Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Warning: At least one delay-load dependency module was not found.
- Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.
- --------------------------------------------------------------------------------
- Starting profile on 2/07/2014 at 12:41:21 PM
- Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Tablet Media Center (64-bit), version 6.01.7601 Service Pack 1
- Program Executable: c:\projects\maf3.buildcmake30qt50\build\bin\debug\MAFGUITEST.EXE
- Program Arguments:
- Starting Directory: C:\Projects\MAF3.buildcmake30Qt50\build\bin\Debug\
- Search Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Perforce;c:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\MiKTeX 2.9\miktex\bin\x64\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\ndigital\programs;C:\Program Files (x86)\Calibre2\;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x64;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Visual Leak Detector\bin\Win32;C:\Program Files (x86)\Visual Leak Detector\bin\Win64;C:\Program Files (x86)\Dr. Memory\bin
- Options Selected:
- Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
- Log DllMain calls for process attach and process detach messages.
- Hook the process to gather more detailed dependency information.
- Log LoadLibrary function calls.
- Log GetProcAddress function calls.
- Log debug output messages.
- Automatically open and profile child processes.
- --------------------------------------------------------------------------------
- Started "MAFGUITEST.EXE" (process 0x2490) at address 0x01250000. Successfully hooked module.
- Loaded "NTDLL.DLL" at address 0x77830000. Successfully hooked module.
- Loaded "KERNEL32.DLL" at address 0x77280000. Successfully hooked module.
- Loaded "KERNELBASE.DLL" at address 0x76180000. Successfully hooked module.
- DllMain(0x76180000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" called.
- DllMain(0x76180000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" returned 1 (0x1).
- DllMain(0x77280000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
- DllMain(0x77280000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
- Injected "DEPENDS.DLL" at address 0x08370000.
- DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
- DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
- Loaded "MAFCORE.DLL" at address 0x0F8B0000. Successfully hooked module.
- Loaded "QT5SQLD.DLL" at address 0x61FF0000. Successfully hooked module.
- Loaded "QT5CORED.DLL" at address 0x661D0000. Successfully hooked module.
- Loaded "USER32.DLL" at address 0x76280000. Successfully hooked module.
- Loaded "GDI32.DLL" at address 0x76A60000. Successfully hooked module.
- Loaded "LPK.DLL" at address 0x76B00000. Successfully hooked module.
- Loaded "USP10.DLL" at address 0x761D0000. Successfully hooked module.
- Loaded "MSVCRT.DLL" at address 0x76B10000. Successfully hooked module.
- Loaded "ADVAPI32.DLL" at address 0x77390000. Successfully hooked module.
- Loaded "SECHOST.DLL" at address 0x76680000. Successfully hooked module.
- Loaded "RPCRT4.DLL" at address 0x76550000. Successfully hooked module.
- Loaded "SSPICLI.DLL" at address 0x75230000. Successfully hooked module.
- Loaded "CRYPTBASE.DLL" at address 0x75220000. Successfully hooked module.
- Loaded "SHELL32.DLL" at address 0x752D0000. Successfully hooked module.
- Loaded "SHLWAPI.DLL" at address 0x76D40000. Successfully hooked module.
- Loaded "OLE32.DLL" at address 0x766A0000. Successfully hooked module.
- Loaded "WS2_32.DLL" at address 0x76640000. Successfully hooked module.
- Loaded "NSI.DLL" at address 0x77800000. Successfully hooked module.
- Loaded "ICUIN52.DLL" at address 0x4A830000. Successfully hooked module.
- Loaded "ICUUC52.DLL" at address 0x49C20000. Successfully hooked module.
- Loaded "ICUDT52.DLL" at address 0x01290000. Successfully hooked module.
- Loaded "MSVCR100.DLL" at address 0x737D0000. Successfully hooked module.
- Loaded "MSVCP100.DLL" at address 0x73890000. Successfully hooked module.
- Loaded "MSVCP100D.DLL" at address 0x0F6E0000. Successfully hooked module.
- Loaded "MSVCR100D.DLL" at address 0x0F300000. Successfully hooked module.
- Loaded "MAFEVENTBUS.DLL" at address 0x00190000. Successfully hooked module.
