API tools faq
paste
Advertisement
Guest User

wine-git with csmt patch log of hydrophobia prophecy crash

a guest
Dec 28th, 2016
66
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 151.14 KB | None | 0 0
raw download clone embed print report
  1. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001f ret=787c7e77
  2. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02dc10,09b0bfc8,00000014,00000000) ret=787c7e14
  3. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  4. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e024270,09b0c1e4,00000100,00000000) ret=787c7e4c
  5. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  6. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXext.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  7. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  8. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db16280,09b0bfc8,00000014,00000000) ret=787c7e14
  9. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  10. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e035a88,09b0c1e4,00000100,00000000) ret=787c7e4c
  11. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  12. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libX11.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  13. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  14. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db16500,09b0bfc8,00000014,00000000) ret=787c7e14
  15. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  16. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e023220,09b0c1e4,00000100,00000000) ret=787c7e4c
  17. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  18. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libxcb.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  19. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  20. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db16780,09b0bfc8,00000014,00000000) ret=787c7e14
  21. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  22. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e033990,09b0c1e4,00000100,00000000) ret=787c7e4c
  23. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  24. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXau.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  25. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  26. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db16a00,09b0bfc8,00000014,00000000) ret=787c7e14
  27. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  28. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e0339d0,09b0c1e4,00000100,00000000) ret=787c7e4c
  29. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  30. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXdmcp.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  31. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=787c7e77
  32. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02b1c8,09b0bfc8,00000014,00000000) ret=787c7e14
  33. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  34. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02a538,09b0c1e4,00000100,00000000) ret=787c7e4c
  35. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  36. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXinerama.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  37. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001c ret=787c7e77
  38. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02b450,09b0bfc8,00000014,00000000) ret=787c7e14
  39. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  40. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02af38,09b0c1e4,00000100,00000000) ret=787c7e4c
  41. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  42. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXxf86vm.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  43. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  44. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02bb20,09b0bfc8,00000014,00000000) ret=787c7e14
  45. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  46. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02aac8,09b0c1e4,00000100,00000000) ret=787c7e4c
  47. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  48. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXrender.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  49. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  50. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02bda0,09b0bfc8,00000014,00000000) ret=787c7e14
  51. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  52. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02a948,09b0c1e4,00000100,00000000) ret=787c7e4c
  53. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  54. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXrandr.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  55. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  56. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02c020,09b0bfc8,00000014,00000000) ret=787c7e14
  57. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  58. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db0f9b0,09b0c1e4,00000100,00000000) ret=787c7e4c
  59. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  60. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXcomposite.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  61. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001e ret=787c7e77
  62. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e02c2a8,09b0bfc8,00000014,00000000) ret=787c7e14
  63. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  64. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db17148,09b0c1e4,00000100,00000000) ret=787c7e4c
  65. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  66. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXi.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  67. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000016 ret=787c7e77
  68. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db294b8,09b0bfc8,00000014,00000000) ret=787c7e14
  69. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  70. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db26990,09b0c1e4,00000100,00000000) ret=787c7e4c
  71. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  72. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXcursor.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  73. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  74. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db29738,09b0bfc8,00000014,00000000) ret=787c7e14
  75. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  76. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db29430,09b0c1e4,00000100,00000000) ret=787c7e4c
  77. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  78. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libXfixes.so.3",ffffffff,09b0bfdc,00000104) ret=787c7e77
  79. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  80. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2af90,09b0bfc8,00000014,00000000) ret=787c7e14
  81. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  82. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db29d10,09b0c1e4,00000100,00000000) ret=787c7e4c
  83. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  84. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/psapi.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  85. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001d ret=787c7e77
  86. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2c158,09b0bfc8,00000014,00000000) ret=787c7e14
  87. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  88. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2d808,09b0c1e4,00000100,00000000) ret=787c7e4c
  89. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  90. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libGL.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  91. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000016 ret=787c7e77
  92. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2b2c0,09b0bfc8,00000014,00000000) ret=787c7e14
  93. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  94. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7e01fa68,09b0c1e4,00000100,00000000) ret=787c7e4c
  95. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  96. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libGLX.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  97. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  98. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2d828,09b0bfc8,00000014,00000000) ret=787c7e14
  99. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  100. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2c3d8,09b0c1e4,00000100,00000000) ret=787c7e4c
  101. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  102. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libGLdispatch.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  103. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001e ret=787c7e77
  104. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db311a8,09b0bfc8,00000014,00000000) ret=787c7e14
  105. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  106. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db2e140,09b0c1e4,00000100,00000000) ret=787c7e4c
  107. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  108. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libGLX_nvidia.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  109. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001e ret=787c7e77
  110. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db31460,09b0bfc8,00000014,00000000) ret=787c7e14
  111. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  112. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db31430,09b0c1e4,00000100,00000000) ret=787c7e4c
  113. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  114. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/tls/libnvidia-tls.so.370.28",ffffffff,09b0bfdc,00000104) ret=787c7e77
  115. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000027 ret=787c7e77
  116. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db3c138,09b0bfc8,00000014,00000000) ret=787c7e14
  117. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  118. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db31718,09b0c1e4,00000100,00000000) ret=787c7e4c
  119. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  120. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libnvidia-glcore.so.370.28",ffffffff,09b0bfdc,00000104) ret=787c7e77
  121. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000026 ret=787c7e77
  122. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a6e88,09b0bfc8,00000014,00000000) ret=787c7e14
  123. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  124. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fefd8,09b0c1e4,00000100,00000000) ret=787c7e4c
  125. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  126. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/librt.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  127. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000016 ret=787c7e77
  128. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a6970,09b0bfc8,00000014,00000000) ret=787c7e14
  129. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  130. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8faf38,09b0c1e4,00000100,00000000) ret=787c7e4c
  131. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  132. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/dsound.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  133. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001e ret=787c7e77
  134. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3c8970,09b0bfc8,00000014,00000000) ret=787c7e14
  135. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  136. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3c8900,09b0c1e4,00000100,00000000) ret=787c7e4c
  137. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  138. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/mmdevapi.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  139. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  140. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3c8c00,09b0bfc8,00000014,00000000) ret=787c7e14
  141. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  142. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fb510,09b0c1e4,00000100,00000000) ret=787c7e4c
  143. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  144. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/winealsa.drv.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  145. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  146. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a6c00,09b0bfc8,00000014,00000000) ret=787c7e14
  147. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  148. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bffffd8,09b0c1e4,00000100,00000000) ret=787c7e4c
  149. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  150. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libasound.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  151. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  152. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fd1f8,09b0bfc8,00000014,00000000) ret=787c7e14
  153. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  154. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcc00,09b0c1e4,00000100,00000000) ret=787c7e4c
  155. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  156. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/alsa-lib/libasound_module_pcm_pulse.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  157. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000032 ret=787c7e77
  158. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fd4a0,09b0bfc8,00000014,00000000) ret=787c7e14
  159. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  160. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a53f8,09b0c1e4,00000100,00000000) ret=787c7e4c
  161. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  162. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libpulse.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  163. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=787c7e77
  164. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fd720,09b0bfc8,00000014,00000000) ret=787c7e14
  165. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  166. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcd70,09b0c1e4,00000100,00000000) ret=787c7e4c
  167. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  168. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/pulseaudio/libpulsecommon-8.0.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  169. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000002c ret=787c7e77
  170. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fd9a8,09b0bfc8,00000014,00000000) ret=787c7e14
  171. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  172. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcb70,09b0c1e4,00000100,00000000) ret=787c7e4c
  173. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  174. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libjson-c.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  175. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  176. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fdc28,09b0bfc8,00000014,00000000) ret=787c7e14
  177. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  178. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcdc0,09b0c1e4,00000100,00000000) ret=787c7e4c
  179. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  180. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libdbus-1.so.3",ffffffff,09b0bfdc,00000104) ret=787c7e77
  181. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  182. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fdea8,09b0bfc8,00000014,00000000) ret=787c7e14
  183. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  184. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcd10,09b0c1e4,00000100,00000000) ret=787c7e4c
  185. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  186. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libsystemd.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  187. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  188. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe128,09b0bfc8,00000014,00000000) ret=787c7e14
  189. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  190. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fce90,09b0c1e4,00000100,00000000) ret=787c7e4c
  191. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  192. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libsndfile.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  193. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  194. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe3a8,09b0bfc8,00000014,00000000) ret=787c7e14
  195. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  196. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fced0,09b0c1e4,00000100,00000000) ret=787c7e4c
  197. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  198. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libasyncns.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  199. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  200. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe628,09b0bfc8,00000014,00000000) ret=787c7e14
  201. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  202. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcf98,09b0c1e4,00000100,00000000) ret=787c7e4c
  203. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  204. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libresolv.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  205. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  206. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d390d78,09b0bfc8,00000014,00000000) ret=787c7e14
  207. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  208. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcfd8,09b0c1e4,00000100,00000000) ret=787c7e4c
  209. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  210. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libcap.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  211. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  212. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d390ff8,09b0bfc8,00000014,00000000) ret=787c7e14
  213. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  214. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fd018,09b0c1e4,00000100,00000000) ret=787c7e4c
  215. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  216. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/liblzma.so.5",ffffffff,09b0bfdc,00000104) ret=787c7e77
  217. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  218. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d391278,09b0bfc8,00000014,00000000) ret=787c7e14
  219. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  220. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe8c8,09b0c1e4,00000100,00000000) ret=787c7e4c
  221. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  222. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libgcrypt.so.20",ffffffff,09b0bfdc,00000104) ret=787c7e77
  223. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  224. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3914f8,09b0bfc8,00000014,00000000) ret=787c7e14
  225. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  226. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe908,09b0c1e4,00000100,00000000) ret=787c7e4c
  227. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  228. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libgpg-error.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  229. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001d ret=787c7e77
  230. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d391780,09b0bfc8,00000014,00000000) ret=787c7e14
  231. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  232. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fe958,09b0c1e4,00000100,00000000) ret=787c7e4c
  233. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  234. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libgcc_s.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  235. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=787c7e77
  236. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d391a00,09b0bfc8,00000014,00000000) ret=787c7e14
  237. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  238. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fea00,09b0c1e4,00000100,00000000) ret=787c7e4c
  239. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  240. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libFLAC.so.8",ffffffff,09b0bfdc,00000104) ret=787c7e77
  241. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  242. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d391c80,09b0bfc8,00000014,00000000) ret=787c7e14
  243. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  244. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a55e0,09b0c1e4,00000100,00000000) ret=787c7e4c
  245. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  246. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libogg.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  247. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  248. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d391f00,09b0bfc8,00000014,00000000) ret=787c7e14
  249. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  250. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a5620,09b0c1e4,00000100,00000000) ret=787c7e4c
  251. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  252. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libvorbis.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  253. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  254. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d392180,09b0bfc8,00000014,00000000) ret=787c7e14
  255. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  256. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a5660,09b0c1e4,00000100,00000000) ret=787c7e4c
  257. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  258. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libvorbisenc.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  259. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001d ret=787c7e77
  260. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d392408,09b0bfc8,00000014,00000000) ret=787c7e14
  261. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  262. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a56f0,09b0c1e4,00000100,00000000) ret=787c7e4c
  263. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  264. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libnsl.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  265. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  266. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d392688,09b0bfc8,00000014,00000000) ret=787c7e14
  267. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  268. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a5760,09b0c1e4,00000100,00000000) ret=787c7e4c
  269. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  270. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libattr.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  271. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  272. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdfcec0,09b0bfc8,00000014,00000000) ret=787c7e14
  273. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  274. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3a6070,09b0c1e4,00000100,00000000) ret=787c7e4c
  275. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  276. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/dinput.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  277. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001e ret=787c7e77
  278. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d393e68,09b0bfc8,00000014,00000000) ret=787c7e14
  279. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  280. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdff660,09b0c1e4,00000100,00000000) ret=787c7e4c
  281. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  282. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/comctl32.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  283. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  284. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3943f0,09b0bfc8,00000014,00000000) ret=787c7e14
  285. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  286. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d418ff0,09b0c1e4,00000100,00000000) ret=787c7e4c
  287. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  288. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/uxtheme.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  289. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001f ret=787c7e77
  290. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dbef560,09b0bfc8,00000014,00000000) ret=787c7e14
  291. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  292. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcd30,09b0c1e4,00000100,00000000) ret=787c7e4c
  293. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  294. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/wbemprox.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  295. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  296. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2ffb98,09b0bfc8,00000014,00000000) ret=787c7e14
  297. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  298. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dbf0958,09b0c1e4,00000100,00000000) ret=787c7e4c
  299. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  300. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/winspool.drv.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  301. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  302. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2fe698,09b0bfc8,00000014,00000000) ret=787c7e14
  303. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  304. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fcde8,09b0c1e4,00000100,00000000) ret=787c7e4c
  305. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  306. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/dxgi.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  307. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001c ret=787c7e77
  308. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7cba5560,09b0bfc8,00000014,00000000) ret=787c7e14
  309. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  310. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8f7dd8,09b0c1e4,00000100,00000000) ret=787c7e4c
  311. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  312. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libcups.so.2",ffffffff,09b0bfdc,00000104) ret=787c7e77
  313. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  314. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7cba57e0,09b0bfc8,00000014,00000000) ret=787c7e14
  315. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  316. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3c7d08,09b0c1e4,00000100,00000000) ret=787c7e4c
  317. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  318. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libgnutls.so.30",ffffffff,09b0bfdc,00000104) ret=787c7e77
  319. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  320. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7cba5a60,09b0bfc8,00000014,00000000) ret=787c7e14
  321. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  322. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7db3bb18,09b0c1e4,00000100,00000000) ret=787c7e4c
  323. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  324. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libcrypt.so.1",ffffffff,09b0bfdc,00000104) ret=787c7e77
  325. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=787c7e77
  326. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdff6a8,09b0bfc8,00000014,00000000) ret=787c7e14
  327. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  328. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d3d1de0,09b0c1e4,00000100,00000000) ret=787c7e4c
  329. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  330. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libp11-kit.so.0",ffffffff,09b0bfdc,00000104) ret=787c7e77
  331. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  332. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdff928,09b0bfc8,00000014,00000000) ret=787c7e14
  333. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  334. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dbf26a0,09b0c1e4,00000100,00000000) ret=787c7e4c
  335. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  336. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libidn.so.11",ffffffff,09b0bfdc,00000104) ret=787c7e77
  337. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  338. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdffba8,09b0bfc8,00000014,00000000) ret=787c7e14
  339. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  340. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fb190,09b0c1e4,00000100,00000000) ret=787c7e4c
  341. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  342. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libtasn1.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  343. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=787c7e77
  344. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2fed98,09b0bfc8,00000014,00000000) ret=787c7e14
  345. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  346. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b8fb1d0,09b0c1e4,00000100,00000000) ret=787c7e4c
  347. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  348. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libnettle.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  349. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=787c7e77
  350. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2ff018,09b0bfc8,00000014,00000000) ret=787c7e14
  351. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  352. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7bdfd1f8,09b0c1e4,00000100,00000000) ret=787c7e4c
  353. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  354. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libhogweed.so.4",ffffffff,09b0bfdc,00000104) ret=787c7e77
  355. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001b ret=787c7e77
  356. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2ff298,09b0bfc8,00000014,00000000) ret=787c7e14
  357. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  358. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dc0de40,09b0c1e4,00000100,00000000) ret=787c7e4c
  359. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  360. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libgmp.so.10",ffffffff,09b0bfdc,00000104) ret=787c7e77
  361. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000018 ret=787c7e77
  362. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2ff518,09b0bfc8,00000014,00000000) ret=787c7e14
  363. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  364. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dc0de80,09b0c1e4,00000100,00000000) ret=787c7e4c
  365. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  366. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/libffi.so.6",ffffffff,09b0bfdc,00000104) ret=787c7e77
  367. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000017 ret=787c7e77
  368. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9fa9b0,09b0bfc8,00000014,00000000) ret=787c7e14
  369. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  370. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c1fa478,09b0c1e4,00000100,00000000) ret=787c7e4c
  371. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  372. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/crypt32.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  373. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001f ret=787c7e77
  374. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9fac40,09b0bfc8,00000014,00000000) ret=787c7e14
  375. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  376. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7c2fe640,09b0c1e4,00000100,00000000) ret=787c7e4c
  377. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  378. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/imagehlp.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  379. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  380. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9faed0,09b0bfc8,00000014,00000000) ret=787c7e14
  381. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  382. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7dbef388,09b0c1e4,00000100,00000000) ret=787c7e4c
  383. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  384. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  385. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/secur32.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  386. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001f ret=787c7e77
  387. 00fd:Ret KERNEL32.GetTickCount() retval=00bae955 ret=7e1cfae5
  388. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  389. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9fb390,09b0bfc8,00000014,00000000) ret=787c7e14
  390. 00fd:Ret KERNEL32.GetTickCount() retval=00bae955 ret=7e1cfae5
  391. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  392. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9fb1f8,09b0c1e4,00000100,00000000) ret=787c7e4c
  393. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  394. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/netapi32.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  395. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000020 ret=787c7e77
  396. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7b9fb870,09b0bfc8,00000014,00000000) ret=787c7e14
  397. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e14
  398. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7d419d40,09b0c1e4,00000100,00000000) ret=787c7e4c
  399. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7e4c
  400. 00fe:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,09b0c1e4 "/usr/lib32/wine/dbghelp.dll.so",ffffffff,09b0bfdc,00000104) ret=787c7e77
  401. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000001f ret=787c7e77
  402. 00fe:Call KERNEL32.MultiByteToWideChar(00000000,00000000,09b0bebc "libwine.so.1",ffffffff,09b0bc74,00000104) ret=787ce253
  403. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=0000000d ret=787ce253
  404. 00fe:Call msvcrt.__unDName(09b0c338,5c062cb4 "__wine_main_environ",000007d0,787e2f70,787e3040,00001000) ret=787e30ad
  405. 00fe:Ret msvcrt.__unDName() retval=09b0c338 ret=787e30ad
  406. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,f77222c0,09b0bfa4,00000004,00000000) ret=787c7f3f
  407. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f3f
  408. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34490,09b0bfa8,00000004,00000000) ret=787c7f95
  409. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  410. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34494,09b0bfa8,00000004,00000000) ret=787c7f95
  411. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  412. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34498,09b0bfa8,00000004,00000000) ret=787c7f95
  413. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  414. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3449c,09b0bfa8,00000004,00000000) ret=787c7f95
  415. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  416. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344a0,09b0bfa8,00000004,00000000) ret=787c7f95
  417. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  418. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344a4,09b0bfa8,00000004,00000000) ret=787c7f95
  419. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  420. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344a8,09b0bfa8,00000004,00000000) ret=787c7f95
  421. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  422. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344ac,09b0bfa8,00000004,00000000) ret=787c7f95
  423. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  424. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344b0,09b0bfa8,00000004,00000000) ret=787c7f95
  425. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  426. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344b4,09b0bfa8,00000004,00000000) ret=787c7f95
  427. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  428. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344b8,09b0bfa8,00000004,00000000) ret=787c7f95
  429. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  430. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344bc,09b0bfa8,00000004,00000000) ret=787c7f95
  431. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  432. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344c0,09b0bfa8,00000004,00000000) ret=787c7f95
  433. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  434. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344c4,09b0bfa8,00000004,00000000) ret=787c7f95
  435. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  436. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344c8,09b0bfa8,00000004,00000000) ret=787c7f95
  437. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  438. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344cc,09b0bfa8,00000004,00000000) ret=787c7f95
  439. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  440. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344d0,09b0bfa8,00000004,00000000) ret=787c7f95
  441. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  442. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344d4,09b0bfa8,00000004,00000000) ret=787c7f95
  443. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  444. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344d8,09b0bfa8,00000004,00000000) ret=787c7f95
  445. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  446. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344dc,09b0bfa8,00000004,00000000) ret=787c7f95
  447. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  448. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344e0,09b0bfa8,00000004,00000000) ret=787c7f95
  449. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  450. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344e4,09b0bfa8,00000004,00000000) ret=787c7f95
  451. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  452. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344e8,09b0bfa8,00000004,00000000) ret=787c7f95
  453. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  454. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344ec,09b0bfa8,00000004,00000000) ret=787c7f95
  455. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  456. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344f0,09b0bfa8,00000004,00000000) ret=787c7f95
  457. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  458. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344f4,09b0bfa8,00000004,00000000) ret=787c7f95
  459. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  460. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344f8,09b0bfa8,00000004,00000000) ret=787c7f95
  461. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  462. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd344fc,09b0bfa8,00000004,00000000) ret=787c7f95
  463. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  464. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34500,09b0bfa8,00000004,00000000) ret=787c7f95
  465. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  466. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34504,09b0bfa8,00000004,00000000) ret=787c7f95
  467. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  468. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34508,09b0bfa8,00000004,00000000) ret=787c7f95
  469. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  470. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3450c,09b0bfa8,00000004,00000000) ret=787c7f95
  471. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  472. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34510,09b0bfa8,00000004,00000000) ret=787c7f95
  473. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  474. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34514,09b0bfa8,00000004,00000000) ret=787c7f95
  475. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  476. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34518,09b0bfa8,00000004,00000000) ret=787c7f95
  477. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  478. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3451c,09b0bfa8,00000004,00000000) ret=787c7f95
  479. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  480. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34520,09b0bfa8,00000004,00000000) ret=787c7f95
  481. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  482. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34524,09b0bfa8,00000004,00000000) ret=787c7f95
  483. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  484. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34528,09b0bfa8,00000004,00000000) ret=787c7f95
  485. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  486. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3452c,09b0bfa8,00000004,00000000) ret=787c7f95
  487. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  488. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34530,09b0bfa8,00000004,00000000) ret=787c7f95
  489. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  490. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34534,09b0bfa8,00000004,00000000) ret=787c7f95
  491. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  492. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34538,09b0bfa8,00000004,00000000) ret=787c7f95
  493. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  494. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3453c,09b0bfa8,00000004,00000000) ret=787c7f95
  495. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  496. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34540,09b0bfa8,00000004,00000000) ret=787c7f95
  497. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  498. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34544,09b0bfa8,00000004,00000000) ret=787c7f95
  499. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  500. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34548,09b0bfa8,00000004,00000000) ret=787c7f95
  501. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  502. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3454c,09b0bfa8,00000004,00000000) ret=787c7f95
  503. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  504. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34550,09b0bfa8,00000004,00000000) ret=787c7f95
  505. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  506. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34554,09b0bfa8,00000004,00000000) ret=787c7f95
  507. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  508. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34558,09b0bfa8,00000004,00000000) ret=787c7f95
  509. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  510. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3455c,09b0bfa8,00000004,00000000) ret=787c7f95
  511. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  512. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34560,09b0bfa8,00000004,00000000) ret=787c7f95
  513. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  514. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34564,09b0bfa8,00000004,00000000) ret=787c7f95
  515. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  516. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34568,09b0bfa8,00000004,00000000) ret=787c7f95
  517. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  518. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3456c,09b0bfa8,00000004,00000000) ret=787c7f95
  519. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  520. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34570,09b0bfa8,00000004,00000000) ret=787c7f95
  521. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  522. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34574,09b0bfa8,00000004,00000000) ret=787c7f95
  523. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  524. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34578,09b0bfa8,00000004,00000000) ret=787c7f95
  525. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  526. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd3457c,09b0bfa8,00000004,00000000) ret=787c7f95
  527. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7f95
  528. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34580,09b0bfa8,00000004,00000000) ret=787c7ff6
  529. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c7ff6
  530. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34580,09b0bfac,00000008,00000000) ret=787c805d
  531. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c805d
  532. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,ffd34588,09b0bfac,00000008,00000000) ret=787c805d
  533. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=787c805d
  534. 00fe:Ret dbghelp.SymInitialize() retval=00000001 ret=60004ae0
  535. 00fe:Call dbghelp.StackWalk64(0000014c,ffffffff,fffffffe,6001a770,6001a4a0,600041de,787b5ebc,787b5fdc,00000000) ret=600044ff
  536. 00fe:Call ntdll.NtQueryInformationThread(fffffffe,00000000,09b0c548,0000001c,00000000) ret=787b87d5
  537. 00fe:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=787b87d5
  538. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,7ffa40c0,09b0c534,00000004,09b0c4c8) ret=600041fb
  539. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  540. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e948,09b0c4b8,00000004,09b0c468) ret=600041fb
  541. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  542. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e944,09b0c4b8,00000004,09b0c468) ret=600041fb
  543. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  544. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e94c,09b0c548,00000004,09b0c4c8) ret=600041fb
  545. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  546. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e950,09b0c548,00000004,09b0c4c8) ret=600041fb
  547. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  548. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e954,09b0c548,00000004,09b0c4c8) ret=600041fb
  549. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  550. 00fe:Call KERNEL32.ReadProcessMemory(ffffffff,09b0e958,09b0c548,00000004,09b0c4c8) ret=600041fb
  551. 00fe:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=600041fb
  552. 00fe:Call dbghelp.SymGetModuleBase64(ffffffff,006897b8,00000000) ret=787e1c71
  553. 00fe:Ret dbghelp.SymGetModuleBase64() retval=00400000 ret=787e1c71
  554. 00fe:Call dbghelp.SymFunctionTableAccess64(ffffffff,006897b8,00000000) ret=787e1c31
  555. 00fe:Ret dbghelp.SymFunctionTableAccess64() retval=00000000 ret=787e1c31
  556. 00fe:Ret dbghelp.StackWalk64() retval=00000001 ret=600044ff
  557. 00fe:Call dbghelp.SymGetModuleBase64(ffffffff,006897b8,00000000) ret=6000452f
  558. 00fe:Ret dbghelp.SymGetModuleBase64() retval=00400000 ret=6000452f
  559. 00fe:Call KERNEL32.LoadLibraryA(60014230 "USER32.dll") ret=0c294a2a
  560. 00fe:Ret KERNEL32.LoadLibraryA() retval=7e920000 ret=0c294a2a
  561. 00fe:Call KERNEL32.GetLastError() ret=0c294a33
  562. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=0c294a33
  563. 00fe:Call KERNEL32.WaitForSingleObject(00000270,00000064) ret=0c29394f
  564. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c29394f
  565. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\dxgi.dll") ret=0c29333a
  566. 00fe:Ret KERNEL32.GetModuleHandleW() retval=74b30000 ret=0c29333a
  567. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d8ff8 "CreateDXGIFactory") ret=0c29398c
  568. 00fe:Ret KERNEL32.GetProcAddress() retval=74b3ebb4 ret=0c29398c
  569. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d9040 "CreateDXGIFactory1") ret=0c2939cb
  570. 00fe:Ret KERNEL32.GetProcAddress() retval=74b3ebcc ret=0c2939cb
  571. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d9054 "CreateDXGIFactory2") ret=0c293a00
  572. 00fe:Ret KERNEL32.GetProcAddress() retval=00000000 ret=0c293a00
  573. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\d3d9.dll") ret=0c29333a
  574. 00fe:Ret KERNEL32.GetModuleHandleW() retval=7e3c0000 ret=0c29333a
  575. 00fe:Call KERNEL32.GetProcAddress(7e3c0000,0c2d9068 "Direct3DCreate9") ret=0c29317a
  576. 00fe:Ret KERNEL32.GetProcAddress() retval=7e3d065c ret=0c29317a
  577. 00fe:Call KERNEL32.K32GetModuleInformation(ffffffff,7e3c0000,09b0cb94,0000000c) ret=0c2931a6
  578. 00fe:Ret KERNEL32.K32GetModuleInformation() retval=00000001 ret=0c2931a6
  579. 00fe:Call KERNEL32.GetProcAddress(7e3c0000,0c2cf3e0 "Direct3DCreate9Ex") ret=0c29317a
  580. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  581. 00fe:Ret KERNEL32.GetProcAddress() retval=7e3d0674 ret=0c29317a
  582. 00fe:Call KERNEL32.K32GetModuleInformation(ffffffff,7e3c0000,09b0cb94,0000000c) ret=0c2931a6
  583. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  584. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  585. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  586. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  587. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  588. 00fe:Ret KERNEL32.K32GetModuleInformation() retval=00000001 ret=0c2931a6
  589. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\d3d8.dll") ret=0c29333a
  590. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  591. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\SysWOW64\\d3d8.dll") ret=0c29336f
  592. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  593. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\d3d.dll") ret=0c29333a
  594. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  595. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\SysWOW64\\d3d.dll") ret=0c29336f
  596. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  597. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\ddraw.dll") ret=0c29333a
  598. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  599. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\SysWOW64\\ddraw.dll") ret=0c29336f
  600. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  601. 00fe:Call KERNEL32.GetModuleHandleW(09b0c9a0 L"C:\\windows\\System32\\opengl32.dll") ret=0c29333a
  602. 00fe:Ret KERNEL32.GetModuleHandleW() retval=7a820000 ret=0c29333a
  603. 00fe:Call KERNEL32.GetProcAddress(7a820000,0c2d91a4 "wglSwapBuffers") ret=0c293c01
  604. 00fe:Ret KERNEL32.GetProcAddress() retval=7a82d0bc ret=0c293c01
  605. 00fe:Call KERNEL32.GetModuleHandleA(0c2d91dc "mantle32.dll") ret=0c293c45
  606. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293c45
  607. 00fe:Call KERNEL32.GetModuleHandleA(0c2d91ec "mantle64.dll") ret=0c293c52
  608. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293c52
  609. 00fe:Call KERNEL32.GetModuleHandleA(0c2d922c "dinput8.dll") ret=0c293c72
  610. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e270000 ret=0c293c72
  611. 00fe:Call KERNEL32.GetProcAddress(7e270000,0c2d9238 "DirectInput8Create") ret=0c293c7e
  612. 00fe:Ret KERNEL32.GetProcAddress() retval=7e276744 ret=0c293c7e
  613. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9278 "dinput.dll") ret=0c293cbc
  614. 00fe:Ret KERNEL32.GetModuleHandleA() retval=75ee0000 ret=0c293cbc
  615. 00fe:Call KERNEL32.GetProcAddress(75ee0000,0c2d9284 "DirectInputCreateA") ret=0c293cca
  616. 00fe:Ret KERNEL32.GetProcAddress() retval=75ee6694 ret=0c293cca
  617. 00fe:Call KERNEL32.GetProcAddress(75ee0000,0c2d92d0 "DirectInputCreateW") ret=0c293d0c
  618. 00fe:Ret KERNEL32.GetProcAddress() retval=75ee66c4 ret=0c293d0c
  619. 00fe:Call KERNEL32.GetModuleHandleA(0c2d92e4 "xinput1_4.dll") ret=0c293d40
  620. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d40
  621. 00fe:Call KERNEL32.GetModuleHandleA(0c2d92f4 "xinput1_3.dll") ret=0c293d56
  622. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00340000 ret=0c293d56
  623. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dc984 "XInputEnable") ret=0c2a6254
  624. 00fe:Ret KERNEL32.GetProcAddress() retval=00342f90 ret=0c2a6254
  625. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dc9bc "XInputGetAudioDeviceIds") ret=0c2a6297
  626. 00fe:Ret KERNEL32.GetProcAddress() retval=00000000 ret=0c2a6297
  627. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dca08 "XInputGetBatteryInformation") ret=0c2a62da
  628. 00fe:Ret KERNEL32.GetProcAddress() retval=00343160 ret=0c2a62da
  629. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dca5c "XInputGetCapabilities") ret=0c2a631d
  630. 00fe:Ret KERNEL32.GetProcAddress() retval=00342da0 ret=0c2a631d
  631. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcaa4 "XInputGetDSoundAudioDeviceGuids") ret=0c2a6360
  632. 00fe:Ret KERNEL32.GetProcAddress() retval=003436f0 ret=0c2a6360
  633. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcb00 "XInputGetKeystroke") ret=0c2a63a3
  634. 00fe:Ret KERNEL32.GetProcAddress() retval=003439c0 ret=0c2a63a3
  635. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcb44 "XInputGetState") ret=0c2a63e6
  636. 00fe:Ret KERNEL32.GetProcAddress() retval=00342850 ret=0c2a63e6
  637. 00fe:Call KERNEL32.GetProcAddress(00340000,00000064) ret=0c2a6426
  638. 00fe:Ret KERNEL32.GetProcAddress() retval=00342aa0 ret=0c2a6426
  639. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcbac "XInputSetState") ret=0c2a6469
  640. 00fe:Ret KERNEL32.GetProcAddress() retval=00342c20 ret=0c2a6469
  641. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9304 "xinput1_2.dll") ret=0c293d6c
  642. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d6c
  643. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9314 "xinput1_1.dll") ret=0c293d82
  644. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d82
  645. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9324 "XInput9_1_0.dll") ret=0c293d98
  646. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  647. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  648. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d98
  649. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9334 "winmm.dll") ret=0c293dae
  650. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e1b0000 ret=0c293dae
  651. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc68 "joyGetNumDevs") ret=0c2a6147
  652. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c0714 ret=0c2a6147
  653. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc78 "joyGetDevCapsA") ret=0c2a617c
  654. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c06e4 ret=0c2a617c
  655. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc88 "joyGetDevCapsW") ret=0c2a61b1
  656. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c06fc ret=0c2a61b1
  657. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc98 "joyGetPosEx") ret=0c2a61e6
  658. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c0744 ret=0c2a61e6
  659. 00fe:Call KERNEL32.ReleaseMutex(00000270) ret=0c293dca
  660. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c293dca
  661. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9340 "pbcl.dll") ret=0c29311e
  662. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29311e
  663. 00fe:Call KERNEL32.GetModuleHandleA(0c2d934c "pbcls.dll") ret=0c293129
  664. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293129
  665. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9358 "pbcag.dll") ret=0c293134
  666. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293134
  667. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9364 "pbcags.dll") ret=0c29313f
  668. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  669. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  670. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  671. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  672. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  673. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  674. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29313f
  675. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9370 "pbsv.dll") ret=0c29314a
  676. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  677. 00fd:Ret KERNEL32.GetTickCount() retval=00bae95f ret=7e1cfae5
  678. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  679. 00fd:Ret KERNEL32.GetTickCount() retval=00bae95f ret=7e1cfae5
  680. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29314a
  681. 00fe:Call KERNEL32.SetLastError(0000007b) ret=0c294a75
  682. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=0c294a75
  683. 00fe:Call KERNEL32.GetProcAddress(7e920000,60017400 "wsprintfW") ret=60010cca
  684. 00fe:Ret KERNEL32.GetProcAddress() retval=7e9bb390 ret=60010cca
  685. 00fe:Call KERNEL32.GetProcAddress(7e920000,60017400 "wsprintfW") ret=60010cca
  686. 00fe:Ret KERNEL32.GetProcAddress() retval=7e9bb390 ret=60010cca
  687. 00fe:Call KERNEL32.LoadLibraryW(60015ac8 L"PSAPI.DLL") ret=0c294bce
  688. 00fe:Ret KERNEL32.LoadLibraryW() retval=7d7a0000 ret=0c294bce
  689. 00fe:Call KERNEL32.GetLastError() ret=0c294bd6
  690. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=0c294bd6
  691. 00fe:Call KERNEL32.WaitForSingleObject(00000270,00000064) ret=0c29394f
  692. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c29394f
  693. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\dxgi.dll") ret=0c29333a
  694. 00fe:Ret KERNEL32.GetModuleHandleW() retval=74b30000 ret=0c29333a
  695. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d8ff8 "CreateDXGIFactory") ret=0c29398c
  696. 00fe:Ret KERNEL32.GetProcAddress() retval=74b3ebb4 ret=0c29398c
  697. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d9040 "CreateDXGIFactory1") ret=0c2939cb
  698. 00fe:Ret KERNEL32.GetProcAddress() retval=74b3ebcc ret=0c2939cb
  699. 00fe:Call KERNEL32.GetProcAddress(74b30000,0c2d9054 "CreateDXGIFactory2") ret=0c293a00
  700. 00fe:Ret KERNEL32.GetProcAddress() retval=00000000 ret=0c293a00
  701. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\d3d9.dll") ret=0c29333a
  702. 00fe:Ret KERNEL32.GetModuleHandleW() retval=7e3c0000 ret=0c29333a
  703. 00fe:Call KERNEL32.GetProcAddress(7e3c0000,0c2d9068 "Direct3DCreate9") ret=0c29317a
  704. 00fe:Ret KERNEL32.GetProcAddress() retval=7e3d065c ret=0c29317a
  705. 00fe:Call KERNEL32.K32GetModuleInformation(ffffffff,7e3c0000,09b0cbf8,0000000c) ret=0c2931a6
  706. 00fe:Ret KERNEL32.K32GetModuleInformation() retval=00000001 ret=0c2931a6
  707. 00fe:Call KERNEL32.GetProcAddress(7e3c0000,0c2cf3e0 "Direct3DCreate9Ex") ret=0c29317a
  708. 00fe:Ret KERNEL32.GetProcAddress() retval=7e3d0674 ret=0c29317a
  709. 00fe:Call KERNEL32.K32GetModuleInformation(ffffffff,7e3c0000,09b0cbf8,0000000c) ret=0c2931a6
  710. 00fe:Ret KERNEL32.K32GetModuleInformation() retval=00000001 ret=0c2931a6
  711. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\d3d8.dll") ret=0c29333a
  712. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  713. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\SysWOW64\\d3d8.dll") ret=0c29336f
  714. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  715. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\d3d.dll") ret=0c29333a
  716. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  717. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\SysWOW64\\d3d.dll") ret=0c29336f
  718. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  719. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\ddraw.dll") ret=0c29333a
  720. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29333a
  721. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\SysWOW64\\ddraw.dll") ret=0c29336f
  722. 00fe:Ret KERNEL32.GetModuleHandleW() retval=00000000 ret=0c29336f
  723. 00fe:Call KERNEL32.GetModuleHandleW(09b0ca04 L"C:\\windows\\System32\\opengl32.dll") ret=0c29333a
  724. 00fe:Ret KERNEL32.GetModuleHandleW() retval=7a820000 ret=0c29333a
  725. 00fe:Call KERNEL32.GetProcAddress(7a820000,0c2d91a4 "wglSwapBuffers") ret=0c293c01
  726. 00fe:Ret KERNEL32.GetProcAddress() retval=7a82d0bc ret=0c293c01
  727. 00fe:Call KERNEL32.GetModuleHandleA(0c2d91dc "mantle32.dll") ret=0c293c45
  728. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293c45
  729. 00fe:Call KERNEL32.GetModuleHandleA(0c2d91ec "mantle64.dll") ret=0c293c52
  730. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293c52
  731. 00fe:Call KERNEL32.GetModuleHandleA(0c2d922c "dinput8.dll") ret=0c293c72
  732. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e270000 ret=0c293c72
  733. 00fe:Call KERNEL32.GetProcAddress(7e270000,0c2d9238 "DirectInput8Create") ret=0c293c7e
  734. 00fe:Ret KERNEL32.GetProcAddress() retval=7e276744 ret=0c293c7e
  735. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9278 "dinput.dll") ret=0c293cbc
  736. 00fe:Ret KERNEL32.GetModuleHandleA() retval=75ee0000 ret=0c293cbc
  737. 00fe:Call KERNEL32.GetProcAddress(75ee0000,0c2d9284 "DirectInputCreateA") ret=0c293cca
  738. 00fe:Ret KERNEL32.GetProcAddress() retval=75ee6694 ret=0c293cca
  739. 00fe:Call KERNEL32.GetProcAddress(75ee0000,0c2d92d0 "DirectInputCreateW") ret=0c293d0c
  740. 00fe:Ret KERNEL32.GetProcAddress() retval=75ee66c4 ret=0c293d0c
  741. 00fe:Call KERNEL32.GetModuleHandleA(0c2d92e4 "xinput1_4.dll") ret=0c293d40
  742. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d40
  743. 00fe:Call KERNEL32.GetModuleHandleA(0c2d92f4 "xinput1_3.dll") ret=0c293d56
  744. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00340000 ret=0c293d56
  745. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dc984 "XInputEnable") ret=0c2a6254
  746. 00fe:Ret KERNEL32.GetProcAddress() retval=00342f90 ret=0c2a6254
  747. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dc9bc "XInputGetAudioDeviceIds") ret=0c2a6297
  748. 00fe:Ret KERNEL32.GetProcAddress() retval=00000000 ret=0c2a6297
  749. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dca08 "XInputGetBatteryInformation") ret=0c2a62da
  750. 00fe:Ret KERNEL32.GetProcAddress() retval=00343160 ret=0c2a62da
  751. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dca5c "XInputGetCapabilities") ret=0c2a631d
  752. 00fe:Ret KERNEL32.GetProcAddress() retval=00342da0 ret=0c2a631d
  753. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcaa4 "XInputGetDSoundAudioDeviceGuids") ret=0c2a6360
  754. 00fe:Ret KERNEL32.GetProcAddress() retval=003436f0 ret=0c2a6360
  755. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcb00 "XInputGetKeystroke") ret=0c2a63a3
  756. 00fe:Ret KERNEL32.GetProcAddress() retval=003439c0 ret=0c2a63a3
  757. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcb44 "XInputGetState") ret=0c2a63e6
  758. 00fe:Ret KERNEL32.GetProcAddress() retval=00342850 ret=0c2a63e6
  759. 00fe:Call KERNEL32.GetProcAddress(00340000,00000064) ret=0c2a6426
  760. 00fe:Ret KERNEL32.GetProcAddress() retval=00342aa0 ret=0c2a6426
  761. 00fe:Call KERNEL32.GetProcAddress(00340000,0c2dcbac "XInputSetState") ret=0c2a6469
  762. 00fe:Ret KERNEL32.GetProcAddress() retval=00342c20 ret=0c2a6469
  763. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9304 "xinput1_2.dll") ret=0c293d6c
  764. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d6c
  765. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9314 "xinput1_1.dll") ret=0c293d82
  766. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d82
  767. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9324 "XInput9_1_0.dll") ret=0c293d98
  768. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293d98
  769. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9334 "winmm.dll") ret=0c293dae
  770. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e1b0000 ret=0c293dae
  771. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc68 "joyGetNumDevs") ret=0c2a6147
  772. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c0714 ret=0c2a6147
  773. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc78 "joyGetDevCapsA") ret=0c2a617c
  774. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c06e4 ret=0c2a617c
  775. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc88 "joyGetDevCapsW") ret=0c2a61b1
  776. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c06fc ret=0c2a61b1
  777. 00fe:Call KERNEL32.GetProcAddress(7e1b0000,0c2dcc98 "joyGetPosEx") ret=0c2a61e6
  778. 00fe:Ret KERNEL32.GetProcAddress() retval=7e1c0744 ret=0c2a61e6
  779. 00fe:Call KERNEL32.ReleaseMutex(00000270) ret=0c293dca
  780. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c293dca
  781. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9340 "pbcl.dll") ret=0c29311e
  782. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29311e
  783. 00fe:Call KERNEL32.GetModuleHandleA(0c2d934c "pbcls.dll") ret=0c293129
  784. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  785. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  786. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293129
  787. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9358 "pbcag.dll") ret=0c293134
  788. 0102:Ret KERNEL32.Sleep() retval=00000000 ret=00986ebe
  789. 0102:Call ntdll.RtlTryEnterCriticalSection(01650ff8) ret=0097e50b
  790. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0097e50b
  791. 0102:Call ntdll.RtlTryEnterCriticalSection(0233b16c) ret=0098587a
  792. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0098587a
  793. 0102:Call KERNEL32.WaitForSingleObject(000000f8,00000000) ret=0097f25c
  794. 0102:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=0097f25c
  795. 0102:Call KERNEL32.Sleep(00000032) ret=00986ebe
  796. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c293134
  797. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9364 "pbcags.dll") ret=0c29313f
  798. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  799. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  800. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  801. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  802. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  803. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  804. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29313f
  805. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9370 "pbsv.dll") ret=0c29314a
  806. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c29314a
  807. 00fe:Call KERNEL32.SetLastError(0000007b) ret=0c294c14
  808. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=0c294c14
  809. 00fe:Call KERNEL32.GetProcAddress(7d7a0000,60015ab4 "EnumProcessModules") ret=600068a3
  810. 00fe:Ret KERNEL32.GetProcAddress() retval=7b42650c ret=600068a3
  811. 00fe:Call KERNEL32.GetProcAddress(7d7a0000,60015aa0 "GetModuleBaseNameW") ret=600068b4
  812. 00fe:Ret KERNEL32.GetProcAddress() retval=7b4265fc ret=600068b4
  813. 00fe:Call KERNEL32.GetProcAddress(7d7a0000,60015a88 "GetModuleFileNameExW") ret=600068c5
  814. 00fe:Ret KERNEL32.GetProcAddress() retval=7b42662c ret=600068c5
  815. 00fe:Call KERNEL32.K32GetModuleBaseNameW(ffffffff,00400000,6001acac,000007f2) ret=60004649
  816. 00fe:Ret KERNEL32.K32GetModuleBaseNameW() retval=0000000b ret=60004649
  817. 00fe:Call dbghelp.SymGetSymFromAddr64(ffffffff,006897b8,00000000,09b0cc8c,6001a890) ret=600046b8
  818. 00fe:Ret dbghelp.SymGetSymFromAddr64() retval=00000000 ret=600046b8
  819. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  820. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  821. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  822. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  823. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  824. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  825. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  826. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  827. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  828. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  829. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  830. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  831. 00fe:Call KERNEL32.GetModuleHandleA(3021cf40 "psapi.dll") ret=30158d34
  832. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7d7a0000 ret=30158d34
  833. 00fe:Call KERNEL32.GetProcAddress(7d7a0000,3021cf4c "GetModuleInformation") ret=30158d46
  834. 00fe:Ret KERNEL32.GetProcAddress() retval=7b426644 ret=30158d46
  835. 00fe:Call KERNEL32.GetModuleHandleA(09b0d4c8 "hydropc.exe") ret=30158d53
  836. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00400000 ret=30158d53
  837. 00fe:Call KERNEL32.K32GetModuleInformation(ffffffff,00400000,09b0d0d8,0000000c) ret=30158d69
  838. 00fe:Ret KERNEL32.K32GetModuleInformation() retval=00000001 ret=30158d69
  839. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000020) ret=301a341f
  840. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c104610 ret=301a341f
  841. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000080) ret=301a341f
  842. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c103d18 ret=301a341f
  843. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  844. 00fd:Ret KERNEL32.GetTickCount() retval=00bae969 ret=7e1cfae5
  845. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  846. 00fd:Ret KERNEL32.GetTickCount() retval=00bae969 ret=7e1cfae5
  847. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000080) ret=301a341f
  848. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c105450 ret=301a341f
  849. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000020) ret=301a341f
  850. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c1041b8 ret=301a341f
  851. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000060) ret=301a341f
  852. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c104820 ret=301a341f
  853. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000030) ret=301a341f
  854. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c1049a0 ret=301a341f
  855. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00001000) ret=301a341f
  856. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c1054d8 ret=301a341f
  857. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  858. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  859. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  860. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  861. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  862. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  863. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  864. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  865. 00fe:Call KERNEL32.FindFirstFileA(09b0c5e4 "G:\\steam\\SteamApps\\common\\Hydrophobia\\hydropc_2117156_crash_2016_12_28T20_41_56C0.mdmp",09b0c354) ret=301a57f3
  866. 00fe:Ret KERNEL32.FindFirstFileA() retval=631552e8 ret=301a57f3
  867. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c368,09b0c338) ret=301a58da
  868. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a58da
  869. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c338,09b0c340) ret=301a58f0
  870. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a58f0
  871. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c360,09b0c338) ret=301a594c
  872. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a594c
  873. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c338,09b0c340) ret=301a5962
  874. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a5962
  875. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c358,09b0c338) ret=301a59be
  876. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a59be
  877. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c338,09b0c340) ret=301a59d0
  878. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a59d0
  879. 00fe:Call KERNEL32.FindClose(631552e8) ret=301a5a0b
  880. 00fe:Ret KERNEL32.FindClose() retval=00000001 ret=301a5a0b
  881. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  882. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  883. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  884. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  885. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  886. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  887. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  888. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  889. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  890. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  891. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  892. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  893. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  894. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  895. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  896. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  897. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  898. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  899. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  900. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  901. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  902. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  903. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  904. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  905. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  906. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  907. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  908. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  909. 00fe:Call KERNEL32.FindFirstFileA(09b0c5d8 "G:\\steam\\SteamApps\\common\\Hydrophobia\\hydropc_2117156_crash_2016_12_28T20_41_56C0.mdmp",09b0c2e8) ret=301a7250
  910. 00fe:Ret KERNEL32.FindFirstFileA() retval=631552e8 ret=301a7250
  911. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c2fc,09b0c2cc) ret=301a7337
  912. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a7337
  913. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c2cc,09b0c2d4) ret=301a734d
  914. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a734d
  915. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c2f4,09b0c2cc) ret=301a73a9
  916. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a73a9
  917. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c2cc,09b0c2d4) ret=301a73bf
  918. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a73bf
  919. 00fe:Call KERNEL32.FileTimeToLocalFileTime(09b0c2ec,09b0c2cc) ret=301a741b
  920. 00fe:Ret KERNEL32.FileTimeToLocalFileTime() retval=00000001 ret=301a741b
  921. 00fe:Call KERNEL32.FileTimeToSystemTime(09b0c2cc,09b0c2d4) ret=301a7431
  922. 00fe:Ret KERNEL32.FileTimeToSystemTime() retval=00000001 ret=301a7431
  923. 00fe:Call KERNEL32.FindClose(631552e8) ret=301a7470
  924. 00fe:Ret KERNEL32.FindClose() retval=00000001 ret=301a7470
  925. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  926. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  927. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  928. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  929. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  930. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  931. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  932. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  933. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  934. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  935. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  936. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  937. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  938. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  939. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  940. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  941. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  942. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  943. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  944. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  945. 00fe:Call ws2_32.socket(00000002,00000002,00000011) ret=3013a88a
  946. 00fe:Call ntdll.RtlAllocateHeap(00110000,00000008,00000034) ret=7e614b58
  947. 00fe:Ret ntdll.RtlAllocateHeap() retval=0e515e60 ret=7e614b58
  948. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000000,09b0c648,00000000) ret=7e619d46
  949. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e619d46
  950. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e619d8b
  951. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e619d8b
  952. 00fe:Ret ws2_32.socket() retval=00000324 ret=3013a88a
  953. 00fe:Call ws2_32.bind(00000324,09b0c9e8,00000010) ret=3013a8cd
  954. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000000,09b0c87c,00000000) ret=7e625ef9
  955. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e625ef9
  956. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e625f5f
  957. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e625f5f
  958. 00fe:Ret ws2_32.bind() retval=00000000 ret=3013a8cd
  959. 00fe:Call ws2_32.htons(00006985) ret=30162d9a
  960. 00fe:Ret ws2_32.htons() retval=00008569 ret=30162d9a
  961. 00fe:Call KERNEL32.GetLastError() ret=301b0ab9
  962. 00fe:Ret KERNEL32.GetLastError() retval=0000007b ret=301b0ab9
  963. 00fe:Call KERNEL32.SetLastError(0000007b) ret=301b0b23
  964. 00fe:Ret KERNEL32.SetLastError() retval=0000007b ret=301b0b23
  965. 00fe:Call ntdll.RtlAllocateHeap(0c100000,00000000,00000020) ret=301a341f
  966. 00fe:Ret ntdll.RtlAllocateHeap() retval=0c1043e0 ret=301a341f
  967. 00fe:Call ws2_32.sendto(00000324,0c1054d8,000000cd,00000000,09b0ca3c,00000010) ret=30162e1c
  968. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000002,09b0c878,09b0c86c) ret=7e618272
  969. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e618272
  970. 00fe:Call KERNEL32.GetTickCount() ret=7e6187fd
  971. 00fe:Ret KERNEL32.GetTickCount() retval=00bae96d ret=7e6187fd
  972. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e618730
  973. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e618730
  974. 00fe:Ret ws2_32.sendto() retval=000000cd ret=30162e1c
  975. 00fe:Call ws2_32.select(00000325,09b0ca88,00000000,00000000,09b0c9f4) ret=3013a951
  976. 00fe:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7e61cbfe
  977. 00fe:Ret ntdll.RtlAllocateHeap() retval=6291e660 ret=7e61cbfe
  978. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000001,09b0c968,00000000) ret=7e61c179
  979. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e61c179
  980. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  981. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  982. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  983. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  984. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  985. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  986. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  987. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  988. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  989. 00fd:Ret KERNEL32.GetTickCount() retval=00bae973 ret=7e1cfae5
  990. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  991. 00e4:Ret KERNEL32.Sleep() retval=0033fbac ret=00971edc
  992. 00fd:Ret KERNEL32.GetTickCount() retval=00bae973 ret=7e1cfae5
  993. 00e4:Call user32.PeekMessageA(0033fc40,00000000,00000000,00000000,00000001) ret=0c292276
  994. 00e4:Call winex11.drv.MsgWaitForMultipleObjectsEx(00000000,00000000,00000000,000004ff,00000000) ret=7e9b5d7e
  995. 00e4:Ret winex11.drv.MsgWaitForMultipleObjectsEx() retval=00000102 ret=7e9b5d7e
  996. 00e4:Ret user32.PeekMessageA() retval=00000000 ret=0c292276
  997. 00e4:Call KERNEL32.Sleep(00000032) ret=00971edc
  998. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  999. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1000. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1001. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1002. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1003. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1004. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1005. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1006. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1007. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1008. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1009. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1010. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1011. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1012. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1013. 00fd:Ret KERNEL32.GetTickCount() retval=00bae97e ret=7e1cfae5
  1014. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1015. 00fd:Ret KERNEL32.GetTickCount() retval=00bae97e ret=7e1cfae5
  1016. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1017. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1018. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1019. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1020. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1021. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1022. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1023. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1024. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1025. 00fd:Ret KERNEL32.GetTickCount() retval=00bae987 ret=7e1cfae5
  1026. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1027. 00fd:Ret KERNEL32.GetTickCount() retval=00bae987 ret=7e1cfae5
  1028. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1029. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1030. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1031. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1032. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1033. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1034. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1035. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1036. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1037. 00fd:Ret KERNEL32.GetTickCount() retval=00bae991 ret=7e1cfae5
  1038. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1039. 00fd:Ret KERNEL32.GetTickCount() retval=00bae991 ret=7e1cfae5
  1040. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1041. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1042. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1043. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1044. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1045. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1046. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1047. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1048. 0102:Ret KERNEL32.Sleep() retval=00000000 ret=00986ebe
  1049. 0102:Call ntdll.RtlTryEnterCriticalSection(01650ff8) ret=0097e50b
  1050. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0097e50b
  1051. 0102:Call ntdll.RtlTryEnterCriticalSection(0233b16c) ret=0098587a
  1052. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0098587a
  1053. 0102:Call KERNEL32.WaitForSingleObject(000000f8,00000000) ret=0097f25c
  1054. 0102:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=0097f25c
  1055. 0102:Call KERNEL32.Sleep(00000032) ret=00986ebe
  1056. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1057. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1058. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1059. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1060. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1061. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1062. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1063. 00fd:Ret KERNEL32.GetTickCount() retval=00bae99b ret=7e1cfae5
  1064. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1065. 00fd:Ret KERNEL32.GetTickCount() retval=00bae99b ret=7e1cfae5
  1066. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1067. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1068. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1069. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1070. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1071. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1072. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1073. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1074. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1075. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9a5 ret=7e1cfae5
  1076. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1077. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9a5 ret=7e1cfae5
  1078. 00e4:Ret KERNEL32.Sleep() retval=0033fbac ret=00971edc
  1079. 00e4:Call user32.PeekMessageA(0033fc40,00000000,00000000,00000000,00000001) ret=0c292276
  1080. 00e4:Call winex11.drv.MsgWaitForMultipleObjectsEx(00000000,00000000,00000000,000004ff,00000000) ret=7e9b5d7e
  1081. 00e4:Ret winex11.drv.MsgWaitForMultipleObjectsEx() retval=00000102 ret=7e9b5d7e
  1082. 00e4:Ret user32.PeekMessageA() retval=00000000 ret=0c292276
  1083. 00e4:Call KERNEL32.Sleep(00000032) ret=00971edc
  1084. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1085. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1086. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1087. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1088. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1089. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1090. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1091. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1092. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1093. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9af ret=7e1cfae5
  1094. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1095. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9af ret=7e1cfae5
  1096. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1097. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1098. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1099. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1100. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1101. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1102. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1103. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1104. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1105. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1106. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1107. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1108. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1109. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1110. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1111. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9b9 ret=7e1cfae5
  1112. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1113. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9b9 ret=7e1cfae5
  1114. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1115. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1116. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1117. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1118. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1119. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1120. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1121. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1122. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1123. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9c3 ret=7e1cfae5
  1124. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1125. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9c3 ret=7e1cfae5
  1126. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1127. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1128. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1129. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1130. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1131. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1132. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1133. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1134. 0102:Ret KERNEL32.Sleep() retval=00000000 ret=00986ebe
  1135. 0102:Call ntdll.RtlTryEnterCriticalSection(01650ff8) ret=0097e50b
  1136. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0097e50b
  1137. 0102:Call ntdll.RtlTryEnterCriticalSection(0233b16c) ret=0098587a
  1138. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0098587a
  1139. 0102:Call KERNEL32.WaitForSingleObject(000000f8,00000000) ret=0097f25c
  1140. 0102:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=0097f25c
  1141. 0102:Call KERNEL32.Sleep(00000032) ret=00986ebe
  1142. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1143. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9cd ret=7e1cfae5
  1144. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1145. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9cd ret=7e1cfae5
  1146. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1147. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1148. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1149. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1150. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1151. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1152. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1153. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1154. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1155. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1156. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1157. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1158. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1159. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1160. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1161. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9d7 ret=7e1cfae5
  1162. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1163. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9d7 ret=7e1cfae5
  1164. 00e4:Ret KERNEL32.Sleep() retval=0033fbac ret=00971edc
  1165. 00e4:Call user32.PeekMessageA(0033fc40,00000000,00000000,00000000,00000001) ret=0c292276
  1166. 00e4:Call winex11.drv.MsgWaitForMultipleObjectsEx(00000000,00000000,00000000,000004ff,00000000) ret=7e9b5d7e
  1167. 00e4:Ret winex11.drv.MsgWaitForMultipleObjectsEx() retval=00000102 ret=7e9b5d7e
  1168. 00e4:Ret user32.PeekMessageA() retval=00000000 ret=0c292276
  1169. 00e4:Call KERNEL32.Sleep(00000032) ret=00971edc
  1170. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1171. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1172. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1173. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1174. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1175. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1176. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1177. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1178. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1179. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9e1 ret=7e1cfae5
  1180. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1181. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9e1 ret=7e1cfae5
  1182. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1183. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1184. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1185. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1186. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1187. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1188. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1189. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1190. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1191. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9eb ret=7e1cfae5
  1192. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1193. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9eb ret=7e1cfae5
  1194. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1195. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1196. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1197. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1198. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1199. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1200. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1201. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1202. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1203. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1204. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1205. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1206. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1207. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1208. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1209. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9f5 ret=7e1cfae5
  1210. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1211. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9f5 ret=7e1cfae5
  1212. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1213. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1214. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1215. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1216. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1217. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1218. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1219. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1220. 0102:Ret KERNEL32.Sleep() retval=00000000 ret=00986ebe
  1221. 0102:Call ntdll.RtlTryEnterCriticalSection(01650ff8) ret=0097e50b
  1222. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0097e50b
  1223. 0102:Call ntdll.RtlTryEnterCriticalSection(0233b16c) ret=0098587a
  1224. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0098587a
  1225. 0102:Call KERNEL32.WaitForSingleObject(000000f8,00000000) ret=0097f25c
  1226. 0102:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=0097f25c
  1227. 0102:Call KERNEL32.Sleep(00000032) ret=00986ebe
  1228. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1229. 00fd:Ret KERNEL32.GetTickCount() retval=00bae9ff ret=7e1cfae5
  1230. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1231. 00fd:Ret KERNEL32.GetTickCount() retval=00baea00 ret=7e1cfae5
  1232. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1233. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1234. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1235. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1236. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1237. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1238. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1239. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1240. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1241. 00fd:Ret KERNEL32.GetTickCount() retval=00baea09 ret=7e1cfae5
  1242. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1243. 00fd:Ret KERNEL32.GetTickCount() retval=00baea09 ret=7e1cfae5
  1244. 00e4:Ret KERNEL32.Sleep() retval=0033fbac ret=00971edc
  1245. 00e4:Call user32.PeekMessageA(0033fc40,00000000,00000000,00000000,00000001) ret=0c292276
  1246. 00e4:Call winex11.drv.MsgWaitForMultipleObjectsEx(00000000,00000000,00000000,000004ff,00000000) ret=7e9b5d7e
  1247. 00e4:Ret winex11.drv.MsgWaitForMultipleObjectsEx() retval=00000102 ret=7e9b5d7e
  1248. 00e4:Ret user32.PeekMessageA() retval=00000000 ret=0c292276
  1249. 00e4:Call KERNEL32.Sleep(00000032) ret=00971edc
  1250. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1251. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1252. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1253. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1254. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1255. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1256. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1257. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1258. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1259. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1260. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1261. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1262. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1263. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1264. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1265. 00fd:Ret KERNEL32.GetTickCount() retval=00baea13 ret=7e1cfae5
  1266. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1267. 00fd:Ret KERNEL32.GetTickCount() retval=00baea13 ret=7e1cfae5
  1268. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1269. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1270. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1271. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1272. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1273. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1274. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1275. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1276. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1277. 00fd:Ret KERNEL32.GetTickCount() retval=00baea1d ret=7e1cfae5
  1278. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1279. 00fd:Ret KERNEL32.GetTickCount() retval=00baea1d ret=7e1cfae5
  1280. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1281. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1282. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1283. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1284. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1285. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1286. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1287. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1288. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1289. 00fd:Ret KERNEL32.GetTickCount() retval=00baea27 ret=7e1cfae5
  1290. 00fd:Call KERNEL32.GetTickCount() ret=7e1cfae5
  1291. 00fd:Ret KERNEL32.GetTickCount() retval=00baea27 ret=7e1cfae5
  1292. 00fc:Ret KERNEL32.WaitForMultipleObjects() retval=00000102 ret=0569a5e0
  1293. 00fc:Call ntdll.RtlAcquireResourceShared(00183b1c,00000001) ret=7d2686cb
  1294. 00fc:Ret ntdll.RtlAcquireResourceShared() retval=00000001 ret=7d2686cb
  1295. 00fc:Call ntdll.RtlReleaseResource(00183b1c) ret=7d268717
  1296. 00fc:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7d268717
  1297. 00fc:Call KERNEL32.WaitForMultipleObjects(00000003,056f9338,00000000,00000007) ret=0569a5e0
  1298. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e61c7d8
  1299. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e61c7d8
  1300. 00fe:Ret ws2_32.select() retval=00000001 ret=3013a951
  1301. 00fe:Call ws2_32.__WSAFDIsSet(00000324,09b0ca88) ret=3013a969
  1302. 00fe:Ret ws2_32.__WSAFDIsSet() retval=00000001 ret=3013a969
  1303. 00fe:Call ws2_32.recvfrom(00000324,0c1054d8,00001000,00000000,09b0c9e8,09b0c9e4) ret=3013a9be
  1304. 00fe:Call KERNEL32.GetTickCount() ret=7e615dcc
  1305. 00fe:Ret KERNEL32.GetTickCount() retval=00baea2d ret=7e615dcc
  1306. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000001,09b0c848,09b0c838) ret=7e615e7f
  1307. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e615e7f
  1308. 00fe:Call KERNEL32.IsBadWritePtr(0c1054d8,00001000) ret=7e615fa2
  1309. 00fe:Ret KERNEL32.IsBadWritePtr() retval=00000000 ret=7e615fa2
  1310. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e6165b2
  1311. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e6165b2
  1312. 00fe:Ret ws2_32.recvfrom() retval=00000003 ret=3013a9be
  1313. 00fe:Call ws2_32.closesocket(00000324) ret=3013a844
  1314. 00fe:Call ntdll.wine_server_handle_to_fd(00000324,00000001,09b0c978,00000000) ret=7e61a078
  1315. 00fe:Ret ntdll.wine_server_handle_to_fd() retval=00000000 ret=7e61a078
  1316. 00fe:Call ntdll.wine_server_release_fd(00000324,000000e8) ret=7e61a096
  1317. 00fe:Ret ntdll.wine_server_release_fd() retval=00000000 ret=7e61a096
  1318. 00fe:Ret ws2_32.closesocket() retval=00000000 ret=3013a844
  1319. 00fe:Call KERNEL32.GetConsoleWindow() ret=301583d6
  1320. 00fe:Ret KERNEL32.GetConsoleWindow() retval=00000000 ret=301583d6
  1321. 0102:Ret KERNEL32.Sleep() retval=00000000 ret=00986ebe
  1322. 0102:Call ntdll.RtlTryEnterCriticalSection(01650ff8) ret=0097e50b
  1323. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0097e50b
  1324. 0102:Call ntdll.RtlTryEnterCriticalSection(0233b16c) ret=0098587a
  1325. 0102:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=0098587a
  1326. 0102:Call KERNEL32.WaitForSingleObject(000000f8,00000000) ret=0097f25c
  1327. 0102:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=0097f25c
  1328. 0102:Call KERNEL32.Sleep(00000032) ret=00986ebe
  1329. 00e9:Ret KERNEL32.Sleep() retval=0543e978 ret=009663bf
  1330. 00e9:Call KERNEL32.Sleep(0000000a) ret=009663bf
  1331. 00fe:Call KERNEL32.ExitProcess(00000001) ret=00970dc3
  1332. 00fe:Call PE DLL (proc=0xc2b0343,module=0xc210000 L"gameoverlayrenderer.dll",reason=PROCESS_DETACH,res=0x1)
  1333. 00fe:Call KERNEL32.WaitForSingleObject(00000260,ffffffff) ret=0c2934f7
  1334. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c2934f7
  1335. 00fe:Call KERNEL32.GetSystemTimeAsFileTime(09b0d728) ret=0c2afac2
  1336. 00fe:Ret KERNEL32.GetSystemTimeAsFileTime() retval=00000000 ret=0c2afac2
  1337. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1338. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1339. 00fe:Call ntdll.RtlAllocateHeap(00110000,00000008,000003bc) ret=0c2c257b
  1340. 00fe:Ret ntdll.RtlAllocateHeap() retval=631552e8 ret=0c2c257b
  1341. 00fe:Call KERNEL32.FlsSetValue(0000000a,631552e8) ret=0c2b2600
  1342. 00fe:Ret KERNEL32.FlsSetValue() retval=00000001 ret=0c2b2600
  1343. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1344. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1345. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1346. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1347. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1348. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1349. 00fe:Call KERNEL32.MultiByteToWideChar(00000000,00000000,0c2d8fb0 "%a %b %d %H:%M:%S %Y UTC",ffffffff,00000000,00000000) ret=0c2af9d1
  1350. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=0c2af9d1
  1351. 00fe:Call ntdll.RtlAllocateHeap(00110000,00000000,00000032) ret=0c2aaccc
  1352. 00fe:Ret ntdll.RtlAllocateHeap() retval=631556b0 ret=0c2aaccc
  1353. 00fe:Call KERNEL32.MultiByteToWideChar(00000000,00000000,0c2d8fb0 "%a %b %d %H:%M:%S %Y UTC",ffffffff,631556b0,00000019) ret=0c2afa0f
  1354. 00fe:Ret KERNEL32.MultiByteToWideChar() retval=00000019 ret=0c2afa0f
  1355. 00fe:Call ntdll.RtlAllocateHeap(00110000,00000000,00000100) ret=0c2aaccc
  1356. 00fe:Ret ntdll.RtlAllocateHeap() retval=5cf8e5a8 ret=0c2aaccc
  1357. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1358. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1359. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1360. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1361. 00fe:Call KERNEL32.WideCharToMultiByte(00000000,00000000,5cf8e5a8 L"Wed Dec 28 20:42:23 2016 UTC",ffffffff,09b0d73c,00000080,00000000,00000000) ret=0c2afa5b
  1362. 00fe:Ret KERNEL32.WideCharToMultiByte() retval=0000001d ret=0c2afa5b
  1363. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1364. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1365. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1366. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1367. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1368. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1369. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1370. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1371. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1372. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1373. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1374. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1375. 00fe:Call KERNEL32.GetLastError() ret=0c2b6add
  1376. 00fe:Ret KERNEL32.GetLastError() retval=00000000 ret=0c2b6add
  1377. 00fe:Call KERNEL32.SetLastError(00000000) ret=0c2b6b3f
  1378. 00fe:Ret KERNEL32.SetLastError() retval=00000000 ret=0c2b6b3f
  1379. 00fe:Call KERNEL32.WriteFile(00000274,09b0c244,00000042,09b0bb70,00000000) ret=0c2c1dd4
  1380. 00fe:Ret KERNEL32.WriteFile() retval=00000001 ret=0c2c1dd4
  1381. 00fe:Call KERNEL32.ReleaseMutex(00000260) ret=0c2935bd
  1382. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c2935bd
  1383. 00fe:Call KERNEL32.SetEvent(000002c4) ret=0c292e9c
  1384. 00fe:Ret KERNEL32.SetEvent() retval=00000001 ret=0c292e9c
  1385. 00fe:Call KERNEL32.GetModuleHandleA(0c2d9a9c "user32.dll") ret=0c2967f7
  1386. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e920000 ret=0c2967f7
  1387. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9ae0 "SetCursorPos") ret=0c296823
  1388. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92cdd0 ret=0c296823
  1389. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00028b,00000002) ret=0c282782
  1390. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1391. 00fe:Call KERNEL32.VirtualQuery(7e92cdd0,09b0d760,0000001c) ret=0c28278f
  1392. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1393. 00fe:Call KERNEL32.VirtualProtect(7e92cdd0,00000006,00000040,09b0d7cc) ret=0c2827fc
  1394. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1395. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92cdd0,00000006) ret=0c282866
  1396. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1397. 00fe:Call KERNEL32.VirtualProtect(7e92cdd0,00000001,00000020,09b0d7c8) ret=0c2828b8
  1398. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1399. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9af0 "GetCursorPos") ret=0c29683a
  1400. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92b150 ret=0c29683a
  1401. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0002cb,00000002) ret=0c282782
  1402. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1403. 00fe:Call KERNEL32.VirtualQuery(7e92b150,09b0d760,0000001c) ret=0c28278f
  1404. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1405. 00fe:Call KERNEL32.VirtualProtect(7e92b150,00000006,00000040,09b0d7cc) ret=0c2827fc
  1406. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1407. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92b150,00000006) ret=0c282866
  1408. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1409. 00fe:Call KERNEL32.VirtualProtect(7e92b150,00000001,00000020,09b0d7c8) ret=0c2828b8
  1410. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1411. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9b00 "ShowCursor") ret=0c296851
  1412. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92d3e8 ret=0c296851
  1413. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00030b,00000002) ret=0c282782
  1414. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1415. 00fe:Call KERNEL32.VirtualQuery(7e92d3e8,09b0d760,0000001c) ret=0c28278f
  1416. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1417. 00fe:Call KERNEL32.VirtualProtect(7e92d3e8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1418. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1419. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92d3e8,00000006) ret=0c282866
  1420. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1421. 00fe:Call KERNEL32.VirtualProtect(7e92d3e8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1422. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1423. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9b0c "SetCursor") ret=0c296868
  1424. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92cdb8 ret=0c296868
  1425. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00034b,00000002) ret=0c282782
  1426. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1427. 00fe:Call KERNEL32.VirtualQuery(7e92cdb8,09b0d760,0000001c) ret=0c28278f
  1428. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1429. 00fe:Call KERNEL32.VirtualProtect(7e92cdb8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1430. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1431. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92cdb8,00000006) ret=0c282866
  1432. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1433. 00fe:Call KERNEL32.VirtualProtect(7e92cdb8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1434. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1435. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9c90 "DispatchMessageA") ret=0c29687f
  1436. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92a7c0 ret=0c29687f
  1437. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0004cb,00000002) ret=0c282782
  1438. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1439. 00fe:Call KERNEL32.VirtualQuery(7e92a7c0,09b0d760,0000001c) ret=0c28278f
  1440. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1441. 00fe:Call KERNEL32.VirtualProtect(7e92a7c0,00000006,00000040,09b0d7cc) ret=0c2827fc
  1442. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1443. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92a7c0,00000006) ret=0c282866
  1444. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1445. 00fe:Call KERNEL32.VirtualProtect(7e92a7c0,00000001,00000020,09b0d7c8) ret=0c2828b8
  1446. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1447. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9ca4 "DispatchMessageW") ret=0c296896
  1448. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92a7d8 ret=0c296896
  1449. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00050b,00000002) ret=0c282782
  1450. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1451. 00fe:Call KERNEL32.VirtualQuery(7e92a7d8,09b0d760,0000001c) ret=0c28278f
  1452. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1453. 00fe:Call KERNEL32.VirtualProtect(7e92a7d8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1454. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1455. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92a7d8,00000006) ret=0c282866
  1456. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1457. 00fe:Call KERNEL32.VirtualProtect(7e92a7d8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1458. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1459. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9fa4 "GetRawInputBuffer") ret=0c2968ad
  1460. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92b7c8 ret=0c2968ad
  1461. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00084b,00000002) ret=0c282782
  1462. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1463. 00fe:Call KERNEL32.VirtualQuery(7e92b7c8,09b0d760,0000001c) ret=0c28278f
  1464. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1465. 00fe:Call KERNEL32.VirtualProtect(7e92b7c8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1466. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1467. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92b7c8,00000006) ret=0c282866
  1468. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1469. 00fe:Call KERNEL32.VirtualProtect(7e92b7c8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1470. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1471. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9b94 "SetCapture") ret=0c2968c4
  1472. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92cce0 ret=0c2968c4
  1473. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00038b,00000002) ret=0c282782
  1474. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1475. 00fe:Call KERNEL32.VirtualQuery(7e92cce0,09b0d760,0000001c) ret=0c28278f
  1476. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1477. 00fe:Call KERNEL32.VirtualProtect(7e92cce0,00000006,00000040,09b0d7cc) ret=0c2827fc
  1478. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1479. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92cce0,00000006) ret=0c282866
  1480. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1481. 00fe:Call KERNEL32.VirtualProtect(7e92cce0,00000001,00000020,09b0d7c8) ret=0c2828b8
  1482. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1483. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9ba0 "ReleaseCapture") ret=0c2968db
  1484. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92ca58 ret=0c2968db
  1485. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0003cb,00000002) ret=0c282782
  1486. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1487. 00fe:Call KERNEL32.VirtualQuery(7e92ca58,09b0d760,0000001c) ret=0c28278f
  1488. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1489. 00fe:Call KERNEL32.VirtualProtect(7e92ca58,00000006,00000040,09b0d7cc) ret=0c2827fc
  1490. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1491. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92ca58,00000006) ret=0c282866
  1492. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1493. 00fe:Call KERNEL32.VirtualProtect(7e92ca58,00000001,00000020,09b0d7c8) ret=0c2828b8
  1494. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1495. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9bf4 "GetAsyncKeyState") ret=0c2968f2
  1496. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92aef8 ret=0c2968f2
  1497. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00040b,00000002) ret=0c282782
  1498. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1499. 00fe:Call KERNEL32.VirtualQuery(7e92aef8,09b0d760,0000001c) ret=0c28278f
  1500. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1501. 00fe:Call KERNEL32.VirtualProtect(7e92aef8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1502. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1503. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92aef8,00000006) ret=0c282866
  1504. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1505. 00fe:Call KERNEL32.VirtualProtect(7e92aef8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1506. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1507. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9c2c "GetKeyState") ret=0c296909
  1508. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92b3a8 ret=0c296909
  1509. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00044b,00000002) ret=0c282782
  1510. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1511. 00fe:Call KERNEL32.VirtualQuery(7e92b3a8,09b0d760,0000001c) ret=0c28278f
  1512. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1513. 00fe:Call KERNEL32.VirtualProtect(7e92b3a8,00000006,00000040,09b0d7cc) ret=0c2827fc
  1514. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1515. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92b3a8,00000006) ret=0c282866
  1516. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1517. 00fe:Call KERNEL32.VirtualProtect(7e92b3a8,00000001,00000020,09b0d7c8) ret=0c2828b8
  1518. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1519. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9c58 "GetKeyboardState") ret=0c296920
  1520. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92b420 ret=0c296920
  1521. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00048b,00000002) ret=0c282782
  1522. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1523. 00fe:Call KERNEL32.VirtualQuery(7e92b420,09b0d760,0000001c) ret=0c28278f
  1524. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1525. 00fe:Call KERNEL32.VirtualProtect(7e92b420,00000006,00000040,09b0d7cc) ret=0c2827fc
  1526. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1527. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92b420,00000006) ret=0c282866
  1528. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1529. 00fe:Call KERNEL32.VirtualProtect(7e92b420,00000001,00000020,09b0d7c8) ret=0c2828b8
  1530. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1531. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9db8 "ClipCursor") ret=0c296937
  1532. 00fe:Ret KERNEL32.GetProcAddress() retval=7e929f50 ret=0c296937
  1533. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00064b,00000002) ret=0c282782
  1534. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1535. 00fe:Call KERNEL32.VirtualQuery(7e929f50,09b0d760,0000001c) ret=0c28278f
  1536. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1537. 00fe:Call KERNEL32.VirtualProtect(7e929f50,00000006,00000040,09b0d7cc) ret=0c2827fc
  1538. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1539. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e929f50,00000006) ret=0c282866
  1540. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1541. 00fe:Call KERNEL32.VirtualProtect(7e929f50,00000001,00000020,09b0d7c8) ret=0c2828b8
  1542. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1543. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9dc4 "GetClipCursor") ret=0c29694e
  1544. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92b048 ret=0c29694e
  1545. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00068b,00000002) ret=0c282782
  1546. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1547. 00fe:Call KERNEL32.VirtualQuery(7e92b048,09b0d760,0000001c) ret=0c28278f
  1548. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1549. 00fe:Call KERNEL32.VirtualProtect(7e92b048,00000006,00000040,09b0d7cc) ret=0c2827fc
  1550. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1551. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92b048,00000006) ret=0c282866
  1552. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1553. 00fe:Call KERNEL32.VirtualProtect(7e92b048,00000001,00000020,09b0d7c8) ret=0c2828b8
  1554. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1555. 00fe:Call KERNEL32.GetProcAddress(7e920000,0c2d9edc "RegisterRawInputDevices") ret=0c296965
  1556. 00fe:Ret KERNEL32.GetProcAddress() retval=7e92c998 ret=0c296965
  1557. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00078b,00000002) ret=0c282782
  1558. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1559. 00fe:Call KERNEL32.VirtualQuery(7e92c998,09b0d760,0000001c) ret=0c28278f
  1560. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1561. 00fe:Call KERNEL32.VirtualProtect(7e92c998,00000006,00000040,09b0d7cc) ret=0c2827fc
  1562. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1563. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e92c998,00000006) ret=0c282866
  1564. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1565. 00fe:Call KERNEL32.VirtualProtect(7e92c998,00000001,00000020,09b0d7c8) ret=0c2828b8
  1566. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1567. 00fe:Call KERNEL32.GetModuleHandleA(0c2cfb98 "kernel32.dll") ret=0c296975
  1568. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7b420000 ret=0c296975
  1569. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2cfb5c "FreeLibrary") ret=0c296a00
  1570. 00fe:Ret KERNEL32.GetProcAddress() retval=7b4245bc ret=0c296a00
  1571. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00010b,00000002) ret=0c282782
  1572. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1573. 00fe:Call KERNEL32.VirtualQuery(7b4245bc,09b0d760,0000001c) ret=0c28278f
  1574. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1575. 00fe:Call KERNEL32.VirtualProtect(7b4245bc,00000006,00000040,09b0d7cc) ret=0c2827fc
  1576. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1577. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b4245bc,00000006) ret=0c282866
  1578. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1579. 00fe:Call KERNEL32.VirtualProtect(7b4245bc,00000001,00000020,09b0d7c8) ret=0c2828b8
  1580. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1581. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d97b8 "LoadLibraryExW") ret=0c296a17
  1582. 00fe:Ret KERNEL32.GetProcAddress() retval=7b426884 ret=0c296a17
  1583. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00000b,00000002) ret=0c282782
  1584. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1585. 00fe:Call KERNEL32.VirtualQuery(7b426884,09b0d760,0000001c) ret=0c28278f
  1586. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1587. 00fe:Call KERNEL32.VirtualProtect(7b426884,00000006,00000040,09b0d7cc) ret=0c2827fc
  1588. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1589. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b426884,00000006) ret=0c282866
  1590. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1591. 00fe:Call KERNEL32.VirtualProtect(7b426884,00000001,00000020,09b0d7c8) ret=0c2828b8
  1592. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1593. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d97f8 "LoadLibraryExA") ret=0c296a2e
  1594. 00fe:Ret KERNEL32.GetProcAddress() retval=7b42686c ret=0c296a2e
  1595. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00004b,00000002) ret=0c282782
  1596. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1597. 00fe:Call KERNEL32.VirtualQuery(7b42686c,09b0d760,0000001c) ret=0c28278f
  1598. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1599. 00fe:Call KERNEL32.VirtualProtect(7b42686c,00000006,00000040,09b0d7cc) ret=0c2827fc
  1600. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1601. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b42686c,00000006) ret=0c282866
  1602. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1603. 00fe:Call KERNEL32.VirtualProtect(7b42686c,00000001,00000020,09b0d7c8) ret=0c2828b8
  1604. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1605. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d64f0 "LoadLibraryW") ret=0c296a45
  1606. 00fe:Ret KERNEL32.GetProcAddress() retval=7b42689c ret=0c296a45
  1607. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00008b,00000002) ret=0c282782
  1608. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1609. 00fe:Call KERNEL32.VirtualQuery(7b42689c,09b0d760,0000001c) ret=0c28278f
  1610. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1611. 00fe:Call KERNEL32.VirtualProtect(7b42689c,00000006,00000040,09b0d7cc) ret=0c2827fc
  1612. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1613. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b42689c,00000006) ret=0c282866
  1614. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1615. 00fe:Call KERNEL32.VirtualProtect(7b42689c,00000001,00000020,09b0d7c8) ret=0c2828b8
  1616. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1617. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d6514 "LoadLibraryA") ret=0c296a5c
  1618. 00fe:Ret KERNEL32.GetProcAddress() retval=7b426854 ret=0c296a5c
  1619. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0000cb,00000002) ret=0c282782
  1620. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1621. 00fe:Call KERNEL32.VirtualQuery(7b426854,09b0d760,0000001c) ret=0c28278f
  1622. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1623. 00fe:Call KERNEL32.VirtualProtect(7b426854,00000006,00000040,09b0d7cc) ret=0c2827fc
  1624. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1625. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b426854,00000006) ret=0c282866
  1626. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1627. 00fe:Call KERNEL32.VirtualProtect(7b426854,00000001,00000020,09b0d7c8) ret=0c2828b8
  1628. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1629. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d9910 "CreateProcessW") ret=0c296a73
  1630. 00fe:Ret KERNEL32.GetProcAddress() retval=7b42380c ret=0c296a73
  1631. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00014b,00000002) ret=0c282782
  1632. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1633. 00fe:Call KERNEL32.VirtualQuery(7b42380c,09b0d760,0000001c) ret=0c28278f
  1634. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1635. 00fe:Call KERNEL32.VirtualProtect(7b42380c,00000006,00000040,09b0d7cc) ret=0c2827fc
  1636. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1637. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b42380c,00000006) ret=0c282866
  1638. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1639. 00fe:Call KERNEL32.VirtualProtect(7b42380c,00000001,00000020,09b0d7c8) ret=0c2828b8
  1640. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1641. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d9920 "CreateProcessA") ret=0c296a8a
  1642. 00fe:Ret KERNEL32.GetProcAddress() retval=7b4237f4 ret=0c296a8a
  1643. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f00018b,00000002) ret=0c282782
  1644. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1645. 00fe:Call KERNEL32.VirtualQuery(7b4237f4,09b0d760,0000001c) ret=0c28278f
  1646. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1647. 00fe:Call KERNEL32.VirtualProtect(7b4237f4,00000006,00000040,09b0d7cc) ret=0c2827fc
  1648. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1649. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b4237f4,00000006) ret=0c282866
  1650. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1651. 00fe:Call KERNEL32.VirtualProtect(7b4237f4,00000001,00000020,09b0d7c8) ret=0c2828b8
  1652. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1653. 00fe:Call KERNEL32.GetProcAddress(7b420000,0c2d9838 "ResumeThread") ret=0c296aa5
  1654. 00fe:Ret KERNEL32.GetProcAddress() retval=7b427394 ret=0c296aa5
  1655. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0001cb,00000002) ret=0c282782
  1656. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1657. 00fe:Call KERNEL32.VirtualQuery(7b427394,09b0d760,0000001c) ret=0c28278f
  1658. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1659. 00fe:Call KERNEL32.VirtualProtect(7b427394,00000006,00000040,09b0d7cc) ret=0c2827fc
  1660. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1661. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7b427394,00000006) ret=0c282866
  1662. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1663. 00fe:Call KERNEL32.VirtualProtect(7b427394,00000001,00000020,09b0d7c8) ret=0c2828b8
  1664. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1665. 00fe:Call KERNEL32.GetModuleHandleA(0c2cfb4c "kernelbase.dll") ret=0c296ab5
  1666. 00fe:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=0c296ab5
  1667. 00fe:Call KERNEL32.GetModuleHandleA(0c2da024 "ole32.dll") ret=0c296b1e
  1668. 00fe:Ret KERNEL32.GetModuleHandleA() retval=7e4e0000 ret=0c296b1e
  1669. 00fe:Call KERNEL32.GetProcAddress(7e4e0000,0c2da030 "CoCreateInstance") ret=0c296b3f
  1670. 00fe:Ret KERNEL32.GetProcAddress() retval=7e4e626c ret=0c296b3f
  1671. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7f0008cb,00000002) ret=0c282782
  1672. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282782
  1673. 00fe:Call KERNEL32.VirtualQuery(7e4e626c,09b0d760,0000001c) ret=0c28278f
  1674. 00fe:Ret KERNEL32.VirtualQuery() retval=0000001c ret=0c28278f
  1675. 00fe:Call KERNEL32.VirtualProtect(7e4e626c,00000006,00000040,09b0d7cc) ret=0c2827fc
  1676. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2827fc
  1677. 00fe:Call KERNEL32.FlushInstructionCache(ffffffff,7e4e626c,00000006) ret=0c282866
  1678. 00fe:Ret KERNEL32.FlushInstructionCache() retval=00000001 ret=0c282866
  1679. 00fe:Call KERNEL32.VirtualProtect(7e4e626c,00000001,00000020,09b0d7c8) ret=0c2828b8
  1680. 00fe:Ret KERNEL32.VirtualProtect() retval=00000001 ret=0c2828b8
  1681. 00fe:Call KERNEL32.WaitForSingleObject(00000260,ffffffff) ret=0c2930de
  1682. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c2930de
  1683. 00fe:Call KERNEL32.ReleaseMutex(00000260) ret=0c293106
  1684. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c293106
  1685. 00fe:Call KERNEL32.UnmapViewOfFile(003c0000) ret=0c29274a
  1686. 00fe:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=0c29274a
  1687. 00fe:Call KERNEL32.WaitForSingleObject(0000027c,ffffffff) ret=0c292ec9
  1688. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c292ec9
  1689. 00fe:Call KERNEL32.UnmapViewOfFile(0c340000) ret=0c29274a
  1690. 00fe:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=0c29274a
  1691. 00fe:Call KERNEL32.ReleaseMutex(0000027c) ret=0c292e5c
  1692. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c292e5c
  1693. 00fe:Call KERNEL32.WaitForSingleObject(00000290,ffffffff) ret=0c292ec9
  1694. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c292ec9
  1695. 00fe:Call KERNEL32.UnmapViewOfFile(0c3d0000) ret=0c29274a
  1696. 00fe:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=0c29274a
  1697. 00fe:Call KERNEL32.ReleaseMutex(00000290) ret=0c292e5c
  1698. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c292e5c
  1699. 00fe:Call KERNEL32.WaitForSingleObject(000002a4,ffffffff) ret=0c292ec9
  1700. 00fe:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=0c292ec9
  1701. 00fe:Call KERNEL32.UnmapViewOfFile(12200000) ret=0c29274a
  1702. 00fe:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=0c29274a
  1703. 00fe:Call KERNEL32.ReleaseMutex(000002a4) ret=0c292e5c
  1704. 00fe:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0c292e5c
  1705. 00fe:Call KERNEL32.UnmapViewOfFile(00390000) ret=0c29274a
  1706. 00fe:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=0c29274a
  1707. 00fe:Call imm32.ImmGetContext(00000000) ret=0c28ddac
  1708. 00fe:Call user32.IsWindow(00000000) ret=7da2e756
  1709. 00fe:Ret user32.IsWindow() retval=00000000 ret=7da2e756
  1710. 00fe:Ret imm32.ImmGetContext() retval=00000000 ret=0c28ddac
  1711. 00fe:Call imm32.ImmReleaseContext(00000000,00000000) ret=0c28ddba
  1712. 00fe:fixme:imm:ImmReleaseContext ((nil), (nil)): stub
  1713. 00fe:Ret imm32.ImmReleaseContext() retval=00000001 ret=0c28ddba
  1714. 00fe:Call imm32.ImmGetContext(00000000) ret=0c28ddd0
  1715. 00fe:Call user32.IsWindow(00000000) ret=7da2e756
  1716. 00fe:Ret user32.IsWindow() retval=00000000 ret=7da2e756
  1717. 00fe:Ret imm32.ImmGetContext() retval=00000000 ret=0c28ddd0
  1718. 00fe:Call imm32.ImmGetConversionStatus(0e51a450,09b0e020,09b0e01c) ret=0c28d63b
  1719. 00fe:Call KERNEL32.IsBadReadPtr(0e51a450,00000158) ret=7da27bf8
  1720. 00fe:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7da27bf8
  1721. 00fe:Ret imm32.ImmGetConversionStatus() retval=00000001 ret=0c28d63b
  1722. 00fe:Call imm32.ImmGetOpenStatus(0e51a450) ret=0c28d652
  1723. 00fe:Call KERNEL32.IsBadReadPtr(0e51a450,00000158) ret=7da27bf8
  1724. 00fe:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7da27bf8
  1725. 00fe:Ret imm32.ImmGetOpenStatus() retval=00000000 ret=0c28d652
  1726. 00fe:Call imm32.ImmAssociateContext(00000000,00000000) ret=0c28de19
  1727. 00fe:Ret imm32.ImmAssociateContext() retval=00000000 ret=0c28de19
  1728. 00fe:Call imm32.ImmReleaseContext(00000000,00000000) ret=0c28de22
  1729. 00fe:Ret imm32.ImmReleaseContext() retval=00000001 ret=0c28de22
  1730. 00fe:Call imm32.ImmDestroyContext(0e51a450) ret=0c28cd26
  1731. 00fe:Call KERNEL32.IsBadReadPtr(0e51a450,00000158) ret=7da27bf8
  1732. 00fe:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7da27bf8
  1733. 00fe:Call KERNEL32.IsBadReadPtr(0e51a450,00000158) ret=7da27bf8
  1734. 00fe:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7da27bf8
  1735. 00fe:Ret imm32.ImmDestroyContext() retval=00000000 ret=0c28cd26
  1736. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=0c2879a4
  1737. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1738. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=0c2879a4
  1739. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=0c2879a4
  1740. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1741. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=0c2879a4
  1742. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=0c2879a4
  1743. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1744. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=0c2879a4
  1745. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=0c2879a4
  1746. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1747. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=0c2879a4
  1748. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=0c2879a4
  1749. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1750. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=0c2879a4
  1751. 00fe:Ret PE DLL (proc=0xc2b0343,module=0xc210000 L"gameoverlayrenderer.dll",reason=PROCESS_DETACH,res=0x1) retval=0
  1752. 00fe:Call PE DLL (proc=0x6000abee,module=0x60000000 L"CSERHelper.dll",reason=PROCESS_DETACH,res=0x1)
  1753. 00fe:Call KERNEL32.SetUnhandledExceptionFilter(00970e20) ret=600125d6
  1754. 00fe:Ret KERNEL32.SetUnhandledExceptionFilter() retval=60012571 ret=600125d6
  1755. 00fe:Call KERNEL32.HeapDestroy(0cd20000) ret=6000aece
  1756. 00fe:Ret KERNEL32.HeapDestroy() retval=00000001 ret=6000aece
  1757. 00fe:Ret PE DLL (proc=0x6000abee,module=0x60000000 L"CSERHelper.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1758. 00fe:Call PE DLL (proc=0x787ea560,module=0x787b0000 L"dbghelp.dll",reason=PROCESS_DETACH,res=0x1)
  1759. 00fe:Ret PE DLL (proc=0x787ea560,module=0x787b0000 L"dbghelp.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1760. 00fe:Call PE DLL (proc=0x301aac46,module=0x30000000 L"Steam2.dll",reason=PROCESS_DETACH,res=0x1)
  1761. 00fe:Ret PE DLL (proc=0x301aac46,module=0x30000000 L"Steam2.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1762. 00fe:Call PE DLL (proc=0xbfea666,module=0xbfc0000 L"steam.dll",reason=PROCESS_DETACH,res=0x1)
  1763. 00fe:Call oleaut32.VariantClear(0c019d78) ret=0c00115b
  1764. 00fe:Ret oleaut32.VariantClear() retval=00000000 ret=0c00115b
  1765. 00fe:Ret PE DLL (proc=0xbfea666,module=0xbfc0000 L"steam.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1766. 00fe:Call PE DLL (proc=0x38676c12,module=0x38000000 L"steamclient.dll",reason=PROCESS_DETACH,res=0x1)
  1767. 00fe:Call KERNEL32.SetEvent(00000218) ret=386c06ce
  1768. 00fe:Ret KERNEL32.SetEvent() retval=00000001 ret=386c06ce
  1769. 00fe:Call oleaut32.VariantClear(38930750) ret=3876386b
  1770. 00fe:Ret oleaut32.VariantClear() retval=00000000 ret=3876386b
  1771. 00fe:Call KERNEL32.TlsSetValue(00000012,00000000) ret=3f01065a
  1772. 00fe:Ret KERNEL32.TlsSetValue() retval=00000001 ret=3f01065a
  1773. 00fe:Ret PE DLL (proc=0x38676c12,module=0x38000000 L"steamclient.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1774. 00fe:Call PE DLL (proc=0x7885d980,module=0x78840000 L"secur32.dll",reason=PROCESS_DETACH,res=0x1)
  1775. 00fe:Ret PE DLL (proc=0x7885d980,module=0x78840000 L"secur32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1776. 00fe:Call PE DLL (proc=0x7882a670,module=0x78810000 L"netapi32.dll",reason=PROCESS_DETACH,res=0x1)
  1777. 00fe:Ret PE DLL (proc=0x7882a670,module=0x78810000 L"netapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1778. 00fe:Call PE DLL (proc=0x3f61bb3b,module=0x3f600000 L"vstdlib_s.dll",reason=PROCESS_DETACH,res=0x1)
  1779. 00fe:Ret PE DLL (proc=0x3f61bb3b,module=0x3f600000 L"vstdlib_s.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1780. 00fe:Call PE DLL (proc=0x3f01c8b7,module=0x3f000000 L"tier0_s.dll",reason=PROCESS_DETACH,res=0x1)
  1781. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=3f006c24
  1782. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1783. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=3f006c24
  1784. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=3f006c24
  1785. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1786. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=3f006c24
  1787. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=3f006c24
  1788. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1789. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=3f006c24
  1790. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=3f006c24
  1791. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1792. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=3f006c24
  1793. 00fe:Call ntdll.EtwEventUnregister(deadbeef,00000000) ret=3f006c24
  1794. 00fe:fixme:ntdll:EtwEventUnregister (deadbeef) stub.
  1795. 00fe:Ret ntdll.EtwEventUnregister() retval=00000000 ret=3f006c24
  1796. 00fe:Ret PE DLL (proc=0x3f01c8b7,module=0x3f000000 L"tier0_s.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1797. 00fe:Call PE DLL (proc=0x7887eb00,module=0x78870000 L"imagehlp.dll",reason=PROCESS_DETACH,res=0x1)
  1798. 00fe:Ret PE DLL (proc=0x7887eb00,module=0x78870000 L"imagehlp.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1799. 00fe:Call PE DLL (proc=0x788efc30,module=0x78890000 L"crypt32.dll",reason=PROCESS_DETACH,res=0x1)
  1800. 00fe:Ret PE DLL (proc=0x788efc30,module=0x78890000 L"crypt32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1801. 00fe:Call PE DLL (proc=0x74bbd3a0,module=0x74ba0000 L"wbemprox.dll",reason=PROCESS_DETACH,res=0x1)
  1802. 00fe:Ret PE DLL (proc=0x74bbd3a0,module=0x74ba0000 L"wbemprox.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1803. 00fe:Call PE DLL (proc=0x74b48080,module=0x74b30000 L"dxgi.dll",reason=PROCESS_DETACH,res=0x1)
  1804. 00fe:Ret PE DLL (proc=0x74b48080,module=0x74b30000 L"dxgi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1805. 00fe:Call PE DLL (proc=0x74b81e30,module=0x74b60000 L"winspool.drv",reason=PROCESS_DETACH,res=0x1)
  1806. 00fe:Ret PE DLL (proc=0x74b81e30,module=0x74b60000 L"winspool.drv",reason=PROCESS_DETACH,res=0x1) retval=1
  1807. 00fe:Call PE DLL (proc=0x75f01b10,module=0x75ee0000 L"dinput.dll",reason=PROCESS_DETACH,res=0x1)
  1808. 00fe:Ret PE DLL (proc=0x75f01b10,module=0x75ee0000 L"dinput.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1809. 00fe:Call PE DLL (proc=0x74dede80,module=0x74dd0000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1)
  1810. 00fe:Ret PE DLL (proc=0x74dede80,module=0x74dd0000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1811. 00fe:Call PE DLL (proc=0x75691ea0,module=0x75600000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1)
  1812. 00fe:Ret PE DLL (proc=0x75691ea0,module=0x75600000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1813. 00fe:Call PE DLL (proc=0x7cd1bd60,module=0x7cd00000 L"winealsa.drv",reason=PROCESS_DETACH,res=0x1)
  1814. 00fe:Ret PE DLL (proc=0x7cd1bd60,module=0x7cd00000 L"winealsa.drv",reason=PROCESS_DETACH,res=0x1) retval=1
  1815. 00fe:Call PE DLL (proc=0x7d2c3ac0,module=0x7d2b0000 L"mmdevapi.dll",reason=PROCESS_DETACH,res=0x1)
  1816. 00fe:Ret PE DLL (proc=0x7d2c3ac0,module=0x7d2b0000 L"mmdevapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1817. 00fe:Call PE DLL (proc=0x7d280440,module=0x7d260000 L"dsound.dll",reason=PROCESS_DETACH,res=0x1)
  1818. 00fe:Ret PE DLL (proc=0x7d280440,module=0x7d260000 L"dsound.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1819. 00fe:Call PE DLL (proc=0x5691ce5,module=0x5660000 L"XAudio2_7.dll",reason=PROCESS_DETACH,res=0x1)
  1820. 00fe:Call msvcrt.memset(09b0df08,00000000,000001f8) ret=05690f06
  1821. 00fe:Ret msvcrt.memset() retval=09b0df08 ret=05690f06
  1822. 00fe:Call KERNEL32.GetModuleFileNameA(05660000,09b0df00,00000200) ret=05690f22
  1823. 00fe:Ret KERNEL32.GetModuleFileNameA() retval=00000021 ret=05690f22
  1824. 00fe:Call msvcrt.free(025c1270) ret=05691a60
  1825. 00fe:Ret msvcrt.free() retval=00000001 ret=05691a60
  1826. 00fe:Ret PE DLL (proc=0x5691ce5,module=0x5660000 L"XAudio2_7.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1827. 00fe:Call PE DLL (proc=0x7d7aa680,module=0x7d7a0000 L"psapi.dll",reason=PROCESS_DETACH,res=0x1)
  1828. 00fe:Ret PE DLL (proc=0x7d7aa680,module=0x7d7a0000 L"psapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1829. 00fe:Call PE DLL (proc=0x7df91370,module=0x7dee0000 L"oleaut32.dll",reason=PROCESS_DETACH,res=0x1)
  1830. 00fe:Ret PE DLL (proc=0x7df91370,module=0x7dee0000 L"oleaut32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1831. 00fe:Call PE DLL (proc=0x363178,module=0x360000 L"X3DAudio1_7.dll",reason=PROCESS_DETACH,res=0x1)
  1832. 00fe:Call msvcrt.free(025c11e8) ret=00362ef3
  1833. 00fe:Ret msvcrt.free() retval=00000001 ret=00362ef3
  1834. 00fe:Ret PE DLL (proc=0x363178,module=0x360000 L"X3DAudio1_7.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1835. 00fe:Call PE DLL (proc=0x34801f,module=0x340000 L"XINPUT1_3.dll",reason=PROCESS_DETACH,res=0x1)
  1836. 00fe:Call KERNEL32.LocalFree(00149d70) ret=003457eb
  1837. 00fe:Ret KERNEL32.LocalFree() retval=00000000 ret=003457eb
  1838. 00fe:Call KERNEL32.SetUnhandledExceptionFilter(00000000) ret=0034ca05
  1839. 00fe:Ret KERNEL32.SetUnhandledExceptionFilter() retval=00970e20 ret=0034ca05
  1840. 00fe:Ret PE DLL (proc=0x34801f,module=0x340000 L"XINPUT1_3.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1841. 00fe:Call PE DLL (proc=0x7e1531b0,module=0x7e120000 L"setupapi.dll",reason=PROCESS_DETACH,res=0x1)
  1842. 00fe:Ret PE DLL (proc=0x7e1531b0,module=0x7e120000 L"setupapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1843. 00fe:Call PE DLL (proc=0x7e1dd210,module=0x7e1b0000 L"winmm.dll",reason=PROCESS_DETACH,res=0x1)
  1844. 00fe:Ret PE DLL (proc=0x7e1dd210,module=0x7e1b0000 L"winmm.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1845. 00fe:Call PE DLL (proc=0x7e19f8c0,module=0x7e190000 L"msacm32.dll",reason=PROCESS_DETACH,res=0x1)
  1846. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,00000084) ret=7e198c74
  1847. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e05f8 ret=7e198c74
  1848. 00fe:Call user32.CharLowerW(027e0666 L"msacm.iac2") ret=7e198ccc
  1849. 00fe:Ret user32.CharLowerW() retval=027e0666 ret=7e198ccc
  1850. 00fe:Call advapi32.RegCreateKeyW(80000002,027e05f8 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.iac2",09b0e0b8) ret=7e19977b
  1851. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1852. 00fe:Call advapi32.RegSetValueExA(0000020c,7e1a066a "cFormatTags",00000000,00000004,027e015c,00000004) ret=7e199796
  1853. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1854. 00fe:Call advapi32.RegSetValueExA(0000020c,7e1a0676 "cFilterTags",00000000,00000004,027e0158,00000004) ret=7e1997b4
  1855. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1856. 00fe:Call advapi32.RegSetValueExA(0000020c,7e1a0682 "fdwSupport",00000000,00000004,027e0160,00000004) ret=7e1997dd
  1857. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1858. 00fe:Call advapi32.RegSetValueExA(0000020c,7e1a068d "aFormatTagCache",00000000,00000003,027e0268,00000010) ret=7e19980a
  1859. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1860. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,0000008c) ret=7e198c74
  1861. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1862. 00fe:Call user32.CharLowerW(027e01a6 L"msacm.imaadpcm") ret=7e198ccc
  1863. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1864. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.imaadpcm",09b0e0b8) ret=7e19977b
  1865. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1866. 00fe:Call advapi32.RegSetValueExA(00000218,7e1a066a "cFormatTags",00000000,00000004,027e01fc,00000004) ret=7e199796
  1867. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1868. 00fe:Call advapi32.RegSetValueExA(00000218,7e1a0676 "cFilterTags",00000000,00000004,027e01f8,00000004) ret=7e1997b4
  1869. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1870. 00fe:Call advapi32.RegSetValueExA(00000218,7e1a0682 "fdwSupport",00000000,00000004,027e0200,00000004) ret=7e1997dd
  1871. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1872. 00fe:Call advapi32.RegSetValueExA(00000218,7e1a068d "aFormatTagCache",00000000,00000003,027e0318,00000010) ret=7e19980a
  1873. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1874. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,0000008a) ret=7e198c74
  1875. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1876. 00fe:Call user32.CharLowerW(027e01a6 L"msacm.msadpcm") ret=7e198ccc
  1877. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1878. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msadpcm",09b0e0b8) ret=7e19977b
  1879. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1880. 00fe:Call advapi32.RegSetValueExA(0000022c,7e1a066a "cFormatTags",00000000,00000004,027e02a4,00000004) ret=7e199796
  1881. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1882. 00fe:Call advapi32.RegSetValueExA(0000022c,7e1a0676 "cFilterTags",00000000,00000004,027e02a0,00000004) ret=7e1997b4
  1883. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1884. 00fe:Call advapi32.RegSetValueExA(0000022c,7e1a0682 "fdwSupport",00000000,00000004,027e02a8,00000004) ret=7e1997dd
  1885. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1886. 00fe:Call advapi32.RegSetValueExA(0000022c,7e1a068d "aFormatTagCache",00000000,00000003,027e03c8,00000010) ret=7e19980a
  1887. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1888. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,00000088) ret=7e198c74
  1889. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1890. 00fe:Call user32.CharLowerW(027e01a6 L"msacm.msg711") ret=7e198ccc
  1891. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1892. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msg711",09b0e0b8) ret=7e19977b
  1893. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1894. 00fe:Call advapi32.RegSetValueExA(00000230,7e1a066a "cFormatTags",00000000,00000004,027e0354,00000004) ret=7e199796
  1895. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1896. 00fe:Call advapi32.RegSetValueExA(00000230,7e1a0676 "cFilterTags",00000000,00000004,027e0350,00000004) ret=7e1997b4
  1897. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1898. 00fe:Call advapi32.RegSetValueExA(00000230,7e1a0682 "fdwSupport",00000000,00000004,027e0358,00000004) ret=7e1997dd
  1899. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1900. 00fe:Call advapi32.RegSetValueExA(00000230,7e1a068d "aFormatTagCache",00000000,00000003,027e0470,00000018) ret=7e19980a
  1901. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1902. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,0000008a) ret=7e198c74
  1903. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1904. 00fe:Call user32.CharLowerW(027e01a6 L"msacm.winemp3") ret=7e198ccc
  1905. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1906. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.winemp3",09b0e0b8) ret=7e19977b
  1907. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1908. 00fe:Call advapi32.RegSetValueExA(00000244,7e1a066a "cFormatTags",00000000,00000004,027e0404,00000004) ret=7e199796
  1909. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1910. 00fe:Call advapi32.RegSetValueExA(00000244,7e1a0676 "cFilterTags",00000000,00000004,027e0400,00000004) ret=7e1997b4
  1911. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1912. 00fe:Call advapi32.RegSetValueExA(00000244,7e1a0682 "fdwSupport",00000000,00000004,027e0408,00000004) ret=7e1997dd
  1913. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1914. 00fe:Call advapi32.RegSetValueExA(00000244,7e1a068d "aFormatTagCache",00000000,00000003,027e0528,00000018) ret=7e19980a
  1915. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1916. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,0000008c) ret=7e198c74
  1917. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1918. 00fe:Call user32.CharLowerW(027e01a6 L"msacm.msgsm610") ret=7e198ccc
  1919. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1920. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msgsm610",09b0e0b8) ret=7e19977b
  1921. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1922. 00fe:Call advapi32.RegSetValueExA(00000254,7e1a066a "cFormatTags",00000000,00000004,027e04b4,00000004) ret=7e199796
  1923. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1924. 00fe:Call advapi32.RegSetValueExA(00000254,7e1a0676 "cFilterTags",00000000,00000004,027e04b0,00000004) ret=7e1997b4
  1925. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1926. 00fe:Call advapi32.RegSetValueExA(00000254,7e1a0682 "fdwSupport",00000000,00000004,027e04b8,00000004) ret=7e1997dd
  1927. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1928. 00fe:Call advapi32.RegSetValueExA(00000254,7e1a068d "aFormatTagCache",00000000,00000003,027e05e0,00000010) ret=7e19980a
  1929. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1930. 00fe:Call ntdll.RtlAllocateHeap(027e0000,00000000,00000086) ret=7e198c74
  1931. 00fe:Ret ntdll.RtlAllocateHeap() retval=027e0138 ret=7e198c74
  1932. 00fe:Call user32.CharLowerW(027e01a6 L"msacm32.dll") ret=7e198ccc
  1933. 00fe:Ret user32.CharLowerW() retval=027e01a6 ret=7e198ccc
  1934. 00fe:Call advapi32.RegCreateKeyW(80000002,027e0138 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm32.dll",09b0e0b8) ret=7e19977b
  1935. 00fe:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e19977b
  1936. 00fe:Call advapi32.RegSetValueExA(00000258,7e1a066a "cFormatTags",00000000,00000004,027e056c,00000004) ret=7e199796
  1937. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e199796
  1938. 00fe:Call advapi32.RegSetValueExA(00000258,7e1a0676 "cFilterTags",00000000,00000004,027e0568,00000004) ret=7e1997b4
  1939. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997b4
  1940. 00fe:Call advapi32.RegSetValueExA(00000258,7e1a0682 "fdwSupport",00000000,00000004,027e0570,00000004) ret=7e1997dd
  1941. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e1997dd
  1942. 00fe:Call advapi32.RegSetValueExA(00000258,7e1a068d "aFormatTagCache",00000000,00000003,027e05c0,00000008) ret=7e19980a
  1943. 00fe:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e19980a
  1944. 00fe:Ret PE DLL (proc=0x7e19f8c0,module=0x7e190000 L"msacm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1945. 00fe:Call PE DLL (proc=0x7e277410,module=0x7e270000 L"dinput8.dll",reason=PROCESS_DETACH,res=0x1)
  1946. 00fe:Ret PE DLL (proc=0x7e277410,module=0x7e270000 L"dinput8.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1947. 00fe:Call PE DLL (proc=0x7e3e7a30,module=0x7e3c0000 L"d3d9.dll",reason=PROCESS_DETACH,res=0x1)
  1948. 00fe:Ret PE DLL (proc=0x7e3e7a30,module=0x7e3c0000 L"d3d9.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1949. 00fe:Call PE DLL (proc=0x7d9e3b60,module=0x7d990000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1)
  1950. 00fe:Ret PE DLL (proc=0x7d9e3b60,module=0x7d990000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) retval=1
  1951. 00fe:Call PE DLL (proc=0x7e35ad80,module=0x7e290000 L"wined3d.dll",reason=PROCESS_DETACH,res=0x1)
  1952. 00fe:Ret PE DLL (proc=0x7e35ad80,module=0x7e290000 L"wined3d.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1953. 00fe:Call PE DLL (proc=0x7a8aa010,module=0x7a820000 L"opengl32.dll",reason=PROCESS_DETACH,res=0x1)
  1954. 00fe:Ret PE DLL (proc=0x7a8aa010,module=0x7a820000 L"opengl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1955. 00fe:Call PE DLL (proc=0x7e4398b0,module=0x7e430000 L"wsock32.dll",reason=PROCESS_DETACH,res=0x1)
  1956. 00fe:Ret PE DLL (proc=0x7e4398b0,module=0x7e430000 L"wsock32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1957. 00fe:Call PE DLL (proc=0x7e41c170,module=0x7e400000 L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1)
  1958. 00fe:Ret PE DLL (proc=0x7e41c170,module=0x7e400000 L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1959. 00fe:Call PE DLL (proc=0x7e5a6f00,module=0x7e4e0000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1)
  1960. 00fe:Ret PE DLL (proc=0x7e5a6f00,module=0x7e4e0000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1961. 00fe:Call PE DLL (proc=0x7e498760,module=0x7e450000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1)
  1962. 00fe:Ret PE DLL (proc=0x7e498760,module=0x7e450000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1963. 00fe:Call PE DLL (proc=0x3b4069b2,module=0x3b400000 L"steam_api.dll",reason=PROCESS_DETACH,res=0x1)
  1964. 00fe:Call KERNEL32.WriteFile(00000008,09b0da98,0000007a,09b0da78,00000000) ret=3b40fff7
  1965. Setting breakpad minidump AppID = 92000
  1966. Steam_SetMinidumpSteamID: Caching Steam ID: 76561198145916181 [API loaded no]
  1967. 00fe:Ret KERNEL32.WriteFile() retval=00000001 ret=3b40fff7
  1968. 00fe:Ret PE DLL (proc=0x3b4069b2,module=0x3b400000 L"steam_api.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1969. 00fe:Call PE DLL (proc=0x7eae7440,module=0x7eab0000 L"wininet.dll",reason=PROCESS_DETACH,res=0x1)
  1970. 00fe:Ret PE DLL (proc=0x7eae7440,module=0x7eab0000 L"wininet.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1971. 00fe:Call PE DLL (proc=0x7e628920,module=0x7e600000 L"ws2_32.dll",reason=PROCESS_DETACH,res=0x1)
  1972. 00fe:Ret PE DLL (proc=0x7e628920,module=0x7e600000 L"ws2_32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1973. 00fe:Call PE DLL (proc=0x7e6ccac0,module=0x7e650000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1)
  1974. 00fe:Ret PE DLL (proc=0x7e6ccac0,module=0x7e650000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1975. 00fe:Call PE DLL (proc=0x7e8c1f90,module=0x7e890000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1)
  1976. 00fe:Ret PE DLL (proc=0x7e8c1f90,module=0x7e890000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1977. 00fe:Call PE DLL (proc=0x7ea791c0,module=0x7ea70000 L"mpr.dll",reason=PROCESS_DETACH,res=0x1)
  1978. 00fe:Ret PE DLL (proc=0x7ea791c0,module=0x7ea70000 L"mpr.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1979. 00fe:Call PE DLL (proc=0x7da2fbd0,module=0x7da20000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1)
  1980. 00fe:Ret PE DLL (proc=0x7da2fbd0,module=0x7da20000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1981. 00fe:Call PE DLL (proc=0x7e9bb480,module=0x7e920000 L"user32.dll",reason=PROCESS_DETACH,res=0x1)
  1982. 00fe:Ret PE DLL (proc=0x7e9bb480,module=0x7e920000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1983. 00fe:Call PE DLL (proc=0x7e905de0,module=0x7e900000 L"version.dll",reason=PROCESS_DETACH,res=0x1)
  1984. 00fe:Ret PE DLL (proc=0x7e905de0,module=0x7e900000 L"version.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1985. 00fe:Call PE DLL (proc=0x101bec0d,module=0x10000000 L"d3dx9_43.dll",reason=PROCESS_DETACH,res=0x1)
  1986. 00fe:Call KERNEL32.FreeLibrary(00000000) ret=10018914
  1987. 00fe:Ret KERNEL32.FreeLibrary() retval=00000000 ret=10018914
  1988. 00fe:Call msvcrt.free(025c11d0) ret=101be88f
  1989. 00fe:Ret msvcrt.free() retval=00000001 ret=101be88f
  1990. 00fe:Ret PE DLL (proc=0x101bec0d,module=0x10000000 L"d3dx9_43.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1991. 00fe:Call PE DLL (proc=0x7ec33ae0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1)
  1992. 00fe:Ret PE DLL (proc=0x7ec33ae0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1993. 00fe:Call PE DLL (proc=0x7eb68550,module=0x7eb20000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1)
  1994. 00fe:Ret PE DLL (proc=0x7eb68550,module=0x7eb20000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1995. 00fe:Call PE DLL (proc=0x7ed448d0,module=0x7ecd0000 L"msvcrt.dll",reason=PROCESS_DETACH,res=0x1)
  1996. 00fe:Ret PE DLL (proc=0x7ed448d0,module=0x7ecd0000 L"msvcrt.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1997. 00fe:Call PE DLL (proc=0x7b485850,module=0x7b420000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1)
  1998. 00fe:Ret PE DLL (proc=0x7b485850,module=0x7b420000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  1999. 00fe:Call PE DLL (proc=0x7bc9f540,module=0x7bc10000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1)
  2000. 00fe:Ret PE DLL (proc=0x7bc9f540,module=0x7bc10000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!