API tools faq
paste
Advertisement
Guest User

fst64 fail wine

a guest
Mar 31st, 2013
91
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 102.64 KB | None | 0 0
raw download clone embed print report
  1. Sun Mar 31 19:42:33 EDT 2013
  2. [ninez@ninez fsthost-code2]$ env WINEDEBUG='+relay' ./test64.exe '/home/ninez/wineVSTs/Automaton.dll'
  3. trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.48;kernel32.49;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98;kernel32.TlsGetValue;kernel32.TlsSetValue;kernel32.FlsGetValue;kernel32.FlsSetValue;kernel32.SetLastError"
  4. trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32"
  5. 0040:Call KERNEL32.__wine_kernel_init() ret=7bc58a23
  6. trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.48;kernel32.49;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98;kernel32.TlsGetValue;kernel32.TlsSetValue;kernel32.FlsGetValue;kernel32.FlsSetValue;kernel32.SetLastError"
  7. trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32"
  8. 0042:Call KERNEL32.__wine_kernel_init() ret=7f77bbed9c84
  9. 0042:Call PE DLL (proc=0x7f77bbf1f9c0,module=0x7f77bbea0000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1)
  10. 0042:Ret PE DLL (proc=0x7f77bbf1f9c0,module=0x7f77bbea0000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  11. 0042:Call PE DLL (proc=0x7b895940,module=0x7b820000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1)
  12. 0042:Ret PE DLL (proc=0x7b895940,module=0x7b820000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  13. 0042:Call PE DLL (proc=0x7f77ba101840,module=0x7f77ba0b0000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1)
  14. 0042:Ret PE DLL (proc=0x7f77ba101840,module=0x7f77ba0b0000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  15. 0042:Call PE DLL (proc=0x7f77ba3c93e0,module=0x7f77ba340000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1)
  16. 0042:Ret PE DLL (proc=0x7f77ba3c93e0,module=0x7f77ba340000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  17. 0042:Call PE DLL (proc=0x7f77b9ea0320,module=0x7f77b9e90000 L"version.dll",reason=PROCESS_ATTACH,res=0x1)
  18. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b9e90000) ret=7f77b9ea04b9
  19. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b9ea04b9
  20. 0042:Ret PE DLL (proc=0x7f77b9ea0320,module=0x7f77b9e90000 L"version.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  21. 0042:Call PE DLL (proc=0x7f77ba74c5a0,module=0x7f77ba6a0000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1)
  22. 0042:Call PE DLL (proc=0x7f77b906ebc0,module=0x7f77b9020000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil))
  23. 0042:Ret PE DLL (proc=0x7f77b906ebc0,module=0x7f77b9020000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1
  24. 0042:Ret PE DLL (proc=0x7f77ba74c5a0,module=0x7f77ba6a0000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1
  25. 0042:Starting process L"Z:\\home\\ninez\\Desktop\\fsthost-code2\\test64.exe" (entryproc=0x7f77bb394e40)
  26. 0042:Call KERNEL32.GetCommandLineA() ret=7f77bb39330e
  27. 0042:Ret KERNEL32.GetCommandLineA() retval=00035050 ret=7f77bb39330e
  28. 0042:Call KERNEL32.GetStartupInfoA(0023fc00) ret=7f77bb39335e
  29. 0042:Ret KERNEL32.GetStartupInfoA() retval=0023fc00 ret=7f77bb39335e
  30. 0042:Call KERNEL32.GetModuleHandleA(00000000) ret=7f77bb393378
  31. 0042:Ret KERNEL32.GetModuleHandleA() retval=7f77bb390000 ret=7f77bb393378
  32. Load plugin /home/ninez/wineVSTs/Automaton.dll
  33. 0042:Call KERNEL32.LoadLibraryA(0023ea90 "/home/ninez/wineVSTs/Automaton.dll") ret=7f77bb394167
  34. 0042:Call PE DLL (proc=0x7f77b726ec60,module=0x7f77b7220000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=(nil))
  35. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b7220000) ret=7f77b725dcdc
  36. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b725dcdc
  37. 0042:Call KERNEL32.TlsAlloc() ret=7f77b725dce8
  38. 0042:Ret KERNEL32.TlsAlloc() retval=00000001 ret=7f77b725dce8
  39. 0042:Ret PE DLL (proc=0x7f77b726ec60,module=0x7f77b7220000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  40. 0042:Call PE DLL (proc=0x7f77b68e3ee0,module=0x7f77b6890000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil))
  41. 0042:Ret PE DLL (proc=0x7f77b68e3ee0,module=0x7f77b6890000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  42. 0042:Call PE DLL (proc=0x7f77b6c2d5a0,module=0x7f77b6b40000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil))
  43. 0042:Call user32.RegisterClassW(0023e1f0) ret=7f77b6b62772
  44. 0042:Ret user32.RegisterClassW() retval=0000c00e ret=7f77b6b62772
  45. 0042:Ret PE DLL (proc=0x7f77b6c2d5a0,module=0x7f77b6b40000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  46. 0042:Call PE DLL (proc=0x7f77b6f844c0,module=0x7f77b6eb0000 L"oleaut32.dll",reason=PROCESS_ATTACH,res=(nil))
  47. 0042:Call KERNEL32.GetEnvironmentVariableW(7f77b6f878d0 L"oanocache",00000000,00000000) ret=7f77b6ec6740
  48. 0042:Ret KERNEL32.GetEnvironmentVariableW() retval=00000000 ret=7f77b6ec6740
  49. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b6eb0000) ret=7f77b6f842bd
  50. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b6f842bd
  51. 0042:Ret PE DLL (proc=0x7f77b6f844c0,module=0x7f77b6eb0000 L"oleaut32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  52. 0042:Call PE DLL (proc=0x7f77b751a820,module=0x7f77b74b0000 L"gdiplus.dll",reason=PROCESS_ATTACH,res=(nil))
  53. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b74b0000) ret=7f77b74d4e8c
  54. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b74d4e8c
  55. 0042:Ret PE DLL (proc=0x7f77b751a820,module=0x7f77b74b0000 L"gdiplus.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  56. 0042:Call PE DLL (proc=0x7f77b61c7e60,module=0x7f77b6130000 L"comctl32.dll",reason=PROCESS_ATTACH,res=(nil))
  57. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b6130000) ret=7f77b614a044
  58. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b614a044
  59. 0042:Call KERNEL32.GlobalAddAtomW(7f77b61caa60 L"CC32SubclassInfo") ret=7f77b614a057
  60. 0042:Ret KERNEL32.GlobalAddAtomW() retval=0000c00f ret=7f77b614a057
  61. 0042:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7f77b61caa90) ret=7f77b614a0b3
  62. 0042:Ret gdi32.CreateBitmap() retval=00040026 ret=7f77b614a0b3
  63. 0042:Call gdi32.CreatePatternBrush(00040026) ret=7f77b614a0c2
  64. 0042:Ret gdi32.CreatePatternBrush() retval=00010029 ret=7f77b614a0c2
  65. 0042:Call user32.GetSysColor(00000014) ret=7f77b6149d8e
  66. 0042:Ret user32.GetSysColor() retval=00ffffff ret=7f77b6149d8e
  67. 0042:Call user32.GetSysColor(00000010) ret=7f77b6149d9e
  68. 0042:Ret user32.GetSysColor() retval=00808080 ret=7f77b6149d9e
  69. 0042:Call user32.GetSysColor(00000012) ret=7f77b6149dae
  70. 0042:Ret user32.GetSysColor() retval=00000000 ret=7f77b6149dae
  71. 0042:Call user32.GetSysColor(0000000f) ret=7f77b6149dbe
  72. 0042:Ret user32.GetSysColor() retval=00c8d0d4 ret=7f77b6149dbe
  73. 0042:Call user32.GetSysColor(0000000d) ret=7f77b6149dce
  74. 0042:Ret user32.GetSysColor() retval=006a240a ret=7f77b6149dce
  75. 0042:Call user32.GetSysColor(0000000e) ret=7f77b6149dde
  76. 0042:Ret user32.GetSysColor() retval=00ffffff ret=7f77b6149dde
  77. 0042:Call user32.GetSysColor(0000001a) ret=7f77b6149dee
  78. 0042:Ret user32.GetSysColor() retval=00c80000 ret=7f77b6149dee
  79. 0042:Call user32.GetSysColor(00000014) ret=7f77b6149dfe
  80. 0042:Ret user32.GetSysColor() retval=00ffffff ret=7f77b6149dfe
  81. 0042:Call user32.GetSysColor(00000010) ret=7f77b6149e0e
  82. 0042:Ret user32.GetSysColor() retval=00808080 ret=7f77b6149e0e
  83. 0042:Call user32.GetSysColor(00000015) ret=7f77b6149e1e
  84. 0042:Ret user32.GetSysColor() retval=00404040 ret=7f77b6149e1e
  85. 0042:Call user32.GetSysColor(0000000f) ret=7f77b6149e2e
  86. 0042:Ret user32.GetSysColor() retval=00c8d0d4 ret=7f77b6149e2e
  87. 0042:Call user32.GetSysColor(00000005) ret=7f77b6149e3e
  88. 0042:Ret user32.GetSysColor() retval=00ffffff ret=7f77b6149e3e
  89. 0042:Call user32.GetSysColor(00000008) ret=7f77b6149e4e
  90. 0042:Ret user32.GetSysColor() retval=00000000 ret=7f77b6149e4e
  91. 0042:Call user32.GetSysColor(00000011) ret=7f77b6149e5e
  92. 0042:Ret user32.GetSysColor() retval=00808080 ret=7f77b6149e5e
  93. 0042:Call user32.GetSysColor(00000002) ret=7f77b6149e6e
  94. 0042:Ret user32.GetSysColor() retval=006a240a ret=7f77b6149e6e
  95. 0042:Call user32.GetSysColor(00000018) ret=7f77b6149e7e
  96. 0042:Ret user32.GetSysColor() retval=00000000 ret=7f77b6149e7e
  97. 0042:Call user32.GetSysColor(00000017) ret=7f77b6149e8e
  98. 0042:Ret user32.GetSysColor() retval=00ffffff ret=7f77b6149e8e
  99. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6140420
  100. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6140420
  101. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b614049e
  102. 0042:Ret user32.RegisterClassW() retval=0000c010 ret=7f77b614049e
  103. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6145520
  104. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6145520
  105. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b614559e
  106. 0042:Ret user32.RegisterClassW() retval=0000c011 ret=7f77b614559e
  107. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b614df40
  108. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b614df40
  109. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b614dfe4
  110. 0042:Ret user32.RegisterClassW() retval=0000c012 ret=7f77b614dfe4
  111. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61521e0
  112. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61521e0
  113. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b615226c
  114. 0042:Ret user32.RegisterClassW() retval=0000c013 ret=7f77b615226c
  115. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61563a0
  116. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61563a0
  117. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b615640e
  118. 0042:Ret user32.RegisterClassW() retval=0000c014 ret=7f77b615640e
  119. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b615751a
  120. 0042:Ret user32.RegisterClassW() retval=0000c015 ret=7f77b615751a
  121. 0042:Call user32.LoadCursorW(00000000,00007f01) ret=7f77b6161740
  122. 0042:Ret user32.LoadCursorW() retval=00050082 ret=7f77b6161740
  123. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61617cc
  124. 0042:Ret user32.RegisterClassW() retval=0000c016 ret=7f77b61617cc
  125. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6179de0
  126. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6179de0
  127. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b6179e65
  128. 0042:Ret user32.RegisterClassW() retval=0000c017 ret=7f77b6179e65
  129. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6181ce0
  130. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6181ce0
  131. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b6181d65
  132. 0042:Ret user32.RegisterClassW() retval=0000c018 ret=7f77b6181d65
  133. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61820e0
  134. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61820e0
  135. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b6182165
  136. 0042:Ret user32.RegisterClassW() retval=0000c019 ret=7f77b6182165
  137. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6184180
  138. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6184180
  139. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61841e2
  140. 0042:Ret user32.RegisterClassW() retval=0000c01a ret=7f77b61841e2
  141. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b6185600
  142. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b6185600
  143. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b6185698
  144. 0042:Ret user32.RegisterClassW() retval=0000c01b ret=7f77b6185698
  145. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61941d5
  146. 0042:Ret user32.RegisterClassW() retval=0000c01c ret=7f77b61941d5
  147. 0042:Call user32.GetSystemMetrics(00000044) ret=7f77b61941df
  148. 0042:Ret user32.GetSystemMetrics() retval=00000004 ret=7f77b61941df
  149. 0042:Call user32.GetSystemMetrics(00000045) ret=7f77b61941ef
  150. 0042:Ret user32.GetSystemMetrics() retval=00000004 ret=7f77b61941ef
  151. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61971e0
  152. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61971e0
  153. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b619728b
  154. 0042:Ret user32.RegisterClassW() retval=0000c01d ret=7f77b619728b
  155. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b619c51d
  156. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b619c51d
  157. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b619c56c
  158. 0042:Ret user32.RegisterClassW() retval=0000c01e ret=7f77b619c56c
  159. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61a25c0
  160. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61a25c0
  161. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61a2653
  162. 0042:Ret user32.RegisterClassW() retval=0000c01f ret=7f77b61a2653
  163. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61b3420
  164. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61b3420
  165. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61b34b3
  166. 0042:Ret user32.RegisterClassW() retval=0000c020 ret=7f77b61b34b3
  167. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61b7960
  168. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61b7960
  169. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61b7a00
  170. 0042:Ret user32.RegisterClassW() retval=0000c021 ret=7f77b61b7a00
  171. 0042:Call user32.LoadImageW(7f77b6130000,00000016,00000001,00000000,00000000,00000000) ret=7f77b61b7a35
  172. 0042:Ret user32.LoadImageW() retval=00050080 ret=7f77b61b7a35
  173. 0042:Call user32.LoadImageW(7f77b6130000,00000019,00000001,00000000,00000000,00000000) ret=7f77b61b7a66
  174. 0042:Ret user32.LoadImageW() retval=0005007e ret=7f77b61b7a66
  175. 0042:Call user32.LoadImageW(7f77b6130000,0000001c,00000001,00000000,00000000,00000000) ret=7f77b61b7a97
  176. 0042:Ret user32.LoadImageW() retval=000c0028 ret=7f77b61b7a97
  177. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61bb060
  178. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61bb060
  179. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61bb104
  180. 0042:Ret user32.RegisterClassW() retval=0000c022 ret=7f77b61bb104
  181. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61c5aea
  182. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61c5aea
  183. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61c5b6f
  184. 0042:Ret user32.RegisterClassW() retval=0000c023 ret=7f77b61c5b6f
  185. 0042:Call user32.LoadCursorW(00000000,00007f00) ret=7f77b61c7c80
  186. 0042:Ret user32.LoadCursorW() retval=00050084 ret=7f77b61c7c80
  187. 0042:Call user32.RegisterClassW(0023e210) ret=7f77b61c7d13
  188. 0042:Ret user32.RegisterClassW() retval=0000c024 ret=7f77b61c7d13
  189. 0042:Call KERNEL32.LoadLibraryA(7f77b63f7312 "uxtheme.dll") ret=7f77b61c7e21
  190. 0042:Call PE DLL (proc=0x7f77b5f0e6a0,module=0x7f77b5ef0000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil))
  191. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b5ef0000) ret=7f77b5f060ae
  192. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b5f060ae
  193. 0042:Call KERNEL32.GlobalAddAtomW(7f77b5f1d080 L"ux_theme") ret=7f77b5f0b594
  194. 0042:Ret KERNEL32.GlobalAddAtomW() retval=0000c025 ret=7f77b5f0b594
  195. 0042:Call KERNEL32.GlobalAddAtomW(7f77b5f1d0a0 L"ux_subapp") ret=7f77b5f0b5a7
  196. 0042:Ret KERNEL32.GlobalAddAtomW() retval=0000c026 ret=7f77b5f0b5a7
  197. 0042:Call KERNEL32.GlobalAddAtomW(7f77b5f1d0c0 L"ux_subidlst") ret=7f77b5f0b5ba
  198. 0042:Ret KERNEL32.GlobalAddAtomW() retval=0000c027 ret=7f77b5f0b5ba
  199. 0042:Call KERNEL32.GlobalAddAtomW(7f77b5f1d0e0 L"ux_dialogtheme") ret=7f77b5f0b5cd
  200. 0042:Ret KERNEL32.GlobalAddAtomW() retval=0000c028 ret=7f77b5f0b5cd
  201. 0042:Call advapi32.RegOpenKeyW(ffffffff80000001,7f77b5f1d100 L"Software\\Microsoft\\Windows\\CurrentVersion\\ThemeManager",0023d9d0) ret=7f77b5f0b5ec
  202. 0042:Ret advapi32.RegOpenKeyW() retval=00000000 ret=7f77b5f0b5ec
  203. 0042:Call advapi32.RegQueryValueExW(00000050,7f77b5f1d190 L"ThemeActive",00000000,00000000,0023d9e0,0023d9c4) ret=7f77b5f0b634
  204. 0042:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7f77b5f0b634
  205. 0042:Call advapi32.RegQueryValueExW(00000050,7f77b5f1d1b0 L"ColorName",00000000,00000000,7f77b6124b00,0023d9c4) ret=7f77b5f0b67d
  206. 0042:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7f77b5f0b67d
  207. 0042:Call advapi32.RegQueryValueExW(00000050,7f77b5f1d1d0 L"SizeName",00000000,00000000,7f77b6124b80,0023d9c4) ret=7f77b5f0b6ba
  208. 0042:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7f77b5f0b6ba
  209. 0042:Call advapi32.RegQueryValueExW(00000050,7f77b5f1d1f0 L"DllName",00000000,0023d9c8,7f77b6124c00,0023d9cc) ret=7f77b5f0b70e
  210. 0042:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7f77b5f0b70e
  211. 0042:Call advapi32.RegCloseKey(00000050) ret=7f77b5f0b740
  212. 0042:Ret advapi32.RegCloseKey() retval=00000000 ret=7f77b5f0b740
  213. 0042:Ret PE DLL (proc=0x7f77b5f0e6a0,module=0x7f77b5ef0000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  214. 0042:Ret KERNEL32.LoadLibraryA() retval=7f77b5ef0000 ret=7f77b61c7e21
  215. 0042:Call KERNEL32.GetProcAddress(7f77b5ef0000,7f77b63f743e "IsThemeActive") ret=7f77b61c7e00
  216. 0042:Ret KERNEL32.GetProcAddress() retval=7f77b5f0065c ret=7f77b61c7e00
  217. 0042:Call uxtheme.IsThemeActive() ret=7f77b61a522f
  218. 0042:Ret uxtheme.IsThemeActive() retval=00000000 ret=7f77b61a522f
  219. 0042:Ret PE DLL (proc=0x7f77b61c7e60,module=0x7f77b6130000 L"comctl32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  220. 0042:Call PE DLL (proc=0x7f77b64d6b00,module=0x7f77b6440000 L"shell32.dll",reason=PROCESS_ATTACH,res=(nil))
  221. 0042:Call KERNEL32.DisableThreadLibraryCalls(7f77b6440000) ret=7f77b647920b
  222. 0042:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7f77b647920b
  223. 0042:Call KERNEL32.GetModuleFileNameW(7f77b6440000,7f77b687e320,00000104) ret=7f77b6479220
  224. 0042:Ret KERNEL32.GetModuleFileNameW() retval=0000001f ret=7f77b6479220
  225. 0042:Call comctl32.InitCommonControlsEx(00000000) ret=7f77b6479230
  226. 0042:Ret comctl32.InitCommonControlsEx() retval=00000000 ret=7f77b6479230
  227. 0042:Call user32.GetSystemMetrics(00000031) ret=7f77b646a9d4
  228. 0042:Ret user32.GetSystemMetrics() retval=00000010 ret=7f77b646a9d4
  229. 0042:Call user32.GetSystemMetrics(00000032) ret=7f77b646a9e0
  230. 0042:Ret user32.GetSystemMetrics() retval=00000010 ret=7f77b646a9e0
  231. 0042:Call user32.GetSystemMetrics(0000000b) ret=7f77b646a9ed
  232. 0042:Ret user32.GetSystemMetrics() retval=00000020 ret=7f77b646a9ed
  233. 0042:Call user32.GetSystemMetrics(0000000c) ret=7f77b646a9f9
  234. 0042:Ret user32.GetSystemMetrics() retval=00000020 ret=7f77b646a9f9
  235. 0042:Call comctl32.DPA_Create(00000010) ret=7f77b646aa55
  236. 0042:Call KERNEL32.LocalAlloc(00000040,00000020) ret=7f77b614fb82
  237. 0042:Ret KERNEL32.LocalAlloc() retval=0004da50 ret=7f77b614fb82
  238. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00000100) ret=7f77b614fac0
  239. 0042:Ret ntdll.RtlAllocateHeap() retval=0004d480 ret=7f77b614fac0
  240. 0042:Ret comctl32.DPA_Create() retval=0004da50 ret=7f77b646aa55
  241. 0042:Call comctl32.ImageList_Create(00000010,00000010,00000021,00000000,00000020) ret=7f77b646aa80
  242. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,000000b8) ret=7f77b615934c
  243. 0042:Ret ntdll.RtlAllocateHeap() retval=0004d6a0 ret=7f77b615934c
  244. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615a1d9
  245. 0042:Ret gdi32.CreateCompatibleDC() retval=0004002a ret=7f77b615a1d9
  246. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615a42f
  247. 0042:Ret gdi32.CreateCompatibleDC() retval=00010031 ret=7f77b615a42f
  248. 0042:Call gdi32.CreateDIBSection(0004002a,0023db40,00000000,00000000,00000000,00000000) ret=7f77b6157a6d
  249. 0042:Ret gdi32.CreateDIBSection() retval=00010032 ret=7f77b6157a6d
  250. 0042:Call gdi32.SelectObject(0004002a,00010032) ret=7f77b615a255
  251. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b615a255
  252. 0042:Call gdi32.CreateBitmap(00000040,00000010,00000001,00000001,00000000) ret=7f77b615a492
  253. 0042:Ret gdi32.CreateBitmap() retval=00010033 ret=7f77b615a492
  254. 0042:Call gdi32.SelectObject(00010031,00010033) ret=7f77b615a4ad
  255. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b615a4ad
  256. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00000001) ret=7f77b615a4d6
  257. 0042:Ret ntdll.RtlAllocateHeap() retval=00051680 ret=7f77b615a4d6
  258. 0042:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7f77b61cd050) ret=7f77b615a2ae
  259. 0042:Ret gdi32.CreateBitmap() retval=00010034 ret=7f77b615a2ae
  260. 0042:Call gdi32.CreatePatternBrush(00010034) ret=7f77b615a2be
  261. 0042:Ret gdi32.CreatePatternBrush() retval=00010035 ret=7f77b615a2be
  262. 0042:Call gdi32.DeleteObject(00010034) ret=7f77b615a2cd
  263. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615a2cd
  264. 0042:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7f77b61cd060) ret=7f77b615a2f4
  265. 0042:Ret gdi32.CreateBitmap() retval=00020034 ret=7f77b615a2f4
  266. 0042:Call gdi32.CreatePatternBrush(00020034) ret=7f77b615a304
  267. 0042:Ret gdi32.CreatePatternBrush() retval=00010036 ret=7f77b615a304
  268. 0042:Call gdi32.DeleteObject(00020034) ret=7f77b615a313
  269. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615a313
  270. 0042:Ret comctl32.ImageList_Create() retval=0004d6a0 ret=7f77b646aa80
  271. 0042:Call comctl32.ImageList_Create(00000020,00000020,00000021,00000000,00000020) ret=7f77b646aaa2
  272. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,000000b8) ret=7f77b615934c
  273. 0042:Ret ntdll.RtlAllocateHeap() retval=00051900 ret=7f77b615934c
  274. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615a1d9
  275. 0042:Ret gdi32.CreateCompatibleDC() retval=00030034 ret=7f77b615a1d9
  276. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615a42f
  277. 0042:Ret gdi32.CreateCompatibleDC() retval=00010037 ret=7f77b615a42f
  278. 0042:Call gdi32.CreateDIBSection(00030034,0023db40,00000000,00000000,00000000,00000000) ret=7f77b6157a6d
  279. 0042:Ret gdi32.CreateDIBSection() retval=00010038 ret=7f77b6157a6d
  280. 0042:Call gdi32.SelectObject(00030034,00010038) ret=7f77b615a255
  281. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b615a255
  282. 0042:Call gdi32.CreateBitmap(00000080,00000020,00000001,00000001,00000000) ret=7f77b615a492
  283. 0042:Ret gdi32.CreateBitmap() retval=00010039 ret=7f77b615a492
  284. 0042:Call gdi32.SelectObject(00010037,00010039) ret=7f77b615a4ad
  285. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b615a4ad
  286. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00000001) ret=7f77b615a4d6
  287. 0042:Ret ntdll.RtlAllocateHeap() retval=00052900 ret=7f77b615a4d6
  288. 0042:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7f77b61cd050) ret=7f77b615a2ae
  289. 0042:Ret gdi32.CreateBitmap() retval=0001003a ret=7f77b615a2ae
  290. 0042:Call gdi32.CreatePatternBrush(0001003a) ret=7f77b615a2be
  291. 0042:Ret gdi32.CreatePatternBrush() retval=0001003b ret=7f77b615a2be
  292. 0042:Call gdi32.DeleteObject(0001003a) ret=7f77b615a2cd
  293. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615a2cd
  294. 0042:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7f77b61cd060) ret=7f77b615a2f4
  295. 0042:Ret gdi32.CreateBitmap() retval=0002003a ret=7f77b615a2f4
  296. 0042:Call gdi32.CreatePatternBrush(0002003a) ret=7f77b615a304
  297. 0042:Ret gdi32.CreatePatternBrush() retval=0001003c ret=7f77b615a304
  298. 0042:Call gdi32.DeleteObject(0002003a) ret=7f77b615a313
  299. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615a313
  300. 0042:Ret comctl32.ImageList_Create() retval=00051900 ret=7f77b646aaa2
  301. 0042:Call comctl32.ImageList_SetBkColor(0004d6a0,ffffffff) ret=7f77b646aaba
  302. 0042:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7f77b646aaba
  303. 0042:Call comctl32.ImageList_SetBkColor(00051900,ffffffff) ret=7f77b646aacb
  304. 0042:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7f77b646aacb
  305. 0042:Call user32.LoadImageA(7f77b6440000,00000001,00000001,00000010,00000010,7f7700008000) ret=7f77b646aaf2
  306. 0042:Ret user32.LoadImageA() retval=00080026 ret=7f77b646aaf2
  307. 0042:Call user32.LoadImageA(7f77b6440000,00000001,00000001,00000020,00000020,7f7700008000) ret=7f77b646ab1c
  308. 0042:Ret user32.LoadImageA() retval=000c0020 ret=7f77b646ab1c
  309. 0042:Call KERNEL32.LoadLibraryA(7f77b6727390 "ole32.dll") ret=7f77b64d6ac1
  310. 0042:Ret KERNEL32.LoadLibraryA() retval=7f77b6b40000 ret=7f77b64d6ac1
  311. 0042:Call KERNEL32.GetProcAddress(7f77b6b40000,7f77b672740f "CoTaskMemAlloc") ret=7f77b64d6aa0
  312. 0042:Ret KERNEL32.GetProcAddress() retval=7f77b6b44c28 ret=7f77b64d6aa0
  313. 0042:Call ole32.CoTaskMemAlloc(00000018) ret=7f77b648d3d7
  314. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000018) ret=7f77b6b7d3a3
  315. 0042:Ret ntdll.RtlAllocateHeap() retval=00053140 ret=7f77b6b7d3a3
  316. 0042:Ret ole32.CoTaskMemAlloc() retval=00053140 ret=7f77b648d3d7
  317. 0042:Call KERNEL32.GetFullPathNameW(7f77b687e320 L"C:\\windows\\system32\\shell32.dll",00000104,0023e030,00000000) ret=7f77b6469e15
  318. 0042:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7f77b6469e15
  319. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000040) ret=7f77b6469e53
  320. 0042:Ret ntdll.RtlAllocateHeap() retval=00052930 ret=7f77b6469e53
  321. 0042:Call comctl32.DPA_InsertPtr(0004da50,00007fff,00053140) ret=7f77b6469e99
  322. 0042:Ret comctl32.DPA_InsertPtr() retval=00000000 ret=7f77b6469e99
  323. 0042:Call comctl32.ImageList_ReplaceIcon(0004d6a0,ffffffff,00080026) ret=7f77b6469eb8
  324. 0042:Call user32.CopyImage(00080026,00000001,00000010,00000010,00004000) ret=7f77b615e092
  325. 0042:Ret user32.CopyImage() retval=000e007c ret=7f77b615e092
  326. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b6157c04
  327. 0042:Ret gdi32.CreateCompatibleDC() retval=0006003a ret=7f77b6157c04
  328. 0042:Call gdi32.CreateDIBSection(0006003a,0023d7d0,00000000,00000000,00000000,00000000) ret=7f77b6157a6d
  329. 0042:Ret gdi32.CreateDIBSection() retval=00020045 ret=7f77b6157a6d
  330. 0042:Call gdi32.SelectObject(0004002a,00020045) ret=7f77b6157c38
  331. 0042:Ret gdi32.SelectObject() retval=00010032 ret=7f77b6157c38
  332. 0042:Call gdi32.DeleteObject(00010032) ret=7f77b6157c41
  333. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b6157c41
  334. 0042:Call gdi32.CreateBitmap(00000040,00000090,00000001,00000001,00000000) ret=7f77b6157cff
  335. 0042:Ret gdi32.CreateBitmap() retval=00020032 ret=7f77b6157cff
  336. 0042:Call gdi32.SelectObject(00010031,00020032) ret=7f77b6157d22
  337. 0042:Ret gdi32.SelectObject() retval=00010033 ret=7f77b6157d22
  338. 0042:Call gdi32.DeleteObject(00010033) ret=7f77b6157d2b
  339. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b6157d2b
  340. 0042:Call ntdll.RtlReAllocateHeap(00010000,00000008,00051680,00000022) ret=7f77b6157c75
  341. 0042:Ret ntdll.RtlReAllocateHeap() retval=00052e40 ret=7f77b6157c75
  342. 0042:Call gdi32.DeleteDC(0006003a) ret=7f77b6157c91
  343. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b6157c91
  344. 0042:Call user32.GetIconInfo(000e007c,0023dd20) ret=7f77b615e0be
  345. 0042:Ret user32.GetIconInfo() retval=00000001 ret=7f77b615e0be
  346. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615e2e7
  347. 0042:Ret gdi32.CreateCompatibleDC() retval=0009003a ret=7f77b615e2e7
  348. 0042:Call gdi32.GetObjectW(00010048,00000020,0023dd40) ret=7f77b615e2fe
  349. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b615e2fe
  350. 0042:Call gdi32.GetObjectW(00010047,00000020,0023dc70) ret=7f77b61583de
  351. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b61583de
  352. 0042:Call gdi32.SelectObject(0009003a,00010047) ret=7f77b6158420
  353. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b6158420
  354. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000428) ret=7f77b6158442
  355. 0042:Ret ntdll.RtlAllocateHeap() retval=000564d0 ret=7f77b6158442
  356. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000400) ret=7f77b61584c4
  357. 0042:Ret ntdll.RtlAllocateHeap() retval=00056910 ret=7f77b61584c4
  358. 0042:Call gdi32.GetDIBits(0009003a,00010047,00000000,00000010,00056910,000564d0,00000000) ret=7f77b61584ff
  359. 0042:Ret gdi32.GetDIBits() retval=00000010 ret=7f77b61584ff
  360. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000030) ret=7f77b6158535
  361. 0042:Ret ntdll.RtlAllocateHeap() retval=00052de0 ret=7f77b6158535
  362. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00000400) ret=7f77b61585b6
  363. 0042:Ret ntdll.RtlAllocateHeap() retval=00056d20 ret=7f77b61585b6
  364. 0042:Call gdi32.GetDIBits(0009003a,00010048,00000000,00000010,00056d20,00052de0,00000000) ret=7f77b61585f6
  365. 0042:Ret gdi32.GetDIBits() retval=00000010 ret=7f77b61585f6
  366. 0042:Call gdi32.StretchDIBits(0004002a,00000000,00000000,00000010,ffff00000010,ffff000000000000,00000000,00000010,ffffffff00000010,00056910,000564d0,00000000,00cc0020) ret=7f77b61582a5
  367. 0042:Ret gdi32.StretchDIBits() retval=00000010 ret=7f77b61582a5
  368. 0042:Call gdi32.StretchDIBits(00010031,00000000,00000000,00000010,ffff00000010,ffff000000000000,00000000,00000010,ffffffff00000010,00056d20,00052de0,00000000,00cc0020) ret=7f77b61582ff
  369. 0042:Ret gdi32.StretchDIBits() retval=00000010 ret=7f77b61582ff
  370. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,000564d0) ret=7f77b6158684
  371. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b6158684
  372. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00052de0) ret=7f77b61586a0
  373. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586a0
  374. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00056910) ret=7f77b61586b9
  375. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586b9
  376. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00056d20) ret=7f77b61586d2
  377. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586d2
  378. 0042:Call gdi32.DeleteDC(0009003a) ret=7f77b615e340
  379. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b615e340
  380. 0042:Call gdi32.DeleteObject(00010048) ret=7f77b615e34a
  381. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e34a
  382. 0042:Call gdi32.DeleteObject(00010047) ret=7f77b615e359
  383. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e359
  384. 0042:Call user32.DestroyIcon(000e007c) ret=7f77b615e180
  385. 0042:Ret user32.DestroyIcon() retval=00000001 ret=7f77b615e180
  386. 0042:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7f77b6469eb8
  387. 0042:Call comctl32.ImageList_ReplaceIcon(00051900,ffffffff,000c0020) ret=7f77b6469ece
  388. 0042:Call user32.CopyImage(000c0020,00000001,00000020,00000020,00004000) ret=7f77b615e092
  389. 0042:Ret user32.CopyImage() retval=000f007c ret=7f77b615e092
  390. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b6157c04
  391. 0042:Ret gdi32.CreateCompatibleDC() retval=00040042 ret=7f77b6157c04
  392. 0042:Call gdi32.CreateDIBSection(00040042,0023d7d0,00000000,00000000,00000000,00000000) ret=7f77b6157a6d
  393. 0042:Ret gdi32.CreateDIBSection() retval=00030047 ret=7f77b6157a6d
  394. 0042:Call gdi32.SelectObject(00030034,00030047) ret=7f77b6157c38
  395. 0042:Ret gdi32.SelectObject() retval=00010038 ret=7f77b6157c38
  396. 0042:Call gdi32.DeleteObject(00010038) ret=7f77b6157c41
  397. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b6157c41
  398. 0042:Call gdi32.CreateBitmap(00000080,00000120,00000001,00000001,00000000) ret=7f77b6157cff
  399. 0042:Ret gdi32.CreateBitmap() retval=00020038 ret=7f77b6157cff
  400. 0042:Call gdi32.SelectObject(00010037,00020038) ret=7f77b6157d22
  401. 0042:Ret gdi32.SelectObject() retval=00010039 ret=7f77b6157d22
  402. 0042:Call gdi32.DeleteObject(00010039) ret=7f77b6157d2b
  403. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b6157d2b
  404. 0042:Call ntdll.RtlReAllocateHeap(00010000,00000008,00052900,00000022) ret=7f77b6157c75
  405. 0042:Ret ntdll.RtlReAllocateHeap() retval=00052de0 ret=7f77b6157c75
  406. 0042:Call gdi32.DeleteDC(00040042) ret=7f77b6157c91
  407. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b6157c91
  408. 0042:Call user32.GetIconInfo(000f007c,0023dd20) ret=7f77b615e0be
  409. 0042:Ret user32.GetIconInfo() retval=00000001 ret=7f77b615e0be
  410. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615e2e7
  411. 0042:Ret gdi32.CreateCompatibleDC() retval=00070042 ret=7f77b615e2e7
  412. 0042:Call gdi32.GetObjectW(00040033,00000020,0023dd40) ret=7f77b615e2fe
  413. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b615e2fe
  414. 0042:Call gdi32.GetObjectW(000a003a,00000020,0023dc70) ret=7f77b61583de
  415. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b61583de
  416. 0042:Call gdi32.SelectObject(00070042,000a003a) ret=7f77b6158420
  417. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b6158420
  418. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000428) ret=7f77b6158442
  419. 0042:Ret ntdll.RtlAllocateHeap() retval=000592f0 ret=7f77b6158442
  420. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00001000) ret=7f77b61584c4
  421. 0042:Ret ntdll.RtlAllocateHeap() retval=00059730 ret=7f77b61584c4
  422. 0042:Call gdi32.GetDIBits(00070042,000a003a,00000000,00000020,00059730,000592f0,00000000) ret=7f77b61584ff
  423. 0042:Ret gdi32.GetDIBits() retval=00000020 ret=7f77b61584ff
  424. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000030) ret=7f77b6158535
  425. 0042:Ret ntdll.RtlAllocateHeap() retval=00052ea0 ret=7f77b6158535
  426. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00001000) ret=7f77b61585b6
  427. 0042:Ret ntdll.RtlAllocateHeap() retval=0005a740 ret=7f77b61585b6
  428. 0042:Call gdi32.GetDIBits(00070042,00040033,00000000,00000020,0005a740,00052ea0,00000000) ret=7f77b61585f6
  429. 0042:Ret gdi32.GetDIBits() retval=00000020 ret=7f77b61585f6
  430. 0042:Call gdi32.StretchDIBits(00030034,00000000,00000000,00000020,ffff00000020,ffff000000000000,00000000,00000020,ffffffff00000020,00059730,000592f0,00000000,00cc0020) ret=7f77b61582a5
  431. 0042:Ret gdi32.StretchDIBits() retval=00000020 ret=7f77b61582a5
  432. 0042:Call gdi32.StretchDIBits(00010037,00000000,00000000,00000020,ffff00000020,ffff000000000000,00000000,00000020,ffffffff00000020,0005a740,00052ea0,00000000,00cc0020) ret=7f77b61582ff
  433. 0042:Ret gdi32.StretchDIBits() retval=00000020 ret=7f77b61582ff
  434. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,000592f0) ret=7f77b6158684
  435. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b6158684
  436. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00052ea0) ret=7f77b61586a0
  437. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586a0
  438. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00059730) ret=7f77b61586b9
  439. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586b9
  440. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,0005a740) ret=7f77b61586d2
  441. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586d2
  442. 0042:Call gdi32.DeleteDC(00070042) ret=7f77b615e340
  443. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b615e340
  444. 0042:Call gdi32.DeleteObject(00040033) ret=7f77b615e34a
  445. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e34a
  446. 0042:Call gdi32.DeleteObject(000a003a) ret=7f77b615e359
  447. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e359
  448. 0042:Call user32.DestroyIcon(000f007c) ret=7f77b615e180
  449. 0042:Ret user32.DestroyIcon() retval=00000001 ret=7f77b615e180
  450. 0042:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7f77b6469ece
  451. 0042:Call ole32.CoTaskMemAlloc(00000018) ret=7f77b648d3d7
  452. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000018) ret=7f77b6b7d3a3
  453. 0042:Ret ntdll.RtlAllocateHeap() retval=00052980 ret=7f77b6b7d3a3
  454. 0042:Ret ole32.CoTaskMemAlloc() retval=00052980 ret=7f77b648d3d7
  455. 0042:Call KERNEL32.GetFullPathNameW(7f77b687e320 L"C:\\windows\\system32\\shell32.dll",00000104,0023e030,00000000) ret=7f77b6469e15
  456. 0042:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7f77b6469e15
  457. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000040) ret=7f77b6469e53
  458. 0042:Ret ntdll.RtlAllocateHeap() retval=00052ea0 ret=7f77b6469e53
  459. 0042:Call comctl32.DPA_InsertPtr(0004da50,00007fff,00052980) ret=7f77b6469e99
  460. 0042:Ret comctl32.DPA_InsertPtr() retval=00000001 ret=7f77b6469e99
  461. 0042:Call comctl32.ImageList_ReplaceIcon(0004d6a0,ffffffff,00080026) ret=7f77b6469eb8
  462. 0042:Call user32.CopyImage(00080026,00000001,00000010,00000010,00004000) ret=7f77b615e092
  463. 0042:Ret user32.CopyImage() retval=0010007c ret=7f77b615e092
  464. 0042:Call user32.GetIconInfo(0010007c,0023dd20) ret=7f77b615e0be
  465. 0042:Ret user32.GetIconInfo() retval=00000001 ret=7f77b615e0be
  466. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615e2e7
  467. 0042:Ret gdi32.CreateCompatibleDC() retval=00060044 ret=7f77b615e2e7
  468. 0042:Call gdi32.GetObjectW(00040039,00000020,0023dd40) ret=7f77b615e2fe
  469. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b615e2fe
  470. 0042:Call gdi32.GetObjectW(00080042,00000020,0023dc70) ret=7f77b61583de
  471. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b61583de
  472. 0042:Call gdi32.SelectObject(00060044,00080042) ret=7f77b6158420
  473. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b6158420
  474. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000428) ret=7f77b6158442
  475. 0042:Ret ntdll.RtlAllocateHeap() retval=000582e0 ret=7f77b6158442
  476. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000400) ret=7f77b61584c4
  477. 0042:Ret ntdll.RtlAllocateHeap() retval=000555d0 ret=7f77b61584c4
  478. 0042:Call gdi32.GetDIBits(00060044,00080042,00000000,00000010,000555d0,000582e0,00000000) ret=7f77b61584ff
  479. 0042:Ret gdi32.GetDIBits() retval=00000010 ret=7f77b61584ff
  480. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000030) ret=7f77b6158535
  481. 0042:Ret ntdll.RtlAllocateHeap() retval=00053df0 ret=7f77b6158535
  482. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00000400) ret=7f77b61585b6
  483. 0042:Ret ntdll.RtlAllocateHeap() retval=00058720 ret=7f77b61585b6
  484. 0042:Call gdi32.GetDIBits(00060044,00040039,00000000,00000010,00058720,00053df0,00000000) ret=7f77b61585f6
  485. 0042:Ret gdi32.GetDIBits() retval=00000010 ret=7f77b61585f6
  486. 0042:Call gdi32.StretchDIBits(0004002a,00000010,00000000,00000010,ffff00000010,ffff000000000000,00000000,00000010,ffffffff00000010,000555d0,000582e0,00000000,00cc0020) ret=7f77b61582a5
  487. 0042:Ret gdi32.StretchDIBits() retval=00000010 ret=7f77b61582a5
  488. 0042:Call gdi32.StretchDIBits(00010031,00000010,00000000,00000010,ffff00000010,ffff000000000000,00000000,00000010,ffffffff00000010,00058720,00053df0,00000000,00cc0020) ret=7f77b61582ff
  489. 0042:Ret gdi32.StretchDIBits() retval=00000010 ret=7f77b61582ff
  490. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,000582e0) ret=7f77b6158684
  491. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b6158684
  492. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00053df0) ret=7f77b61586a0
  493. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586a0
  494. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,000555d0) ret=7f77b61586b9
  495. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586b9
  496. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00058720) ret=7f77b61586d2
  497. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586d2
  498. 0042:Call gdi32.DeleteDC(00060044) ret=7f77b615e340
  499. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b615e340
  500. 0042:Call gdi32.DeleteObject(00040039) ret=7f77b615e34a
  501. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e34a
  502. 0042:Call gdi32.DeleteObject(00080042) ret=7f77b615e359
  503. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e359
  504. 0042:Call user32.DestroyIcon(0010007c) ret=7f77b615e180
  505. 0042:Ret user32.DestroyIcon() retval=00000001 ret=7f77b615e180
  506. 0042:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7f77b6469eb8
  507. 0042:Call comctl32.ImageList_ReplaceIcon(00051900,ffffffff,000c0020) ret=7f77b6469ece
  508. 0042:Call user32.CopyImage(000c0020,00000001,00000020,00000020,00004000) ret=7f77b615e092
  509. 0042:Ret user32.CopyImage() retval=0011007c ret=7f77b615e092
  510. 0042:Call user32.GetIconInfo(0011007c,0023dd20) ret=7f77b615e0be
  511. 0042:Ret user32.GetIconInfo() retval=00000001 ret=7f77b615e0be
  512. 0042:Call gdi32.CreateCompatibleDC(00000000) ret=7f77b615e2e7
  513. 0042:Ret gdi32.CreateCompatibleDC() retval=00070046 ret=7f77b615e2e7
  514. 0042:Call gdi32.GetObjectW(000e003a,00000020,0023dd40) ret=7f77b615e2fe
  515. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b615e2fe
  516. 0042:Call gdi32.GetObjectW(00070044,00000020,0023dc70) ret=7f77b61583de
  517. 0042:Ret gdi32.GetObjectW() retval=00000020 ret=7f77b61583de
  518. 0042:Call gdi32.SelectObject(00070046,00070044) ret=7f77b6158420
  519. 0042:Ret gdi32.SelectObject() retval=0001001a ret=7f77b6158420
  520. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000428) ret=7f77b6158442
  521. 0042:Ret ntdll.RtlAllocateHeap() retval=0005a300 ret=7f77b6158442
  522. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00001000) ret=7f77b61584c4
  523. 0042:Ret ntdll.RtlAllocateHeap() retval=0005a740 ret=7f77b61584c4
  524. 0042:Call gdi32.GetDIBits(00070046,00070044,00000000,00000020,0005a740,0005a300,00000000) ret=7f77b61584ff
  525. 0042:Ret gdi32.GetDIBits() retval=00000020 ret=7f77b61584ff
  526. 0042:Call ntdll.RtlAllocateHeap(00010000,00000000,00000030) ret=7f77b6158535
  527. 0042:Ret ntdll.RtlAllocateHeap() retval=00053e50 ret=7f77b6158535
  528. 0042:Call ntdll.RtlAllocateHeap(00010000,00000008,00001000) ret=7f77b61585b6
  529. 0042:Ret ntdll.RtlAllocateHeap() retval=0005b750 ret=7f77b61585b6
  530. 0042:Call gdi32.GetDIBits(00070046,000e003a,00000000,00000020,0005b750,00053e50,00000000) ret=7f77b61585f6
  531. 0042:Ret gdi32.GetDIBits() retval=00000020 ret=7f77b61585f6
  532. 0042:Call gdi32.StretchDIBits(00030034,00000020,00000000,00000020,ffff00000020,ffff000000000000,00000000,00000020,ffffffff00000020,0005a740,0005a300,00000000,00cc0020) ret=7f77b61582a5
  533. 0042:Ret gdi32.StretchDIBits() retval=00000020 ret=7f77b61582a5
  534. 0042:Call gdi32.StretchDIBits(00010037,00000020,00000000,00000020,ffff00000020,ffff000000000000,00000000,00000020,ffffffff00000020,0005b750,00053e50,00000000,00cc0020) ret=7f77b61582ff
  535. 0042:Ret gdi32.StretchDIBits() retval=00000020 ret=7f77b61582ff
  536. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,0005a300) ret=7f77b6158684
  537. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b6158684
  538. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,00053e50) ret=7f77b61586a0
  539. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586a0
  540. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,0005a740) ret=7f77b61586b9
  541. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586b9
  542. 0042:Call ntdll.RtlFreeHeap(00010000,00000000,0005b750) ret=7f77b61586d2
  543. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7f77b61586d2
  544. 0042:Call gdi32.DeleteDC(00070046) ret=7f77b615e340
  545. 0042:Ret gdi32.DeleteDC() retval=00000001 ret=7f77b615e340
  546. 0042:Call gdi32.DeleteObject(000e003a) ret=7f77b615e34a
  547. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e34a
  548. 0042:Call gdi32.DeleteObject(00070044) ret=7f77b615e359
  549. 0042:Ret gdi32.DeleteObject() retval=00000001 ret=7f77b615e359
  550. 0042:Call user32.DestroyIcon(0011007c) ret=7f77b615e180
  551. 0042:Ret user32.DestroyIcon() retval=00000001 ret=7f77b615e180
  552. 0042:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7f77b6469ece
  553. 0042:Ret PE DLL (proc=0x7f77b64d6b00,module=0x7f77b6440000 L"shell32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  554. 0042:Call PE DLL (proc=0x18002f27c,module=0x180000000 L"Automaton.dll",reason=PROCESS_ATTACH,res=(nil))
  555. 0042:Call KERNEL32.GetSystemTimeAsFileTime(0023e400) ret=1800350b5
  556. 0042:Ret KERNEL32.GetSystemTimeAsFileTime() retval=01ce2e69 ret=1800350b5
  557. 0042:Call KERNEL32.GetCurrentProcessId() ret=1800350c0
  558. 0042:Ret KERNEL32.GetCurrentProcessId() retval=00000041 ret=1800350c0
  559. 0042:Call KERNEL32.GetCurrentThreadId() ret=1800350cc
  560. 0042:Ret KERNEL32.GetCurrentThreadId() retval=00000042 ret=1800350cc
  561. 0042:Call KERNEL32.GetTickCount() ret=1800350d8
  562. 0042:Ret KERNEL32.GetTickCount() retval=162f8b16 ret=1800350d8
  563. 0042:Call KERNEL32.QueryPerformanceCounter(0023e408) ret=1800350e9
  564. 0042:Ret KERNEL32.QueryPerformanceCounter() retval=00000001 ret=1800350e9
  565. 0042:Call KERNEL32.HeapCreate(00000000,00001000,00000000) ret=180031068
  566. 0042:Ret KERNEL32.HeapCreate() retval=002c4000 ret=180031068
  567. 0042:Call KERNEL32.GetVersion() ret=18003107a
  568. 0042:Ret KERNEL32.GetVersion() retval=0a280105 ret=18003107a
  569. 0042:Call KERNEL32.HeapSetInformation(002c4000,00000000,0023e3c0,00000004) ret=180031098
  570. fixme:heap:HeapSetInformation 0x2c4000 0 0x23e3c0 4
  571. 0042:Ret KERNEL32.HeapSetInformation() retval=00000001 ret=180031098
  572. 0042:Call ntdll.RtlEncodePointer(00000000) ret=18002f92f
  573. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a78ad22 ret=18002f92f
  574. 0042:Call ntdll.RtlEncodePointer(1800324b4) ret=180032511
  575. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b8996 ret=180032511
  576. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800697f0,00000fa0) ret=18003517f
  577. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  578. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069818,00000fa0) ret=18003517f
  579. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  580. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069840,00000fa0) ret=18003517f
  581. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  582. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069868,00000fa0) ret=18003517f
  583. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  584. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069890,00000fa0) ret=18003517f
  585. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  586. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800698b8,00000fa0) ret=18003517f
  587. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  588. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800698e0,00000fa0) ret=18003517f
  589. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  590. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069908,00000fa0) ret=18003517f
  591. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  592. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069930,00000fa0) ret=18003517f
  593. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  594. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069958,00000fa0) ret=18003517f
  595. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  596. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(180069980,00000fa0) ret=18003517f
  597. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  598. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800699a8,00000fa0) ret=18003517f
  599. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  600. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800699d0,00000fa0) ret=18003517f
  601. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  602. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(1800699f8,00000fa0) ret=18003517f
  603. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=18003517f
  604. 0042:Call KERNEL32.FlsAlloc(180032154) ret=1800322e9
  605. 0042:Ret KERNEL32.FlsAlloc() retval=00000000 ret=1800322e9
  606. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,000002c8) ret=1800353e1
  607. 0042:Ret ntdll.RtlAllocateHeap() retval=002c42f0 ret=1800353e1
  608. 0042:Call KERNEL32.GetCurrentThreadId() ret=18003232e
  609. 0042:Ret KERNEL32.GetCurrentThreadId() retval=00000042 ret=18003232e
  610. 0042:Call KERNEL32.GetCommandLineA() ret=18002f049
  611. 0042:Ret KERNEL32.GetCommandLineA() retval=00035050 ret=18002f049
  612. 0042:Call KERNEL32.GetEnvironmentStringsW() ret=180034d4f
  613. 0042:Ret KERNEL32.GetEnvironmentStringsW() retval=00130000 ret=180034d4f
  614. 0042:Call KERNEL32.WideCharToMultiByte(00000000,00000000,00130000 L"XDG_VTNR=1",00000a2c,00000000,00000000,00000000,00000000) ret=180034da6
  615. 0042:Ret KERNEL32.WideCharToMultiByte() retval=00000a2c ret=180034da6
  616. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000a2c) ret=18002dbd3
  617. 0042:Ret ntdll.RtlAllocateHeap() retval=002c45d0 ret=18002dbd3
  618. 0042:Call KERNEL32.WideCharToMultiByte(00000000,00000000,00130000 L"XDG_VTNR=1",00000a2c,002c45d0,00000a2c,00000000,00000000) ret=180034de1
  619. 0042:Ret KERNEL32.WideCharToMultiByte() retval=00000a2c ret=180034de1
  620. 0042:Call KERNEL32.FreeEnvironmentStringsW(00130000) ret=180034df9
  621. 0042:Ret KERNEL32.FreeEnvironmentStringsW() retval=00000001 ret=180034df9
  622. 0042:Call KERNEL32.GetStartupInfoW(0023e330) ret=180033cdb
  623. 0042:Ret KERNEL32.GetStartupInfoW() retval=0023e330 ret=180033cdb
  624. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000b00) ret=1800353e1
  625. 0042:Ret ntdll.RtlAllocateHeap() retval=002c5010 ret=1800353e1
  626. 0042:Call KERNEL32.GetStdHandle(fffffff6) ret=180033ee3
  627. 0042:Ret KERNEL32.GetStdHandle() retval=0000000f ret=180033ee3
  628. 0042:Call KERNEL32.GetFileType(0000000f) ret=180033efa
  629. 0042:Ret KERNEL32.GetFileType() retval=00000002 ret=180033efa
  630. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(002c5020,00000fa0) ret=180033f2b
  631. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=180033f2b
  632. 0042:Call KERNEL32.GetStdHandle(fffffff5) ret=180033ee3
  633. 0042:Ret KERNEL32.GetStdHandle() retval=00000013 ret=180033ee3
  634. 0042:Call KERNEL32.GetFileType(00000013) ret=180033efa
  635. 0042:Ret KERNEL32.GetFileType() retval=00000002 ret=180033efa
  636. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(002c5078,00000fa0) ret=180033f2b
  637. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=180033f2b
  638. 0042:Call KERNEL32.GetStdHandle(fffffff4) ret=180033ee3
  639. 0042:Ret KERNEL32.GetStdHandle() retval=0000001b ret=180033ee3
  640. 0042:Call KERNEL32.GetFileType(0000001b) ret=180033efa
  641. 0042:Ret KERNEL32.GetFileType() retval=00000002 ret=180033efa
  642. 0042:Call KERNEL32.InitializeCriticalSectionAndSpinCount(002c50d0,00000fa0) ret=180033f2b
  643. 0042:Ret KERNEL32.InitializeCriticalSectionAndSpinCount() retval=00000001 ret=180033f2b
  644. 0042:Call KERNEL32.SetHandleCount(00000020) ret=180033f66
  645. 0042:Ret KERNEL32.SetHandleCount() retval=00000020 ret=180033f66
  646. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  647. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  648. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  649. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  650. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  651. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  652. 0042:Call KERNEL32.GetACP() ret=18003178a
  653. 0042:Ret KERNEL32.GetACP() retval=000004e4 ret=18003178a
  654. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000220) ret=18002dbd3
  655. 0042:Ret ntdll.RtlAllocateHeap() retval=002c5b20 ret=18002dbd3
  656. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  657. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  658. 0042:Call KERNEL32.IsValidCodePage(000004e4) ret=180031849
  659. 0042:Ret KERNEL32.IsValidCodePage() retval=00000001 ret=180031849
  660. 0042:Call KERNEL32.GetCPInfo(000004e4,0023e2c0) ret=18003185e
  661. 0042:Ret KERNEL32.GetCPInfo() retval=00000001 ret=18003185e
  662. 0042:Call KERNEL32.GetCPInfo(000004e4,0023dd60) ret=1800314c4
  663. 0042:Ret KERNEL32.GetCPInfo() retval=00000001 ret=1800314c4
  664. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  665. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  666. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=180036a50
  667. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=180036a50
  668. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0023da60,00000100) ret=180036afc
  669. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=180036afc
  670. 0042:Call KERNEL32.GetStringTypeW(00000001,0023da60 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0023e080) ret=180036b13
  671. 0042:Ret KERNEL32.GetStringTypeW() retval=00000001 ret=180036b13
  672. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  673. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  674. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,ef00ee00000000) ret=1800325c0
  675. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=1800325c0
  676. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0023da50,00000100) ret=18003265d
  677. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=18003265d
  678. 0042:Call KERNEL32.LCMapStringW(00000000,00000100,0023da50 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=180032684
  679. 0042:Ret KERNEL32.LCMapStringW() retval=00000100 ret=180032684
  680. 0042:Call KERNEL32.LCMapStringW(00000000,00000100,0023da50 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0023d840,00000100) ret=18003275e
  681. 0042:Ret KERNEL32.LCMapStringW() retval=00000100 ret=18003275e
  682. 0042:Call KERNEL32.WideCharToMultiByte(000004e4,00000000,0023d840 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0161"...,00000100,0023de80,00000100,00000000,00000000) ret=18003279e
  683. 0042:Ret KERNEL32.WideCharToMultiByte() retval=00000100 ret=18003279e
  684. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  685. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  686. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,f700f600000000) ret=1800325c0
  687. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=1800325c0
  688. 0042:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0023dd80 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0023da50,00000100) ret=18003265d
  689. 0042:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=18003265d
  690. 0042:Call KERNEL32.LCMapStringW(00000000,00000200,0023da50 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=180032684
  691. 0042:Ret KERNEL32.LCMapStringW() retval=00000100 ret=180032684
  692. 0042:Call KERNEL32.LCMapStringW(00000000,00000200,0023da50 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0023d840,00000100) ret=18003275e
  693. 0042:Ret KERNEL32.LCMapStringW() retval=00000100 ret=18003275e
  694. 0042:Call KERNEL32.WideCharToMultiByte(000004e4,00000000,0023d840 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\007f\20ac\0081\201a\0191\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0023df80,00000100,00000000,00000000) ret=18003279e
  695. 0042:Ret KERNEL32.WideCharToMultiByte() retval=00000100 ret=18003279e
  696. 0042:Call KERNEL32.GetModuleFileNameA(00000000,1800696e0,00000104) ret=180034c74
  697. 0042:Ret KERNEL32.GetModuleFileNameA() retval=0000002e ret=180034c74
  698. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  699. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  700. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  701. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  702. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  703. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  704. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  705. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  706. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  707. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  708. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  709. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  710. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  711. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  712. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  713. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  714. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  715. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  716. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  717. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  718. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  719. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  720. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  721. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  722. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  723. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  724. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  725. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  726. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  727. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  728. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  729. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  730. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  731. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  732. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  733. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  734. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  735. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  736. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  737. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  738. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  739. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  740. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  741. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  742. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  743. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  744. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  745. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  746. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  747. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  748. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  749. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  750. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  751. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  752. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  753. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  754. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  755. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  756. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  757. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  758. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  759. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  760. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  761. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  762. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  763. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  764. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  765. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  766. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  767. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  768. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  769. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  770. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  771. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  772. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  773. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  774. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  775. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  776. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  777. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  778. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  779. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  780. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  781. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  782. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  783. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  784. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  785. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  786. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  787. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  788. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  789. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  790. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  791. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  792. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  793. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  794. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  795. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  796. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  797. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  798. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  799. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  800. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  801. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  802. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  803. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  804. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  805. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  806. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  807. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  808. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  809. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  810. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  811. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  812. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  813. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  814. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  815. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  816. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  817. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  818. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  819. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  820. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  821. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  822. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  823. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  824. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  825. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  826. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  827. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  828. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  829. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  830. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  831. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  832. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  833. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  834. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  835. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  836. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  837. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  838. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  839. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  840. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  841. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  842. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  843. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  844. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  845. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  846. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  847. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  848. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  849. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  850. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  851. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  852. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  853. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  854. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  855. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  856. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  857. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  858. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  859. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  860. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  861. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  862. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  863. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  864. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  865. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  866. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,0000006d) ret=18002dbd3
  867. 0042:Ret ntdll.RtlAllocateHeap() retval=002c5d50 ret=18002dbd3
  868. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  869. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  870. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  871. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  872. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  873. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  874. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  875. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  876. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  877. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  878. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  879. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  880. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  881. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  882. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  883. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  884. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  885. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  886. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  887. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  888. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  889. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  890. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  891. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  892. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  893. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  894. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  895. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  896. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  897. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  898. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  899. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  900. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  901. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  902. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  903. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  904. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  905. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  906. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  907. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  908. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  909. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  910. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  911. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  912. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  913. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  914. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  915. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  916. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  917. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  918. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  919. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  920. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  921. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  922. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  923. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  924. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  925. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  926. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  927. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  928. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  929. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  930. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  931. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  932. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  933. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  934. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  935. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  936. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  937. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  938. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  939. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  940. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  941. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  942. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  943. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  944. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  945. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  946. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  947. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  948. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  949. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  950. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  951. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  952. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  953. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  954. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  955. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  956. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  957. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  958. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  959. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  960. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  961. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  962. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  963. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  964. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  965. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  966. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  967. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  968. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  969. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  970. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  971. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  972. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  973. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  974. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  975. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  976. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  977. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  978. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  979. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  980. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  981. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  982. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  983. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  984. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  985. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  986. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  987. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  988. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  989. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  990. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  991. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  992. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  993. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  994. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  995. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  996. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  997. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  998. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  999. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1000. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1001. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1002. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1003. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1004. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1005. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1006. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1007. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1008. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1009. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1010. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1011. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1012. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1013. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1014. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1015. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1016. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1017. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1018. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1019. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1020. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1021. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1022. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1023. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1024. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1025. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1026. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1027. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1028. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1029. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1030. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1031. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1032. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1033. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1034. 0042:Call KERNEL32.GetLastError() ret=1800320bc
  1035. 0042:Ret KERNEL32.GetLastError() retval=00000000 ret=1800320bc
  1036. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000290) ret=1800353e1
  1037. 0042:Ret ntdll.RtlAllocateHeap() retval=002c5dd0 ret=1800353e1
  1038. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000b) ret=1800353e1
  1039. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6070 ret=1800353e1
  1040. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000011) ret=1800353e1
  1041. 0042:Ret ntdll.RtlAllocateHeap() retval=002c60a0 ret=1800353e1
  1042. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000019) ret=1800353e1
  1043. 0042:Ret ntdll.RtlAllocateHeap() retval=002c60d0 ret=1800353e1
  1044. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000035) ret=1800353e1
  1045. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6100 ret=1800353e1
  1046. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000010) ret=1800353e1
  1047. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6150 ret=1800353e1
  1048. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000b) ret=1800353e1
  1049. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6180 ret=1800353e1
  1050. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000051) ret=1800353e1
  1051. 0042:Ret ntdll.RtlAllocateHeap() retval=002c61b0 ret=1800353e1
  1052. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000018) ret=1800353e1
  1053. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6220 ret=1800353e1
  1054. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000026) ret=1800353e1
  1055. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6250 ret=1800353e1
  1056. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000012) ret=1800353e1
  1057. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6290 ret=1800353e1
  1058. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000034) ret=1800353e1
  1059. 0042:Ret ntdll.RtlAllocateHeap() retval=002c62c0 ret=1800353e1
  1060. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000020) ret=1800353e1
  1061. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6310 ret=1800353e1
  1062. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000026) ret=1800353e1
  1063. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6340 ret=1800353e1
  1064. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000b) ret=1800353e1
  1065. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6380 ret=1800353e1
  1066. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000002a) ret=1800353e1
  1067. 0042:Ret ntdll.RtlAllocateHeap() retval=002c63b0 ret=1800353e1
  1068. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000038) ret=1800353e1
  1069. 0042:Ret ntdll.RtlAllocateHeap() retval=002c63f0 ret=1800353e1
  1070. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000016) ret=1800353e1
  1071. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6440 ret=1800353e1
  1072. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000030) ret=1800353e1
  1073. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6470 ret=1800353e1
  1074. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001a) ret=1800353e1
  1075. 0042:Ret ntdll.RtlAllocateHeap() retval=002c64b0 ret=1800353e1
  1076. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000050) ret=1800353e1
  1077. 0042:Ret ntdll.RtlAllocateHeap() retval=002c64e0 ret=1800353e1
  1078. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000029) ret=1800353e1
  1079. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6540 ret=1800353e1
  1080. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000003e) ret=1800353e1
  1081. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6580 ret=1800353e1
  1082. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001c) ret=1800353e1
  1083. 0042:Ret ntdll.RtlAllocateHeap() retval=002c65d0 ret=1800353e1
  1084. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001b) ret=1800353e1
  1085. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6600 ret=1800353e1
  1086. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000f) ret=1800353e1
  1087. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6630 ret=1800353e1
  1088. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000014) ret=1800353e1
  1089. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6660 ret=1800353e1
  1090. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000c) ret=1800353e1
  1091. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6690 ret=1800353e1
  1092. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000011) ret=1800353e1
  1093. 0042:Ret ntdll.RtlAllocateHeap() retval=002c66c0 ret=1800353e1
  1094. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000003a) ret=1800353e1
  1095. 0042:Ret ntdll.RtlAllocateHeap() retval=002c66f0 ret=1800353e1
  1096. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000018) ret=1800353e1
  1097. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6740 ret=1800353e1
  1098. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000008) ret=1800353e1
  1099. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6770 ret=1800353e1
  1100. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000f) ret=1800353e1
  1101. 0042:Ret ntdll.RtlAllocateHeap() retval=002c67a0 ret=1800353e1
  1102. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000026) ret=1800353e1
  1103. 0042:Ret ntdll.RtlAllocateHeap() retval=002c67d0 ret=1800353e1
  1104. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000002c) ret=1800353e1
  1105. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6810 ret=1800353e1
  1106. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000028) ret=1800353e1
  1107. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6850 ret=1800353e1
  1108. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000e) ret=1800353e1
  1109. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6890 ret=1800353e1
  1110. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000011) ret=1800353e1
  1111. 0042:Ret ntdll.RtlAllocateHeap() retval=002c68c0 ret=1800353e1
  1112. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000012) ret=1800353e1
  1113. 0042:Ret ntdll.RtlAllocateHeap() retval=002c68f0 ret=1800353e1
  1114. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000013) ret=1800353e1
  1115. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6920 ret=1800353e1
  1116. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000062) ret=1800353e1
  1117. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6950 ret=1800353e1
  1118. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001a) ret=1800353e1
  1119. 0042:Ret ntdll.RtlAllocateHeap() retval=002c69d0 ret=1800353e1
  1120. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000004f) ret=1800353e1
  1121. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6a00 ret=1800353e1
  1122. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000f) ret=1800353e1
  1123. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6a60 ret=1800353e1
  1124. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000d) ret=1800353e1
  1125. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6a90 ret=1800353e1
  1126. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000d) ret=1800353e1
  1127. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6ac0 ret=1800353e1
  1128. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001f) ret=1800353e1
  1129. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6af0 ret=1800353e1
  1130. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000046) ret=1800353e1
  1131. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6b20 ret=1800353e1
  1132. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000016) ret=1800353e1
  1133. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6b80 ret=1800353e1
  1134. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000023) ret=1800353e1
  1135. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6bb0 ret=1800353e1
  1136. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000019) ret=1800353e1
  1137. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6bf0 ret=1800353e1
  1138. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000013) ret=1800353e1
  1139. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6c20 ret=1800353e1
  1140. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000017) ret=1800353e1
  1141. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6c50 ret=1800353e1
  1142. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000e) ret=1800353e1
  1143. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6c80 ret=1800353e1
  1144. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000039) ret=1800353e1
  1145. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6cb0 ret=1800353e1
  1146. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001d) ret=1800353e1
  1147. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6d00 ret=1800353e1
  1148. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000046) ret=1800353e1
  1149. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6d30 ret=1800353e1
  1150. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000013) ret=1800353e1
  1151. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6d90 ret=1800353e1
  1152. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000018) ret=1800353e1
  1153. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6dc0 ret=1800353e1
  1154. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000f) ret=1800353e1
  1155. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6df0 ret=1800353e1
  1156. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000016) ret=1800353e1
  1157. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6e20 ret=1800353e1
  1158. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001e) ret=1800353e1
  1159. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6e50 ret=1800353e1
  1160. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000024) ret=1800353e1
  1161. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6e80 ret=1800353e1
  1162. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000005a) ret=1800353e1
  1163. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6ec0 ret=1800353e1
  1164. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000019) ret=1800353e1
  1165. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6f30 ret=1800353e1
  1166. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000018) ret=1800353e1
  1167. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6f60 ret=1800353e1
  1168. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000012) ret=1800353e1
  1169. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6f90 ret=1800353e1
  1170. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000028) ret=1800353e1
  1171. 0042:Ret ntdll.RtlAllocateHeap() retval=002c6fc0 ret=1800353e1
  1172. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000013) ret=1800353e1
  1173. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7000 ret=1800353e1
  1174. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000d) ret=1800353e1
  1175. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7030 ret=1800353e1
  1176. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000016) ret=1800353e1
  1177. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7060 ret=1800353e1
  1178. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000003c) ret=1800353e1
  1179. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7090 ret=1800353e1
  1180. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000014) ret=1800353e1
  1181. 0042:Ret ntdll.RtlAllocateHeap() retval=002c70e0 ret=1800353e1
  1182. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000014) ret=1800353e1
  1183. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7110 ret=1800353e1
  1184. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000011) ret=1800353e1
  1185. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7140 ret=1800353e1
  1186. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000000f) ret=1800353e1
  1187. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7170 ret=1800353e1
  1188. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001b) ret=1800353e1
  1189. 0042:Ret ntdll.RtlAllocateHeap() retval=002c71a0 ret=1800353e1
  1190. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000020) ret=1800353e1
  1191. 0042:Ret ntdll.RtlAllocateHeap() retval=002c71d0 ret=1800353e1
  1192. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001e) ret=1800353e1
  1193. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7200 ret=1800353e1
  1194. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,0000001e) ret=1800353e1
  1195. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7230 ret=1800353e1
  1196. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000031) ret=1800353e1
  1197. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7260 ret=1800353e1
  1198. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000031) ret=1800353e1
  1199. 0042:Ret ntdll.RtlAllocateHeap() retval=002c72b0 ret=1800353e1
  1200. 0042:Call ntdll.RtlFreeHeap(002c4000,00000000,002c45d0) ret=18002db54
  1201. 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=18002db54
  1202. 0042:Call ntdll.RtlEncodePointer(18003c0c0) ret=180035807
  1203. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b6de2 ret=180035807
  1204. 0042:Call ntdll.RtlEncodePointer(18003b570) ret=180035807
  1205. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b1852 ret=180035807
  1206. 0042:Call ntdll.RtlEncodePointer(18003b560) ret=180035807
  1207. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b1842 ret=180035807
  1208. 0042:Call ntdll.RtlEncodePointer(18003b568) ret=180035807
  1209. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b184a ret=180035807
  1210. 0042:Call ntdll.RtlEncodePointer(18003b504) ret=180035807
  1211. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b1826 ret=180035807
  1212. 0042:Call ntdll.RtlEncodePointer(18003c0c0) ret=180035807
  1213. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b6de2 ret=180035807
  1214. 0042:Call ntdll.RtlEncodePointer(18003c028) ret=180035807
  1215. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b6d0a ret=180035807
  1216. 0042:Call ntdll.RtlEncodePointer(18003b51c) ret=180035807
  1217. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b183e ret=180035807
  1218. 0042:Call ntdll.RtlEncodePointer(18003b464) ret=180035807
  1219. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b1946 ret=180035807
  1220. 0042:Call ntdll.RtlEncodePointer(18003b3e4) ret=180035807
  1221. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7b1ec6 ret=180035807
  1222. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00000100) ret=1800353e1
  1223. 0042:Ret ntdll.RtlAllocateHeap() retval=002c45d0 ret=1800353e1
  1224. 0042:Call ntdll.RtlEncodePointer(002c45d0) ret=18002d8ab
  1225. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8f2 ret=18002d8ab
  1226. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000008,00001000) ret=1800353e1
  1227. 0042:Ret ntdll.RtlAllocateHeap() retval=002c7300 ret=1800353e1
  1228. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1229. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1230. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d90f
  1231. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d90f
  1232. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1233. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1234. 0042:Call ntdll.RtlEncodePointer(180034e5c) ret=18002d99d
  1235. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7be37e ret=18002d99d
  1236. 0042:Call ntdll.RtlEncodePointer(002c45d8) ret=18002d9aa
  1237. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8fa ret=18002d9aa
  1238. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000018) ret=18002dbd3
  1239. 0042:Ret ntdll.RtlAllocateHeap() retval=002c46e0 ret=18002dbd3
  1240. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1241. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1242. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8fa) ret=18002d90f
  1243. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d8 ret=18002d90f
  1244. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1245. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1246. 0042:Call ntdll.RtlEncodePointer(180043e30) ret=18002d99d
  1247. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7c9312 ret=18002d99d
  1248. 0042:Call ntdll.RtlEncodePointer(002c45e0) ret=18002d9aa
  1249. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8c2 ret=18002d9aa
  1250. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1251. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4710 ret=18002dbd3
  1252. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1253. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1254. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8c2) ret=18002d90f
  1255. 0042:Ret ntdll.RtlDecodePointer() retval=002c45e0 ret=18002d90f
  1256. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1257. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1258. 0042:Call ntdll.RtlEncodePointer(180043e40) ret=18002d99d
  1259. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7c9362 ret=18002d99d
  1260. 0042:Call ntdll.RtlEncodePointer(002c45e8) ret=18002d9aa
  1261. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8ca ret=18002d9aa
  1262. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1263. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4740 ret=18002dbd3
  1264. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1265. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1266. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8ca) ret=18002d90f
  1267. 0042:Ret ntdll.RtlDecodePointer() retval=002c45e8 ret=18002d90f
  1268. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1269. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1270. 0042:Call ntdll.RtlEncodePointer(180043ee0) ret=18002d99d
  1271. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7c93c2 ret=18002d99d
  1272. 0042:Call ntdll.RtlEncodePointer(002c45f0) ret=18002d9aa
  1273. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8d2 ret=18002d9aa
  1274. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1275. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4770 ret=18002dbd3
  1276. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1277. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1278. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8d2) ret=18002d90f
  1279. 0042:Ret ntdll.RtlDecodePointer() retval=002c45f0 ret=18002d90f
  1280. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1281. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1282. 0042:Call ntdll.RtlEncodePointer(180043f80) ret=18002d99d
  1283. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7c92a2 ret=18002d99d
  1284. 0042:Call ntdll.RtlEncodePointer(002c45f8) ret=18002d9aa
  1285. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54e8da ret=18002d9aa
  1286. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1287. 0042:Ret ntdll.RtlAllocateHeap() retval=002c47a0 ret=18002dbd3
  1288. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1289. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1290. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8da) ret=18002d90f
  1291. 0042:Ret ntdll.RtlDecodePointer() retval=002c45f8 ret=18002d90f
  1292. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1293. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1294. 0042:Call ntdll.RtlEncodePointer(180044020) ret=18002d99d
  1295. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7ced02 ret=18002d99d
  1296. 0042:Call ntdll.RtlEncodePointer(002c4600) ret=18002d9aa
  1297. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54eb22 ret=18002d9aa
  1298. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1299. 0042:Ret ntdll.RtlAllocateHeap() retval=002c47d0 ret=18002dbd3
  1300. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1301. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1302. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54eb22) ret=18002d90f
  1303. 0042:Ret ntdll.RtlDecodePointer() retval=002c4600 ret=18002d90f
  1304. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1305. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1306. 0042:Call ntdll.RtlEncodePointer(1800440c0) ret=18002d99d
  1307. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7cede2 ret=18002d99d
  1308. 0042:Call ntdll.RtlEncodePointer(002c4608) ret=18002d9aa
  1309. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54eb2a ret=18002d9aa
  1310. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1311. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4800 ret=18002dbd3
  1312. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1313. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1314. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54eb2a) ret=18002d90f
  1315. 0042:Ret ntdll.RtlDecodePointer() retval=002c4608 ret=18002d90f
  1316. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1317. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1318. 0042:Call ntdll.RtlEncodePointer(180044160) ret=18002d99d
  1319. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7cec42 ret=18002d99d
  1320. 0042:Call ntdll.RtlEncodePointer(002c4610) ret=18002d9aa
  1321. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54eb32 ret=18002d9aa
  1322. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000006) ret=18002dbd3
  1323. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4830 ret=18002dbd3
  1324. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1325. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1326. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54eb32) ret=18002d90f
  1327. 0042:Ret ntdll.RtlDecodePointer() retval=002c4610 ret=18002d90f
  1328. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1329. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1330. 0042:Call ntdll.RtlEncodePointer(180044200) ret=18002d99d
  1331. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7cef22 ret=18002d99d
  1332. 0042:Call ntdll.RtlEncodePointer(002c4618) ret=18002d9aa
  1333. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54eb3a ret=18002d9aa
  1334. 0042:Call ntdll.RtlAllocateHeap(002c4000,00000000,00000007) ret=18002dbd3
  1335. 0042:Ret ntdll.RtlAllocateHeap() retval=002c4860 ret=18002dbd3
  1336. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54e8f2) ret=18002d8ff
  1337. 0042:Ret ntdll.RtlDecodePointer() retval=002c45d0 ret=18002d8ff
  1338. 0042:Call ntdll.RtlDecodePointer(c90b263e5a54eb3a) ret=18002d90f
  1339. 0042:Ret ntdll.RtlDecodePointer() retval=002c4618 ret=18002d90f
  1340. 0042:Call ntdll.RtlSizeHeap(002c4000,00000000,002c45d0) ret=18002d937
  1341. 0042:Ret ntdll.RtlSizeHeap() retval=00000100 ret=18002d937
  1342. 0042:Call ntdll.RtlEncodePointer(1800442a0) ret=18002d99d
  1343. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263fda7cef82 ret=18002d99d
  1344. 0042:Call ntdll.RtlEncodePointer(002c4620) ret=18002d9aa
  1345. 0042:Ret ntdll.RtlEncodePointer() retval=c90b263e5a54eb02 ret=18002d9aa
  1346. 0042:Ret PE DLL (proc=0x18002f27c,module=0x180000000 L"Automaton.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1
  1347. 0042:Ret KERNEL32.LoadLibraryA() retval=180000000 ret=7f77bb394167
  1348. 0042:Call KERNEL32.GetProcAddress(180000000,7f77bb3950b0 "VSTPluginMain") ret=7f77bb394182
  1349. 0042:Ret KERNEL32.GetProcAddress() retval=180012900 ret=7f77bb394182
  1350. Revive plugin: Automaton
  1351. 0042:Call KERNEL32.UnhandledExceptionFilter(0023e7f0) ret=7f77bbf1fc1a
  1352. wine: Unhandled page fault on read access to 0x0000022f at address 0x22f (thread 0042), starting debugger...
  1353. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1354. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1355. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1356. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1357. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1358. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1359. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1360. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1361. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1362. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1363. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1364. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1365. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1366. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1367. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1368. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1369. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1370. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1371. 0042:Ret KERNEL32.UnhandledExceptionFilter() retval=00000000 ret=7f77bbf1fc1a
  1372. Unhandled exception: page fault on read access to 0x0000022f in 64-bit code (0x000000000000022f).
  1373. fixme:dbghelp:elf_search_auxv can't find symbol in module
  1374. Register dump:
  1375. rip:000000000000022f rsp:000000000023fa58 rbp:000000007da0b960 eflags:00010246 ( R- -- I Z- -P- )
  1376. rax:0000000000000000 rbx:000000000000022f rcx:0000000000000000 rdx:0000000000000001
  1377. rsi:0000000000000000 rdi:00007f77bb393690 r8:0000000000000000 r9:0000000000000000 r10:0000000000000000
  1378. r11:00007f77bc44233c r12:0000000000000000 r13:00007f77bb393690 r14:00007fffffbe8000 r15:00007fffc490de78
  1379. Stack dump:
  1380. 0x000000000023fa58: 0000000180012929 00007fffc490de78
  1381. 0x000000000023fa68: 00007f77bc439c7a 0000000000035082
  1382. 0x000000000023fa78: 000000007da0b960 0000000000000000
  1383. 0x000000000023fa88: 00007f7700000000 000000007da0f850
  1384. 0x000000000023fa98: 00007f77bb394418 0000000000035082
  1385. 0x000000000023faa8: 0000000000035082 000000007da0b960
  1386. 0x000000000023fab8: 0000000000035082 000000007b86f8c0
  1387. 0x000000000023fac8: 00007f77bb394c66 2020202020202020
  1388. 0x000000000023fad8: 2020202020202020 0000200000000000
  1389. 0x000000000023fae8: 0000200000000000 0000ffff000000ff
  1390. 0x000000000023faf8: 0000ff0000000000 0000000000000000
  1391. 0x000000000023fb08: 0000000000000000 5b5b5b5b5b5b5b5b
  1392. Backtrace:
  1393. =>0 0x000000000000022f (0x000000007da0b960)
  1394. 0x000000000000022f: -- no code accessible --
  1395. Modules:
  1396. Module Address Debug info Name (62 modules)
  1397. ELF 7b800000- 7bc5a000 Deferred kernel32<elf>
  1398. \-PE 7b820000- 7bc5a000 \ kernel32
  1399. ELF 7be00000- 7c103000 Deferred <wine-loader>
  1400. PE 180000000- 1800c3000 Deferred automaton
  1401. ELF 7f77b5eec000- 7f77b6125000 Deferred uxtheme<elf>
  1402. \-PE 7f77b5ef0000- 7f77b6125000 \ uxtheme
  1403. ELF 7f77b6125000- 7f77b6424000 Deferred comctl32<elf>
  1404. \-PE 7f77b6130000- 7f77b6424000 \ comctl32
  1405. ELF 7f77b6424000- 7f77b687f000 Deferred shell32<elf>
  1406. \-PE 7f77b6440000- 7f77b687f000 \ shell32
  1407. ELF 7f77b687f000- 7f77b6b12000 Deferred rpcrt4<elf>
  1408. \-PE 7f77b6890000- 7f77b6b12000 \ rpcrt4
  1409. ELF 7f77b6b12000- 7f77b6e8e000 Deferred ole32<elf>
  1410. \-PE 7f77b6b40000- 7f77b6e8e000 \ ole32
  1411. ELF 7f77b6e8e000- 7f77b7210000 Deferred oleaut32<elf>
  1412. \-PE 7f77b6eb0000- 7f77b7210000 \ oleaut32
  1413. ELF 7f77b7210000- 7f77b74a0000 Deferred shlwapi<elf>
  1414. \-PE 7f77b7220000- 7f77b74a0000 \ shlwapi
  1415. ELF 7f77b74a0000- 7f77b774a000 Deferred gdiplus<elf>
  1416. \-PE 7f77b74b0000- 7f77b774a000 \ gdiplus
  1417. ELF 7f77b774a000- 7f77b7951000 Deferred libxfixes.so.3
  1418. ELF 7f77b7951000- 7f77b7b5b000 Deferred libxcursor.so.1
  1419. ELF 7f77b7b5b000- 7f77b7d6b000 Deferred libxi.so.6
  1420. ELF 7f77b7d6b000- 7f77b7f6e000 Deferred libxcomposite.so.1
  1421. ELF 7f77b7f6e000- 7f77b8178000 Deferred libxrandr.so.2
  1422. ELF 7f77b8178000- 7f77b8383000 Deferred libxrender.so.1
  1423. ELF 7f77b8383000- 7f77b8589000 Deferred libxxf86vm.so.1
  1424. ELF 7f77b8589000- 7f77b878c000 Deferred libxinerama.so.1
  1425. ELF 7f77b878c000- 7f77b8991000 Deferred libuuid.so.1
  1426. ELF 7f77b8991000- 7f77b8bad000 Deferred libice.so.6
  1427. ELF 7f77b8bad000- 7f77b8dc0000 Deferred libxext.so.6
  1428. ELF 7f77b8dc0000- 7f77b8fc8000 Deferred libsm.so.6
  1429. ELF 7f77b900a000- 7f77b92a4000 Deferred winex11<elf>
  1430. \-PE 7f77b9020000- 7f77b92a4000 \ winex11
  1431. ELF 7f77b935e000- 7f77b9588000 Deferred libexpat.so.1
  1432. ELF 7f77b9588000- 7f77b97c3000 Deferred libfontconfig.so.1
  1433. ELF 7f77b97c3000- 7f77b99d3000 Deferred libbz2.so.1.0
  1434. ELF 7f77b99d3000- 7f77b9be9000 Deferred libz.so.1
  1435. ELF 7f77b9be9000- 7f77b9e8a000 Deferred libfreetype.so.6
  1436. ELF 7f77b9e8a000- 7f77ba0a3000 Deferred version<elf>
  1437. \-PE 7f77b9e90000- 7f77ba0a3000 \ version
  1438. ELF 7f77ba0a3000- 7f77ba326000 Deferred advapi32<elf>
  1439. \-PE 7f77ba0b0000- 7f77ba326000 \ advapi32
  1440. ELF 7f77ba326000- 7f77ba67f000 Deferred gdi32<elf>
  1441. \-PE 7f77ba340000- 7f77ba67f000 \ gdi32
  1442. ELF 7f77ba67f000- 7f77baa1f000 Deferred user32<elf>
  1443. \-PE 7f77ba6a0000- 7f77baa1f000 \ user32
  1444. ELF 7f77baa1f000- 7f77bac25000 Deferred libxdmcp.so.6
  1445. ELF 7f77bac25000- 7f77bae29000 Deferred libxau.so.6
  1446. ELF 7f77bae29000- 7f77bb048000 Deferred libxcb.so.1
  1447. ELF 7f77bb048000- 7f77bb381000 Deferred libx11.so.6
  1448. ELF 7f77bb381000- 7f77bb597000 Deferred test64<elf>
  1449. \-PE 7f77bb390000- 7f77bb597000 \ test64
  1450. ELF 7f77bb597000- 7f77bb7a4000 Deferred libnss_files.so.2
  1451. ELF 7f77bb969000- 7f77bbb7e000 Deferred libgcc_s.so.1
  1452. ELF 7f77bbb7e000- 7f77bbe7c000 Deferred libm.so.6
  1453. ELF 7f77bbe7c000- 7f77bc171000 Deferred ntdll<elf>
  1454. \-PE 7f77bbea0000- 7f77bc171000 \ ntdll
  1455. ELF 7f77bc174000- 7f77bc378000 Deferred libdl.so.2
  1456. ELF 7f77bc3bb000- 7f77bc768000 Deferred libc.so.6
  1457. ELF 7f77bc768000- 7f77bc984000 Deferred libpthread.so.0
  1458. ELF 7f77bccb7000- 7f77bcedb000 Deferred ld-linux-x86-64.so.2
  1459. Threads:
  1460. process tid prio (all id:s are in hex)
  1461. 00000008 fsthost.exe
  1462. 0000002c 0
  1463. 0000002b 0
  1464. 0000002a 0
  1465. 00000009 1
  1466. 0000000e services.exe
  1467. 00000027 0
  1468. 00000026 0
  1469. 00000020 0
  1470. 00000015 0
  1471. 00000010 0
  1472. 0000000f 0
  1473. 00000012 winedevice.exe
  1474. 0000001c 0
  1475. 00000019 0
  1476. 00000014 0
  1477. 00000013 0
  1478. 0000001a NIHardwareService.exe
  1479. 00000029 2
  1480. 00000022 0
  1481. 0000001f 0
  1482. 0000001b 0
  1483. 0000001d explorer.exe
  1484. 0000001e 0
  1485. 00000023 plugplay.exe
  1486. 00000028 0
  1487. 00000025 0
  1488. 00000024 0
  1489. 00000041 (D) Z:\home\ninez\Desktop\fsthost-code2\test64.exe
  1490. 00000042 0 <==
  1491. err:thread:L_rt_remove_pthread Thread not found bc172700
  1492. [ninez@ninez fsthost-code2]$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!