Far.exe!mainImpl(class std::span)+0xA7F (main.obj) 0026FFAE Far.exe!`wmain_seh(void)'::`2'::::operator()(void)const +0x3E (main.obj) 0027080F Far.exe!`function_ref::function_ref,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)'::`7':: >(class `cpp_try,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)'::`7':: &&)'::`1'::::(int)+0xF (main.obj) 001A55EA Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const &)+0x4A (exception_handler.obj) 00270102 Far.exe!cpp_try,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,class `wmain_seh(void)'::`2':: const &,struct source_location const &)+0x72 (main.obj) 0026FEA9 Far.exe!wmain_seh(void)+0x189 (main.obj) 002708A7 Far.exe!`function_ref::function_ref,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &,class `main(void)'::`2':: const &)'::`3':: >(class `seh_try,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const &,class `main(void)'::`2':: const &,class Plugin const * const,struct source_location const &)'::`2':: const &,class `main(void)'::`2':: const &)'::`3':: &&)'::`1'::::(int)+0x57 (main.obj) 001A5690 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x40 (exception_handler.obj) 002701C4 Far.exe!_main+0x94 (main.obj) 0034A490 Far.exe!__scrt_common_main_seh(void)+0xFA (LIBCMT:exe_main.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ====================================================================== Thread 17068 / 0x42AC ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 01009978 ECX = 00000000 EDX = 00000000 ESI = 01009978 EDI = 01002150 EIP = 77EC470C ESP = 013CF904 EBP = 013CFAC0 EFL = 00000202 ====================================================================== Thread 19796 / 0x4D54 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 01009F00 ECX = 00000000 EDX = 00000000 ESI = 01009F00 EDI = 01002150 EIP = 77EC470C ESP = 0150FD78 EBP = 0150FF34 EFL = 00000206 ====================================================================== Thread 19940 / 0x4DE4 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 0100AA08 ECX = 00000000 EDX = 00000000 ESI = 0100AA08 EDI = 01002150 EIP = 77EC470C ESP = 0164F888 EBP = 0164FA44 EFL = 00000206 ====================================================================== Thread 19432 / 0x4BE8 ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC0000135 - Не удается продолжить выполнение кода, поскольку система не обнаружила %hs. Для устранения этой проблемы попробуйте переустановить программу. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000729FC ntdll.dll!NtWaitForSingleObject+0xC 001110A2 KERNELBASE.dll!WaitForSingleObject+0x12 000F19EF iwprn_x86.dll!DllMain+0xCADEF 000F2B94 iwprn_x86.dll!DllMain+0xCBF94 00175F49 iwprn_x86.dll!IWDM_StopSaveCapture+0x79669 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000729FC ntdll.dll!NtWaitForSingleObject+0xC: ntdll!NtMapUserPhysicalPagesScatter: 77ec29e0 b803000a00 mov eax,0A0003h 77ec29e5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec29ea ffd2 call edx 77ec29ec c20c00 ret 0Ch 77ec29ef 90 nop ntdll!NtWaitForSingleObject: 77ec29f0 b804000d00 mov eax,0D0004h 77ec29f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec29fa ffd2 call edx 77ec29fc c20c00 ret 0Ch 001110A2 KERNELBASE.dll!WaitForSingleObject+0x12: 770f108e cc int 3 770f108f cc int 3 KERNELBASE!WaitForSingleObject: 770f1090 8bff mov edi,edi 770f1092 55 push ebp 770f1093 8bec mov ebp,esp 770f1095 6a00 push 0 770f1097 ff750c push dword ptr [ebp+0Ch] 770f109a ff7508 push dword ptr [ebp+8] 770f109d e80e000000 call KERNELBASE!WaitForSingleObjectEx (770f10b0) 770f10a2 5d pop ebp 000F19EF iwprn_x86.dll!DllMain+0xCADEF: 68d519c6 8845bb mov byte ptr [ebp-45h],al 68d519c9 0f1f8000000000 nop dword ptr [eax] 68d519d0 84c0 test al,al 68d519d2 0f8426020000 je iwprn_x86!DllMain+0xcaffe (68d51bfe) 68d519d8 8d8bbc000000 lea ecx,[ebx+0BCh] 68d519de 6860ea0000 push 0EA60h 68d519e3 8b01 mov eax,dword ptr [ecx] 68d519e5 ff500c call dword ptr [eax+0Ch] 68d519e8 50 push eax 68d519e9 ff155430e768 call dword ptr [iwprn_x86!IWDM_StopSaveCapture+0x116774 (68e73054)] 68d519ef 85c0 test eax,eax 000F2B94 iwprn_x86.dll!DllMain+0xCBF94: 68d52b78 8b7e0c mov edi,dword ptr [esi+0Ch] 68d52b7b 897dec mov dword ptr [ebp-14h],edi 68d52b7e b001 mov al,1 68d52b80 8607 xchg al,byte ptr [edi] 68d52b82 c645fc01 mov byte ptr [ebp-4],1 68d52b86 c645fc02 mov byte ptr [ebp-4],2 68d52b8a 8b06 mov eax,dword ptr [esi] 68d52b8c ff7608 push dword ptr [esi+8] 68d52b8f ff7604 push dword ptr [esi+4] 68d52b92 ffd0 call eax 68d52b94 8bd8 mov ebx,eax 00175F49 iwprn_x86.dll!IWDM_StopSaveCapture+0x79669: 68dd5f2d f7d8 neg eax 68dd5f2f 1ac0 sbb al,al 68dd5f31 fec0 inc al 68dd5f33 884710 mov byte ptr [edi+10h],al 68dd5f36 8365fc00 and dword ptr [ebp-4],0 68dd5f3a 8b37 mov esi,dword ptr [edi] 68dd5f3c ff7704 push dword ptr [edi+4] 68dd5f3f 8bce mov ecx,esi 68dd5f41 ff157033e768 call dword ptr [iwprn_x86!IWDM_StopSaveCapture+0x116a90 (68e73370)] 68dd5f47 ffd6 call esi 68dd5f49 50 push eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = C0000225 EBX = 68F3F640 ECX = 00000000 EDX = 00000000 ESI = 00000000 EDI = 000002D0 EIP = 77EC29FC ESP = 01B7FBF0 EBP = 01B7FC60 EFL = 00000216 ====================================================================== Thread 18876 / 0x49BC ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18 00024805 iwprn_x86.dll! (get the pdb) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18: KERNELBASE!WaitForMultipleObjects: 770fb0a0 8bff mov edi,edi 770fb0a2 55 push ebp 770fb0a3 8bec mov ebp,esp 770fb0a5 6a00 push 0 770fb0a7 ff7514 push dword ptr [ebp+14h] 770fb0aa ff7510 push dword ptr [ebp+10h] 770fb0ad ff750c push dword ptr [ebp+0Ch] 770fb0b0 ff7508 push dword ptr [ebp+8] 770fb0b3 e818000000 call KERNELBASE!WaitForMultipleObjectsEx (770fb0d0) 770fb0b8 5d pop ebp 00024805 iwprn_x86.dll! (get the pdb): 68c847ec 894df8 mov dword ptr [ebp-8],ecx 68c847ef 897dfc mov dword ptr [ebp-4],edi 68c847f2 56 push esi 68c847f3 84db test bl,bl 68c847f5 7510 jne iwprn_x86+0x24807 (68c84807) 68c847f7 6a00 push 0 68c847f9 8d45f8 lea eax,[ebp-8] 68c847fc 50 push eax 68c847fd 6a02 push 2 68c847ff ff155030e768 call dword ptr [iwprn_x86!IWDM_StopSaveCapture+0x116770 (68e73050)] 68c84805 eb0c jmp iwprn_x86+0x24813 (68c84813) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000002 EDI = 00000002 EIP = 77EC2F8C ESP = 01CBF9F4 EBP = 01CBFB84 EFL = 00000202 ====================================================================== Thread 19516 / 0x4C3C (Window messages processor) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC0000034 - Объект с указанным именем не найден. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC 00347A32 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const &)+0x272 (wm_listener.obj) 0034808A Far.exe!os::concurrency::thread::wrapper >(enum os::concurrency::thread::mode,void (__thiscall wm_listener::*&&)(class os::concurrency::event const &),class wm_listener * &&,class std::reference_wrapper &&)'::`2':: >(void *)+0x3A (wm_listener.obj) 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC: win32u!NtUserCallNoParam: 763a1050 b805100000 mov eax,1005h 763a1055 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a105a ffd2 call edx 763a105c c20400 ret 4 763a105f 90 nop win32u!NtUserGetMessage: 763a1060 b806100000 mov eax,1006h 763a1065 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a106a ffd2 call edx 763a106c c21000 ret 10h 00347A32 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const &)+0x272 (wm_listener.obj): 00737a0f 84c0 test al,al 00737a11 0f85a9000000 jne Far+0x347ac0 (00737ac0) 00737a17 8b3d58257a00 mov edi,dword ptr [Far+0x3b2558 (007a2558)] 00737a1d 8b1d54257a00 mov ebx,dword ptr [Far+0x3b2554 (007a2554)] 00737a23 6a00 push 0 00737a25 6a00 push 0 00737a27 6a00 push 0 00737a29 8d8544ffffff lea eax,[ebp-0BCh] 00737a2f 50 push eax 00737a30 ffd7 call edi 00737a32 85c0 test eax,eax 0034808A Far.exe!os::concurrency::thread::wrapper >(enum os::concurrency::thread::mode,void (__thiscall wm_listener::*&&)(class os::concurrency::event const &),class wm_listener * &&,class std::reference_wrapper &&)'::`2':: >(void *)+0x3A (wm_listener.obj): 00738069 50 push eax 0073806a 8d45f4 lea eax,[ebp-0Ch] 0073806d 64a300000000 mov dword ptr fs:[00000000h],eax 00738073 8b7508 mov esi,dword ptr [ebp+8] 00738076 897508 mov dword ptr [ebp+8],esi 00738079 c745fc00000000 mov dword ptr [ebp-4],0 00738080 ff7604 push dword ptr [esi+4] 00738083 8b4e08 mov ecx,dword ptr [esi+8] 00738086 8b06 mov eax,dword ptr [esi] 00738088 ffd0 call eax 0073808a 6a0c push 0Ch 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj): 007488a8 f7d8 neg eax 007488aa 1ac0 sbb al,al 007488ac fec0 inc al 007488ae 884710 mov byte ptr [edi+10h],al 007488b1 8365fc00 and dword ptr [ebp-4],0 007488b5 8b37 mov esi,dword ptr [edi] 007488b7 ff7704 push dword ptr [edi+4] 007488ba 8bce mov ecx,esi 007488bc ff1578267a00 call dword ptr [Far+0x3b2678 (007a2678)] 007488c2 ffd6 call esi 007488c4 50 push eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 763FC970 ECX = 00000000 EDX = 00000000 ESI = 01F0FA18 EDI = 763FDB30 EIP = 763A106C ESP = 01F0F9B8 EBP = 01F0F9F0 EFL = 00000206 ====================================================================== Thread 4440 / 0x1158 (FS watcher) ====================================================================== LastError: 0x000003FE - Запрос на уведомление об изменениях завершается, но данные не были возвращены в буфер вызывающей процедуры. Теперь эта процедура нуждается в перечислении файлов для поиска изменений. NTSTATUS: 0x0000010C - Запрос на уведомление об изменении завершается, но сведения не возвращаются в буфер вызвавшей процедуры. Для обнаружения изменений теперь необходимо произвести перечисление списка файлов. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj) 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj) 001FD73B Far.exe!background_watcher::process(void)+0x19B (filesystemwatcher.obj) 001FE277 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall background_searcher::*&&)(void),class background_searcher * &&)'::`2':: >(void *)+0x37 (findfile.obj) 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18: KERNELBASE!WaitForMultipleObjects: 770fb0a0 8bff mov edi,edi 770fb0a2 55 push ebp 770fb0a3 8bec mov ebp,esp 770fb0a5 6a00 push 0 770fb0a7 ff7514 push dword ptr [ebp+14h] 770fb0aa ff7510 push dword ptr [ebp+10h] 770fb0ad ff750c push dword ptr [ebp+0Ch] 770fb0b0 ff7508 push dword ptr [ebp+8] 770fb0b3 e818000000 call KERNELBASE!WaitForMultipleObjectsEx (770fb0d0) 770fb0b8 5d pop ebp 