Error 6 "invalid handle" when running an exe and the dialog "Would you like to run this file as admin" is rejected

[MichalLeonBorsuk]

Checklist

• I have searched for existing issues and found nothing relevant

Far Manager version

3.0.6666.0

Is this the latest available version?

• I confirm that this is the latest available version (including nightly builds)

OS version

Windows NT Workstation 6.1.7600, 0x100/0x30 (Windows 7 Ultimate, version 25H2, OS build 7600.8655)

Other software

No response

Steps to reproduce

0. have a drive/share where common users cannot execute exes
1. Click on an exe, a dialog with "Would you like to run it as admn" (translation) comes up
2. Reject - click "NO"
3. This error occurs.

Expected behavior

no fatal error

Actual behavior

fatal error 6 "Wrong handle" (translation)

[MichalLeonBorsuk]

(I cannot attach files in this browser)

Contents of "bug_report.txt"

======================================================================
Summary
======================================================================
Exception: 0xE06D7363 - C++ exception (class far_fatal_exception)
Details:   WaitForSingleobject failed: LastError: 0x00000006 - Das Handle ist ungültig., NTSTATUS: 0xC0000008 - Ein ungültiges HANDLE wurde angegeben.
errno:     0x00000000 - No error
LastError: 0x00000006 - Das Handle ist ungültig.
NTSTATUS:  0xC0000008 - Ein ungültiges HANDLE wurde angegeben.
Address:   +000C1B6A KERNELBASE.dll!RaiseException+0x8A
Location:  single_wait, platform.cpp(135)
Module:    C:\Users\borsu01\AppData\Local\Far Manager x64\Far.exe
Plugin:    N/A

======================================================================
System information
======================================================================
Far:       3.0.6666.0 x64 (6eaedc3)
Compiler:  Microsoft Visual C++, version 19.41.33923.0
Library:   Microsoft STL, version 14.3.202404
PE time:   2026-03-24 01:11:47.000
File time: 2026-03-23 23:11:50.000
Time:      2026-07-06 10:53:35.622
Local:     2026-07-06 12:53:35.622 +0200, Mitteleuropäische Sommerzeit
Uptime:    00:00:20
OS:        Windows NT Workstation 6.1.7600, 0x100/0x30 (Windows 7 Ultimate, version 25H2, OS build 7600.8655)
Locale:    de-DE | LCID=00000407 (Lang=0407 (Primary=007 Sub=01) Sort=0 SortVersion=0) | ANSI=1252 OEM=850
Host:      C:\Windows\System32\conhost.exe 10.0.26100.1 (WinBuild.160101.0800)
Parent:    C:\Windows\explorer.exe 10.0.26100.8117 (WinBuild.160101.0800)
Command:   "C:\Users\borsu01\AppData\Local\Far Manager x64\Far.exe" 
Elevated:  No (Default)
Memory:    41.4 G out of 67.5 G free (61%); 36.0 M used by the process

======================================================================
Exception in thread 24976 / 0x6190 (Main Thread)
======================================================================

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+000C1B6A KERNELBASE.dll!RaiseException+0x8A
+0037C2FF Far.exe!_CxxThrowException+0x97 (libvcruntime:throw.obj)
+0026EE6F Far.exe!os::detail::single_wait(void * __ptr64 const,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x2BF (platform.obj)
+0013D165 Far.exe!wait_for_process(class os::detail::handle_t<struct os::detail::handle_closer> const & __ptr64,int)+0x135 (execute.obj)
+0013E737 Far.exe!after_process_creation(struct execute_info const & __ptr64,class os::detail::handle_t<struct os::detail::handle_closer>,enum execute_info::wait_mode,class os::detail::handle_t<struct os::detail::handle_closer>,struct point const & __ptr64,struct rectangle_t<int> const & __ptr64,class function_ref<void __cdecl(bool)>,bool)+0x2C7 (execute.obj)
+00140176 Far.exe!`execute_impl(struct execute_info const & __ptr64,class function_ref<void __cdecl(bool)>,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool & __ptr64)'::`2'::<lambda_3>::operator()(void)const __ptr64+0xE6 (execute.obj)
+0013FE2F Far.exe!execute_impl(struct execute_info const & __ptr64,class function_ref<void __cdecl(bool)>,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool & __ptr64)+0xCF (execute.obj)
+00140DC5 Far.exe!Execute(struct execute_info & __ptr64,class function_ref<void __cdecl(bool)>)+0x635 (execute.obj)
+0001F352 Far.exe!CommandLine::ExecString(struct execute_info & __ptr64) __ptr64+0x472 (cmdline.obj)
+0016F9B2 Far.exe!FileList::ProcessEnter(bool,bool,bool,bool,enum OPENFILEPLUGINTYPE) __ptr64+0x1272 (filelist.obj)
+00172048 Far.exe!FileList::ProcessMouse(struct _MOUSE_EVENT_RECORD const * __ptr64) __ptr64+0x568 (filelist.obj)
+001A1ECB Far.exe!FilePanels::ProcessMouse(struct _MOUSE_EVENT_RECORD const * __ptr64) __ptr64+0x23B (filepanels.obj)
+0024767B Far.exe!Manager::ProcessMouse(struct _MOUSE_EVENT_RECORD const * __ptr64)const __ptr64+0x27B (manager.obj)
+00246624 Far.exe!Manager::ProcessMainLoop(void) __ptr64+0x74 (manager.obj)
+00246581 Far.exe!Manager::EnterMainLoop(void) __ptr64+0xC1 (manager.obj)
+0023D7A8 Far.exe!MainProcess(class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,int,int)+0x14F8 (main.obj)
+0024217C Far.exe!`mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_5>::operator()(void)const __ptr64+0xEC (main.obj)
+00242D52 Far.exe!`function_ref<void __cdecl(void)>::function_ref<void __cdecl(void)><class `cpp_try<class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_5>,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_7>,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_6> >(class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_5> const & __ptr64,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_6> const & __ptr64,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_7> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> >(class `cpp_try<class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_5>,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_7>,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_6> >(class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_5> const & __ptr64,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_6> const & __ptr64,class `mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)'::`2'::<lambda_7> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> && __ptr64) __ptr64'::`1'::<lambda_3_>::<lambda_invoker_cdecl>(__int64)+0x12 (main.obj)
+00136F26 Far.exe!detail::cpp_try(class function_ref<void __cdecl(void)>,class function_ref<void __cdecl(struct source_location const & __ptr64)>,class function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>,struct source_location const & __ptr64)+0x36 (exception_handler.obj)
+00241C46 Far.exe!mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)+0xE16 (main.obj)
+00242669 Far.exe!`wmain_seh(void)'::`2'::<lambda_1>::operator()(void)const __ptr64+0x19 (main.obj)
+00242DD2 Far.exe!`function_ref<void __cdecl(void)>::function_ref<void __cdecl(void)><class `cpp_try<class `wmain_seh(void)'::`2'::<lambda_1>,class `wmain_seh(void)'::`2'::<lambda_3>,class `wmain_seh(void)'::`2'::<lambda_2> >(class `wmain_seh(void)'::`2'::<lambda_1> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_2> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_3> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> >(class `cpp_try<class `wmain_seh(void)'::`2'::<lambda_1>,class `wmain_seh(void)'::`2'::<lambda_3>,class `wmain_seh(void)'::`2'::<lambda_2> >(class `wmain_seh(void)'::`2'::<lambda_1> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_2> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_3> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> && __ptr64) __ptr64'::`1'::<lambda_6_>::<lambda_invoker_cdecl>(__int64)+0x12 (main.obj)
+00136F26 Far.exe!detail::cpp_try(class function_ref<void __cdecl(void)>,class function_ref<void __cdecl(struct source_location const & __ptr64)>,class function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>,struct source_location const & __ptr64)+0x36 (exception_handler.obj)
+0024259A Far.exe!wmain_seh(void)+0x3AA (main.obj)
+00242E5C Far.exe!`function_ref<void __cdecl(void)>::function_ref<void __cdecl(void)><class `seh_try<class `main(void)'::`2'::<lambda_1>,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64)'::`3'::<lambda_1> >(class `seh_try<class `main(void)'::`2'::<lambda_1>,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64)'::`3'::<lambda_1> && __ptr64) __ptr64'::`1'::<lambda_8_>::<lambda_invoker_cdecl>(__int64)+0x4C (main.obj)
+00136F58 Far.exe!detail::seh_try(class function_ref<void __cdecl(void)>,class function_ref<unsigned long __cdecl(struct _EXCEPTION_POINTERS * __ptr64)>,class function_ref<void __cdecl(unsigned long)>)+0x18 (exception_handler.obj)
+002427E8 Far.exe!main+0xC8 (main.obj)
+0037A710 Far.exe!__scrt_common_main_seh(void)+0x10C (LIBCMT:exe_main.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00007FFF9E1220F2
RBX = 000000DD1C6FCE08
RCX = 0000000000000000
RDX = 000000DD1C6FFB70
RSI = 0000000000000001
RDI = 00000000E06D7363
R8  = 000000DD1C6FC5F8
R9  = 000000DD1C6FC5F8
R10 = 0000000000000000
R11 = 0000000000000000
R12 = 000000DD1C6FD830
R13 = 000000DD1C6FDEB0
R14 = 0000000000000000
R15 = 000000DD1C6FD928
RIP = 00007FFF9B4B1B6A
RSP = 000000DD1C6FCCE0
RBP = 0000000000000004
EFL = 00000202

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+000C1B6A KERNELBASE.dll!RaiseException+0x8A:
                           00007fff`9b4b1b3b 41b80f000000    mov     r8d,0Fh
                           00007fff`9b4b1b41 488d4c2440      lea     rcx,[rsp+40h]
                           00007fff`9b4b1b46 413be8          cmp     ebp,r8d
                           00007fff`9b4b1b49 488bd3          mov     rdx,rbx
                           00007fff`9b4b1b4c 440f46c5        cmovbe  r8d,ebp
                           00007fff`9b4b1b50 4489442438      mov     dword ptr [rsp+38h],r8d
                           00007fff`9b4b1b55 49c1e003        shl     r8,3
                           00007fff`9b4b1b59 e869400d00      call    KERNELBASE!TerminateProcessOnMemoryExhaustion+0x6847 (00007fff`9b585bc7)
                           00007fff`9b4b1b5e 488d4c2420      lea     rcx,[rsp+20h]
                           00007fff`9b4b1b63 48ff15be601d00  call    qword ptr [KERNELBASE!TlsGetValue+0x101fe8 (00007fff`9b687c28)]
                           00007fff`9b4b1b6a 0f1f440000      nop     dword ptr [rax+rax]

+0037C2FF Far.exe!_CxxThrowException+0x97 (libvcruntime:throw.obj):
                           00007ff6`9fb4c2cd bf00409901      mov     edi,1994000h
                           00007ff6`9fb4c2d2 ba01000000      mov     edx,1
                           00007ff6`9fb4c2d7 48897c2428      mov     qword ptr [rsp+28h],rdi
                           00007ff6`9fb4c2dc 4c8d4c2428      lea     r9,[rsp+28h]
                           00007ff6`9fb4c2e1 4889742430      mov     qword ptr [rsp+30h],rsi
                           00007ff6`9fb4c2e6 b963736de0      mov     ecx,0E06D7363h
                           00007ff6`9fb4c2eb 48895c2438      mov     qword ptr [rsp+38h],rbx
                           00007ff6`9fb4c2f0 4889442440      mov     qword ptr [rsp+40h],rax
                           00007ff6`9fb4c2f5 448d4203        lea     r8d,[rdx+3]
                           00007ff6`9fb4c2f9 ff15b98f0600    call    qword ptr [Far+0x3e52b8 (00007ff6`9fbb52b8)]
                           00007ff6`9fb4c2ff 488b5c2470      mov     rbx,qword ptr [rsp+70h]

+0026EE6F Far.exe!os::detail::single_wait(void * __ptr64 const,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x2BF (platform.obj):
                           00007ff6`9fa3ee3f e8ccb3d9ff      call    Far+0xa210 (00007ff6`9f7da210)
                           00007ff6`9fa3ee44 0f1000          movups  xmm0,xmmword ptr [rax]
                           00007ff6`9fa3ee47 0f29442430      movaps  xmmword ptr [rsp+30h],xmm0
                           00007ff6`9fa3ee4c 4c8d4c2450      lea     r9,[rsp+50h]
                           00007ff6`9fa3ee51 488d542430      lea     rdx,[rsp+30h]
                           00007ff6`9fa3ee56 488d4d20        lea     rcx,[rbp+20h]
                           00007ff6`9fa3ee5a e8e1e6e1ff      call    Far+0x8d540 (00007ff6`9f85d540)
                           00007ff6`9fa3ee5f 488d1502ad2400  lea     rdx,[Far+0x4b9b68 (00007ff6`9fc89b68)]
                           00007ff6`9fa3ee66 488d4d20        lea     rcx,[rbp+20h]
                           00007ff6`9fa3ee6a e8f9d31000      call    Far+0x37c268 (00007ff6`9fb4c268)
                           00007ff6`9fa3ee6f cc              int     3

