====================================================================== Summary ====================================================================== Exception: 0xC0000005 - STATUS_ACCESS_VIOLATION Details: Memory at FFFF800452CBFFFF NetBox.dll! (get the pdb) could not be read errno: 0x00000000 - No error LastError: 0x00000002 - Не удается найти указанный файл. NTSTATUS: 0xC0000034 - Объект с указанным именем не найден. Address: 0x0004253D - NetBox.dll!::operator()(void)const __ptr64+0xDD (Terminal.cpp.obj) Location: GetFiles, plclass.cpp(1026) Module: C:\Program Files\Far Manager\Plugins\NetBox\NetBox.dll Plugin: NetBox 24.9.604.0 (SFTP/FTP(S)/SCP/WebDAV/S3 client for FAR 3.0 x86/x64/ARM64, Mikhail Lukashov) ====================================================================== System information ====================================================================== Far: 3.0.6368.0 x64 (8c6b837) Compiler: Microsoft Visual C++, version 19.41.33923.0 PE time: 2024-09-11 00:15:00.000 File time: 2024-09-10 22:15:02.000 Time: 2024-09-25 09:00:03.246 Local: 2024-09-25 12:00:03.246 +0300, RTZ 2 (зима) Uptime: 00:09:27 OS: Windows NT Workstation 10.0.22631, 0x100/0x30 (Windows 10 Pro, version 23H2, OS build 22631.4169) Locale: ru-RU | LCID=00000419 (Lang=0419 (Primary=019 Sub=01) Sort=0 SortVersion=0) | ANSI=1251 OEM=866 Host: C:\Windows\System32\conhost.exe 10.0.22621.4311 (WinBuild.160101.0800) Parent: C:\Windows\explorer.exe 10.0.22621.4311 (WinBuild.160101.0800) Command: "C:\Program Files\Far Manager\Far.exe" Access: User Memory: 13.6 G out of 33.7 G free (40%); 34.2 M used by the process ====================================================================== Exception ====================================================================== ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0004253D NetBox.dll!::operator()(void)const __ptr64+0xDD (Terminal.cpp.obj) 0005C61A NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x3A (Terminal.cpp.obj) 0005C5A6 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0xD6 (Terminal.cpp.obj) 0004233D NetBox.dll!TTerminal::ProcessFiles(class TStrings * __ptr64,enum TFileOperation,class fastdelegate::FastDelegate3 && __ptr64,void * __ptr64,enum TOperationSide,bool) __ptr64+0x14D (Terminal.cpp.obj) 00045973 NetBox.dll!TTerminal::CalculateFilesSize(class TStrings * __ptr64,__int64 & __ptr64,struct TCalculateSizeParams & __ptr64) __ptr64+0x73 (Terminal.cpp.obj) 0005BA1C NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x10C (Terminal.cpp.obj) 00053549 NetBox.dll!::operator()(void)const __ptr64+0x219 (Terminal.cpp.obj) 0005B807 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x37 (Terminal.cpp.obj) 0005322A NetBox.dll!TTerminal::CopyToLocal(class TStrings * __ptr64,class UnicodeString const & __ptr64,class TCopyParamType const * __ptr64,int,class TParallelOperation * __ptr64) __ptr64+0xFA (Terminal.cpp.obj) 0017E4EB NetBox.dll!OpenW+0x1F75B 001866A5 NetBox.dll!OpenW+0x27915 0017DE0D NetBox.dll!OpenW+0x1F07D 001704A4 NetBox.dll!OpenW+0x11714 00168C81 NetBox.dll!OpenW+0x9EF1 0015EB46 NetBox.dll!GetFilesW+0x46 002820A9 Far.exe!`function_ref::function_ref,struct GetFilesInfo * __ptr64 & __ptr64>(struct Plugin::ExecuteStruct<11,1> & __ptr64,struct GetFilesInfo * __ptr64 & __ptr64) __ptr64'::`2':: >(class `Plugin::ExecuteFunction,struct GetFilesInfo * __ptr64 & __ptr64>(struct Plugin::ExecuteStruct<11,1> & __ptr64,struct GetFilesInfo * __ptr64 & __ptr64) __ptr64'::`2':: && __ptr64) __ptr64'::`1'::::(__int64)+0x19 (plclass.obj) 00281C99 Far.exe!`function_ref::function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64>(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x19 (plclass.obj) 00122726 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x36 (exception_handler.obj) 00280C11 Far.exe!cpp_try,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: >(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,struct source_location const & __ptr64)+0x61 (plclass.obj) 00281DF2 Far.exe!`function_ref::function_ref,struct source_location const & __ptr64) __ptr64'::`2':: const & __ptr64>(class `Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x82 (plclass.obj) 00122758 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x18 (exception_handler.obj) 00280B9E Far.exe!Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64+0xAE (plclass.obj) 0027F9EE Far.exe!Plugin::GetFiles(struct GetFilesInfo * __ptr64) __ptr64+0xCE (plclass.obj) 002B4C99 Far.exe!PluginManager::GetFile(class plugin_panel const * __ptr64,struct PluginPanelItem * __ptr64,class std::basic_string,class std::allocator > const & __ptr64,class std::basic_string,class std::allocator > & __ptr64,int)+0x99 (plugins.obj) 0019E9BA Far.exe!background_searcher::IsFileIncluded(struct PluginPanelItem * __ptr64,class std::basic_string_view >,unsigned long,class std::basic_string_view >) __ptr64+0x4EA (findfile.obj) 001A523D Far.exe!background_searcher::ScanPluginTree(class plugin_panel * __ptr64,unsigned __int64,int & __ptr64) __ptr64+0x4DD (findfile.obj) 001A6568 Far.exe!background_searcher::DoPreparePluginListImpl(void) __ptr64+0x1D8 (findfile.obj) 001A67DC Far.exe!``background_searcher::Search(void) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::::operator()(void)const __ptr64+0x3C (findfile.obj) 00122735 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x45 (exception_handler.obj) 001AB256 Far.exe!`function_ref::function_ref const & __ptr64>(class `background_searcher::Search(void) __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x96 (findfile.obj) 00122758 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x18 (exception_handler.obj) 001A6741 Far.exe!background_searcher::Search(void) __ptr64+0xD1 (findfile.obj) 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 006C006D0078002E RBX = 000001C79B352BA0 RCX = 000001C79B352BA0 RDX = 0000000000000033 RSI = 0000003C538FD3D0 RDI = 0000000000000000 R8 = 0000000000000018 R9 = 0000000000000040 R10 = 00007FFBAD340000 R11 = 00007FFBAD8F993D R12 = 0000000000000000 R13 = 000001C79B350278 R14 = 0000000000000000 R15 = 0000003C538FD550 RIP = 00007FFBAD38253D RSP = 0000003C538FD200 RBP = 0000003C538FD919 EFL = 00010206 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 0004253D NetBox.dll!::operator()(void)const __ptr64+0xDD (Terminal.cpp.obj): 00007ffb`ad382522 8bd7 mov edx,edi 00007ffb`ad382524 ffd0 call rax 00007ffb`ad382526 488bd8 mov rbx,rax 00007ffb`ad382529 4885c0 test rax,rax 00007ffb`ad38252c 7505 jne NetBox+0x42533 (00007ffb`ad382533) 00007ffb`ad38252e 498bdc mov rbx,r12 00007ffb`ad382531 eb12 jmp NetBox+0x42545 (00007ffb`ad382545) 00007ffb`ad382533 488b00 mov rax,qword ptr [rax] 00007ffb`ad382536 66ba3300 mov dx,33h 00007ffb`ad38253a 488bcb mov rcx,rbx 00007ffb`ad38253d ff10 call qword ptr [rax] 0005C61A NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x3A (Terminal.cpp.obj): 00007ffb`ad39c5f0 0f1101 movups xmmword ptr [rcx],xmm0 00007ffb`ad39c5f3 0f104a10 movups xmm1,xmmword ptr [rdx+10h] 00007ffb`ad39c5f7 0f114910 movups xmmword ptr [rcx+10h],xmm1 00007ffb`ad39c5fb 0f104220 movups xmm0,xmmword ptr [rdx+20h] 00007ffb`ad39c5ff 0f114120 movups xmmword ptr [rcx+20h],xmm0 00007ffb`ad39c603 f20f104a30 movsd xmm1,mmword ptr [rdx+30h] 00007ffb`ad39c608 f20f114930 movsd mmword ptr [rcx+30h],xmm1 00007ffb`ad39c60d 410f1000 movups xmm0,xmmword ptr [r8] 00007ffb`ad39c611 0f114138 movups xmmword ptr [rcx+38h],xmm0 00007ffb`ad39c615 e8465efeff call NetBox+0x42460 (00007ffb`ad382460) 00007ffb`ad39c61a 90 nop 0005C5A6 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0xD6 (Terminal.cpp.obj): 00007ffb`ad39c57b 54 push rsp 00007ffb`ad39c57c 2440 and al,40h 00007ffb`ad39c57e 4c89442448 mov qword ptr [rsp+48h],r8 00007ffb`ad39c583 4c894c2450 mov qword ptr [rsp+50h],r9 00007ffb`ad39c588 4c895c2458 mov qword ptr [rsp+58h],r11 00007ffb`ad39c58d 4c89542460 mov qword ptr [rsp+60h],r10 00007ffb`ad39c592 4c8d442420 lea r8,[rsp+20h] 00007ffb`ad39c597 488d542430 lea rdx,[rsp+30h] 00007ffb`ad39c59c 488d4c2470 lea rcx,[rsp+70h] 00007ffb`ad39c5a1 e83a000000 call NetBox+0x5c5e0 (00007ffb`ad39c5e0) 00007ffb`ad39c5a6 488b4b18 mov rcx,qword ptr [rbx+18h] 0004233D NetBox.dll!TTerminal::ProcessFiles(class TStrings * __ptr64,enum TFileOperation,class fastdelegate::FastDelegate3 && __ptr64,void * __ptr64,enum TOperationSide,bool) __ptr64+0x14D (Terminal.cpp.obj): 00007ffb`ad3822f9 488d8424a0040000 lea rax,[rsp+4A0h] 00007ffb`ad382301 48898424a0000000 mov qword ptr [rsp+0A0h],rax 00007ffb`ad382309 488d442438 lea rax,[rsp+38h] 00007ffb`ad38230e 48898424a8000000 mov qword ptr [rsp+0A8h],rax 00007ffb`ad382316 488d8424b0040000 lea rax,[rsp+4B0h] 00007ffb`ad38231e 48898424b0000000 mov qword ptr [rsp+0B0h],rax 00007ffb`ad382326 4c8d442440 lea r8,[rsp+40h] 00007ffb`ad38232b 488d542470 lea rdx,[rsp+70h] 00007ffb`ad382330 488d8c24c0000000 lea rcx,[rsp+0C0h] 00007ffb`ad382338 e893a10100 call NetBox+0x5c4d0 (00007ffb`ad39c4d0) 00007ffb`ad38233d 90 nop 00045973 NetBox.dll!TTerminal::CalculateFilesSize(class TStrings * __ptr64,__int64 & __ptr64,struct TCalculateSizeParams & __ptr64) __ptr64+0x73 (Terminal.cpp.obj): 00007ffb`ad385942 488d15d7f5ffff lea rdx,[NetBox+0x44f20 (00007ffb`ad384f20)] 00007ffb`ad385949 488d4de7 lea rcx,[rbp-19h] 00007ffb`ad38594d e81ef9fdff call NetBox+0x25270 (00007ffb`ad365270) 00007ffb`ad385952 4c8bc8 mov r9,rax 00007ffb`ad385955 c744242801000000 mov dword ptr [rsp+28h],1 00007ffb`ad38595d 4c897c2420 mov qword ptr [rsp+20h],r15 00007ffb`ad385962 41b807000000 mov r8d,7 00007ffb`ad385968 488bd3 mov rdx,rbx 00007ffb`ad38596b 488bce mov rcx,rsi 00007ffb`ad38596e e87dc8ffff call NetBox+0x421f0 (00007ffb`ad3821f0) 00007ffb`ad385973 498b4740 mov rax,qword ptr [r15+40h] 0005BA1C NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x10C (Terminal.cpp.obj): 00007ffb`ad39b9f2 7405 je NetBox+0x5b9f9 (00007ffb`ad39b9f9) 00007ffb`ad39b9f4 c644247801 mov byte ptr [rsp+78h],1 00007ffb`ad39b9f9 488d442420 lea rax,[rsp+20h] 00007ffb`ad39b9fe 4889442470 mov qword ptr [rsp+70h],rax 00007ffb`ad39ba03 488b5320 mov rdx,qword ptr [rbx+20h] 00007ffb`ad39ba07 4c8d4c2450 lea r9,[rsp+50h] 00007ffb`ad39ba0c 4c8b4328 mov r8,qword ptr [rbx+28h] 00007ffb`ad39ba10 488b12 mov rdx,qword ptr [rdx] 00007ffb`ad39ba13 488b4b18 mov rcx,qword ptr [rbx+18h] 00007ffb`ad39ba17 e8e49efeff call NetBox+0x45900 (00007ffb`ad385900) 00007ffb`ad39ba1c 84c0 test al,al 00053549 NetBox.dll!::operator()(void)const __ptr64+0x219 (Terminal.cpp.obj): 00007ffb`ad39351b 48895598 mov qword ptr [rbp-68h],rdx 00007ffb`ad39351f 48894da0 mov qword ptr [rbp-60h],rcx 00007ffb`ad393523 488d442450 lea rax,[rsp+50h] 00007ffb`ad393528 488945a8 mov qword ptr [rbp-58h],rax 00007ffb`ad39352c 488d8568040000 lea rax,[rbp+468h] 00007ffb`ad393533 488945b0 mov qword ptr [rbp-50h],rax 00007ffb`ad393537 4c8d442470 lea r8,[rsp+70h] 00007ffb`ad39353c 488d5580 lea rdx,[rbp-80h] 00007ffb`ad393540 488d4dc0 lea rcx,[rbp-40h] 00007ffb`ad393544 e8c7830000 call NetBox+0x5b910 (00007ffb`ad39b910) 00007ffb`ad393549 4c8b36 mov r14,qword ptr [rsi] 0005B807 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x37 (Terminal.cpp.obj): 00007ffb`ad39b7e0 0f1101 movups xmmword ptr [rcx],xmm0 00007ffb`ad39b7e3 0f104a10 movups xmm1,xmmword ptr [rdx+10h] 00007ffb`ad39b7e7 0f114910 movups xmmword ptr [rcx+10h],xmm1 00007ffb`ad39b7eb 0f104220 movups xmm0,xmmword ptr [rdx+20h] 00007ffb`ad39b7ef 0f114120 movups xmmword ptr [rcx+20h],xmm0 00007ffb`ad39b7f3 0f104a30 movups xmm1,xmmword ptr [rdx+30h] 00007ffb`ad39b7f7 0f114930 movups xmmword ptr [rcx+30h],xmm1 00007ffb`ad39b7fb 498b00 mov rax,qword ptr [r8] 00007ffb`ad39b7fe 48894140 mov qword ptr [rcx+40h],rax 00007ffb`ad39b802 e8297bffff call NetBox+0x53330 (00007ffb`ad393330) 00007ffb`ad39b807 90 nop 0005322A NetBox.dll!TTerminal::CopyToLocal(class TStrings * __ptr64,class UnicodeString const & __ptr64,class TCopyParamType const * __ptr64,int,class TParallelOperation * __ptr64) __ptr64+0xFA (Terminal.cpp.obj): 00007ffb`ad393201 488945bf mov qword ptr [rbp-41h],rax 00007ffb`ad393205 488975c7 mov qword ptr [rbp-39h],rsi 00007ffb`ad393209 488d458b lea rax,[rbp-75h] 00007ffb`ad39320d 488945cf mov qword ptr [rbp-31h],rax 00007ffb`ad393211 488d4587 lea rax,[rbp-79h] 00007ffb`ad393215 488945d7 mov qword ptr [rbp-29h],rax 00007ffb`ad393219 4c8d458f lea r8,[rbp-71h] 00007ffb`ad39321d 488d559f lea rdx,[rbp-61h] 00007ffb`ad393221 488d4de7 lea rcx,[rbp-19h] 00007ffb`ad393225 e8a6850000 call NetBox+0x5b7d0 (00007ffb`ad39b7d0) 00007ffb`ad39322a 837d8b00 cmp dword ptr [rbp-75h],0 0017E4EB NetBox.dll!OpenW+0x1F75B: 00007ffb`ad4be4c1 1bc0 sbb eax,eax 00007ffb`ad4be4c3 83e004 and eax,4 00007ffb`ad4be4c6 0bf0 or esi,eax 00007ffb`ad4be4c8 4c897c2428 mov qword ptr [rsp+28h],r15 00007ffb`ad4be4cd 89742420 mov dword ptr [rsp+20h],esi 00007ffb`ad4be4d1 4c8d4d80 lea r9,[rbp-80h] 00007ffb`ad4be4d5 4d8bc5 mov r8,r13 00007ffb`ad4be4d8 488b97b0010000 mov rdx,qword ptr [rdi+1B0h] 00007ffb`ad4be4df 488b8f30010000 mov rcx,qword ptr [rdi+130h] 00007ffb`ad4be4e6 e8454cedff call NetBox+0x53130 (00007ffb`ad393130) 00007ffb`ad4be4eb 41bc01000000 mov r12d,1 ====================================================================== Exception handler thread ====================================================================== ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 0011E38B Far.exe!collect_information(class exception_context const & __ptr64,struct source_location const & __ptr64,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,struct error_state_ex const & __ptr64,class std::span)+0x1A1B (exception_handler.obj) 00120858 Far.exe!handle_generic_exception(class exception_context const & __ptr64,struct source_location const & __ptr64,class Plugin const * __ptr64 const,class std::basic_string_view >,class std::basic_string_view >,struct error_state_ex const & __ptr64,class std::span)+0x8A8 (exception_handler.obj) 00121CDD Far.exe!handle_seh_exception(class exception_context const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)+0x28D (exception_handler.obj) 00122923 Far.exe!detail::seh_filter(struct _EXCEPTION_POINTERS const * __ptr64,class Plugin const * __ptr64,struct source_location const & __ptr64)+0x173 (exception_handler.obj) 00394CE7 Far.exe!int `detail::seh_try(class function_ref,class function_ref,class function_ref)'::`1'::filt$0+0x37 (exception_handler.obj) 00343583 Far.exe!__C_specific_handler+0x9F (libvcruntime:riscchandler.obj) 000A51DF ntdll.dll!_chkstk+0x12F 0001E866 ntdll.dll!RtlFindCharInUnicodeString+0xA96 000A41CE ntdll.dll!KiUserExceptionDispatcher+0x2E 0004253D NetBox.dll!::operator()(void)const __ptr64+0xDD (Terminal.cpp.obj) 0005C61A NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x3A (Terminal.cpp.obj) 0005C5A6 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0xD6 (Terminal.cpp.obj) 0004233D NetBox.dll!TTerminal::ProcessFiles(class TStrings * __ptr64,enum TFileOperation,class fastdelegate::FastDelegate3 && __ptr64,void * __ptr64,enum TOperationSide,bool) __ptr64+0x14D (Terminal.cpp.obj) 00045973 NetBox.dll!TTerminal::CalculateFilesSize(class TStrings * __ptr64,__int64 & __ptr64,struct TCalculateSizeParams & __ptr64) __ptr64+0x73 (Terminal.cpp.obj) 0005BA1C NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x10C (Terminal.cpp.obj) 00053549 NetBox.dll!::operator()(void)const __ptr64+0x219 (Terminal.cpp.obj) 0005B807 NetBox.dll!Sysutils::detail::scope_guard,class >::scope_guard,class >(class && __ptr64,class && __ptr64) __ptr64+0x37 (Terminal.cpp.obj) 0005322A NetBox.dll!TTerminal::CopyToLocal(class TStrings * __ptr64,class UnicodeString const & __ptr64,class TCopyParamType const * __ptr64,int,class TParallelOperation * __ptr64) __ptr64+0xFA (Terminal.cpp.obj) 0017E4EB NetBox.dll!OpenW+0x1F75B 001866A5 NetBox.dll!OpenW+0x27915 0017DE0D NetBox.dll!OpenW+0x1F07D 001704A4 NetBox.dll!OpenW+0x11714 00168C81 NetBox.dll!OpenW+0x9EF1 0015EB46 NetBox.dll!GetFilesW+0x46 002820A9 Far.exe!`function_ref::function_ref,struct GetFilesInfo * __ptr64 & __ptr64>(struct Plugin::ExecuteStruct<11,1> & __ptr64,struct GetFilesInfo * __ptr64 & __ptr64) __ptr64'::`2':: >(class `Plugin::ExecuteFunction,struct GetFilesInfo * __ptr64 & __ptr64>(struct Plugin::ExecuteStruct<11,1> & __ptr64,struct GetFilesInfo * __ptr64 & __ptr64) __ptr64'::`2':: && __ptr64) __ptr64'::`1'::::(__int64)+0x19 (plclass.obj) 00281C99 Far.exe!`function_ref::function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64>(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x19 (plclass.obj) 00122726 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x36 (exception_handler.obj) 00280C11 Far.exe!cpp_try,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: >(class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,class ``Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2'::::operator()(void)const __ptr64'::`2':: const & __ptr64,struct source_location const & __ptr64)+0x61 (plclass.obj) 00281DF2 Far.exe!`function_ref::function_ref,struct source_location const & __ptr64) __ptr64'::`2':: const & __ptr64>(class `Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x82 (plclass.obj) 00122758 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x18 (exception_handler.obj) 00280B9E Far.exe!Plugin::ExecuteFunctionImpl(enum export_index,class function_ref,struct source_location const & __ptr64) __ptr64+0xAE (plclass.obj) 0027F9EE Far.exe!Plugin::GetFiles(struct GetFilesInfo * __ptr64) __ptr64+0xCE (plclass.obj) 002B4C99 Far.exe!PluginManager::GetFile(class plugin_panel const * __ptr64,struct PluginPanelItem * __ptr64,class std::basic_string,class std::allocator > const & __ptr64,class std::basic_string,class std::allocator > & __ptr64,int)+0x99 (plugins.obj) 0019E9BA Far.exe!background_searcher::IsFileIncluded(struct PluginPanelItem * __ptr64,class std::basic_string_view >,unsigned long,class std::basic_string_view >) __ptr64+0x4EA (findfile.obj) 001A523D Far.exe!background_searcher::ScanPluginTree(class plugin_panel * __ptr64,unsigned __int64,int & __ptr64) __ptr64+0x4DD (findfile.obj) 001A6568 Far.exe!background_searcher::DoPreparePluginListImpl(void) __ptr64+0x1D8 (findfile.obj) 001A67DC Far.exe!``background_searcher::Search(void) __ptr64'::`2'::::operator()(void)const __ptr64'::`2'::::operator()(void)const __ptr64+0x3C (findfile.obj) 00122735 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x45 (exception_handler.obj) 001AB256 Far.exe!`function_ref::function_ref const & __ptr64>(class `background_searcher::Search(void) __ptr64'::`2':: const & __ptr64) __ptr64'::`1'::::(__int64)+0x96 (findfile.obj) 00122758 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x18 (exception_handler.obj) 001A6741 Far.exe!background_searcher::Search(void) __ptr64+0xD1 (findfile.obj) 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ====================================================================== Thread 15732 / 0x3D74 (Main Thread) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC0000034 - Объект с указанным именем не найден. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE 001F7267 Far.exe!GetInputRecordImpl(struct _INPUT_RECORD * __ptr64,bool,bool)+0x4B7 (keyboard.obj) 001F7C79 Far.exe!GetInputRecord(struct _INPUT_RECORD * __ptr64,bool,bool)+0x29 (keyboard.obj) 00225D96 Far.exe!Manager::ProcessMainLoop(void) __ptr64+0x36 (manager.obj) 00224222 Far.exe!Manager::ExecuteModal(class std::shared_ptr const & __ptr64) __ptr64+0xA2 (manager.obj) 000C6065 Far.exe!Dialog::Process(void) __ptr64+0x285 (dialog.obj) 001A745A Far.exe!FindFiles::FindFilesProcess(void) __ptr64+0xB9A (findfile.obj) 001AA2DC Far.exe!FindFiles::FindFiles(void) __ptr64+0x1E8C (findfile.obj) 0018933D Far.exe!FilePanels::ProcessKey(class Manager::Key const & __ptr64) __ptr64+0x15AD (filepanels.obj) 00226632 Far.exe!Manager::ProcessKey(class Manager::Key) __ptr64+0x1C2 (manager.obj) 00225F44 Far.exe!Manager::ProcessMainLoop(void) __ptr64+0x1E4 (manager.obj) 00225D31 Far.exe!Manager::EnterMainLoop(void) __ptr64+0xC1 (manager.obj) 0021D2C5 Far.exe!MainProcess(class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,class std::basic_string_view >,int,int)+0xF35 (main.obj) 00222493 Far.exe!`function_ref::function_ref)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const & __ptr64,class `mainImpl(class std::span)'::`2':: const & __ptr64,class `mainImpl(class std::span)'::`2':: const & __ptr64,struct source_location const & __ptr64)'::`7':: >(class `cpp_try)'::`2'::,class `mainImpl(class std::span)'::`2'::,class `mainImpl(class std::span)'::`2':: >(class `mainImpl(class std::span)'::`2':: const & __ptr64,class `mainImpl(class std::span)'::`2':: const & __ptr64,class `mainImpl(class std::span)'::`2':: const & __ptr64,struct source_location const & __ptr64)'::`7':: && __ptr64) __ptr64'::`1'::::(__int64)+0xE3 (main.obj) 00122726 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x36 (exception_handler.obj) 00221234 Far.exe!mainImpl(class std::span)+0xE44 (main.obj) 00221BE9 Far.exe!`wmain_seh(void)'::`2'::::operator()(void)const __ptr64+0x19 (main.obj) 00222512 Far.exe!`function_ref::function_ref,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const & __ptr64,class `wmain_seh(void)'::`2':: const & __ptr64,class `wmain_seh(void)'::`2':: const & __ptr64,struct source_location const & __ptr64)'::`7':: >(class `cpp_try,class `wmain_seh(void)'::`2'::,class `wmain_seh(void)'::`2':: >(class `wmain_seh(void)'::`2':: const & __ptr64,class `wmain_seh(void)'::`2':: const & __ptr64,class `wmain_seh(void)'::`2':: const & __ptr64,struct source_location const & __ptr64)'::`7':: && __ptr64) __ptr64'::`1'::::(__int64)+0x12 (main.obj) 00122726 Far.exe!detail::cpp_try(class function_ref,class function_ref,class function_ref,struct source_location const & __ptr64)+0x36 (exception_handler.obj) 00221B18 Far.exe!wmain_seh(void)+0x3A8 (main.obj) 0022259C Far.exe!`function_ref::function_ref,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64)'::`3':: >(class `seh_try,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `seh_try_with_ui,class `main(void)'::`2':: >(class `main(void)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2':: const & __ptr64,class `main(void)'::`2':: const & __ptr64)'::`3':: && __ptr64) __ptr64'::`1'::::(__int64)+0x4C (main.obj) 00122758 Far.exe!detail::seh_try(class function_ref,class function_ref,class function_ref)+0x18 (exception_handler.obj) 00221D58 Far.exe!main+0xC8 (main.obj) 00341F30 Far.exe!__scrt_common_main_seh(void)+0x10C (LIBCMT:exe_main.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 000000000000005B RBX = 0000000000000002 RCX = 0000000000000002 RDX = 0000003C536FD3F0 RSI = 0000000000000000 RDI = 0000000000000002 R8 = 000001C79A154720 R9 = 0000000000000173 R10 = 00000000007F0000 R11 = 000001C79A154720 R12 = 0000003C536FD3F0 R13 = 0000003C534EE000 R14 = 0000003C536FCE50 R15 = 0000000000000000 RIP = 00007FFC32090C84 RSP = 0000003C536FCE08 RBP = 0000003C536FD230 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14: 00007ffc`32090c5f 00e9 add cl,ch 00007ffc`32090c61 3b6ffd cmp ebp,dword ptr [rdi-3] 00007ffc`32090c64 ff6666 jmp qword ptr [rsi+66h] 00007ffc`32090c67 660f1f840000000000 nop word ptr [rax+rax] ntdll!ZwWaitForMultipleObjects: 00007ffc`32090c70 4c8bd1 mov r10,rcx 00007ffc`32090c73 b85b000000 mov eax,5Bh 00007ffc`32090c78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32090c80 7503 jne ntdll!ZwWaitForMultipleObjects+0x15 (00007ffc`32090c85) 00007ffc`32090c82 0f05 syscall 00007ffc`32090c84 c3 ret 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9: 00007ffc`2f7665d0 4c8d742440 lea r14,[rsp+40h] 00007ffc`2f7665d5 448b7c2438 mov r15d,dword ptr [rsp+38h] 00007ffc`2f7665da 4533c0 xor r8d,r8d 00007ffc`2f7665dd 4585ff test r15d,r15d 00007ffc`2f7665e0 410f94c0 sete r8b 00007ffc`2f7665e4 4c89742420 mov qword ptr [rsp+20h],r14 00007ffc`2f7665e9 440fb6ce movzx r9d,sil 00007ffc`2f7665ed 498bd4 mov rdx,r12 00007ffc`2f7665f0 8bcb mov ecx,ebx 00007ffc`2f7665f2 48ff152fea2000 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x104708 (00007ffc`2f975028)] 00007ffc`2f7665f9 0f1f440000 nop dword ptr [rax+rax] 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE: No prior disassembly possible 00007ffc`2f7664fe 4883c438 add rsp,38h 00007ffc`2f766502 c3 ret 00007ffc`2f766503 cc int 3 00007ffc`2f766504 cc int 3 00007ffc`2f766505 cc int 3 00007ffc`2f766506 cc int 3 00007ffc`2f766507 cc int 3 00007ffc`2f766508 718a jno KERNELBASE!BasepCopyFileCallback+0x68c4 (00007ffc`2f766494) 00007ffc`2f76650a d05a83 rcr byte ptr [rdx-7Dh],1 00007ffc`2f76650d 3e15b048895c adc eax,5C8948B0h 001F7267 Far.exe!GetInputRecordImpl(struct _INPUT_RECORD * __ptr64,bool,bool)+0x4B7 (keyboard.obj): 00007ff6`e695723b 6a26 push 26h 00007ff6`e695723d 004889 add byte ptr [rax-77h],cl 00007ff6`e6957240 bdc8010000 mov ebp,1C8h 00007ff6`e6957245 41b9ffffffff mov r9d,0FFFFFFFFh 00007ff6`e695724b 4584f6 test r14b,r14b 00007ff6`e695724e 4c0f45ce cmovne r9,rsi 00007ff6`e6957252 4533c0 xor r8d,r8d 00007ff6`e6957255 488d95c0010000 lea rdx,[rbp+1C0h] 00007ff6`e695725c b902000000 mov ecx,2 00007ff6`e6957261 ff15d1301b00 call qword ptr [Far+0x3aa338 (00007ff6`e6b0a338)] 00007ff6`e6957267 8985a0010000 mov dword ptr [rbp+1A0h],eax 001F7C79 Far.exe!GetInputRecord(struct _INPUT_RECORD * __ptr64,bool,bool)+0x29 (keyboard.obj): 00007ff6`e6957c53 4883ec78 sub rsp,78h 00007ff6`e6957c57 488b05e2352600 mov rax,qword ptr [Far+0x45b240 (00007ff6`e6bbb240)] 00007ff6`e6957c5e 4833c4 xor rax,rsp 00007ff6`e6957c61 4889442450 mov qword ptr [rsp+50h],rax 00007ff6`e6957c66 0f57c0 xorps xmm0,xmm0 00007ff6`e6957c69 33c0 xor eax,eax 00007ff6`e6957c6b 0f1101 movups xmmword ptr [rcx],xmm0 00007ff6`e6957c6e 894110 mov dword ptr [rcx+10h],eax 00007ff6`e6957c71 488be9 mov rbp,rcx 00007ff6`e6957c74 e837f1ffff call Far+0x1f6db0 (00007ff6`e6956db0) 00007ff6`e6957c79 8bf0 mov esi,eax 00225D96 Far.exe!Manager::ProcessMainLoop(void) __ptr64+0x36 (manager.obj): 00007ff6`e6985d6c 4156 push r14 00007ff6`e6985d6e 4881ec80000000 sub rsp,80h 00007ff6`e6985d75 488b05c4542300 mov rax,qword ptr [Far+0x45b240 (00007ff6`e6bbb240)] 00007ff6`e6985d7c 4833c4 xor rax,rsp 00007ff6`e6985d7f 4889442478 mov qword ptr [rsp+78h],rax 00007ff6`e6985d84 488bf1 mov rsi,rcx 00007ff6`e6985d87 4533c0 xor r8d,r8d 00007ff6`e6985d8a 33d2 xor edx,edx 00007ff6`e6985d8c 488d4c2460 lea rcx,[rsp+60h] 00007ff6`e6985d91 e8ba1efdff call Far+0x1f7c50 (00007ff6`e6957c50) 00007ff6`e6985d96 448bc0 mov r8d,eax 00224222 Far.exe!Manager::ExecuteModal(class std::shared_ptr const & __ptr64) __ptr64+0xA2 (manager.obj): 00007ff6`e69841ff 8bf0 mov esi,eax 00007ff6`e6984201 89442430 mov dword ptr [rsp+30h],eax 00007ff6`e6984205 488bcb mov rcx,rbx 00007ff6`e6984208 e8232d0000 call Far+0x226f30 (00007ff6`e6986f30) 00007ff6`e698420d 807c247000 cmp byte ptr [rsp+70h],0 00007ff6`e6984212 751d jne Far+0x224231 (00007ff6`e6984231) 00007ff6`e6984214 807b2000 cmp byte ptr [rbx+20h],0 00007ff6`e6984218 7517 jne Far+0x224231 (00007ff6`e6984231) 00007ff6`e698421a 488bcb mov rcx,rbx 00007ff6`e698421d e83e1b0000 call Far+0x225d60 (00007ff6`e6985d60) 00007ff6`e6984222 488bcb mov rcx,rbx 000C6065 Far.exe!Dialog::Process(void) __ptr64+0x285 (dialog.obj): 00007ff6`e682603f 85c0 test eax,eax 00007ff6`e6826041 0f84d2000000 je Far+0xc6119 (00007ff6`e6826119) 00007ff6`e6826047 ebec jmp Far+0xc6035 (00007ff6`e6826035) 00007ff6`e6826049 488b4638 mov rax,qword ptr [rsi+38h] 00007ff6`e682604d 488945f0 mov qword ptr [rbp-10h],rax 00007ff6`e6826051 488b4640 mov rax,qword ptr [rsi+40h] 00007ff6`e6826055 488945f8 mov qword ptr [rbp-8],rax 00007ff6`e6826059 488d55f0 lea rdx,[rbp-10h] 00007ff6`e682605d 498bc8 mov rcx,r8 00007ff6`e6826060 e81be11500 call Far+0x224180 (00007ff6`e6984180) 00007ff6`e6826065 90 nop 001A745A Far.exe!FindFiles::FindFilesProcess(void) __ptr64+0xB9A (findfile.obj): 00007ff6`e6907436 55 push rbp 00007ff6`e6907437 084885 or byte ptr [rax-7Bh],cl 00007ff6`e690743a d27406e8 sal byte ptr [rsi+rax-18h],cl 00007ff6`e690743e 9e sahf 00007ff6`e690743f 7f0b jg Far+0x1a744c (00007ff6`e690744c) 00007ff6`e6907441 0090488d4d00 add byte ptr [rax+4D8D48h],dl 00007ff6`e6907447 e8f49ee8ff call Far+0x31340 (00007ff6`e6791340) 00007ff6`e690744c 4c8975e0 mov qword ptr [rbp-20h],r14 00007ff6`e6907450 488b4c2460 mov rcx,qword ptr [rsp+60h] 00007ff6`e6907455 e886e9f1ff call Far+0xc5de0 (00007ff6`e6825de0) 00007ff6`e690745a 498d8ec0010000 lea rcx,[r14+1C0h] 001AA2DC Far.exe!FindFiles::FindFiles(void) __ptr64+0x1E8C (findfile.obj): 00007ff6`e690a2b9 ff10 call qword ptr [rax] 00007ff6`e690a2bb b8ffffffff mov eax,0FFFFFFFFh 00007ff6`e690a2c0 f00fc1430c lock xadd dword ptr [rbx+0Ch],eax 00007ff6`e690a2c5 83f801 cmp eax,1 00007ff6`e690a2c8 750a jne Far+0x1aa2d4 (00007ff6`e690a2d4) 00007ff6`e690a2ca 488b4db8 mov rcx,qword ptr [rbp-48h] 00007ff6`e690a2ce 488b01 mov rax,qword ptr [rcx] 00007ff6`e690a2d1 ff5008 call qword ptr [rax+8] 00007ff6`e690a2d4 488bce mov rcx,rsi 00007ff6`e690a2d7 e8e4c5ffff call Far+0x1a68c0 (00007ff6`e69068c0) 00007ff6`e690a2dc 84c0 test al,al ====================================================================== Thread 15848 / 0x3DE8 (Window messages processor) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00001534 win32u.dll!NtUserGetMessage+0x14 000253FA USER32.dll!GetMessageW+0x2A 0033B2B2 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const & __ptr64) __ptr64+0x4A2 (wm_listener.obj) 0033BB6B Far.exe!os::concurrency::thread::wrapper >(void (__cdecl wm_listener::*&& __ptr64)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64 && __ptr64,class std::reference_wrapper && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x1B (wm_listener.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 0000000000001004 RBX = 0000003C539FFD20 RCX = 0000003C539FFD20 RDX = 0000000000000000 RSI = 0000003C536FEC40 RDI = 000001C797269EC0 R8 = 0000003C539FFAF8 R9 = 0000003C539FFD30 R10 = 0000000000000000 R11 = 0000000000000246 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 0000000000000000 R15 = 00007FF6E6B56B80 RIP = 00007FFC2FC81534 RSP = 0000003C539FFBC8 RBP = 0000003C539FFD30 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00001534 win32u.dll!NtUserGetMessage+0x14: 00007ffc`2fc81514 c3 ret 00007ffc`2fc81515 cd2e int 2Eh 00007ffc`2fc81517 c3 ret 00007ffc`2fc81518 0f1f840000000000 nop dword ptr [rax+rax] win32u!NtUserGetMessage: 00007ffc`2fc81520 4c8bd1 mov r10,rcx 00007ffc`2fc81523 b804100000 mov eax,1004h 00007ffc`2fc81528 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`2fc81530 7503 jne win32u!NtUserGetMessage+0x15 (00007ffc`2fc81535) 00007ffc`2fc81532 0f05 syscall 00007ffc`2fc81534 c3 ret 000253FA USER32.dll!GetMessageW+0x2A: 00007ffc`309b53d5 57 push rdi 00007ffc`309b53d6 4883ec50 sub rsp,50h 00007ffc`309b53da 418bc0 mov eax,r8d 00007ffc`309b53dd 488bd9 mov rbx,rcx 00007ffc`309b53e0 410bc1 or eax,r9d 00007ffc`309b53e3 b90000feff mov ecx,0FFFE0000h 00007ffc`309b53e8 85c1 test ecx,eax 00007ffc`309b53ea 0f85ece00100 jne USER32!GetWindowTextLengthA+0xde2c (00007ffc`309d34dc) 00007ffc`309b53f0 488bcb mov rcx,rbx 00007ffc`309b53f3 48ff15a6290700 call qword ptr [USER32!gapfnScSendMessage+0x1350 (00007ffc`30a27da0)] 00007ffc`309b53fa 0f1f440000 nop dword ptr [rax+rax] 0033B2B2 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const & __ptr64) __ptr64+0x4A2 (wm_listener.obj): 00007ff6`e6a9b286 488bcf mov rcx,rdi 00007ff6`e6a9b289 e8d289dcff call Far+0x103c60 (00007ff6`e6863c60) 00007ff6`e6a9b28e 84c0 test al,al 00007ff6`e6a9b290 0f853d010000 jne Far+0x33b3d3 (00007ff6`e6a9b3d3) 00007ff6`e6a9b296 66660f1f840000000000 nop word ptr [rax+rax] 00007ff6`e6a9b2a0 4533c9 xor r9d,r9d 00007ff6`e6a9b2a3 4533c0 xor r8d,r8d 00007ff6`e6a9b2a6 33d2 xor edx,edx 00007ff6`e6a9b2a8 488d4df0 lea rcx,[rbp-10h] 00007ff6`e6a9b2ac ff15fef70600 call qword ptr [Far+0x3aaab0 (00007ff6`e6b0aab0)] 00007ff6`e6a9b2b2 85c0 test eax,eax 0033BB6B Far.exe!os::concurrency::thread::wrapper >(void (__cdecl wm_listener::*&& __ptr64)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64 && __ptr64,class std::reference_wrapper && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x1B (wm_listener.obj): 00007ff6`e6a9bb4e 5e pop rsi 00007ff6`e6a9bb4f c3 ret 00007ff6`e6a9bb50 4053 push rbx 00007ff6`e6a9bb52 4883ec20 sub rsp,20h 00007ff6`e6a9bb56 488bd9 mov rbx,rcx 00007ff6`e6a9bb59 48894c2430 mov qword ptr [rsp+30h],rcx 00007ff6`e6a9bb5e 488b01 mov rax,qword ptr [rcx] 00007ff6`e6a9bb61 488b5108 mov rdx,qword ptr [rcx+8] 00007ff6`e6a9bb65 488b4910 mov rcx,qword ptr [rcx+10h] 00007ff6`e6a9bb69 ffd0 call rax 00007ff6`e6a9bb6b 90 nop 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj): 00007ff6`e6abcb29 7510 jne Far+0x35cb3b (00007ff6`e6abcb3b) 00007ff6`e6abcb2b 8d48ff lea ecx,[rax-1] 00007ff6`e6abcb2e e8cd210100 call Far+0x36ed00 (00007ff6`e6aced00) 00007ff6`e6abcb33 85c0 test eax,eax 00007ff6`e6abcb35 0f94c0 sete al 00007ff6`e6abcb38 884320 mov byte ptr [rbx+20h],al 00007ff6`e6abcb3b 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h 00007ff6`e6abcb45 488b4b08 mov rcx,qword ptr [rbx+8] 00007ff6`e6abcb49 488b03 mov rax,qword ptr [rbx] 00007ff6`e6abcb4c ff15dee20400 call qword ptr [Far+0x3aae30 (00007ff6`e6b0ae30)] 00007ff6`e6abcb52 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 16448 / 0x4040 (FS watcher) ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj) 0018ECF1 Far.exe!background_watcher::process(void) __ptr64+0x191 (filesystemwatcher.obj) 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 000000000000005B RBX = 0000000000000002 RCX = 0000000000000002 RDX = 000001C7972F4420 RSI = 0000000000000000 RDI = 0000000000000002 R8 = 0000000000000000 R9 = 0000000000000000 R10 = 0000000000000000 R11 = 0000000000000000 R12 = 000001C7972F4420 R13 = 0000003C534EE000 R14 = 0000000000000000 R15 = 0000000000000000 RIP = 00007FFC32090C84 RSP = 0000003C53DFF428 RBP = 0000003C53DFF919 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14: 00007ffc`32090c5f 00e9 add cl,ch 00007ffc`32090c61 3b6ffd cmp ebp,dword ptr [rdi-3] 00007ffc`32090c64 ff6666 jmp qword ptr [rsi+66h] 00007ffc`32090c67 660f1f840000000000 nop word ptr [rax+rax] ntdll!ZwWaitForMultipleObjects: 00007ffc`32090c70 4c8bd1 mov r10,rcx 00007ffc`32090c73 b85b000000 mov eax,5Bh 00007ffc`32090c78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32090c80 7503 jne ntdll!ZwWaitForMultipleObjects+0x15 (00007ffc`32090c85) 00007ffc`32090c82 0f05 syscall 00007ffc`32090c84 c3 ret 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9: 00007ffc`2f7665d0 4c8d742440 lea r14,[rsp+40h] 00007ffc`2f7665d5 448b7c2438 mov r15d,dword ptr [rsp+38h] 00007ffc`2f7665da 4533c0 xor r8d,r8d 00007ffc`2f7665dd 4585ff test r15d,r15d 00007ffc`2f7665e0 410f94c0 sete r8b 00007ffc`2f7665e4 4c89742420 mov qword ptr [rsp+20h],r14 00007ffc`2f7665e9 440fb6ce movzx r9d,sil 00007ffc`2f7665ed 498bd4 mov rdx,r12 00007ffc`2f7665f0 8bcb mov ecx,ebx 00007ffc`2f7665f2 48ff152fea2000 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x104708 (00007ffc`2f975028)] 00007ffc`2f7665f9 0f1f440000 nop dword ptr [rax+rax] 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE: No prior disassembly possible 00007ffc`2f7664fe 4883c438 add rsp,38h 00007ffc`2f766502 c3 ret 00007ffc`2f766503 cc int 3 00007ffc`2f766504 cc int 3 00007ffc`2f766505 cc int 3 00007ffc`2f766506 cc int 3 00007ffc`2f766507 cc int 3 00007ffc`2f766508 718a jno KERNELBASE!BasepCopyFileCallback+0x68c4 (00007ffc`2f766494) 00007ffc`2f76650a d05a83 rcr byte ptr [rdx-7Dh],1 00007ffc`2f76650d 3e15b048895c adc eax,5C8948B0h 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj): 00007ff6`e69b0dd2 4881ec20010000 sub rsp,120h 00007ff6`e69b0dd9 488b0560a42000 mov rax,qword ptr [Far+0x45b240 (00007ff6`e6bbb240)] 00007ff6`e69b0de0 4833c4 xor rax,rsp 00007ff6`e69b0de3 4889842410010000 mov qword ptr [rsp+110h],rax 00007ff6`e69b0deb 488b5908 mov rbx,qword ptr [rcx+8] 00007ff6`e69b0def 41b9ffffffff mov r9d,0FFFFFFFFh 00007ff6`e69b0df5 4533c0 xor r8d,r8d 00007ff6`e69b0df8 488b11 mov rdx,qword ptr [rcx] 00007ff6`e69b0dfb 8bcb mov ecx,ebx 00007ff6`e69b0dfd ff1535951500 call qword ptr [Far+0x3aa338 (00007ff6`e6b0a338)] 00007ff6`e69b0e03 8bc8 mov ecx,eax 0018ECF1 Far.exe!background_watcher::process(void) __ptr64+0x191 (filesystemwatcher.obj): 00007ff6`e68eeccb 58 pop rax 00007ff6`e68eeccc 498b4f60 mov rcx,qword ptr [r15+60h] 00007ff6`e68eecd0 482bc8 sub rcx,rax 00007ff6`e68eecd3 48c1f903 sar rcx,3 00007ff6`e68eecd7 488945f7 mov qword ptr [rbp-9],rax 00007ff6`e68eecdb 48894dff mov qword ptr [rbp-1],rcx 00007ff6`e68eecdf 0f2845f7 movaps xmm0,xmmword ptr [rbp-9] 00007ff6`e68eece3 660f7f45b7 movdqa xmmword ptr [rbp-49h],xmm0 00007ff6`e68eece8 488d4db7 lea rcx,[rbp-49h] 00007ff6`e68eecec e8df200c00 call Far+0x250dd0 (00007ff6`e69b0dd0) 00007ff6`e68eecf1 488bd8 mov rbx,rax 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj): 00007ff6`e68f040c cc int 3 00007ff6`e68f040d cc int 3 00007ff6`e68f040e cc int 3 00007ff6`e68f040f cc int 3 00007ff6`e68f0410 4053 push rbx 00007ff6`e68f0412 4883ec20 sub rsp,20h 00007ff6`e68f0416 488bd9 mov rbx,rcx 00007ff6`e68f0419 48894c2430 mov qword ptr [rsp+30h],rcx 00007ff6`e68f041e 488b4908 mov rcx,qword ptr [rcx+8] 00007ff6`e68f0422 ff13 call qword ptr [rbx] 00007ff6`e68f0424 90 nop 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj): 00007ff6`e6abcb29 7510 jne Far+0x35cb3b (00007ff6`e6abcb3b) 00007ff6`e6abcb2b 8d48ff lea ecx,[rax-1] 00007ff6`e6abcb2e e8cd210100 call Far+0x36ed00 (00007ff6`e6aced00) 00007ff6`e6abcb33 85c0 test eax,eax 00007ff6`e6abcb35 0f94c0 sete al 00007ff6`e6abcb38 884320 mov byte ptr [rbx+20h],al 00007ff6`e6abcb3b 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h 00007ff6`e6abcb45 488b4b08 mov rcx,qword ptr [rbx+8] 00007ff6`e6abcb49 488b03 mov rax,qword ptr [rbx] 00007ff6`e6abcb4c ff15dee20400 call qword ptr [Far+0x3aae30 (00007ff6`e6b0ae30)] 00007ff6`e6abcb52 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 8324 / 0x2084 (Taskbar processor) ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC0000047 - Попытка освобождения семафора, при котором было бы превышено его максимальное значение счетчика. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj) 003061F6 Far.exe!taskbar_impl::handler(void)const __ptr64+0x3C6 (taskbar.obj) 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 000000000000005B RBX = 0000000000000003 RCX = 0000000000000003 RDX = 0000003C53EFFD70 RSI = 0000000000000000 RDI = 0000000000000003 R8 = 0000003C53EFEEB8 R9 = 00000000004E0740 R10 = 0000000000000000 R11 = 0000000000000246 R12 = 0000003C53EFFD70 R13 = 0000003C534EE000 R14 = 0000000000000000 R15 = 0000000000000000 RIP = 00007FFC32090C84 RSP = 0000003C53EFF8C8 RBP = 0000003C53EFFDD9 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14: 00007ffc`32090c5f 00e9 add cl,ch 00007ffc`32090c61 3b6ffd cmp ebp,dword ptr [rdi-3] 00007ffc`32090c64 ff6666 jmp qword ptr [rsi+66h] 00007ffc`32090c67 660f1f840000000000 nop word ptr [rax+rax] ntdll!ZwWaitForMultipleObjects: 00007ffc`32090c70 4c8bd1 mov r10,rcx 00007ffc`32090c73 b85b000000 mov eax,5Bh 00007ffc`32090c78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32090c80 7503 jne ntdll!ZwWaitForMultipleObjects+0x15 (00007ffc`32090c85) 00007ffc`32090c82 0f05 syscall 00007ffc`32090c84 c3 ret 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9: 00007ffc`2f7665d0 4c8d742440 lea r14,[rsp+40h] 00007ffc`2f7665d5 448b7c2438 mov r15d,dword ptr [rsp+38h] 00007ffc`2f7665da 4533c0 xor r8d,r8d 00007ffc`2f7665dd 4585ff test r15d,r15d 00007ffc`2f7665e0 410f94c0 sete r8b 00007ffc`2f7665e4 4c89742420 mov qword ptr [rsp+20h],r14 00007ffc`2f7665e9 440fb6ce movzx r9d,sil 00007ffc`2f7665ed 498bd4 mov rdx,r12 00007ffc`2f7665f0 8bcb mov ecx,ebx 00007ffc`2f7665f2 48ff152fea2000 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x104708 (00007ffc`2f975028)] 00007ffc`2f7665f9 0f1f440000 nop dword ptr [rax+rax] 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE: No prior disassembly possible 00007ffc`2f7664fe 4883c438 add rsp,38h 00007ffc`2f766502 c3 ret 00007ffc`2f766503 cc int 3 00007ffc`2f766504 cc int 3 00007ffc`2f766505 cc int 3 00007ffc`2f766506 cc int 3 00007ffc`2f766507 cc int 3 00007ffc`2f766508 718a jno KERNELBASE!BasepCopyFileCallback+0x68c4 (00007ffc`2f766494) 00007ffc`2f76650a d05a83 rcr byte ptr [rdx-7Dh],1 00007ffc`2f76650d 3e15b048895c adc eax,5C8948B0h 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj): 00007ff6`e69b0dd2 4881ec20010000 sub rsp,120h 00007ff6`e69b0dd9 488b0560a42000 mov rax,qword ptr [Far+0x45b240 (00007ff6`e6bbb240)] 00007ff6`e69b0de0 4833c4 xor rax,rsp 00007ff6`e69b0de3 4889842410010000 mov qword ptr [rsp+110h],rax 00007ff6`e69b0deb 488b5908 mov rbx,qword ptr [rcx+8] 00007ff6`e69b0def 41b9ffffffff mov r9d,0FFFFFFFFh 00007ff6`e69b0df5 4533c0 xor r8d,r8d 00007ff6`e69b0df8 488b11 mov rdx,qword ptr [rcx] 00007ff6`e69b0dfb 8bcb mov ecx,ebx 00007ff6`e69b0dfd ff1535951500 call qword ptr [Far+0x3aa338 (00007ff6`e6b0a338)] 00007ff6`e69b0e03 8bc8 mov ecx,eax 003061F6 Far.exe!taskbar_impl::handler(void)const __ptr64+0x3C6 (taskbar.obj): 00007ff6`e6a661cf 00498b add byte ptr [rcx-75h],cl 00007ff6`e6a661d2 47184889 sbb byte ptr [r8-77h],r9b 00007ff6`e6a661d6 4597 xchg eax,r15d 00007ff6`e6a661d8 498b4720 mov rax,qword ptr [r15+20h] 00007ff6`e6a661dc 4889459f mov qword ptr [rbp-61h],rax 00007ff6`e6a661e0 498b4728 mov rax,qword ptr [r15+28h] 00007ff6`e6a661e4 488945a7 mov qword ptr [rbp-59h],rax 00007ff6`e6a661e8 660f7f75c7 movdqa xmmword ptr [rbp-39h],xmm6 00007ff6`e6a661ed 488d4dc7 lea rcx,[rbp-39h] 00007ff6`e6a661f1 e8daabf4ff call Far+0x250dd0 (00007ff6`e69b0dd0) 00007ff6`e6a661f6 4885c0 test rax,rax 00190424 Far.exe!os::concurrency::thread::wrapper(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x14 (findfile.obj): 00007ff6`e68f040c cc int 3 00007ff6`e68f040d cc int 3 00007ff6`e68f040e cc int 3 00007ff6`e68f040f cc int 3 00007ff6`e68f0410 4053 push rbx 00007ff6`e68f0412 4883ec20 sub rsp,20h 00007ff6`e68f0416 488bd9 mov rbx,rcx 00007ff6`e68f0419 48894c2430 mov qword ptr [rsp+30h],rcx 00007ff6`e68f041e 488b4908 mov rcx,qword ptr [rcx+8] 00007ff6`e68f0422 ff13 call qword ptr [rbx] 00007ff6`e68f0424 90 nop 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj): 00007ff6`e6abcb29 7510 jne Far+0x35cb3b (00007ff6`e6abcb3b) 00007ff6`e6abcb2b 8d48ff lea ecx,[rax-1] 00007ff6`e6abcb2e e8cd210100 call Far+0x36ed00 (00007ff6`e6aced00) 00007ff6`e6abcb33 85c0 test eax,eax 00007ff6`e6abcb35 0f94c0 sete al 00007ff6`e6abcb38 884320 mov byte ptr [rbx+20h],al 00007ff6`e6abcb3b 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h 00007ff6`e6abcb45 488b4b08 mov rcx,qword ptr [rbx+8] 00007ff6`e6abcb49 488b03 mov rax,qword ptr [rbx] 00007ff6`e6abcb4c ff15dee20400 call qword ptr [Far+0x3aae30 (00007ff6`e6b0ae30)] 00007ff6`e6abcb52 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 2164 / 0x874 ====================================================================== LastError: 0x000003F0 - Попытка ссылки на несуществующий токен. NTSTATUS: 0xC000007C - Попытка ссылки на несуществующий токен. Как правило, это происходит при ссылке на токен, связанный с потоком команд, не олицетворяющим клиента. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 00001534 win32u.dll!NtUserGetMessage+0x14 000253FA USER32.dll!GetMessageW+0x2A 000DF675 combase.dll!RoGetServerActivatableClasses+0x11F5 000DF076 combase.dll!RoGetServerActivatableClasses+0xBF6 000289C7 combase.dll!CoFreeUnusedLibrariesEx+0x287 00028DD9 combase.dll!CoFreeUnusedLibrariesEx+0x699 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 0000000000001004 RBX = 0000003C540FFB10 RCX = 0000003C540FFB10 RDX = 0000000000000000 RSI = 00000000004E0740 RDI = 0000000000000000 R8 = 000001C79B528BC8 R9 = 0000000000000000 R10 = DD2407C056D32070 R11 = 0000000000000246 R12 = 0000000000000001 R13 = 0000000000000000 R14 = 0000000000001000 R15 = 0000000000000000 RIP = 00007FFC2FC81534 RSP = 0000003C540FFA68 RBP = 00000000000003C4 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 00001534 win32u.dll!NtUserGetMessage+0x14: 00007ffc`2fc81514 c3 ret 00007ffc`2fc81515 cd2e int 2Eh 00007ffc`2fc81517 c3 ret 00007ffc`2fc81518 0f1f840000000000 nop dword ptr [rax+rax] win32u!NtUserGetMessage: 00007ffc`2fc81520 4c8bd1 mov r10,rcx 00007ffc`2fc81523 b804100000 mov eax,1004h 00007ffc`2fc81528 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`2fc81530 7503 jne win32u!NtUserGetMessage+0x15 (00007ffc`2fc81535) 00007ffc`2fc81532 0f05 syscall 00007ffc`2fc81534 c3 ret 000253FA USER32.dll!GetMessageW+0x2A: 00007ffc`309b53d5 57 push rdi 00007ffc`309b53d6 4883ec50 sub rsp,50h 00007ffc`309b53da 418bc0 mov eax,r8d 00007ffc`309b53dd 488bd9 mov rbx,rcx 00007ffc`309b53e0 410bc1 or eax,r9d 00007ffc`309b53e3 b90000feff mov ecx,0FFFE0000h 00007ffc`309b53e8 85c1 test ecx,eax 00007ffc`309b53ea 0f85ece00100 jne USER32!GetWindowTextLengthA+0xde2c (00007ffc`309d34dc) 00007ffc`309b53f0 488bcb mov rcx,rbx 00007ffc`309b53f3 48ff15a6290700 call qword ptr [USER32!gapfnScSendMessage+0x1350 (00007ffc`30a27da0)] 00007ffc`309b53fa 0f1f440000 nop dword ptr [rax+rax] 000DF675 combase.dll!RoGetServerActivatableClasses+0x11F5: 00007ffc`3154f646 48ff15935d1d00 call qword ptr [combase!Ordinal160+0x619e0 (00007ffc`317253e0)] 00007ffc`3154f64d 0f1f440000 nop dword ptr [rax+rax] 00007ffc`3154f652 488bc8 mov rcx,rax 00007ffc`3154f655 48ff15d4651d00 call qword ptr [combase!Ordinal160+0x62230 (00007ffc`31725c30)] 00007ffc`3154f65c 0f1f440000 nop dword ptr [rax+rax] 00007ffc`3154f661 4533c9 xor r9d,r9d 00007ffc`3154f664 488d4c2440 lea rcx,[rsp+40h] 00007ffc`3154f669 4533c0 xor r8d,r8d 00007ffc`3154f66c 33d2 xor edx,edx 00007ffc`3154f66e 48ff152bcf2800 call qword ptr [combase!Ordinal183+0x7ee00 (00007ffc`317dc5a0)] 00007ffc`3154f675 0f1f440000 nop dword ptr [rax+rax] 000DF076 combase.dll!RoGetServerActivatableClasses+0xBF6: 00007ffc`3154f052 894658 mov dword ptr [rsi+58h],eax 00007ffc`3154f055 48ff1564661d00 call qword ptr [combase!Ordinal160+0x61cc0 (00007ffc`317256c0)] 00007ffc`3154f05c 0f1f440000 nop dword ptr [rax+rax] 00007ffc`3154f061 8b4630 mov eax,dword ptr [rsi+30h] 00007ffc`3154f064 83e01f and eax,1Fh 00007ffc`3154f067 83e801 sub eax,1 00007ffc`3154f06a 7405 je combase!RoGetServerActivatableClasses+0xbf1 (00007ffc`3154f071) 00007ffc`3154f06c 83f801 cmp eax,1 00007ffc`3154f06f 7505 jne combase!RoGetServerActivatableClasses+0xbf6 (00007ffc`3154f076) 00007ffc`3154f071 e832050000 call combase!RoGetServerActivatableClasses+0x1128 (00007ffc`3154f5a8) 00007ffc`3154f076 488b442440 mov rax,qword ptr [rsp+40h] 000289C7 combase.dll!CoFreeUnusedLibrariesEx+0x287: 00007ffc`3149898f 458d6701 lea r12d,[r15+1] 00007ffc`31498993 65488b042530000000 mov rax,qword ptr gs:[30h] 00007ffc`3149899c 488b8058170000 mov rax,qword ptr [rax+1758h] 00007ffc`314989a3 4885c0 test rax,rax 00007ffc`314989a6 7407 je combase!CoFreeUnusedLibrariesEx+0x26f (00007ffc`314989af) 00007ffc`314989a8 4489b838010000 mov dword ptr [rax+138h],r15d 00007ffc`314989af 49ba70a2dc126a9799b0 mov r10,0B099976A12DCA270h 00007ffc`314989b9 488b4b18 mov rcx,qword ptr [rbx+18h] 00007ffc`314989bd 488b4310 mov rax,qword ptr [rbx+10h] 00007ffc`314989c1 ff1501d52800 call qword ptr [combase!Ordinal160+0x624c8 (00007ffc`31725ec8)] 00007ffc`314989c7 48ff1512ca2800 call qword ptr [combase!Ordinal160+0x619e0 (00007ffc`317253e0)] 00028DD9 combase.dll!CoFreeUnusedLibrariesEx+0x699: 00007ffc`31498db1 895c2408 mov dword ptr [rsp+8],ebx 00007ffc`31498db5 57 push rdi 00007ffc`31498db6 4883ec20 sub rsp,20h 00007ffc`31498dba 488bf9 mov rdi,rcx 00007ffc`31498dbd 48ff1504c62800 call qword ptr [combase!Ordinal160+0x619c8 (00007ffc`317253c8)] 00007ffc`31498dc4 0f1f440000 nop dword ptr [rax+rax] 00007ffc`31498dc9 894728 mov dword ptr [rdi+28h],eax 00007ffc`31498dcc e833000000 call combase!CoFreeUnusedLibrariesEx+0x6c4 (00007ffc`31498e04) 00007ffc`31498dd1 488bcf mov rcx,rdi 00007ffc`31498dd4 e897fbffff call combase!CoFreeUnusedLibrariesEx+0x230 (00007ffc`31498970) 00007ffc`31498dd9 488b5f30 mov rbx,qword ptr [rdi+30h] 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 2680 / 0xA78 (NetBox IdleThread) ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A01B4 ntdll.dll!NtWaitForSingleObject+0x14 00039A9E KERNELBASE.dll!WaitForSingleObjectEx+0x8E 00166766 NetBox.dll!OpenW+0x79D6 00060B18 NetBox.dll!TSimpleThread::ThreadProc(void * __ptr64)+0x18 (Queue.cpp.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 0000000000000004 RBX = 0000000000000000 RCX = 000000000000043C RDX = 0000000000000000 RSI = 0000003C541FFA28 RDI = 000000000000043C R8 = 0000000000000014 R9 = 0000003C541FF9F0 R10 = 00007FF6E69E5180 R11 = 0000000000000246 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000043C R15 = 0000000000000000 RIP = 00007FFC320901B4 RSP = 0000003C541FF9F8 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A01B4 ntdll.dll!NtWaitForSingleObject+0x14: 00007ffc`32090194 c3 ret 00007ffc`32090195 cd2e int 2Eh 00007ffc`32090197 c3 ret 00007ffc`32090198 0f1f840000000000 nop dword ptr [rax+rax] ntdll!NtWaitForSingleObject: 00007ffc`320901a0 4c8bd1 mov r10,rcx 00007ffc`320901a3 b804000000 mov eax,4 00007ffc`320901a8 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`320901b0 7503 jne ntdll!NtWaitForSingleObject+0x15 (00007ffc`320901b5) 00007ffc`320901b2 0f05 syscall 00007ffc`320901b4 c3 ret 00039A9E KERNELBASE.dll!WaitForSingleObjectEx+0x8E: 00007ffc`2f749a78 1027 adc byte ptr [rdi],ah 00007ffc`2f749a7a 0000 add byte ptr [rax],al 00007ffc`2f749a7c 48894c2428 mov qword ptr [rsp+28h],rcx 00007ffc`2f749a81 48f7d9 neg rcx 00007ffc`2f749a84 48894c2428 mov qword ptr [rsp+28h],rcx 00007ffc`2f749a89 488d742428 lea rsi,[rsp+28h] 00007ffc`2f749a8e 4c8bc6 mov r8,rsi 00007ffc`2f749a91 0fb6d3 movzx edx,bl 00007ffc`2f749a94 498bce mov rcx,r14 00007ffc`2f749a97 48ff15eaab2200 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x103d68 (00007ffc`2f974688)] 00007ffc`2f749a9e 0f1f440000 nop dword ptr [rax+rax] 00166766 NetBox.dll!OpenW+0x79D6: 00007ffb`ad4a6737 0f85a8000000 jne NetBox!OpenW+0x7a55 (00007ffb`ad4a67e5) 00007ffb`ad4a673d 48897c2430 mov qword ptr [rsp+30h],rdi 00007ffb`ad4a6742 807b3000 cmp byte ptr [rbx+30h],0 00007ffb`ad4a6746 757c jne NetBox!OpenW+0x7a34 (00007ffb`ad4a67c4) 00007ffb`ad4a6748 0f1f840000000000 nop dword ptr [rax+rax] 00007ffb`ad4a6750 488d4b38 lea rcx,[rbx+38h] 00007ffb`ad4a6754 ff1556bf4600 call qword ptr [NetBox!OpenW+0x473920 (00007ffb`ad9126b0)] 00007ffb`ad4a675a 488b4b60 mov rcx,qword ptr [rbx+60h] 00007ffb`ad4a675e 8bd6 mov edx,esi 00007ffb`ad4a6760 ff157ab94600 call qword ptr [NetBox!OpenW+0x473350 (00007ffb`ad9120e0)] 00007ffb`ad4a6766 488d4b38 lea rcx,[rbx+38h] 00060B18 NetBox.dll!TSimpleThread::ThreadProc(void * __ptr64)+0x18 (Queue.cpp.obj): 00007ffb`ad3a0afe cc int 3 00007ffb`ad3a0aff cc int 3 00007ffb`ad3a0b00 48894c2408 mov qword ptr [rsp+8],rcx 00007ffb`ad3a0b05 53 push rbx 00007ffb`ad3a0b06 4883ec20 sub rsp,20h 00007ffb`ad3a0b0a 488bd9 mov rbx,rcx 00007ffb`ad3a0b0d 4885c9 test rcx,rcx 00007ffb`ad3a0b10 7432 je NetBox+0x60b44 (00007ffb`ad3a0b44) 00007ffb`ad3a0b12 488b01 mov rax,qword ptr [rcx] 00007ffb`ad3a0b15 ff5030 call qword ptr [rax+30h] 00007ffb`ad3a0b18 90 nop 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 12908 / 0x326C (Async history config) ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj) 0007564D Far.exe!`anonymous namespace'::HistoryConfigCustom::ThreadProc(void) __ptr64+0x49D (configdb.obj) 0008170E Far.exe!os::concurrency::thread::wrapper(void (__cdecl `anonymous namespace'::HistoryConfigCustom::*&& __ptr64)(void) __ptr64,class A0x6002ce20::HistoryConfigCustom * __ptr64 const && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x2E (configdb.obj) 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj) 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 000000000000005B RBX = 0000000000000002 RCX = 0000000000000002 RDX = 0000003C542FFA78 RSI = 0000000000000000 RDI = 0000000000000002 R8 = 0000000000000000 R9 = 00000000FFFFFFFF R10 = 0000000000000016 R11 = 0000000000000000 R12 = 0000003C542FFA78 R13 = 0000003C534EE000 R14 = 0000000000000000 R15 = 0000000000000000 RIP = 00007FFC32090C84 RSP = 0000003C542FF598 RBP = 0000003C542FFAF0 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14: 00007ffc`32090c5f 00e9 add cl,ch 00007ffc`32090c61 3b6ffd cmp ebp,dword ptr [rdi-3] 00007ffc`32090c64 ff6666 jmp qword ptr [rsi+66h] 00007ffc`32090c67 660f1f840000000000 nop word ptr [rax+rax] ntdll!ZwWaitForMultipleObjects: 00007ffc`32090c70 4c8bd1 mov r10,rcx 00007ffc`32090c73 b85b000000 mov eax,5Bh 00007ffc`32090c78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32090c80 7503 jne ntdll!ZwWaitForMultipleObjects+0x15 (00007ffc`32090c85) 00007ffc`32090c82 0f05 syscall 00007ffc`32090c84 c3 ret 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9: 00007ffc`2f7665d0 4c8d742440 lea r14,[rsp+40h] 00007ffc`2f7665d5 448b7c2438 mov r15d,dword ptr [rsp+38h] 00007ffc`2f7665da 4533c0 xor r8d,r8d 00007ffc`2f7665dd 4585ff test r15d,r15d 00007ffc`2f7665e0 410f94c0 sete r8b 00007ffc`2f7665e4 4c89742420 mov qword ptr [rsp+20h],r14 00007ffc`2f7665e9 440fb6ce movzx r9d,sil 00007ffc`2f7665ed 498bd4 mov rdx,r12 00007ffc`2f7665f0 8bcb mov ecx,ebx 00007ffc`2f7665f2 48ff152fea2000 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x104708 (00007ffc`2f975028)] 00007ffc`2f7665f9 0f1f440000 nop dword ptr [rax+rax] 000564FE KERNELBASE.dll!WaitForMultipleObjects+0xE: No prior disassembly possible 00007ffc`2f7664fe 4883c438 add rsp,38h 00007ffc`2f766502 c3 ret 00007ffc`2f766503 cc int 3 00007ffc`2f766504 cc int 3 00007ffc`2f766505 cc int 3 00007ffc`2f766506 cc int 3 00007ffc`2f766507 cc int 3 00007ffc`2f766508 718a jno KERNELBASE!BasepCopyFileCallback+0x68c4 (00007ffc`2f766494) 00007ffc`2f76650a d05a83 rcr byte ptr [rdx-7Dh],1 00007ffc`2f76650d 3e15b048895c adc eax,5C8948B0h 00250E03 Far.exe!os::detail::handle_implementation::wait_any(class span)+0x33 (platform.obj): 00007ff6`e69b0dd2 4881ec20010000 sub rsp,120h 00007ff6`e69b0dd9 488b0560a42000 mov rax,qword ptr [Far+0x45b240 (00007ff6`e6bbb240)] 00007ff6`e69b0de0 4833c4 xor rax,rsp 00007ff6`e69b0de3 4889842410010000 mov qword ptr [rsp+110h],rax 00007ff6`e69b0deb 488b5908 mov rbx,qword ptr [rcx+8] 00007ff6`e69b0def 41b9ffffffff mov r9d,0FFFFFFFFh 00007ff6`e69b0df5 4533c0 xor r8d,r8d 00007ff6`e69b0df8 488b11 mov rdx,qword ptr [rcx] 00007ff6`e69b0dfb 8bcb mov ecx,ebx 00007ff6`e69b0dfd ff1535951500 call qword ptr [Far+0x3aa338 (00007ff6`e6b0a338)] 00007ff6`e69b0e03 8bc8 mov ecx,eax 0007564D Far.exe!`anonymous namespace'::HistoryConfigCustom::ThreadProc(void) __ptr64+0x49D (configdb.obj): 00007ff6`e67d561c 48894588 mov qword ptr [rbp-78h],rax 00007ff6`e67d5620 488b8788000000 mov rax,qword ptr [rdi+88h] 00007ff6`e67d5627 48894590 mov qword ptr [rbp-70h],rax 00007ff6`e67d562b 488d4588 lea rax,[rbp-78h] 00007ff6`e67d562f 488945a0 mov qword ptr [rbp-60h],rax 00007ff6`e67d5633 48c745a802000000 mov qword ptr [rbp-58h],2 00007ff6`e67d563b 0f2845a0 movaps xmm0,xmmword ptr [rbp-60h] 00007ff6`e67d563f 660f7f45b0 movdqa xmmword ptr [rbp-50h],xmm0 00007ff6`e67d5644 488d4db0 lea rcx,[rbp-50h] 00007ff6`e67d5648 e883b71d00 call Far+0x250dd0 (00007ff6`e69b0dd0) 00007ff6`e67d564d 4883f801 cmp rax,1 0008170E Far.exe!os::concurrency::thread::wrapper(void (__cdecl `anonymous namespace'::HistoryConfigCustom::*&& __ptr64)(void) __ptr64,class A0x6002ce20::HistoryConfigCustom * __ptr64 const && __ptr64) __ptr64'::`2':: >(void * __ptr64)+0x2E (configdb.obj): 00007ff6`e67e16e9 48894c2430 mov qword ptr [rsp+30h],rcx 00007ff6`e67e16ee 4c8b4910 mov r9,qword ptr [rcx+10h] 00007ff6`e67e16f2 4863510c movsxd rdx,dword ptr [rcx+0Ch] 00007ff6`e67e16f6 498b4108 mov rax,qword ptr [r9+8] 00007ff6`e67e16fa 48630c02 movsxd rcx,dword ptr [rdx+rax] 00007ff6`e67e16fe 48635308 movsxd rdx,dword ptr [rbx+8] 00007ff6`e67e1702 4903c9 add rcx,r9 00007ff6`e67e1705 4883c208 add rdx,8 00007ff6`e67e1709 4803ca add rcx,rdx 00007ff6`e67e170c ff13 call qword ptr [rbx] 00007ff6`e67e170e 90 nop 0035CB52 Far.exe!thread_start(void * __ptr64 const)+0x5A (libucrt:thread.obj): 00007ff6`e6abcb29 7510 jne Far+0x35cb3b (00007ff6`e6abcb3b) 00007ff6`e6abcb2b 8d48ff lea ecx,[rax-1] 00007ff6`e6abcb2e e8cd210100 call Far+0x36ed00 (00007ff6`e6aced00) 00007ff6`e6abcb33 85c0 test eax,eax 00007ff6`e6abcb35 0f94c0 sete al 00007ff6`e6abcb38 884320 mov byte ptr [rbx+20h],al 00007ff6`e6abcb3b 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h 00007ff6`e6abcb45 488b4b08 mov rcx,qword ptr [rbx+8] 00007ff6`e6abcb49 488b03 mov rax,qword ptr [rbx] 00007ff6`e6abcb4c ff15dee20400 call qword ptr [Far+0x3aae30 (00007ff6`e6b0ae30)] 00007ff6`e6abcb52 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 9876 / 0x2694 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C797204F20 RCX = 0000000000000098 RDX = 000001C799EB3AA0 RSI = 0000000000000001 RDI = 000001C799EB3E20 R8 = 0000000000000008 R9 = 00000000FFFFFFFF R10 = 0000000000000002 R11 = 0000000000000000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000001 RIP = 00007FFC32093D84 RSP = 0000003C537FF768 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 12860 / 0x323C ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C797202440 RCX = 0000000000000018 RDX = 000001C797255860 RSI = 0000000000000001 RDI = 000001C797255BE0 R8 = 0000000000000001 R9 = 0000000000001000 R10 = 00000000FFFFFFFF R11 = 0000000000007000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000000 RIP = 00007FFC32093D84 RSP = 0000003C53AFF6A8 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 9344 / 0x2480 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C797204F20 RCX = 0000000000000098 RDX = 000001C79F67A3D0 RSI = 0000000000000001 RDI = 000001C79F67A750 R8 = 0000000000000008 R9 = 00000000FFFFFFFF R10 = 0000000000000002 R11 = 0000000000000000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000000 RIP = 00007FFC32093D84 RSP = 0000003C53BFF468 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 14068 / 0x36F4 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0x00000000 - STATUS_SUCCESS ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C797204F20 RCX = 0000000000000098 RDX = 000001C79F67B5A0 RSI = 0000000000000001 RDI = 0000000000000000 R8 = 0000000000000000 R9 = 0000000000000000 R10 = 0000000000000000 R11 = 0000000000000000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000000 RIP = 00007FFC32093D84 RSP = 0000003C53CFF528 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 9652 / 0x25B4 ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C79CDF36C0 RCX = 0000000000000634 RDX = 000001C79F67D220 RSI = 0000000000000001 RDI = 0000000000000000 R8 = 0000000000000000 R9 = 0000000000000000 R10 = 0000000000000000 R11 = 0000000000000000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000000 RIP = 00007FFC32093D84 RSP = 0000003C53FFFB38 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 6952 / 0x1B28 ====================================================================== LastError: 0x00000057 - Параметр задан неверно. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9 00044A07 crypt32.dll!I_CryptInstallAsn1Module+0x227 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 000000000000005B RBX = 0000000000000001 RCX = 0000000000000001 RDX = 000001C79B853960 RSI = 0000000000000000 RDI = 0000000000000001 R8 = 0000000000000000 R9 = 0000000000000000 R10 = 0000000000000000 R11 = 0000000000000000 R12 = 000001C79B853960 R13 = 0000003C534EE000 R14 = 0000003C543FFBA0 R15 = 0000000000000000 RIP = 00007FFC32090C84 RSP = 0000003C543FFB58 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A0C84 ntdll.dll!ZwWaitForMultipleObjects+0x14: 00007ffc`32090c5f 00e9 add cl,ch 00007ffc`32090c61 3b6ffd cmp ebp,dword ptr [rdi-3] 00007ffc`32090c64 ff6666 jmp qword ptr [rsi+66h] 00007ffc`32090c67 660f1f840000000000 nop word ptr [rax+rax] ntdll!ZwWaitForMultipleObjects: 00007ffc`32090c70 4c8bd1 mov r10,rcx 00007ffc`32090c73 b85b000000 mov eax,5Bh 00007ffc`32090c78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32090c80 7503 jne ntdll!ZwWaitForMultipleObjects+0x15 (00007ffc`32090c85) 00007ffc`32090c82 0f05 syscall 00007ffc`32090c84 c3 ret 000565F9 KERNELBASE.dll!WaitForMultipleObjectsEx+0xE9: 00007ffc`2f7665d0 4c8d742440 lea r14,[rsp+40h] 00007ffc`2f7665d5 448b7c2438 mov r15d,dword ptr [rsp+38h] 00007ffc`2f7665da 4533c0 xor r8d,r8d 00007ffc`2f7665dd 4585ff test r15d,r15d 00007ffc`2f7665e0 410f94c0 sete r8b 00007ffc`2f7665e4 4c89742420 mov qword ptr [rsp+20h],r14 00007ffc`2f7665e9 440fb6ce movzx r9d,sil 00007ffc`2f7665ed 498bd4 mov rdx,r12 00007ffc`2f7665f0 8bcb mov ecx,ebx 00007ffc`2f7665f2 48ff152fea2000 call qword ptr [KERNELBASE!UnhandledExceptionFilter+0x104708 (00007ffc`2f975028)] 00007ffc`2f7665f9 0f1f440000 nop dword ptr [rax+rax] 00044A07 crypt32.dll!I_CryptInstallAsn1Module+0x227: 00007ffc`2f5e49e3 488bd9 mov rbx,rcx 00007ffc`2f5e49e6 48f7d8 neg rax 00007ffc`2f5e49e9 1bff sbb edi,edi 00007ffc`2f5e49eb f7df neg edi 00007ffc`2f5e49ed 448b4b30 mov r9d,dword ptr [rbx+30h] 00007ffc`2f5e49f1 488d5310 lea rdx,[rbx+10h] 00007ffc`2f5e49f5 8364242000 and dword ptr [rsp+20h],0 00007ffc`2f5e49fa 8d4f01 lea ecx,[rdi+1] 00007ffc`2f5e49fd 4533c0 xor r8d,r8d 00007ffc`2f5e4a00 48ff1549ed0d00 call qword ptr [crypt32!CryptMsgSignCTL+0x22c90 (00007ffc`2f6c3750)] 00007ffc`2f5e4a07 0f1f440000 nop dword ptr [rax+rax] 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Thread 14800 / 0x39D0 ====================================================================== LastError: 0x00000000 - Операция успешно завершена. NTSTATUS: 0xC000000D - Службе или функции передан неверный параметр. ---------------------------------------------------------------------- Stack ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D 0005AF28 ntdll.dll!RtlUserThreadStart+0x28 ---------------------------------------------------------------------- Registers ---------------------------------------------------------------------- RAX = 00000000000001E3 RBX = 000001C797202440 RCX = 0000000000000018 RDX = 000001C79F67A040 RSI = 0000000000000001 RDI = 000001C79F67A3C0 R8 = 0000000000000000 R9 = 0000000000000000 R10 = 0000000000000000 R11 = 0000000000000000 R12 = 0000000000000000 R13 = 0000000000000000 R14 = 000000000000FFFF R15 = 0000000000000000 RIP = 00007FFC32093D84 RSP = 0000003C544FF8C8 RBP = 0000000000000000 EFL = 00000246 ---------------------------------------------------------------------- Disassembly ---------------------------------------------------------------------- 000A3D84 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14: 00007ffc`32093d64 c3 ret 00007ffc`32093d65 cd2e int 2Eh 00007ffc`32093d67 c3 ret 00007ffc`32093d68 0f1f840000000000 nop dword ptr [rax+rax] ntdll!ZwWaitForWorkViaWorkerFactory: 00007ffc`32093d70 4c8bd1 mov r10,rcx 00007ffc`32093d73 b8e3010000 mov eax,1E3h 00007ffc`32093d78 f604250803fe7f01 test byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1 00007ffc`32093d80 7503 jne ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007ffc`32093d85) 00007ffc`32093d82 0f05 syscall 00007ffc`32093d84 c3 ret 0003585E ntdll.dll!RtlClearThreadWorkOnBehalfTicket+0x35E: 00007ffc`32025827 488d842458020000 lea rax,[rsp+258h] 00007ffc`3202582f 4889442468 mov qword ptr [rsp+68h],rax 00007ffc`32025834 44896c2448 mov dword ptr [rsp+48h],r13d 00007ffc`32025839 488d842428020000 lea rax,[rsp+228h] 00007ffc`32025841 4889442420 mov qword ptr [rsp+20h],rax 00007ffc`32025846 4c8d4c2448 lea r9,[rsp+48h] 00007ffc`3202584b 448b442444 mov r8d,dword ptr [rsp+44h] 00007ffc`32025850 488b542468 mov rdx,qword ptr [rsp+68h] 00007ffc`32025855 488b4b38 mov rcx,qword ptr [rbx+38h] 00007ffc`32025859 e812e50600 call ntdll!ZwWaitForWorkViaWorkerFactory (00007ffc`32093d70) 00007ffc`3202585e 8bc8 mov ecx,eax 0001257D KERNEL32.DLL!BaseThreadInitThunk+0x1D: 00007ffc`30f22562 5c pop rsp 00007ffc`30f22563 2410 and al,10h 00007ffc`30f22565 4889742418 mov qword ptr [rsp+18h],rsi 00007ffc`30f2256a 57 push rdi 00007ffc`30f2256b 4883ec20 sub rsp,20h 00007ffc`30f2256f 33db xor ebx,ebx 00007ffc`30f22571 85c9 test ecx,ecx 00007ffc`30f22573 7517 jne KERNEL32!BaseThreadInitThunk+0x2c (00007ffc`30f2258c) 00007ffc`30f22575 498bc8 mov rcx,r8 00007ffc`30f22578 e8731c0100 call KERNEL32!ReleasePackageVirtualizationContext+0x2e30 (00007ffc`30f341f0) 00007ffc`30f2257d 8bc8 mov ecx,eax 0005AF28 ntdll.dll!RtlUserThreadStart+0x28: ntdll!RtlUserThreadStart: 00007ffc`3204af00 4883ec78 sub rsp,78h 00007ffc`3204af04 4c8bc2 mov r8,rdx 00007ffc`3204af07 488b0542b01200 mov rax,qword ptr [ntdll!NlsAnsiCodePage+0x26d8 (00007ffc`32175f50)] 00007ffc`3204af0e 4885c0 test rax,rax 00007ffc`3204af11 7417 je ntdll!RtlUserThreadStart+0x2a (00007ffc`3204af2a) 00007ffc`3204af13 49ba7003d17ea7bfe589 mov r10,89E5BFA77ED10370h 00007ffc`3204af1d 488bd1 mov rdx,rcx 00007ffc`3204af20 33c9 xor ecx,ecx 00007ffc`3204af22 ff15e8401400 call qword ptr [ntdll!KiUserInvertedFunctionTable+0x3af0 (00007ffc`3218f010)] 00007ffc`3204af28 eb1f jmp ntdll!RtlUserThreadStart+0x49 (00007ffc`3204af49) ====================================================================== Modules ====================================================================== 0x00007FF6E6760000 | C:\Program Files\Far Manager\Far.exe | File and archive manager | 3.0.6368.0 x64 0x00007FFC31FF0000 | C:\WINDOWS\SYSTEM32\ntdll.dll | Системная библиотека NT | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30F10000 | C:\WINDOWS\System32\KERNEL32.DLL | Библиотека клиента Windows NT BASE API | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2F710000 | C:\WINDOWS\System32\KERNELBASE.dll | Библиотека клиента Windows NT BASE API | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC31800000 | C:\WINDOWS\System32\ADVAPI32.dll | Расширенная библиотека API Windows 32 | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC31C60000 | C:\WINDOWS\System32\msvcrt.dll | Windows NT CRT DLL | 7.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC31ED0000 | C:\WINDOWS\System32\sechost.dll | Host for SCM/SDDL/LSA Lookup APIs | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2F570000 | C:\WINDOWS\System32\bcrypt.dll | Библиотека криптографических примитивов Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30670000 | C:\WINDOWS\System32\RPCRT4.dll | Библиотека удаленного вызова процедур | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30990000 | C:\WINDOWS\System32\USER32.dll | Многопользовательская библиотека клиента USER API Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2FC80000 | C:\WINDOWS\System32\win32u.dll | Win32u | 10.0.22621.4169 (WinBuild.160101.0800) 0x00007FFC31F80000 | C:\WINDOWS\System32\GDI32.dll | GDI Client DLL | 10.0.22621.4036 (WinBuild.160101.0800) 0x00007FFC2F450000 | C:\WINDOWS\System32\gdi32full.dll | GDI Client DLL | 10.0.22621.3958 (WinBuild.160101.0800) 0x00007FFC2FAC0000 | C:\WINDOWS\System32\msvcp_win.dll | Microsoft® C Runtime Library | 10.0.22621.3374 (WinBuild.160101.0800) 0x00007FFC2FB60000 | C:\WINDOWS\System32\ucrtbase.dll | Microsoft® C Runtime Library | 10.0.22621.3593 (WinBuild.160101.0800) 0x00007FFC2FD20000 | C:\WINDOWS\System32\SHELL32.dll | Общая библиотека оболочки Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30B80000 | C:\WINDOWS\System32\ole32.dll | Microsoft OLE для Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC31470000 | C:\WINDOWS\System32\combase.dll | Microsoft COM для Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC31AA0000 | C:\WINDOWS\System32\PSAPI.DLL | Process Status Helper | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC30FF0000 | C:\WINDOWS\System32\SETUPAPI.dll | Windows Setup API | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC31B60000 | C:\WINDOWS\System32\COMDLG32.dll | Библиотека общих диалоговых окон | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC319A0000 | C:\WINDOWS\System32\shcore.dll | SHCORE | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30870000 | C:\WINDOWS\System32\SHLWAPI.dll | Библиотека небольших программ оболочки | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30B40000 | C:\WINDOWS\System32\IMM32.dll | Multi-User Windows IMM32 API Client DLL | 10.0.22621.3374 (WinBuild.160101.0800) 0x00007FFC22DA0000 | C:\WINDOWS\SYSTEM32\WINSPOOL.DRV | Драйвер диспетчера очереди Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC24B20000 | C:\WINDOWS\SYSTEM32\MPR.dll | Библиотека маршрутизации для нескольких служб доступа | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2E140000 | C:\WINDOWS\SYSTEM32\Secur32.dll | Security Support Provider Interface | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2B6E0000 | C:\WINDOWS\SYSTEM32\VERSION.dll | Version Checking and File Installation Libraries | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2E8C0000 | C:\WINDOWS\SYSTEM32\USERENV.dll | Userenv | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC21870000 | C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955\COMCTL32.dll | Библиотека элементов управления взаимодействия с пользователем | 6.10 (WinBuild.160101.0800) 0x00007FFC20C40000 | C:\WINDOWS\SYSTEM32\NETAPI32.dll | Net Win32 API DLL | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC14EA0000 | C:\Program Files\Far Manager\sqlite3.dll | SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine. | 3.46.1 0x00007FFC22E50000 | C:\WINDOWS\SYSTEM32\SRVCLI.DLL | Server Service Client DLL | 10.0.22621.3374 (WinBuild.160101.0800) 0x00007FFC28490000 | C:\WINDOWS\SYSTEM32\SAMCLI.DLL | Security Accounts Manager Client DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2DDE0000 | C:\WINDOWS\SYSTEM32\NETUTILS.DLL | Net Win32 API Helpers DLL | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC2E5C0000 | C:\WINDOWS\SYSTEM32\SSPICLI.DLL | Security Support Provider Interface | 10.0.22621.3810 (WinBuild.160101.0800) 0x00007FFC2EF80000 | C:\WINDOWS\SYSTEM32\cfgmgr32.DLL | Configuration Manager DLL | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC2E360000 | C:\WINDOWS\SYSTEM32\kernel.appcore.dll | AppModel API Host | 10.0.22621.3958 (WinBuild.160101.0800) 0x00007FFC2C880000 | C:\WINDOWS\system32\uxtheme.dll | Библиотека тем UxTheme (Microsoft) | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30DB0000 | C:\WINDOWS\System32\MSCTF.dll | Серверная библиотека MSCTF | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2D290000 | C:\WINDOWS\SYSTEM32\windows.storage.dll | API хранения Microsoft WinRT | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2D150000 | C:\WINDOWS\SYSTEM32\wintypes.dll | Библиотека DLL основных типов Windows | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2F240000 | C:\WINDOWS\SYSTEM32\profapi.dll | User Profile Basic API | 10.0.22621.4111 (WinBuild.160101.0800) 0x00007FFC2F3D0000 | C:\WINDOWS\System32\bcryptPrimitives.dll | Windows Cryptographic Primitives Library | 10.0.22621.3672 (WinBuild.160101.0800) 0x00007FFC308D0000 | C:\WINDOWS\System32\clbcatq.dll | COM+ Configuration Catalog | 2001.12.10941.16384 (WinBuild.160101.0800) 0x00007FFC11AA0000 | C:\WINDOWS\system32\explorerframe.dll | ExplorerFrame | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC211B0000 | C:\Windows\System32\OneCoreUAPCommonProxyStub.dll | OneCoreUAP Common Proxy Stub | 10.0.22621.4111 (WinBuild.160101.0800) 0x00007FFC24CA0000 | C:\Program Files\Far Manager\Plugins\LuaMacro\LuaMacro.dll | Lua Macros for Far Manager | 3.0.848.0 0x0000000066D80000 | C:\Program Files\Far Manager\lua51.dll | 0x00000715 - Указанный тип ресурса в файле образа отсутствует. 0x00007FFC170C0000 | C:\Program Files\Far Manager\luafar3.dll | LuaFar library | 3.0.848.0 0x00007FFC2EA40000 | C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL | Base cryptographic API DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x0000000064480000 | C:\Program Files\Far Manager\lpeg.dll | 0x00000715 - Указанный тип ресурса в файле образа отсутствует. 0x00007FFC22B10000 | C:\Program Files\Far Manager\Plugins\TmpPanel\TmpPanel.dll | Temporary Panel for Far Manager | 3.0.120.0 0x00007FFC279E0000 | C:\WINDOWS\System32\p9np.dll | Plan 9 Network Provider | 10.0.22621.3672 (WinBuild.160101.0800) 0x00007FFC30590000 | C:\WINDOWS\System32\OLEAUT32.dll | OLEAUT32.DLL | 10.0.22621.3672 (WinBuild.160101.0800) 0x00007FFC279D0000 | C:\WINDOWS\System32\drprov.dll | Служба доступа к сети для сервера, обслуживающего сеансы подключения к удаленному рабочему столу (Майкрософт) | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC27960000 | C:\WINDOWS\System32\ntlanman.dll | Microsoft® LAN Manager | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC279A0000 | C:\WINDOWS\System32\davclnt.dll | Web DAV Client DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFBAD340000 | C:\Program Files\Far Manager\Plugins\NetBox\NetBox.dll | NetBox: SFTP/FTP/FTPS/SCP/WebDAV/S3 client for Far Manager 3.0 | 24.9.0.604 0x00007FFC2EA20000 | C:\WINDOWS\SYSTEM32\CRYPTSP.dll | Cryptographic Service Provider API | 10.0.22621.3672 (WinBuild.160101.0800) 0x00007FFC2E2C0000 | C:\WINDOWS\system32\rsaenh.dll | Microsoft Enhanced Cryptographic Provider | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2B980000 | C:\WINDOWS\system32\propsys.dll | Система страниц свойств (Майкрософт) | 7.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC30D30000 | C:\WINDOWS\System32\ws2_32.dll | 32-разрядная библиотека Windows Socket 2.0 | 10.0.22621.4311 (WinBuild.160101.0800) 0x000001C799DE0000 | C:\WINDOWS\SYSTEM32\security.dll | Security Support Provider Interface | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2E7D0000 | C:\WINDOWS\system32\mswsock.dll | Расширение поставщика службы API Microsoft Windows Sockets 2.0 | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2F5A0000 | C:\WINDOWS\System32\crypt32.dll | API32 криптографии | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2EFF0000 | C:\WINDOWS\SYSTEM32\DPAPI.DLL | Data Protection API | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFBACFA0000 | C:\Program Files\Far Manager\Plugins\FarColorer\bin\colorer.dll | FarColorer - Syntax Highlighting for Far Manager 3 x64 | 1.4.28 0x00007FFC22880000 | C:\Program Files\Far Manager\Plugins\AutoWrap\AutoWrap.dll | Auto wrap for Far Manager | 3.0.27.0 0x00007FFC17520000 | C:\Program Files\Far Manager\Plugins\HlfViewer\HlfViewer.dll | Hlf-file Viewer for Far Manager | 3.0.50.0 0x00007FFC296E0000 | C:\WINDOWS\system32\c_is2022.dll | ISO-2022 Code Page Translation DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC13DC0000 | C:\WINDOWS\system32\c_g18030.dll | GB18030 DBCS-Unicode Conversion DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC28B00000 | C:\WINDOWS\system32\c_gsm7.dll | GSM 7bit Code Page Translation DLL for SMS | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC24C90000 | C:\WINDOWS\system32\c_iscii.dll | ISCII Code Page Translation DLL | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC28650000 | C:\WINDOWS\SYSTEM32\dbghelp.DLL | Windows Image Helper | 10.0.22621.3593 (WinBuild.160101.0800) 0x00007FFC284B0000 | C:\WINDOWS\SYSTEM32\dbgcore.DLL | Windows Core Debugging Helpers | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFBAC1E0000 | C:\WINDOWS\SYSTEM32\dbgeng.DLL | Windows Symbolic Debugger Engine | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC26F10000 | C:\WINDOWS\SYSTEM32\XmlLite.dll | Microsoft XmlLite Library | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFBEB320000 | C:\WINDOWS\SYSTEM32\dbgmodel.dll | Windows Debugger Data Model | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC2FCB0000 | C:\WINDOWS\System32\wintrust.dll | Microsoft Trust Verification APIs | 10.0.22621.4111 (WinBuild.160101.0800) 0x00007FFC2EA80000 | C:\WINDOWS\SYSTEM32\MSASN1.dll | ASN.1 Runtime APIs | 10.0.22621.2506 (WinBuild.160101.0800) 0x00007FFC31AB0000 | C:\WINDOWS\System32\imagehlp.dll | Windows NT Image Helper | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2E860000 | C:\WINDOWS\SYSTEM32\gpapi.dll | Клиентские функции API групповой политики | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC1FEE0000 | C:\WINDOWS\SYSTEM32\cryptnet.dll | Crypto Network Related API | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC2DDF0000 | C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL | API вспомогательного приложения IP | 10.0.22621.4311 (WinBuild.160101.0800) 0x00007FFC2C670000 | C:\WINDOWS\SYSTEM32\WINNSI.DLL | Network Store Information RPC interface | 10.0.22621.1 (WinBuild.160101.0800) 0x00007FFC30FE0000 | C:\WINDOWS\System32\NSI.dll | NSI User-mode interface DLL | 10.0.22621.1 (WinBuild.160101.0800) ====================================================================== Environment ====================================================================== FARHOME=C:\Program Files\Far Manager FARLANG=English FARLOCALPROFILE=C:\Users\user\AppData\Local\Far Manager\Profile FARPROFILE=C:\Users\user\AppData\Roaming\Far Manager\Profile