- Loaded "MAFGUI.DLL" at address 0x00540000. Successfully hooked module.
- Loaded "MAFAPPLICATIONLOGIC.DLL" at address 0x0FFE0000. Successfully hooked module.
- Loaded "QT5WIDGETSD.DLL" at address 0x64AA0000. Successfully hooked module.
- Loaded "QT5GUID.DLL" at address 0x006D0000. Successfully hooked module.
- Loaded "OPENGL32.DLL" at address 0x193C0000. Successfully hooked module.
- Loaded "GLU32.DLL" at address 0x00260000. Successfully hooked module.
- Loaded "DDRAW.DLL" at address 0x73380000. Successfully hooked module.
- Loaded "DCIMAN32.DLL" at address 0x73370000. Successfully hooked module.
- Loaded "SETUPAPI.DLL" at address 0x76820000. Successfully hooked module.
- Loaded "CFGMGR32.DLL" at address 0x764B0000. Successfully hooked module.
- Loaded "OLEAUT32.DLL" at address 0x75FC0000. Successfully hooked module.
- Loaded "DEVOBJ.DLL" at address 0x76D20000. Successfully hooked module.
- Loaded "DWMAPI.DLL" at address 0x73470000. Successfully hooked module.
- Loaded "QT5XMLD.DLL" at address 0x60F20000. Successfully hooked module.
- Loaded "MAFRESOURCES.DLL" at address 0x00EF0000. Successfully hooked module.
- Loaded "MAFQA.DLL" at address 0x0F260000. Successfully hooked module.
- Loaded "QT5TESTD.DLL" at address 0x0FB00000. Successfully hooked module.
- Entrypoint reached. All implicit modules have been loaded.
- DllMain(0x76B10000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCRT.DLL" called.
- DllMain(0x76B10000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCRT.DLL" returned 1 (0x1).
- DllMain(0x761D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "USP10.DLL" called.
- LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x761E6020.
- LoadLibraryA("gdi32.dll") returned 0x76A60000.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x761E6055 and returned 0x76A799A3.
- DllMain(0x761D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "USP10.DLL" returned 1 (0x1).
- DllMain(0x76B00000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "LPK.DLL" called.
- DllMain(0x76B00000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "LPK.DLL" returned 1 (0x1).
- DllMain(0x76A60000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "GDI32.DLL" called.
- DllMain(0x76A60000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "GDI32.DLL" returned 1 (0x1).
- DllMain(0x75220000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "CRYPTBASE.DLL" called.
- DllMain(0x75220000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "CRYPTBASE.DLL" returned 1 (0x1).
- DllMain(0x75230000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SSPICLI.DLL" called.
- DllMain(0x75230000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SSPICLI.DLL" returned 1 (0x1).
- DllMain(0x76550000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "RPCRT4.DLL" called.
- DllMain(0x76550000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "RPCRT4.DLL" returned 1985390337 (0x7656A701).
- DllMain(0x76680000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SECHOST.DLL" called.
- DllMain(0x76680000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SECHOST.DLL" returned 1 (0x1).
- DllMain(0x77390000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ADVAPI32.DLL" called.
- DllMain(0x77390000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ADVAPI32.DLL" returned 1 (0x1).
- DllMain(0x76280000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "USER32.DLL" called.
- LoadLibraryW("C:\Windows\system32\IMM32.DLL") called from "USER32.DLL" at address 0x7629CF0E.
- Loaded "IMM32.DLL" at address 0x76BE0000. Successfully hooked module.
- Loaded "MSCTF.DLL" at address 0x76C40000. Successfully hooked module.
- DllMain(0x76C40000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called.
- DllMain(0x76C40000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
- DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x7629C312 and returned 0x76BFF637.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x7629C327 and returned 0x76BFF65E.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x7629C33C and returned 0x76BFF8EC.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x7629C351 and returned 0x76BFF907.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x7629C366 and returned 0x76BFFB65.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x7629C37B and returned 0x76BFFB99.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x7629C390 and returned 0x76BFF9CA.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x7629C3A5 and returned 0x76BFFAD6.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x7629C3BA and returned 0x76BFF746.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x7629C3CF and returned 0x76BFF86E.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x7629C3E4 and returned 0x76BF3540.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x7629C3F9 and returned 0x76BF9327.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x7629C40E and returned 0x76BF95A9.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x7629C423 and returned 0x76BF7A37.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x7629C438 and returned 0x76BF420C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x7629C44D and returned 0x76BF2E79.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x7629C462 and returned 0x76BF2084.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x7629C477 and returned 0x76BF1F9D.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x7629C48C and returned 0x76BF2FC7.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x7629C4A1 and returned 0x76BF21A2.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x7629C4B6 and returned 0x76BF1346.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x7629C4CB and returned 0x76BF68C8.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x7629C4E0 and returned 0x76BF682C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x7629C4F5 and returned 0x76BF3938.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x7629C50A and returned 0x76BF6964.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x7629C51F and returned 0x76BF38AA.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x7629C534 and returned 0x76BF3C6C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x7629C549 and returned 0x76BF1E7D.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x7629C55E and returned 0x76BF1E95.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x7629C573 and returned 0x76BF197A.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x7629C588 and returned 0x76BF3FF3.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x7629C59D and returned 0x76BF97EF.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x7629C5B2 and returned 0x76BF8DF5.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x7629C5C7 and returned 0x76BF2EBC.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x7629C5DC and returned 0x76BF3E02.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x7629C5F1 and returned 0x76BF913F.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x7629C606 and returned 0x76BF24E9.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x7629C61B and returned 0x76BF3EE6.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x7629C630 and returned 0x76BF6A7C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x7629C645 and returned 0x76BF14D8.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x7629C65A and returned 0x76BF2025.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x7629C66F and returned 0x76BF1FD8.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x7629C684 and returned 0x76BF3DCF.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x7629C699 and returned 0x76BF2246.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x7629C6AE and returned 0x76BFF27F.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x7629C6C3 and returned 0x76BF9E79.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x7629C6D8 and returned 0x76BF3A3C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x7629C6ED and returned 0x76C04E96.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x7629C702 and returned 0x76BF3BB8.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x7629C717 and returned 0x76BF83C2.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x7629C72C and returned 0x76BF83E9.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x7629C741 and returned 0x76BF31DD.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x7629C756 and returned 0x76BFB1CF.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x7629C767 and returned 0x76BF1888.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x7629C778 and returned 0x76C05114.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x7629C789 and returned 0x76C0514B.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x7629C79A and returned 0x76BF163C.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmNotify") called from "USER32.DLL" at address 0x7629C7AB and returned 0x76BF15D0.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmSetDefaultRemoteKeyboardLayout") called from "USER32.DLL" at address 0x7629C7BC and returned 0x76C053CC.
- GetProcAddress(0x76BE0000 [IMM32.DLL], "CtfImmGetCompatibleKeyboardLayout") called from "USER32.DLL" at address 0x7629C7CD and returned 0x76C053DC.
- DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
- LoadLibraryW("C:\Windows\system32\IMM32.DLL") returned 0x76BE0000.
- GetProcAddress(0x76B00000 [LPK.DLL], "LpkTabbedTextOut") called from "GDI32.DLL" at address 0x76A76970 and returned 0x76B048A0.
- GetProcAddress(0x76B00000 [LPK.DLL], "LpkPSMTextOut") called from "GDI32.DLL" at address 0x76A7697B and returned 0x76B01430.
- GetProcAddress(0x76B00000 [LPK.DLL], "LpkDrawTextEx") called from "GDI32.DLL" at address 0x76A76986 and returned 0x76B013D0.
- GetProcAddress(0x76B00000 [LPK.DLL], "LpkEditControl") called from "GDI32.DLL" at address 0x76A76991 and returned 0x76B07000.
- DllMain(0x76280000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "USER32.DLL" returned 1 (0x1).
- DllMain(0x76D40000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SHLWAPI.DLL" called.
- DllMain(0x76D40000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SHLWAPI.DLL" returned 1 (0x1).
- DllMain(0x752D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SHELL32.DLL" called.
- DllMain(0x752D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SHELL32.DLL" returned 1 (0x1).
- DllMain(0x766A0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OLE32.DLL" called.
- DllMain(0x766A0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OLE32.DLL" returned 1 (0x1).
- DllMain(0x77800000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "NSI.DLL" called.
- DllMain(0x77800000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "NSI.DLL" returned 1 (0x1).
- DllMain(0x76640000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "WS2_32.DLL" called.
- DllMain(0x76640000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "WS2_32.DLL" returned 1 (0x1).
- DllMain(0x737D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCR100.DLL" called.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR100.DLL" at address 0x737EBA3B and returned 0x77294EF3.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR100.DLL" at address 0x737EBA48 and returned 0x77291252.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR100.DLL" at address 0x737EBA55 and returned 0x772941D0.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsFree") called from "MSVCR100.DLL" at address 0x737EBA62 and returned 0x7729355F.
- DllMain(0x737D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCR100.DLL" returned 1 (0x1).
- DllMain(0x49C20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ICUUC52.DLL" called.
- DllMain(0x49C20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ICUUC52.DLL" returned 1 (0x1).
- DllMain(0x73890000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCP100.DLL" called.
- DllMain(0x73890000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCP100.DLL" returned 1 (0x1).
- DllMain(0x4A830000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ICUIN52.DLL" called.
- DllMain(0x4A830000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "ICUIN52.DLL" returned 1 (0x1).
- DllMain(0x0F300000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCR100D.DLL" called.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR100D.DLL" at address 0x0F34A457 and returned 0x77294EF3.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR100D.DLL" at address 0x0F34A46B and returned 0x77291252.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR100D.DLL" at address 0x0F34A47F and returned 0x772941D0.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "FlsFree") called from "MSVCR100D.DLL" at address 0x0F34A493 and returned 0x7729355F.
- DllMain(0x0F300000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCR100D.DLL" returned 1 (0x1).
- DllMain(0x0F6E0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCP100D.DLL" called.
- DllMain(0x0F6E0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MSVCP100D.DLL" returned 1 (0x1).
- DllMain(0x661D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5CORED.DLL" called.
- DllMain(0x661D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5CORED.DLL" returned 1 (0x1).
- DllMain(0x61FF0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5SQLD.DLL" called.
- DllMain(0x61FF0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5SQLD.DLL" returned 1 (0x1).
- DllMain(0x0F8B0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFCORE.DLL" called.
- DllMain(0x0F8B0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFCORE.DLL" returned 1 (0x1).
- DllMain(0x00190000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFEVENTBUS.DLL" called.
- DllMain(0x00190000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFEVENTBUS.DLL" returned 1 (0x1).
- DllMain(0x0FFE0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFAPPLICATIONLOGIC.DLL" called.
- DllMain(0x0FFE0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFAPPLICATIONLOGIC.DLL" returned 1 (0x1).
- DllMain(0x00260000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "GLU32.DLL" called.
- DllMain(0x00260000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "GLU32.DLL" returned 1 (0x1).
- DllMain(0x73370000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DCIMAN32.DLL" called.
- DllMain(0x73370000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DCIMAN32.DLL" returned 1 (0x1).
- DllMain(0x764B0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "CFGMGR32.DLL" called.
- DllMain(0x764B0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "CFGMGR32.DLL" returned 1 (0x1).
- DllMain(0x75FC0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OLEAUT32.DLL" called.
- DllMain(0x75FC0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OLEAUT32.DLL" returned 1 (0x1).
- DllMain(0x76D20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DEVOBJ.DLL" called.
- DllMain(0x76D20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DEVOBJ.DLL" returned 1 (0x1).
- DllMain(0x76820000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SETUPAPI.DLL" called.
- LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "SETUPAPI.DLL" at address 0x76831188.
- LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x77280000.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "RegQueryValueExW") called from "SETUPAPI.DLL" at address 0x76831141 and returned 0x77291F0E.
- DllMain(0x76820000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "SETUPAPI.DLL" returned 1 (0x1).
- DllMain(0x73470000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DWMAPI.DLL" called.
- DllMain(0x73470000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DWMAPI.DLL" returned 1 (0x1).
- DllMain(0x73380000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DDRAW.DLL" called.
- DllMain(0x73380000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "DDRAW.DLL" returned 1 (0x1).
- DllMain(0x193C0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OPENGL32.DLL" called.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GdiAddGlsRecord") called from "OPENGL32.DLL" at address 0x193E92B8 and returned 0x76AAFDC4.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GdiAddGlsBounds") called from "OPENGL32.DLL" at address 0x193E92C5 and returned 0x76AAFE7D.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GdiIsMetaPrintDC") called from "OPENGL32.DLL" at address 0x193E92D2 and returned 0x76A79068.
- DllMain(0x193C0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "OPENGL32.DLL" returned 1 (0x1).
- DllMain(0x006D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5GUID.DLL" called.
- DllMain(0x006D0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5GUID.DLL" returned 1 (0x1).
- DllMain(0x64AA0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5WIDGETSD.DLL" called.
- DllMain(0x64AA0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5WIDGETSD.DLL" returned 1 (0x1).
- DllMain(0x60F20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5XMLD.DLL" called.
- DllMain(0x60F20000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5XMLD.DLL" returned 1 (0x1).
- DllMain(0x00540000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFGUI.DLL" called.
- DllMain(0x00540000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFGUI.DLL" returned 1 (0x1).
- DllMain(0x00EF0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFRESOURCES.DLL" called.
- DllMain(0x00EF0000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFRESOURCES.DLL" returned 1 (0x1).
- DllMain(0x0FB00000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5TESTD.DLL" called.
- DllMain(0x0FB00000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "QT5TESTD.DLL" returned 1 (0x1).
- DllMain(0x0F260000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFQA.DLL" called.
- DllMain(0x0F260000, DLL_PROCESS_ATTACH, 0x0041F7D0) in "MAFQA.DLL" returned 1 (0x1).
- Loaded "PROFAPI.DLL" at address 0x76D10000. Successfully hooked module.
- DllMain(0x76D10000, DLL_PROCESS_ATTACH, 0x00000000) in "PROFAPI.DLL" called.
- DllMain(0x76D10000, DLL_PROCESS_ATTACH, 0x00000000) in "PROFAPI.DLL" returned 1 (0x1).
- LoadLibraryW("C:\Windows\system32\shell32.dll") called from "QT5CORED.DLL" at address 0x664F97CD.
- Loaded "SHELL32.DLL" at address 0x04580000. Successfully hooked module.
- Unloaded "SHELL32.DLL" at address 0x04580000.
- LoadLibraryW("C:\Windows\system32\shell32.dll") returned 0x752D0000.
- GetProcAddress(0x752D0000 [SHELL32.DLL], "SHGetKnownFolderPath") called from "QT5CORED.DLL" at address 0x66333CD8 and returned 0x75384C10.
- LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x76D54F0C.
- LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x77390000.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "OpenThreadToken") called from "SHLWAPI.DLL" at address 0x76D54F70 and returned 0x773A42AC.
- LoadLibraryW("ADVAPI32.DLL") called from "MSVCR100D.DLL" at address 0x0F41AADC.
- LoadLibraryW("ADVAPI32.DLL") returned 0x77390000.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "SystemFunction036") called from "MSVCR100D.DLL" at address 0x0F41AB68 and returned 0x77391919.
- LoadLibraryW("C:\Qt\Qt5.3.0\5.3\msvc2010_opengl\plugins\platforms\qwindowsd.dll") called from "QT5CORED.DLL" at address 0x664F8B15.
- Loaded "QWINDOWSD.DLL" at address 0x0F500000. Successfully hooked module.
- Loaded "WINMM.DLL" at address 0x74570000. Successfully hooked module.
- Unloaded "QWINDOWSD.DLL" at address 0x0F500000.
- Unloaded "WINMM.DLL" at address 0x74570000.
- LoadLibraryW("C:\Qt\Qt5.3.0\5.3\msvc2010_opengl\plugins\platforms\qwindowsd.dll") returned NULL. Error: The specified procedure could not be found (127).
- LoadLibraryW("USER32.DLL") called from "MSVCR100D.DLL" at address 0x0F41AFCE.
- LoadLibraryW("USER32.DLL") returned 0x76280000.
- GetProcAddress(0x76280000 [USER32.DLL], "MessageBoxW") called from "MSVCR100D.DLL" at address 0x0F41AFED and returned 0x762EFD3F.
- GetProcAddress(0x76280000 [USER32.DLL], "GetActiveWindow") called from "MSVCR100D.DLL" at address 0x0F41B01B and returned 0x762BF5C7.
- GetProcAddress(0x76280000 [USER32.DLL], "GetLastActivePopup") called from "MSVCR100D.DLL" at address 0x0F41B036 and returned 0x762BCA93.
- GetProcAddress(0x76280000 [USER32.DLL], "GetUserObjectInformationW") called from "MSVCR100D.DLL" at address 0x0F41B051 and returned 0x76298068.
- GetProcAddress(0x76280000 [USER32.DLL], "GetProcessWindowStation") called from "MSVCR100D.DLL" at address 0x0F41B07B and returned 0x76299EEA.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GetLayout") called from "USP10.DLL" at address 0x761E4446 and returned 0x76A77C90.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GdiRealizationInfo") called from "USP10.DLL" at address 0x761D9A02 and returned 0x76A78078.
- GetProcAddress(0x76A60000 [GDI32.DLL], "FontIsLinked") called from "USP10.DLL" at address 0x761DD836 and returned 0x76A799E2.
- LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "USP10.DLL" at address 0x76203BAF.
- LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x77390000.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegOpenKeyExW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A460D.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegQueryInfoKeyW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A4667.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GetTextFaceAliasW") called from "USP10.DLL" at address 0x761DCDAA and returned 0x76A79A1C.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegEnumValueW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A484C.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegCloseKey") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A461D.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegQueryValueExW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A462D.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegQueryValueExW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A462D.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GetFontAssocStatus") called from "USP10.DLL" at address 0x761E4486 and returned 0x76A79A02.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegQueryValueExA") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A486F.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "RegEnumKeyExW") called from "USP10.DLL" at address 0x76203C3F and returned 0x773A4648.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GetTextFaceAliasW") called from "USP10.DLL" at address 0x761E1A7C and returned 0x76A79A1C.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- Loaded "UXTHEME.DLL" at address 0x73270000. Successfully hooked module.
- DllMain(0x73270000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
- DllMain(0x73270000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1).
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73270000.
- GetProcAddress(0x73270000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x7629AB03 and returned 0x73284571.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73270000.
- GetProcAddress(0x73270000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x7629AB03 and returned 0x73284571.
- GetProcAddress(0x76280000 [USER32.DLL], "IsProcessDPIAware") called from "UXTHEME.DLL" at address 0x73284F6B and returned 0x762981A6.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73270000.
- GetProcAddress(0x73270000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x7629AB03 and returned 0x73284571.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73270000.
- GetProcAddress(0x73270000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x7629AB03 and returned 0x73284571.
- LoadLibraryExW("C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- Loaded "TIPTSF.DLL" at address 0x71D60000. Successfully hooked module.
- DllMain(0x71D60000, DLL_PROCESS_ATTACH, 0x00000000) in "TIPTSF.DLL" called.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "SetSystemFileCacheSize") called from "TIPTSF.DLL" at address 0x71D6306A and returned 0x7731E8B9.
- GetProcAddress(0x77830000 [NTDLL.DLL], "NtSetSystemInformation") called from "TIPTSF.DLL" at address 0x71D6308D and returned 0x77851BE4.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "PrivIsDllSynchronizationHeld") called from "TIPTSF.DLL" at address 0x71D630A7 and returned NULL. Error: The specified procedure could not be found (127).
- DllMain(0x71D60000, DLL_PROCESS_ATTACH, 0x00000000) in "TIPTSF.DLL" returned 1 (0x1).
- LoadLibraryExW("C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x71D60000.
- LoadLibraryW("version.dll") called from "TIPTSF.DLL" at address 0x71D638E9.
- Loaded "VERSION.DLL" at address 0x74EB0000. Successfully hooked module.
- DllMain(0x74EB0000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" called.
- DllMain(0x74EB0000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1).
- LoadLibraryW("version.dll") returned 0x74EB0000.
- GetProcAddress(0x74EB0000 [VERSION.DLL], "GetFileVersionInfoSizeW") called from "TIPTSF.DLL" at address 0x71D63903 and returned 0x74EB19D9.
- LoadLibraryExW("c:\projects\maf3.buildcmake30qt50\build\bin\debug\MAFGUITEST.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "VERSION.DLL" at address 0x74EB1919.
- Mapped "MAFGUITEST.EXE" as a data file into memory at address 0x01250000.
- LoadLibraryExW("c:\projects\maf3.buildcmake30qt50\build\bin\debug\MAFGUITEST.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x01250000.
- LoadLibraryExA("dwmapi.dll", 0x00000000, 0x00000000) called from "UXTHEME.DLL" at address 0x732863FE.
- LoadLibraryExA("dwmapi.dll", 0x00000000, 0x00000000) returned 0x73470000.
- GetProcAddress(0x73470000 [DWMAPI.DLL], "DwmIsCompositionEnabled") called from "UXTHEME.DLL" at address 0x732863B3 and returned 0x73471610.
- GetProcAddress(0x73470000 [DWMAPI.DLL], "DwmGetWindowAttribute") called from "UXTHEME.DLL" at address 0x732863B3 and returned 0x73471C76.
- LoadLibraryW("C:\Windows\system32\ole32.dll") called from "IMM32.DLL" at address 0x76BF2691.
- Loaded "OLE32.DLL" at address 0x06160000. Successfully hooked module.
- Unloaded "OLE32.DLL" at address 0x06160000.
- LoadLibraryW("C:\Windows\system32\ole32.dll") returned 0x766A0000.
- GetProcAddress(0x766A0000 [OLE32.DLL], "CoInitializeEx") called from "IMM32.DLL" at address 0x76BF26DE and returned 0x766E09AD.
- GetProcAddress(0x766A0000 [OLE32.DLL], "CoUninitialize") called from "IMM32.DLL" at address 0x76BF26DE and returned 0x766E86D3.
- GetProcAddress(0x766A0000 [OLE32.DLL], "CoRegisterInitializeSpy") called from "IMM32.DLL" at address 0x76BF26DE and returned 0x766E7660.
- GetProcAddress(0x766A0000 [OLE32.DLL], "CoRevokeInitializeSpy") called from "IMM32.DLL" at address 0x76BF26DE and returned 0x766E9784.
- LoadLibraryW("C:\Windows\system32\ole32.dll") called from "MSCTF.DLL" at address 0x76C51943.
- Loaded "OLE32.DLL" at address 0x064E0000. Successfully hooked module.
- Unloaded "OLE32.DLL" at address 0x064E0000.
- LoadLibraryW("C:\Windows\system32\ole32.dll") returned 0x766A0000.
- GetProcAddress(0x766A0000 [OLE32.DLL], "CoCreateInstance") called from "MSCTF.DLL" at address 0x76C519B5 and returned 0x766E9D0B.
- Loaded "CLBCATQ.DLL" at address 0x769D0000. Successfully hooked module.
- DllMain(0x769D0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" called.
- DllMain(0x769D0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" returned 1 (0x1).
- Loaded "MSCTF.DLL" at address 0x06560000. Successfully hooked module.
- Unloaded "MSCTF.DLL" at address 0x06560000.
- LoadLibraryW("oleacc.dll") called from "TIPTSF.DLL" at address 0x71D638E9.
- Loaded "OLEACC.DLL" at address 0x713A0000. Successfully hooked module.
- DllMain(0x713A0000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEACC.DLL" called.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "EventWrite") called from "OLEACC.DLL" at address 0x713A1FC6 and returned 0x778868B9.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "EventRegister") called from "OLEACC.DLL" at address 0x713A1FD7 and returned 0x7786F770.
- GetProcAddress(0x77390000 [ADVAPI32.DLL], "EventUnregister") called from "OLEACC.DLL" at address 0x713A1FEC and returned 0x7787D989.
- LoadLibraryExW("OLEACCRC.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "OLEACC.DLL" at address 0x713A18F1.
- Mapped "OLEACCRC.DLL" as a data file into memory at address 0x011D0001.
- LoadLibraryExW("OLEACCRC.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x011D0001.
- DllMain(0x713A0000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEACC.DLL" returned 1 (0x1).
- LoadLibraryW("oleacc.dll") returned 0x713A0000.
- GetProcAddress(0x713A0000 [OLEACC.DLL], "AccessibleObjectFromEvent") called from "TIPTSF.DLL" at address 0x71D63903 and returned 0x713C97DA.
- GetProcAddress(0x76280000 [USER32.DLL], "GetGUIThreadInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762981D3.
- GetProcAddress(0x76280000 [USER32.DLL], "GetAccCursorInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned NULL. Error: The specified procedure could not be found (127).
- GetProcAddress(0x76280000 [USER32.DLL], "GetCursorInfo") called from "OLEACC.DLL" at address 0x713A3DE1 and returned 0x762F812F.
- GetProcAddress(0x76280000 [USER32.DLL], "GetWindowInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762A1BBF.
- GetProcAddress(0x76280000 [USER32.DLL], "GetTitleBarInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762A1DDA.
- GetProcAddress(0x76280000 [USER32.DLL], "GetScrollBarInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762A3FF8.
- GetProcAddress(0x76280000 [USER32.DLL], "GetComboBoxInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762C0B60.
- GetProcAddress(0x76280000 [USER32.DLL], "GetAncestor") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x76299785.
- GetProcAddress(0x76280000 [USER32.DLL], "RealChildWindowFromPoint") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762F888B.
- GetProcAddress(0x76280000 [USER32.DLL], "RealGetWindowClassW") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762997A5.
- GetProcAddress(0x76280000 [USER32.DLL], "GetAltTabInfoW") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762E0891.
- GetProcAddress(0x76280000 [USER32.DLL], "GetListBoxInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762F82AF.
- GetProcAddress(0x76280000 [USER32.DLL], "GetMenuBarInfo") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762A5764.
- GetProcAddress(0x76280000 [USER32.DLL], "SendInput") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762BFF4A.
- GetProcAddress(0x76280000 [USER32.DLL], "BlockInput") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762F7DD7.
- GetProcAddress(0x76280000 [USER32.DLL], "LogicalToPhysicalPoint") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762C07C8.
- GetProcAddress(0x76280000 [USER32.DLL], "PhysicalToLogicalPoint") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762C0B40.
- GetProcAddress(0x76280000 [USER32.DLL], "WindowFromPhysicalPoint") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762F8EC5.
- GetProcAddress(0x76280000 [USER32.DLL], "GetPhysicalCursorPos") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x762D9EDB.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "GetModuleFileNameW") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x77294918.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "VirtualAllocEx") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x772AD980.
- GetProcAddress(0x77280000 [KERNEL32.DLL], "VirtualFreeEx") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x772AD998.
- GetProcAddress(0x77830000 [NTDLL.DLL], "NtQueryInformationProcess") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x7784FAD8.
- GetProcAddress(0x77830000 [NTDLL.DLL], "NtAllocateVirtualMemory") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x7784FAC0.
- GetProcAddress(0x77830000 [NTDLL.DLL], "NtFreeVirtualMemory") called from "OLEACC.DLL" at address 0x713A3E0E and returned 0x7784FB58.
- LoadLibraryW("OLEAUT32.DLL") called from "OLEACC.DLL" at address 0x713A3E3F.
- LoadLibraryW("OLEAUT32.DLL") returned 0x75FC0000.
- LoadLibraryExA("OLEAUT32.dll", 0x00000000, 0x00000000) called from "OLEACC.DLL" at address 0x713A6A57.
- LoadLibraryExA("OLEAUT32.dll", 0x00000000, 0x00000000) returned 0x75FC0000.
- GetProcAddress(0x75FC0000 [OLEAUT32.DLL], 0x00000008) called from "OLEACC.DLL" at address 0x713A6A02 and returned 0x75FC3ED5.
- GetProcAddress(0x75FC0000 [OLEAUT32.DLL], 0x00000008) called from "OLEACC.DLL" at address 0x713A6A02 and returned 0x75FC3ED5.
- GetProcAddress(0x75FC0000 [OLEAUT32.DLL], 0x0000000A) called from "OLEACC.DLL" at address 0x713A6A02 and returned 0x75FC48F1.
- LoadLibraryExW("C:\Windows\syswow64\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7629AAC3.
- LoadLibraryExW("C:\Windows\syswow64\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x76C40000.
- GetProcAddress(0x76A60000 [GDI32.DLL], "GdiIsMetaPrintDC") called from "USP10.DLL" at address 0x761F7BD6 and returned 0x76A79068.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement