Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Opened \\.\pipe\kd_ReactOS_setupapi
Waiting to reconnect...
(ntoskrnl\kd64\kdinit.c:94) -----------------------------------------------------
(ntoskrnl\kd64\kdinit.c:95) ReactOS 0.4.16-x86-dev (Build 20250630-0.4.16-dev-1451-g671935f) (Commit 671935f24bf5d86aa929c75d617b211099a3b236)
(ntoskrnl\kd64\kdinit.c:96) 1 System Processor [512 MB Memory]
(ntoskrnl\kd64\kdinit.c:100) Command Line: DEBUG DEBUGPORT=VBOX SOS
(ntoskrnl\kd64\kdinit.c:103) ARC Paths: multi(0)disk(0)rdisk(0)partition(2) \ multi(0)disk(0)rdisk(0)partition(2) \ReactOS\
Connected to Windows Server 2003 3790 x86 compatible target at (Mon Jun 30 14:55:24.349 2025 (UTC + 2:00)), ptr64 FALSE
Kernel Debugger connection established.
Symbol search path is: C:\Symbols;srv*C:\Symbols*https://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2003 Kernel Version 3790 UP Checked x86 compatible
Built by: 20250630-0.4.16-dev-1451-g671935f.MSVC_19.29.30147.0
Machine Name:
Kernel base = 0x80400000 PsLoadedModuleList = 0x80604180
System Uptime: not available
(ntoskrnl\ke\i386\cpu.c:454) Supported CPU features: KF_V86_VIS KF_RDTSC KF_CR4 KF_CMOV KF_GLOBAL_PAGE KF_LARGE_PAGE KF_MTRR KF_CMPXCHG8B KF_MMX KF_WORKING_PTE KF_PAT KF_FXSR KF_FAST_SYSCALL KF_XMMI KF_XMMI64 KF_NX_BIT X86_FEATURE_PAE X86_FEATURE_APIC
(ntoskrnl\ke\i386\cpu.c:750) Prefetch Cache: 64 bytes	L2 Cache: 262144 bytes	L2 Cache Line: 64 bytes	L2 Cache Associativity: 8

....

fixme:(dll\win32\shlwapi\url.c:1977) (L"notepad" 4): stub
fixme:(dll\win32\shell32\shlexec.cpp:2179) flags ignored: 0x00000100
(dll\win32\kernel32\client\loader.c:386) LoadLibraryExW(
00390001) failing with status c000000f
err:(win32ss\user\user32\windows\cursoricon.c:2186) Unable to load/use module '
00390001' in process 472, error 2.
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-synch-l1-2-0 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-fibers-l1-1-1 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-synch-l1-2-0 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-fibers-l1-1-1 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-localization-l1-2-1 to C:\ReactOS\System32\kernel32.dll
err:(win32ss\user\imm32\ime.c:744) 
err:(win32ss\user\imm32\ime.c:744) 
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-synch-l1-2-0 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-fibers-l1-1-1 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-synch-l1-2-0 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-fibers-l1-1-1 to C:\ReactOS\System32\kernel32.dll
(dll\ntdll\rtl\libsupp.c:1129) ApiSetResolveToHost redirected api-ms-win-core-localization-l1-2-1 to C:\ReactOS\System32\kernel32.dll
err:(win32ss\user\imm32\ime.c:744) 
err:(win32ss\user\imm32\ime.c:744) 
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
(win32ss\user\ntuser\painting.c:1218) err: WARNING SOMETHING HAS GONE WRONG: Thread marked as containing dirty windows, but no dirty windows found! Counts 1
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\imemenu.c:615) ImeGetImeMenuItems failed
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
(win32ss\user\ntuser\hotkey.c:248) err: Hot key pressed for Debug Activation! ShiftF12 = 0 or F12 = 1

<--- HERE: the crash is due to `SafeImeUI` in `IntNotifyImeShowStatus()` not being initialized --->

Break instruction exception - code 80000003 (first chance)
>   46:     __debugbreak();
win32k!_RTC_DefaultErrorFuncW+0x5:
f80f5d25 cc              int     3
kd> .reload
Connected to Windows Server 2003 3790 x86 compatible target at (Mon Jun 30 16:05:53.352 2025 (UTC + 2:00)), ptr64 FALSE
Loading Kernel Symbols
...............................................................
.....
Loading User Symbols
........................
*** WARNING: Unable to verify checksum for mzimeja.ime
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for mzimeja.ime - 
kd> kp
ChildEBP RetAddr  
f7a02be4 f80f5e85 win32k!_RTC_DefaultErrorFuncW(int errType = 0n3, wchar_t * file = 0xf811c210 "unknown file", int line = 0n-1, wchar_t * module = 0xf811c1f0 "unknown module", wchar_t * format = 0xf811c230 "Use of uninitialized variable %S!.")+0x5 [X:\reactos\sdk\lib\runtmchk\rtcapi.c @ 46]
f7a02c08 f7fe6b4e win32k!_RTC_UninitUse(char * _Varname = 0xf7fe6ca7 "SafeImeUI")+0x25 [X:\reactos\sdk\lib\runtmchk\rtcapi.c @ 119]
f7a02ca8 f7fe5343 win32k!IntNotifyImeShowStatus(struct _WND * pImeWnd = 0xbc659978)+0x20e [X:\reactos\win32ss\user\ntuser\ime.c @ 2469]
f7a02cb8 f802d0c3 win32k!IntBroadcastImeShowStatusChange(struct _WND * pImeWnd = 0xbc659978, int bShow = 0n0)+0x53 [X:\reactos\win32ss\user\ntuser\ime.c @ 2500]
f7a02cf4 8040405e win32k!NtUserCallHwndParamLock(struct HWND__ * hWnd = 0x00030166, unsigned long Param = 0, unsigned long Routine = 0x5f)+0x103 [X:\reactos\win32ss\user\ntuser\simplecall.c @ 918]
f7a02d10 8056dc98 nt!KiSystemCallTrampoline+0x19
f7a02d5c 80403ea5 nt!KiSystemServiceHandler(struct _KTRAP_FRAME * TrapFrame = 0xf7a02d64, void * Arguments = 0x0012fb54)+0x278 [X:\reactos\ntoskrnl\ke\i386\traphdlr.c @ 1840]
f7a02d5c 7c93606e nt!KiFastCallEntry+0x96
0012fb48 77aa9ab4 ntdll!KiFastSystemCallRet
0012fb4c 77a5fa10 user32!ZwUserCallHwndParamLock+0xc
0012fc00 77a5e9ad user32!ImeWnd_OnImeSystem(struct tagIMEUI * pimeui = 0x0013d7f8, unsigned int wParam = 5, long lParam = 0n0)+0x100 [X:\reactos\win32ss\user\user32\misc\imm.c @ 703]
0012fc44 77a5e49c user32!ImeWndProc_common(struct HWND__ * hwnd = 0x00030166, unsigned int msg = 0x287, unsigned int wParam = 5, long lParam = 0n0, int unicode = 0n1)+0x4fd [X:\reactos\win32ss\user\user32\misc\imm.c @ 1131]
0012fc60 77aa5f8a user32!ImeWndProcW(struct HWND__ * hwnd = 0x00030166, unsigned int msg = 0x287, unsigned int wParam = 5, long lParam = 0n0)+0x1c [X:\reactos\win32ss\user\user32\misc\imm.c @ 1151]
0012fc90 77a942e6 user32!CALL_EXTERN_WNDPROC+0x1a
0012fd74 77a9822b user32!IntCallWindowProcW(int IsAnsiProc = 0n0, <function> * WndProc = 0x77a5e480, struct _WND * pWnd = 0x00569978, struct HWND__ * hWnd = 0x00030166, unsigned int Msg = 0x287, unsigned int wParam = 5, long lParam = 0n0)+0x656 [X:\reactos\win32ss\user\user32\windows\message.c @ 1547]
0012fda8 77a97aeb user32!IntCallMessageProc(struct _WND * Wnd = 0x00569978, struct HWND__ * hWnd = 0x00030166, unsigned int Msg = 0x287, unsigned int wParam = 5, long lParam = 0n0, int Ansi = 0n0)+0x1eb [X:\reactos\win32ss\user\user32\windows\message.c @ 1798]
0012fe0c 00404cae user32!DispatchMessageW(struct tagMSG * lpmsg = 0x0012fe94)+0x22b [X:\reactos\win32ss\user\user32\windows\message.c @ 2046]
0012feb4 00409a40 notepad!wWinMain(struct HINSTANCE__ * hInstance = 0x00400000, struct HINSTANCE__ * prev = 0x00000000, wchar_t * cmdline = 0x00133272 "", int show = 0n1)+0x21e [X:\reactos\base\applications\notepad\main.c @ 646]
0012fecc 0040951a notepad!wmain(int flags = 0n1, wchar_t ** cmdline = 0x0013d7e8, wchar_t ** inst = 0x001379f0)+0x20 [X:\reactos\sdk\lib\crt\startup\crt0_w.c @ 26]
0012ffb4 004097c8 notepad!__tmainCRTStartup(void)+0x2ba [X:\reactos\sdk\lib\crt\startup\crtexe.c @ 306]
0012ffc0 7c656eb4 notepad!wWinMainCRTStartup(void)+0x28 [X:\reactos\sdk\lib\crt\startup\crtexe.c @ 157]
0012fff0 00000000 kernel32!BaseProcessStartup(<function> * lpStartAddress = 0x004097a0)+0x54 [X:\reactos\dll\win32\kernel32\client\proc.c @ 463]
kd> gh

<--- HERE: the crash is due to `pimeui` in `IntNotifyImeShowStatus()` not being initialized --->

Break instruction exception - code 80000003 (first chance)
>   46:     __debugbreak();
win32k!_RTC_DefaultErrorFuncW+0x5:
f80f5d25 cc              int     3
kd> kp
ChildEBP RetAddr  
f7a02be4 f80f5e85 win32k!_RTC_DefaultErrorFuncW(int errType = 0n3, wchar_t * file = 0xf811c210 "unknown file", int line = 0n-1, wchar_t * module = 0xf811c1f0 "unknown module", wchar_t * format = 0xf811c230 "Use of uninitialized variable %S!.")+0x5 [X:\reactos\sdk\lib\runtmchk\rtcapi.c @ 46]
f7a02c08 f7fe6b61 win32k!_RTC_UninitUse(char * _Varname = 0xf7fe6cb1 "pimeui")+0x25 [X:\reactos\sdk\lib\runtmchk\rtcapi.c @ 119]
f7a02ca8 f7fe5343 win32k!IntNotifyImeShowStatus(struct _WND * pImeWnd = 0xbc659978)+0x221 [X:\reactos\win32ss\user\ntuser\ime.c @ 2469]
f7a02cb8 f802d0c3 win32k!IntBroadcastImeShowStatusChange(struct _WND * pImeWnd = 0xbc659978, int bShow = 0n0)+0x53 [X:\reactos\win32ss\user\ntuser\ime.c @ 2500]
f7a02cf4 8040405e win32k!NtUserCallHwndParamLock(struct HWND__ * hWnd = 0x00030166, unsigned long Param = 0, unsigned long Routine = 0x5f)+0x103 [X:\reactos\win32ss\user\ntuser\simplecall.c @ 918]
f7a02d10 8056dc98 nt!KiSystemCallTrampoline+0x19
f7a02d5c 80403ea5 nt!KiSystemServiceHandler(struct _KTRAP_FRAME * TrapFrame = 0xf7a02d64, void * Arguments = 0x0012fb54)+0x278 [X:\reactos\ntoskrnl\ke\i386\traphdlr.c @ 1840]
f7a02d5c 7c93606e nt!KiFastCallEntry+0x96
0012fb48 77aa9ab4 ntdll!KiFastSystemCallRet
0012fb4c 77a5fa10 user32!ZwUserCallHwndParamLock+0xc
0012fc00 77a5e9ad user32!ImeWnd_OnImeSystem(struct tagIMEUI * pimeui = 0x0013d7f8, unsigned int wParam = 5, long lParam = 0n0)+0x100 [X:\reactos\win32ss\user\user32\misc\imm.c @ 703]
0012fc44 77a5e49c user32!ImeWndProc_common(struct HWND__ * hwnd = 0x00030166, unsigned int msg = 0x287, unsigned int wParam = 5, long lParam = 0n0, int unicode = 0n1)+0x4fd [X:\reactos\win32ss\user\user32\misc\imm.c @ 1131]
0012fc60 77aa5f8a user32!ImeWndProcW(struct HWND__ * hwnd = 0x00030166, unsigned int msg = 0x287, unsigned int wParam = 5, long lParam = 0n0)+0x1c [X:\reactos\win32ss\user\user32\misc\imm.c @ 1151]
0012fc90 77a942e6 user32!CALL_EXTERN_WNDPROC+0x1a
0012fd74 77a9822b user32!IntCallWindowProcW(int IsAnsiProc = 0n0, <function> * WndProc = 0x77a5e480, struct _WND * pWnd = 0x00569978, struct HWND__ * hWnd = 0x00030166, unsigned int Msg = 0x287, unsigned int wParam = 5, long lParam = 0n0)+0x656 [X:\reactos\win32ss\user\user32\windows\message.c @ 1547]
0012fda8 77a97aeb user32!IntCallMessageProc(struct _WND * Wnd = 0x00569978, struct HWND__ * hWnd = 0x00030166, unsigned int Msg = 0x287, unsigned int wParam = 5, long lParam = 0n0, int Ansi = 0n0)+0x1eb [X:\reactos\win32ss\user\user32\windows\message.c @ 1798]
0012fe0c 00404cae user32!DispatchMessageW(struct tagMSG * lpmsg = 0x0012fe94)+0x22b [X:\reactos\win32ss\user\user32\windows\message.c @ 2046]
0012feb4 00409a40 notepad!wWinMain(struct HINSTANCE__ * hInstance = 0x00400000, struct HINSTANCE__ * prev = 0x00000000, wchar_t * cmdline = 0x00133272 "", int show = 0n1)+0x21e [X:\reactos\base\applications\notepad\main.c @ 646]
0012fecc 0040951a notepad!wmain(int flags = 0n1, wchar_t ** cmdline = 0x0013d7e8, wchar_t ** inst = 0x001379f0)+0x20 [X:\reactos\sdk\lib\crt\startup\crt0_w.c @ 26]
0012ffb4 004097c8 notepad!__tmainCRTStartup(void)+0x2ba [X:\reactos\sdk\lib\crt\startup\crtexe.c @ 306]
0012ffc0 7c656eb4 notepad!wWinMainCRTStartup(void)+0x28 [X:\reactos\sdk\lib\crt\startup\crtexe.c @ 157]
0012fff0 00000000 kernel32!BaseProcessStartup(<function> * lpStartAddress = 0x004097a0)+0x54 [X:\reactos\dll\win32\kernel32\client\proc.c @ 463]
kd> gh

(win32ss\user\ntuser\ime.c:2470) err: Exception in IntNotifyImeShowStatus: BC659978, CCCCCCCC, B1058E08, 0, 0
(win32ss\user\ntuser\hotkey.c:248) err: Hot key pressed for Debug Activation! ShiftF12 = 0 or F12 = 1
(win32ss\user\ntuser\keyboard.c:1103) err: Window is NULL
(win32ss\user\ntuser\keyboard.c:1103) err: Window is NULL
(win32ss\user\ntuser\keyboard.c:1103) err: Window is NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL
err:(win32ss\user\imm32\ime.c:1007) pIC was NULL