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj): 0067defa 898574ffffff mov dword ptr [ebp-8Ch],eax 0067df00 eb0d jmp Far+0x28df0f (0067df0f) 0067df02 83c9ff or ecx,0FFFFFFFFh 0067df05 c78574ffffff00000000 mov dword ptr [ebp-8Ch],0 0067df0f 51 push ecx 0067df10 0fb6c2 movzx eax,dl 0067df13 50 push eax 0067df14 ff7508 push dword ptr [ebp+8] 0067df17 ff750c push dword ptr [ebp+0Ch] 0067df1a ff1554227a00 call dword ptr [Far+0x3b2254 (007a2254)] 0067df20 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj): 0067e00e 83ec08 sub esp,8 0067e011 8bd4 mov edx,esp 0067e013 c6400800 mov byte ptr [eax+8],0 0067e017 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0067e01a 8b4508 mov eax,dword ptr [ebp+8] 0067e01d 894a04 mov dword ptr [edx+4],ecx 0067e020 8d4c2418 lea ecx,[esp+18h] 0067e024 8902 mov dword ptr [edx],eax 0067e026 32d2 xor dl,dl 0067e028 e893feffff call Far+0x28dec0 (0067dec0) 0067e02d 83c418 add esp,18h 001FD73B Far.exe!background_watcher::process(void)+0x19B (filesystemwatcher.obj): 005ed71f 8b4dc0 mov ecx,dword ptr [ebp-40h] 005ed722 83ec08 sub esp,8 005ed725 8bd4 mov edx,esp 005ed727 8b01 mov eax,dword ptr [ecx] 005ed729 8b4904 mov ecx,dword ptr [ecx+4] 005ed72c 2bc8 sub ecx,eax 005ed72e 8902 mov dword ptr [edx],eax 005ed730 c1f902 sar ecx,2 005ed733 894a04 mov dword ptr [edx+4],ecx 005ed736 e8c5080900 call Far+0x28e000 (0067e000) 005ed73b 8bf0 mov esi,eax 001FE277 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall background_searcher::*&&)(void),class background_searcher * &&)'::`2':: >(void *)+0x37 (findfile.obj): 005ee257 33c5 xor eax,ebp 005ee259 50 push eax 005ee25a 8d45f4 lea eax,[ebp-0Ch] 005ee25d 64a300000000 mov dword ptr fs:[00000000h],eax 005ee263 8b7508 mov esi,dword ptr [ebp+8] 005ee266 897508 mov dword ptr [ebp+8],esi 005ee269 c745fc00000000 mov dword ptr [ebp-4],0 005ee270 8b4e04 mov ecx,dword ptr [esi+4] 005ee273 8b06 mov eax,dword ptr [esi] 005ee275 ffd0 call eax 005ee277 6a08 push 8 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj): 007488a8 f7d8 neg eax 007488aa 1ac0 sbb al,al 007488ac fec0 inc al 007488ae 884710 mov byte ptr [edi+10h],al 007488b1 8365fc00 and dword ptr [ebp-4],0 007488b5 8b37 mov esi,dword ptr [edi] 007488b7 ff7704 push dword ptr [edi+4] 007488ba 8bce mov ecx,esi 007488bc ff1578267a00 call dword ptr [Far+0x3b2678 (007a2678)] 007488c2 ffd6 call esi 007488c4 50 push eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000103 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000003 EDI = 00000003 EIP = 77EC2F8C ESP = 035FFA34 EBP = 035FFBC4 EFL = 00000202 ====================================================================== Thread 21884 / 0x557C (Taskbar processor) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC0000034 - Объект с указанным именем не найден. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj) 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj) 0031BF18 Far.exe!taskbar_impl::handler(void)const +0x248 (taskbar.obj) 001FE277 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall background_searcher::*&&)(void),class background_searcher * &&)'::`2':: >(void *)+0x37 (findfile.obj) 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18: KERNELBASE!WaitForMultipleObjects: 770fb0a0 8bff mov edi,edi 770fb0a2 55 push ebp 770fb0a3 8bec mov ebp,esp 770fb0a5 6a00 push 0 770fb0a7 ff7514 push dword ptr [ebp+14h] 770fb0aa ff7510 push dword ptr [ebp+10h] 770fb0ad ff750c push dword ptr [ebp+0Ch] 770fb0b0 ff7508 push dword ptr [ebp+8] 770fb0b3 e818000000 call KERNELBASE!WaitForMultipleObjectsEx (770fb0d0) 770fb0b8 5d pop ebp 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj): 0067defa 898574ffffff mov dword ptr [ebp-8Ch],eax 0067df00 eb0d jmp Far+0x28df0f (0067df0f) 0067df02 83c9ff or ecx,0FFFFFFFFh 0067df05 c78574ffffff00000000 mov dword ptr [ebp-8Ch],0 0067df0f 51 push ecx 0067df10 0fb6c2 movzx eax,dl 0067df13 50 push eax 0067df14 ff7508 push dword ptr [ebp+8] 0067df17 ff750c push dword ptr [ebp+0Ch] 0067df1a ff1554227a00 call dword ptr [Far+0x3b2254 (007a2254)] 0067df20 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj): 0067e00e 83ec08 sub esp,8 0067e011 8bd4 mov edx,esp 0067e013 c6400800 mov byte ptr [eax+8],0 0067e017 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0067e01a 8b4508 mov eax,dword ptr [ebp+8] 0067e01d 894a04 mov dword ptr [edx+4],ecx 0067e020 8d4c2418 lea ecx,[esp+18h] 0067e024 8902 mov dword ptr [edx],eax 0067e026 32d2 xor dl,dl 0067e028 e893feffff call Far+0x28dec0 (0067dec0) 0067e02d 83c418 add esp,18h 0031BF18 Far.exe!taskbar_impl::handler(void)const +0x248 (taskbar.obj): 0070bef6 8945c8 mov dword ptr [ebp-38h],eax 0070bef9 83ec08 sub esp,8 0070befc 8b471c mov eax,dword ptr [edi+1Ch] 0070beff 8945cc mov dword ptr [ebp-34h],eax 0070bf02 8b4720 mov eax,dword ptr [edi+20h] 0070bf05 8945d0 mov dword ptr [ebp-30h],eax 0070bf08 8bc4 mov eax,esp 0070bf0a 8908 mov dword ptr [eax],ecx 0070bf0c c7400403000000 mov dword ptr [eax+4],3 0070bf13 e8e820f7ff call Far+0x28e000 (0067e000) 0070bf18 83c408 add esp,8 001FE277 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall background_searcher::*&&)(void),class background_searcher * &&)'::`2':: >(void *)+0x37 (findfile.obj): 005ee257 33c5 xor eax,ebp 005ee259 50 push eax 005ee25a 8d45f4 lea eax,[ebp-0Ch] 