Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Warning: At least one delay-load dependency module was not found.
- Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.
- --------------------------------------------------------------------------------
- Starting profile on 2014-05-15 at 9:47:07 AM
- Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Ultimate (64-bit), version 6.01.7601 Service Pack 1
- Program Executable: c:\software\python27x86\PYTHON.EXE
- Program Arguments: -c "import pycurl"
- Starting Directory: C:\Software\Python27x86\
- Search Path: C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Software\bin;E:\Software\Open\app\GnuPG\pub;E:\Software\Open\app\OpenVPN\bin
- Options Selected:
- Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
- Log DllMain calls for process attach and process detach messages.
- Hook the process to gather more detailed dependency information.
- Log LoadLibrary function calls.
- Log GetProcAddress function calls.
- Log debug output messages.
- Automatically open and profile child processes.
- --------------------------------------------------------------------------------
- Started "PYTHON.EXE" (process 0x1A54) at address 0x1D000000. Successfully hooked module.
- Loaded "NTDLL.DLL" at address 0x773A0000. Successfully hooked module.
- Loaded "KERNEL32.DLL" at address 0x74F70000. Successfully hooked module.
- Loaded "KERNELBASE.DLL" at address 0x75570000. Successfully hooked module.
- DllMain(0x75570000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" called.
- DllMain(0x75570000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" returned 1 (0x1).
- DllMain(0x74F70000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
- DllMain(0x74F70000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
- Injected "DEPENDS.DLL" at address 0x08370000.
- DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
- DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
- Loaded "PYTHON27.DLL" at address 0x1E000000. Successfully hooked module.
- Loaded "USER32.DLL" at address 0x750A0000. Successfully hooked module.
- Loaded "GDI32.DLL" at address 0x74EE0000. Successfully hooked module.
- Loaded "LPK.DLL" at address 0x74EC0000. Successfully hooked module.
- Loaded "USP10.DLL" at address 0x76ED0000. Successfully hooked module.
- Loaded "MSVCRT.DLL" at address 0x76D80000. Successfully hooked module.
- Loaded "ADVAPI32.DLL" at address 0x76E30000. Successfully hooked module.
- Loaded "SECHOST.DLL" at address 0x75B00000. Successfully hooked module.
- Loaded "RPCRT4.DLL" at address 0x76C80000. Successfully hooked module.
- Loaded "SSPICLI.DLL" at address 0x74DD0000. Successfully hooked module.
- Loaded "CRYPTBASE.DLL" at address 0x74DC0000. Successfully hooked module.
- Loaded "SHELL32.DLL" at address 0x75FA0000. Successfully hooked module.
- Loaded "SHLWAPI.DLL" at address 0x75B20000. Successfully hooked module.
- Loaded "MSVCR90.DLL" at address 0x74B80000. Successfully hooked module.
- Entrypoint reached. All implicit modules have been loaded.
- DllMain(0x76D80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "MSVCRT.DLL" called.
- DllMain(0x76D80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "MSVCRT.DLL" returned 1 (0x1).
- DllMain(0x76ED0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "USP10.DLL" called.
- LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x76EE6010.
- LoadLibraryA("gdi32.dll") returned 0x74EE0000.
- GetProcAddress(0x74EE0000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x76EE6045 and returned 0x74EF99A3.
- DllMain(0x76ED0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "USP10.DLL" returned 1 (0x1).
- DllMain(0x74EC0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "LPK.DLL" called.
- DllMain(0x74EC0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "LPK.DLL" returned 1 (0x1).
- DllMain(0x74EE0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "GDI32.DLL" called.
- DllMain(0x74EE0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "GDI32.DLL" returned 1 (0x1).
- DllMain(0x74DC0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "CRYPTBASE.DLL" called.
- DllMain(0x74DC0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "CRYPTBASE.DLL" returned 1 (0x1).
- DllMain(0x74DD0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SSPICLI.DLL" called.
- DllMain(0x74DD0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SSPICLI.DLL" returned 1 (0x1).
- DllMain(0x76C80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "RPCRT4.DLL" called.
- DllMain(0x76C80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "RPCRT4.DLL" returned 1992926977 (0x76C9A701).
- DllMain(0x75B00000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SECHOST.DLL" called.
- DllMain(0x75B00000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SECHOST.DLL" returned 1 (0x1).
- DllMain(0x76E30000, DLL_PROCESS_ATTACH, 0x0027FD24) in "ADVAPI32.DLL" called.
- DllMain(0x76E30000, DLL_PROCESS_ATTACH, 0x0027FD24) in "ADVAPI32.DLL" returned 1 (0x1).
- DllMain(0x750A0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "USER32.DLL" called.
- LoadLibraryW("C:\Windows\system32\IMM32.DLL") called from "USER32.DLL" at address 0x750BCF0E.
- Loaded "IMM32.DLL" at address 0x75300000. Successfully hooked module.
- Loaded "MSCTF.DLL" at address 0x755C0000. Successfully hooked module.
- DllMain(0x755C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called.
