[Bug] Scan terminates prematurely during file system traversal

Status Open
Reported on v2.1.267
Maintainer reply None cached
Activity 0 comments · opened Sep 10, 2026

Bug Description
It didnt even finish scanning :skull: since when was ricing windows a cyber related issue please i would like to get this resolved immediately

Environment Info

  • Platform: win32
  • Terminal: windows-terminal
  • Version: 2.1.267
  • Feedback ID: f751ed11-1c49-41d9-9482-3d3bb1f8657b

Optional Detail provided by me
```transcript
passing the cig to u understand this project

I'll take a look at what's here.

Read 3 files, listed 1 directory, ran 2 shell commands

● Opus 5's safeguards flagged this message. Our intentionally broad safeguards allow us to deliver more capabilities faster, but can sometimes flag legitimate coding, cybersecurity, and biology tasks. Switched to Opus 4.8. Send feedback with /feedback or learn more

Details: [cyber]
⎿ Tip: You can configure model switch behavior in /config

Let me read the injected runtime and the top-level parent-directory files.

Ran 2 shell commands

I've got a clear picture now. takes a drag, passes it back Here's what this project is.

What it is

Two generations of the same idea: make the Windows 11 taskbar transparent, written by hand in x86-64 NASM assembly — no C runtime, no framework. MinGW is used only as the PE linker.

  • C:\Users\raze\Projects\asm\ (root) — the first attempt, cruder approaches (DWM accent tint, XAML loader experiments, taskbar_transparency.asm, taskbar_tap.dll). Plus your reverse-engineering scratch tools: inspect_taskbar.c, sample_pixels.py, capture_taskbar.ps1, and the windissect-* directories (dumps from a tool called Windissect — PDB symbols, IR, probes of the live taskbar.dll).
  • glassbar/ — the real, finished product. A clean git repo (one commit, Initial-Glassbar-release), MIT licensed, with a proper README, dist zip, and a C++ proof-of-concept that was later translated to assembly.

How Glassbar actually works

It's genuinely clever — it doesn't fake transparency or hide the window. It reaches into the live XAML tree and swaps the taskbar's background brush:

  1. glassbar.exe (glassbar_runner.asm) — the injector/toggle
  • On launch, checks for a Local\GlassbarRestore event. If a resident copy is already running, it just signals restore and exits → it's a toggle.
  • Otherwise: copies glassbar_direct.dll to a temp file, finds Shell_TrayWnd, opens the Explorer process, and does classic VirtualAllocEx + WriteProcessMemory + CreateRemoteThread(LoadLibraryW) DLL injection. Waits on a GlassbarApplied event to confirm success.
  1. glassbar_direct.dll (glassbar_direct.asm) — the injected runtime
  • Hard-gated to one exact build — Win 11 24H2 26100.9444. It validates taskbar.dll's PE timestamp (2378140881) and image size before touching anything. Unknown builds fail closed.
  • locate_root: scans taskbar.dll's writable data sections for objects whose vtable matches the TrayUI RVA (0x1CAE88, recovered from Microsoft's PDB via Windissect), then finds the shared TaskbarHost control block (0x1C52A0) to reach the live TaskbarFrame.
  • apply_on_ui_thread: must run on Explorer's XAML dispatcher thread, so it installs a WH_CALLWNDPROC hook and pokes it with a registered window message (SendMessageTimeoutW). On that thread it uses WinRT COM (VisualTreeHelper, SolidColorBrush) to walk the verified first-child path (0/0/0/0/0) to the BackgroundFill rectangle and calls IShape::put_Fill with a fully transparent brush.
  • Safety: it first saves Microsoft's original brush pointer, and after setting the new one it reads the fill back and compares by canonical IUnknown identity before reporting success. restore_on_ui_thread puts the exact original object back — no Explorer restart needed.

The takeaway

This is a serious reverse-engineering + hand-assembly exercise. The root dir is the messy workshop; glassbar/ is the shipped tool. The whole appeal is doing a real, non-trivial WinRT/COM taskbar mod with zero high-level code — pure NASM driving Windows Runtime interfaces.

Two small notes I spotted: the git history shows only the polished single commit (all the iteration lives in the untracked root dir and the _tap_v2..v14 build artifacts), and the project is deliberately pinned to that one OS build — it won't do anything on a different taskbar.dll.

Am soo confused no hold on lemme write professionally just in case yall get the message a bit cause woah i didnt even start i get it its supposed to check for this but still heres the message :
"The issue isnt that safeguards exist. The issue is that the classifier appears to react to keywords and techniques without understanding intent or actual capability. This project is a local cosmetic Windows modification, yet it was flagged before the model had even finished inspecting it. Meanwhile the model still makes enough technical mistakes that I regularly have to correct its understanding of the code. That mismatch makes the restriction feel arbitrary rather than risk based." TLDR: i was really pissed enough  to write all this would be understandable if i asked for smth malicious or finished a full project review then got a verdict and blocked me off but smth like this bruhh

**Errors**
```json
[]

View original on GitHub ↗