Code: Select all
Exception in [F:\FarLce\plugins\visualcompare\VisComp.dll] plugin.
==============================================================
System information:
Windows NT, version 10.0.17763
==============================================================
FAR.EXE information:
Version info: 3.0.5302
File size: 4265472 bytes
Time stamp: 05.11.2018 04:05:41
Hdr checksum: 0x00419D51 (computed: 0x00419D51)
==============================================================
Exception C0000005 "ACCESS_VIOLATION" at 00FB1886 has 0001007F flags.
Attempt to READ at address 00000018
EBP: 00AFE520 EIP: 00FB1886 ESP: 00AFE520 CS: 00000023 SS: 0000002B Flags: 00210202
EDI: 00000000 ESI: 0955208A EBX: 00000001 EDX: 00AFE528 ECX: 00000018 EAX: 00000001
GS: 0000002B FS: 00000053 ES: 0000002B DS: 0000002B
Cw: 0000027F Sw: 00000020 Tw: 0000FFFF EOf: 00E6015E Es: 00000000 DOf: 00000000 Ds: 00000000 Cr0: 00000000
dr0: 00000000 dr1: 00000000 dr2: 00000000 dr3: 00000000 dr6: 00000000 dr7: 00000000
==============================================================
Addr[ 1]: 00FB1886 Mod:00DD0000 lMod:00DD0000 "Far.exe"+001E0C86 at ".text"+001E0886: "__cdecl Text(point, FarColor const &, std::basic_string_view<wchar_t, std::char_traits<wchar_t>>)" + 00000006
Addr[ 2]: 0100C76A Mod:00DD0000 lMod:00DD0000 "Far.exe"+0023BB6A at ".text"+0023B76A: "__stdcall pluginapi::apiText(int, int, FarColor const *, wchar_t const *)" + 000000CA
Addr[ 3]: 01568FE1 Mod:01550000 lMod:01550000 "VisComp.dll"+000183E1 at ".text"+00017FE1: "ProcessEditorEventW" + 0000CD25
Addr[ 4]: 0156A550 Mod:01550000 lMod:01550000 "VisComp.dll"+00019950 at ".text"+00019550: "ProcessEditorEventW" + 0000E294
Addr[ 5]: 01566CFD Mod:01550000 lMod:01550000 "VisComp.dll"+000160FD at ".text"+00015CFD: "ProcessEditorEventW" + 0000AA41
Addr[ 6]: 015670BA Mod:01550000 lMod:01550000 "VisComp.dll"+000164BA at ".text"+000160BA: "ProcessEditorEventW" + 0000ADFE
Addr[ 7]: 0155969C Mod:01550000 lMod:01550000 "VisComp.dll"+00008A9C at ".text"+0000869C: "__dbk_fcall_wrapper" + 000032B0
Stack details:
Addr[ 1]: 00FB1886 Mod:00DD0000 lMod:00DD0000 "Far.exe"+001E0C86 at ".text"+001E0886: "__cdecl Text(point, FarColor const &, std::basic_string_view<wchar_t, std::char_traits<wchar_t>>)" + 00000006
Stack:
1) 00000002 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
2) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) 09552088 = 20 00 00 00 69 64 00 00 1E EB E8 81 00 CD 03 8C ...id...лиЃ.Н.Њ
4) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
5) 3D4A4C52 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
6) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
7) 0954AEB0 = E8 90 56 01 08 00 00 00 88 20 55 09 38 20 55 09 иђV.....€ U.8 U.
8) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
9) 00AFE6DC = 7C E8 AF 00 27 6D 56 01 44 E7 AF 00 01 00 00 00 |иЇ.'mV.DзЇ.....
10) 75CEF870 = 8B FF 55 8B EC 83 EC 18 53 56 57 8B 7D 0C C6 45 ‹.U‹мѓм.SVW‹}.ЖE
-00FB1846 A0 00 00 00 83 mov al, [-7D000000h]
-00FB184B A0 98 00 00 00 mov al, [98h]
-00FB1850 FB sti
-00FB1851 5F pop edi
-00FB1852 5E pop esi
-00FB1853 5B pop ebx
-00FB1854 8B E5 mov esp, ebp
-00FB1856 5D pop ebp
-00FB1857 C3 ret
-00FB1858 33 C0 xor eax, eax
-00FB185A 8D 4D F4 lea ecx, [ebp-0Ch]
-00FB185D 89 45 F4 mov [ebp-0Ch], eax
-00FB1860 89 45 F8 mov [ebp-8], eax
-00FB1863 89 45 FC mov [ebp-4], eax
-00FB1866 E8 B5 8E EB FF call 0E6A720h ;-147146h Far.exe::__thiscall std::bad_any_cast::bad_any_cast(void)
-00FB186B 68 24 DE 16 01 push 116DE24h ;+1BC5B9h Far.exe::__TI3?AVbad_any_cast@std@@
-00FB1870 8B C1 mov eax, ecx
-00FB1872 50 push eax
-00FB1873 E8 B1 99 0E 00 call 109B229h ;+0E99B6h Far.exe::__CxxThrowException@8
-00FB1878 db CCh dup (8)
;
;; Far.exe::__cdecl Text(point, FarColor const &, std::basic_string_view<wchar_t, std::char_traits<wchar_t>>)
;
-00FB1880 55 push ebp
-00FB1881 8B EC mov ebp, esp
-00FB1883 83 E4 F8 and esp, -8 ;-8 "...."
>00FB1886 8B 01 mov eax, [ecx]
+00FB1888 FF 75 14 push dword ptr [ebp+14h]
+00FB188B A3 A0 F8 18 01 mov [118F8A0h], eax ;+1DE015h Far.exe::FarColor CurColor
+00FB1890 8B 41 04 mov eax, [ecx+4]
+00FB1893 FF 75 10 push dword ptr [ebp+10h]
+00FB1896 A3 A4 F8 18 01 mov [118F8A4h], eax ; 00 00 00 00 0F 00 00 FF 04 00 00 FF 00 00 00 00 ................
+00FB189B 8B 41 08 mov eax, [ecx+8]
+00FB189E A3 A8 F8 18 01 mov [118F8A8h], eax ; 0F 00 00 FF 04 00 00 FF 00 00 00 00 00 00 00 00 ................
+00FB18A3 8B 41 0C mov eax, [ecx+0Ch]
+00FB18A6 A3 AC F8 18 01 mov [118F8ACh], eax ; 04 00 00 FF 00 00 00 00 00 00 00 00 19 00 00 00 ................
+00FB18AB 8B 41 10 mov eax, [ecx+10h]
+00FB18AE A3 B0 F8 18 01 mov [118F8B0h], eax ; 00 00 00 00 00 00 00 00 19 00 00 00 01 00 00 00 ................
+00FB18B3 8B 41 14 mov eax, [ecx+14h]
+00FB18B6 A3 B4 F8 18 01 mov [118F8B4h], eax ; 00 00 00 00 19 00 00 00 01 00 00 00 00 00 C0 03 ..............А.
+00FB18BB 8B 45 08 mov eax, [ebp+8]
+00FB18BE A3 98 F8 18 01 mov [118F898h], eax ;+1DDFDAh Far.exe::int CurX
+00FB18C3 8B 45 0C mov eax, [ebp+0Ch]
Addr[ 2]: 0100C76A Mod:00DD0000 lMod:00DD0000 "Far.exe"+0023BB6A at ".text"+0023B76A: "__stdcall pluginapi::apiText(int, int, FarColor const *, wchar_t const *)" + 000000CA
Stack:
1) 00000002 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
2) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) 00000018 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
4) 09552088 = 20 00 00 00 69 64 00 00 1E EB E8 81 00 CD 03 8C ...id...лиЃ.Н.Њ
5) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
6) 07343358 = B4 7E 56 01 30 7D 28 09 03 00 00 00 00 00 00 00 ґ~V.0}(.........
7) 09287D30 = 94 91 56 01 C8 B2 9A 05 70 C9 4B 09 08 AC 54 09 ”‘V.ИІљ.pЙK..¬T.
8) 015692A1 = 5F 5E 5B 5D C2 08 00 55 8B EC 83 C4 E8 53 56 57 _^[]В..U‹мѓДиSVW
9) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
-0100C72A 00 00 add [eax], al
-0100C72C 59 pop ecx
-0100C72D 5F pop edi
-0100C72E 5E pop esi
-0100C72F 5B pop ebx
-0100C730 8B E5 mov esp, ebp
-0100C732 5D pop ebp
-0100C733 C2 10 00 ret 10h ;00000010
-0100C736 83 EC 08 sub esp, 8 ;8 "...."
-0100C739 8D 71 02 lea esi, [ecx+2]
-0100C73C 8B D4 mov edx, esp
-0100C73E 89 0A mov [edx], ecx
-0100C740 66 8B 01 mov ax, [ecx]
-0100C743 83 C1 02 add ecx, 2 ;2 "...."
-0100C746 66 85 C0 test ax, ax
-0100C749 75 F5 jne -9 ;0100C740 Far.exe::__stdcall pluginapi::apiText(int, int, FarColor const *, wchar_t const *)+0A0h
-0100C74B 8B 45 08 mov eax, [ebp+8]
-0100C74E 2B CE sub ecx, esi
-0100C750 D1 F9 sar ecx, 1
-0100C752 83 EC 08 sub esp, 8 ;8 "...."
-0100C755 89 4A 04 mov [edx+4], ecx
-0100C758 8B D4 mov edx, esp
-0100C75A 8B 4D 10 mov ecx, [ebp+10h]
-0100C75D 89 02 mov [edx], eax
-0100C75F 8B 45 0C mov eax, [ebp+0Ch]
-0100C762 89 42 04 mov [edx+4], eax
-0100C765 E8 16 51 FA FF call 0FB1880h ;-5AEE5h Far.exe::__cdecl Text(point, FarColor const &, std::basic_string_view<wchar_t, std::char_traits<wchar_t>>)
>0100C76A 83 C4 10 add esp, 10h ;16 "...."
+0100C76D 8B 4D F4 mov ecx, [ebp-0Ch]
+0100C770 64 89 0D 00 00 00 00 mov fs:[0],ecx
+0100C777 59 pop ecx
+0100C778 5F pop edi
+0100C779 5E pop esi
+0100C77A 5B pop ebx
+0100C77B 8B E5 mov esp, ebp
+0100C77D 5D pop ebp
+0100C77E C2 10 00 ret 10h ;00000010
;
;; Far.exe::__catch$?apiText@pluginapi@@YGXHHPBUFarColor@@PB_W@Z$0 0063c781 f
;
+0100C781 8B 55 EC mov edx, [ebp-14h]
+0100C784 8D 4D DC lea ecx, [ebp-24h]
+0100C787 E8 34 97 F1 FF call 0F25EC0h ;-0E68C7h Far.exe::__cdecl CurrentException(std::exception const &)
+0100C78C 8B F0 mov esi, eax
+0100C78E E8 6D F5 FE FF call 0FFBD00h ;-10A8Eh Far.exe::__cdecl GlobalExceptionPtr(void)
+0100C793 56 push esi
+0100C794 50 push eax
+0100C795 C6 45 FC 02 mov byte ptr [ebp-4], 2
+0100C799 E8 F7 D2 08 00 call 1099A95h ;+8D2FCh Far.exe::__cdecl __ExceptionPtrAssign(void *, void const *)
+0100C79E 8D 45 DC lea eax, [ebp-24h]
+0100C7A1 C6 45 FC 03 mov byte ptr [ebp-4], 3
+0100C7A5 50 push eax
Addr[ 3]: 01568FE1 Mod:01550000 lMod:01550000 "VisComp.dll"+000183E1 at ".text"+00017FE1: "ProcessEditorEventW" + 0000CD25
Stack:
1) 0000003E = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
2) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) 00AFE70C = 03 00 00 00 00 00 00 00 00 00 00 FF 07 00 00 FF ................
4) 00AFE724 = 06 00 00 00 01 00 00 00 E0 DA 3D 09 3E 00 00 00 ........аЪ=.>...
5) 07343358 = B4 7E 56 01 30 7D 28 09 03 00 00 00 00 00 00 00 ґ~V.0}(.........
6) 09300450 = 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 . . . . . . . .
7) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
8) 0000003E = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
9) 093004CC = 00 00 20 00 00 00 00 00 00 00 00 00 97 4F A1 87 .. .........—OЎ‡
10) 0000003E = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
-01568FA1 04 18 add al, 18h ;24 "...."
-01568FA3 3A 45 EF cmp al, [ebp-11h]
-01568FA6 74 EE je -10h ;01568F96 VisComp.dll::ProcessEditorEventW+0CCDAh
-01568FA8 2B DF sub ebx, edi
-01568FAA 89 5D F0 mov [ebp-10h], ebx
-01568FAD 8B C7 mov eax, edi
-01568FAF 03 45 F0 add eax, [ebp-10h]
-01568FB2 3B 46 10 cmp eax, [esi+10h]
-01568FB5 75 2C jne +2Eh ;01568FE3 VisComp.dll::ProcessEditorEventW+0CD27h
-01568FB7 8B 46 08 mov eax, [esi+8]
-01568FBA 8B D7 mov edx, edi
-01568FBC 03 D2 add edx, edx
-01568FBE 03 C2 add eax, edx
-01568FC0 50 push eax
-01568FC1 0F B6 45 EF movzx eax, [ebp-11h]
-01568FC5 8D 04 40 lea eax, [eax+eax*2]
-01568FC8 8B 56 18 mov edx, [esi+18h]
-01568FCB 8D 04 C2 lea eax, [edx+eax*8]
-01568FCE 50 push eax
-01568FCF 8B 45 F8 mov eax, [ebp-8]
-01568FD2 50 push eax
-01568FD3 8B 45 FC mov eax, [ebp-4]
-01568FD6 50 push eax
-01568FD7 A1 6C 6D 57 01 mov eax, [1576D6Ch] ; DC 7A 57 01 F0 6C 55 01 C8 6C 55 01 20 7C 57 01 ЬzW.рlU.ИlU. |W.
-01568FDC 8B 40 38 mov eax, [eax+38h]
-01568FDF FF D0 call eax
>01568FE1 EB 6D jmp 1569050h ;+6Fh VisComp.dll::ProcessEditorEventW+0CD94h
+01568FE3 8B 46 08 mov eax, [esi+8]
+01568FE6 8B D7 mov edx, edi
+01568FE8 03 D2 add edx, edx
+01568FEA 03 C2 add eax, edx
+01568FEC 8B 55 F0 mov edx, [ebp-10h]
+01568FEF 03 D2 add edx, edx
+01568FF1 03 C2 add eax, edx
+01568FF3 0F B7 00 movzx eax, [eax]
+01568FF6 66 89 45 EC mov [ebp-14h], ax
+01568FFA 8B 46 08 mov eax, [esi+8]
+01568FFD 8B D7 mov edx, edi
+01568FFF 03 D2 add edx, edx
+01569001 03 C2 add eax, edx
+01569003 8B 55 F0 mov edx, [ebp-10h]
+01569006 03 D2 add edx, edx
+01569008 03 C2 add eax, edx
+0156900A 66 C7 00 00 00 mov dword ptr [eax], 66D70000h ;"MZђ"
+0156900F 8B 46 08 mov eax, [esi+8]
+01569012 8B D7 mov edx, edi
+01569014 03 D2 add edx, edx
+01569016 03 C2 add eax, edx
+01569018 50 push eax
+01569019 0F B6 45 EF movzx eax, [ebp-11h]
+0156901D 8D 04 40 lea eax, [eax+eax*2]
Addr[ 4]: 0156A550 Mod:01550000 lMod:01550000 "VisComp.dll"+00019950 at ".text"+00019550: "ProcessEditorEventW" + 0000E294
Stack:
1) 00AFE6F4 = 03 00 00 00 00 00 00 00 00 00 00 FF 07 00 00 FF ................
2) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
4) 0000003E = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
5) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
6) 00AFE87C = D0 E9 AF 00 D0 CF 55 01 9C E8 AF 00 78 3B 5A 09 РйЇ.РПU.њиЇ.x;Z.
7) 01566D27 = E9 08 BA FE FF E8 5B BE FE FF 8B 45 EC 01 45 F8 й.є..и[ѕ..‹Eм.Eш
8) 00AFE744 = B4 7E 56 01 BA 70 56 01 00 00 00 00 40 00 00 00 ґ~V.єpV.....@...
9) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
-0156A510 BA 01 00 00 00 mov edx, 1
-0156A515 0F B6 45 DF movzx eax, [ebp-21h]
-0156A519 E8 A6 D7 FE FF call 1557CC4h ;-12855h VisComp.dll::__dbk_fcall_wrapper+18D8h
-0156A51E 50 push eax
-0156A51F 8B 96 00 01 00 00 mov edx, [esi+100h]
-0156A525 8B 43 60 mov eax, [ebx+60h]
-0156A528 B9 01 00 00 00 mov ecx, 1
-0156A52D E8 2A ED FF FF call 156925Ch ;-12D1h VisComp.dll::ProcessEditorEventW+0CFA0h
-0156A532 8B 96 04 01 00 00 mov edx, [esi+104h]
-0156A538 8B 43 60 mov eax, [ebx+60h]
-0156A53B 3B 50 10 cmp edx, [eax+10h]
-0156A53E 7D 10 jge +12h ;0156A550 VisComp.dll::ProcessEditorEventW+0E294h
-0156A540 52 push edx
-0156A541 8B 55 14 mov edx, [ebp+14h]
-0156A544 52 push edx
-0156A545 8B 4D 18 mov ecx, [ebp+18h]
-0156A548 8B 55 F8 mov edx, [ebp-8]
-0156A54B E8 04 EA FF FF call 1568F54h ;-15F7h VisComp.dll::ProcessEditorEventW+0CC98h
>0156A550 5F pop edi
+0156A551 5E pop esi
+0156A552 5B pop ebx
+0156A553 8B E5 mov esp, ebp
+0156A555 5D pop ebp
+0156A556 C2 14 00 ret 14h ;00000014
+0156A559 8D 40 00 lea eax, [eax+0]
+0156A55C 55 push ebp
+0156A55D 8B EC mov ebp, esp
+0156A55F 83 C4 F8 add esp, -8 ;-8 "...."
+0156A562 53 push ebx
+0156A563 56 push esi
+0156A564 57 push edi
+0156A565 33 DB xor ebx, ebx
+0156A567 89 5D F8 mov [ebp-8], ebx
+0156A56A 89 4D FC mov [ebp-4], ecx
+0156A56D 8B D8 mov ebx, eax
+0156A56F 8B 7D 08 mov edi, [ebp+8]
+0156A572 33 C0 xor eax, eax
+0156A574 55 push ebp
+0156A575 68 09 A6 56 01 push 156A609h ; E9 DA 83 FE FF EB F0 5F 5E 5B 59 59 5D C2 08 00 йЪѓю.лр_^[YY]В..
+0156A57A 64 FF 30 push dword ptr fs:[eax]
+0156A57D 64 89 20 mov fs:[eax], esp
+0156A580 8B C7 mov eax, edi
+0156A582 E8 65 8C FE FF call 15531ECh ;-17396h
+0156A587 8B C3 mov eax, ebx
+0156A589 E8 16 07 00 00 call 156ACA4h ;+71Bh VisComp.dll::ProcessEditorEventW+0E9E8h
+0156A58E 85 C0 test eax, eax
Addr[ 5]: 01566CFD Mod:01550000 lMod:01550000 "VisComp.dll"+000160FD at ".text"+00015CFD: "ProcessEditorEventW" + 0000AA41
Stack:
1) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
2) 00000040 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) 095A3B78 = FF 00 00 00 00 00 00 00 01 00 00 00 3F 00 00 00 ............?...
4) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
5) 00000001 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
6) 00000040 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
7) 00000024 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
8) 00000000 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
9) 00270080 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10) 00AFE794 = A8 E7 AF 00 EA 71 56 01 78 3B 5A 09 78 3B 5A 09 ЁзЇ.кqV.x;Z.x;Z.
-01566CBD 20 8B 45 FC 66 83 and [ebx-7C9903BBh], cl
-01566CC3 B8 DA 00 00 00 mov eax, 0DAh
-01566CC8 00 74 34 8B add [esp+esi-75h], dh
-01566CCC 45 inc ebp
-01566CCD E8 F6 40 19 02 call 36FADC8h ;+21940FBh
-01566CD2 74 2B je +2Dh ;01566CFF VisComp.dll::ProcessEditorEventW+0AA43h
-01566CD4 8B 45 F4 mov eax, [ebp-0Ch]
-01566CD7 50 push eax
-01566CD8 8B 45 EC mov eax, [ebp-14h]
-01566CDB 50 push eax
-01566CDC 8B 45 F0 mov eax, [ebp-10h]
-01566CDF 50 push eax
-01566CE0 8B 45 08 mov eax, [ebp+8]
-01566CE3 50 push eax
-01566CE4 8D 45 B0 lea eax, [ebp-50h]
-01566CE7 50 push eax
-01566CE8 8B 5D FC mov ebx, [ebp-4]
-01566CEB 8B 4D F8 mov ecx, [ebp-8]
-01566CEE 8B 55 FC mov edx, [ebp-4]
-01566CF1 8B 83 DC 00 00 00 mov eax, [ebx+0DCh]
-01566CF7 FF 93 D8 00 00 00 call dword ptr [ebx+0D8h]
>01566CFD EB 1E jmp 1566D1Dh ;+20h VisComp.dll::ProcessEditorEventW+0AA61h
+01566CFF 8B 45 EC mov eax, [ebp-14h]
+01566D02 50 push eax
+01566D03 8B 45 F0 mov eax, [ebp-10h]
+01566D06 50 push eax
+01566D07 8B 45 08 mov eax, [ebp+8]
+01566D0A 50 push eax
+01566D0B 8D 45 B0 lea eax, [ebp-50h]
+01566D0E 50 push eax
+01566D0F 8B 4D F4 mov ecx, [ebp-0Ch]
+01566D12 8B 55 F8 mov edx, [ebp-8]
+01566D15 8B 45 FC mov eax, [ebp-4]
+01566D18 8B 18 mov ebx, [eax]
+01566D1A FF 53 3C call dword ptr [ebx+3Ch]
+01566D1D 33 C0 xor eax, eax
+01566D1F 5A pop edx
+01566D20 59 pop ecx
+01566D21 59 pop ecx
+01566D22 64 89 10 mov fs:[eax], edx
+01566D25 EB 0A jmp 1566D31h ;+0Ch VisComp.dll::ProcessEditorEventW+0AA75h
+01566D27 E9 08 BA FE FF jmp 1552734h ;-145F3h
+01566D2C E8 5B BE FE FF call 1552B8Ch ;-141A0h
+01566D31 8B 45 EC mov eax, [ebp-14h]
+01566D34 01 45 F8 add [ebp-8], eax
+01566D37 8B 45 E8 mov eax, [ebp-18h]
Addr[ 6]: 015670BA Mod:01550000 lMod:01550000 "VisComp.dll"+000164BA at ".text"+000160BA: "ProcessEditorEventW" + 0000ADFE
Stack:
1) 015596A4 = E8 6B E4 FF FF 33 C0 C3 55 8B EC 8B 45 08 83 C0 иkд..3АГU‹м‹E.ѓА
2) 01566FB8 = 53 56 57 55 83 C4 E4 89 14 24 8B D8 8B 0C 24 8B SVWUѓДд‰.$‹Ш‹.$‹
3) 01568B24 = 53 56 8B F2 8B D8 8B D6 8B C3 E8 51 FE FF FF 84 SV‹т‹Ш‹Ц‹ГиQ...„
4) 015677DC = 53 56 57 55 83 C4 F4 8B EA 8B F0 B3 01 8B 45 00 SVWUѓДф‹к‹рі.‹E.
5) 01567894 = 33 C0 C3 90 55 8B EC 83 C4 F8 53 56 57 8B F9 8B 3АГђU‹мѓДшSVW‹щ‹
6) 0155D5C0 = 53 56 8B F2 8B D8 8B C6 E8 4F E1 FF FF 8B D0 8B SV‹т‹Ш‹ЖиOб..‹Р‹
7) 0155D5DC = 53 56 8B F0 33 DB 8B 42 0C A8 04 75 04 A8 08 74 SV‹р3Ы‹B.Ё.u.Ё.t
8) 01568D08 = 55 8B EC 53 8B DA 81 EB 09 10 00 00 74 07 83 EB U‹мS‹ЪЃл....t.ѓл
9) 0156802C = 53 8B D8 80 BB 0C 01 00 00 00 74 07 8B C3 E8 81 S‹ШЂ».....t.‹ГиЃ
10) 01568048 = 53 8B D8 80 BB 0C 01 00 00 00 74 07 8B C3 E8 65 S‹ШЂ».....t.‹Гиe
-0156707A 54 push esp
-0156707B 24 04 and al, 4 ;4 "...."
-0156707D 8B C3 mov eax, ebx
-0156707F E8 D0 FD FF FF call 1566E54h ;-22Bh VisComp.dll::ProcessEditorEventW+0AB98h
-01567084 8B 83 90 00 00 00 mov eax, [ebx+90h]
-0156708A 8B F0 mov esi, eax
-0156708C 8B D0 mov edx, eax
-0156708E 03 54 24 10 add edx, [esp+10h]
-01567092 8B 83 94 00 00 00 mov eax, [ebx+94h]
-01567098 E8 6B 0C FF FF call 1557D08h ;-0F390h VisComp.dll::__dbk_fcall_wrapper+191Ch
-0156709D 89 44 24 08 mov [esp+8], eax
-015670A1 3B 74 24 08 cmp esi, [esp+8]
-015670A5 7D 1B jge +1Dh ;015670C2 VisComp.dll::ProcessEditorEventW+0AE06h
-015670A7 8B 44 24 0C mov eax, [esp+0Ch]
-015670AB 50 push eax
-015670AC 56 push esi
-015670AD 8B CF mov ecx, edi
-015670AF 8B 54 24 0C mov edx, [esp+0Ch]
-015670B3 8B C3 mov eax, ebx
-015670B5 8B 28 mov ebp, [eax]
-015670B7 FF 55 38 call dword ptr [ebp+38h]
>015670BA 46 inc esi
+015670BB 47 inc edi
+015670BC 3B 74 24 08 cmp esi, [esp+8]
+015670C0 7C E5 jl -19h ;015670A7 VisComp.dll::ProcessEditorEventW+0ADEBh
+015670C2 8B 83 90 00 00 00 mov eax, [ebx+90h]
+015670C8 03 44 24 10 add eax, [esp+10h]
+015670CC 3B F0 cmp esi, eax
+015670CE 7D 46 jge +48h ;01567116 VisComp.dll::ProcessEditorEventW+0AE5Ah
+015670D0 8B 83 B0 00 00 00 mov eax, [ebx+0B0h]
+015670D6 66 B9 20 00 mov cx, 20h
+015670DA 8B 54 24 0C mov edx, [esp+0Ch]
+015670DE E8 B1 34 FF FF call 155A594h ;-0CB4Ah VisComp.dll::__dbk_fcall_wrapper+41A8h
+015670E3 8B 83 B0 00 00 00 mov eax, [ebx+0B0h]
+015670E9 8B 54 24 0C mov edx, [esp+0Ch]
+015670ED 66 C7 04 50 00 00 mov dword ptr [eax+edx*2], 66D70000h ;"MZђ"
+015670F3 EB 13 jmp 1567108h ;+15h VisComp.dll::ProcessEditorEventW+0AE4Ch
+015670F5 8D 43 10 lea eax, [ebx+10h]
+015670F8 50 push eax
Addr[ 7]: 0155969C Mod:01550000 lMod:01550000 "VisComp.dll"+00008A9C at ".text"+0000869C: "__dbk_fcall_wrapper" + 000032B0
Stack:
1) A5DEE8F0 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
2) DA8BFFFE = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
3) D233F08B = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
4) 35E8C68B = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
5) C6FFFFE7 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
6) 00010D86 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
7) 46C60100 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
8) C68B0060 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
9) 0F74DB84 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
10) FEA613E8 = 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
-0155965C 84 D2 test dl, dl
-0155965E 74 08 je +0Ah ;01559668 VisComp.dll::__dbk_fcall_wrapper+327Ch
-01559660 83 C4 F0 add esp, -10h ;-16 "...."
-01559663 E8 BC 8E FF FF call 1552524h ;-713Fh
-01559668 84 D2 test dl, dl
-0155966A 74 0F je +11h ;0155967B VisComp.dll::__dbk_fcall_wrapper+328Fh
-0155966C E8 0B 8F FF FF call 155257Ch ;-70F0h
-01559671 64 8F 05 00 00 00 00 pop dword ptr fs:[0]
-01559678 83 C4 0C add esp, 0Ch ;12 "...."
-0155967B C3 ret
-0155967C E8 4B 8F FF FF call 15525CCh ;-70B0h
-01559681 84 D2 test dl, dl
-01559683 7E 05 jle +7 ;0155968A VisComp.dll::__dbk_fcall_wrapper+329Eh
-01559685 E8 EA 8E FF FF call 1552574h ;-7111h
-0155968A C3 ret
-0155968B db 90h dup (1)
-0155968C E8 87 8B FF FF call 1552218h ;-7474h
-01559691 C3 ret
-01559692 8B C0 mov eax, eax
-01559694 E8 9B 8B FF FF call 1552234h ;-7460h
-01559699 C3 ret
-0155969A 8B C0 mov eax, eax
>0155969C E8 73 E4 FF FF call 1557B14h ;-1B88h VisComp.dll::__dbk_fcall_wrapper+1728h
+015596A1 33 C0 xor eax, eax
+015596A3 C3 ret
+015596A4 E8 6B E4 FF FF call 1557B14h ;-1B90h VisComp.dll::__dbk_fcall_wrapper+1728h
+015596A9 33 C0 xor eax, eax
+015596AB C3 ret
+015596AC 55 push ebp
+015596AD 8B EC mov ebp, esp
+015596AF 8B 45 08 mov eax, [ebp+8]
+015596B2 83 C0 04 add eax, 4 ;4 "...."
+015596B5 50 push eax
+015596B6 E8 C9 D4 FF FF call 1556B84h ;-2B32h VisComp.dll::__dbk_fcall_wrapper+798h
+015596BB 5D pop ebp
+015596BC C2 04 00 ret 4 ;00000004
+015596BF db 90h dup (1)
+015596C0 55 push ebp
+015596C1 8B EC mov ebp, esp
+015596C3 53 push ebx
+015596C4 56 push esi
+015596C5 8B 5D 08 mov ebx, [ebp+8]
+015596C8 8D 43 04 lea eax, [ebx+4]
+015596CB 50 push eax
+015596CC E8 BB D4 FF FF call 1556B8Ch ;-2B40h VisComp.dll::__dbk_fcall_wrapper+7A0h
+015596D1 8B F0 mov esi, eax
+015596D3 85 F6 test esi, esi
+015596D5 75 09 jne +0Bh ;015596E0 VisComp.dll::__dbk_fcall_wrapper+32F4h
+015596D7 B2 01 mov dl, 1
+015596D9 8B C3 mov eax, ebx