+0013D165 Far.exe!wait_for_process(class os::detail::handle_t<struct os::detail::handle_closer> const & __ptr64,int)+0x135 (execute.obj):
                           00007ff6`9f90d135 41b800140000    mov     r8d,1400h
                           00007ff6`9f90d13b e880dc2700      call    Far+0x3badc0 (00007ff6`9fb8adc0)
                           00007ff6`9f90d140 48895def        mov     qword ptr [rbp-11h],rbx
                           00007ff6`9f90d144 48c745d764000000 mov     qword ptr [rbp-29h],64h
                           00007ff6`9f90d14c c645df01        mov     byte ptr [rbp-21h],1
                           00007ff6`9f90d150 0f2845d7        movaps  xmm0,xmmword ptr [rbp-29h]
                           00007ff6`9f90d154 660f7f45b7      movdqa  xmmword ptr [rbp-49h],xmm0
                           00007ff6`9f90d159 488d55b7        lea     rdx,[rbp-49h]
                           00007ff6`9f90d15d 488b0f          mov     rcx,qword ptr [rdi]
                           00007ff6`9f90d160 e84b1a1300      call    Far+0x26ebb0 (00007ff6`9fa3ebb0)
                           00007ff6`9f90d165 84c0            test    al,al

+0013E737 Far.exe!after_process_creation(struct execute_info const & __ptr64,class os::detail::handle_t<struct os::detail::handle_closer>,enum execute_info::wait_mode,class os::detail::handle_t<struct os::detail::handle_closer>,struct point const & __ptr64,struct rectangle_t<int> const & __ptr64,class function_ref<void __cdecl(bool)>,bool)+0x2C7 (execute.obj):
                           00007ff6`9f90e70c 488d4c2430      lea     rcx,[rsp+30h]
                           00007ff6`9f90e711 e86a6d0d00      call    Far+0x215480 (00007ff6`9f9e5480)
                           00007ff6`9f90e716 488b0e          mov     rcx,qword ptr [rsi]
                           00007ff6`9f90e719 4c8936          mov     qword ptr [rsi],r14
                           00007ff6`9f90e71c 48894c2448      mov     qword ptr [rsp+48h],rcx
                           00007ff6`9f90e721 488d4c2448      lea     rcx,[rsp+48h]
                           00007ff6`9f90e726 48894c2430      mov     qword ptr [rsp+30h],rcx
                           00007ff6`9f90e72b 8bd0            mov     edx,eax
                           00007ff6`9f90e72d 488d4c2448      lea     rcx,[rsp+48h]
                           00007ff6`9f90e732 e8f9e8ffff      call    Far+0x13d030 (00007ff6`9f90d030)
                           00007ff6`9f90e737 84c0            test    al,al

+00140176 Far.exe!`execute_impl(struct execute_info const & __ptr64,class function_ref<void __cdecl(bool)>,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool & __ptr64)'::`2'::<lambda_3>::operator()(void)const __ptr64+0xE6 (execute.obj):
                           00007ff6`9f910141 490f44c1        cmove   rax,r9
                           00007ff6`9f910145 4c8d8c2490000000 lea     r9,[rsp+90h]
                           00007ff6`9f91014d 4889842498000000 mov     qword ptr [rsp+98h],rax
                           00007ff6`9f910155 488d442440      lea     rax,[rsp+40h]
                           00007ff6`9f91015a 4889442430      mov     qword ptr [rsp+30h],rax
                           00007ff6`9f91015f 488b4330        mov     rax,qword ptr [rbx+30h]
                           00007ff6`9f910163 4889442428      mov     qword ptr [rsp+28h],rax
                           00007ff6`9f910168 488b4328        mov     rax,qword ptr [rbx+28h]
                           00007ff6`9f91016c 4889442420      mov     qword ptr [rsp+20h],rax
                           00007ff6`9f910171 e8fae2ffff      call    Far+0x13e470 (00007ff6`9f90e470)
                           00007ff6`9f910176 b001            mov     al,1

+0013FE2F Far.exe!execute_impl(struct execute_info const & __ptr64,class function_ref<void __cdecl(bool)>,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > & __ptr64,class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const & __ptr64,bool & __ptr64)+0xCF (execute.obj):
                           00007ff6`9f90fdfd 488d45a0        lea     rax,[rbp-60h]
                           00007ff6`9f90fe01 48894520        mov     qword ptr [rbp+20h],rax
                           00007ff6`9f90fe05 488d442478      lea     rax,[rsp+78h]
                           00007ff6`9f90fe0a 48894528        mov     qword ptr [rbp+28h],rax
                           00007ff6`9f90fe0e 488bb5b0000000  mov     rsi,qword ptr [rbp+0B0h]
                           00007ff6`9f90fe15 48897530        mov     qword ptr [rbp+30h],rsi
                           00007ff6`9f90fe19 f74164fdffffff  test    dword ptr [rcx+64h],0FFFFFFFDh
                           00007ff6`9f90fe20 0f85ce000000    jne     Far+0x13fef4 (00007ff6`9f90fef4)
                           00007ff6`9f90fe26 488d4df0        lea     rcx,[rbp-10h]
                           00007ff6`9f90fe2a e861020000      call    Far+0x140090 (00007ff6`9f910090)
                           00007ff6`9f90fe2f 84c0            test    al,al

+00140DC5 Far.exe!Execute(struct execute_info & __ptr64,class function_ref<void __cdecl(bool)>)+0x635 (execute.obj):
                           00007ff6`9f910d93 4889442430      mov     qword ptr [rsp+30h],rax
                           00007ff6`9f910d98 488d85c0000000  lea     rax,[rbp+0C0h]
                           00007ff6`9f910d9f 4889442428      mov     qword ptr [rsp+28h],rax
                           00007ff6`9f910da4 488d85a0000000  lea     rax,[rbp+0A0h]
                           00007ff6`9f910dab 4889442420      mov     qword ptr [rsp+20h],rax
                           00007ff6`9f910db0 4c8d4df8        lea     r9,[rbp-8]
                           00007ff6`9f910db4 4c8d4518        lea     r8,[rbp+18h]
                           00007ff6`9f910db8 488d542450      lea     rdx,[rsp+50h]
                           00007ff6`9f910dbd 488bcb          mov     rcx,rbx
                           00007ff6`9f910dc0 e89befffff      call    Far+0x13fd60 (00007ff6`9f90fd60)
                           00007ff6`9f910dc5 84c0            test    al,al

+0001F352 Far.exe!CommandLine::ExecString(struct execute_info & __ptr64) __ptr64+0x472 (cmdline.obj):
                           00007ff6`9f7ef32a e841b20700      call    Far+0x9a570 (00007ff6`9f86a570)
                           00007ff6`9f7ef32f eb25            jmp     Far+0x1f356 (00007ff6`9f7ef356)
                           00007ff6`9f7ef331 488d45d7        lea     rax,[rbp-29h]
                           00007ff6`9f7ef335 488945f7        mov     qword ptr [rbp-9],rax
                           00007ff6`9f7ef339 4c8975ff        mov     qword ptr [rbp-1],r14
                           00007ff6`9f7ef33d 0f2845f7        movaps  xmm0,xmmword ptr [rbp-9]
                           00007ff6`9f7ef341 660f7f45f7      movdqa  xmmword ptr [rbp-9],xmm0
                           00007ff6`9f7ef346 488d55f7        lea     rdx,[rbp-9]
                           00007ff6`9f7ef34a 488bcb          mov     rcx,rbx
                           00007ff6`9f7ef34d e83e141200      call    Far+0x140790 (00007ff6`9f910790)
                           00007ff6`9f7ef352 c6456f01        mov     byte ptr [rbp+6Fh],1

+0016F9B2 Far.exe!FileList::ProcessEnter(bool,bool,bool,bool,enum OPENFILEPLUGINTYPE) __ptr64+0x1272 (filelist.obj):
                           00007ff6`9f93f97c 488bd0          mov     rdx,rax
                           00007ff6`9f93f97f 488d8d20010000  lea     rcx,[rbp+120h]
                           00007ff6`9f93f986 e8a5a8e9ff      call    Far+0xa230 (00007ff6`9f7da230)
                           00007ff6`9f93f98b 488d8df8000000  lea     rcx,[rbp+0F8h]
                           00007ff6`9f93f992 e83971eaff      call    Far+0x16ad0 (00007ff6`9f7e6ad0)
                           00007ff6`9f93f997 488bcf          mov     rcx,rdi
                           00007ff6`9f93f99a e8f10f0f00      call    Far+0x260990 (00007ff6`9fa30990)
                           00007ff6`9f93f99f 488d9520010000  lea     rdx,[rbp+120h]
                           00007ff6`9f93f9a6 488b8890000000  mov     rcx,qword ptr [rax+90h]
                           00007ff6`9f93f9ad e82ef5eaff      call    Far+0x1eee0 (00007ff6`9f7eeee0)
                           00007ff6`9f93f9b2 488b15dff83800  mov     rdx,qword ptr [Far+0x4ff298 (00007ff6`9fccf298)]

======================================================================
Exception handler thread 24976 / 0x6190 (Main Thread)
======================================================================

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00132B4A Far.exe!collect_information(class exception_context const & __ptr64,struct source_location const & __ptr64,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,struct error_state_ex const & __ptr64,void * __ptr64 const,unsigned long,class std::span<struct os::debug::stack_frame const ,-1>)+0x1ACA (exception_handler.obj)
+00134F7F Far.exe!handle_generic_exception(class exception_context const & __ptr64,struct source_location const & __ptr64,class Plugin const * __ptr64 const,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,class std::basic_string_view<wchar_t,struct std::char_traits<wchar_t> >,struct error_state_ex const & __ptr64,void * __ptr64 const,unsigned long,class std::span<struct os::debug::stack_frame const ,-1>)+0x99F (exception_handler.obj)
+00135EB7 Far.exe!handle_std_exception(class exception_context const & __ptr64,class std::exception const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)+0x297 (exception_handler.obj)
+00135FEE Far.exe!handle_std_exception(class std::exception const & __ptr64,class Plugin const * __ptr64,struct source_location const & __ptr64)+0xAE (exception_handler.obj)
+0013604E Far.exe!handle_std_exception(class std::exception const & __ptr64,struct source_location const & __ptr64)+0xE (exception_handler.obj)
+002421AF Far.exe!`cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>::operator()(class std::exception const & __ptr64,struct source_location const & __ptr64)const __ptr64+0xF (PluginA.obj)
+002421BD Far.exe!`cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_1>::operator()(class std::exception const & __ptr64,struct source_location const & __ptr64)const __ptr64+0xD (PluginA.obj)
+00243289 Far.exe!std::invoke<class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_1> const & __ptr64,class std::exception const & __ptr64,struct source_location const & __ptr64>(class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::AddEndSlashA(char * __ptr64)'::`2'::<lambda_1> >(class `oldpluginap+0x9 (PluginA.obj)
+00242D27 Far.exe!`function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>::function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)><class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1>,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_1> const & __ptr64>(class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1>,clas+0x17 (PluginA.obj)
+00242D3F Far.exe!`function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>::function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)><class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1>,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2>,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> >(class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1> const & __ptr64,struct source_location const & __ptr64)'::`2'::<lambda_2> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_1> const & __ptr64>(class `cpp_try<class `oldpluginapi::ExpandEnvironmentStrA(char const * __ptr64,char * __ptr64,unsigned __int64)'::`2'::<lambda_1>,clas+0xF (PluginA.obj)
+003CE042 Far.exe!__catch$?cpp_try@detail@@YAXV?$function_ref@$$A6AXXZ@@V?$function_ref@$$A6AXAEBUsource_location@@@Z@@V?$function_ref@$$A6AXAEBVexception@std@@AEBUsource_location@@@Z@@AEBUsource_location@@@Z$0+0x15 (exception_handler.obj)
+00387AF0 Far.exe!_CallSettingFrame_LookupContinuationIndex+0x20 (libvcruntime:handlers.obj)
+0037E9AA Far.exe!__FrameHandler4::CxxCallCatchBlock(struct _EXCEPTION_RECORD * __ptr64)+0x112 (libvcruntime:frame.obj)
+0011F3E6 ntdll.dll!RtlCaptureContext2+0x4A6
+00136F26 Far.exe!detail::cpp_try(class function_ref<void __cdecl(void)>,class function_ref<void __cdecl(struct source_location const & __ptr64)>,class function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>,struct source_location const & __ptr64)+0x36 (exception_handler.obj)
+00241C46 Far.exe!mainImpl(class std::span<wchar_t const * __ptr64 const,-1>)+0xE16 (main.obj)
+00242669 Far.exe!`wmain_seh(void)'::`2'::<lambda_1>::operator()(void)const __ptr64+0x19 (main.obj)
+00242DD2 Far.exe!`function_ref<void __cdecl(void)>::function_ref<void __cdecl(void)><class `cpp_try<class `wmain_seh(void)'::`2'::<lambda_1>,class `wmain_seh(void)'::`2'::<lambda_3>,class `wmain_seh(void)'::`2'::<lambda_2> >(class `wmain_seh(void)'::`2'::<lambda_1> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_2> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_3> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> >(class `cpp_try<class `wmain_seh(void)'::`2'::<lambda_1>,class `wmain_seh(void)'::`2'::<lambda_3>,class `wmain_seh(void)'::`2'::<lambda_2> >(class `wmain_seh(void)'::`2'::<lambda_1> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_2> const & __ptr64,class `wmain_seh(void)'::`2'::<lambda_3> const & __ptr64,struct source_location const & __ptr64)'::`7'::<lambda_2> && __ptr64) __ptr64'::`1'::<lambda_6_>::<lambda_invoker_cdecl>(__int64)+0x12 (main.obj)
+00136F26 Far.exe!detail::cpp_try(class function_ref<void __cdecl(void)>,class function_ref<void __cdecl(struct source_location const & __ptr64)>,class function_ref<void __cdecl(class std::exception const & __ptr64,struct source_location const & __ptr64)>,struct source_location const & __ptr64)+0x36 (exception_handler.obj)
+0024259A Far.exe!wmain_seh(void)+0x3AA (main.obj)
+00242E5C Far.exe!`function_ref<void __cdecl(void)>::function_ref<void __cdecl(void)><class `seh_try<class `main(void)'::`2'::<lambda_1>,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64)'::`3'::<lambda_1> >(class `seh_try<class `main(void)'::`2'::<lambda_1>,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `seh_try_with_ui<class `main(void)'::`2'::<lambda_1>,class `main(void)'::`2'::<lambda_2> >(class `main(void)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64,class Plugin const * __ptr64 const,struct source_location const & __ptr64)'::`2'::<lambda_1> const & __ptr64,class `main(void)'::`2'::<lambda_2> const & __ptr64)'::`3'::<lambda_1> && __ptr64) __ptr64'::`1'::<lambda_8_>::<lambda_invoker_cdecl>(__int64)+0x4C (main.obj)
+00136F58 Far.exe!detail::seh_try(class function_ref<void __cdecl(void)>,class function_ref<unsigned long __cdecl(struct _EXCEPTION_POINTERS * __ptr64)>,class function_ref<void __cdecl(unsigned long)>)+0x18 (exception_handler.obj)
+002427E8 Far.exe!main+0xC8 (main.obj)
+0037A710 Far.exe!__scrt_common_main_seh(void)+0x10C (LIBCMT:exe_main.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