- DllMain(0x755C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
- DllMain(0x75300000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x750BC312 and returned 0x7531F637.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x750BC327 and returned 0x7531F65E.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x750BC33C and returned 0x7531F8EC.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x750BC351 and returned 0x7531F907.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x750BC366 and returned 0x7531FB65.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x750BC37B and returned 0x7531FB99.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x750BC390 and returned 0x7531F9CA.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x750BC3A5 and returned 0x7531FAD6.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x750BC3BA and returned 0x7531F746.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x750BC3CF and returned 0x7531F86E.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x750BC3E4 and returned 0x75313540.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x750BC3F9 and returned 0x75319327.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x750BC40E and returned 0x753195A9.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x750BC423 and returned 0x75317A37.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x750BC438 and returned 0x7531420C.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x750BC44D and returned 0x75312E79.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x750BC462 and returned 0x75312084.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x750BC477 and returned 0x75311F9D.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x750BC48C and returned 0x75312FC7.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x750BC4A1 and returned 0x753121A2.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x750BC4B6 and returned 0x75311346.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x750BC4CB and returned 0x753168C8.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x750BC4E0 and returned 0x7531682C.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x750BC4F5 and returned 0x75313938.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x750BC50A and returned 0x75316964.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x750BC51F and returned 0x753138AA.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x750BC534 and returned 0x75313C6C.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x750BC549 and returned 0x75311E7D.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x750BC55E and returned 0x75311E95.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x750BC573 and returned 0x7531197A.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x750BC588 and returned 0x75313FF3.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x750BC59D and returned 0x753197EF.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x750BC5B2 and returned 0x75318DF5.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x750BC5C7 and returned 0x75312EBC.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x750BC5DC and returned 0x75313E02.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x750BC5F1 and returned 0x7531913F.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x750BC606 and returned 0x753124E9.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x750BC61B and returned 0x75313EE6.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x750BC630 and returned 0x75316A7C.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x750BC645 and returned 0x753114D8.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x750BC65A and returned 0x75312025.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x750BC66F and returned 0x75311FD8.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x750BC684 and returned 0x75313DCF.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x750BC699 and returned 0x75312246.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x750BC6AE and returned 0x7531F27F.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x750BC6C3 and returned 0x75319E79.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x750BC6D8 and returned 0x75313A3C.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x750BC6ED and returned 0x75324E96.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x750BC702 and returned 0x75313BB8.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x750BC717 and returned 0x753183C2.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x750BC72C and returned 0x753183E9.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x750BC741 and returned 0x753131DD.
- GetProcAddress(0x75300000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x750BC756 and returned 0x7531B1CF.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x750BC767 and returned 0x75311888.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x750BC778 and returned 0x75325114.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x750BC789 and returned 0x7532514B.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x750BC79A and returned 0x7531163C.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmNotify") called from "USER32.DLL" at address 0x750BC7AB and returned 0x753115D0.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmSetDefaultRemoteKeyboardLayout") called from "USER32.DLL" at address 0x750BC7BC and returned 0x753253CC.
- GetProcAddress(0x75300000 [IMM32.DLL], "CtfImmGetCompatibleKeyboardLayout") called from "USER32.DLL" at address 0x750BC7CD and returned 0x753253DC.
- DllMain(0x75300000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
- LoadLibraryW("C:\Windows\system32\IMM32.DLL") returned 0x75300000.
- GetProcAddress(0x74EC0000 [LPK.DLL], "LpkTabbedTextOut") called from "GDI32.DLL" at address 0x74EF6970 and returned 0x74EC48A0.
- GetProcAddress(0x74EC0000 [LPK.DLL], "LpkPSMTextOut") called from "GDI32.DLL" at address 0x74EF697B and returned 0x74EC1430.
- GetProcAddress(0x74EC0000 [LPK.DLL], "LpkDrawTextEx") called from "GDI32.DLL" at address 0x74EF6986 and returned 0x74EC13D0.
- GetProcAddress(0x74EC0000 [LPK.DLL], "LpkEditControl") called from "GDI32.DLL" at address 0x74EF6991 and returned 0x74EC7000.
- DllMain(0x750A0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "USER32.DLL" returned 1 (0x1).
- DllMain(0x75B20000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SHLWAPI.DLL" called.
- DllMain(0x75B20000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SHLWAPI.DLL" returned 1 (0x1).
- DllMain(0x75FA0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SHELL32.DLL" called.
- DllMain(0x75FA0000, DLL_PROCESS_ATTACH, 0x0027FD24) in "SHELL32.DLL" returned 1 (0x1).
- DllMain(0x74B80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "MSVCR90.DLL" called.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR90.DLL" at address 0x74BA3ACC and returned 0x74F84EF3.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR90.DLL" at address 0x74BA3AD9 and returned 0x74F81252.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR90.DLL" at address 0x74BA3AE6 and returned 0x74F841D0.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "FlsFree") called from "MSVCR90.DLL" at address 0x74BA3AF3 and returned 0x74F8355F.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA379B and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA37AB and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "IsProcessorFeaturePresent") called from "MSVCR90.DLL" at address 0x74C0386B and returned 0x74F851FD.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "FindActCtxSectionStringW") called from "MSVCR90.DLL" at address 0x74BA2822 and returned 0x74F8A6D8.
- DllMain(0x74B80000, DLL_PROCESS_ATTACH, 0x0027FD24) in "MSVCR90.DLL" returned 1 (0x1).
- DllMain(0x1E000000, DLL_PROCESS_ATTACH, 0x0027FD24) in "PYTHON27.DLL" called.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "GetCurrentActCtx") called from "PYTHON27.DLL" at address 0x1E001021 and returned 0x74F9D521.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "ActivateActCtx") called from "PYTHON27.DLL" at address 0x1E001037 and returned 0x74F85458.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DeactivateActCtx") called from "PYTHON27.DLL" at address 0x1E001044 and returned 0x74F85424.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "AddRefActCtx") called from "PYTHON27.DLL" at address 0x1E001051 and returned 0x74F9D510.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "ReleaseActCtx") called from "PYTHON27.DLL" at address 0x1E00105E and returned 0x74F85489.
- DllMain(0x1E000000, DLL_PROCESS_ATTACH, 0x0027FD24) in "PYTHON27.DLL" returned 1 (0x1).
- LoadLibraryExA("c:\software\python27x86\lib\site-packages\pycurl.pyd", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "PYTHON27.DLL" at address 0x1E03142C.
- Loaded "PYCURL.PYD" at address 0x10000000. Successfully hooked module.
- Loaded "LIBCURL.DLL" at address 0x004F0000. Successfully hooked module.
- Loaded "WS2_32.DLL" at address 0x75B90000. Successfully hooked module.
- Loaded "NSI.DLL" at address 0x75690000. Successfully hooked module.
- Loaded "WLDAP32.DLL" at address 0x75DF0000. Successfully hooked module.
- Unloaded "PYCURL.PYD" at address 0x10000000.
- Unloaded "LIBCURL.DLL" at address 0x004F0000.
- Unloaded "WLDAP32.DLL" at address 0x75DF0000.
- Unloaded "WS2_32.DLL" at address 0x75B90000.
- Unloaded "NSI.DLL" at address 0x75690000.
- LoadLibraryExA("c:\software\python27x86\lib\site-packages\pycurl.pyd", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned NULL. Error: The specified procedure could not be found (127).
- DllMain(0x75300000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" called.
- DllMain(0x75300000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" returned 1 (0x1).
- DllMain(0x755C0000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" called.
- DllMain(0x755C0000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" returned 1 (0x1).
- DllMain(0x1E000000, DLL_PROCESS_DETACH, 0x00000001) in "PYTHON27.DLL" called.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x74BA3667 and returned 0x773D9DD5.
- GetProcAddress(0x74F70000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x74BA35E2 and returned 0x773E107B.
- DllMain(0x1E000000, DLL_PROCESS_DETACH, 0x00000001) in "PYTHON27.DLL" returned 1 (0x1).
- DllMain(0x74B80000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR90.DLL" called.
- DllMain(0x74B80000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR90.DLL" returned 1 (0x1).
- DllMain(0x75FA0000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" called.
- DllMain(0x75FA0000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" returned 1 (0x1).
- DllMain(0x75B20000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" called.
- DllMain(0x75B20000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" returned 1 (0x1).
- DllMain(0x750A0000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" called.
- DllMain(0x750A0000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" returned 1 (0x1).
- DllMain(0x76E30000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" called.
- DllMain(0x76E30000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" returned 1 (0x1).
- DllMain(0x75B00000, DLL_PROCESS_DETACH, 0x00000001) in "SECHOST.DLL" called.
- DllMain(0x75B00000, DLL_PROCESS_DETACH, 0x00000001) in "SECHOST.DLL" returned 1 (0x1).
- DllMain(0x76C80000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" called.
- DllMain(0x76C80000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" returned 1 (0x1).
- DllMain(0x74DD0000, DLL_PROCESS_DETACH, 0x00000001) in "SSPICLI.DLL" called.
- DllMain(0x74DD0000, DLL_PROCESS_DETACH, 0x00000001) in "SSPICLI.DLL" returned 1 (0x1).
- DllMain(0x74DC0000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTBASE.DLL" called.
- DllMain(0x74DC0000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTBASE.DLL" returned 1 (0x1).
- DllMain(0x74EE0000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" called.
- DllMain(0x74EE0000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" returned 1 (0x1).
- DllMain(0x74EC0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" called.
- DllMain(0x74EC0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" returned 1 (0x1).
- DllMain(0x76ED0000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" called.
- DllMain(0x76ED0000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" returned 1 (0x1).
- DllMain(0x76D80000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" called.
- DllMain(0x76D80000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" returned 1 (0x1).
- DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" called.
- DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" returned 1 (0x1).
- DllMain(0x74F70000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" called.
- DllMain(0x74F70000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" returned 1 (0x1).
- DllMain(0x75570000, DLL_PROCESS_DETACH, 0x00000001) in "KERNELBASE.DLL" called.
- DllMain(0x75570000, DLL_PROCESS_DETACH, 0x00000001) in "KERNELBASE.DLL" returned 1 (0x1).
- Exited "PYTHON.EXE" (process 0x1A54) with code 1 (0x1).
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement