API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 5th, 2015
301
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 47.98 KB | None | 0 0
raw download clone embed print report
  1. (1210726 lines skipped)
  2. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  3. 002d:Ret msvcrt.fgetc() retval=0000000d ret=7ed012f2
  4. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed0152b
  5. 002d:Ret msvcrt.fgetc() retval=0000000a ret=7ed0152b
  6. 002d:Call ntdll.strpbrk(001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED} = OLE 2.0 MSPAM Magic School Bus Title\r\n",7ed04bd0 "\r\n") ret=7ed0133d
  7. 002d:Ret ntdll.strpbrk() retval=0014033d ret=7ed0133d
  8. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed0134a
  9. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed0134a
  10. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED} = OLE 2.0 MSPAM Magic School Bus Title",ffffffff,00000000,00000000) ret=7ecff222
  11. 002d:Ret KERNEL32.MultiByteToWideChar() retval=00000066 ret=7ecff222
  12. 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,000000cc) ret=7ecff247
  13. 002d:Ret ntdll.RtlAllocateHeap() retval=0013ae78 ret=7ecff247
  14. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED} = OLE 2.0 MSPAM Magic School Bus Title",ffffffff,0013ae78,00000066) ret=7ecff27b
  15. 002d:Ret KERNEL32.MultiByteToWideChar() retval=00000066 ret=7ecff27b
  16. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae78) ret=7ed013d8
  17. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ed013d8
  18. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed013e6
  19. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed013e6
  20. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  21. 002d:Ret msvcrt.fgetc() retval=00000048 ret=7ed012f2
  22. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  23. 002d:Ret msvcrt.fgetc() retval=0000004b ret=7ed012f2
  24. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  25. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  26. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  27. 002d:Ret msvcrt.fgetc() retval=00000059 ret=7ed012f2
  28. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  29. 002d:Ret msvcrt.fgetc() retval=0000005f ret=7ed012f2
  30. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  31. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  32. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  33. 002d:Ret msvcrt.fgetc() retval=0000004c ret=7ed012f2
  34. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  35. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  36. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  37. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  38. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  39. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  40. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  41. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  42. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  43. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  44. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  45. 002d:Ret msvcrt.fgetc() retval=0000005f ret=7ed012f2
  46. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  47. 002d:Ret msvcrt.fgetc() retval=00000052 ret=7ed012f2
  48. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  49. 002d:Ret msvcrt.fgetc() retval=0000004f ret=7ed012f2
  50. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  51. 002d:Ret msvcrt.fgetc() retval=0000004f ret=7ed012f2
  52. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  53. 002d:Ret msvcrt.fgetc() retval=00000054 ret=7ed012f2
  54. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  55. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  56. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  57. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  58. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  59. 002d:Ret msvcrt.fgetc() retval=0000004c ret=7ed012f2
  60. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  61. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  62. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  63. 002d:Ret msvcrt.fgetc() retval=00000049 ret=7ed012f2
  64. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  65. 002d:Ret msvcrt.fgetc() retval=00000044 ret=7ed012f2
  66. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  67. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  68. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  69. 002d:Ret msvcrt.fgetc() retval=0000007b ret=7ed012f2
  70. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  71. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  72. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  73. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  74. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  75. 002d:Ret msvcrt.fgetc() retval=00000039 ret=7ed012f2
  76. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  77. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  78. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  79. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  80. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  81. 002d:Ret msvcrt.fgetc() retval=00000039 ret=7ed012f2
  82. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  83. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  84. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  85. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  86. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  87. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  88. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  89. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  90. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  91. 002d:Ret msvcrt.fgetc() retval=00000032 ret=7ed012f2
  92. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  93. 002d:Ret msvcrt.fgetc() retval=00000037 ret=7ed012f2
  94. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  95. 002d:Ret msvcrt.fgetc() retval=00000035 ret=7ed012f2
  96. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  97. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  98. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  99. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  100. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  101. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  102. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  103. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  104. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  105. 002d:Ret msvcrt.fgetc() retval=00000042 ret=7ed012f2
  106. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  107. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  108. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  109. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  110. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  111. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  112. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  113. 002d:Ret msvcrt.fgetc() retval=00000046 ret=7ed012f2
  114. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  115. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  116. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  117. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  118. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  119. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  120. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  121. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  122. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  123. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  124. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  125. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  126. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  127. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  128. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  129. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  130. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  131. 002d:Ret msvcrt.fgetc() retval=00000033 ret=7ed012f2
  132. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  133. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  134. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  135. 002d:Ret msvcrt.fgetc() retval=00000032 ret=7ed012f2
  136. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  137. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  138. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  139. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  140. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  141. 002d:Ret msvcrt.fgetc() retval=00000044 ret=7ed012f2
  142. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  143. 002d:Ret msvcrt.fgetc() retval=0000007d ret=7ed012f2
  144. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  145. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  146. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  147. 002d:Ret msvcrt.fgetc() retval=00000049 ret=7ed012f2
  148. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  149. 002d:Ret msvcrt.fgetc() retval=0000006e ret=7ed012f2
  150. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  151. 002d:Ret msvcrt.fgetc() retval=00000070 ret=7ed012f2
  152. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  153. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  154. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  155. 002d:Ret msvcrt.fgetc() retval=0000006f ret=7ed012f2
  156. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  157. 002d:Ret msvcrt.fgetc() retval=00000063 ret=7ed012f2
  158. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  159. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  160. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  161. 002d:Ret msvcrt.fgetc() retval=00000065 ret=7ed012f2
  162. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  163. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  164. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  165. 002d:Ret msvcrt.fgetc() retval=00000076 ret=7ed012f2
  166. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  167. 002d:Ret msvcrt.fgetc() retval=00000065 ret=7ed012f2
  168. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  169. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  170. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  171. 002d:Ret msvcrt.fgetc() retval=00000020 ret=7ed012f2
  172. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  173. 002d:Ret msvcrt.fgetc() retval=0000003d ret=7ed012f2
  174. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  175. 002d:Ret msvcrt.fgetc() retval=00000020 ret=7ed012f2
  176. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  177. 002d:Ret msvcrt.fgetc() retval=0000004d ret=7ed012f2
  178. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  179. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  180. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  181. 002d:Ret msvcrt.fgetc() retval=00000042 ret=7ed012f2
  182. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  183. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  184. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  185. 002d:Ret msvcrt.fgetc() retval=0000006f ret=7ed012f2
  186. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  187. 002d:Ret msvcrt.fgetc() retval=0000006c ret=7ed012f2
  188. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  189. 002d:Ret msvcrt.fgetc() retval=00000061 ret=7ed012f2
  190. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  191. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  192. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  193. 002d:Ret msvcrt.fgetc() retval=0000002e ret=7ed012f2
  194. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  195. 002d:Ret msvcrt.fgetc() retval=00000064 ret=7ed012f2
  196. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  197. 002d:Ret msvcrt.fgetc() retval=0000006c ret=7ed012f2
  198. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  199. 002d:Ret msvcrt.fgetc() retval=0000006c ret=7ed012f2
  200. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  201. 002d:Ret msvcrt.fgetc() retval=0000000d ret=7ed012f2
  202. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed0152b
  203. 002d:Ret msvcrt.fgetc() retval=0000000a ret=7ed0152b
  204. 002d:Call ntdll.strpbrk(001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\InprocServer = MSBSolar.dll\r\n",7ed04bd0 "\r\n") ret=7ed0133d
  205. 002d:Ret ntdll.strpbrk() retval=00140332 ret=7ed0133d
  206. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed0134a
  207. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed0134a
  208. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\InprocServer = MSBSolar.dll",ffffffff,00000000,00000000) ret=7ecff222
  209. 002d:Ret KERNEL32.MultiByteToWideChar() retval=0000005b ret=7ecff222
  210. 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,000000b6) ret=7ecff247
  211. 002d:Ret ntdll.RtlAllocateHeap() retval=0013ae78 ret=7ecff247
  212. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\InprocServer = MSBSolar.dll",ffffffff,0013ae78,0000005b) ret=7ecff27b
  213. 002d:Ret KERNEL32.MultiByteToWideChar() retval=0000005b ret=7ecff27b
  214. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae78) ret=7ed013d8
  215. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ed013d8
  216. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed013e6
  217. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed013e6
  218. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  219. 002d:Ret msvcrt.fgetc() retval=00000048 ret=7ed012f2
  220. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  221. 002d:Ret msvcrt.fgetc() retval=0000004b ret=7ed012f2
  222. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  223. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  224. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  225. 002d:Ret msvcrt.fgetc() retval=00000059 ret=7ed012f2
  226. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  227. 002d:Ret msvcrt.fgetc() retval=0000005f ret=7ed012f2
  228. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  229. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  230. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  231. 002d:Ret msvcrt.fgetc() retval=0000004c ret=7ed012f2
  232. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  233. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  234. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  235. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  236. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  237. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  238. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  239. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  240. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  241. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  242. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  243. 002d:Ret msvcrt.fgetc() retval=0000005f ret=7ed012f2
  244. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  245. 002d:Ret msvcrt.fgetc() retval=00000052 ret=7ed012f2
  246. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  247. 002d:Ret msvcrt.fgetc() retval=0000004f ret=7ed012f2
  248. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  249. 002d:Ret msvcrt.fgetc() retval=0000004f ret=7ed012f2
  250. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  251. 002d:Ret msvcrt.fgetc() retval=00000054 ret=7ed012f2
  252. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  253. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  254. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  255. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  256. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  257. 002d:Ret msvcrt.fgetc() retval=0000004c ret=7ed012f2
  258. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  259. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  260. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  261. 002d:Ret msvcrt.fgetc() retval=00000049 ret=7ed012f2
  262. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  263. 002d:Ret msvcrt.fgetc() retval=00000044 ret=7ed012f2
  264. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  265. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  266. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  267. 002d:Ret msvcrt.fgetc() retval=0000007b ret=7ed012f2
  268. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  269. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  270. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  271. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  272. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  273. 002d:Ret msvcrt.fgetc() retval=00000039 ret=7ed012f2
  274. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  275. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  276. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  277. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  278. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  279. 002d:Ret msvcrt.fgetc() retval=00000039 ret=7ed012f2
  280. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  281. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  282. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  283. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  284. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  285. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  286. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  287. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  288. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  289. 002d:Ret msvcrt.fgetc() retval=00000032 ret=7ed012f2
  290. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  291. 002d:Ret msvcrt.fgetc() retval=00000037 ret=7ed012f2
  292. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  293. 002d:Ret msvcrt.fgetc() retval=00000035 ret=7ed012f2
  294. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  295. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  296. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  297. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  298. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  299. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  300. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  301. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  302. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  303. 002d:Ret msvcrt.fgetc() retval=00000042 ret=7ed012f2
  304. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  305. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  306. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  307. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  308. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  309. 002d:Ret msvcrt.fgetc() retval=00000043 ret=7ed012f2
  310. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  311. 002d:Ret msvcrt.fgetc() retval=00000046 ret=7ed012f2
  312. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  313. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  314. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  315. 002d:Ret msvcrt.fgetc() retval=0000002d ret=7ed012f2
  316. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  317. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  318. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  319. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  320. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  321. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  322. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  323. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  324. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  325. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  326. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  327. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  328. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  329. 002d:Ret msvcrt.fgetc() retval=00000033 ret=7ed012f2
  330. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  331. 002d:Ret msvcrt.fgetc() retval=00000030 ret=7ed012f2
  332. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  333. 002d:Ret msvcrt.fgetc() retval=00000032 ret=7ed012f2
  334. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  335. 002d:Ret msvcrt.fgetc() retval=00000031 ret=7ed012f2
  336. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  337. 002d:Ret msvcrt.fgetc() retval=00000045 ret=7ed012f2
  338. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  339. 002d:Ret msvcrt.fgetc() retval=00000044 ret=7ed012f2
  340. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  341. 002d:Ret msvcrt.fgetc() retval=0000007d ret=7ed012f2
  342. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  343. 002d:Ret msvcrt.fgetc() retval=0000005c ret=7ed012f2
  344. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  345. 002d:Ret msvcrt.fgetc() retval=00000050 ret=7ed012f2
  346. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  347. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  348. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  349. 002d:Ret msvcrt.fgetc() retval=0000006f ret=7ed012f2
  350. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  351. 002d:Ret msvcrt.fgetc() retval=00000067 ret=7ed012f2
  352. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  353. 002d:Ret msvcrt.fgetc() retval=00000049 ret=7ed012f2
  354. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  355. 002d:Ret msvcrt.fgetc() retval=00000044 ret=7ed012f2
  356. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  357. 002d:Ret msvcrt.fgetc() retval=00000020 ret=7ed012f2
  358. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  359. 002d:Ret msvcrt.fgetc() retval=0000003d ret=7ed012f2
  360. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  361. 002d:Ret msvcrt.fgetc() retval=00000020 ret=7ed012f2
  362. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  363. 002d:Ret msvcrt.fgetc() retval=0000004d ret=7ed012f2
  364. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  365. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  366. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  367. 002d:Ret msvcrt.fgetc() retval=00000050 ret=7ed012f2
  368. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  369. 002d:Ret msvcrt.fgetc() retval=00000041 ret=7ed012f2
  370. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  371. 002d:Ret msvcrt.fgetc() retval=0000004d ret=7ed012f2
  372. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  373. 002d:Ret msvcrt.fgetc() retval=0000004d ret=7ed012f2
  374. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  375. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  376. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  377. 002d:Ret msvcrt.fgetc() retval=00000042 ret=7ed012f2
  378. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  379. 002d:Ret msvcrt.fgetc() retval=00000053 ret=7ed012f2
  380. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  381. 002d:Ret msvcrt.fgetc() retval=0000006f ret=7ed012f2
  382. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  383. 002d:Ret msvcrt.fgetc() retval=0000006c ret=7ed012f2
  384. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  385. 002d:Ret msvcrt.fgetc() retval=00000061 ret=7ed012f2
  386. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  387. 002d:Ret msvcrt.fgetc() retval=00000072 ret=7ed012f2
  388. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  389. 002d:Ret msvcrt.fgetc() retval=00000054 ret=7ed012f2
  390. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  391. 002d:Ret msvcrt.fgetc() retval=00000069 ret=7ed012f2
  392. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  393. 002d:Ret msvcrt.fgetc() retval=00000074 ret=7ed012f2
  394. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  395. 002d:Ret msvcrt.fgetc() retval=0000006c ret=7ed012f2
  396. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  397. 002d:Ret msvcrt.fgetc() retval=00000065 ret=7ed012f2
  398. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  399. 002d:Ret msvcrt.fgetc() retval=0000000d ret=7ed012f2
  400. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed0152b
  401. 002d:Ret msvcrt.fgetc() retval=0000000a ret=7ed0152b
  402. 002d:Call ntdll.strpbrk(001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\ProgID = MSPAMMSBSolarTitle\r\n",7ed04bd0 "\r\n") ret=7ed0133d
  403. 002d:Ret ntdll.strpbrk() retval=00140332 ret=7ed0133d
  404. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed0134a
  405. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed0134a
  406. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\ProgID = MSPAMMSBSolarTitle",ffffffff,00000000,00000000) ret=7ecff222
  407. 002d:Ret KERNEL32.MultiByteToWideChar() retval=0000005b ret=7ecff222
  408. 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,000000b6) ret=7ecff247
  409. 002d:Ret ntdll.RtlAllocateHeap() retval=0013ae78 ret=7ecff247
  410. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "HKEY_CLASSES_ROOT\\CLSID\\{C19AA9C0-1275-101B-ACF0-00AA003021ED}\\ProgID = ",ffffffff,0013ae78,0000005b) ret=7ecff27b
  411. 002d:Ret KERNEL32.MultiByteToWideChar() retval=0000005b ret=7ecff27b
  412. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae78) ret=7ed013d8
  413. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ed013d8
  414. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed013e6
  415. 002d:Ret msvcrt.feof() retval=00000000 ret=7ed013e6
  416. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  417. 002d:Ret msvcrt.fgetc() retval=0000001a ret=7ed012f2
  418. 002d:Call msvcrt.fgetc(7ec6e2e0) ret=7ed012f2
  419. 002d:Call KERNEL32.ReadFile(00000034,0013ac70,00000200,0033f670,00000000) ret=7ebfddbb
  420. 002d:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebfddbb
  421. 002d:Ret msvcrt.fgetc() retval=ffffffff ret=7ed012f2
  422. 002d:Call msvcrt.ferror(7ec6e2e0) ret=7ed01304
  423. 002d:Ret msvcrt.ferror() retval=00000000 ret=7ed01304
  424. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed01563
  425. 002d:Ret msvcrt.feof() retval=00000010 ret=7ed01563
  426. 002d:Call ntdll.strpbrk(001402d8 "\x1a",7ed04bd0 "\r\n") ret=7ed0133d
  427. 002d:Ret ntdll.strpbrk() retval=00000000 ret=7ed0133d
  428. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed0134a
  429. 002d:Ret msvcrt.feof() retval=00000010 ret=7ed0134a
  430. 002d:Call msvcrt.strchr(001402d8 "\x1a",00000000) ret=7ed01618
  431. 002d:Ret msvcrt.strchr() retval=001402d9 ret=7ed01618
  432. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "\x1a",ffffffff,00000000,00000000) ret=7ecff222
  433. 002d:Ret KERNEL32.MultiByteToWideChar() retval=00000002 ret=7ecff222
  434. 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000004) ret=7ecff247
  435. 002d:Ret ntdll.RtlAllocateHeap() retval=0013ae78 ret=7ecff247
  436. 002d:Call KERNEL32.MultiByteToWideChar(00000000,00000000,001402d8 "\x1a",ffffffff,0013ae78,00000002) ret=7ecff27b
  437. 002d:Ret KERNEL32.MultiByteToWideChar() retval=00000002 ret=7ecff27b
  438. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae78) ret=7ed013d8
  439. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ed013d8
  440. 002d:Call msvcrt.feof(7ec6e2e0) ret=7ed013e6
  441. 002d:Ret msvcrt.feof() retval=00000010 ret=7ed013e6
  442. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,001402d8) ret=7ed01413
  443. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ed01413
  444. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac20) ret=7ecfe1ec
  445. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ecfe1ec
  446. 002d:Call msvcrt.fclose(7ec6e2e0) ret=7ecfe1f7
  447. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  448. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  449. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac70) ret=7ec08310
  450. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  451. 002d:Call KERNEL32.CloseHandle(00000034) ret=7ebff845
  452. 002d:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ebff845
  453. 002d:Ret msvcrt.fclose() retval=00000000 ret=7ecfe1f7
  454. 002d:Call KERNEL32.ExitProcess(00000000) ret=7ed03d5c
  455. 002d:Call PE DLL (proc=0x7ec40690,module=0x7ebe0000 L"msvcrt.dll",reason=PROCESS_DETACH,res=0x1)
  456. 002d:Call KERNEL32.InitializeCriticalSection(7ec6f194) ret=7ec0cd85
  457. 002d:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec0cd85
  458. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  459. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  460. 002d:Call KERNEL32.SetStdHandle(fffffff6,00000000) ret=7ebff80b
  461. 002d:Ret KERNEL32.SetStdHandle() retval=00000001 ret=7ebff80b
  462. 002d:Call KERNEL32.CloseHandle(0000000f) ret=7ebff845
  463. 002d:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ebff845
  464. 002d:Call KERNEL32.InitializeCriticalSection(7ec6f1b0) ret=7ec0cd85
  465. 002d:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec0cd85
  466. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  467. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  468. 002d:Call KERNEL32.SetStdHandle(fffffff5,00000000) ret=7ebff92c
  469. 002d:Ret KERNEL32.SetStdHandle() retval=00000001 ret=7ebff92c
  470. 002d:Call KERNEL32.CloseHandle(00000010) ret=7ebff845
  471. 002d:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ebff845
  472. 002d:Call KERNEL32.InitializeCriticalSection(7ec6f1cc) ret=7ec0cd85
  473. 002d:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec0cd85
  474. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  475. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  476. 002d:Call KERNEL32.SetStdHandle(fffffff4,00000000) ret=7ebff90c
  477. 002d:Ret KERNEL32.SetStdHandle() retval=00000001 ret=7ebff90c
  478. 002d:Call KERNEL32.CloseHandle(00000014) ret=7ebff845
  479. 002d:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ebff845
  480. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a400) ret=7ec08310
  481. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  482. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  483. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  484. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  485. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  486. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  487. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  488. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  489. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  490. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  491. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  492. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  493. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  494. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  495. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  496. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  497. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  498. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  499. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  500. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  501. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  502. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  503. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  504. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  505. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  506. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  507. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  508. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  509. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  510. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  511. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  512. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  513. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  514. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  515. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  516. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  517. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  518. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  519. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  520. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  521. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  522. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  523. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  524. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  525. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  526. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  527. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  528. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  529. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  530. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  531. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  532. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  533. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  534. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  535. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  536. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  537. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  538. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  539. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  540. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  541. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  542. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  543. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  544. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  545. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  546. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  547. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  548. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  549. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  550. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  551. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  552. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  553. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  554. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  555. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  556. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  557. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  558. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  559. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  560. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  561. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  562. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  563. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  564. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  565. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  566. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  567. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  568. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  569. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  570. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  571. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  572. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  573. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  574. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  575. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  576. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  577. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  578. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  579. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  580. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  581. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  582. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  583. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  584. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  585. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  586. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  587. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  588. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  589. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  590. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  591. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  592. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  593. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  594. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  595. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  596. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  597. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  598. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  599. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  600. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  601. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  602. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  603. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  604. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  605. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  606. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  607. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  608. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  609. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  610. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  611. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  612. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  613. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  614. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  615. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  616. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  617. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  618. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  619. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  620. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  621. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  622. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  623. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  624. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  625. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  626. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  627. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  628. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  629. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  630. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  631. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  632. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  633. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  634. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  635. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  636. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  637. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  638. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  639. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  640. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  641. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  642. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  643. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  644. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  645. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  646. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  647. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  648. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  649. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  650. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  651. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  652. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  653. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  654. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  655. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  656. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  657. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  658. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  659. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  660. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  661. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  662. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  663. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  664. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  665. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  666. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  667. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  668. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  669. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  670. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  671. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  672. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  673. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  674. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  675. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  676. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  677. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  678. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  679. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  680. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  681. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  682. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  683. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  684. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  685. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  686. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  687. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  688. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  689. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  690. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  691. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  692. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  693. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  694. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  695. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  696. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  697. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  698. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  699. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  700. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  701. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  702. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  703. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  704. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  705. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  706. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  707. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  708. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  709. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  710. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  711. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  712. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  713. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  714. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  715. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  716. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  717. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  718. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  719. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  720. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  721. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  722. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  723. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  724. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  725. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  726. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  727. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  728. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  729. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  730. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  731. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  732. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  733. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  734. 002d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec08310
  735. 002d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec08310
  736. 002d:Call ntdll.RtlDeleteCriticalSection(7ec6df20) ret=7ec0422f
  737. 002d:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ec0422f
  738. 002d:Ret PE DLL (proc=0x7ec40690,module=0x7ebe0000 L"msvcrt.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  739. 002d:Call PE DLL (proc=0x7ecc21a0,module=0x7ec80000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1)
  740. 002d:Ret PE DLL (proc=0x7ecc21a0,module=0x7ec80000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  741. 002d:Call PE DLL (proc=0x7b883690,module=0x7b810000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1)
  742. 002d:Ret PE DLL (proc=0x7b883690,module=0x7b810000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  743. 002d:Call PE DLL (proc=0x7eb8aae0,module=0x7eb30000 L"krnl386.exe16",reason=PROCESS_DETACH,res=0x1)
  744. 002d:Ret PE DLL (proc=0x7eb8aae0,module=0x7eb30000 L"krnl386.exe16",reason=PROCESS_DETACH,res=0x1) retval=1
  745. 002d:Call PE DLL (proc=0x7eb18a30,module=0x7eb10000 L"comm.drv16",reason=PROCESS_DETACH,res=0x1)
  746. 002d:Ret PE DLL (proc=0x7eb18a30,module=0x7eb10000 L"comm.drv16",reason=PROCESS_DETACH,res=0x1) retval=1
  747. 002d:Call PE DLL (proc=0x7effcfb0,module=0x7eff0000 L"system.drv16",reason=PROCESS_DETACH,res=0x1)
  748. 002d:Ret PE DLL (proc=0x7effcfb0,module=0x7eff0000 L"system.drv16",reason=PROCESS_DETACH,res=0x1) retval=1
  749. 002d:Call PE DLL (proc=0x7bc90c50,module=0x7bc10000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1)
  750. 002d:Ret PE DLL (proc=0x7bc90c50,module=0x7bc10000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1
  751. 002b:Ret KERNEL32.WaitForMultipleObjects() retval=00000000 ret=7d94287a
  752. 002b:Call krnl386.exe16.ReleaseThunkLock(0116e050) ret=7d94288e
  753. 002b:Ret krnl386.exe16.ReleaseThunkLock() retval=00000000 ret=7d94288e
  754. 002b:Call KERNEL32.WaitForSingleObject(000000f0,ffffffff) ret=7d9428a7
  755. 002b:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7d9428a7
  756. 002b:Call KERNEL32.GetExitCodeProcess(000000f0,0116e04c) ret=7d9428c2
  757. 0026:Call KERNEL32.CloseHandle(000000e4) ret=7ea08cdd
  758. 002b:Ret KERNEL32.GetExitCodeProcess() retval=00000001 ret=7d9428c2
  759. 002b:Call KERNEL32.CloseHandle(000000f4) ret=7d9428d3
  760. 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ea08cdd
  761. 002b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7d9428d3
  762. 002b:Call KERNEL32.CloseHandle(000000f0) ret=7d9428e4
  763. 0026:Call KERNEL32.HeapLock(00110000) ret=7ea11bc9
  764. 002b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7d9428e4
  765. 002b:Call ntdll.RtlFreeHeap(00110000,00000000,00deb980) ret=7d94291e
  766. 0026:Ret KERNEL32.HeapLock() retval=00000001 ret=7ea11bc9
  767. 0026:Call KERNEL32.HeapUnlock(00110000) ret=7ea11bfd
  768. 0026:Ret KERNEL32.HeapUnlock() retval=00000001 ret=7ea11bfd
  769. 002b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7d94291e
  770. 0026:Call KERNEL32.HeapLock(00110000) ret=7ea11bc9
  771. 002b:Call KERNEL32.ExitThread(00000000) ret=7d94292f
  772. 0026:Ret KERNEL32.HeapLock() retval=00000001 ret=7ea11bc9
  773. 002b:Call PE DLL (proc=0x7dbc6eb0,module=0x7dbb0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil))
  774. 002b:Ret PE DLL (proc=0x7dbc6eb0,module=0x7dbb0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1
  775. 0026:Call KERNEL32.HeapUnlock(00110000) ret=7ea11bfd
  776. 002b:Call PE DLL (proc=0x7e322e10,module=0x7e250000 L"ole32.dll",reason=THREAD_DETACH,res=(nil))
  777. 0026:Ret KERNEL32.HeapUnlock() retval=00000001 ret=7ea11bfd
  778. 002b:Ret PE DLL (proc=0x7e322e10,module=0x7e250000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1
  779. 002b:Call PE DLL (proc=0x7e20f950,module=0x7e1c0000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil))
  780. 0026:Ret krnl386.exe16.WinExec16() retval=000014b7 ret=7e12f91c
  781. 002b:Ret PE DLL (proc=0x7e20f950,module=0x7e1c0000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1
  782. 002b:Call PE DLL (proc=0x7ecc44b0,module=0x7ec20000 L"user32.dll",reason=THREAD_DETACH,res=(nil))
  783. 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00debb30) ret=7de4a4b3
  784. 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7de4a4b3
  785. 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00deb918) ret=7de4a513
  786. 002b:Ret PE DLL (proc=0x7ecc44b0,module=0x7ec20000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1
  787. 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7de4a513
  788. 002b:Call PE DLL (proc=0x7e76e450,module=0x7e720000 L"winex11.drv",reason=THREAD_DETACH,res=(nil))
  789. 002b:Ret PE DLL (proc=0x7e76e450,module=0x7e720000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1
  790. 002b:Call PE DLL (proc=0x7ea23ae0,module=0x7e9c0000 L"krnl386.exe16",reason=THREAD_DETACH,res=(nil))
  791. 0026:Call KERNEL32.GetProcAddress(7e250000,7dea519e "CoTaskMemFree") ret=7de63b34
  792. 002b:Call ntdll.RtlFreeHeap(00340000,00000000,00430eb8) ret=7e9de463
  793. 002b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e9de463
  794. 002b:err:ntdll:RtlpWaitForCriticalSection section 0x7ea4d780 "syslevel.c: Win16Mutex" wait timed out in thread 002b, blocked by 0026, retrying (60 sec)
  795. 0026:err:ntdll:RtlpWaitForCriticalSection section 0x7bcc7be0 "loader.c: loader_section" wait timed out in thread 0026, blocked by 002b, retrying (60 sec)
  796. 0022:Ret user32.GetMessageW() retval=00000001 ret=7eff181b
  797. 0022:Call user32.DispatchMessageW(0033f5c0) ret=7eff17f8
  798. 0022:Call window proc 0x7efefd70 (hwnd=0x2003a,msg=WM_CLOSE,wp=00000000,lp=00000000)
  799. 0022:Call user32.PostQuitMessage(00000000) ret=7eff0166
  800. 0022:Ret user32.PostQuitMessage() retval=00000000 ret=7eff0166
  801. 0022:Ret window proc 0x7efefd70 (hwnd=0x2003a,msg=WM_CLOSE,wp=00000000,lp=00000000) retval=00000000
  802. 0022:Ret user32.DispatchMessageW() retval=00000000 ret=7eff17f8
  803. 0022:Call user32.GetMessageW(0033f5c0,00000000,00000000,00000000) ret=7eff181b
  804. 0022:Ret user32.GetMessageW() retval=00000000 ret=7eff181b
  805. 0022:Call KERNEL32.ExitProcess(00000000) ret=7eff183b
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!