Closed Bug 1483752 Opened 6 years ago Closed 5 years ago

Firefox Nightly crash at start

Categories

(External Software Affecting Firefox :: Other, defect, P3)

x86_64
Windows 10
defect

Tracking

(firefox-esr60 wontfix, firefox63 wontfix)

RESOLVED WORKSFORME
Tracking Status
firefox-esr60 --- wontfix
firefox63 --- wontfix

People

(Reporter: zhujiabeizjb, Unassigned)

References

(Depends on 1 open bug)

Details

(Keywords: crash, regression, regressionwindow-wanted, Whiteboard: sb+)

Crash Data

Attachments

(1 file)

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0 Build ID: 20180813190114 Steps to reproduce: I use firefox in the latest Windows 10 Enterprise insider preview(Build 17735). Actual results: Several days ago I suddenly find firefox nightly can't start at all. Sometimes I can see a white window for 1 second. What is strange is that I cannot even start the profile manager, or start in safe mode (it pop up a small "safe mode" window asking me to "start in safe mode" or "renew firefox", but no response, and disappear itself after 3 seconds), or even the bug report also cannot start at all. And there is no crash history on my computer. I reinstall firefox and restart computer and even remove all the folders named "Mozilla" on my computer. These actions are all useless. But I install other versions of firefox like Firefox Developer Edition, it works fine. I also try to install an older version of nightly(I randomly choose March 03, 2018 nightly version 60.0a1). It really start up successfully, but it update itself to the latest soon and after a restart I never see firefox nightly window again. Expected results: Start up normally
OS: Unspecified → Windows 10
Hardware: Unspecified → x86_64
Version: 62 Branch → 63 Branch
Severity: normal → critical
(In reply to zhujiabeizjb from comment #0) > I also try to install an older version of nightly(I randomly > choose March 03, 2018 nightly version 60.0a1). It really start up > successfully Please try to find the exact regression range. https://mozilla.github.io/mozregression/quickstart.html
Has Regression Range: --- → no
Flags: needinfo?(zhujiabeizjb)
(In reply to Gingerbread Man from comment #1) > (In reply to zhujiabeizjb from comment #0) > > I also try to install an older version of nightly(I randomly > > choose March 03, 2018 nightly version 60.0a1). It really start up > > successfully > > Please try to find the exact regression range. > https://mozilla.github.io/mozregression/quickstart.html Thanks for your advise. I find this: apavel@mozilla.com Tue Jul 10 16:35:10 2018 +0000 9302fd8c95c0 <- before this and this is good csabou@mozilla.com Tue Jul 10 21:51:50 2018 +0000 70f901964f97 <- after this and this is bad When firefox crash, the mozregression says "WARNING : Process exited with code 3221226505" (However, I can't find a specific commit because they merged the code from branch autoland to branch mozilla-central, and then from branch mozilla-central to branch autoland, so the mozregression loop infinitely.)
Flags: needinfo?(zhujiabeizjb)
Another important thing is I use the latest Firefox Nightly everyday after July 10, and it started to crash this week. I think it may due to Windows Defender settings or something related to that because I just switch my OS from Win10 Pro to Win10 Enterprise.
Thanks for providing regression range! I couldn't test this as I don't have win 10 Enterprise and it's not reproducible on Nightly July 10 win 10 pro. Check about:crashes if you have any crash and please link the crash id to this bug. I am placing this under Firefox:Shell Integrations. Please feel free to change it to more appropriate component.
Component: Untriaged → Shell Integration
(In reply to Kanchan Kumari QA from comment #4) > Check about:crashes if you have any crash and please link the crash id to > this bug. Reporter has already explained there are no crash reports, as not even the crash reporter launches. > I am placing this under Firefox:Shell Integrations. Shell Integration handles setting the default browser and the desktop background. It has nothing to do with this. We can try External Software Affecting Firefox :: Other which seems to have been your intention, though we really have no clue what the problem is here. (In reply to zhujiabeizjb from comment #2) > Tue Jul 10 16:35:10 2018 +0000 9302fd8c95c0 <- before this > and this is good > Tue Jul 10 21:51:50 2018 +0000 70f901964f97 <- after this and > this is bad It's unfortunate the range can't be narrowed further. Without a hint as to what's causing the crash, it's not likely that such a wide range will yield an obvious culprit. https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=9302fd8c95c0&tochange=70f901964f97
Component: Shell Integration → Other
Product: Firefox → External Software Affecting Firefox
Version: 63 Branch → unspecified
(In reply to zhujiabeizjb from comment #2) > (However, I can't find a specific commit because they merged the code from > branch autoland to branch mozilla-central, and then from branch > mozilla-central to branch autoland, so the mozregression loop infinitely.) :wlach, is there a way to get out of this situation? I see we switched to Clang for Windows builds in that range.
Flags: needinfo?(wlachance)
> When firefox crash, the mozregression says "WARNING : Process exited with code 3221226505" That's the status code for a stack overflow. A stack trace or minidump would be very helpful to investigate this. zhujiabeizjb, do you mind going through these steps to collect that information? https://developer.mozilla.org/en-US/docs/Mozilla/How_to_get_a_stacktrace_with_WinDbg https://developer.mozilla.org/en-US/docs/Mozilla/Debugging/Capturing_a_minidump
(In reply to Marco Castelluccio [:marco] (PTO until August 24) from comment #6) > (In reply to zhujiabeizjb from comment #2) > > (However, I can't find a specific commit because they merged the code from > > branch autoland to branch mozilla-central, and then from branch > > mozilla-central to branch autoland, so the mozregression loop infinitely.) > > :wlach, is there a way to get out of this situation? > > I see we switched to Clang for Windows builds in that range. This sounds like bug 1478217, unfortunately I don't think there is any way currently to work around this situation. :( Sorry.
Flags: needinfo?(wlachance)
(In reply to Masatoshi Kimura [:emk] from comment #9) > Is an MSVC build working for you? > https://queue.taskcluster.net/v1/task/YTgc-jf1RgyBjCc0i5mgRA/runs/0/ > artifacts/public/build/target.zip Oh yes! I can start this without any problem. So the crash may be related to the compiler?
Flags: needinfo?(zhujiabeizjb)
Thanks for the confirmation. Yes, it is very likely that the AV software (Windows Defender) is interfering with the new compiler. @dmajor: would this be a release blocker of clang-cl builds? Note that this is a startup crash that does not even generate a crash report, so we can't tell how widespread is the issue from statistics.
Blocks: 1443590
Flags: needinfo?(dmajor)
So far in this bug, I don't see any evidence that this is tied to Defender, only speculation. So how about testing it: does the crash still happen with Defender disabled? And even if we find a connection, it's not going to be a general problem with Defender, or else we would have noticed this on many more machines, including my own. There are very likely some additional circumstances happening on this reporter's machine, and we need to understand them in order to properly assess this bug. My request from comment 7 still stands: a stack trace and/or minidump would be most helpful in understanding this issue.
Flags: needinfo?(dmajor)
We need to figure this issue out one way or another before we can ship 63.
(In reply to David Major [:dmajor] from comment #12) > So far in this bug, I don't see any evidence that this is tied to Defender, > only speculation. > > So how about testing it: does the crash still happen with Defender disabled? > > And even if we find a connection, it's not going to be a general problem > with Defender, or else we would have noticed this on many more machines, > including my own. There are very likely some additional circumstances > happening on this reporter's machine, and we need to understand them in > order to properly assess this bug. My request from comment 7 still stands: a > stack trace and/or minidump would be most helpful in understanding this > issue. I'm sorry that I'm not familiar with windbg, but I still act as the tutorial. The 32-bit windbg cannot open Firefox, so I change to 64-bit version. During the debugging process, I have to press "F5"(Run) several times to start firefox. I really see a firefox window with the default theme (flowers or something like that in the title bar, and the main content field is white. Also,I've removed all my profiles), and then it seems that windbg stuck into a infinite loop. In a word, the "welcome page" is not loaded, and it also does not crash. (I tryed the same steps on my Developer Edition. It start up normally and load a website after my dozens of "F5") The content is very long. I don't know how to upload a file. I just paste it here. By the way, I'm only a student and is busy preparing for my new semester these days, so I don't have so much time. I'm sorry for this. ===========================log begin here================================= Opened log file 'd:\firefox-debug_bc98_2018-08-25_19-56-27-329.log' 0:000> .childdbg 1 Processes created by the current process will be debugged 0:000> .tlist 0n0 System Process 0n4 System 0n56 Secure System 0n104 Registry 0n436 smss.exe 0n628 csrss.exe 0n740 wininit.exe 0n748 csrss.exe 0n812 services.exe 0n852 LsaIso.exe 0n864 lsass.exe 0n932 winlogon.exe 0n492 svchost.exe 0n508 svchost.exe 0n652 fontdrvhost.exe 0n572 fontdrvhost.exe 0n1040 WUDFHost.exe 0n1136 svchost.exe 0n1180 svchost.exe 0n1264 dwm.exe 0n1388 svchost.exe 0n1408 svchost.exe 0n1444 svchost.exe 0n1492 svchost.exe 0n1560 svchost.exe 0n1592 svchost.exe 0n1600 svchost.exe 0n1608 svchost.exe 0n1776 svchost.exe 0n1880 svchost.exe 0n1936 svchost.exe 0n2012 svchost.exe 0n2032 svchost.exe 0n1640 svchost.exe 0n2092 svchost.exe 0n2140 svchost.exe 0n2184 svchost.exe 0n2228 svchost.exe 0n2268 svchost.exe 0n2280 svchost.exe 0n2352 svchost.exe 0n2396 svchost.exe 0n2544 svchost.exe 0n2660 dasHost.exe 0n2732 svchost.exe 0n2752 WUDFHost.exe 0n2776 svchost.exe 0n2800 svchost.exe 0n2832 LPlatSvc.exe 0n2840 ibmpmsvc.exe 0n2900 svchost.exe 0n2976 atiesrxx.exe 0n2984 svchost.exe 0n3064 svchost.exe 0n3088 svchost.exe 0n3148 svchost.exe 0n3176 svchost.exe 0n3404 svchost.exe 0n3428 svchost.exe 0n3444 atieclxx.exe 0n3472 svchost.exe 0n3492 svchost.exe 0n3516 svchost.exe 0n3576 Memory Compression 0n3640 svchost.exe 0n3660 igfxCUIService.exe 0n3724 svchost.exe 0n3872 svchost.exe 0n3964 svchost.exe 0n3972 svchost.exe 0n3984 svchost.exe 0n4084 svchost.exe 0n4092 svchost.exe 0n2632 svchost.exe 0n4204 svchost.exe 0n4280 svchost.exe 0n4404 svchost.exe 0n4484 svchost.exe 0n4496 audiodg.exe 0n4764 svchost.exe 0n4780 wlanext.exe 0n4812 conhost.exe 0n4848 svchost.exe 0n4880 spoolsv.exe 0n4928 svchost.exe 0n4972 armsvc.exe 0n4992 AGSService.exe 0n5000 AGMService.exe 0n5012 AlibabaProtect.exe 0n5024 HidMonitorSvc.exe 0n5044 Connect2+.Service.exe 0n5084 OfficeClickToRun.exe 0n5104 CxAudMsg64.exe 0n5112 IntelCpHDCPSvc.exe 0n4836 CxUtilSvc.exe 0n4828 svchost.exe 0n4912 svchost.exe 0n4864 vmcompute.exe 0n4840 Everything.exe 0n5144 FileZilla Server.exe 0n5196 CCB_HDZB_2G_DeviceService.exe 0n5220 HskDDNS.exe 0n5236 HZ_CommSrv.exe 0n5268 ibtsiva.exe 0n5320 iCltPrintHost.exe 0n5364 Lenovo.Modern.ImController.exe 0n5436 svchost.exe 0n5456 IpOverUsbSvc.exe 0n5496 lvvsst.exe 0n5508 InstantOnSrv.exe 0n5528 D4Ser_CCB.exe 0n5600 svchost.exe 0n5624 QQProtect.exe 0n5652 MsSense.exe 0n5668 svchost.exe 0n5680 Service_KMS.exe 0n5688 SSUService.exe 0n5704 SRService.exe 0n5712 IntelCpHeciSvc.exe 0n5720 SASrv.exe 0n5736 svchost.exe 0n5808 svchost.exe 0n5832 svchost.exe 0n5860 vmms.exe 0n5872 D4Mon_CCB.exe 0n5944 WDKeyMonitorCCB.exe 0n5976 svchost.exe 0n5992 MsMpEng.exe 0n6112 svchost.exe 0n6304 HskDDNSMaint.exe 0n7220 conhost.exe 0n5164 SRManager.exe 0n7780 svchost.exe 0n6408 WmiPrvSE.exe 0n7796 svchost.exe 0n7992 svchost.exe 0n6148 svchost.exe 0n8176 svchost.exe 0n8268 SRAgent.exe 0n8436 svchost.exe 0n8576 NisSrv.exe 0n8928 vmmem 0n8948 Apoint.exe 0n1568 WmiPrvSE.exe 0n6480 SearchIndexer.exe 0n9388 sihost.exe 0n9424 svchost.exe 0n9432 svchost.exe 0n9504 svchost.exe 0n9512 PresentationFontCache.exe 0n9632 taskhostw.exe 0n9760 svchost.exe 0n10072 igfxEM.exe 0n10084 svchost.exe 0n7308 virtscrl.exe 0n9944 svchost.exe 0n6468 svchost.exe 0n10268 svchost.exe 0n10580 ApMsgFwd.exe 0n10632 svchost.exe 0n10852 ApntEx.exe 0n10928 conhost.exe 0n10456 svchost.exe 0n10832 svchost.exe 0n11280 jusched.exe 0n11512 SRFeature.exe 0n11660 SRServer.exe 0n11708 SecurityHealthService.exe 0n11988 iSafeClient.exe 0n12612 RadeonSettings.exe 0n12804 dllhost.exe 0n13300 RuntimeBroker.exe 0n12548 RuntimeBroker.exe 0n6192 ctfmon.exe 0n8868 TabTip.exe 0n11692 ChsIME.exe 0n12736 SettingSyncHost.exe 0n12876 RemindersServer.exe 0n1828 svchost.exe 0n5060 Skype4Life.exe 0n8688 SkypeHelper.exe 0n13540 RuntimeBroker.exe 0n13768 smartscreen.exe 0n13808 CastSrv.exe 0n13432 RuntimeBroker.exe 0n13788 Video.UI.exe 0n4904 OneDrive.exe 0n6764 SyncTrayzor.exe 0n4296 OneDrive.exe 0n6644 OneDrive.exe 0n9344 OneDrive.exe 0n12088 yundetectservice.exe 0n14576 HskDDNS.exe 0n14620 syncthing.exe 0n14648 conhost.exe 0n14792 jetbrains-toolbox.exe 0n14888 Slack.exe 0n6512 CCBCertificate.exe 0n1544 USBKeyTools.exe 0n15588 Slack.exe 0n15604 SmartAudio.exe 0n15616 CAudioFilterAgent64.exe 0n10896 DolbyDAX2API.exe 0n10724 Slack.exe 0n5616 jetbrains-toolbox-cef.exe 0n15744 Slack.exe 0n15232 Slack.exe 0n8968 jetbrains-toolbox-cef-helper.exe 0n1820 jetbrains-toolbox-cef-helper.exe 0n2868 foobar2000.exe 0n11888 PHDDnsOraysl.exe 0n16008 conhost.exe 0n16576 AUEPLauncher.exe 0n17136 AUEPMaster.exe 0n17232 SgrmBroker.exe 0n1836 svchost.exe 0n11396 WmiPrvSE.exe 0n16588 AUEPUF.exe 0n16792 AUEPUC.exe 0n16812 AUEPDU.exe 0n6744 conhost.exe 0n16440 RuntimeBroker.exe 0n1652 svchost.exe 0n6344 GoldenDict.exe 0n10408 SogouCloud.exe 0n940 Microsoft.Photos.exe 0n18348 svchost.exe 0n13852 RuntimeBroker.exe 0n7372 SogouImeBroker.exe 0n8772 dllhost.exe 0n8824 svchost.exe 0n7484 acrotray.exe 0n2316 Everything.exe 0n6396 ChsIME.exe 0n11080 notepad++.exe 0n18172 YourPhone.exe 0n984 LockApp.exe 0n8988 RuntimeBroker.exe 0n19628 RuntimeBroker.exe 0n12816 svchost.exe 0n37580 Lenovo.Modern.ImController.PluginHost.SettingsApp.exe 0n13844 Lenovo.Modern.ImController.PluginHost.SettingsApp.exe 0n37984 Lenovo.Modern.ImController.PluginHost.SettingsApp.exe 0n35976 filezilla.exe 0n40868 fzsftp.exe 0n40876 conhost.exe 0n39668 wpscloudsvr.exe 0n19548 wpscenter.exe 0n8600 svchost.exe 0n45816 wpscenter.exe 0n44552 svchost.exe 0n44804 LPlatSvc.exe 0n46376 svchost.exe 0n48204 Taskmgr.exe 0n6184 explorer.exe 0n47456 ApplicationFrameHost.exe 0n44836 ShellExperienceHost.exe 0n48648 SearchUI.exe 0n48300 WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe 0n2908 MicrosoftEdge.exe 0n18944 browser_broker.exe 0n44912 RuntimeBroker.exe 0n38924 MicrosoftEdgeCP.exe 0n14456 MicrosoftEdgeCP.exe 0n9960 MicrosoftEdgeSH.exe 0n48604 MicrosoftEdgeCP.exe 0n10776 MicrosoftEdgeCP.exe 0n29136 MicrosoftEdgeCP.exe 0n48568 MicrosoftEdgeCP.exe 0n30696 SearchProtocolHost.exe 0n3348 SearchFilterHost.exe 0n48280 windbg.exe 0n47620 firefox.exe 0n49016 svchost.exe 0n45952 svchost.exe 0:000> sxn gp 0:000> lm start end module name 00007ff6`8f200000 00007ff6`8f286000 firefox (private pdb symbols) c:\symbols\firefox.pdb\E77393EAB78E9A46ABCD7D560CC5465B1\firefox.pdb 00007ffa`cadc0000 00007ffa`cae67000 MSVCP140 (private pdb symbols) c:\symbols\msvcp140.amd64.pdb\297B9AB89CBB477087A7B97D609489B81\msvcp140.amd64.pdb 00007ffa`d6210000 00007ffa`d6304000 PayloadRestrictions (pdb symbols) c:\symbols\PayloadRestrictions.pdb\D72FE7294B6E176173F95F81D4775D741\PayloadRestrictions.pdb 00007ffa`d95b0000 00007ffa`d9621000 verifier (pdb symbols) c:\symbols\verifier.pdb\290524A64102A588BDAFAF998A1397D51\verifier.pdb 00007ffa`e9950000 00007ffa`e998c000 mozglue (private pdb symbols) c:\symbols\mozglue.pdb\8D41DFDB7CCBCE64FBCB10DB067313941\mozglue.pdb 00007ffa`ed7f0000 00007ffa`ed7fa000 VERSION (pdb symbols) c:\symbols\version.pdb\7623DBA348C799A2838323C2D5D227EC1\version.pdb 00007ffa`ef530000 00007ffa`ef546000 VCRUNTIME140 (private pdb symbols) c:\symbols\vcruntime140.amd64.pdb\E0AF49B371FD45C2801AFE6F5B029BF31\vcruntime140.amd64.pdb 00007ffa`fc310000 00007ffa`fc31c000 CRYPTBASE (pdb symbols) c:\symbols\cryptbase.pdb\E9998E598056E0AEAE5EA6DDC91A20EF1\cryptbase.pdb 00007ffa`fc860000 00007ffa`fca4e000 dbghelp (pdb symbols) c:\symbols\dbghelp.pdb\244CD9701F8BA8A8C0A66F6FAA7D5B311\dbghelp.pdb 00007ffa`fcde0000 00007ffa`fce5e000 bcryptPrimitives (pdb symbols) c:\symbols\bcryptprimitives.pdb\BCFFA7196E2717A5E84FDBCB52C3DAA81\bcryptprimitives.pdb 00007ffa`fd000000 00007ffa`fd292000 kernelbase (pdb symbols) c:\symbols\kernelbase.pdb\8C97B21CF311C850FC9A1F469A20B4431\kernelbase.pdb 00007ffa`fdd90000 00007ffa`fde8a000 ucrtbase (pdb symbols) c:\symbols\ucrtbase.pdb\78046BEA012486C2776F08A8CFFBB5EC1\ucrtbase.pdb 00007ffa`ff570000 00007ffa`ff60e000 msvcrt (pdb symbols) c:\symbols\msvcrt.pdb\97E165A3E28A5645BB9A295D9DBFBE901\msvcrt.pdb 00007ffa`ff780000 00007ffa`ff833000 kernel32 (pdb symbols) c:\symbols\kernel32.pdb\B2AC5BEB02CCE51D7EDE30D53AD6BDF91\kernel32.pdb 00007ffa`ff840000 00007ffa`ff8e5000 ADVAPI32 (pdb symbols) c:\symbols\advapi32.pdb\83017C7534674F81587A97FB82BC03751\advapi32.pdb 00007ffb`00290000 00007ffb`0032e000 sechost (pdb symbols) c:\symbols\sechost.pdb\D0CD588B7922E35ADF687393F0EF9D031\sechost.pdb 00007ffb`00330000 00007ffb`00452000 RPCRT4 (pdb symbols) c:\symbols\rpcrt4.pdb\E562AB47592820407435B8534C97B7FE1\rpcrt4.pdb 00007ffb`00d10000 00007ffb`00efb000 ntdll (pdb symbols) c:\symbols\ntdll.pdb\E2C40048225E6EE94C0AB223908A00C41\ntdll.pdb 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 000001d9`1adb0000 000001d9`1adb4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 000001d9`1adc0000 000001d9`1adc4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll ModLoad: 000001d9`1add0000 000001d9`1add3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 000001d9`1ade0000 000001d9`1ade4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 000001d9`1ae00000 000001d9`1ae04000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 000001d9`1ae10000 000001d9`1ae13000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 000001d9`1ae20000 000001d9`1ae25000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 000001d9`1ae30000 000001d9`1ae35000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 000001d9`1ae40000 000001d9`1ae43000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 000001d9`1ae60000 000001d9`1ae63000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 000001d9`1ae70000 000001d9`1ae73000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll ModLoad: 000001d9`1ae80000 000001d9`1ae83000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`f8850000 00007ffa`f8859000 C:\WINDOWS\SYSTEM32\KBDUS.DLL (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g ModLoad: 00007ffa`ebae0000 00007ffa`ebde0000 C:\WINDOWS\SYSTEM32\dwrite.dll (ba04.aa30): Guard page violation - code 80000001 (first chance) (ba04.aa30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:003> g (ba04.aa30): Guard page violation - code 80000001 (first chance) (ba04.aa30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:003> g ModLoad: 00007ffa`fc780000 00007ffa`fc7aa000 C:\WINDOWS\SYSTEM32\dbgcore.DLL (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpHandleProtectedDelayload+0x2b5: 00007ffb`00d50bb5 4903fe add rdi,r14 0:000> g ModLoad: 00007ffa`ff610000 00007ffa`ff77a000 C:\WINDOWS\System32\MSCTF.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g ModLoad: 00007ffa`db240000 00007ffa`db256000 C:\WINDOWS\system32\napinsp.dll (ba04.aae0): Guard page violation - code 80000001 (first chance) (ba04.aae0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:007> g ModLoad: 00007ffa`db220000 00007ffa`db23a000 C:\WINDOWS\system32\pnrpnsp.dll ModLoad: 00007ffa`fc190000 00007ffa`fc1f7000 C:\WINDOWS\System32\mswsock.dll ModLoad: 00007ffa`fbf40000 00007ffa`fc007000 C:\WINDOWS\SYSTEM32\DNSAPI.dll ModLoad: 00007ffa`dc080000 00007ffa`dc08e000 C:\WINDOWS\System32\winrnr.dll ModLoad: 00007ffa`f8a30000 00007ffa`f8a4b000 C:\WINDOWS\system32\NLAapi.dll ModLoad: 00007ffa`f1330000 00007ffa`f1345000 C:\WINDOWS\system32\wshbth.dll ModLoad: 00007ffb`00080000 00007ffb`00122000 C:\WINDOWS\System32\clbcatq.dll (ba04.bc7c): Guard page violation - code 80000001 (first chance) (ba04.bc7c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:019> g ModLoad: 00007ffa`e87e0000 00007ffa`e87f1000 C:\WINDOWS\system32\wbem\wbemprox.dll ModLoad: 00007ffa`e93b0000 00007ffa`e9435000 C:\WINDOWS\SYSTEM32\wbemcomn.dll (ba04.bc7c): Guard page violation - code 80000001 (first chance) (ba04.bc7c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:019> g ModLoad: 00007ffa`e7cd0000 00007ffa`e7ce4000 C:\WINDOWS\system32\wbem\wbemsvc.dll ModLoad: 00007ffa`e8210000 00007ffa`e8303000 C:\WINDOWS\system32\wbem\fastprox.dll (ba04.bc7c): Guard page violation - code 80000001 (first chance) (ba04.bc7c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 0:019> g ModLoad: 00007ffa`fb8d0000 00007ffa`fb928000 C:\WINDOWS\SYSTEM32\WINSTA.dll ModLoad: 00007ffa`d6900000 00007ffa`d6ae4000 C:\WINDOWS\system32\sogoutsf.ime ModLoad: 00007ffa`e7190000 00007ffa`e7197000 C:\WINDOWS\system32\MSIMG32.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g ModLoad: 00007ffa`a4fe0000 00007ffa`a5837000 C:\WINDOWS\system32\SogouPy.ime ModLoad: 00007ffa`f6d30000 00007ffa`f6e21000 C:\WINDOWS\SYSTEM32\WINHTTP.dll ModLoad: 00007ffa`e6e30000 00007ffa`e6e9c000 C:\WINDOWS\SYSTEM32\OLEACC.dll ModLoad: 00000000`10000000 00000000`100e4000 C:\Program Files (x86)\SogouInput\8.9.0.2180\Resource.dll ModLoad: 00007ffa`a4d70000 00007ffa`a4fd7000 C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1819\PicFace64.dll ModLoad: 00007ffa`ff950000 00007ffa`ffa76000 C:\WINDOWS\System32\COMDLG32.dll ModLoad: 00007ffa`e6ba0000 00007ffa`e6e1a000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17744.1001_none_df3eef9f6bca6b9f\COMCTL32.dll (ba04.2138): Guard page violation - code 80000001 (first chance) (ba04.2138): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:019> g ModLoad: 00007ffa`ffff0000 00007ffa`ffff8000 C:\WINDOWS\System32\PSAPI.DLL ModLoad: 00007ffa`b5de0000 00007ffa`b5df8000 C:\Program Files (x86)\SogouInput\Components\VoiceInput\1.0.0.143\VoiceInput64.dll ModLoad: 00007ffa`fcb20000 00007ffa`fcb48000 C:\WINDOWS\System32\DEVOBJ.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\system32\dxgi.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`ca960000 00007ffa`ca9c1000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 0:003> g (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:003> g ModLoad: 00007ffa`f9b40000 00007ffa`f9d09000 C:\WINDOWS\SYSTEM32\dcomp.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\SYSTEM32\dxgi.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`8f200000 00007ff6`8f286000 firefox.exe ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`d95b0000 00007ffa`d9621000 C:\WINDOWS\System32\verifier.dll ModLoad: 00007ffa`d6210000 00007ffa`d6304000 C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\kernelbase.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\kernel32.dll ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\ADVAPI32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (7f14.b910): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 1:029> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll ModLoad: 00007ffa`cb620000 00007ffa`cb6cd000 C:\WINDOWS\SYSTEM32\mscms.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 00007ffa`cb070000 00007ffa`cb080000 C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 000001a4`e8be0000 000001a4`e8be4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 000001a4`e8bf0000 000001a4`e8bf4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll ModLoad: 000001a4`e8c00000 000001a4`e8c03000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 000001a4`e8c10000 000001a4`e8c14000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 000001a4`e8c30000 000001a4`e8c34000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 00007ffa`cad20000 00007ffa`cad63000 C:\WINDOWS\SYSTEM32\icm32.dll ModLoad: 000001a4`e8c40000 000001a4`e8c43000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 000001a4`e8c90000 000001a4`e8c95000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 000001a4`e8ca0000 000001a4`e8ca5000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 000001a4`e8cb0000 000001a4`e8cb3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 000001a4`e8cc0000 000001a4`e8cc3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 000001a4`e8cd0000 000001a4`e8cd3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll ModLoad: 000001a4`e8ce0000 000001a4`e8ce3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll ModLoad: 00007ffa`e79a0000 00007ffa`e79b9000 C:\Program Files\Firefox Nightly\ia2marshal.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0]
0:000> g ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 1:029> g ModLoad: 00007ffa`f5d40000 00007ffa`f5f41000 C:\WINDOWS\system32\mfplat.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g ModLoad: 00007ffa`f5cc0000 00007ffa`f5cef000 C:\WINDOWS\SYSTEM32\RTWorkQ.DLL ModLoad: 00007ffa`d97d0000 00007ffa`d984f000 C:\WINDOWS\system32\mf.dll ModLoad: 00007ffa`e7160000 00007ffa`e7182000 C:\WINDOWS\system32\dxva2.dll ModLoad: 00007ffa`ca980000 00007ffa`caa39000 C:\WINDOWS\system32\evr.dll ModLoad: 00007ffa`ff610000 00007ffa`ff77a000 C:\WINDOWS\System32\MSCTF.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g [JavaScript Warning: "Bootstrapped manifest not allowed to use 'resource' directive." {file: "jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cehomepage@mozillaonline.com.xpi!/chrome.manifest" line: 13}] 1535241448440 addons.xpi WARN Error loading bootstrap.js for cehomepage@mozillaonline.com: TypeError: XPCOMUtils.generateQI is not a function(resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cehomepage@mozillaonline.com.xpi!/bootstrap.js:238:19) JS Stack trace: @resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cehomepage@bootstrap.js:238:19 loadBootstrapScope@XPIProvider.jsm:1659:9 callBootstrapMethod@XPIProvider.jsm:1517:9 async*startup@XPIProvider.jsm:1703:27 async*startup@XPIProvider.jsm:2150:39 callProvider@AddonManager.jsm:206:12 _startProvider@AddonManager.jsm:654:5 startup@AddonManager.jsm:811:9 startup@AddonManager.jsm:2806:5 observe@addonManager.js:66:9 [JavaScript Warning: "Bootstrapped manifest not allowed to use 'resource' directive." {file: "jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cpmanager@mozillaonline.com.xpi!/chrome.manifest" line: 5}] 1535241448505 addons.xpi WARN Error loading bootstrap.js for cpmanager@mozillaonline.com: TypeError: XPCOMUtils.generateQI is not a function(resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cpmanager@mozillaonline.com.xpi!/bootstrap.js:244:19) JS Stack trace: @resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cpmanager@bootstrap.js:244:19 loadBootstrapScope@XPIProvider.jsm:1659:9 callBootstrapMethod@XPIProvider.jsm:1517:9 async*startup@XPIProvider.jsm:1703:27 async*startup@XPIProvider.jsm:2150:39 callProvider@AddonManager.jsm:206:12 _startProvider@AddonManager.jsm:654:5 startup@AddonManager.jsm:811:9 startup@AddonManager.jsm:2806:5 observe@addonManager.js:66:9 [JavaScript Warning: "Bootstrapped manifest not allowed to use 'resource' directive." {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/browser/features/onboarding@mozilla.org.xpi!/chrome.manifest" line: 2}] ModLoad: 00007ffa`cd410000 00007ffa`cd466000 C:\WINDOWS\system32\dataexchange.dll ModLoad: 00007ffa`f98c0000 00007ffa`f9b3e000 C:\WINDOWS\system32\d3d11.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`fa6b0000 00007ffa`fa8b5000 C:\WINDOWS\system32\twinapi.appcore.dll ModLoad: 00007ffa`fa8c0000 00007ffa`fa8e8000 C:\WINDOWS\system32\RMCLIENT.dll ModLoad: 00007ffa`d5660000 00007ffa`d56ab000 C:\Windows\System32\wscapi.dll ModLoad: 00007ffa`ebe10000 00007ffa`ebfe4000 C:\Windows\System32\urlmon.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`ec220000 00007ffa`ec4c7000 C:\Windows\System32\iertutil.dll ModLoad: 00007ffa`f13f0000 00007ffa`f1460000 C:\WINDOWS\System32\MMDevApi.dll ModLoad: 00007ffa`f7d50000 00007ffa`f7ef9000 C:\WINDOWS\System32\PROPSYS.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`f1840000 00007ffa`f197d000 C:\WINDOWS\SYSTEM32\AUDIOSES.DLL ModLoad: 00007ffa`f77a0000 00007ffa`f78f3000 C:\WINDOWS\SYSTEM32\wintypes.dll ModLoad: 00007ffa`ed800000 00007ffa`ed93b000 C:\Windows\System32\Windows.UI.dll ModLoad: 00007ffa`ed750000 00007ffa`ed7e4000 C:\Windows\System32\TextInputFramework.dll ModLoad: 00007ffa`ed680000 00007ffa`ed74c000 C:\Windows\System32\InputHost.dll ModLoad: 00007ffa`f6240000 00007ffa`f6560000 C:\Windows\System32\CoreUIComponents.dll ModLoad: 00007ffa`fa070000 00007ffa`fa152000 C:\Windows\System32\CoreMessaging.dll ModLoad: 00007ffa`f9300000 00007ffa`f98be000 C:\Windows\System32\d2d1.dll ModLoad: 00007ffa`f98c0000 00007ffa`f9b3e000 C:\WINDOWS\system32\d3d11.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\SYSTEM32\dxgi.dll ModLoad: 00007ffa`de9a0000 00007ffa`de9e5000 C:\WINDOWS\System32\edputil.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll (ba04.9ecc): Guard page violation - code 80000001 (first chance) (ba04.9ecc): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:045> g ModLoad: 00007ffa`d5750000 00007ffa`d5779000 C:\WINDOWS\SYSTEM32\srpapi.dll ModLoad: 00007ffa`e9690000 00007ffa`e96a3000 C:\WINDOWS\SYSTEM32\appidapi.dll ModLoad: 00007ffa`d7cf0000 00007ffa`d7d51000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpHandleProtectedDelayload+0x2b5: 00007ffb`00d50bb5 4903fe add rdi,r14 1:029> g ModLoad: 00007ffa`f45d0000 00007ffa`f59e0000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igd10iumd64.dll [JavaScript Error: "ReferenceError: mozCNUtils is not defined" {file: "resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cehomepage@mozillaonline.com.xpi!/bootstrap.js" line: 694}] ModLoad: 00007ffa`fc4a0000 00007ffa`fc4c6000 C:\WINDOWS\SYSTEM32\ncrypt.dll [JavaScript Error: "ReferenceError: mozCNGuard is not defined" {file: "resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///C:/Users/zjb/AppData/Roaming/Mozilla/Firefox/Profiles/dzloundg.default/extensions/cpmanager@mozillaonline.com.xpi!/bootstrap.js" line: 1158}] (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 1:029> g ModLoad: 00007ffa`fc460000 00007ffa`fc49c000 C:\WINDOWS\SYSTEM32\NTASN1.dll ModLoad: 00007ffa`e8c60000 00007ffa`e8d88000 C:\Windows\System32\Windows.StateRepositoryPS.dll ModLoad: 00007ffa`f1c60000 00007ffa`f3ac9000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igc64.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (ba04.a55c): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g (ba04.a55c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:049> g ModLoad: 00007ffa`fcc40000 00007ffa`fcc70000 C:\Windows\System32\SspiCli.dll (ba04.9ecc): Guard page violation - code 80000001 (first chance) (ba04.9ecc): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:045> g ModLoad: 00007ffa`d9d60000 00007ffa`d9d7f000 C:\WINDOWS\System32\CLDAPI.dll ModLoad: 00007ffa`e9380000 00007ffa`e938a000 C:\WINDOWS\System32\FLTLIB.DLL (ba04.9ecc): Guard page violation - code 80000001 (first chance) (ba04.9ecc): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:045> g ModLoad: 00007ffa`cfd70000 00007ffa`cfdfa000 C:\Windows\System32\appresolver.dll ModLoad: 00007ffa`ede30000 00007ffa`ede8c000 C:\Windows\System32\Bcp47Langs.dll ModLoad: 00007ffa`fb020000 00007ffa`fb048000 C:\Windows\System32\SLC.dll ModLoad: 00007ffa`fcb20000 00007ffa`fcb48000 C:\WINDOWS\System32\DEVOBJ.dll (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g (7f14.b910): Guard page violation - code 80000001 (first chance) (7f14.b910): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 1:029> g ModLoad: 00007ffa`faff0000 00007ffa`fb016000 C:\Windows\System32\sppc.dll (ba04.9ecc): Guard page violation - code 80000001 (first chance) (ba04.9ecc): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:045> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00000000`00160000 00000000`00c06000 SGTool.exe ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00000000`77520000 00000000`776ba000 ntdll.dll ModLoad: 00007ffa`fdf70000 00007ffa`fdfc3000 C:\WINDOWS\System32\wow64.dll ModLoad: 00007ffb`00130000 00007ffb`001ac000 C:\WINDOWS\System32\wow64win.dll (b170.a640): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 2:051> g ModLoad: 00000000`77510000 00000000`77519000 C:\WINDOWS\System32\wow64cpu.dll ModLoad: 00000000`74dc0000 00000000`74ea0000 C:\WINDOWS\SysWOW64\KERNEL32.DLL ModLoad: 00000000`750a0000 00000000`75299000 C:\WINDOWS\SysWOW64\KERNELBASE.dll (ba04.aecc): Guard page violation - code 80000001 (first chance) ModLoad: 00000000`76010000 00000000`76036000 C:\WINDOWS\SysWOW64\IMM32.dll (ba04.aecc): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 0:057> g ModLoad: 00000000`76ff0000 00000000`77189000 C:\WINDOWS\SysWOW64\USER32.dll ModLoad: 00000000`76c20000 00000000`76c37000 C:\WINDOWS\SysWOW64\win32u.dll ModLoad: 00000000`75fe0000 00000000`76003000 C:\WINDOWS\SysWOW64\GDI32.dll ModLoad: 00000000`74f20000 00000000`75086000 C:\WINDOWS\SysWOW64\gdi32full.dll ModLoad: 00000000`76090000 00000000`7610f000 C:\WINDOWS\SysWOW64\msvcp_win.dll ModLoad: 00000000`76ca0000 00000000`76dc3000 C:\WINDOWS\SysWOW64\ucrtbase.dll ModLoad: 00000000`738c0000 00000000`738cf000 C:\WINDOWS\SysWOW64\WTSAPI32.dll ModLoad: 00000000`764b0000 00000000`76570000 C:\WINDOWS\SysWOW64\msvcrt.dll ModLoad: 00000000`6c520000 00000000`6c72c000 C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17744.1001_none_26ec2676804694a5\COMCTL32.dll ModLoad: 00000000`740d0000 00000000`740f3000 C:\WINDOWS\SysWOW64\USERENV.dll ModLoad: 00000000`75d60000 00000000`75fd2000 C:\WINDOWS\SysWOW64\combase.dll ModLoad: 00000000`73c80000 00000000`7409e000 C:\WINDOWS\SysWOW64\WININET.dll ModLoad: 00000000`761a0000 00000000`7629a000 C:\WINDOWS\SysWOW64\COMDLG32.dll ModLoad: 00000000`74b20000 00000000`74b52000 C:\WINDOWS\SysWOW64\IPHLPAPI.DLL ModLoad: 00000000`01710000 00000000`017d2000 C:\WINDOWS\SysWOW64\RPCRT4.dll ModLoad: 00000000`76ea0000 00000000`76f62000 C:\WINDOWS\SysWOW64\RPCRT4.dll ModLoad: 00000000`74b80000 00000000`74ba0000 C:\WINDOWS\SysWOW64\SspiCli.dll ModLoad: 00000000`017e0000 00000000`018a2000 C:\WINDOWS\SysWOW64\RPCRT4.dll ModLoad: 00000000`74d50000 00000000`74db2000 C:\WINDOWS\SysWOW64\bcryptPrimitives.dll ModLoad: 00000000`76120000 00000000`7613c000 C:\WINDOWS\SysWOW64\profapi.dll ModLoad: 00000000`74b70000 00000000`74b7a000 C:\WINDOWS\SysWOW64\CRYPTBASE.dll ModLoad: 00000000`76f70000 00000000`76fe9000 C:\WINDOWS\SysWOW64\sechost.dll ModLoad: 00000000`76320000 00000000`763a6000 C:\WINDOWS\SysWOW64\shcore.dll ModLoad: 00000000`773c0000 00000000`77404000 C:\WINDOWS\SysWOW64\SHLWAPI.dll ModLoad: 00000000`766d0000 00000000`76c1c000 C:\WINDOWS\SysWOW64\SHELL32.dll ModLoad: 00000000`74d10000 00000000`74d4b000 C:\WINDOWS\SysWOW64\cfgmgr32.dll ModLoad: 00000000`752a0000 00000000`75891000 C:\WINDOWS\SysWOW64\windows.storage.dll ModLoad: 00000000`762a0000 00000000`7631e000 C:\WINDOWS\SysWOW64\advapi32.dll ModLoad: 00000000`763b0000 00000000`76404000 C:\WINDOWS\SysWOW64\powrprof.dll ModLoad: 00000000`76110000 00000000`7611f000 C:\WINDOWS\SysWOW64\kernel.appcore.dll ModLoad: 00000000`76570000 00000000`76583000 C:\WINDOWS\SysWOW64\cryptsp.dll ModLoad: 00000000`77410000 00000000`7750c000 C:\WINDOWS\SysWOW64\ole32.dll ModLoad: 00000000`76410000 00000000`764aa000 C:\WINDOWS\SysWOW64\OLEAUT32.dll ModLoad: 00000000`758b0000 00000000`7590f000 C:\WINDOWS\SysWOW64\WS2_32.dll ModLoad: 00000000`74b60000 00000000`74b68000 C:\WINDOWS\SysWOW64\VERSION.dll ModLoad: 00000000`75090000 00000000`75096000 C:\WINDOWS\SysWOW64\PSAPI.DLL ModLoad: 00000000`744f0000 00000000`745ad000 C:\WINDOWS\SysWOW64\WINHTTP.dll ModLoad: 00000000`74310000 00000000`74316000 C:\WINDOWS\SysWOW64\MSIMG32.dll ModLoad: 00000000`6e150000 00000000`6e15a000 C:\WINDOWS\SysWOW64\Secur32.dll ModLoad: 00000000`76140000 00000000`76193000 C:\WINDOWS\SysWOW64\WLDAP32.dll ModLoad: 00000000`737f0000 00000000`73844000 C:\WINDOWS\SysWOW64\OLEACC.dll (b170.a640): WOW64 breakpoint - code 4000001f (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll_77520000!LdrpDoDebuggerBreak+0x2b: 775cf266 cc int 3 2:051:x86> g ModLoad: 00000000`70f80000 00000000`70fa9000 C:\WINDOWS\SysWOW64\ntmarta.dll ModLoad: 00000000`6edb0000 00000000`6ee2b000 C:\WINDOWS\SysWOW64\uxtheme.dll (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. firefox!base::win::PEImage::GetExportEntry+0x27: 00007ff6`8f2132d7 8b941188000000 mov edx,dword ptr [rcx+rdx+88h] ds:00007ffb`00d10168=0014aaa0 0:003> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`8f200000 00007ff6`8f286000 firefox.exe ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`d95b0000 00007ffa`d9621000 C:\WINDOWS\System32\verifier.dll ModLoad: 00007ffa`d6210000 00007ffa`d6304000 C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\kernelbase.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\kernel32.dll ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\ADVAPI32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (adb4.95e0): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 0000010d`f73d0000 0000010d`f73d4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 0000010d`f73e0000 0000010d`f73e4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll ModLoad: 0000010d`f73f0000 0000010d`f73f3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 0000010d`f7510000 0000010d`f7514000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 0000010d`f7520000 0000010d`f7524000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 0000010d`f7530000 0000010d`f7533000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 0000010d`f7540000 0000010d`f7545000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 0000010d`f7550000 0000010d`f7555000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 0000010d`f7560000 0000010d`f7563000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 0000010d`f7570000 0000010d`f7573000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 0000010d`f7580000 0000010d`f7583000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll ModLoad: 0000010d`f7590000 0000010d`f7593000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll ModLoad: 00000000`76590000 00000000`766d0000 C:\WINDOWS\SysWOW64\MSCTF.dll ModLoad: 00000000`10000000 00000000`10022000 C:\Program Files (x86)\SogouInput\8.9.0.2180\HWSignature.dll ModLoad: 00000000`5feb0000 00000000`5fec0000 C:\WINDOWS\SysWOW64\inetmib1.dll ModLoad: 00000000`76df0000 00000000`76df7000 C:\WINDOWS\SysWOW64\NSI.dll ModLoad: 00000000`5fea0000 00000000`5feaa000 C:\WINDOWS\SysWOW64\snmpapi.dll ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00000000`708f0000 00000000`70946000 C:\WINDOWS\SysWOW64\mswsock.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00000000`745b0000 00000000`74640000 C:\WINDOWS\SysWOW64\DNSAPI.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00000000`73a20000 00000000`73a28000 C:\Windows\SysWOW64\rasadhlp.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00000000`6e040000 00000000`6e091000 C:\WINDOWS\SysWOW64\fwpuclnt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00000000`76dd0000 00000000`76de9000 C:\WINDOWS\SysWOW64\bcrypt.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g Could not map contract ID '@mozilla.org/widget/printdialog-service;1' to CID {06beec76-a183-4d9f-85dd-085f26da565a} because no implementation of the CID is registered. ModLoad: 00007ffa`db240000 00007ffa`db256000 C:\WINDOWS\system32\napinsp.dll (adb4.7e8): Guard page violation - code 80000001 (first chance) (adb4.7e8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:073> g (adb4.7e8): Guard page violation - code 80000001 (first chance) (adb4.7e8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:073> g ModLoad: 00007ffa`db220000 00007ffa`db23a000 C:\WINDOWS\system32\pnrpnsp.dll ModLoad: 00007ffa`fc190000 00007ffa`fc1f7000 C:\WINDOWS\System32\mswsock.dll ModLoad: 00007ffa`fbf40000 00007ffa`fc007000 C:\WINDOWS\SYSTEM32\DNSAPI.dll ModLoad: 00007ffa`dc080000 00007ffa`dc08e000 C:\WINDOWS\System32\winrnr.dll ModLoad: 00007ffa`f8a30000 00007ffa`f8a4b000 C:\WINDOWS\system32\NLAapi.dll ModLoad: 00007ffa`f1330000 00007ffa`f1345000 C:\WINDOWS\system32\wshbth.dll [JavaScript Warning: "Could not map contract ID '@mozilla.org/fxaccounts/push;1' to CID {1b7db999-2ecd-4abf-bb95-a726896798ca} because no implementation of the CID is registered." {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/components.manifest" line: 161}] (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. firefox!base::win::PEImage::GetExportEntry+0x27: 00007ff6`8f2132d7 8b941188000000 mov edx,dword ptr [rcx+rdx+88h] ds:00007ffb`00d10168=0014aaa0 0:003> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`8f200000 00007ff6`8f286000 firefox.exe ModLoad: 00007ffa`fcc40000 00007ffa`fcc70000 C:\WINDOWS\SYSTEM32\SspiCli.dll ModLoad: 00007ffa`d7220000 00007ffa`d72bd000 C:\WINDOWS\system32\twinapi.dll ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`d95b0000 00007ffa`d9621000 C:\WINDOWS\System32\verifier.dll ModLoad: 00007ffa`d6210000 00007ffa`d6304000 C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll ModLoad: 00007ffa`fcb20000 00007ffa`fcb48000 C:\WINDOWS\System32\DEVOBJ.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\system32\dxgi.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\kernelbase.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\kernel32.dll ModLoad: 00007ffa`d7cf0000 00007ffa`d7d51000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\ADVAPI32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffa`f98c0000 00007ffa`f9b3e000 C:\WINDOWS\system32\d3d11.dll ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\SYSTEM32\dxgi.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`d7cf0000 00007ffa`d7d51000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpHandleProtectedDelayload+0x2b5: 00007ffb`00d50bb5 4903fe add rdi,r14 3:063> g (b99c.5da8): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 4:078> g ModLoad: 00007ffa`f45d0000 00007ffa`f59e0000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igd10iumd64.dll (b99c.bf08): Guard page violation - code 80000001 (first chance) (b99c.bf08): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 4:081> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`fc4a0000 00007ffa`fc4c6000 C:\WINDOWS\SYSTEM32\ncrypt.dll ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`fc460000 00007ffa`fc49c000 C:\WINDOWS\SYSTEM32\NTASN1.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`f1c60000 00007ffa`f3ac9000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igc64.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 0000020a`534f0000 0000020a`534f4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 0000020a`53500000 0000020a`53504000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll ModLoad: 0000020a`53510000 0000020a`53513000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 0000020a`53520000 0000020a`53524000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 0000020a`53530000 0000020a`53534000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 0000020a`53540000 0000020a`53543000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 0000020a`53550000 0000020a`53555000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 0000020a`53560000 0000020a`53565000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 0000020a`53570000 0000020a`53573000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 0000020a`53580000 0000020a`53583000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 00007ffa`f9300000 00007ffa`f98be000 C:\WINDOWS\SYSTEM32\d2d1.dll ModLoad: 0000020a`535d0000 0000020a`535d3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) ModLoad: 0000020a`535e0000 0000020a`535e3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g ModLoad: 00007ffa`fa3f0000 00007ffa`fa42a000 C:\WINDOWS\SYSTEM32\XmlLite.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffa`ebae0000 00007ffa`ebde0000 C:\WINDOWS\SYSTEM32\dwrite.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12
4:078> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`cb620000 00007ffa`cb6cd000 C:\WINDOWS\SYSTEM32\mscms.dll ModLoad: 00007ffa`cb070000 00007ffa`cb080000 C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll ModLoad: 00007ffa`cad20000 00007ffa`cad63000 C:\WINDOWS\SYSTEM32\icm32.dll ModLoad: 00007ffb`00080000 00007ffb`00122000 C:\WINDOWS\System32\clbcatq.dll ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffa`d9630000 00007ffa`d9675000 C:\Program Files\Firefox Nightly\softokn3.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`f13f0000 00007ffa`f1460000 C:\WINDOWS\System32\MMDevApi.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g ModLoad: 00007ffa`f7d50000 00007ffa`f7ef9000 C:\WINDOWS\System32\PROPSYS.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`f1840000 00007ffa`f197d000 C:\WINDOWS\SYSTEM32\AUDIOSES.DLL ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffa`f77a0000 00007ffa`f78f3000 C:\WINDOWS\SYSTEM32\wintypes.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`ed800000 00007ffa`ed93b000 C:\Windows\System32\Windows.UI.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`ed750000 00007ffa`ed7e4000 C:\Windows\System32\TextInputFramework.dll ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`ed680000 00007ffa`ed74c000 C:\Windows\System32\InputHost.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f6240000 00007ffa`f6560000 C:\Windows\System32\CoreUIComponents.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fa070000 00007ffa`fa152000 C:\Windows\System32\CoreMessaging.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`fa6b0000 00007ffa`fa8b5000 C:\Windows\System32\twinapi.appcore.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL ModLoad: 00007ffa`fa8c0000 00007ffa`fa8e8000 C:\Windows\System32\RMCLIENT.dll ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`c7570000 00007ffa`c760e000 C:\Program Files\Firefox Nightly\freebl3.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`d7cf0000 00007ffa`d7d5a000 C:\PROGRA~1\FIREFO~2\nssckbi.dll (ba04.4ab8): Guard page violation - code 80000001 (first chance) (ba04.4ab8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:087> g Could not map contract ID '@mozilla.org/widget/printdialog-service;1' to CID {06beec76-a183-4d9f-85dd-085f26da565a} because no implementation of the CID is registered. ModLoad: 00007ffa`dee30000 00007ffa`df2c4000 C:\WINDOWS\SYSTEM32\WININET.dll ModLoad: 00007ffa`ddd70000 00007ffa`ddd86000 C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll ModLoad: 00007ffa`db240000 00007ffa`db256000 C:\WINDOWS\system32\napinsp.dll ModLoad: 00007ffa`ef130000 00007ffa`ef13b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL (b99c.a8f4): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`e79a0000 00007ffa`e79b9000 C:\Program Files\Firefox Nightly\ia2marshal.dll (b99c.a8f4): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:098> g (b99c.a8f4): Guard page violation - code 80000001 (first chance) (b99c.a8f4): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:098> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:063> g (adb4.95e0): Guard page violation - code 80000001 (first chance) (adb4.95e0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:063> g ModLoad: 00007ffa`db220000 00007ffa`db23a000 C:\WINDOWS\system32\pnrpnsp.dll ModLoad: 00007ffa`fc190000 00007ffa`fc1f7000 C:\WINDOWS\System32\mswsock.dll ModLoad: 00007ffa`fbf40000 00007ffa`fc007000 C:\WINDOWS\SYSTEM32\DNSAPI.dll ModLoad: 00007ffa`dc080000 00007ffa`dc08e000 C:\WINDOWS\System32\winrnr.dll ModLoad: 00007ffa`f8a30000 00007ffa`f8a4b000 C:\WINDOWS\system32\NLAapi.dll ModLoad: 00007ffa`f1330000 00007ffa`f1345000 C:\WINDOWS\system32\wshbth.dll ModLoad: 00007ffa`fcb70000 00007ffa`fcc0b000 C:\WINDOWS\SYSTEM32\sxs.dll [JavaScript Warning: "Could not map contract ID '@mozilla.org/fxaccounts/push;1' to CID {1b7db999-2ecd-4abf-bb95-a726896798ca} because no implementation of the CID is registered." {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/components.manifest" line: 161}] ModLoad: 00007ffa`e6e30000 00007ffa`e6e9c000 C:\Windows\System32\oleacc.dll (adb4.a420): Guard page violation - code 80000001 (first chance) (adb4.a420): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:105> g ModLoad: 00007ffa`fcc40000 00007ffa`fcc70000 C:\WINDOWS\SYSTEM32\SspiCli.dll ModLoad: 00007ffa`d8160000 00007ffa`d818c000 C:\Program Files\Firefox Nightly\AccessibleHandler.dll (adb4.a420): Guard page violation - code 80000001 (first chance) (adb4.a420): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:105> g ModLoad: 00007ffa`fcb20000 00007ffa`fcb48000 C:\WINDOWS\System32\DEVOBJ.dll (adb4.a420): Guard page violation - code 80000001 (first chance) (adb4.a420): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 3:105> g ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\system32\dxgi.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`e8e70000 00007ffa`e8e7a000 C:\Windows\System32\rasadhlp.dll (ba04.bf04): Guard page violation - code 80000001 (first chance) (ba04.bf04): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:114> g ModLoad: 00007ffa`c79b0000 00007ffa`c7a11000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`e9f00000 00007ffa`e9f79000 C:\WINDOWS\System32\fwpuclnt.dll (ba04.bf04): Guard page violation - code 80000001 (first chance) (ba04.bf04): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:114> g ModLoad: 00007ffa`f98c0000 00007ffa`f9b3e000 C:\WINDOWS\system32\d3d11.dll (ba04.bf04): Guard page violation - code 80000001 (first chance) (ba04.bf04): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:114> g (ba04.bf04): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\SYSTEM32\dxgi.dll (ba04.bf04): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:114> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (ba04.bf04): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g (ba04.bf04): Guard page violation - code 80000001 (first chance) (b99c.5da8): Guard page violation - code 80000001 (first chance) (ba04.bf04): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:114> g (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`c79b0000 00007ffa`c7a11000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpHandleProtectedDelayload+0x2b5: 00007ffb`00d50bb5 4903fe add rdi,r14 4:078> g ModLoad: 00007ffa`f45d0000 00007ffa`f59e0000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igd10iumd64.dll ModLoad: 00007ffa`fc4a0000 00007ffa`fc4c6000 C:\WINDOWS\SYSTEM32\ncrypt.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`fc460000 00007ffa`fc49c000 C:\WINDOWS\SYSTEM32\NTASN1.dll ModLoad: 00007ffa`f1c60000 00007ffa`f3ac9000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igc64.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g ModLoad: 00007ffa`f9300000 00007ffa`f98be000 C:\WINDOWS\SYSTEM32\d2d1.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g ModLoad: 00007ffa`fa3f0000 00007ffa`fa42a000 C:\WINDOWS\SYSTEM32\XmlLite.dll ModLoad: 00007ffa`ebae0000 00007ffa`ebde0000 C:\WINDOWS\SYSTEM32\dwrite.dll ModLoad: 00007ffa`cb620000 00007ffa`cb6cd000 C:\WINDOWS\SYSTEM32\mscms.dll ModLoad: 00007ffa`cb070000 00007ffa`cb080000 C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll ModLoad: 00007ffa`cad20000 00007ffa`cad63000 C:\WINDOWS\SYSTEM32\icm32.dll (ba04.b62c): Guard page violation - code 80000001 (first chance) (ba04.b62c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:115> g ModLoad: 00007ffb`00080000 00007ffb`00122000 C:\WINDOWS\System32\clbcatq.dll ModLoad: 00007ffa`f13f0000 00007ffa`f1460000 C:\WINDOWS\System32\MMDevApi.dll ModLoad: 00007ffa`f7d50000 00007ffa`f7ef9000 C:\WINDOWS\System32\PROPSYS.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`f1840000 00007ffa`f197d000 C:\WINDOWS\SYSTEM32\AUDIOSES.DLL ModLoad: 00007ffa`f77a0000 00007ffa`f78f3000 C:\WINDOWS\SYSTEM32\wintypes.dll ModLoad: 00007ffa`ed800000 00007ffa`ed93b000 C:\Windows\System32\Windows.UI.dll ModLoad: 00007ffa`ed750000 00007ffa`ed7e4000 C:\Windows\System32\TextInputFramework.dll ModLoad: 00007ffa`ed680000 00007ffa`ed74c000 C:\Windows\System32\InputHost.dll ModLoad: 00007ffa`f6240000 00007ffa`f6560000 C:\Windows\System32\CoreUIComponents.dll ModLoad: 00007ffa`fa070000 00007ffa`fa152000 C:\Windows\System32\CoreMessaging.dll ModLoad: 00007ffa`fa6b0000 00007ffa`fa8b5000 C:\Windows\System32\twinapi.appcore.dll ModLoad: 00007ffa`fa8c0000 00007ffa`fa8e8000 C:\Windows\System32\RMCLIENT.dll (ba04.6038): Guard page violation - code 80000001 (first chance) (ba04.6038): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:115> g ModLoad: 00007ffa`fbb00000 00007ffa`fbb33000 C:\WINDOWS\system32\rsaenh.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x5f: 00007ffb`00d5085f 4584db test r11b,r11b 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`d8160000 00007ffa`d818c000 C:\Program Files\Firefox Nightly\AccessibleHandler.dll ModLoad: 00007ffa`e79a0000 00007ffa`e79b9000 C:\Program Files\Firefox Nightly\ia2marshal.dll (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 4:078> g (b99c.5da8): Guard page violation - code 80000001 (first chance) (b99c.5da8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:078> g ModLoad: 00007ffa`fcb70000 00007ffa`fcc0b000 C:\WINDOWS\SYSTEM32\sxs.dll ModLoad: 00007ffa`e6e30000 00007ffa`e6e9c000 C:\Windows\System32\oleacc.dll (b99c.9e54): Guard page violation - code 80000001 (first chance) (b99c.9e54): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:130> g ModLoad: 00007ffa`d8160000 00007ffa`d818c000 C:\Program Files\Firefox Nightly\AccessibleHandler.dll (b99c.9e54): Guard page violation - code 80000001 (first chance) (b99c.9e54): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 4:130> g (b99c.9e54): Guard page violation - code 80000001 (first chance) (b99c.9e54): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 4:130> g (adb4.4b18): Unknown exception - code 80010108 (first chance) (ba04.a7c0): Unknown exception - code 80010108 (first chance) ModLoad: 00007ffa`fa310000 00007ffa`fa39c000 C:\WINDOWS\system32\apphelp.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`49100000 00007ff6`491c2000 minidump-analyzer.exe ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\KERNEL32.DLL ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\KERNELBASE.dll ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff7`02300000 00007ff7`023d0000 conhost.exe ntdll!NtWaitForAlertByThreadId+0x14: 00007ffb`00db24b4 c3 ret 3:075> g ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\KERNEL32.DLL ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\KERNELBASE.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll ###!!! [Parent][RunMessage] Error: Channel error: cannot send/recv ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ###!!! [Parent][RunMessage] Error: Channel error: cannot send/recv ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\advapi32.dll ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll (1c04.7038): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 6:034> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\shell32.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. firefox!base::win::PEImage::GetExportEntry+0x27: 00007ff6`8f2132d7 8b941188000000 mov edx,dword ptr [rcx+rdx+88h] ds:00007ffb`00d10168=0014aaa0 0:003> g ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`8f200000 00007ff6`8f286000 firefox.exe ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`d95b0000 00007ffa`d9621000 C:\WINDOWS\System32\verifier.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffa`d6210000 00007ffa`d6304000 C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\kernelbase.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\kernel32.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\system32\uxtheme.dll ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\ADVAPI32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll onecore\windows\core\console\open\src\interactivity\win32\systemconfigurationprovider.cpp(165)\conhost.exe!00007FF702316EF5: (caller: 00007FF7023164AA) LogHr(1) tid(b8d4) 80004005 未指定的ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (2b3c.bd50): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 0000025b`63700000 0000025b`63704000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 0000025b`63710000 0000025b`63714000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll onecore\windows\core\console\open\src\renderer\gdi\state.cpp(235)\conhost.exe!00007FF702314618: (caller: 00007FF70232351C) LogHr(2) tid(a0c0) 80004005 未指定的ModLoad: 0000025b`63720000 0000025b`63723000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 00007ffa`ff610000 00007ffa`ff77a000 C:\WINDOWS\System32\MSCTF.dll ModLoad: 0000025b`63730000 0000025b`63734000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 0000025b`63740000 0000025b`63744000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\system32\dwmapi.dll ModLoad: 0000025b`63790000 0000025b`63793000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 0000025b`637a0000 0000025b`637a5000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 0000025b`637b0000 0000025b`637b5000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 0000025b`637c0000 0000025b`637c3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 00007ffa`e6ba0000 00007ffa`e6e1a000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17744.1001_none_df3eef9f6bca6b9f\comctl32.DLL ModLoad: 0000025b`637d0000 0000025b`637d3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 0000025b`637e0000 0000025b`637e3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll ModLoad: 0000025b`637f0000 0000025b`637f3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll ModLoad: 00007ffa`fa310000 00007ffa`fa39c000 C:\WINDOWS\SYSTEM32\apphelp.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffb`00000000 00007ffb`0001d000 C:\WINDOWS\System32\imagehlp.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll (8718.9b08): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3 5:111> g ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g Could not map contract ID '@mozilla.org/widget/printdialog-service;1' to CID {06beec76-a183-4d9f-85dd-085f26da565a} because no implementation of the CID is registered. ModLoad: 00007ffa`db240000 00007ffa`db256000 C:\WINDOWS\system32\napinsp.dll (2b3c.a5a8): Guard page violation - code 80000001 (first chance) (2b3c.a5a8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:072> g (2b3c.a5a8): Guard page violation - code 80000001 (first chance) (2b3c.a5a8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:072> g ModLoad: 00007ffa`db220000 00007ffa`db23a000 C:\WINDOWS\system32\pnrpnsp.dll ModLoad: 00007ffa`fc190000 00007ffa`fc1f7000 C:\WINDOWS\System32\mswsock.dll ModLoad: 00007ffa`fbf40000 00007ffa`fc007000 C:\WINDOWS\SYSTEM32\DNSAPI.dll ModLoad: 00007ffa`dc080000 00007ffa`dc08e000 C:\WINDOWS\System32\winrnr.dll ModLoad: 00007ffa`f8a30000 00007ffa`f8a4b000 C:\WINDOWS\system32\NLAapi.dll ModLoad: 00007ffa`f1330000 00007ffa`f1345000 C:\WINDOWS\system32\wshbth.dll [JavaScript Warning: "Could not map contract ID '@mozilla.org/fxaccounts/push;1' to CID {1b7db999-2ecd-4abf-bb95-a726896798ca} because no implementation of the CID is registered." {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/components.manifest" line: 161}] ModLoad: 00007ffa`ccf80000 00007ffa`cd40b000 C:\WINDOWS\system32\explorerframe.dll (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:000> g (ba04.a7c0): Guard page violation - code 80000001 (first chance) (ba04.a7c0): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 0:000> g ModLoad: 00007ffa`fcc40000 00007ffa`fcc70000 C:\WINDOWS\SYSTEM32\SspiCli.dll ModLoad: 00007ffa`fcb20000 00007ffa`fcb48000 C:\WINDOWS\System32\DEVOBJ.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\system32\dxgi.dll ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`c79b0000 00007ffa`c7a11000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g ModLoad: 00007ffa`f98c0000 00007ffa`f9b3e000 C:\WINDOWS\system32\d3d11.dll ModLoad: 00007ffa`fae30000 00007ffa`faef1000 C:\WINDOWS\SYSTEM32\dxgi.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g ModLoad: 00007ffa`fa8f0000 00007ffa`fa904000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll ModLoad: 00007ffa`c79b0000 00007ffa`c7a11000 C:\WINDOWS\System32\DriverStore\FileRepository\c0328911.inf_amd64_a81756cbffedb936\B328940\amdhdl64.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpHandleProtectedDelayload+0x2b5: 00007ffb`00d50bb5 4903fe add rdi,r14 3:052> g ModLoad: 00007ffa`f45d0000 00007ffa`f59e0000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igd10iumd64.dll ModLoad: 00007ffa`fc4a0000 00007ffa`fc4c6000 C:\WINDOWS\SYSTEM32\ncrypt.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g ModLoad: 00007ffa`fc460000 00007ffa`fc49c000 C:\WINDOWS\SYSTEM32\NTASN1.dll ModLoad: 00007ffa`f1c60000 00007ffa`f3ac9000 C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_78b09d9681a2400f\igc64.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g ModLoad: 00007ffa`f9300000 00007ffa`f98be000 C:\WINDOWS\SYSTEM32\d2d1.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 3:052> g ModLoad: 00007ffa`fa3f0000 00007ffa`fa42a000 C:\WINDOWS\SYSTEM32\XmlLite.dll ModLoad: 00007ffa`ebae0000 00007ffa`ebde0000 C:\WINDOWS\SYSTEM32\dwrite.dll ModLoad: 00007ffa`cb620000 00007ffa`cb6cd000 C:\WINDOWS\SYSTEM32\mscms.dll ModLoad: 00007ffa`cb070000 00007ffa`cb080000 C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll ModLoad: 00007ffa`cad20000 00007ffa`cad63000 C:\WINDOWS\SYSTEM32\icm32.dll ModLoad: 00007ffb`00080000 00007ffb`00122000 C:\WINDOWS\System32\clbcatq.dll ModLoad: 00007ffa`f13f0000 00007ffa`f1460000 C:\WINDOWS\System32\MMDevApi.dll ModLoad: 00007ffa`f7d50000 00007ffa`f7ef9000 C:\WINDOWS\System32\PROPSYS.dll (2b3c.bd50): Guard page violation - code 80000001 (first chance) (2b3c.bd50): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 3:052> g ModLoad: 00007ffa`f1840000 00007ffa`f197d000 C:\WINDOWS\SYSTEM32\AUDIOSES.DLL ModLoad: 00007ffa`f77a0000 00007ffa`f78f3000 C:\WINDOWS\SYSTEM32\wintypes.dll ModLoad: 00007ffa`ed800000 00007ffa`ed93b000 C:\Windows\System32\Windows.UI.dll ModLoad: 00007ffa`ed750000 00007ffa`ed7e4000 C:\Windows\System32\TextInputFramework.dll ModLoad: 00007ffa`ed680000 00007ffa`ed74c000 C:\Windows\System32\InputHost.dll ModLoad: 00007ffa`d9630000 00007ffa`d9675000 C:\Program Files\Firefox Nightly\softokn3.dll ModLoad: 00007ffa`f6240000 00007ffa`f6560000 C:\Windows\System32\CoreUIComponents.dll ModLoad: 00007ffa`fa070000 00007ffa`fa152000 C:\Windows\System32\CoreMessaging.dll ModLoad: 00007ffa`c7570000 00007ffa`c760e000 C:\Program Files\Firefox Nightly\freebl3.dll ModLoad: 00007ffa`fa6b0000 00007ffa`fa8b5000 C:\Windows\System32\twinapi.appcore.dll ModLoad: 00007ffa`fa8c0000 00007ffa`fa8e8000 C:\Windows\System32\RMCLIENT.dll [JavaScript Error: "formatURLPref: Couldn't get pref: browser.safebrowsing.provider.baidu.updateURL" {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/nsURLFormatter.js" line: 113}] uf_formatURLPref@jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/nsURLFormatter.js:113:7 updateProviderURLs/<@resource://gre/modules/SafeBrowsing.jsm:364:23 updateProviderURLs@resource://gre/modules/SafeBrowsing.jsm:360:33 readPrefs@resource://gre/modules/SafeBrowsing.jsm:311:5 init@resource://gre/modules/SafeBrowsing.jsm:70:5 _scheduleStartupIdleTasks/<@jar:file:///C:/Program%20Files/Firefox%20Nightly/browser/omni.ja!/components/nsBrowserGlue.js:1505:7 [JavaScript Error: "formatURLPref: Couldn't get pref: browser.safebrowsing.provider.baidu.gethashURL" {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/nsURLFormatter.js" line: 113}] uf_formatURLPref@jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/nsURLFormatter.js:113:7 updateProviderURLs/<@resource://gre/modules/SafeBrowsing.jsm:366:24 updateProviderURLs@resource://gre/modules/SafeBrowsing.jsm:360:33 readPrefs@resource://gre/modules/SafeBrowsing.jsm:311:5 init@resource://gre/modules/SafeBrowsing.jsm:70:5 _scheduleStartupIdleTasks/<@jar:file:///C:/Program%20Files/Firefox%20Nightly/browser/omni.ja!/components/nsBrowserGlue.js:1505:7 ModLoad: 00007ffa`de9f0000 00007ffa`deab6000 C:\WINDOWS\SYSTEM32\efswrt.dll ModLoad: 00007ffa`e9300000 00007ffa`e931a000 C:\WINDOWS\SYSTEM32\MPR.dll (ba04.2ae8): Guard page violation - code 80000001 (first chance) (ba04.2ae8): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 0:113> g 1535241518592 addons.webextension.jid1-Xo5SuA6qc1DFpw@jetpack WARN Loading extension 'jid1-Xo5SuA6qc1DFpw@jetpack': Reading manifest: Error processing offline_enabled: An unexpected property was found in the WebExtension manifest. 1535241519122 addons.webextension.translator@zoli.bod WARN Loading extension 'translator@zoli.bod': Reading manifest: Error processing permissions_notes: An unexpected property was found in the WebExtension manifest. (b99c.32d4): Guard page violation - code 80000001 (first chance) (b99c.32d4): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpGetProcedureAddress+0xed: 00007ffb`00d506bd 4533d2 xor r10d,r10d 4:136> g [JavaScript Warning: "Using //@ to indicate sourceMappingURL pragmas is deprecated. Use //# instead" {file: "https://start.firefoxchina.cn/js/tabLib-min.js?v=20150120" line: 1}] [JavaScript Warning: "Using //@ to indicate sourceMappingURL pragmas is deprecated. Use //# instead" {file: "https://start.firefoxchina.cn/js/tabLib-min.js?v=20150120" line: 1}] (ba04.bc30): Guard page violation - code 80000001 (first chance) (ba04.bc30): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. firefox!base::win::PEImage::GetExportEntry+0x27: 00007ff6`8f2132d7 8b941188000000 mov edx,dword ptr [rcx+rdx+88h] ds:00007ffb`00d10168=0014aaa0 0:003> g ************* Path validation summary ************** Response Time (ms) Location Deferred srv* ************* Path validation summary ************** Response Time (ms) Location Deferred SRV*c:\symbols*http://symbols.mozilla.org/firefox Deferred SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Deferred srv* Symbol search path is: SRV*c:\symbols*http://symbols.mozilla.org/firefox;SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv* Executable search path is: srv* ModLoad: 00007ff6`8f200000 00007ff6`8f286000 firefox.exe ModLoad: 00007ffb`00d10000 00007ffb`00efb000 ntdll.dll ModLoad: 00007ffa`d95b0000 00007ffa`d9621000 C:\WINDOWS\System32\verifier.dll ModLoad: 00007ffa`d6210000 00007ffa`d6304000 C:\WINDOWS\SYSTEM32\PayloadRestrictions.dll ModLoad: 00007ffa`fdd90000 00007ffa`fde8a000 C:\WINDOWS\System32\ucrtbase.dll ModLoad: 00007ffa`fd000000 00007ffa`fd292000 C:\WINDOWS\System32\kernelbase.dll ModLoad: 00007ffa`ff780000 00007ffa`ff833000 C:\WINDOWS\System32\kernel32.dll ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\ADVAPI32.dll ModLoad: 00007ffa`ff570000 00007ffa`ff60e000 C:\WINDOWS\System32\msvcrt.dll ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffa`e9950000 00007ffa`e998c000 C:\Program Files\Firefox Nightly\mozglue.dll ModLoad: 00007ffa`cadc0000 00007ffa`cae67000 C:\Program Files\Firefox Nightly\MSVCP140.dll ModLoad: 00007ffa`ef530000 00007ffa`ef546000 C:\Program Files\Firefox Nightly\VCRUNTIME140.dll ModLoad: 00007ffa`fc860000 00007ffa`fca4e000 C:\WINDOWS\SYSTEM32\dbghelp.dll ModLoad: 00007ffa`ed7f0000 00007ffa`ed7fa000 C:\WINDOWS\SYSTEM32\VERSION.dll ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (5a90.be0c): Break instruction exception - code 80000003 (first chance) ntdll!LdrpDoDebuggerBreak+0x30: 00007ffb`00de132c cc int 3
7:158> g (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 7:158> g ModLoad: 00007ffa`ffe50000 00007ffa`fffe7000 C:\WINDOWS\System32\user32.dll ModLoad: 00007ffa`fdac0000 00007ffa`fdae0000 C:\WINDOWS\System32\win32u.dll ModLoad: 00007ffa`ffa80000 00007ffa`ffaa9000 C:\WINDOWS\System32\GDI32.dll ModLoad: 00007ffa`fce60000 00007ffa`fcffa000 C:\WINDOWS\System32\gdi32full.dll ModLoad: 00007ffa`fda20000 00007ffa`fdac0000 C:\WINDOWS\System32\msvcp_win.dll (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 7:158> g (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:158> g (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:158> g ModLoad: 00007ffa`fdf40000 00007ffa`fdf6e000 C:\WINDOWS\System32\IMM32.DLL ModLoad: 00000169`eaaf0000 00000169`eaaf4000 C:\Program Files\Firefox Nightly\api-ms-win-crt-runtime-l1-1-0.dll ModLoad: 00000169`eab00000 00000169`eab04000 C:\Program Files\Firefox Nightly\api-ms-win-crt-string-l1-1-0.dll ModLoad: 00000169`eab10000 00000169`eab13000 C:\Program Files\Firefox Nightly\api-ms-win-crt-heap-l1-1-0.dll ModLoad: 00000169`eab20000 00000169`eab24000 C:\Program Files\Firefox Nightly\api-ms-win-crt-stdio-l1-1-0.dll ModLoad: 00000169`eab30000 00000169`eab34000 C:\Program Files\Firefox Nightly\api-ms-win-crt-convert-l1-1-0.dll ModLoad: 00000169`eac50000 00000169`eac53000 C:\Program Files\Firefox Nightly\api-ms-win-crt-locale-l1-1-0.dll ModLoad: 00000169`eac60000 00000169`eac65000 C:\Program Files\Firefox Nightly\api-ms-win-crt-math-l1-1-0.dll ModLoad: 00000169`eac70000 00000169`eac75000 C:\Program Files\Firefox Nightly\api-ms-win-crt-multibyte-l1-1-0.dll ModLoad: 00000169`eac80000 00000169`eac83000 C:\Program Files\Firefox Nightly\api-ms-win-crt-time-l1-1-0.dll ModLoad: 00000169`eac90000 00000169`eac93000 C:\Program Files\Firefox Nightly\api-ms-win-crt-filesystem-l1-1-0.dll ModLoad: 00000169`eaca0000 00000169`eaca3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-environment-l1-1-0.dll ModLoad: 00000169`eacb0000 00000169`eacb3000 C:\Program Files\Firefox Nightly\api-ms-win-crt-utility-l1-1-0.dll ModLoad: 00007ffa`b7040000 00007ffa`b72db000 C:\Program Files\Firefox Nightly\nss3.dll [JavaScript Error: "hm.baidu.com : server does not support RFC 5746, see CVE-2009-3555"] ModLoad: 00007ffb`00460000 00007ffb`004ce000 C:\WINDOWS\System32\WS2_32.dll ModLoad: 00007ffa`f8810000 00007ffa`f8834000 C:\WINDOWS\SYSTEM32\WINMM.dll ModLoad: 00007ffa`f0c30000 00007ffa`f0c39000 C:\WINDOWS\SYSTEM32\WSOCK32.dll (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:158> g ModLoad: 00007ffa`f87e0000 00007ffa`f880d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll ModLoad: 00007ffa`fde90000 00007ffa`fdedb000 C:\WINDOWS\System32\cfgmgr32.dll ModLoad: 00007ffa`f8390000 00007ffa`f839e000 C:\Program Files\Firefox Nightly\lgpllibs.dll ModLoad: 00007ffa`8a0d0000 00007ffa`8fdf9000 C:\Program Files\Firefox Nightly\xul.dll ModLoad: 00007ffa`fdfd0000 00007ffa`ff4bc000 C:\WINDOWS\System32\SHELL32.dll ModLoad: 00007ffa`ff4c0000 00007ffa`ff568000 C:\WINDOWS\System32\shcore.dll ModLoad: 00007ffb`009b0000 00007ffb`00cd8000 C:\WINDOWS\System32\combase.dll ModLoad: 00007ffa`fd2a0000 00007ffa`fd9e5000 C:\WINDOWS\System32\windows.storage.dll ModLoad: 00007ffa`fcd10000 00007ffa`fcd34000 C:\WINDOWS\System32\profapi.dll ModLoad: 00007ffa`fcd80000 00007ffa`fcddd000 C:\WINDOWS\System32\powrprof.dll ModLoad: 00007ffb`00020000 00007ffb`00072000 C:\WINDOWS\System32\shlwapi.dll ModLoad: 00007ffa`fcd60000 00007ffa`fcd71000 C:\WINDOWS\System32\kernel.appcore.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\cryptsp.dll ModLoad: 00007ffa`ffab0000 00007ffa`ffc04000 C:\WINDOWS\System32\ole32.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffb`00530000 00007ffb`009a6000 C:\WINDOWS\System32\SETUPAPI.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffb`001b0000 00007ffb`0027c000 C:\WINDOWS\System32\OLEAUT32.dll ModLoad: 00007ffa`f6c50000 00007ffa`f6c5a000 C:\WINDOWS\SYSTEM32\AVRT.dll ModLoad: 00007ffa`f8590000 00007ffa`f85a9000 C:\WINDOWS\SYSTEM32\USP10.dll ModLoad: 00007ffa`fbf00000 00007ffa`fbf3d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffa`fa680000 00007ffa`fa6ae000 C:\WINDOWS\SYSTEM32\dwmapi.dll ModLoad: 00007ffa`fa5b0000 00007ffa`fa64e000 C:\WINDOWS\SYSTEM32\UxTheme.dll ModLoad: 00007ffa`f8080000 00007ffa`f8093000 C:\WINDOWS\SYSTEM32\WTSAPI32.dll ModLoad: 00007ffa`fcc10000 00007ffa`fcc38000 C:\WINDOWS\SYSTEM32\USERENV.dll ModLoad: 00007ffa`ee470000 00007ffa`ee48c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [JavaScript Error: "hm.baidu.com : server does not support RFC 5746, see CVE-2009-3555"] ModLoad: 00007ffb`00280000 00007ffb`00288000 C:\WINDOWS\System32\NSI.dll ModLoad: 00007ffa`fc820000 00007ffa`fc851000 C:\WINDOWS\SYSTEM32\ntmarta.dll (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:158> g (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!RtlImageNtHeaderEx+0x59: 00007ffb`00d50859 7556 jne ntdll!RtlImageNtHeaderEx+0xb1 (00007ffb`00d508b1) [br=0] 7:158> g Could not map contract ID '@mozilla.org/widget/printdialog-service;1' to CID {06beec76-a183-4d9f-85dd-085f26da565a} because no implementation of the CID is registered. ModLoad: 00007ffa`db240000 00007ffa`db256000 C:\WINDOWS\system32\napinsp.dll (5a90.4438): Guard page violation - code 80000001 (first chance) (5a90.4438): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:169> g (5a90.4438): Guard page violation - code 80000001 (first chance) (5a90.4438): Single step exception - code 80000004 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. ntdll!LdrpSnapModule+0x1fc: 00007ffb`00d5029c 4d03cc add r9,r12 7:169> g ModLoad: 00007ffa`db220000 00007ffa`db23a000 C:\WINDOWS\system32\pnrpnsp.dll ModLoad: 00007ffa`fc190000 00007ffa`fc1f7000 C:\WINDOWS\System32\mswsock.dll ModLoad: 00007ffa`fbf40000 00007ffa`fc007000 C:\WINDOWS\SYSTEM32\DNSAPI.dll ModLoad: 00007ffa`fdee0000 00007ffa`fdf38000 C:\WINDOWS\System32\WINTRUST.dll ModLoad: 00007ffa`fcd40000 00007ffa`fcd52000 C:\WINDOWS\System32\MSASN1.dll ModLoad: 00007ffa`dc080000 00007ffa`dc08e000 C:\WINDOWS\System32\winrnr.dll ModLoad: 00007ffa`f8a30000 00007ffa`f8a4b000 C:\WINDOWS\system32\NLAapi.dll ModLoad: 00007ffa`f1330000 00007ffa`f1345000 C:\WINDOWS\system32\wshbth.dll ModLoad: 00007ffa`fdbb0000 00007ffa`fdd8b000 C:\WINDOWS\System32\CRYPT32.dll ModLoad: 00007ffb`00330000 00007ffb`00452000 C:\WINDOWS\System32\RPCRT4.dll ModLoad: 00007ffa`fdb90000 00007ffa`fdba7000 C:\WINDOWS\System32\CRYPTSP.dll [JavaScript Warning: "Could not map contract ID '@mozilla.org/fxaccounts/push;1' to CID {1b7db999-2ecd-4abf-bb95-a726896798ca} because no implementation of the CID is registered." {file: "jar:file:///C:/Program%20Files/Firefox%20Nightly/omni.ja!/components/components.manifest" line: 161}] ModLoad: 00007ffa`fbb00000 00007ffa`fbb33000 C:\WINDOWS\system32\rsaenh.dll ModLoad: 00007ffa`fd9f0000 00007ffa`fda16000 C:\WINDOWS\System32\bcrypt.dll ModLoad: 00007ffa`fc310000 00007ffa`fc31c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll ModLoad: 00007ffa`fcde0000 00007ffa`fce5e000 C:\WINDOWS\System32\bcryptPrimitives.dll (ba04.5b1c): Guard page violation - code 80000001 (first chance) ModLoad: 00007ffb`00290000 00007ffb`0032e000 C:\WINDOWS\System32\sechost.dll ModLoad: 00007ffa`fcc40000 00007ffa`fcc70000 C:\WINDOWS\SYSTEM32\SspiCli.dll (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception ModLoad: 00007ffa`fad90000 00007ffa`fadb3000 C:\WINDOWS\SYSTEM32\gpapi.dll (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception ModLoad: 00007ffa`ff840000 00007ffa`ff8e5000 C:\WINDOWS\System32\advapi32.dll (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h 0:016> g WARNING: Continuing a non-continuable exception (ba04.5b1c): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h
Thank you zhujiabeizjb! It looks like you are using the EMET security software. Do you mind testing with EMET disabled for Firefox (or maybe disabled completely)? If that does not fix the issue, then could you please try WinDbg again, and when you see these two lines: (5a90.be0c): Guard page violation - code 80000001 (first chance) (5a90.be0c): Single step exception - code 80000004 (first chance) Please type "k" and press Enter, and share the output here.
Actually it looks like the software formerly known as EMET is now built in to Windows Defender Exploit Guard. I tried all the settings but none of them made a difference between Firefox 61 (MSVC) and Firefox 63 (clang-cl). In other words, if a particular setting made Nightly fail to start, then it also made the release 61 fail to start. Could you please let us know if you have any Exploit Guard settings applied to Firefox? (It's under Windows Defender Security Center -> App & browser control -> Exploit protection) In addition to the previous one, could you please share the "k" output when you see these lines also: PayloadRestrictions!MitLibTriggerFailFast+0x1c: 00007ffa`d624b614 cd29 int 29h
(In reply to David Major [:dmajor] from comment #18) > Thank you zhujiabeizjb! It looks like you are using the EMET security > software. Do you mind testing with EMET disabled for Firefox (or maybe > disabled completely)? > > If that does not fix the issue, then could you please try WinDbg again, and > when you see these two lines: > (5a90.be0c): Guard page violation - code 80000001 (first chance) > (5a90.be0c): Single step exception - code 80000004 (first chance) > Please type "k" and press Enter, and share the output here. It's really because of Exploit protection! I even have thought this and try disabling all the Exploit protection options at the first beginning, however, I didn't notice firefox is in the specific "program option" list and it override the "system option". One bad thing is, I can't make firefox crash again. First, I specify the path of Firefox Nightly to override the general "firefox.exe", and firefox start successfully. Then I remove this setting and firefox crash again. But when I try to toggle the options one by one, when I change the "EAF" option (I'm not sure), it didn't crash, and never since that, even though I toggle it again. I regret that I didn't take a screenshot at first. And now I don't know how to make it crash again. The setting of "firefox.exe" is made automatically that I didn't aware of at first. Anyway, the default options is no problem for the latest Firefox Nightly build.
Is this something that SV could help with? Maybe trying different Exploit Guard options on various machines to see if there's a setting that behaves differently on clang-cl builds versus MSVC builds? (It may help to try them randomly instead of just going down the list, in case it requires a specific mix of settings)
Flags: needinfo?(ryanvm)
Flags: needinfo?(ryanvm) → needinfo?(tmaity)
We will test some scenarios and update the bug with our findings tomorrow.
Flags: needinfo?(tmaity)
Hello, I’ve managed to test this issue and I’ve found the following combinations of Exploit Guard settings, in order to reproduce the crash: [Preconditions:] 1. Windows Defender->App&browser control->Exploit protection settings-> the setting here is not relevant, you can have every item 'On by default' OR 'Off by default' 2. Navigate to Program settings->Add program to customize->Choose exact file path and add the path from firefox.exe installed on your machine 3. Select firefox.exe from the list and click Edit [Steps:] 1. Check “Override system settings” checkbox for ‘Arbitrary code guard(ACG)’ and switch the toggle in position ON 2. Launch firefox-> firefox crashes 3. Undo the modifications from Step 1 4. Check “Override system settings” checkbox for ‘Disable Win32k system calls’ and switch the toggle in position ON 5. Launch firefox-> firefox doesn’t start 6. Undo the modifications from Step 4 7. Check “Override system settings” checkbox for ‘Do not allow child processes’ and switch the toggle in position ON 8. Launch firefox-> firefox doesn’t start(FF Nightly doesn’t start, FF Beta/Release starts but is unusable-freezed) 9. Undo the modifications from Step 7 10. Check “Override system settings” checkbox for ‘Code integrity guard’ and switch the toggle in position ON 11. Launch firefox-> firefox doesn’t start: windows error- Bad Image 0xc0000428 is displayed [Test environment:] Win10 Pro x64 build (version 1709, OS Build 16299.611) Latest builds from Nightly, Beta and Release channels [Notes:] 1. Can be reproduced on Windows 10, version 1709 and later, as Exploit Guard applies only to these versions. 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds
Thanks Gyula, appreciate your help! Hello David, Kindly let us know what would be the next steps.
Also, would like to know if this is something that can be fixed quickly.
Flags: needinfo?(dmajor)
(In reply to Gyula Palko from comment #23) > Hello, > I’ve managed to test this issue and I’ve found the following combinations > of Exploit Guard settings, in order to reproduce the crash: > > [Preconditions:] > 1. Windows Defender->App&browser control->Exploit protection settings-> the > setting here is not relevant, you can have every item 'On by default' OR > 'Off by default' > 2. Navigate to Program settings->Add program to customize->Choose exact file > path and add the path from firefox.exe installed on your machine > 3. Select firefox.exe from the list and click Edit > > [Steps:] > 1. Check “Override system settings” checkbox for ‘Arbitrary code guard(ACG)’ > and switch the toggle in position ON > 2. Launch firefox-> firefox crashes > 3. Undo the modifications from Step 1 > 4. Check “Override system settings” checkbox for ‘Disable Win32k system > calls’ and switch the toggle in position ON > 5. Launch firefox-> firefox doesn’t start > 6. Undo the modifications from Step 4 > 7. Check “Override system settings” checkbox for ‘Do not allow child > processes’ and switch the toggle in position ON > 8. Launch firefox-> firefox doesn’t start(FF Nightly doesn’t start, FF > Beta/Release starts but is unusable-freezed) > 9. Undo the modifications from Step 7 > 10. Check “Override system settings” checkbox for ‘Code integrity guard’ and > switch the toggle in position ON > 11. Launch firefox-> firefox doesn’t start: windows error- Bad Image > 0xc0000428 is displayed > > [Test environment:] > Win10 Pro x64 build (version 1709, OS Build 16299.611) > Latest builds from Nightly, Beta and Release channels > > [Notes:] > 1. Can be reproduced on Windows 10, version 1709 and later, as Exploit Guard > applies only to these versions. > 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds That's interesting. My test result is it only crash after July 10th release and only happens on firefox nightly. The standard and developer version always work well. Do you think it is the same problem?
Aside - this message could be much more helpful: > When firefox crash, the mozregression says "WARNING : Process exited with code 3221226505" Windows process exit codes tend to be unrecognizable when printed in decimal. When printed in hex they are much easier to identify. For instance, that decimal value corresponds to 0xC0000409. I recognize that instantly as security check failure - typically a CFG (Control Flow Guard) failure. That is, firefox is making an illegal indirect function call, for some reason. Hexadecimal for large process exit codes doesn't solve this, but it does help.
(In reply to Gyula Palko from comment #23) > 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds In order to blame this on the clang transition, we would need to find a setting that has a different result between 61 and 63. Any problems that also occur with Release 61 are less interesting from the regression perspective. The bug reporter found one such setting but was unable to reproduce it later. Could you give it another try?
Flags: needinfo?(dmajor) → needinfo?(gyula.palko)
(In reply to David Major [:dmajor] from comment #28) > (In reply to Gyula Palko from comment #23) > > 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds > > In order to blame this on the clang transition, we would need to find a > setting that has a different result between 61 and 63. Any problems that > also occur with Release 61 are less interesting from the regression > perspective. The bug reporter found one such setting but was unable to > reproduce it later. Could you give it another try? Today I reboot the computer and it continue to crash! This time I'm sure it is only because of the option EAF. I guess EAF means "export address filter". It is the 11th option.(I'm not using a english version of windows.)
(In reply to David Major [:dmajor] from comment #28) > (In reply to Gyula Palko from comment #23) > > 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds > > In order to blame this on the clang transition, we would need to find a > setting that has a different result between 61 and 63. Any problems that > also occur with Release 61 are less interesting from the regression > perspective. The bug reporter found one such setting but was unable to > reproduce it later. Could you give it another try? I’ve checked again, but unfortunately I couldn’t find any setting that has different result between 61 and 63. On both builds the behavior is the same for every Exploit protection setting and both crash at launch, if Arbitrary code guard(ACG) is enabled(Step 1 from Comment 23). Also, I was able to reproduce the crash with older Nightly builds from February and March, so in my opinion it’s not related to clang transition, but the windows update starting with version 1709 introducing the Exploit Guard. I've generated a few crash reports: Nightly 63: https://crash-stats.mozilla.com/report/index/feea53ce-cb17-414d-981f-33d930180831 https://crash-stats.mozilla.com/report/index/466dc70f-fc49-469e-949d-e95630180831 Release 61: https://crash-stats.mozilla.com/report/index/fbc558ef-0e80-4526-9a21-77b520180831 https://crash-stats.mozilla.com/report/index/f0cfd45f-ff8b-4588-82e2-493ce0180831
(In reply to zhujiabeizjb from comment #29) > (In reply to David Major [:dmajor] from comment #28) > > (In reply to Gyula Palko from comment #23) > > > 2. Can be reproduced with Nightly 63, Beta 62 and Release 61 builds > > > > In order to blame this on the clang transition, we would need to find a > > setting that has a different result between 61 and 63. Any problems that > > also occur with Release 61 are less interesting from the regression > > perspective. The bug reporter found one such setting but was unable to > > reproduce it later. Could you give it another try? > > Today I reboot the computer and it continue to crash! This time I'm sure it > is only because of the option EAF. > > I guess EAF means "export address filter". It is the 11th option.(I'm not > using a english version of windows.) I've tested this and I could not reproduce the crash with the EAF option.
Flags: needinfo?(gyula.palko)
Crash Signature: [@ RegisterExecutableMemory]
(In reply to Gyula Palko from comment #30) > I’ve checked again, but unfortunately I couldn’t find any setting that has > different result between 61 and 63. On both builds the behavior is the same > for every Exploit protection setting and both crash at launch, if Arbitrary > code guard(ACG) is enabled(Step 1 from Comment 23). We won't support this for a long time, possible never. It's blocked on OOP JIT.
Depends on: 1381050
Whiteboard: sb?
Summary: Firefox Nightly crash at start → Firefox Nightly crash at start with Windows 10 ACG enabled
I don't think this is about ACG. Turning on ACG would definitely make any version of FF crash, so that's not interesting. As would 'Disable Win32k system calls'. Bruce pointed out that 0xC0000409 is a CFG failure; but we don't have CFG turned on in our clang builds. (Yet.) We did in our MSVC builds. In Comment #26 they say Nightly fails but Standard/Dev Edition work. And that they think it's related to EAF. We couldn't reproduce any EAF-related failures. But it might be something else about their machine. AIUI EAF causes a failure if access to the Export Address Tables comes from somewhere other than code from a exe/dll (meaning, it comes from executable code in memory created during process execution.) More info: https://www.honeynet.org/node/571 It seems possible that the reporter has something else going on in their machine (some anti-virus or other dll injection) that is triggering the EAF failure that we can't reproduce. I'm not sure why clang vs msvc would make a difference there though - that might just be bad luck? Ultimately, my current suspicion is either that the reporter had per-process settings applied to Nightly that they did not have applied to Standard/DevEdition, or possibly that something else on the machine is triggering the EAF failure, given that toggling that seemed to fix things the one time. So I would suggest double checking: - neither ACG nor win32k syscalls mitigations are enabled via Exploit Protection (either at the system level or at the per-program Firefox level) - that Nightly/Standard edition have the same exploit mitigation settings And then getting the stacktraces dmajor mentioned in #18 or #19 - and add in one more command right after you type 'k' for the stacktrace, and that's 'lm' to get the list of loaded modules.
Actually; it looks like there's definitely at least one third party injection: SogouInput "a popular Chinese Pinyin input method editor". That's not a smoking gun, but it's a clue. So besides the above, I would also ask the reporter to additionally get Firefox into a state where it crashes; and then close it and either disable or uninstall this tool (depending on whats possible) and open it and see if it still crashes. SV could also test this. These lines may give a clue to the version... > ModLoad: 00000000`10000000 00000000`100e4000 C:\Program Files (x86)\SogouInput\8.9.0.2180\Resource.dll > ModLoad: 00007ffa`a4d70000 00007ffa`a4fd7000 C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1819\PicFace64.dll > ModLoad: 00007ffa`b5de0000 00007ffa`b5df8000 C:\Program Files (x86)\SogouInput\Components\VoiceInput\1.0.0.143\VoiceInput64.dll
Summary: Firefox Nightly crash at start with Windows 10 ACG enabled → Firefox Nightly crash at start
ni on kkumari@softvision.com to test what is described in Comment 34.
Flags: needinfo?(kkumari)
Hello, I tested comment 34 but couldn't reproduce the crash using Sogou Pinyin. User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0 However I am seeing another crash at start since yesterday irrespective of Sogou Pinyin STR: 1. Launch profile manager 2. Create a profile e.g. P 3. Launch nightly using 'p' 4. Exit Nightly. 5. Launch Firefox 62 (any other Fx version) using profile P Observed: Crash window at start. Clicking restart browser button in crash window trigger another crash. I could produce crash 6-7 times repeatedly this way. Sometimes only way to open another Fx version is to create new profile. Using Nightly using P works fine. I have observed this issue on Linux and Mac OS as well. https://crash-stats.mozilla.com/report/index/cc88d996-7130-45c5-97ce-9a6c60180912 https://crash-stats.mozilla.com/report/index/5070fed7-de21-4a19-a76d-d7bff0180912 https://crash-stats.mozilla.com/report/index/15794830-f196-4f9c-a1c9-6f4810180911 https://crash-stats.mozilla.com/report/index/18109dbc-8cbe-458a-94eb-4c6220180911 https://crash-stats.mozilla.com/report/index/1c779707-4a18-4691-88a3-962b20180911
Flags: needinfo?(kkumari)
(In reply to Kanchan Kumari QA from comment #36) > Hello, I tested comment 34 but couldn't reproduce the crash using Sogou > Pinyin. And this was with EAF enabled?
Flags: needinfo?(kkumari)
Attached image EAF Setting.PNG (deleted) —
(In reply to Tom Ritter [:tjr] from comment #37) > (In reply to Kanchan Kumari QA from comment #36) > > Hello, I tested comment 34 but couldn't reproduce the crash using Sogou > > Pinyin. > > And this was with EAF enabled? No that test was without EAF enabled. After I apply EAF setting to Firefox (please see attachment) I am not able to launch Firefox. There is error "Firefox has stopped working. A problem caused the program to stop working correctly. Windows will close the program and notify you if solution is available." If I only check Override system settings and leave it to off. Firefox runs without any issue. Let me know if I am missing something here and also how do I get log file in this case? fyi-I have Kasperasky antivirus installed too.
Flags: needinfo?(kkumari)
Flags: needinfo?(jmathies)
Flags: needinfo?(jmathies)
Priority: -- → P3
Whiteboard: sb? → sb+

Closing because no crashes reported for 12 weeks.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: