Open crispinwright opened 5 years ago
That error makes it look like a file is missing from the installation, although that would be very strange. Can you capture a procmon log from when this error hits? You can email it to windbgfb@microsoft.com if you don't want to post it here.
Yeah that was the first thing I checked Tim, the file is there:
When I copy that folder to another location and run the exe, windbg runs fine (and is useable as well, it's not just a "UI load" that is fragile underneath if that makes sense).
I think the missing file error is a red herring, I just can't find a way to run windbg.next via windbg.old (if that makes sense) if I could do that I could see the stack and tell you whats going on....I'll do a procmon now with a filter for "DbgX.Shell.exe" (let me know if you want one without a filter as well) and i'll flick it to you.
I've had a look at the dump I shared with you - without symbols it's not fun, but none of the threads are showing an exception when I !CLRStack which is interesting - I would have expected (kind of) to see that, at least I can see the stack though on the MainUI Thread, and that looks like this:
0:000> !CLRStack OS Thread Id: 0x30f8 (0) Child SP IP Call Site 0000005b6db4dba8 00007ffe7d8a1224 [InlinedCallFrame: 0000005b6db4dba8] MS.Win32.UnsafeNativeMethods.MessageBox(System.Runtime.InteropServices.HandleRef, System.String, System.String, Int32) 0000005b6db4dba8 00007ffe5913a76b [InlinedCallFrame: 0000005b6db4dba8] MS.Win32.UnsafeNativeMethods.MessageBox(System.Runtime.InteropServices.HandleRef, System.String, System.String, Int32) 0000005b6db4db80 00007ffe5913a76b DomainBoundILStubClass.IL_STUB_PInvoke(System.Runtime.InteropServices.HandleRef, System.String, System.String, Int32) 0000005b6db4dc40 00007ffe52a73821 System.Windows.MessageBox.ShowCore(IntPtr, System.String, System.String, System.Windows.MessageBoxButton, System.Windows.MessageBoxImage, System.Windows.MessageBoxResult, System.Windows.MessageBoxOptions) 0000005b6db4dd00 00007ffe0e5b29fb DbgX.Shell.MainWindowViewModel.OnReport(DbgX.Interfaces.Listeners.ReportedMessage) 0000005b6db4dd50 00007ffe0e5b288c DbgX.Services.LogReporter+c__DisplayClass7_0.b__0() 0000005b6db4ddb0 00007ffe58f63bc1 System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) 0000005b6db4de20 00007ffe58f63a75 System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) 0000005b6db4de70 00007ffe58f66c61 System.Windows.Threading.DispatcherOperation.InvokeImpl() 0000005b6db4def0 00007ffe59190e7a MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object) 0000005b6db4df30 00007ffe6c4b5ab3 System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 0000005b6db4e000 00007ffe6c4b5944 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 0000005b6db4e030 00007ffe6c4b5912 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 0000005b6db4e080 00007ffe58f668e6 MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object) 0000005b6db4e0d0 00007ffe58f666e0 System.Windows.Threading.DispatcherOperation.Invoke() 0000005b6db4e130 00007ffe58f61b4d System.Windows.Threading.Dispatcher.ProcessQueue() 0000005b6db4e1c0 00007ffe58f61f5d System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) 0000005b6db4e240 00007ffe58f63e12 MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) 0000005b6db4e2d0 00007ffe58f63d33 MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) 0000005b6db4e320 00007ffe58f63b7c System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) 0000005b6db4e390 00007ffe58f63a75 System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) 0000005b6db4e3e0 00007ffe58f61474 System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) 0000005b6db4e480 00007ffe58f633ab MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) 0000005b6db4e580 00007ffe591445b1 DomainBoundILStubClass.IL_STUB_ReversePInvoke(Int64, Int32, Int64, Int64) 0000005b6db4e890 00007ffe6d8d21fe [InlinedCallFrame: 0000005b6db4e890] MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) 0000005b6db4e890 00007ffe58f9f138 [InlinedCallFrame: 0000005b6db4e890] MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) 0000005b6db4e860 00007ffe58f9f138 DomainBoundILStubClass.IL_STUB_PInvoke(System.Windows.Interop.MSG ByRef) 0000005b6db4e920 00007ffe58f5e97b System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) 0000005b6db4e9c0 00007ffe5214768b System.Windows.Application.RunDispatcher(System.Object) 0000005b6db4ea00 00007ffe52147486 System.Windows.Application.RunInternal(System.Windows.Window) 0000005b6db4ea60 00007ffe0e2c04da DbgX.Shell.Program.Main() 0000005b6db4ecc0 00007ffe6d8d6da3 [GCFrame: 0000005b6db4ecc0]
So it looks like a couple of exceptions are happening, one seems to sort of get handled and then the second one doesn't and it's all over.
I just installed WinDbg Preview today. It started fine when running as a normal user. Then when I tried to run it as administrator (to try out time travel debugging) I get the same error, albeit a different dialog than attached above
The problem turned out to be that you have to originally install WinDbg Preview using an account that has admin privileges, not as a normal user. Then you can start it with admin rights.
Just posting this comment in case someone else is having the same issue.
I just installed WinDbg Preview today. It started fine when running as a normal user. Then when I tried to run it as administrator (to try out time travel debugging) I get the same error, albeit a different dialog than attached above
The problem turned out to be that you have to originally install WinDbg Preview using an account that has admin privileges, not as a normal user. Then you can start it with admin rights.
Just posting this comment in case someone else is having the same issue.
Thanks, that worked for me! Had to install it as both an admin and as a normal user. I was then able to "run as admin" while logged in to a normal user account
I have a full procdump if you guys need it, Andy mentioned it might be due to an incompatible dll being injected.
I've tried to load the executable DbgX.Shell.exe using WinDbg but it's obviously checking the parent == explorer because I can't load it (in my user context) in windbg, it tells me access denied. Otherwise I would have loaded it and set a breakpoint on the error and given you more information..........
Let me know if you need more information chaps.
I attached WinDbg to WinDbg.Next (post crash) and here's the list of loaded modules, obviously you wont see the culprit if it's load fails causing the crash:
Symbol search path is: srvC:\Symbolshttp://msdl.microsoft.com/download/symbols;c:\symbols Executable search path is: ModLoad: 00000183
63fd0000 00000183
64056000 C:\Program Files\WindowsApps\Microsoft.WinDbg_1.1904.18001.0_neutral__8wekyb3d8bbwe\DbgX.Shell.exe ModLoad: 00007ffb74320000 00007ffb
744f0000 C:\Windows\SYSTEM32\ntdll.dll ModLoad: 00007ffb60c80000 00007ffb
60ce6000 C:\Windows\SYSTEM32\MSCOREE.DLL ModLoad: 00000000577d0000 00000000
57865000 C:\Windows\System32\SYSFER.DLL ModLoad: 00007ffb71920000 00007ffb
719cb000 C:\Windows\System32\KERNEL32.dll ModLoad: 00007ffb71170000 00007ffb
7138d000 C:\Windows\System32\KERNELBASE.dll ModLoad: 00007ffb719d0000 00007ffb
71a72000 C:\Windows\System32\ADVAPI32.dll ModLoad: 00007ffb71df0000 00007ffb
71e8e000 C:\Windows\System32\msvcrt.dll ModLoad: 00007ffb71d30000 00007ffb
71d89000 C:\Windows\System32\sechost.dll ModLoad: 00007ffb72b80000 00007ffb
72ca1000 C:\Windows\System32\RPCRT4.dll ModLoad: 00007ffb60bd0000 00007ffb
60c6c000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll ModLoad: 00007ffb71d90000 00007ffb
71de2000 C:\Windows\System32\SHLWAPI.dll ModLoad: 00007ffb723e0000 00007ffb
726a5000 C:\Windows\System32\combase.dll ModLoad: 00007ffb716e0000 00007ffb
717d4000 C:\Windows\System32\ucrtbase.dll ModLoad: 00007ffb71390000 00007ffb
713fa000 C:\Windows\System32\bcryptPrimitives.dll ModLoad: 00007ffb71e90000 00007ffb
71ec4000 C:\Windows\System32\GDI32.dll ModLoad: 00007ffb714a0000 00007ffb
71621000 C:\Windows\System32\gdi32full.dll ModLoad: 00007ffb71bc0000 00007ffb
71d25000 C:\Windows\System32\USER32.dll ModLoad: 00007ffb717e0000 00007ffb
717fe000 C:\Windows\System32\win32u.dll ModLoad: 00007ffb72b50000 00007ffb
72b7e000 C:\Windows\System32\IMM32.DLL ModLoad: 00007ffb707a0000 00007ffb
707af000 C:\Windows\System32\kernel.appcore.dll ModLoad: 00007ffb60c70000 00007ffb
60c7a000 C:\Windows\SYSTEM32\VERSION.dll ModLoad: 00007ffb601e0000 00007ffb
60bcd000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll ModLoad: 00007ffb5ff90000 00007ffb
60087000 C:\Windows\SYSTEM32\MSVCR120_CLR0400.dll ModLoad: 00007ffb5e840000 00007ffb
5fdd1000 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\a50e4fdd1f3d4ffe275988b3fc12e863\mscorlib.ni.dll ModLoad: 00007ffb741e0000 00007ffb
74318000 C:\Windows\System32\ole32.dll ModLoad: 00007ffb6efe0000 00007ffb
6f075000 C:\Windows\system32\uxtheme.dll ModLoad: 00007ffb5e6f0000 00007ffb
5e81b000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll ModLoad: 00007ffb5da80000 00007ffb
5e6c1000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System\503705fe017ab8a60b9a8317d7f5f446\System.ni.dll ModLoad: 00007ffb483e0000 00007ffb
48e30000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\bfe00707a9b731df29fda7aa5b8bf354\System.Core.ni.dll ModLoad: 00007ffb3a0a0000 00007ffb
3a59b000 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\6bb98bdf765b56b112bb142fc9a0c667\WindowsBase.ni.dll ModLoad: 00007ffb701f0000 00007ffb
70207000 C:\Windows\SYSTEM32\CRYPTSP.dll ModLoad: 00007ffb6fc60000 00007ffb
6fc93000 C:\Windows\system32\rsaenh.dll ModLoad: 00007ffb706c0000 00007ffb
706eb000 C:\Windows\SYSTEM32\bcrypt.dll ModLoad: 00007ffb70210000 00007ffb
7021b000 C:\Windows\SYSTEM32\CRYPTBASE.dll ModLoad: 00007ffb392c0000 00007ffb
3a09d000 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\897304fb863093074cb4f88906065cad\PresentationCore.ni.dll ModLoad: 00007ffb311b0000 00007ffb
32804000 C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatio5ae0f00f#\b6ed89517ad6846327429fd0ae654a56\PresentationFramework.ni.dll ModLoad: 00007ffb39050000 00007ffb
392ba000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\c7a91e04b4e481948ddf559ac90d0773\System.Xaml.ni.dll ModLoad: 00007ffb69910000 00007ffb
69b7a000 C:\Windows\SYSTEM32\dwrite.dll ModLoad: 00007ffb38ea0000 00007ffb
39050000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpfgfx_v0400.dll ModLoad: 00007ffb71a80000 00007ffb
71b40000 C:\Windows\System32\OLEAUT32.dll ModLoad: 00007ffb71400000 00007ffb
7149c000 C:\Windows\System32\msvcp_win.dll ModLoad: 00007ffb38df0000 00007ffb
38e9e000 C:\Windows\SYSTEM32\MSVCP120_CLR0400.dll ModLoad: 00007ffb38ce0000 00007ffb
38df0000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll ModLoad: 00007ffb6ed60000 00007ffb
6ed86000 C:\Windows\SYSTEM32\slc.dll ModLoad: 00007ffb6ed00000 00007ffb
6ed27000 C:\Windows\SYSTEM32\sppc.dll ModLoad: 00007ffb44560000 00007ffb
4468b000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\5bc780101e4f132977fe936a799dca7c\System.Configuration.ni.dll ModLoad: 00007ffb45540000 00007ffb
45dcc000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\7f751ffcbfb04798f13a987a408e000a\System.Xml.ni.dll ModLoad: 00007ffb72cd0000 00007ffb
741d5000 C:\Windows\System32\shell32.dll ModLoad: 00007ffb71860000 00007ffb
718a2000 C:\Windows\System32\cfgmgr32.dll ModLoad: 00007ffb708c0000 00007ffb
70f99000 C:\Windows\System32\windows.storage.dll ModLoad: 00007ffb707b0000 00007ffb
707fc000 C:\Windows\System32\powrprof.dll ModLoad: 00007ffb71630000 00007ffb
716d9000 C:\Windows\System32\shcore.dll ModLoad: 00007ffb70780000 00007ffb
70794000 C:\Windows\System32\profapi.dll ModLoad: 00007ffb6ec50000 00007ffb
6ec76000 C:\Windows\SYSTEM32\dwmapi.dll ModLoad: 00007ffb71fd0000 00007ffb
7212a000 C:\Windows\System32\MSCTF.dll ModLoad: 00007ffb72330000 00007ffb
723cf000 C:\Windows\System32\clbcatq.dll ModLoad: 00007ffb5a3d0000 00007ffb
5a3f9000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windc7c43db6#\d2325306044ea34acf10b66df82a9d1a\System.Windows.Interactivity.ni.dll ModLoad: 00007ffb628e0000 00007ffb
62aa2000 C:\Windows\SYSTEM32\urlmon.dll ModLoad: 00007ffb69ee0000 00007ffb
6a190000 C:\Windows\SYSTEM32\iertutil.dll ModLoad: 00007ffb703f0000 00007ffb
7041c000 C:\Windows\SYSTEM32\SspiCli.dll ModLoad: 00007ffb3e9f0000 00007ffb
3eb4e000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\c5bbde13651d93af317df10c717d00b6\System.Management.ni.dll ModLoad: 00007ffb61cf0000 00007ffb
61cf9000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime\7466a443d64c97771b22b91b0cb7992b\System.Runtime.ni.dll ModLoad: 00007ffb37a10000 00007ffb
37b67000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Compba577418#\8d6e8e0c185b3cede30d3d870880c6e2\System.ComponentModel.Composition.ni.dll ModLoad: 00007ffb5c850000 00007ffb
5c855000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Collections\754fdcd76ccbc2ebc3773bb3f4e34808\System.Collections.ni.dll ModLoad: 00007ffb5b020000 00007ffb
5b025000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Linq\4800f097985fe525396351cf09f0a1df\System.Linq.ni.dll ModLoad: 00007ffb5ae30000 00007ffb
5ae35000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Globalization\ee63c810a1daa53348a06cca362a4182\System.Globalization.ni.dll ModLoad: 00007ffb49230000 00007ffb
492ca000 C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatioaec034ca#\ef55858693354342ded3037271f06413\PresentationFramework.Aero2.ni.dll ModLoad: 00007ffb5ae20000 00007ffb
5ae25000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runt1e58aa76#\469fcff3b591383d952f125eba309f27\System.Runtime.Extensions.ni.dll ModLoad: 00007ffb5a2e0000 00007ffb
5a2e5000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Threading\c57b9972358c2a26279669dabec03f29\System.Threading.ni.dll ModLoad: 00007ffb4a310000 00007ffb
4a49d000 C:\Windows\SYSTEM32\d3d9.dll ModLoad: 00007ffb34fa0000 00007ffb
374dd000 C:\Windows\SYSTEM32\igdumdim64.dll ModLoad: 00007ffb72720000 00007ffb
72b49000 C:\Windows\System32\SETUPAPI.dll ModLoad: 00007ffb388f0000 00007ffb
38ad9000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\70292cd6e198a6a52645d7ada62d0b74\System.Drawing.ni.dll ModLoad: 00007ffb53490000 00007ffb
534e2000 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsForm0b574481#\2a993e6630b69e696e63177441284496\WindowsFormsIntegration.ni.dll ModLoad: 00007ffb38710000 00007ffb
388ee000 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\055d57ec962db278f79f3e4ae86f02c4\Microsoft.CSharp.ni.dll ModLoad: 00007ffb4d790000 00007ffb
4d808000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\07d5535d0da9b43a33292a05379ebefb\System.Xml.Linq.ni.dll ModLoad: 00007ffb37810000 00007ffb
37a04000 C:\Program Files\WindowsApps\Microsoft.WinDbg_1.1904.18001.0_neutral8wekyb3d8bbwe\amd64\dbghelp.dll ModLoad: 00007ffb291b0000 00007ffb
2994c000 C:\Program Files\WindowsApps\Microsoft.WinDbg_1.1904.18001.0_neutral8wekyb3d8bbwe\amd64\dbgeng.dll ModLoad: 00007ffb4b670000 00007ffb
4b724000 C:\Program Files\WindowsApps\Microsoft.WinDbg_1.1904.18001.0_neutral8wekyb3d8bbwe\amd64\dbgmodel.dll ModLoad: 00007ffb6a250000 00007ffb
6a286000 C:\Windows\SYSTEM32\XmlLite.dll ModLoad: 00007ffb4d740000 00007ffb
4d788000 C:\Program Files\WindowsApps\Microsoft.WinDbg_1.1904.18001.0_neutral8wekyb3d8bbwe\amd64\srcsrv.dll ModLoad: 00007ffb6bb10000 00007ffb
6bb1c000 C:\Windows\SYSTEM32\Secur32.dll ModLoad: 00007ffb56660000 00007ffb
566be000 C:\Windows\System32\Windows.ApplicationModel.dll ModLoad: 00007ffb6f280000 00007ffb
6f39c000 C:\Windows\System32\twinapi.appcore.dll ModLoad: 00007ffb6cf20000 00007ffb
6d056000 C:\Windows\SYSTEM32\WinTypes.dll ModLoad: 00007ffb1a950000 00007ffb
1ae07000 C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\53e6d98278ba2dc5d859b6ba19a62974\Windows.ApplicationModel.ni.dll ModLoad: 00007ffb58300000 00007ffb
58378000 C:\Windows\SYSTEM32\daxexec.dll ModLoad: 00007ffb5c810000 00007ffb
5c81a000 C:\Windows\SYSTEM32\FLTLIB.DLL ModLoad: 00007ffb588e0000 00007ffb
58934000 C:\Windows\SYSTEM32\container.dll ModLoad: 00007ffb6fdd0000 00007ffb
6fe08000 C:\Windows\SYSTEM32\IPHLPAPI.DLL ModLoad: 00007ffb6f550000 00007ffb
6f582000 C:\Windows\SYSTEM32\ntmarta.dll ModLoad: 00007ffb42b80000 00007ffb
42cb8000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll ModLoad: 00007ffb6de00000 00007ffb
6dfa8000 C:\Windows\SYSTEM32\WindowsCodecs.dll ModLoad: 00007ffb37600000 00007ffb
37810000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Wind412bbddf#\6b39ae267b4a8f945eea7cb96d7a3f9e\System.Windows.Controls.Ribbon.ni.dll ModLoad: 00007ffb42980000 00007ffb
42a2b000 C:\Windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\49b80b66781d89e5306cd4006b154e0c\UIAutomationTypes.ni.dll ModLoad: 00007ffb33970000 00007ffb
33b1a000 C:\Windows\SYSTEM32\UIAutomationCore.dll ModLoad: 00007ffb6fed0000 00007ffb
6feef000 C:\Windows\SYSTEM32\USERENV.dll ModLoad: 00007ffb6ebc0000 00007ffb
6ebd3000 C:\Windows\SYSTEM32\wtsapi32.dll ModLoad: 00007ffb705c0000 00007ffb
70616000 C:\Windows\SYSTEM32\WINSTA.dll ModLoad: 00007ffb535d0000 00007ffb
53619000 C:\Windows\system32\dataexchange.dll ModLoad: 00007ffb6c110000 00007ffb
6c3c6000 C:\Windows\system32\d3d11.dll ModLoad: 00007ffb6e550000 00007ffb
6e6a1000 C:\Windows\system32\dcomp.dll ModLoad: 00007ffb6f820000 00007ffb
6f8bf000 C:\Windows\system32\dxgi.dll ModLoad: 00007ffb636b0000 00007ffb
64523000 C:\Windows\SYSTEM32\igc64.dll ModLoad: 00007ffb4ab20000 00007ffb
4abb1000 C:\Windows\SYSTEM32\mscms.dll ModLoad: 00007ffb492d0000 00007ffb
4931b000 C:\Windows\SYSTEM32\WindowsCodecsExt.dll ModLoad: 00007ffb71800000 00007ffb
71855000 C:\Windows\System32\WINTRUST.dll ModLoad: 00007ffb70800000 00007ffb
70810000 C:\Windows\System32\MSASN1.dll ModLoad: 00007ffb70fa0000 00007ffb
71169000 C:\Windows\System32\CRYPT32.dll ModLoad: 00007ffb59690000 00007ffb
596b2000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsecimpl.dll ModLoad: 00007ffb5fde0000 00007ffb
5fe8c000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.2457_none_a13eaee9d8fd5c07\COMCTL32.dll ModLoad: 00007ffb72cb0000 00007ffb
72ccc000 C:\Windows\System32\imagehlp.dll ModLoad: 00007ffb6f790000 00007ffb
6f7b3000 C:\Windows\SYSTEM32\gpapi.dll ModLoad: 00007ffb4ada0000 00007ffb
4adcf000 C:\Windows\SYSTEM32\cryptnet.dll ModLoad: 00007ffb6d930000 00007ffb
6d93b000 C:\Windows\SYSTEM32\WINNSI.DLL ModLoad: 00007ffb71b40000 00007ffb
71b48000 C:\Windows\System32\NSI.dll ModLoad: 00007ffb56790000 00007ffb
567af000 C:\Windows\system32\msctfui.dll ModLoad: 00007ffb41f30000 00007ffb
42381000 C:\Windows\SYSTEM32\D3DCOMPILER_47.dll ModLoad: 00007ffb6ed90000 00007ffb
6edb3000 C:\Windows\SYSTEM32\WINMM.dll ModLoad: 00007ffb6ed30000 00007ffb
6ed5b000 C:\Windows\SYSTEM32\WINMMBASE.dll (387c.2a60): Break instruction exception - code 80000003 (first chance) ntdll!DbgBreakPoint: 00007ffb`743c9350 cc int 3