Exception in [C:\Program Files\FAR\Far.exe] FAR itself. ============================================================== System information: Windows NT, version 5.1.2600 Service Pack 2 ============================================================== FAR.EXE information: Version info: 3.0.4430 File size: 4320256 bytes Time stamp: 05.10.2015 04:03:39 Hdr checksum: 0x0042AB7C (computed: 0x0042AB7C) ============================================================== Exception C0000005 "ACCESS_VIOLATION" at 006BD001 has 0001003F flags. Attempt to READ at address 043EA028 EBP: 0012DA84 EIP: 006BD001 ESP: 0012DA5C CS: 0000001B SS: 00000023 Flags: 00010206 EDI: 0012ECCC ESI: 0012DCD4 EBX: 0060D86F EDX: 0147AA00 ECX: 0012DCD4 EAX: 043EA024 GS: 00000000 FS: 0000003B ES: 00000023 DS: 00000023 Cw: FFFF027F Sw: FFFF0120 Tw: FFFFFFFF EOf: 00577B47 Es: 0158001B DOf: 0012D4BC Ds: FFFF0023 Cr0: 00000000 dr0: 00000000 dr1: 00000000 dr2: 00000000 dr3: 00000000 dr6: 00000000 dr7: 00000000 ============================================================== Addr[ 1]: 006BD001 Mod:00400000 lMod:00400000 "Far.exe"+002BC401 at ".text"+002BC001: "___DestructExceptionObject 006bcfdf f" + 00000022 Addr[ 2]: 006BD2CB Mod:00400000 lMod:00400000 "Far.exe"+002BC6CB at ".text"+002BC2CB: "__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)" + 00000199 Addr[ 3]: 006BD53D Mod:00400000 lMod:00400000 "Far.exe"+002BC93D at ".text"+002BC53D: "__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)" + 0000005E Addr[ 4]: 006BD8C8 Mod:00400000 lMod:00400000 "Far.exe"+002BCCC8 at ".text"+002BC8C8: "__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)" + 00000274 Addr[ 5]: 006BDAC1 Mod:00400000 lMod:00400000 "Far.exe"+002BCEC1 at ".text"+002BCAC1: "___InternalCxxFrameHandler 006bd9e6 f" + 000000DB Addr[ 6]: 006B1032 Mod:00400000 lMod:00400000 "Far.exe"+002B0432 at ".text"+002B0032: "___CxxFrameHandler3" + 00000026 Addr[ 7]: 7C9037BF Mod:7C900000 lMod:7C900000 "ntdll.dll"+00002BBF at ".text"+000027BF: "RtlConvertUlongToLargeInteger" + 0000007A Addr[ 8]: 7C90378B Mod:7C900000 lMod:7C900000 "ntdll.dll"+00002B8B at ".text"+0000278B: "RtlConvertUlongToLargeInteger" + 00000046 Addr[ 9]: 7C90EAFA Mod:7C900000 lMod:7C900000 "ntdll.dll"+0000DEFA at ".text"+0000DAFA: "KiUserExceptionDispatcher" + 0000000E Stack details: Addr[ 1]: 006BD001 Mod:00400000 lMod:00400000 "Far.exe"+002BC401 at ".text"+002BC001: "___DestructExceptionObject 006bcfdf f" + 00000022 Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3) 006BD244 = 8B 45 E4 E8 B9 FB FE FF C3 FF 45 E0 EB A7 8B 7D ‹Eди№...Г.Eа맋} 4) 96D31F30 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 5) 00782AB4 = 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ................ 6) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 7) 00782AA4 = 08 00 00 00 A0 EC 79 00 E8 FF FF FF 6F D8 60 00 .... мy.и...oШ`. 8) 0012E05C = F8 35 39 04 18 7C 44 04 01 00 00 00 80 E0 12 00 ш59..|D.....Ђа.. 9) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ -006BCFC1 93 xchg ebx, eax -006BCFC2 19 75 17 sbb [ebp+17h], esi -006BCFC5 83 78 1C 00 cmp dword ptr [eax+1Ch], 0 ;0 "...." -006BCFC9 75 11 jne +13h ;006BCFDC Far.exe::__cdecl ExFilterRethrow(_EXCEPTION_POINTERS *)+42h -006BCFCB E8 66 F9 FE FF call 6AC936h ;-10695h Far.exe::__getptd -006BCFD0 33 C9 xor ecx, ecx -006BCFD2 41 inc ecx -006BCFD3 89 88 0C 02 00 00 mov [eax+20Ch], ecx -006BCFD9 8B C1 mov eax, ecx -006BCFDB C3 ret -006BCFDC 33 C0 xor eax, eax -006BCFDE C3 ret ; ;; Far.exe::___DestructExceptionObject 006bcfdf f ; -006BCFDF 6A 08 push 8 -006BCFE1 68 D8 BA 74 00 push 74BAD8h ; FE FF FF FF 00 00 00 00 D8 FF FF FF 00 00 00 00 ю.......Ш....... -006BCFE6 E8 D5 FD FE FF call 6ACDC0h ;-10226h Far.exe::__SEH_prolog4 -006BCFEB 8B 4D 08 mov ecx, [ebp+8] -006BCFEE 85 C9 test ecx, ecx -006BCFF0 74 2A je +2Ch ;006BD01C Far.exe::___DestructExceptionObject 006bcfdf f+3Dh -006BCFF2 81 39 63 73 6D E0 cmp dword ptr [ecx], -1F928C9Dh ;-529697949 "ќЊ." -006BCFF8 75 22 jne +24h ;006BD01C Far.exe::___DestructExceptionObject 006bcfdf f+3Dh -006BCFFA 8B 41 1C mov eax, [ecx+1Ch] -006BCFFD 85 C0 test eax, eax -006BCFFF 74 1B je +1Dh ;006BD01C Far.exe::___DestructExceptionObject 006bcfdf f+3Dh >006BD001 8B 40 04 mov eax, [eax+4] +006BD004 85 C0 test eax, eax +006BD006 74 14 je +16h ;006BD01C Far.exe::___DestructExceptionObject 006bcfdf f+3Dh +006BD008 83 65 FC 00 and dword ptr [ebp-4], 0 ;0 "...." +006BD00C 50 push eax +006BD00D FF 71 18 push dword ptr [ecx+18h] +006BD010 E8 9C 3F FF FF call 6B0FB1h ;-0C05Fh Far.exe::__stdcall _CallMemberFunction0(void *, void *) +006BD015 C7 45 FC FE FF FF FF mov dword ptr [ebp-4], -2 +006BD01C E8 E4 FD FE FF call 6ACE05h ;-10217h Far.exe::__SEH_epilog4 +006BD021 C3 ret +006BD022 33 C0 xor eax, eax +006BD024 38 45 0C cmp [ebp+0Ch], al +006BD027 0F 95 C0 setnz ax +006BD02A C3 ret +006BD02B 8B 65 E8 mov esp, [ebp-18h] +006BD02E E8 E0 C3 FE FF call 6A9413h ;-13C1Bh Far.exe::__cdecl terminate(void) +006BD033 CC int 03 ; ;; Far.exe::___AdjustPointer ; +006BD034 8B FF mov edi, edi +006BD036 55 push ebp +006BD037 8B EC mov ebp, esp +006BD039 8B 4D 0C mov ecx, [ebp+0Ch] +006BD03C 8B 01 mov eax, [ecx] +006BD03E 56 push esi Addr[ 2]: 006BD2CB Mod:00400000 lMod:00400000 "Far.exe"+002BC6CB at ".text"+002BC2CB: "__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)" + 00000199 Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 3) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4) 00782AC8 = 22 05 93 19 02 00 00 00 84 2A 78 00 01 00 00 00 ".“.....„*x..... 5) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 6) 00000100 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 7) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 8) 0012DCA8 = 78 DD 12 00 98 EA 5A 03 00 00 13 00 00 20 12 00 xЭ..˜кZ...... .. 9) 00782AC8 = 22 05 93 19 02 00 00 00 84 2A 78 00 01 00 00 00 ".“.....„*x..... 10) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ -006BD28B 83 7E 10 03 cmp dword ptr [esi+10h], 3 ;3 "...." -006BD28F 75 3C jne +3Eh ;006BD2CD Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+19Bh -006BD291 8B 46 14 mov eax, [esi+14h] -006BD294 3D 20 05 93 19 cmp eax, 19930520h ;429065504 " .“." -006BD299 74 0E je +10h ;006BD2A9 Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+177h -006BD29B 3D 21 05 93 19 cmp eax, 19930521h ;429065505 "!.“." -006BD2A0 74 07 je +9 ;006BD2A9 Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+177h -006BD2A2 3D 22 05 93 19 cmp eax, 19930522h ;429065506 "".“." -006BD2A7 75 24 jne +26h ;006BD2CD Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+19Bh -006BD2A9 83 7D CC 00 cmp dword ptr [ebp-34h], 0 ;0 "...." -006BD2AD 75 1E jne +20h ;006BD2CD Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+19Bh -006BD2AF 83 7D E4 00 cmp dword ptr [ebp-1Ch], 0 ;0 "...." -006BD2B3 74 18 je +1Ah ;006BD2CD Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+19Bh -006BD2B5 FF 76 18 push dword ptr [esi+18h] -006BD2B8 E8 CD 3F FF FF call 6B128Ah ;-0C02Eh Far.exe::__IsExceptionObjectToBeDestroyed 006b128a f -006BD2BD 59 pop ecx -006BD2BE 85 C0 test eax, eax -006BD2C0 74 0B je +0Dh ;006BD2CD Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long)+19Bh -006BD2C2 FF 75 10 push dword ptr [ebp+10h] -006BD2C5 56 push esi -006BD2C6 E8 14 FD FF FF call 6BCFDFh ;-2E7h Far.exe::___DestructExceptionObject 006bcfdf f >006BD2CB 59 pop ecx +006BD2CC 59 pop ecx +006BD2CD C3 ret ; ;; Far.exe::___BuildCatchObjectHelper ; +006BD2CE 6A 0C push 0Ch +006BD2D0 68 78 BB 74 00 push 74BB78h ; FE FF FF FF 00 00 00 00 D4 FF FF FF 00 00 00 00 ю.......Ф....... +006BD2D5 E8 E6 FA FE FF call 6ACDC0h ;-10515h Far.exe::__SEH_prolog4 +006BD2DA 33 D2 xor edx, edx +006BD2DC 89 55 E4 mov [ebp-1Ch], edx +006BD2DF 8B 45 10 mov eax, [ebp+10h] +006BD2E2 8B 48 04 mov ecx, [eax+4] +006BD2E5 3B CA cmp ecx, edx +006BD2E7 0F 84 58 01 00 00 jz +15Eh ;006BD445 Far.exe::___BuildCatchObjectHelper+177h +006BD2ED 38 51 08 cmp [ecx+8], dl +006BD2F0 0F 84 4F 01 00 00 jz +155h ;006BD445 Far.exe::___BuildCatchObjectHelper+177h +006BD2F6 8B 48 08 mov ecx, [eax+8] +006BD2F9 3B CA cmp ecx, edx +006BD2FB 75 0C jne +0Eh ;006BD309 Far.exe::___BuildCatchObjectHelper+3Bh +006BD2FD F7 00 00 00 00 80 test dword ptr [eax], -80000000h ;--2147483648 "...Ђ" +006BD303 0F 84 3C 01 00 00 jz +142h ;006BD445 Far.exe::___BuildCatchObjectHelper+177h +006BD309 8B 00 mov eax, [eax] Addr[ 3]: 006BD53D Mod:00400000 lMod:00400000 "Far.exe"+002BC93D at ".text"+002BC53D: "__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)" + 0000005E Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 0012DCF4 = 3F 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ?............... 3) 0012DCA8 = 78 DD 12 00 98 EA 5A 03 00 00 13 00 00 20 12 00 xЭ..˜кZ...... .. 4) 00782AC8 = 22 05 93 19 02 00 00 00 84 2A 78 00 01 00 00 00 ".“.....„*x..... 5) 043EA07C = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 6) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 7) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 8) E06D7363 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 9) 1FFFFFFF = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10) 19930522 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ -006BD4FD 00 FF add bh, bh -006BD4FF 75 08 jne +0Ah ;006BD509 Far.exe::__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)+2Ah -006BD501 75 03 jne +5 ;006BD506 Far.exe::__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)+27h -006BD503 56 push esi -006BD504 EB 03 jmp 6BD509h ;+5 Far.exe::__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)+2Ah -006BD506 FF 75 20 push dword ptr [ebp+20h] -006BD509 E8 AA 3A FF FF call 6B0FB8h ;-0C551h Far.exe::__stdcall _UnwindNestedFrames(EHRegistrationNode *, EHExceptionRecord *) -006BD50E FF 37 push dword ptr [edi] -006BD510 FF 75 14 push dword ptr [ebp+14h] -006BD513 FF 75 10 push dword ptr [ebp+10h] -006BD516 56 push esi -006BD517 E8 A2 F9 FF FF call 6BCEBEh ;-659h Far.exe::___FrameUnwindToState -006BD51C 8B 47 04 mov eax, [edi+4] -006BD51F 68 00 01 00 00 push 100h -006BD524 FF 75 1C push dword ptr [ebp+1Ch] -006BD527 40 inc eax -006BD528 FF 75 14 push dword ptr [ebp+14h] -006BD52B 89 46 08 mov [esi+8], eax -006BD52E FF 75 0C push dword ptr [ebp+0Ch] -006BD531 8B 4B 0C mov ecx, [ebx+0Ch] -006BD534 56 push esi -006BD535 FF 75 08 push dword ptr [ebp+8] -006BD538 E8 F5 FB FF FF call 6BD132h ;-406h Far.exe::__cdecl CallCatchBlock(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, _s_FuncInfo const *, void *, int, unsigned long) >006BD53D 83 C4 28 add esp, 28h ;40 "(..." +006BD540 85 C0 test eax, eax +006BD542 74 07 je +9 ;006BD54B Far.exe::__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char)+6Ch +006BD544 56 push esi +006BD545 50 push eax +006BD546 E8 34 3A FF FF call 6B0F7Fh ;-0C5C7h Far.exe::__stdcall _JumpToContinuation(void *, EHRegistrationNode *) +006BD54B 5D pop ebp +006BD54C C3 ret ; ;; Far.exe::__cdecl FindHandlerForForeignException(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, int, int, EHRegistrationNode *) ; +006BD54D 8B FF mov edi, edi +006BD54F 55 push ebp +006BD550 8B EC mov ebp, esp +006BD552 83 EC 0C sub esp, 0Ch ;12 "...." +006BD555 56 push esi +006BD556 8B 75 08 mov esi, [ebp+8] +006BD559 81 3E 03 00 00 80 cmp dword ptr [esi], -7FFFFFFDh ;-2147483645 "э.." +006BD55F 0F 84 EC 00 00 00 jz +0F2h ;006BD651 Far.exe::__cdecl FindHandlerForForeignException(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, int, int, EHRegistrationNode *)+104h +006BD565 57 push edi +006BD566 E8 CB F3 FE FF call 6AC936h ;-10C30h Far.exe::__getptd +006BD56B 83 B8 80 00 00 00 00 cmp dword ptr [eax+80h], 0 ;0 "...." +006BD572 74 47 je +49h ;006BD5BB Far.exe::__cdecl FindHandlerForForeignException(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, int, int, EHRegistrationNode *)+6Eh +006BD574 E8 BD F3 FE FF call 6AC936h ;-10C3Eh Far.exe::__getptd Addr[ 4]: 006BD8C8 Mod:00400000 lMod:00400000 "Far.exe"+002BCCC8 at ".text"+002BC8C8: "__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)" + 00000274 Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 3) 0012DCF4 = 3F 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ?............... 4) 0012DCA8 = 78 DD 12 00 98 EA 5A 03 00 00 13 00 00 20 12 00 xЭ..˜кZ...... .. 5) 00782AC8 = 22 05 93 19 02 00 00 00 84 2A 78 00 01 00 00 00 ".“.....„*x..... 6) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 7) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 8) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 9) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ -006BD888 1A FF sbb bh, bh -006BD88A 4D dec ebp -006BD88B EC in al, dx -006BD88C 83 C3 04 add ebx, 4 ;4 "...." -006BD88F 39 45 EC cmp [ebp-14h], eax -006BD892 7F DD jg -21h ;006BD871 Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+21Dh -006BD894 FF 4D E8 dec dword ptr [ebp-18h] -006BD897 83 45 F4 10 add dword ptr [ebp-0Ch], 10h ;16 "...." -006BD89B 83 7D E8 00 cmp dword ptr [ebp-18h], 0 ;0 "...." -006BD89F 7F BE jg -40h ;006BD85F Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+20Bh -006BD8A1 EB 2E jmp 6BD8D1h ;+30h Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+27Dh -006BD8A3 FF 75 24 push dword ptr [ebp+24h] -006BD8A6 8B 7D D8 mov edi, [ebp-28h] -006BD8A9 FF 75 20 push dword ptr [ebp+20h] -006BD8AC 8B 5D F4 mov ebx, [ebp-0Ch] -006BD8AF FF 75 DC push dword ptr [ebp-24h] -006BD8B2 C6 45 FF 01 mov byte ptr [ebp-1], 1 -006BD8B6 FF 75 18 push dword ptr [ebp+18h] -006BD8B9 FF 75 14 push dword ptr [ebp+14h] -006BD8BC FF 75 10 push dword ptr [ebp+10h] -006BD8BF 56 push esi -006BD8C0 8B 75 0C mov esi, [ebp+0Ch] -006BD8C3 E8 17 FC FF FF call 6BD4DFh ;-3E4h Far.exe::__cdecl CatchIt(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, _s_HandlerType const *, _s_CatchableType const *, _s_TryBlockMapEntry const *, int, EHRegistrationNode *, unsigned char) >006BD8C8 8B 75 08 mov esi, [ebp+8] +006BD8CB 8B 7D E4 mov edi, [ebp-1Ch] +006BD8CE 83 C4 1C add esp, 1Ch ;28 "...." +006BD8D1 FF 45 F0 inc dword ptr [ebp-10h] +006BD8D4 8B 45 F0 mov eax, [ebp-10h] +006BD8D7 83 C7 14 add edi, 14h ;20 "...." +006BD8DA 89 7D E4 mov [ebp-1Ch], edi +006BD8DD 3B 45 E0 cmp eax, [ebp-20h] +006BD8E0 0F 82 50 FF FF FF jb -0AAh ;006BD836 Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+1E2h +006BD8E6 8B 7D 18 mov edi, [ebp+18h] +006BD8E9 80 7D 1C 00 cmp byte ptr [ebp+1Ch], 0 ;0 "...." +006BD8ED 74 0A je +0Ch ;006BD8F9 Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+2A5h +006BD8EF 6A 01 push 1 +006BD8F1 56 push esi +006BD8F2 E8 E8 F6 FF FF call 6BCFDFh ;-913h Far.exe::___DestructExceptionObject 006bcfdf f +006BD8F7 59 pop ecx +006BD8F8 59 pop ecx +006BD8F9 80 7D FF 00 cmp byte ptr [ebp-1], 0 ;0 "...." +006BD8FD 0F 85 AE 00 00 00 jnz +0B4h ;006BD9B1 Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *)+35Dh +006BD903 8B 07 mov eax, [edi] Addr[ 5]: 006BDAC1 Mod:00400000 lMod:00400000 "Far.exe"+002BCEC1 at ".text"+002BCAC1: "___InternalCxxFrameHandler 006bd9e6 f" + 000000DB Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 3) 0012DCF4 = 3F 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ?............... 4) 0012DCA8 = 78 DD 12 00 98 EA 5A 03 00 00 13 00 00 20 12 00 xЭ..˜кZ...... .. 5) 00782AC8 = 22 05 93 19 02 00 00 00 84 2A 78 00 01 00 00 00 ".“.....„*x..... 6) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 7) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 8) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 9) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ -006BDA81 8B 51 1C mov edx, [ecx+1Ch] -006BDA84 8B 52 08 mov edx, [edx+8] -006BDA87 85 D2 test edx, edx -006BDA89 74 1D je +1Fh ;006BDAA8 Far.exe::___InternalCxxFrameHandler 006bd9e6 f+0C2h -006BDA8B 0F B6 75 24 movzx esi, [ebp+24h] -006BDA8F 56 push esi -006BDA90 FF 75 20 push dword ptr [ebp+20h] -006BDA93 FF 75 1C push dword ptr [ebp+1Ch] -006BDA96 50 push eax -006BDA97 FF 75 14 push dword ptr [ebp+14h] -006BDA9A FF 75 10 push dword ptr [ebp+10h] -006BDA9D FF 75 0C push dword ptr [ebp+0Ch] -006BDAA0 51 push ecx -006BDAA1 FF D2 call edx -006BDAA3 83 C4 20 add esp, 20h ;32 " ..." -006BDAA6 EB 1F jmp 6BDAC7h ;+21h Far.exe::___InternalCxxFrameHandler 006bd9e6 f+0E1h -006BDAA8 FF 75 20 push dword ptr [ebp+20h] -006BDAAB FF 75 1C push dword ptr [ebp+1Ch] -006BDAAE FF 75 24 push dword ptr [ebp+24h] -006BDAB1 50 push eax -006BDAB2 FF 75 14 push dword ptr [ebp+14h] -006BDAB5 FF 75 10 push dword ptr [ebp+10h] -006BDAB8 FF 75 0C push dword ptr [ebp+0Ch] -006BDABB 51 push ecx -006BDABC E8 93 FB FF FF call 6BD654h ;-468h Far.exe::__cdecl FindHandler(EHExceptionRecord *, EHRegistrationNode *, _CONTEXT *, void *, _s_FuncInfo const *, unsigned char, int, EHRegistrationNode *) >006BDAC1 83 C4 20 add esp, 20h ;32 " ..." +006BDAC4 33 C0 xor eax, eax +006BDAC6 40 inc eax +006BDAC7 5F pop edi +006BDAC8 5E pop esi +006BDAC9 5B pop ebx +006BDACA 5D pop ebp +006BDACB C3 ret +006BDACC db CCh dup (4) ; ;; Far.exe::__CallSettingFrame@12 ; +006BDAD0 55 push ebp +006BDAD1 8B EC mov ebp, esp +006BDAD3 83 EC 04 sub esp, 4 ;4 "...." +006BDAD6 53 push ebx +006BDAD7 51 push ecx +006BDAD8 8B 45 0C mov eax, [ebp+0Ch] +006BDADB 83 C0 0C add eax, 0Ch ;12 "...." +006BDADE 89 45 FC mov [ebp-4], eax +006BDAE1 8B 45 08 mov eax, [ebp+8] +006BDAE4 55 push ebp +006BDAE5 FF 75 10 push dword ptr [ebp+10h] +006BDAE8 8B 4D 10 mov ecx, [ebp+10h] +006BDAEB 8B 6D FC mov ebp, [ebp-4] +006BDAEE E8 89 EC FF FF call 6BC77Ch ;-1372h Far.exe::__NLG_Notify1 +006BDAF3 56 push esi +006BDAF4 57 push edi +006BDAF5 FF D0 call eax ; ;; Far.exe::__NLG_Return ; +006BDAF7 5F pop edi +006BDAF8 5E pop esi +006BDAF9 8B DD mov ebx, ebp +006BDAFB 5D pop ebp +006BDAFC 8B 4D 10 mov ecx, [ebp+10h] +006BDAFF 55 push ebp Addr[ 6]: 006B1032 Mod:00400000 lMod:00400000 "Far.exe"+002B0432 at ".text"+002B0032: "___CxxFrameHandler3" + 00000026 Stack: 1) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| 2) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 3) 0012DCF4 = 3F 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ?............... 4) 0012DCA8 = 78 DD 12 00 98 EA 5A 03 00 00 13 00 00 20 12 00 xЭ..˜кZ...... .. 5) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 6) 7C9037D8 = 8B 4C 24 04 F7 41 04 06 00 00 00 B8 01 00 00 00 ‹L$.чA.....ё.... 7) 0012ECCC = 2C ED 12 00 F0 1C 70 00 FF FF FF FF 3C ED 12 00 ,н..р.p.....<н.. 8) 0012DCBC = 14 E0 12 00 FA EA 90 7C 00 00 00 00 F4 DC 12 00 .а..ъкђ|....фЬ.. 9) 7C90378B = 5F 5E 5B C2 14 00 90 8B FF 90 90 90 90 90 55 8B _^[В..ђ‹.ђђђђђU‹ 10) 0012DCD4 = 63 73 6D E0 01 00 00 00 00 00 00 00 33 EB 81 7C csmа........3лЃ| -006B0FF2 64 8B 3D 00 00 00 00 mov edi, fs:[0] -006B0FF9 8B 5D FC mov ebx, [ebp-4] -006B0FFC 89 3B mov [ebx], edi -006B0FFE 64 89 1D 00 00 00 00 mov fs:[0],ebx -006B1005 5F pop edi -006B1006 5E pop esi -006B1007 5B pop ebx -006B1008 C9 leave -006B1009 C2 08 00 ret 8 ;00000008 ; ;; Far.exe::___CxxFrameHandler3 ; -006B100C 55 push ebp -006B100D 8B EC mov ebp, esp -006B100F 83 EC 08 sub esp, 8 ;8 "...." -006B1012 53 push ebx -006B1013 56 push esi -006B1014 57 push edi -006B1015 FC cld -006B1016 89 45 FC mov [ebp-4], eax -006B1019 33 C0 xor eax, eax -006B101B db 50h dup (3) -006B101E FF 75 FC push dword ptr [ebp-4] -006B1021 FF 75 14 push dword ptr [ebp+14h] -006B1024 FF 75 10 push dword ptr [ebp+10h] -006B1027 FF 75 0C push dword ptr [ebp+0Ch] -006B102A FF 75 08 push dword ptr [ebp+8] -006B102D E8 B4 C9 00 00 call 6BD9E6h ;+0C9B9h Far.exe::___InternalCxxFrameHandler 006bd9e6 f >006B1032 83 C4 20 add esp, 20h ;32 " ..." +006B1035 89 45 F8 mov [ebp-8], eax +006B1038 5F pop edi +006B1039 5E pop esi +006B103A 5B pop ebx +006B103B 8B 45 F8 mov eax, [ebp-8] +006B103E 8B E5 mov esp, ebp +006B1040 5D pop ebp +006B1041 C3 ret ; ;; Far.exe::__cdecl CatchGuardHandler(EHExceptionRecord *, CatchGuardRN *, void *, void *) ; +006B1042 8B FF mov edi, edi +006B1044 55 push ebp +006B1045 8B EC mov ebp, esp +006B1047 56 push esi +006B1048 FC cld +006B1049 8B 75 0C mov esi, [ebp+0Ch] +006B104C 8B 4E 08 mov ecx, [esi+8] +006B104F 33 CE xor ecx, esi +006B1051 E8 00 53 FF FF call 6A6356h ;-0ACFBh Far.exe::__fastcall __security_check_cookie(x) +006B1056 6A 00 push 0 +006B1058 56 push esi +006B1059 FF 76 14 push dword ptr [esi+14h] +006B105C FF 76 0C push dword ptr [esi+0Ch] +006B105F 6A 00 push 0 +006B1061 FF 75 10 push dword ptr [ebp+10h] +006B1064 FF 76 10 push dword ptr [esi+10h] +006B1067 FF 75 08 push dword ptr [ebp+8] +006B106A E8 77 C9 00 00 call 6BD9E6h ;+0C97Ch Far.exe::___InternalCxxFrameHandler 006bd9e6 f +006B106F 83 C4 20 add esp, 20h ;32 " ..." Addr[ 7]: 7C9037BF Mod:7C900000 lMod:7C900000 "ntdll.dll"+00002BBF at ".text"+000027BF: "RtlConvertUlongToLargeInteger" + 0000007A Stack: 0012DCD4 0012ECCC 0012DCF4 0012DCA8 00701CF0 00000001 0012DCD4 0012ECCC 7C937860 0012DCD4 Addr[ 8]: 7C90378B Mod:7C900000 lMod:7C900000 "ntdll.dll"+00002B8B at ".text"+0000278B: "RtlConvertUlongToLargeInteger" + 00000046 Stack: 00000000 0012DCF4 0012DCD4 0012DCF4 E06D7363 00000001 00000000 7C81EB33 00000003 19930520 Addr[ 9]: 7C90EAFA Mod:7C900000 lMod:7C900000 "ntdll.dll"+0000DEFA at ".text"+0000DAFA: "KiUserExceptionDispatcher" + 0000000E Stack: E06D7363 00000001 00000003 0012E040 E06D7363 00000001 00000000 00000000 00000003 19930520 |