005ee25d 64a300000000 mov dword ptr fs:[00000000h],eax 005ee263 8b7508 mov esi,dword ptr [ebp+8] 005ee266 897508 mov dword ptr [ebp+8],esi 005ee269 c745fc00000000 mov dword ptr [ebp-4],0 005ee270 8b4e04 mov ecx,dword ptr [esi+4] 005ee273 8b06 mov eax,dword ptr [esi] 005ee275 ffd0 call eax 005ee277 6a08 push 8 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj): 007488a8 f7d8 neg eax 007488aa 1ac0 sbb al,al 007488ac fec0 inc al 007488ae 884710 mov byte ptr [edi+10h],al 007488b1 8365fc00 and dword ptr [ebp-4],0 007488b5 8b37 mov esi,dword ptr [edi] 007488b7 ff7704 push dword ptr [edi+4] 007488ba 8bce mov ecx,esi 007488bc ff1578267a00 call dword ptr [Far+0x3b2678 (007a2678)] 007488c2 ffd6 call esi 007488c4 50 push eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000001 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000003 EDI = 00000003 EIP = 77EC2F8C ESP = 03AFF81C EBP = 03AFF9AC EFL = 00000202 ====================================================================== Thread 6616 / 0x19D8 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 000B080C combase.dll!CLSIDFromString+0x117C 0012AF89 combase.dll!CoIncrementMTAUsage+0x379 000B06D1 combase.dll!CLSIDFromString+0x1041 0012CF7F combase.dll!Ordinal140+0x18F 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 000B080C combase.dll!CLSIDFromString+0x117C: 774607e7 ff7514 push dword ptr [ebp+14h] 774607ea 8b85f8feffff mov eax,dword ptr [ebp-108h] 774607f0 8d8dfcfeffff lea ecx,[ebp-104h] 774607f6 6aff push 0FFFFFFFFh 774607f8 6a00 push 0 774607fa 8984bdfcfeffff mov dword ptr [ebp+edi*4-104h],eax 77460801 8d4701 lea eax,[edi+1] 77460804 51 push ecx 77460805 50 push eax 77460806 ff153c355f77 call dword ptr [combase!Ordinal160+0x23bdc (775f353c)] 7746080c 3bf8 cmp edi,eax 0012AF89 combase.dll!CoIncrementMTAUsage+0x379: 774daf67 8364240c00 and dword ptr [esp+0Ch],0 774daf6c 8d44240c lea eax,[esp+0Ch] 774daf70 50 push eax 774daf71 6a00 push 0 774daf73 68a00f0000 push 0FA0h 774daf78 ff3574135f77 push dword ptr [combase!Ordinal160+0x21a14 (775f1374)] 774daf7e 33d2 xor edx,edx 774daf80 8bce mov ecx,esi 774daf82 6a00 push 0 774daf84 e8ce57f8ff call combase!CLSIDFromString+0x10c7 (77460757) 774daf89 85c0 test eax,eax 000B06D1 combase.dll!CLSIDFromString+0x1041: 774606ae 7407 je combase!CLSIDFromString+0x1027 (774606b7) 774606b0 53 push ebx 774606b1 ff15b0325f77 call dword ptr [combase!Ordinal160+0x23950 (775f32b0)] 774606b7 33c9 xor ecx,ecx 774606b9 41 inc ecx 774606ba e8d17c0200 call combase!RoGetActivationFactory+0x1430 (77488390) 774606bf e906ffffff jmp combase!CLSIDFromString+0xf3a (774605ca) 774606c4 81ff50af4d77 cmp edi,offset combase!CoIncrementMTAUsage+0x340 (774daf50) 774606ca 756a jne combase!CLSIDFromString+0x10a6 (77460736) 774606cc e87fa80700 call combase!CoIncrementMTAUsage+0x340 (774daf50) 774606d1 e92dffffff jmp combase!CLSIDFromString+0xf73 (77460603) 0012CF7F combase.dll!Ordinal140+0x18F: 774dcf62 55 push ebp 774dcf63 8bec mov ebp,esp 774dcf65 56 push esi 774dcf66 57 push edi 774dcf67 ff15c4335f77 call dword ptr [combase!Ordinal160+0x23a64 (775f33c4)] 774dcf6d 8b7d08 mov edi,dword ptr [ebp+8] 774dcf70 894714 mov dword ptr [edi+14h],eax 774dcf73 e820000000 call combase!Ordinal140+0x1a8 (774dcf98) 774dcf78 8bcf mov ecx,edi 774dcf7a e83b36f8ff call combase!CLSIDFromString+0xf2a (774605ba) 774dcf7f 8b7718 mov esi,dword ptr [edi+18h] 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000001 EDI = 00000001 EIP = 77EC2F8C ESP = 03C4FB38 EBP = 03C4FCC8 EFL = 00000202 ====================================================================== Thread 22476 / 0x57CC ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x80000005 - {Переполнение буфера} Данные имеют слишком большой размер и не помещаются в отведенный буфер. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 0377AD20 ECX = 00000000 EDX = 00000000 ESI = 0377AD20 EDI = 01001228 EIP = 77EC470C ESP = 03D8FAAC EBP = 03D8FC68 EFL = 00000206 ====================================================================== Thread 1444 / 0x5A4 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000001 EBX = 03716940 ECX = 00000000 EDX = 00000000 ESI = 03716940 EDI = 01001228 EIP = 77EC470C ESP = 03EDFA14 EBP = 03EDFBD0 EFL = 00000206 ====================================================================== Thread 19396 / 0x4BC4 ====================================================================== LastError: 0x000003F0 - Попытка ссылки на несуществующий токен. NTSTATUS: 0xC000007C - Попытка ссылки на несуществующий токен. Как правило, это происходит при ссылке на токен, связанный с потоком команд, не олицетворяющим клиента. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC 0011359B combase.dll!CoDecrementMTAUsage+0x2BB 001134B7 combase.dll!CoDecrementMTAUsage+0x1D7 001133FE combase.dll!CoDecrementMTAUsage+0x11E 000B0752 combase.dll!CLSIDFromString+0x10C2 0012CF7F combase.dll!Ordinal140+0x18F 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC: win32u!NtUserCallNoParam: 763a1050 b805100000 mov eax,1005h 763a1055 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a105a ffd2 call edx 763a105c c20400 ret 4 763a105f 90 nop win32u!NtUserGetMessage: 763a1060 b806100000 mov eax,1006h 763a1065 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a106a ffd2 call edx 763a106c c21000 ret 10h 0011359B combase.dll!CoDecrementMTAUsage+0x2BB: 774c357a ff15e8825f77 call dword ptr [combase!Ordinal160+0x28988 (775f82e8)] 774c3580 ff15c0335f77 call dword ptr [combase!Ordinal160+0x23a60 (775f33c0)] 774c3586 50 push eax 774c3587 ff15f4375f77 call dword ptr [combase!Ordinal160+0x23e94 (775f37f4)] 774c358d 56 push esi 774c358e 56 push esi 774c358f 56 push esi 774c3590 8d442420 lea eax,[esp+20h] 774c3594 50 push eax 774c3595 ff15a8825f77 call dword ptr [combase!Ordinal160+0x28948 (775f82a8)] 774c359b 83f8ff cmp eax,0FFFFFFFFh 001134B7 combase.dll!CoDecrementMTAUsage+0x1D7: 774c3498 781d js combase!CoDecrementMTAUsage+0x1d7 (774c34b7) 774c349a ff75f8 push dword ptr [ebp-8] 774c349d 897b38 mov dword ptr [ebx+38h],edi 774c34a0 ff1528355f77 call dword ptr [combase!Ordinal160+0x23bc8 (775f3528)] 774c34a6 8b4318 mov eax,dword ptr [ebx+18h] 774c34a9 83e01f and eax,1Fh 774c34ac 48 dec eax 774c34ad 83f801 cmp eax,1 774c34b0 7705 ja combase!CoDecrementMTAUsage+0x1d7 (774c34b7) 774c34b2 e843000000 call combase!CoDecrementMTAUsage+0x21a (774c34fa) 774c34b7 837e1800 cmp dword ptr [esi+18h],0 001133FE combase.dll!CoDecrementMTAUsage+0x11E: 774c33ec cc int 3 774c33ed cc int 3 774c33ee cc int 3 774c33ef cc int 3 774c33f0 8bff mov edi,edi 774c33f2 55 push ebp 774c33f3 8bec mov ebp,esp 774c33f5 51 push ecx 774c33f6 8b4d08 mov ecx,dword ptr [ebp+8] 774c33f9 e805000000 call combase!CoDecrementMTAUsage+0x123 (774c3403) 774c33fe 59 pop ecx 000B0752 combase.dll!CLSIDFromString+0x10C2: 77460727 837e0400 cmp dword ptr [esi+4],0 7746072b 0f857bffffff jne combase!CLSIDFromString+0x101c (774606ac) 77460731 e925ffffff jmp combase!CLSIDFromString+0xfcb (7746065b) 77460736 81ff70a24177 cmp edi,offset combase!Ordinal183+0x157b4 (7741a270) 7746073c 750a jne combase!CLSIDFromString+0x10b8 (77460748) 7746073e e82d9bfbff call combase!Ordinal183+0x157b4 (7741a270) 77460743 e9bbfeffff jmp combase!CLSIDFromString+0xf73 (77460603) 77460748 8bcf mov ecx,edi 7746074a ff1534395f77 call dword ptr [combase!Ordinal160+0x23fd4 (775f3934)] 77460750 ffd7 call edi 77460752 e9acfeffff jmp combase!CLSIDFromString+0xf73 (77460603) 0012CF7F combase.dll!Ordinal140+0x18F: 774dcf62 55 push ebp 774dcf63 8bec mov ebp,esp 774dcf65 56 push esi 774dcf66 57 push edi 774dcf67 ff15c4335f77 call dword ptr [combase!Ordinal160+0x23a64 (775f33c4)] 774dcf6d 8b7d08 mov edi,dword ptr [ebp+8] 774dcf70 894714 mov dword ptr [edi+14h],eax 774dcf73 e820000000 call combase!Ordinal140+0x1a8 (774dcf98) 774dcf78 8bcf mov ecx,edi 774dcf7a e83b36f8ff call combase!CLSIDFromString+0xf2a (774605ba) 774dcf7f 8b7718 mov esi,dword ptr [edi+18h] 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000001 EBX = 001617B6 ECX = 00000000 EDX = 00000000 ESI = 0401FDF4 EDI = 00000000 EIP = 763A106C ESP = 0401FD90 EBP = 0401FDC8 EFL = 00000216 ====================================================================== Thread 14404 / 0x3844 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC0000135 - Не удается продолжить выполнение кода, поскольку система не обнаружила %hs. Для устранения этой проблемы попробуйте переустановить программу. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC 00008084 PortaDev.dll! (get the pdb) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0000106C win32u.dll!NtUserGetMessage+0xC: win32u!NtUserCallNoParam: 763a1050 b805100000 mov eax,1005h 763a1055 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a105a ffd2 call edx 763a105c c20400 ret 4 763a105f 90 nop win32u!NtUserGetMessage: 763a1060 b806100000 mov eax,1006h 763a1065 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a106a ffd2 call edx 763a106c c21000 ret 10h 00008084 PortaDev.dll! (get the pdb): 7960806d 8d442448 lea eax,[esp+48h] 79608071 50 push eax 79608072 ff1590016279 call dword ptr [PortaDev!ExitFARW+0x1682a (79620190)] 79608078 33c0 xor eax,eax 7960807a 50 push eax 7960807b 50 push eax 7960807c 50 push eax 7960807d 8d442454 lea eax,[esp+54h] 79608081 50 push eax 79608082 ffd6 call esi 79608084 85c0 test eax,eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 001B1366 ECX = 00000000 EDX = 00000000 ESI = 047AF9A0 EDI = 039241A8 EIP = 763A106C ESP = 047AF908 EBP = 047AF940 EFL = 00000202 ====================================================================== Thread 3852 / 0xF0C (Async history config) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj) 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj) 00114C62 Far.exe!`anonymous namespace'::HistoryConfigCustom::ThreadProc(void)+0xA2 (configdb.obj) 00121EB8 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall `anonymous namespace'::HistoryConfigCustom::*&&)(void),class A0x3b4022ce::HistoryConfigCustom * const &&)'::`2':: >(void *)+0x48 (configdb.obj) 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj) 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 0011B0B8 KERNELBASE.dll!WaitForMultipleObjects+0x18: KERNELBASE!WaitForMultipleObjects: 770fb0a0 8bff mov edi,edi 770fb0a2 55 push ebp 770fb0a3 8bec mov ebp,esp 770fb0a5 6a00 push 0 770fb0a7 ff7514 push dword ptr [ebp+14h] 770fb0aa ff7510 push dword ptr [ebp+10h] 770fb0ad ff750c push dword ptr [ebp+0Ch] 770fb0b0 ff7508 push dword ptr [ebp+8] 770fb0b3 e818000000 call KERNELBASE!WaitForMultipleObjectsEx (770fb0d0) 770fb0b8 5d pop ebp 0028DF20 Far.exe!os::detail::multi_wait(class std::span,bool,class std::optional > >)+0x60 (platform.obj): 0067defa 898574ffffff mov dword ptr [ebp-8Ch],eax 0067df00 eb0d jmp Far+0x28df0f (0067df0f) 0067df02 83c9ff or ecx,0FFFFFFFFh 0067df05 c78574ffffff00000000 mov dword ptr [ebp-8Ch],0 0067df0f 51 push ecx 0067df10 0fb6c2 movzx eax,dl 0067df13 50 push eax 0067df14 ff7508 push dword ptr [ebp+8] 0067df17 ff750c push dword ptr [ebp+0Ch] 0067df1a ff1554227a00 call dword ptr [Far+0x3b2254 (007a2254)] 0067df20 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0028E02D Far.exe!os::detail::handle_implementation::wait_any(class span)+0x2D (platform.obj): 0067e00e 83ec08 sub esp,8 0067e011 8bd4 mov edx,esp 0067e013 c6400800 mov byte ptr [eax+8],0 0067e017 8b4d0c mov ecx,dword ptr [ebp+0Ch] 0067e01a 8b4508 mov eax,dword ptr [ebp+8] 0067e01d 894a04 mov dword ptr [edx+4],ecx 0067e020 8d4c2418 lea ecx,[esp+18h] 0067e024 8902 mov dword ptr [edx],eax 0067e026 32d2 xor dl,dl 0067e028 e893feffff call Far+0x28dec0 (0067dec0) 0067e02d 83c418 add esp,18h 00114C62 Far.exe!`anonymous namespace'::HistoryConfigCustom::ThreadProc(void)+0xA2 (configdb.obj): 00504c40 8b4758 mov eax,dword ptr [edi+58h] 00504c43 8d4db4 lea ecx,[ebp-4Ch] 00504c46 8945b4 mov dword ptr [ebp-4Ch],eax 00504c49 83ec08 sub esp,8 00504c4c 8b474c mov eax,dword ptr [edi+4Ch] 00504c4f 8945b8 mov dword ptr [ebp-48h],eax 00504c52 8bc4 mov eax,esp 00504c54 8908 mov dword ptr [eax],ecx 00504c56 c7400402000000 mov dword ptr [eax+4],2 00504c5d e89e931700 call Far+0x28e000 (0067e000) 00504c62 83c408 add esp,8 00121EB8 Far.exe!os::concurrency::thread::wrapper(enum os::concurrency::thread::mode,void (__thiscall `anonymous namespace'::HistoryConfigCustom::*&&)(void),class A0x3b4022ce::HistoryConfigCustom * const &&)'::`2':: >(void *)+0x48 (configdb.obj): 00511e99 c745fc00000000 mov dword ptr [ebp-4],0 00511ea0 8b560c mov edx,dword ptr [esi+0Ch] 00511ea3 8b4608 mov eax,dword ptr [esi+8] 00511ea6 8b4a04 mov ecx,dword ptr [edx+4] 00511ea9 8b0401 mov eax,dword ptr [ecx+eax] 00511eac 8d4a04 lea ecx,[edx+4] 00511eaf 034604 add eax,dword ptr [esi+4] 00511eb2 03c8 add ecx,eax 00511eb4 8b06 mov eax,dword ptr [esi] 00511eb6 ffd0 call eax 00511eb8 6a10 push 10h 003588C4 Far.exe!thread_start(void * const)+0x58 (libucrt:thread.obj): 007488a8 f7d8 neg eax 007488aa 1ac0 sbb al,al 007488ac fec0 inc al 007488ae 884710 mov byte ptr [edi+10h],al 007488b1 8365fc00 and dword ptr [ebp-4],0 007488b5 8b37 mov esi,dword ptr [edi] 007488b7 ff7704 push dword ptr [edi+4] 007488ba 8bce mov ecx,esi 007488bc ff1578267a00 call dword ptr [Far+0x3b2678 (007a2678)] 007488c2 ffd6 call esi 007488c4 50 push eax 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000002 EDI = 00000002 EIP = 77EC2F8C ESP = 04AFFBDC EBP = 04AFFD6C EFL = 00000202 ====================================================================== Thread 15460 / 0x3C64 ====================================================================== LastError: 0x000003F0 - Попытка ссылки на несуществующий токен. NTSTATUS: 0xC000007C - Попытка ссылки на несуществующий токен. Как правило, это происходит при ссылке на токен, связанный с потоком команд, не олицетворяющим клиента. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0000586C win32u.dll!NtUserMsgWaitForMultipleObjectsEx+0xC 0003E78C USER32.dll!MsgWaitForMultipleObjectsEx+0x4C 0001DD57 shcore.dll!SHTaskPoolGetCurrentThreadLifetime+0xB27 0001D316 shcore.dll!SHTaskPoolGetCurrentThreadLifetime+0xE6 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0000586C win32u.dll!NtUserMsgWaitForMultipleObjectsEx+0xC: win32u!NtUserModifyWindowTouchCapability: 763a5850 b885140000 mov eax,1485h 763a5855 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a585a ffd2 call edx 763a585c c20c00 ret 0Ch 763a585f 90 nop win32u!NtUserMsgWaitForMultipleObjectsEx: 763a5860 b886140000 mov eax,1486h 763a5865 ba10633a76 mov edx,offset win32u!gDispatchTableValues+0xf0 (763a6310) 763a586a ffd2 call edx 763a586c c21400 ret 14h 0003E78C USER32.dll!MsgWaitForMultipleObjectsEx+0x4C: 763fe774 46 inc esi 763fe775 7600 jbe USER32!MsgWaitForMultipleObjectsEx+0x37 (763fe777) 763fe777 56 push esi 763fe778 7526 jne USER32!MsgWaitForMultipleObjectsEx+0x60 (763fe7a0) 763fe77a ff7518 push dword ptr [ebp+18h] 763fe77d 51 push ecx 763fe77e ff7510 push dword ptr [ebp+10h] 763fe781 ff750c push dword ptr [ebp+0Ch] 763fe784 ff7508 push dword ptr [ebp+8] 763fe787 e854000000 call USER32!MsgWaitForMultipleObjectsEx+0xa0 (763fe7e0) 763fe78c 5e pop esi 0001DD57 shcore.dll!SHTaskPoolGetCurrentThreadLifetime+0xB27: 7693dd36 e8335c0200 call shcore!Ordinal222+0x11be (7696396e) 7693dd3b 84c0 test al,al 7693dd3d 0f8486000000 je shcore!SHTaskPoolGetCurrentThreadLifetime+0xb99 (7693ddc9) 7693dd43 6a06 push 6 7693dd45 68ff1c0000 push 1CFFh 7693dd4a 56 push esi 7693dd4b 8d45c8 lea eax,[ebp-38h] 7693dd4e 50 push eax 7693dd4f 6a01 push 1 7693dd51 ff15dcc09976 call dword ptr [shcore!Ordinal281+0x72dc (7699c0dc)] 7693dd57 83f8ff cmp eax,0FFFFFFFFh 0001D316 shcore.dll!SHTaskPoolGetCurrentThreadLifetime+0xE6: 7693d302 40 inc eax 7693d303 5d pop ebp 7693d304 c20400 ret 4 7693d307 8bff mov edi,edi 7693d309 56 push esi 7693d30a 57 push edi 7693d30b 8bf2 mov esi,edx 7693d30d 8bf9 mov edi,ecx 7693d30f 8bce mov ecx,esi 7693d311 e81a000000 call shcore!SHTaskPoolGetCurrentThreadLifetime+0x100 (7693d330) 7693d316 8b4628 mov eax,dword ptr [esi+28h] 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 00000006 ECX = 00000000 EDX = 00000000 ESI = 00000000 EDI = 00000001 EIP = 763A586C ESP = 04EFF7DC EBP = 04EFF84C EFL = 00000202 ====================================================================== Thread 20336 / 0x4F70 ====================================================================== LastError: 0x000000EA - Имеются дополнительные данные. NTSTATUS: 0x80000005 - {Переполнение буфера} Данные имеют слишком большой размер и не помещаются в отведенный буфер. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 00000000 EBX = 03977758 ECX = 00000000 EDX = 00000000 ESI = 03977758 EDI = 01001228 EIP = 77EC470C ESP = 04FFF814 EBP = 04FFF9D0 EFL = 00000206 ====================================================================== Thread 10612 / 0x2974 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0007470C ntdll.dll!ZwWaitForWorkViaWorkerFactory+0xC: ntdll!NtWaitForKeyedEvent: 77ec46f0 b8d2011500 mov eax,1501D2h 77ec46f5 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec46fa ffd2 call edx 77ec46fc c21000 ret 10h 77ec46ff 90 nop ntdll!ZwWaitForWorkViaWorkerFactory: 77ec4700 b8d3010000 mov eax,1D3h 77ec4705 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec470a ffd2 call edx 77ec470c c21400 ret 14h 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 77E85900 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00BF4000 EDI = 0EE71B70 EIP = 77EC470C ESP = 0553F9D0 EBP = 0553FB8C EFL = 00000212 ====================================================================== Thread 14628 / 0x3924 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC 00025436 CRYPT32.dll!CertDuplicateCTLContext+0x336 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00072F8C ntdll.dll!NtWaitForMultipleObjects+0xC: ntdll!ZwQuerySystemTime: 77ec2f70 b85a001800 mov eax,18005Ah 77ec2f75 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f7a ffd2 call edx 77ec2f7c c20400 ret 4 77ec2f7f 90 nop ntdll!NtWaitForMultipleObjects: 77ec2f80 b85b001d00 mov eax,1D005Bh 77ec2f85 ba7088ed77 mov edx,offset ntdll!RtlInterlockedCompareExchange64+0x170 (77ed8870) 77ec2f8a ffd2 call edx 77ec2f8c c21400 ret 14h 00025436 CRYPT32.dll!CertDuplicateCTLContext+0x336: 7727541d 395f0c cmp dword ptr [edi+0Ch],ebx 77275420 0f95c3 setne bl 77275423 43 inc ebx 77275424 6a00 push 0 77275426 ff7718 push dword ptr [edi+18h] 77275429 8d4708 lea eax,[edi+8] 7727542c 6a00 push 0 7727542e 50 push eax 7727542f 53 push ebx 77275430 ff153cb23377 call dword ptr [CRYPT32!CryptUpdateProtectedState+0x4e5f (7733b23c)] 77275436 83e800 sub eax,0 0001FA29 KERNEL32.DLL!BaseThreadInitThunk+0x19: 7662fa12 55 push ebp 7662fa13 8bec mov ebp,esp 7662fa15 56 push esi 7662fa16 8bf2 mov esi,edx 7662fa18 85c9 test ecx,ecx 7662fa1a 7514 jne KERNEL32!BaseThreadInitThunk+0x20 (7662fa30) 7662fa1c ff7508 push dword ptr [ebp+8] 7662fa1f 8bce mov ecx,esi 7662fa21 ff152c206976 call dword ptr [KERNEL32!WerpLaunchAeDebug+0x1dfcc (7669202c)] 7662fa27 ffd6 call esi 7662fa29 50 push eax 00067A9E ntdll.dll!RtlGetAppContainerNamedObjectPath+0x11E: 77eb7a7d 8365fc00 and dword ptr [ebp-4],0 77eb7a81 8b357c5af777 mov esi,dword ptr [ntdll!NlsAnsiCodePage+0x2134 (77f75a7c)] 77eb7a87 52 push edx 77eb7a88 85f6 test esi,esi 77eb7a8a 0f8487cd0300 je ntdll!RtlCaptureStackContext+0x1bbb7 (77ef4817) 77eb7a90 8bce mov ecx,esi 77eb7a92 ff15e091f777 call dword ptr [ntdll!LdrParentInterlockedPopEntrySList+0x280c (77f791e0)] 77eb7a98 8bd7 mov edx,edi 77eb7a9a 33c9 xor ecx,ecx 77eb7a9c ffd6 call esi 77eb7a9e e92ace0300 jmp ntdll!RtlCaptureStackContext+0x1bc6d (77ef48cd) 00067A6E ntdll.dll!RtlGetAppContainerNamedObjectPath+0xEE: 77eb7a55 55 push ebp 77eb7a56 8bec mov ebp,esp 77eb7a58 51 push ecx 77eb7a59 51 push ecx 77eb7a5a 8d45f8 lea eax,[ebp-8] 77eb7a5d 50 push eax 77eb7a5e e84d000000 call ntdll!RtlInitializeExceptionChain (77eb7ab0) 77eb7a63 8b550c mov edx,dword ptr [ebp+0Ch] 77eb7a66 8b4d08 mov ecx,dword ptr [ebp+8] 77eb7a69 e801000000 call ntdll!RtlGetAppContainerNamedObjectPath+0xef (77eb7a6f) 77eb7a6e cc int 3 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- EAX = 77275410 EBX = 00000000 ECX = 00000000 EDX = 00000000 ESI = 00000001 EDI = 00000001 EIP = 77EC2F8C ESP = 0F6FFB5C EBP = 0F6FFCEC EFL = 00000206 ====================================================================== Modules ====================================================================== C:\Soft\Shells\Far3\Far.exe 3.0.6262.0 x86 C:\Windows\SYSTEM32\ntdll.dll 10.0.19041.1023 (WinBuild.160101.0800) C:\Windows\System32\KERNEL32.DLL 10.0.19041.1348 (WinBuild.160101.0800) C:\Windows\System32\KERNELBASE.dll 10.0.19041.1348 (WinBuild.160101.0800) C:\Windows\SYSTEM32\apphelp.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\ADVAPI32.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\msvcrt.dll 7.0.19041.546 (WinBuild.160101.0800) C:\Windows\System32\sechost.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\RPCRT4.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\USER32.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\win32u.dll 10.0.19041.1387 (WinBuild.160101.0800) C:\Windows\System32\GDI32.dll 10.0.19041.1202 (WinBuild.160101.0800) C:\Windows\System32\gdi32full.dll 10.0.19041.1387 (WinBuild.160101.0800) C:\Windows\System32\msvcp_win.dll 10.0.19041.789 (WinBuild.160101.0800) C:\Windows\System32\ucrtbase.dll 10.0.19041.789 (WinBuild.160101.0800) C:\Windows\System32\SHELL32.dll 10.0.19041.964 (WinBuild.160101.0800) C:\Windows\System32\ole32.dll 10.0.19041.1320 (WinBuild.160101.0800) C:\Windows\System32\combase.dll 10.0.19041.1320 (WinBuild.160101.0800) C:\Windows\SYSTEM32\WINSPOOL.DRV 10.0.19041.1023 (WinBuild.160101.0800) C:\Windows\SYSTEM32\NETAPI32.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\System32\PSAPI.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\MPR.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\SETUPAPI.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\cfgmgr32.dll 10.0.19041.1151 (WinBuild.160101.0800) C:\Windows\System32\bcrypt.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\Secur32.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\System32\COMDLG32.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\shcore.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\USERENV.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\VERSION.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\System32\SHLWAPI.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984\COMCTL32.dll 6.10 (WinBuild.160101.0800) C:\Windows\SYSTEM32\NETUTILS.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\SAMCLI.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\SRVCLI.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\SSPICLI.DLL 10.0.19041.906 (WinBuild.160101.0800) C:\Windows\System32\IMM32.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\system32\iwprn_x86.dll 0x00000002 - Не удается найти указанный файл. C:\Windows\SYSTEM32\WSOCK32.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\WS2_32.dll 10.0.19041.1081 (WinBuild.160101.0800) C:\Windows\SYSTEM32\kernel.appcore.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\system32\uxtheme.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\MSCTF.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\OLEAUT32.dll 10.0.19041.985 (WinBuild.160101.0800) C:\Windows\System32\bcryptPrimitives.dll 10.0.19041.1415 (WinBuild.160101.0800) C:\Windows\System32\clbcatq.dll 2001.12.10941.16384 (WinBuild.160101.0800) C:\Windows\system32\explorerframe.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll 10.0.19041.1387 (WinBuild.160101.0800) C:\Soft\Shells\Far3\Plugins\DiskMenu\DiskMenu.dll 3.13.4.4040 C:\Soft\Shells\Far3\Plugins\LnkView\LnkView.dll 3.0 build 401 C:\Soft\Shells\Far3\Plugins\LuaMacro\LuaMacro.dll 3.0.803.0 C:\Soft\Shells\Far3\lua51.dll 0x00000715 - Указанный тип ресурса в файле образа отсутствует. C:\Soft\Shells\Far3\luafar3.dll 3.0.803.0 C:\Windows\SYSTEM32\CRYPTBASE.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Soft\Shells\Far3\lpeg.dll 0x00000715 - Указанный тип ресурса в файле образа отсутствует. C:\Soft\Shells\Far3\Plugins\PortaDev\PortaDev.dll 3.15.4040.0 C:\Windows\System32\PortableDeviceApi.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\DEVOBJ.dll 10.0.19041.1151 (WinBuild.160101.0800) C:\Windows\System32\WINTRUST.dll 10.0.19041.1266 (WinBuild.160101.0800) C:\Windows\System32\CRYPT32.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\MSASN1.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\System32\PortableDeviceTypes.dll 10.0.19041.746 (WinBuild.160101.0800) C:\Windows\System32\PROPSYS.dll 7.0.19041.1 (WinBuild.160101.0800) C:\Soft\Shells\Far3\Plugins\TmpPanel\TmpPanel.dll 3.0.120.0 C:\Windows\SYSTEM32\windows.storage.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\Wldp.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\ntmarta.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\Windows.StateRepositoryPS.dll 10.0.19041.844 (WinBuild.160101.0800) C:\Windows\System32\Windows.FileExplorer.Common.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\iertutil.dll 11.00.19041.1 (WinBuild.160101.0800) C:\Windows\system32\ntshrui.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\SYSTEM32\cscapi.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\profapi.dll 10.0.19041.844 (WinBuild.160101.0800) C:\Windows\System32\coml2.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\LINKINFO.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Soft\Shells\Far3\Plugins\ShellLink\shellink.dll 1.21.0.0 C:\Windows\SYSTEM32\dbghelp.DLL 10.0.19041.1052 (WinBuild.160101.0800) C:\Windows\SYSTEM32\dbgcore.DLL 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\dbgeng.DLL 10.0.19041.1266 (WinBuild.160101.0800) C:\Windows\SYSTEM32\dbgmodel.dll 10.0.19041.1266 (WinBuild.160101.0800) C:\Windows\SYSTEM32\XmlLite.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\SYSTEM32\CRYPTSP.dll 10.0.19041.546 (WinBuild.160101.0800) C:\Windows\system32\rsaenh.dll 10.0.19041.1 (WinBuild.160101.0800) C:\Windows\System32\imagehlp.dll 10.0.19041.1415 (WinBuild.160101.0800) ====================================================================== Environment ====================================================================== FARADMINMODE=1 FARHOME=C:\Soft\Shells\Far3 FARLANG=Russian FARLOCALPROFILE=C:\Soft\Shells\Far3\Profile FARPROFILE=C:\Soft\Shells\Far3\Profile