======================================================================
Thread 7184 / 0x1C10
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0x00000000 - STATUS_SUCCESS

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000026F77126FA0
RCX = 0000000000000104
RDX = 0000026F77126C20
RSI = 00007FFF9E0CB8E0
RDI = 0000026F77125370
R8  = 0000000000000010
R9  = 000000DD1C7FF8C8
R10 = 0000000000000104
R11 = 0000000000000104
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1C7FF868
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 21860 / 0x5564
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0x00000000 - STATUS_SUCCESS

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000026F771277D0
RCX = 0000000000000104
RDX = 0000026F77127450
RSI = 00007FFF9E0CB8E0
RDI = 0000026F77125370
R8  = 0000000000000010
R9  = 000000DD1C8FF658
R10 = 0000000000000104
R11 = 0000000000000104
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1C8FF5F8
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 32576 / 0x7F40
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0x00000000 - STATUS_SUCCESS

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000026F77129190
RCX = 0000000000000104
RDX = 0000026F77128E10
RSI = 00007FFF9E0CB8E0
RDI = 0000026F77125370
R8  = 0000000000000010
R9  = 000000DD1C9FFBE8
R10 = 0000000000000104
R11 = 0000000000000104
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1C9FFB88
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 1320 / 0x528 (Window messages processor)
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0xC0000047 - Es wurde versucht, eine Semaphore freizugeben, die die maximale Anzahl überschritten hätte.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14
+0003B352 USER32.dll!GetMessageW+0x22
+00373502 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const & __ptr64) __ptr64+0x572 (wm_listener.obj)
+003740AB Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl wm_listener::*)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64,class std::reference_wrapper<class os::concurrency::event> >(void (__cdecl wm_listener::*&& __ptr64)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64 && __ptr64,class std::reference_wrapper<class os::concurrency::event> && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x1B (wm_listener.obj)
+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 0000000000001004
RBX = 000000DD1CAFE750
RCX = 000000DD1CAFE750
RDX = 0000000000000000
RSI = 000000DD1C6FEC80
RDI = 0000026F77A43CE0
R8  = 0000000000000000
R9  = 0000000000000000
R10 = 000000DD1CAFE750
R11 = 000000DD1CAFE750
R12 = 00007FF69F7DA650
R13 = 0000000000000000
R14 = 00007FF69FC24798
R15 = 00007FF69F7DDF90
RIP = 00007FFF9B3C1344
RSP = 000000DD1CAFE5C8
RBP = 000000DD1CAFE730
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14:
                           00007fff`9b3c1324 c3              ret
                           00007fff`9b3c1325 cd2e            int     2Eh
                           00007fff`9b3c1327 c3              ret
                           00007fff`9b3c1328 0f1f840000000000 nop     dword ptr [rax+rax]
win32u!NtUserGetMessage:
                           00007fff`9b3c1330 4c8bd1          mov     r10,rcx
                           00007fff`9b3c1333 b804100000      mov     eax,1004h
                           00007fff`9b3c1338 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9b3c1340 7503            jne     win32u!NtUserGetMessage+0x15 (00007fff`9b3c1345)
                           00007fff`9b3c1342 0f05            syscall
                           00007fff`9b3c1344 c3              ret

+0003B352 USER32.dll!GetMessageW+0x22:
USER32!GetMessageW:
                           00007fff`9c71b330 4053            push    rbx
                           00007fff`9c71b332 4883ec50        sub     rsp,50h
                           00007fff`9c71b336 418bc0          mov     eax,r8d
                           00007fff`9c71b339 488bd9          mov     rbx,rcx
                           00007fff`9c71b33c 410bc1          or      eax,r9d
                           00007fff`9c71b33f a90000feff      test    eax,0FFFE0000h
                           00007fff`9c71b344 753b            jne     USER32!GetMessageW+0x51 (00007fff`9c71b381)
                           00007fff`9c71b346 48897c2460      mov     qword ptr [rsp+60h],rdi
                           00007fff`9c71b34b 48ff15862b0700  call    qword ptr [USER32!gapfnScSendMessage+0x1a98 (00007fff`9c78ded8)]
                           00007fff`9c71b352 0f1f440000      nop     dword ptr [rax+rax]

+00373502 Far.exe!wm_listener::WindowThreadRoutine(class os::concurrency::event const & __ptr64) __ptr64+0x572 (wm_listener.obj):
                           00007ff6`9fb434d3 4c8d35be120e00  lea     r14,[Far+0x454798 (00007ff6`9fc24798)]
                           00007ff6`9fb434da 4c8d3dafaac9ff  lea     r15,[Far+0xdf90 (00007ff6`9f7ddf90)]
                           00007ff6`9fb434e1 4c8d256871c9ff  lea     r12,[Far+0xa650 (00007ff6`9f7da650)]
                           00007ff6`9fb434e8 84c0            test    al,al
                           00007ff6`9fb434ea 0f8532020000    jne     Far+0x373722 (00007ff6`9fb43722)
                           00007ff6`9fb434f0 4533c9          xor     r9d,r9d
                           00007ff6`9fb434f3 4533c0          xor     r8d,r8d
                           00007ff6`9fb434f6 33d2            xor     edx,edx
                           00007ff6`9fb434f8 488d4d20        lea     rcx,[rbp+20h]
                           00007ff6`9fb434fc ff1596260700    call    qword ptr [Far+0x3e5b98 (00007ff6`9fbb5b98)]
                           00007ff6`9fb43502 85c0            test    eax,eax

+003740AB Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl wm_listener::*)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64,class std::reference_wrapper<class os::concurrency::event> >(void (__cdecl wm_listener::*&& __ptr64)(class os::concurrency::event const & __ptr64) __ptr64,class wm_listener * __ptr64 && __ptr64,class std::reference_wrapper<class os::concurrency::event> && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x1B (wm_listener.obj):
                           00007ff6`9fb4408e 5e              pop     rsi
                           00007ff6`9fb4408f c3              ret
                           00007ff6`9fb44090 4053            push    rbx
                           00007ff6`9fb44092 4883ec20        sub     rsp,20h
                           00007ff6`9fb44096 488bd9          mov     rbx,rcx
                           00007ff6`9fb44099 48894c2430      mov     qword ptr [rsp+30h],rcx
                           00007ff6`9fb4409e 488b01          mov     rax,qword ptr [rcx]
                           00007ff6`9fb440a1 488b5108        mov     rdx,qword ptr [rcx+8]
                           00007ff6`9fb440a5 488b4910        mov     rcx,qword ptr [rcx+10h]
                           00007ff6`9fb440a9 ffd0            call    rax
                           00007ff6`9fb440ab 90              nop

+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj):
                           00007ff6`9fb654a1 7510            jne     Far+0x3954b3 (00007ff6`9fb654b3)
                           00007ff6`9fb654a3 8d48ff          lea     ecx,[rax-1]
                           00007ff6`9fb654a6 e8d5200100      call    Far+0x3a7580 (00007ff6`9fb77580)
                           00007ff6`9fb654ab 85c0            test    eax,eax
                           00007ff6`9fb654ad 0f94c0          sete    al
                           00007ff6`9fb654b0 884320          mov     byte ptr [rbx+20h],al
                           00007ff6`9fb654b3 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h
                           00007ff6`9fb654bd 488b4b08        mov     rcx,qword ptr [rbx+8]
                           00007ff6`9fb654c1 488b03          mov     rax,qword ptr [rbx]
                           00007ff6`9fb654c4 ff15b6090500    call    qword ptr [Far+0x3e5e80 (00007ff6`9fbb5e80)]
                           00007ff6`9fb654ca 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 35140 / 0x8944 (FS watcher)
======================================================================
LastError: 0x00000057 - Falscher Parameter.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14
+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123
+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11
+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj)
+001A7200 Far.exe!background_watcher::process(void) __ptr64+0x2B0 (filesystemwatcher.obj)
+001A9504 Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl background_searcher::*)(void) __ptr64,class background_searcher * __ptr64>(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x14 (findfile.obj)
+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 000000000000005B
RBX = 0000000000000003
RCX = 0000000000000003
RDX = 0000026F77E5EE40
RSI = 0000000000000000
RDI = 0000000000000003
R8  = 0000000000000001
R9  = 0000000000000000
R10 = 0000000000000003
R11 = 0000000000000003
R12 = 0000026F77E5EE40
R13 = 000000DD1C562000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9E200BC4
RSP = 000000DD1CBFEE08
RBP = 000000DD1CBFF240
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14:
                           00007fff`9e200ba2 94              xchg    eax,esp
                           00007fff`9e200ba3 f8              clc
                           00007fff`9e200ba4 ff6666          jmp     qword ptr [rsi+66h]
                           00007fff`9e200ba7 660f1f840000000000 nop   word ptr [rax+rax]
ntdll!ZwWaitForMultipleObjects:
                           00007fff`9e200bb0 4c8bd1          mov     r10,rcx
                           00007fff`9e200bb3 b85b000000      mov     eax,5Bh
                           00007fff`9e200bb8 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e200bc0 7503            jne     ntdll!ZwWaitForMultipleObjects+0x15 (00007fff`9e200bc5)
                           00007fff`9e200bc2 0f05            syscall
                           00007fff`9e200bc4 c3              ret

+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123:
                           00007fff`9b412b9a 488d742440      lea     rsi,[rsp+40h]
                           00007fff`9b412b9f 448b7c2438      mov     r15d,dword ptr [rsp+38h]
                           00007fff`9b412ba4 4533c0          xor     r8d,r8d
                           00007fff`9b412ba7 4585ff          test    r15d,r15d
                           00007fff`9b412baa 410f94c0        sete    r8b
                           00007fff`9b412bae 4889742420      mov     qword ptr [rsp+20h],rsi
                           00007fff`9b412bb3 450fb6ce        movzx   r9d,r14b
                           00007fff`9b412bb7 498bd4          mov     rdx,r12
                           00007fff`9b412bba 8bcb            mov     ecx,ebx
                           00007fff`9b412bbc 48ff1505532700  call    qword ptr [KERNELBASE!TlsGetValue+0x102288 (00007fff`9b687ec8)]
                           00007fff`9b412bc3 0f1f440000      nop     dword ptr [rax+rax]

+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11:
                           00007fff`9b412a7a cc              int     3
                           00007fff`9b412a7b cc              int     3
                           00007fff`9b412a7c cc              int     3
                           00007fff`9b412a7d cc              int     3
                           00007fff`9b412a7e cc              int     3
                           00007fff`9b412a7f cc              int     3
KERNELBASE!WaitForMultipleObjects:
                           00007fff`9b412a80 4883ec38        sub     rsp,38h
                           00007fff`9b412a84 c744242000000000 mov     dword ptr [rsp+20h],0
                           00007fff`9b412a8c e80f000000      call    KERNELBASE!WaitForMultipleObjectsEx (00007fff`9b412aa0)
                           00007fff`9b412a91 4883c438        add     rsp,38h

+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj):
                           00007ff6`9fa3eea2 45387908        cmp     byte ptr [r9+8],r15b
                           00007ff6`9fa3eea6 7405            je      Far+0x26eead (00007ff6`9fa3eead)
                           00007ff6`9fa3eea8 4d8b09          mov     r9,qword ptr [r9]
                           00007ff6`9fa3eeab eb06            jmp     Far+0x26eeb3 (00007ff6`9fa3eeb3)
                           00007ff6`9fa3eead 41b9ffffffff    mov     r9d,0FFFFFFFFh
                           00007ff6`9fa3eeb3 4c8b32          mov     r14,qword ptr [rdx]
                           00007ff6`9fa3eeb6 450fb6c0        movzx   r8d,r8b
                           00007ff6`9fa3eeba 498bd6          mov     rdx,r14
                           00007ff6`9fa3eebd 8b4f08          mov     ecx,dword ptr [rdi+8]
                           00007ff6`9fa3eec0 ff1572641700    call    qword ptr [Far+0x3e5338 (00007ff6`9fbb5338)]
                           00007ff6`9fa3eec6 488b7f08        mov     rdi,qword ptr [rdi+8]

+001A7200 Far.exe!background_watcher::process(void) __ptr64+0x2B0 (filesystemwatcher.obj):
                           00007ff6`9f9771d4 48894dd8        mov     qword ptr [rbp-28h],rcx
                           00007ff6`9f9771d8 0f2845f0        movaps  xmm0,xmmword ptr [rbp-10h]
                           00007ff6`9f9771dc 660f7f4580      movdqa  xmmword ptr [rbp-80h],xmm0
                           00007ff6`9f9771e1 0f284dd0        movaps  xmm1,xmmword ptr [rbp-30h]
                           00007ff6`9f9771e5 660f7f4c2450    movdqa  xmmword ptr [rsp+50h],xmm1
                           00007ff6`9f9771eb 4c8d4d80        lea     r9,[rbp-80h]
                           00007ff6`9f9771ef 4533c0          xor     r8d,r8d
                           00007ff6`9f9771f2 488d542450      lea     rdx,[rsp+50h]
                           00007ff6`9f9771f7 488d4da0        lea     rcx,[rbp-60h]
                           00007ff6`9f9771fb e8707c0c00      call    Far+0x26ee70 (00007ff6`9fa3ee70)
                           00007ff6`9f977200 4c8b38          mov     r15,qword ptr [rax]

+001A9504 Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl background_searcher::*)(void) __ptr64,class background_searcher * __ptr64>(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x14 (findfile.obj):
                           00007ff6`9f9794ec cc              int     3
                           00007ff6`9f9794ed cc              int     3
                           00007ff6`9f9794ee cc              int     3
                           00007ff6`9f9794ef cc              int     3
                           00007ff6`9f9794f0 4053            push    rbx
                           00007ff6`9f9794f2 4883ec20        sub     rsp,20h
                           00007ff6`9f9794f6 488bd9          mov     rbx,rcx
                           00007ff6`9f9794f9 48894c2430      mov     qword ptr [rsp+30h],rcx
                           00007ff6`9f9794fe 488b4908        mov     rcx,qword ptr [rcx+8]
                           00007ff6`9f979502 ff13            call    qword ptr [rbx]
                           00007ff6`9f979504 90              nop

+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj):
                           00007ff6`9fb654a1 7510            jne     Far+0x3954b3 (00007ff6`9fb654b3)
                           00007ff6`9fb654a3 8d48ff          lea     ecx,[rax-1]
                           00007ff6`9fb654a6 e8d5200100      call    Far+0x3a7580 (00007ff6`9fb77580)
                           00007ff6`9fb654ab 85c0            test    eax,eax
                           00007ff6`9fb654ad 0f94c0          sete    al
                           00007ff6`9fb654b0 884320          mov     byte ptr [rbx+20h],al
                           00007ff6`9fb654b3 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h
                           00007ff6`9fb654bd 488b4b08        mov     rcx,qword ptr [rbx+8]
                           00007ff6`9fb654c1 488b03          mov     rax,qword ptr [rbx]
                           00007ff6`9fb654c4 ff15b6090500    call    qword ptr [Far+0x3e5e80 (00007ff6`9fbb5e80)]
                           00007ff6`9fb654ca 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 6252 / 0x186C (Taskbar processor)
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0xC0000034 - Der Objektname wurde nicht gefunden.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14
+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123
+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11
+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj)
+00332720 Far.exe!taskbar_impl::handler(void)const __ptr64+0x360 (taskbar.obj)
+001A9504 Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl background_searcher::*)(void) __ptr64,class background_searcher * __ptr64>(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x14 (findfile.obj)
+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 000000000000005B
RBX = 0000000000000003
RCX = 0000000000000003
RDX = 000000DD1CCFE5F0
RSI = 0000000000000000
RDI = 0000000000000003
R8  = 0000000000000001
R9  = 0000000000000000
R10 = 0000000000000003
R11 = 0000000000000003
R12 = 000000DD1CCFE5F0
R13 = 000000DD1C562000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9E200BC4
RSP = 000000DD1CCFDBA8
RBP = 000000DD1CCFDFE0
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14:
                           00007fff`9e200ba2 94              xchg    eax,esp
                           00007fff`9e200ba3 f8              clc
                           00007fff`9e200ba4 ff6666          jmp     qword ptr [rsi+66h]
                           00007fff`9e200ba7 660f1f840000000000 nop   word ptr [rax+rax]
ntdll!ZwWaitForMultipleObjects:
                           00007fff`9e200bb0 4c8bd1          mov     r10,rcx
                           00007fff`9e200bb3 b85b000000      mov     eax,5Bh
                           00007fff`9e200bb8 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e200bc0 7503            jne     ntdll!ZwWaitForMultipleObjects+0x15 (00007fff`9e200bc5)
                           00007fff`9e200bc2 0f05            syscall
                           00007fff`9e200bc4 c3              ret

+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123:
                           00007fff`9b412b9a 488d742440      lea     rsi,[rsp+40h]
                           00007fff`9b412b9f 448b7c2438      mov     r15d,dword ptr [rsp+38h]
                           00007fff`9b412ba4 4533c0          xor     r8d,r8d
                           00007fff`9b412ba7 4585ff          test    r15d,r15d
                           00007fff`9b412baa 410f94c0        sete    r8b
                           00007fff`9b412bae 4889742420      mov     qword ptr [rsp+20h],rsi
                           00007fff`9b412bb3 450fb6ce        movzx   r9d,r14b
                           00007fff`9b412bb7 498bd4          mov     rdx,r12
                           00007fff`9b412bba 8bcb            mov     ecx,ebx
                           00007fff`9b412bbc 48ff1505532700  call    qword ptr [KERNELBASE!TlsGetValue+0x102288 (00007fff`9b687ec8)]
                           00007fff`9b412bc3 0f1f440000      nop     dword ptr [rax+rax]

+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11:
                           00007fff`9b412a7a cc              int     3
                           00007fff`9b412a7b cc              int     3
                           00007fff`9b412a7c cc              int     3
                           00007fff`9b412a7d cc              int     3
                           00007fff`9b412a7e cc              int     3
                           00007fff`9b412a7f cc              int     3
KERNELBASE!WaitForMultipleObjects:
                           00007fff`9b412a80 4883ec38        sub     rsp,38h
                           00007fff`9b412a84 c744242000000000 mov     dword ptr [rsp+20h],0
                           00007fff`9b412a8c e80f000000      call    KERNELBASE!WaitForMultipleObjectsEx (00007fff`9b412aa0)
                           00007fff`9b412a91 4883c438        add     rsp,38h

+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj):
                           00007ff6`9fa3eea2 45387908        cmp     byte ptr [r9+8],r15b
                           00007ff6`9fa3eea6 7405            je      Far+0x26eead (00007ff6`9fa3eead)
                           00007ff6`9fa3eea8 4d8b09          mov     r9,qword ptr [r9]
                           00007ff6`9fa3eeab eb06            jmp     Far+0x26eeb3 (00007ff6`9fa3eeb3)
                           00007ff6`9fa3eead 41b9ffffffff    mov     r9d,0FFFFFFFFh
                           00007ff6`9fa3eeb3 4c8b32          mov     r14,qword ptr [rdx]
                           00007ff6`9fa3eeb6 450fb6c0        movzx   r8d,r8b
                           00007ff6`9fa3eeba 498bd6          mov     rdx,r14
                           00007ff6`9fa3eebd 8b4f08          mov     ecx,dword ptr [rdi+8]
                           00007ff6`9fa3eec0 ff1572641700    call    qword ptr [Far+0x3e5338 (00007ff6`9fbb5338)]
                           00007ff6`9fa3eec6 488b7f08        mov     rdi,qword ptr [rdi+8]

+00332720 Far.exe!taskbar_impl::handler(void)const __ptr64+0x360 (taskbar.obj):
                           00007ff6`9fb026f4 48894540        mov     qword ptr [rbp+40h],rax
                           00007ff6`9fb026f8 c6450800        mov     byte ptr [rbp+8],0
                           00007ff6`9fb026fc 0f284500        movaps  xmm0,xmmword ptr [rbp]
                           00007ff6`9fb02700 660f7f442470    movdqa  xmmword ptr [rsp+70h],xmm0
                           00007ff6`9fb02706 660f7f7550      movdqa  xmmword ptr [rbp+50h],xmm6
                           00007ff6`9fb0270b 4c8d4c2470      lea     r9,[rsp+70h]
                           00007ff6`9fb02710 4533c0          xor     r8d,r8d
                           00007ff6`9fb02713 488d5550        lea     rdx,[rbp+50h]
                           00007ff6`9fb02717 488d4dc8        lea     rcx,[rbp-38h]
                           00007ff6`9fb0271b e850c7f3ff      call    Far+0x26ee70 (00007ff6`9fa3ee70)
                           00007ff6`9fb02720 488b08          mov     rcx,qword ptr [rax]

+001A9504 Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl background_searcher::*)(void) __ptr64,class background_searcher * __ptr64>(void (__cdecl background_searcher::*&& __ptr64)(void) __ptr64,class background_searcher * __ptr64 && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x14 (findfile.obj):
                           00007ff6`9f9794ec cc              int     3
                           00007ff6`9f9794ed cc              int     3
                           00007ff6`9f9794ee cc              int     3
                           00007ff6`9f9794ef cc              int     3
                           00007ff6`9f9794f0 4053            push    rbx
                           00007ff6`9f9794f2 4883ec20        sub     rsp,20h
                           00007ff6`9f9794f6 488bd9          mov     rbx,rcx
                           00007ff6`9f9794f9 48894c2430      mov     qword ptr [rsp+30h],rcx
                           00007ff6`9f9794fe 488b4908        mov     rcx,qword ptr [rcx+8]
                           00007ff6`9f979502 ff13            call    qword ptr [rbx]
                           00007ff6`9f979504 90              nop

+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj):
                           00007ff6`9fb654a1 7510            jne     Far+0x3954b3 (00007ff6`9fb654b3)
                           00007ff6`9fb654a3 8d48ff          lea     ecx,[rax-1]
                           00007ff6`9fb654a6 e8d5200100      call    Far+0x3a7580 (00007ff6`9fb77580)
                           00007ff6`9fb654ab 85c0            test    eax,eax
                           00007ff6`9fb654ad 0f94c0          sete    al
                           00007ff6`9fb654b0 884320          mov     byte ptr [rbx+20h],al
                           00007ff6`9fb654b3 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h
                           00007ff6`9fb654bd 488b4b08        mov     rcx,qword ptr [rbx+8]
                           00007ff6`9fb654c1 488b03          mov     rax,qword ptr [rbx]
                           00007ff6`9fb654c4 ff15b6090500    call    qword ptr [Far+0x3e5e80 (00007ff6`9fbb5e80)]
                           00007ff6`9fb654ca 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 31088 / 0x7970
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14
+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123
+0008450E combase.dll!Ordinal112+0x198E
+00116CAF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0x1DF
+00116BBF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0xEF
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 000000000000005B
RBX = 0000000000000001
RCX = 0000000000000001
RDX = 000000DD1CDFFA70
RSI = 0000000000000000
RDI = 0000000000000001
R8  = 0000000000000001
R9  = 0000000000000000
R10 = 0000000000000001
R11 = 0000000000000001
R12 = 000000DD1CDFFA70
R13 = 000000DD1C562000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9E200BC4
RSP = 000000DD1CDFF728
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14:
                           00007fff`9e200ba2 94              xchg    eax,esp
                           00007fff`9e200ba3 f8              clc
                           00007fff`9e200ba4 ff6666          jmp     qword ptr [rsi+66h]
                           00007fff`9e200ba7 660f1f840000000000 nop   word ptr [rax+rax]
ntdll!ZwWaitForMultipleObjects:
                           00007fff`9e200bb0 4c8bd1          mov     r10,rcx
                           00007fff`9e200bb3 b85b000000      mov     eax,5Bh
                           00007fff`9e200bb8 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e200bc0 7503            jne     ntdll!ZwWaitForMultipleObjects+0x15 (00007fff`9e200bc5)
                           00007fff`9e200bc2 0f05            syscall
                           00007fff`9e200bc4 c3              ret

+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123:
                           00007fff`9b412b9a 488d742440      lea     rsi,[rsp+40h]
                           00007fff`9b412b9f 448b7c2438      mov     r15d,dword ptr [rsp+38h]
                           00007fff`9b412ba4 4533c0          xor     r8d,r8d
                           00007fff`9b412ba7 4585ff          test    r15d,r15d
                           00007fff`9b412baa 410f94c0        sete    r8b
                           00007fff`9b412bae 4889742420      mov     qword ptr [rsp+20h],rsi
                           00007fff`9b412bb3 450fb6ce        movzx   r9d,r14b
                           00007fff`9b412bb7 498bd4          mov     rdx,r12
                           00007fff`9b412bba 8bcb            mov     ecx,ebx
                           00007fff`9b412bbc 48ff1505532700  call    qword ptr [KERNELBASE!TlsGetValue+0x102288 (00007fff`9b687ec8)]
                           00007fff`9b412bc3 0f1f440000      nop     dword ptr [rax+rax]

+0008450E combase.dll!Ordinal112+0x198E:
                           00007fff`9c0344e3 58              pop     rax
                           00007fff`9c0344e4 41b8f8010000    mov     r8d,1F8h
                           00007fff`9c0344ea e8d5540f00      call    combase!HDC_UserFree+0x1484 (00007fff`9c1299c4)
                           00007fff`9c0344ef 8364242000      and     dword ptr [rsp+20h],0
                           00007fff`9c0344f4 488d542450      lea     rdx,[rsp+50h]
                           00007fff`9c0344f9 4533c0          xor     r8d,r8d
                           00007fff`9c0344fc 48895c2450      mov     qword ptr [rsp+50h],rbx
                           00007fff`9c034501 4183c9ff        or      r9d,0FFFFFFFFh
                           00007fff`9c034505 418d4801        lea     ecx,[r8+1]
                           00007fff`9c034509 e8825c0f00      call    combase!HDC_UserFree+0x1c50 (00007fff`9c12a190)
                           00007fff`9c03450e 4084ff          test    dil,dil

+00116CAF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0x1DF:
                           00007fff`9c0c6c81 488d4c2470      lea     rcx,[rsp+70h]
                           00007fff`9c0c6c86 488b9058170000  mov     rdx,qword ptr [rax+1758h]
                           00007fff`9c0c6c8d 4889542470      mov     qword ptr [rsp+70h],rdx
                           00007fff`9c0c6c92 e8f9ad0500      call    combase!HSTRING_UserMarshal64+0xec80 (00007fff`9c121a90)
                           00007fff`9c0c6c97 85c0            test    eax,eax
                           00007fff`9c0c6c99 7507            jne     combase!RoParameterizedTypeExtraGetTypeSignature+0x1d2 (00007fff`9c0c6ca2)
                           00007fff`9c0c6c9b 4489b238010000  mov     dword ptr [rdx+138h],r14d
                           00007fff`9c0c6ca2 488b4b18        mov     rcx,qword ptr [rbx+18h]
                           00007fff`9c0c6ca6 488b4310        mov     rax,qword ptr [rbx+10h]
                           00007fff`9c0c6caa e861731500      call    combase!ObjectStublessClient32+0x25170 (00007fff`9c21e010)
                           00007fff`9c0c6caf 48ff154abd1900  call    qword ptr [combase!ObjectStublessClient32+0x69b60 (00007fff`9c262a00)]

+00116BBF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0xEF:
                           00007fff`9c0c6b9c 48895c2430      mov     qword ptr [rsp+30h],rbx
                           00007fff`9c0c6ba1 4885db          test    rbx,rbx
                           00007fff`9c0c6ba4 743c            je      combase!RoParameterizedTypeExtraGetTypeSignature+0x112 (00007fff`9c0c6be2)
                           00007fff`9c0c6ba6 837b2c00        cmp     dword ptr [rbx+2Ch],0
                           00007fff`9c0c6baa 774b            ja      combase!RoParameterizedTypeExtraGetTypeSignature+0x127 (00007fff`9c0c6bf7)
                           00007fff`9c0c6bac 837b2800        cmp     dword ptr [rbx+28h],0
                           00007fff`9c0c6bb0 7753            ja      combase!RoParameterizedTypeExtraGetTypeSignature+0x135 (00007fff`9c0c6c05)
                           00007fff`9c0c6bb2 0fba6b140c      bts     dword ptr [rbx+14h],0Ch
                           00007fff`9c0c6bb7 488bcf          mov     rcx,rdi
                           00007fff`9c0c6bba e895000000      call    combase!RoParameterizedTypeExtraGetTypeSignature+0x184 (00007fff`9c0c6c54)
                           00007fff`9c0c6bbf 488b5f30        mov     rbx,qword ptr [rdi+30h]

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 4596 / 0x11F4
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000026F7D32A930
RCX = 0000000000000014
RDX = 0000026F7D32A5B0
RSI = 00007FFF9E0CB8E0
RDI = 0000026F77103280
R8  = 0000000000000010
R9  = 000000DD1CEFF638
R10 = 0000000000000014
R11 = 0000000000000014
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1CEFF5D8
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 26244 / 0x6684
======================================================================
LastError: 0x00000000 - Der Vorgang wurde erfolgreich beendet.
NTSTATUS:  0x00000000 - STATUS_SUCCESS

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000026F7D32A210
RCX = 0000000000000014
RDX = 0000026F7D329E90
RSI = 00007FFF9E0CB8E0
RDI = 0000026F77103280
R8  = 0000000000000010
R9  = 000000DD1CFFF618
R10 = 0000000000000014
R11 = 0000000000000014
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1CFFF5B8
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 28620 / 0x6FCC
======================================================================
LastError: 0x000003F0 - Es wurde versucht, auf ein Token zuzugreifen, das nicht vorhanden ist.
NTSTATUS:  0xC000007C - Es wurde versucht, auf einen Token zu verweisen, der nicht existiert. Dies erfolgt im Normalfall durch Ansprechen des mit dem Thread verknüpften Token, wenn der Thread nicht die Identität eines Client angenommen hat.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14
+0003B352 USER32.dll!GetMessageW+0x22
+000EA14E combase.dll!CoFreeUnusedLibrariesEx+0x128E
+000E8CDF combase.dll!CoRegisterSurrogateEx+0xEBF
+00116CAF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0x1DF
+00116BBF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0xEF
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 0000000000001004
RBX = 000000DD1D0FFC20
RCX = 000000DD1D0FFC20
RDX = 0000000000000000
RSI = 00000000001101D4
RDI = 00007FFF9C2E58A0
R8  = 0000000000000000
R9  = 0000000000000000
R10 = 000000DD1D0FFC20
R11 = 000000DD1D0FFC20
R12 = 0000000000000000
R13 = 0000000000000000
R14 = 0000000000000000
R15 = 0000000000000001
RIP = 00007FFF9B3C1344
RSP = 000000DD1D0FFB88
RBP = 0000000000001000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14:
                           00007fff`9b3c1324 c3              ret
                           00007fff`9b3c1325 cd2e            int     2Eh
                           00007fff`9b3c1327 c3              ret
                           00007fff`9b3c1328 0f1f840000000000 nop     dword ptr [rax+rax]
win32u!NtUserGetMessage:
                           00007fff`9b3c1330 4c8bd1          mov     r10,rcx
                           00007fff`9b3c1333 b804100000      mov     eax,1004h
                           00007fff`9b3c1338 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9b3c1340 7503            jne     win32u!NtUserGetMessage+0x15 (00007fff`9b3c1345)
                           00007fff`9b3c1342 0f05            syscall
                           00007fff`9b3c1344 c3              ret

+0003B352 USER32.dll!GetMessageW+0x22:
USER32!GetMessageW:
                           00007fff`9c71b330 4053            push    rbx
                           00007fff`9c71b332 4883ec50        sub     rsp,50h
                           00007fff`9c71b336 418bc0          mov     eax,r8d
                           00007fff`9c71b339 488bd9          mov     rbx,rcx
                           00007fff`9c71b33c 410bc1          or      eax,r9d
                           00007fff`9c71b33f a90000feff      test    eax,0FFFE0000h
                           00007fff`9c71b344 753b            jne     USER32!GetMessageW+0x51 (00007fff`9c71b381)
                           00007fff`9c71b346 48897c2460      mov     qword ptr [rsp+60h],rdi
                           00007fff`9c71b34b 48ff15862b0700  call    qword ptr [USER32!gapfnScSendMessage+0x1a98 (00007fff`9c78ded8)]
                           00007fff`9c71b352 0f1f440000      nop     dword ptr [rax+rax]

+000EA14E combase.dll!CoFreeUnusedLibrariesEx+0x128E:
                           00007fff`9c09a121 0f57c0          xorps   xmm0,xmm0
                           00007fff`9c09a124 4889051dc72400  mov     qword ptr [combase!Ordinal183+0x5e918 (00007fff`9c2e6848)],rax
                           00007fff`9c09a12b 0f11442430      movups  xmmword ptr [rsp+30h],xmm0
                           00007fff`9c09a130 0f11442440      movups  xmmword ptr [rsp+40h],xmm0
                           00007fff`9c09a135 0f11442450      movups  xmmword ptr [rsp+50h],xmm0
                           00007fff`9c09a13a 4533c9          xor     r9d,r9d
                           00007fff`9c09a13d 488d4c2430      lea     rcx,[rsp+30h]
                           00007fff`9c09a142 4533c0          xor     r8d,r8d
                           00007fff`9c09a145 33d2            xor     edx,edx
                           00007fff`9c09a147 48ff15aa742700  call    qword ptr [combase!Ordinal183+0x896c8 (00007fff`9c3115f8)]
                           00007fff`9c09a14e 0f1f440000      nop     dword ptr [rax+rax]

+000E8CDF combase.dll!CoRegisterSurrogateEx+0xEBF:
                           00007fff`9c098cb7 894758          mov     dword ptr [rdi+58h],eax
                           00007fff`9c098cba 48ff1507a01c00  call    qword ptr [combase!ObjectStublessClient32+0x69e28 (00007fff`9c262cc8)]
                           00007fff`9c098cc1 0f1f440000      nop     dword ptr [rax+rax]
                           00007fff`9c098cc6 8b4730          mov     eax,dword ptr [rdi+30h]
                           00007fff`9c098cc9 83e01f          and     eax,1Fh
                           00007fff`9c098ccc 83e801          sub     eax,1
                           00007fff`9c098ccf 7409            je      combase!CoRegisterSurrogateEx+0xeba (00007fff`9c098cda)
                           00007fff`9c098cd1 83f801          cmp     eax,1
                           00007fff`9c098cd4 0f8573ffffff    jne     combase!CoRegisterSurrogateEx+0xe2d (00007fff`9c098c4d)
                           00007fff`9c098cda e8f9130000      call    combase!CoFreeUnusedLibrariesEx+0x1218 (00007fff`9c09a0d8)
                           00007fff`9c098cdf e969ffffff      jmp     combase!CoRegisterSurrogateEx+0xe2d (00007fff`9c098c4d)

+00116CAF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0x1DF:
                           00007fff`9c0c6c81 488d4c2470      lea     rcx,[rsp+70h]
                           00007fff`9c0c6c86 488b9058170000  mov     rdx,qword ptr [rax+1758h]
                           00007fff`9c0c6c8d 4889542470      mov     qword ptr [rsp+70h],rdx
                           00007fff`9c0c6c92 e8f9ad0500      call    combase!HSTRING_UserMarshal64+0xec80 (00007fff`9c121a90)
                           00007fff`9c0c6c97 85c0            test    eax,eax
                           00007fff`9c0c6c99 7507            jne     combase!RoParameterizedTypeExtraGetTypeSignature+0x1d2 (00007fff`9c0c6ca2)
                           00007fff`9c0c6c9b 4489b238010000  mov     dword ptr [rdx+138h],r14d
                           00007fff`9c0c6ca2 488b4b18        mov     rcx,qword ptr [rbx+18h]
                           00007fff`9c0c6ca6 488b4310        mov     rax,qword ptr [rbx+10h]
                           00007fff`9c0c6caa e861731500      call    combase!ObjectStublessClient32+0x25170 (00007fff`9c21e010)
                           00007fff`9c0c6caf 48ff154abd1900  call    qword ptr [combase!ObjectStublessClient32+0x69b60 (00007fff`9c262a00)]

+00116BBF combase.dll!RoParameterizedTypeExtraGetTypeSignature+0xEF:
                           00007fff`9c0c6b9c 48895c2430      mov     qword ptr [rsp+30h],rbx
                           00007fff`9c0c6ba1 4885db          test    rbx,rbx
                           00007fff`9c0c6ba4 743c            je      combase!RoParameterizedTypeExtraGetTypeSignature+0x112 (00007fff`9c0c6be2)
                           00007fff`9c0c6ba6 837b2c00        cmp     dword ptr [rbx+2Ch],0
                           00007fff`9c0c6baa 774b            ja      combase!RoParameterizedTypeExtraGetTypeSignature+0x127 (00007fff`9c0c6bf7)
                           00007fff`9c0c6bac 837b2800        cmp     dword ptr [rbx+28h],0
                           00007fff`9c0c6bb0 7753            ja      combase!RoParameterizedTypeExtraGetTypeSignature+0x135 (00007fff`9c0c6c05)
                           00007fff`9c0c6bb2 0fba6b140c      bts     dword ptr [rbx+14h],0Ch
                           00007fff`9c0c6bb7 488bcf          mov     rcx,rdi
                           00007fff`9c0c6bba e895000000      call    combase!RoParameterizedTypeExtraGetTypeSignature+0x184 (00007fff`9c0c6c54)
                           00007fff`9c0c6bbf 488b5f30        mov     rbx,qword ptr [rdi+30h]

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 34672 / 0x8770 (Async history config)
======================================================================
LastError: 0x00000057 - Falscher Parameter.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14
+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123
+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11
+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj)
+0007BC95 Far.exe!`anonymous namespace'::HistoryConfigDb::ThreadProc(void) __ptr64+0x4D5 (configdb.obj)
+0008AFBE Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl `anonymous namespace'::HistoryConfigDb::*)(void) __ptr64,class A0x6002ce20::HistoryConfigDb * __ptr64 const>(void (__cdecl `anonymous namespace'::HistoryConfigDb::*&& __ptr64)(void) __ptr64,class A0x6002ce20::HistoryConfigDb * __ptr64 const && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x2E (configdb.obj)
+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj)
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 000000000000005B
RBX = 0000000000000002
RCX = 0000000000000002
RDX = 000000DD1D1FF718
RSI = 0000000000000000
RDI = 0000000000000002
R8  = 0000000000000001
R9  = 0000000000000000
R10 = 0000000000000002
R11 = 0000000000000002
R12 = 000000DD1D1FF718
R13 = 000000DD1C562000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9E200BC4
RSP = 000000DD1D1FED78
RBP = 000000DD1D1FF1B0
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14:
                           00007fff`9e200ba2 94              xchg    eax,esp
                           00007fff`9e200ba3 f8              clc
                           00007fff`9e200ba4 ff6666          jmp     qword ptr [rsi+66h]
                           00007fff`9e200ba7 660f1f840000000000 nop   word ptr [rax+rax]
ntdll!ZwWaitForMultipleObjects:
                           00007fff`9e200bb0 4c8bd1          mov     r10,rcx
                           00007fff`9e200bb3 b85b000000      mov     eax,5Bh
                           00007fff`9e200bb8 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e200bc0 7503            jne     ntdll!ZwWaitForMultipleObjects+0x15 (00007fff`9e200bc5)
                           00007fff`9e200bc2 0f05            syscall
                           00007fff`9e200bc4 c3              ret

+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123:
                           00007fff`9b412b9a 488d742440      lea     rsi,[rsp+40h]
                           00007fff`9b412b9f 448b7c2438      mov     r15d,dword ptr [rsp+38h]
                           00007fff`9b412ba4 4533c0          xor     r8d,r8d
                           00007fff`9b412ba7 4585ff          test    r15d,r15d
                           00007fff`9b412baa 410f94c0        sete    r8b
                           00007fff`9b412bae 4889742420      mov     qword ptr [rsp+20h],rsi
                           00007fff`9b412bb3 450fb6ce        movzx   r9d,r14b
                           00007fff`9b412bb7 498bd4          mov     rdx,r12
                           00007fff`9b412bba 8bcb            mov     ecx,ebx
                           00007fff`9b412bbc 48ff1505532700  call    qword ptr [KERNELBASE!TlsGetValue+0x102288 (00007fff`9b687ec8)]
                           00007fff`9b412bc3 0f1f440000      nop     dword ptr [rax+rax]

+00022A91 KERNELBASE.dll!WaitForMultipleObjects+0x11:
                           00007fff`9b412a7a cc              int     3
                           00007fff`9b412a7b cc              int     3
                           00007fff`9b412a7c cc              int     3
                           00007fff`9b412a7d cc              int     3
                           00007fff`9b412a7e cc              int     3
                           00007fff`9b412a7f cc              int     3
KERNELBASE!WaitForMultipleObjects:
                           00007fff`9b412a80 4883ec38        sub     rsp,38h
                           00007fff`9b412a84 c744242000000000 mov     dword ptr [rsp+20h],0
                           00007fff`9b412a8c e80f000000      call    KERNELBASE!WaitForMultipleObjectsEx (00007fff`9b412aa0)
                           00007fff`9b412a91 4883c438        add     rsp,38h

+0026EEC6 Far.exe!os::detail::multi_wait(class std::span<void * __ptr64 const,-1>,bool,class std::optional<class std::chrono::duration<__int64,struct std::ratio<1,1000> > >)+0x56 (platform.obj):
                           00007ff6`9fa3eea2 45387908        cmp     byte ptr [r9+8],r15b
                           00007ff6`9fa3eea6 7405            je      Far+0x26eead (00007ff6`9fa3eead)
                           00007ff6`9fa3eea8 4d8b09          mov     r9,qword ptr [r9]
                           00007ff6`9fa3eeab eb06            jmp     Far+0x26eeb3 (00007ff6`9fa3eeb3)
                           00007ff6`9fa3eead 41b9ffffffff    mov     r9d,0FFFFFFFFh
                           00007ff6`9fa3eeb3 4c8b32          mov     r14,qword ptr [rdx]
                           00007ff6`9fa3eeb6 450fb6c0        movzx   r8d,r8b
                           00007ff6`9fa3eeba 498bd6          mov     rdx,r14
                           00007ff6`9fa3eebd 8b4f08          mov     ecx,dword ptr [rdi+8]
                           00007ff6`9fa3eec0 ff1572641700    call    qword ptr [Far+0x3e5338 (00007ff6`9fbb5338)]
                           00007ff6`9fa3eec6 488b7f08        mov     rdi,qword ptr [rdi+8]

+0007BC95 Far.exe!`anonymous namespace'::HistoryConfigDb::ThreadProc(void) __ptr64+0x4D5 (configdb.obj):
                           00007ff6`9f84bc67 48c745a802000000 mov     qword ptr [rbp-58h],2
                           00007ff6`9f84bc6f 0f2845d0        movaps  xmm0,xmmword ptr [rbp-30h]
                           00007ff6`9f84bc73 660f7f45b0      movdqa  xmmword ptr [rbp-50h],xmm0
                           00007ff6`9f84bc78 0f284da0        movaps  xmm1,xmmword ptr [rbp-60h]
                           00007ff6`9f84bc7c 660f7f4dc0      movdqa  xmmword ptr [rbp-40h],xmm1
                           00007ff6`9f84bc81 4c8d4db0        lea     r9,[rbp-50h]
                           00007ff6`9f84bc85 4533c0          xor     r8d,r8d
                           00007ff6`9f84bc88 488d55c0        lea     rdx,[rbp-40h]
                           00007ff6`9f84bc8c 488d4d60        lea     rcx,[rbp+60h]
                           00007ff6`9f84bc90 e8db311f00      call    Far+0x26ee70 (00007ff6`9fa3ee70)
                           00007ff6`9f84bc95 48833801        cmp     qword ptr [rax],1

+0008AFBE Far.exe!os::concurrency::thread::wrapper<class `os::concurrency::thread::thread<void (__cdecl `anonymous namespace'::HistoryConfigDb::*)(void) __ptr64,class A0x6002ce20::HistoryConfigDb * __ptr64 const>(void (__cdecl `anonymous namespace'::HistoryConfigDb::*&& __ptr64)(void) __ptr64,class A0x6002ce20::HistoryConfigDb * __ptr64 const && __ptr64) __ptr64'::`2'::<lambda_1> >(void * __ptr64)+0x2E (configdb.obj):
                           00007ff6`9f85af99 48894c2430      mov     qword ptr [rsp+30h],rcx
                           00007ff6`9f85af9e 4c8b4910        mov     r9,qword ptr [rcx+10h]
                           00007ff6`9f85afa2 4863510c        movsxd  rdx,dword ptr [rcx+0Ch]
                           00007ff6`9f85afa6 498b4108        mov     rax,qword ptr [r9+8]
                           00007ff6`9f85afaa 48630c02        movsxd  rcx,dword ptr [rdx+rax]
                           00007ff6`9f85afae 48635308        movsxd  rdx,dword ptr [rbx+8]
                           00007ff6`9f85afb2 4903c9          add     rcx,r9
                           00007ff6`9f85afb5 4883c208        add     rdx,8
                           00007ff6`9f85afb9 4803ca          add     rcx,rdx
                           00007ff6`9f85afbc ff13            call    qword ptr [rbx]
                           00007ff6`9f85afbe 90              nop

+003954CA Far.exe!thread_start<unsigned int (__cdecl*)(void * __ptr64),1>(void * __ptr64 const)+0x5A (libucrt:thread.obj):
                           00007ff6`9fb654a1 7510            jne     Far+0x3954b3 (00007ff6`9fb654b3)
                           00007ff6`9fb654a3 8d48ff          lea     ecx,[rax-1]
                           00007ff6`9fb654a6 e8d5200100      call    Far+0x3a7580 (00007ff6`9fb77580)
                           00007ff6`9fb654ab 85c0            test    eax,eax
                           00007ff6`9fb654ad 0f94c0          sete    al
                           00007ff6`9fb654b0 884320          mov     byte ptr [rbx+20h],al
                           00007ff6`9fb654b3 49ba7028d1325b2e0c9e mov r10,9E0C2E5B32D12870h
                           00007ff6`9fb654bd 488b4b08        mov     rcx,qword ptr [rbx+8]
                           00007ff6`9fb654c1 488b03          mov     rax,qword ptr [rbx]
                           00007ff6`9fb654c4 ff15b6090500    call    qword ptr [Far+0x3e5e80 (00007ff6`9fbb5e80)]
                           00007ff6`9fb654ca 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 35588 / 0x8B04
======================================================================
LastError: 0x00000057 - Falscher Parameter.
NTSTATUS:  0xC0000135 - Die Ausführung des Codes kann nicht fortgesetzt werden, da %hs nicht gefunden wurde. Durch eine Neuinstallation des Programms kann das Problem möglicherweise behoben werden.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14
+0003B352 USER32.dll!GetMessageW+0x22
+001179A4 dbgeng.DLL!<unknown> (get the pdb)

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 0000000000001004
RBX = 000000DD1D2FF818
RCX = 000000DD1D2FF818
RDX = 0000000000000000
RSI = 0000000000000000
RDI = 0000000000000000
R8  = 0000000000000000
R9  = 0000000000000000
R10 = 000000DD1D2FF818
R11 = 000000DD1D2FF818
R12 = 0000000000000000
R13 = 0000000000000000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9B3C1344
RSP = 000000DD1D2FF788
RBP = 000000DD1D2FF850
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00001344 win32u.dll!NtUserGetMessage+0x14:
                           00007fff`9b3c1324 c3              ret
                           00007fff`9b3c1325 cd2e            int     2Eh
                           00007fff`9b3c1327 c3              ret
                           00007fff`9b3c1328 0f1f840000000000 nop     dword ptr [rax+rax]
win32u!NtUserGetMessage:
                           00007fff`9b3c1330 4c8bd1          mov     r10,rcx
                           00007fff`9b3c1333 b804100000      mov     eax,1004h
                           00007fff`9b3c1338 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9b3c1340 7503            jne     win32u!NtUserGetMessage+0x15 (00007fff`9b3c1345)
                           00007fff`9b3c1342 0f05            syscall
                           00007fff`9b3c1344 c3              ret

+0003B352 USER32.dll!GetMessageW+0x22:
USER32!GetMessageW:
                           00007fff`9c71b330 4053            push    rbx
                           00007fff`9c71b332 4883ec50        sub     rsp,50h
                           00007fff`9c71b336 418bc0          mov     eax,r8d
                           00007fff`9c71b339 488bd9          mov     rbx,rcx
                           00007fff`9c71b33c 410bc1          or      eax,r9d
                           00007fff`9c71b33f a90000feff      test    eax,0FFFE0000h
                           00007fff`9c71b344 753b            jne     USER32!GetMessageW+0x51 (00007fff`9c71b381)
                           00007fff`9c71b346 48897c2460      mov     qword ptr [rsp+60h],rdi
                           00007fff`9c71b34b 48ff15862b0700  call    qword ptr [USER32!gapfnScSendMessage+0x1a98 (00007fff`9c78ded8)]
                           00007fff`9c71b352 0f1f440000      nop     dword ptr [rax+rax]

+001179A4 dbgeng.DLL!<unknown> (get the pdb):
                           00007fff`8750797e 19f6            sbb     esi,esi
                           00007fff`87507980 ff488b          dec     dword ptr [rax-75h]
                           00007fff`87507983 4dd848ff        fmul    dword ptr [r8-1]
                           00007fff`87507987 15a4353c00      adc     eax,3C35A4h
                           00007fff`8750798c 0f1f440000      nop     dword ptr [rax+rax]
                           00007fff`87507991 4533c9          xor     r9d,r9d
                           00007fff`87507994 4533c0          xor     r8d,r8d
                           00007fff`87507997 33d2            xor     edx,edx
                           00007fff`87507999 488d4dc8        lea     rcx,[rbp-38h]
                           00007fff`8750799d 48ff156c765d00  call    qword ptr [dbgeng!Ordinal453+0x3939d0 (00007fff`87adf010)]
                           00007fff`875079a4 0f1f440000      nop     dword ptr [rax+rax]


======================================================================
Thread 34580 / 0x8714
======================================================================
LastError: 0x00000057 - Falscher Parameter.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14
+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE
+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17
+00087C1C ntdll.dll!RtlUserThreadStart+0x2C

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 00000000000001E6
RBX = 0000000000000000
RCX = 00000000000006BC
RDX = 0000026F7D32A940
RSI = 00007FFF9E0CB8E0
RDI = 0000026F7F691300
R8  = 0000000000000010
R9  = 000000DD1D3FF978
R10 = 00000000000006BC
R11 = 00000000000006BC
R12 = 00007FFF9E12EC50
R13 = 0000000000000000
R14 = 000000000000FFFF
R15 = 00007FFF9E0C9650
RIP = 00007FFF9E203D24
RSP = 000000DD1D3FF918
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00163D24 ntdll.dll!ZwWaitForWorkViaWorkerFactory+0x14:
                           00007fff`9e203d04 c3              ret
                           00007fff`9e203d05 cd2e            int     2Eh
                           00007fff`9e203d07 c3              ret
                           00007fff`9e203d08 0f1f840000000000 nop     dword ptr [rax+rax]
ntdll!ZwWaitForWorkViaWorkerFactory:
                           00007fff`9e203d10 4c8bd1          mov     r10,rcx
                           00007fff`9e203d13 b8e6010000      mov     eax,1E6h
                           00007fff`9e203d18 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e203d20 7503            jne     ntdll!ZwWaitForWorkViaWorkerFactory+0x15 (00007fff`9e203d25)
                           00007fff`9e203d22 0f05            syscall
                           00007fff`9e203d24 c3              ret

+0002C97E ntdll.dll!RtlSetThreadSubProcessTag+0x1AEE:
                           00007fff`9e0cc946 488b03          mov     rax,qword ptr [rbx]
                           00007fff`9e0cc949 4889842488000000 mov     qword ptr [rsp+88h],rax
                           00007fff`9e0cc951 44896c2458      mov     dword ptr [rsp+58h],r13d
                           00007fff`9e0cc956 488d842468020000 lea     rax,[rsp+268h]
                           00007fff`9e0cc95e 4889442420      mov     qword ptr [rsp+20h],rax
                           00007fff`9e0cc963 4c8d4c2458      lea     r9,[rsp+58h]
                           00007fff`9e0cc968 448b442454      mov     r8d,dword ptr [rsp+54h]
                           00007fff`9e0cc96d 488b942488000000 mov     rdx,qword ptr [rsp+88h]
                           00007fff`9e0cc975 488b4f38        mov     rcx,qword ptr [rdi+38h]
                           00007fff`9e0cc979 e892731300      call    ntdll!ZwWaitForWorkViaWorkerFactory (00007fff`9e203d10)
                           00007fff`9e0cc97e 8bc8            mov     ecx,eax

+0002E957 KERNEL32.DLL!BaseThreadInitThunk+0x17:
                           00007fff`9c8de93f cc              int     3
KERNEL32!BaseThreadInitThunk:
                           00007fff`9c8de940 4053            push    rbx
                           00007fff`9c8de942 4883ec20        sub     rsp,20h
                           00007fff`9c8de946 33db            xor     ebx,ebx
                           00007fff`9c8de948 85c9            test    ecx,ecx
                           00007fff`9c8de94a 751a            jne     KERNEL32!BaseThreadInitThunk+0x26 (00007fff`9c8de966)
                           00007fff`9c8de94c 498bc8          mov     rcx,r8
                           00007fff`9c8de94f 488bc2          mov     rax,rdx
                           00007fff`9c8de952 e8b9760500      call    KERNEL32!TlsGetValue+0x1b20 (00007fff`9c936010)
                           00007fff`9c8de957 8bc8            mov     ecx,eax

+00087C1C ntdll.dll!RtlUserThreadStart+0x2C:
                           00007fff`9e127bf7 488b05a29b1400  mov     rax,qword ptr [ntdll!RtlpFreezeTimeBias+0x40d0 (00007fff`9e2717a0)]
                           00007fff`9e127bfe 4885c0          test    rax,rax
                           00007fff`9e127c01 7424            je      ntdll!RtlUserThreadStart+0x37 (00007fff`9e127c27)
                           00007fff`9e127c03 488d0d165bf9ff  lea     rcx,[ntdll!RtlLeaveCriticalSection (00007fff`9e0bd720)]
                           00007fff`9e127c0a 4c8bc2          mov     r8,rdx
                           00007fff`9e127c0d 498bd1          mov     rdx,r9
                           00007fff`9e127c10 483bc1          cmp     rax,rcx
                           00007fff`9e127c13 7409            je      ntdll!RtlUserThreadStart+0x2e (00007fff`9e127c1e)
                           00007fff`9e127c15 33c9            xor     ecx,ecx
                           00007fff`9e127c17 e804940e00      call    ntdll!RtlFreeMemoryBlockLookaside+0x1e80 (00007fff`9e211020)
                           00007fff`9e127c1c eb28            jmp     ntdll!RtlUserThreadStart+0x56 (00007fff`9e127c46)


======================================================================
Thread 16524 / 0x408C
======================================================================
LastError: 0x00000057 - Falscher Parameter.
NTSTATUS:  0xC000000D - Einem Dienst oder einer Funktion wurde ein ungültiger Parameter übergeben.

----------------------------------------------------------------------
Stack
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14
+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123
+0009E6D7 CRYPT32.dll!<unknown> (get the pdb)

----------------------------------------------------------------------
Registers
----------------------------------------------------------------------
RAX = 000000000000005B
RBX = 0000000000000001
RCX = 0000000000000001
RDX = 0000026F7E25F4A0
RSI = 000000DD1D4FF750
RDI = 0000000000000001
R8  = 0000000000000001
R9  = 0000000000000000
R10 = 0000000000000001
R11 = 0000000000000001
R12 = 0000026F7E25F4A0
R13 = 000000DD1C562000
R14 = 0000000000000000
R15 = 0000000000000000
RIP = 00007FFF9E200BC4
RSP = 000000DD1D4FF708
RBP = 0000000000000000
EFL = 00000246

----------------------------------------------------------------------
Disassembly
----------------------------------------------------------------------
+00160BC4 ntdll.dll!ZwWaitForMultipleObjects+0x14:
                           00007fff`9e200ba2 94              xchg    eax,esp
                           00007fff`9e200ba3 f8              clc
                           00007fff`9e200ba4 ff6666          jmp     qword ptr [rsi+66h]
                           00007fff`9e200ba7 660f1f840000000000 nop   word ptr [rax+rax]
ntdll!ZwWaitForMultipleObjects:
                           00007fff`9e200bb0 4c8bd1          mov     r10,rcx
                           00007fff`9e200bb3 b85b000000      mov     eax,5Bh
                           00007fff`9e200bb8 f604250803fe7f01 test    byte ptr [SharedUserData+0x308 (00000000`7ffe0308)],1
                           00007fff`9e200bc0 7503            jne     ntdll!ZwWaitForMultipleObjects+0x15 (00007fff`9e200bc5)
                           00007fff`9e200bc2 0f05            syscall
                           00007fff`9e200bc4 c3              ret

+00022BC3 KERNELBASE.dll!WaitForMultipleObjectsEx+0x123:
                           00007fff`9b412b9a 488d742440      lea     rsi,[rsp+40h]
                           00007fff`9b412b9f 448b7c2438      mov     r15d,dword ptr [rsp+38h]
                           00007fff`9b412ba4 4533c0          xor     r8d,r8d
                           00007fff`9b412ba7 4585ff          test    r15d,r15d
                           00007fff`9b412baa 410f94c0        sete    r8b
                           00007fff`9b412bae 4889742420      mov     qword ptr [rsp+20h],rsi
                           00007fff`9b412bb3 450fb6ce        movzx   r9d,r14b
                           00007fff`9b412bb7 498bd4          mov     rdx,r12
                           00007fff`9b412bba 8bcb            mov     ecx,ebx
                           00007fff`9b412bbc 48ff1505532700  call    qword ptr [KERNELBASE!TlsGetValue+0x102288 (00007fff`9b687ec8)]
                           00007fff`9b412bc3 0f1f440000      nop     dword ptr [rax+rax]

+0009E6D7 CRYPT32.dll!<unknown> (get the pdb):
                           00007fff`9b88e6b3 488bd9          mov     rbx,rcx
                           00007fff`9b88e6b6 48f7d8          neg     rax
                           00007fff`9b88e6b9 1bff            sbb     edi,edi
                           00007fff`9b88e6bb f7df            neg     edi
                           00007fff`9b88e6bd 448b4b30        mov     r9d,dword ptr [rbx+30h]
                           00007fff`9b88e6c1 488d5310        lea     rdx,[rbx+10h]
                           00007fff`9b88e6c5 8364242000      and     dword ptr [rsp+20h],0
                           00007fff`9b88e6ca 8d4f01          lea     ecx,[rdi+1]
                           00007fff`9b88e6cd 4533c0          xor     r8d,r8d
                           00007fff`9b88e6d0 48ff15a9740900  call    qword ptr [00007fff`9b925b80]
                           00007fff`9b88e6d7 0f1f440000      nop     dword ptr [rax+rax]


======================================================================
Modules
======================================================================
0x00007FF69F7D0000 - 0x00007FF69FD7F000 | C:\Users\borsu01\AppData\Local\Far Manager x64\Far.exe | File and archive manager | 3.0.6666.0 x64
0x00007FFF9E0A0000 - 0x00007FFF9E306000 | C:\WINDOWS\SYSTEM32\ntdll.dll | DLL für NT-Layer | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9C8B0000 - 0x00007FFF9C979000 | C:\WINDOWS\System32\KERNEL32.DLL | Client-DLL für Windows NT-Basis-API | 10.0.26100.8328 (WinBuild.160101.0800)
0x00007FFF9B3F0000 - 0x00007FFF9B7EA000 | C:\WINDOWS\System32\KERNELBASE.dll | Client-DLL für Windows NT-Basis-API | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF81490000 - 0x00007FFF81530000 | C:\WINDOWS\SYSTEM32\apphelp.dll | Clientbibliothek für Anwendungskompatibilität | 10.0.26100.8457 (WinBuild.160101.0800)
0x00007FFF22B40000 - 0x00007FFF22FE6000 | C:\WINDOWS\SYSTEM32\AcLayers.DLL | Windows Compatibility DLL | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9C620000 - 0x00007FFF9C6C9000 | C:\WINDOWS\System32\msvcrt.dll | Windows NT CRT DLL | 7.0.26100.8246 (WinBuild.160101.0800)
0x00007FFF9C5B0000 - 0x00007FFF9C617000 | C:\WINDOWS\System32\SHLWAPI.dll | Shell Light-weight-Hilfsprogrammbibliothek | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF9BCC0000 - 0x00007FFF9BE0C000 | C:\WINDOWS\System32\ucrtbase.dll | Microsoft® C Runtime Library | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF8C200000 - 0x00007FFF8C213000 | C:\WINDOWS\SYSTEM32\SortWindows61.dll | SortWindows61 Dll | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9BEA0000 - 0x00007FFF9BF56000 | C:\WINDOWS\System32\ADVAPI32.dll | Erweiterte Windows 32 Base-API | 10.0.26100.3624 (WinBuild.160101.0800)
0x00007FFF9CC70000 - 0x00007FFF9CD1A000 | C:\WINDOWS\System32\sechost.dll | Host for SCM/SDDL/LSA Lookup APIs | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9C980000 - 0x00007FFF9CA98000 | C:\WINDOWS\System32\RPCRT4.dll | Remoteprozeduraufruf-Laufzeitumgebung | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9C6E0000 - 0x00007FFF9C8A7000 | C:\WINDOWS\System32\USER32.dll | Client-DLL für Windows USER-API (mehrere Benutzer) | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF9B3C0000 - 0x00007FFF9B3E7000 | C:\WINDOWS\System32\win32u.dll | Win32u | 10.0.26100.8655 (WinBuild.160101.0800)
0x00007FFF9C580000 - 0x00007FFF9C5AB000 | C:\WINDOWS\System32\GDI32.dll | GDI Client DLL | 10.0.26100.8328 (WinBuild.160101.0800)
0x00007FFF9BB90000 - 0x00007FFF9BCBB000 | C:\WINDOWS\System32\gdi32full.dll | GDI Client DLL | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9BAE0000 - 0x00007FFF9BB83000 | C:\WINDOWS\System32\msvcp_win.dll | Microsoft® C Runtime Library | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9CD20000 - 0x00007FFF9D4A4000 | C:\WINDOWS\System32\SHELL32.dll | Allgemeine Windows-Shell-DLL | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9D4B0000 - 0x00007FFF9D648000 | C:\WINDOWS\System32\ole32.dll | Microsoft OLE für Windows | 10.0.26100.6725 (WinBuild.160101.0800)
0x00007FFF9BFB0000 - 0x00007FFF9C333000 | C:\WINDOWS\System32\combase.dll | Microsoft COM für Windows | 10.0.26100.7705 (WinBuild.160101.0800)
0x00007FFF9D6F0000 - 0x00007FFF9D6F8000 | C:\WINDOWS\System32\PSAPI.DLL | Process Status Helper | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9D8F0000 - 0x00007FFF9DD77000 | C:\WINDOWS\System32\SETUPAPI.dll | Windows Setup-API | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF7D9A0000 - 0x00007FFF7DA4F000 | C:\WINDOWS\SYSTEM32\WINSPOOL.DRV | Windows-Spoolertreiber | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9DD80000 - 0x00007FFF9DE72000 | C:\WINDOWS\System32\COMDLG32.dll | DLL für gemeinsame Dialoge | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF82AD0000 - 0x00007FFF82AEA000 | C:\WINDOWS\SYSTEM32\NETAPI32.dll | Net Win32 API DLL | 10.0.26100.7019 (WinBuild.160101.0800)
0x00007FFF9C400000 - 0x00007FFF9C4F6000 | C:\WINDOWS\System32\shcore.dll | SHCORE | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF80A80000 - 0x00007FFF80AA1000 | C:\WINDOWS\SYSTEM32\MPR.dll | Router-DLL für Mehrfachanbieter | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF99630000 - 0x00007FFF9963D000 | C:\WINDOWS\SYSTEM32\Secur32.dll | Security Support Provider Interface | 10.0.26100.7705 (WinBuild.160101.0800)
0x00007FFF9D650000 - 0x00007FFF9D682000 | C:\WINDOWS\System32\IMM32.dll | Multi-User Windows IMM32 API Client DLL | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF982D0000 - 0x00007FFF982DB000 | C:\WINDOWS\SYSTEM32\VERSION.dll | Version Checking and File Installation Libraries | 10.0.26100.1150 (WinBuild.160101.0800)
0x00007FFF9A570000 - 0x00007FFF9A5A3000 | C:\WINDOWS\SYSTEM32\USERENV.dll | Userenv | 10.0.26100.7920 (WinBuild.160101.0800)
0x00007FFF9AE00000 - 0x00007FFF9AE51000 | C:\WINDOWS\SYSTEM32\cfgmgr32.dll | Configuration Manager DLL | 10.0.26100.8115 (WinBuild.160101.0800)
0x00007FFF99390000 - 0x00007FFF99622000 | C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.8521_none_3e08b75ce33403b3\COMCTL32.dll | Bibliothek für Steuerelemente | 6.10 (WinBuild.160101.0800)
0x00007FFF56200000 - 0x00007FFF56329000 | C:\Users\borsu01\AppData\Local\Far Manager x64\sqlite3.dll | SQLite is a software library that implements a self-contained, serverless, zero-configuration, transactional SQL database engine. | 3.52.0
0x00007FFF99380000 - 0x00007FFF9938D000 | C:\WINDOWS\SYSTEM32\NETUTILS.DLL | Net Win32 API Helpers DLL | 10.0.26100.1882 (WinBuild.160101.0800)
0x00007FFF990C0000 - 0x00007FFF990DB000 | C:\WINDOWS\SYSTEM32\SAMCLI.DLL | Security Accounts Manager Client DLL | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF8A0D0000 - 0x00007FFF8A0F9000 | C:\WINDOWS\SYSTEM32\SRVCLI.DLL | Server Service Client DLL | 10.0.26100.1150 (WinBuild.160101.0800)
0x00007FFF9A210000 - 0x00007FFF9A259000 | C:\WINDOWS\SYSTEM32\SSPICLI.DLL | Security Support Provider Interface | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF8D1D0000 - 0x00007FFF8D32E000 | C:\WINDOWS\system32\tmumh\20019\AddOn\8.55.0.1409\TmUmEvt64.dll | Trend Micro User-Mode Hook Event Module | 8.55.0.1409
0x00000000667B0000 - 0x00000000668D7000 | C:\WINDOWS\system32\tmumh\20019\TmMon\2.9.0.1243\tmmon64.dll | Trend Micro UMH Monitor Engine | 2.9.0.1243
0x00007FFF9B060000 - 0x00007FFF9B163000 | C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll | BeyondTrust Privilege Management Hook | 21.5.106.0
0x00007FFF99F70000 - 0x00007FFF99F8B000 | C:\WINDOWS\SYSTEM32\kernel.appcore.dll | AppModel API Host | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF97520000 - 0x00007FFF975CA000 | C:\WINDOWS\system32\uxtheme.dll | Microsoft UxTheme-Bibliothek | 10.0.26100.7019 (WinBuild.160101.0800)
0x00007FFF9DF00000 - 0x00007FFF9E05D000 | C:\WINDOWS\System32\MSCTF.dll | MSCTF-Server-DLL | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF983E0000 - 0x00007FFF98C60000 | C:\WINDOWS\SYSTEM32\windows.storage.dll | Microsoft WinRT Storage-API | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF9B250000 - 0x00007FFF9B279000 | C:\WINDOWS\SYSTEM32\profapi.dll | User Profile Basic API | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9BA30000 - 0x00007FFF9BAD8000 | C:\WINDOWS\System32\bcryptPrimitives.dll | Windows Cryptographic Primitives Library | 10.0.26100.8328 (WinBuild.160101.0800)
0x00007FFF9C340000 - 0x00007FFF9C3EE000 | C:\WINDOWS\System32\clbcatq.dll | COM+ Configuration Catalog | 2001.12.10941.16384 (WinBuild.160101.0800)
0x00007FFF4AA70000 - 0x00007FFF4AD63000 | C:\WINDOWS\system32\explorerframe.dll | ExplorerFrame | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF9B190000 - 0x00007FFF9B1EE000 | C:\WINDOWS\SYSTEM32\powrprof.dll | Power Profile Helper DLL | 10.0.26100.8117 (WinBuild.160101.0800)
0x00007FFF9B170000 - 0x00007FFF9B184000 | C:\WINDOWS\SYSTEM32\UMPDC.dll | User Mode Power Dependency Coordinator | 10.0.26100.8115 (WinBuild.160101.0800)
0x00007FFF83830000 - 0x00007FFF83E87000 | C:\Windows\System32\OneCoreUAPCommonProxyStub.dll | OneCoreUAP Common Proxy Stub | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF8B200000 - 0x00007FFF8B223000 | C:\Users\borsu01\AppData\Local\Far Manager x64\Plugins\LuaMacro\LuaMacro.dll | Lua Macros for Far Manager | 3.0.917.0
0x0000000066D80000 - 0x0000000066E00000 | C:\Users\borsu01\AppData\Local\Far Manager x64\lua51.dll | 0x00000715 - Der angegebene Ressourcentyp wurde nicht in der Image-Datei gefunden.
0x00007FFF59AA0000 - 0x00007FFF59B4F000 | C:\Users\borsu01\AppData\Local\Far Manager x64\luafar3.dll | LuaFar library | 3.0.917.0
0x00007FFF9A8A0000 - 0x00007FFF9A8AC000 | C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL | Base cryptographic API DLL | 10.0.26100.8246 (WinBuild.160101.0800)
0x00007FFF8AA30000 - 0x00007FFF8AA69000 | C:\Users\borsu01\AppData\Local\Far Manager x64\Plugins\TmpPanel\TmpPanel.dll | Temporary Panel for Far Manager | 3.0.122.0
0x00007FFF4E580000 - 0x00007FFF4E5A2000 | C:\WINDOWS\System32\p9np.dll | Plan 9 Network Provider | 10.0.26100.8115 (WinBuild.160101.0800)
0x00007FFF9CB90000 - 0x00007FFF9CC69000 | C:\WINDOWS\System32\OLEAUT32.dll | OLEAUT32.DLL | 10.0.26100.8655 (WinBuild.160101.0800)
0x00007FFF79E30000 - 0x00007FFF79E3D000 | C:\WINDOWS\System32\drprov.dll | Microsoft Remotedesktop-Hostserver-Netzwerkanbieter | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF4D0B0000 - 0x00007FFF4D0D4000 | C:\WINDOWS\System32\ntlanman.dll | Microsoft(R) LAN-Manager | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF4CF60000 - 0x00007FFF4CF81000 | C:\WINDOWS\System32\davclnt.dll | Web DAV Client DLL | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF8E970000 - 0x00007FFF8E98B000 | C:\WINDOWS\System32\wkscli.dll | Workstation Service Client DLL | 10.0.26100.7019 (WinBuild.160101.0800)
0x00007FFF82AB0000 - 0x00007FFF82AC3000 | C:\WINDOWS\SYSTEM32\cscapi.dll | Offline Files Win32 API | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF97FF0000 - 0x00007FFF98232000 | C:\WINDOWS\SYSTEM32\dbghelp.DLL | Windows Image Helper | 10.0.26100.8328 (WinBuild.160101.0800)
0x00007FFF84C00000 - 0x00007FFF84C3B000 | C:\WINDOWS\SYSTEM32\dbgcore.DLL | Windows Core Debugging Helpers | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF873F0000 - 0x00007FFF87B0C000 | C:\WINDOWS\SYSTEM32\dbgeng.DLL | Windows Symbolic Debugger Engine | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF872D0000 - 0x00007FFF873E9000 | C:\WINDOWS\SYSTEM32\dbgmodel.dll | Windows Debugger Data Model | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9B220000 - 0x00007FFF9B24A000 | C:\WINDOWS\SYSTEM32\bcrypt.dll | Bibliothek mit kryptografischen Primitiven von Windows | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF98260000 - 0x00007FFF982A3000 | C:\WINDOWS\SYSTEM32\XmlLite.dll | Microsoft XmlLite Library | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9B330000 - 0x00007FFF9B3B3000 | C:\WINDOWS\System32\wintrust.dll | Microsoft Trust Verification APIs | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF9B7F0000 - 0x00007FFF9B968000 | C:\WINDOWS\System32\CRYPT32.dll | Krypto-API32 | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9A920000 - 0x00007FFF9A933000 | C:\WINDOWS\SYSTEM32\MSASN1.dll | ASN.1 Runtime APIs | 10.0.26100.8246 (WinBuild.160101.0800)
0x00007FFF9A8C0000 - 0x00007FFF9A8DB000 | C:\WINDOWS\SYSTEM32\CRYPTSP.dll | Cryptographic Service Provider API | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF99ED0000 - 0x00007FFF99F09000 | C:\WINDOWS\system32\rsaenh.dll | Microsoft Enhanced Cryptographic Provider | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF9CAB0000 - 0x00007FFF9CAD0000 | C:\WINDOWS\System32\imagehlp.dll | Windows NT Image Helper | 10.0.26100.4202 (WinBuild.160101.0800)
0x00007FFF9A530000 - 0x00007FFF9A55F000 | C:\WINDOWS\SYSTEM32\gpapi.dll | Gruppenrichtlinienclient-API | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF8E510000 - 0x00007FFF8E54B000 | C:\WINDOWS\SYSTEM32\cryptnet.dll | Crypto Network Related API | 10.0.26100.8521 (WinBuild.160101.0800)
0x00007FFF98F30000 - 0x00007FFF98F63000 | C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL | IP-Hilfs-API | 10.0.26100.1 (WinBuild.160101.0800)
0x00007FFF97790000 - 0x00007FFF9779E000 | C:\WINDOWS\SYSTEM32\WINNSI.DLL | Network Store Information RPC interface | 10.0.26100.8246 (WinBuild.160101.0800)
0x00007FFF9D8E0000 - 0x00007FFF9D8EA000 | C:\WINDOWS\System32\NSI.dll | NSI User-mode interface DLL | 10.0.26100.8246 (WinBuild.160101.0800)

======================================================================
Environment
======================================================================
FARHOME=C:\Users\borsu01\AppData\Local\Far Manager x64
FARLANG=English
FARLOCALPROFILE=C:\Users\borsu01\AppData\Local\Far Manager\Profile
FARPROFILE=C:\Users\borsu01\AppData\Roaming\Far Manager\Profile

[alabuzhev]

According to your stack trace:

• the process was successfully created
• we started waiting for its finish (after_process_creation, wait_for_process, single_wait)
• the handle, returned by the system, was invalid, so single_wait failed.

This is already abnormal - the handle must be vaild on success.
This also contradicts with your description, since you rejected "run it as admin".
On top of that, I cannot reproduce it: if a folder does not have "Traverse folder / execute file" NTFS permission, the execution fails, does not show any "run it as admin" dialogs, and, obviously, does not crash.

But I see something interesting in your module list:

0x00007FFF9B060000 - 0x00007FFF9B163000 | C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll | BeyondTrust Privilege Management Hook | 21.5.106.0

If I remember correctly, this is some corporate spyware that replaces standard Windows elevation dialogs with theirs, for audit / monitoring / whatever.
It's not the first time we see issues with this piece of... software (see #701) 🤦

Anyway, I added an experimental workaround (6a5d419) to 6709. It might help if that "invalid handle" is null. It won't help if it's some random rubbish. Pls give it a go and let us know.

[alabuzhev]

Also:

OS:        Windows NT Workstation 6.1.7600, 0x100/0x30 (Windows 7 Ultimate, version 25H2, OS build 7600.8655)

Why are you running in Windows 7 compatibility mode? What doesn't work without it?