API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 19th, 2019
155
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 52.75 KB | None | 0 0
raw download clone embed print report
  1. e 8 virt 1000 flags 60000020
  2. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  3. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  4. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  5. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\winebrowser.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  6. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  7. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  8. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  9. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  10. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  11. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  12. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  13. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  14. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  15. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  16. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  17. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  18. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  19. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  20. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  21. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  22. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  23. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  24. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  25. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  26. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  27. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  28. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  29. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  30. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  31. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  32. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  33. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  34. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  35. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  36. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  37. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  38. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  39. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  40. 000d:trace:module:LdrUnloadDll END
  41. 000d:trace:module:map_image mapped PE file at 0x100000000-0x1002e8000
  42. 000d:trace:module:map_image mapping section .text at 0x100001000 off 400 size 296800 virt 296762 flags 60000020
  43. 000d:trace:module:map_image clearing 0x100297800 - 0x100298000
  44. 000d:trace:module:map_image mapping section .data at 0x100298000 off 296c00 size 6000 virt 16ae0 flags c0000040
  45. 000d:trace:module:map_image mapping section .pdata at 0x1002af000 off 29cc00 size c600 virt c4c8 flags 40000040
  46. 000d:trace:module:map_image clearing 0x1002bb600 - 0x1002bc000
  47. 000d:trace:module:map_image mapping section .rsrc at 0x1002bc000 off 2a9200 size 21e00 virt 21cd8 flags 40000040
  48. 000d:trace:module:map_image clearing 0x1002dde00 - 0x1002de000
  49. 000d:trace:module:map_image mapping section .reloc at 0x1002de000 off 2cb000 size 9e00 virt 9dca flags 42000040
  50. 000d:trace:module:map_image clearing 0x1002e7e00 - 0x1002e8000
  51. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x64\\PIXWin.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  52. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  53. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0080 0000
  54. 000d:trace:module:LoadResource 0000000000360001 000000000060AA50
  55. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  56. 000d:trace:module:LoadResource 0000000000360001 000000000060A490
  57. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  58. 000d:trace:module:LoadResource 0000000000360001 000000000060A4A0
  59. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  60. 000d:trace:module:LoadResource 0000000000360001 000000000060A4B0
  61. 000d:trace:module:map_image mapped PE file at 0x100000000-0x1002e8000
  62. 000d:trace:module:map_image mapping section .text at 0x100001000 off 400 size 296800 virt 296762 flags 60000020
  63. 000d:trace:module:map_image clearing 0x100297800 - 0x100298000
  64. 000d:trace:module:map_image mapping section .data at 0x100298000 off 296c00 size 6000 virt 16ae0 flags c0000040
  65. 000d:trace:module:map_image mapping section .pdata at 0x1002af000 off 29cc00 size c600 virt c4c8 flags 40000040
  66. 000d:trace:module:map_image clearing 0x1002bb600 - 0x1002bc000
  67. 000d:trace:module:map_image mapping section .rsrc at 0x1002bc000 off 2a9200 size 21e00 virt 21cd8 flags 40000040
  68. 000d:trace:module:map_image clearing 0x1002dde00 - 0x1002de000
  69. 000d:trace:module:map_image mapping section .reloc at 0x1002de000 off 2cb000 size 9e00 virt 9dca flags 42000040
  70. 000d:trace:module:map_image clearing 0x1002e7e00 - 0x1002e8000
  71. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x64\\PIXWin.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  72. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  73. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0080 0000
  74. 000d:trace:module:LoadResource 0000000000360001 000000000060AA50
  75. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  76. 000d:trace:module:LoadResource 0000000000360001 000000000060A490
  77. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  78. 000d:trace:module:LoadResource 0000000000360001 000000000060A4A0
  79. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  80. 000d:trace:module:LoadResource 0000000000360001 000000000060A4B0
  81. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10019000
  82. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  83. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  84. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  85. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  86. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 15334 virt 16000 flags 40000040
  87. 000d:trace:module:map_image clearing 0x10018400 - 0x10019000
  88. 000d:trace:module:open_dll_file L"\\??\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" is for arch 14c, continuing search
  89. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  90. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  91. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  92. 000d:trace:module:LoadResource 0000000000360001 00000000003608C0
  93. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  94. 000d:trace:module:LoadResource 0000000000360001 00000000003608B0
  95. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  96. 000d:trace:module:LoadResource 0000000000360001 00000000003608A0
  97. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  98. 000d:trace:module:LoadResource 0000000000360001 0000000000360890
  99. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  100. 000d:trace:module:LoadResource 0000000000360001 0000000000360880
  101. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  102. 000d:trace:module:LoadResource 0000000000360001 0000000000360870
  103. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  104. 000d:trace:module:LoadResource 0000000000360001 0000000000360860
  105. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  106. 000d:trace:module:LoadResource 0000000000360001 0000000000360850
  107. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  108. 000d:trace:module:LoadResource 0000000000360001 0000000000360840
  109. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  110. 000d:trace:module:LoadResource 0000000000360001 0000000000360830
  111. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  112. 000d:trace:module:LoadResource 0000000000360001 0000000000360820
  113. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10065000
  114. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  115. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  116. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  117. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  118. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 61328 virt 62000 flags 40000040
  119. 000d:trace:module:map_image clearing 0x10064400 - 0x10065000
  120. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  121. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  122. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0066 0000
  123. 000d:trace:module:LoadResource 0000000000360001 00000000003645D8
  124. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  125. 000d:trace:module:LoadResource 0000000000360001 0000000000361F38
  126. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  127. 000d:trace:module:LoadResource 0000000000360001 0000000000361F28
  128. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  129. 000d:trace:module:LoadResource 0000000000360001 0000000000361F18
  130. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  131. 000d:trace:module:LoadResource 0000000000360001 0000000000361F08
  132. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  133. 000d:trace:module:LoadResource 0000000000360001 0000000000361EF8
  134. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  135. 000d:trace:module:LoadResource 0000000000360001 0000000000361EE8
  136. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  137. 000d:trace:module:LoadResource 0000000000360001 0000000000361ED8
  138. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  139. 000d:trace:module:LoadResource 0000000000360001 0000000000361EC8
  140. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  141. 000d:trace:module:LoadResource 0000000000360001 0000000000361EB8
  142. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  143. 000d:trace:module:LoadResource 0000000000360001 0000000000361EA8
  144. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10031000
  145. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  146. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  147. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  148. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  149. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 2da28 virt 2e000 flags 40000040
  150. 000d:trace:module:map_image clearing 0x10030c00 - 0x10031000
  151. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\notepad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  152. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  153. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0300 0000
  154. 000d:trace:module:LoadResource 0000000000360001 0000000000362448
  155. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  156. 000d:trace:module:LoadResource 0000000000360001 0000000000361238
  157. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  158. 000d:trace:module:LoadResource 0000000000360001 0000000000361228
  159. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  160. 000d:trace:module:LoadResource 0000000000360001 0000000000361218
  161. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  162. 000d:trace:module:LoadResource 0000000000360001 0000000000361208
  163. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  164. 000d:trace:module:LoadResource 0000000000360001 00000000003611F8
  165. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  166. 000d:trace:module:LoadResource 0000000000360001 00000000003611E8
  167. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  168. 000d:trace:module:LoadResource 0000000000360001 00000000003611D8
  169. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  170. 000d:trace:module:LoadResource 0000000000360001 00000000003611C8
  171. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  172. 000d:trace:module:LoadResource 0000000000360001 00000000003611B8
  173. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  174. 000d:trace:module:LoadResource 0000000000360001 00000000003611A8
  175. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
  176. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  177. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  178. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  179. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  180. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\rundll32.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  181. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  182. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  183. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  184. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  185. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  186. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  187. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  188. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  189. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  190. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  191. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  192. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  193. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  194. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  195. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  196. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  197. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  198. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  199. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  200. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  201. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  202. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  203. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  204. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  205. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  206. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  207. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  208. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  209. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  210. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  211. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  212. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  213. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  214. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  215. 000d:trace:module:LdrUnloadDll END
  216. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10065000
  217. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  218. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  219. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  220. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  221. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 61328 virt 62000 flags 40000040
  222. 000d:trace:module:map_image clearing 0x10064400 - 0x10065000
  223. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  224. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  225. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0066 0000
  226. 000d:trace:module:LoadResource 0000000000360001 00000000003645D8
  227. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  228. 000d:trace:module:LoadResource 0000000000360001 0000000000361F38
  229. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  230. 000d:trace:module:LoadResource 0000000000360001 0000000000361F28
  231. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  232. 000d:trace:module:LoadResource 0000000000360001 0000000000361F18
  233. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  234. 000d:trace:module:LoadResource 0000000000360001 0000000000361F08
  235. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  236. 000d:trace:module:LoadResource 0000000000360001 0000000000361EF8
  237. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  238. 000d:trace:module:LoadResource 0000000000360001 0000000000361EE8
  239. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  240. 000d:trace:module:LoadResource 0000000000360001 0000000000361ED8
  241. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  242. 000d:trace:module:LoadResource 0000000000360001 0000000000361EC8
  243. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  244. 000d:trace:module:LoadResource 0000000000360001 0000000000361EB8
  245. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  246. 000d:trace:module:LoadResource 0000000000360001 0000000000361EA8
  247. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  248. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  249. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  250. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  251. 000d:trace:module:convert_to_pe64 0x400000
  252. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  253. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  254. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  255. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  256. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  257. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  258. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  259. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  260. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  261. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  262. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
  263. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  264. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  265. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  266. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  267. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\winebrowser.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  268. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  269. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  270. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  271. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  272. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  273. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  274. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  275. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  276. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  277. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  278. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  279. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  280. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  281. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  282. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  283. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  284. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  285. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  286. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  287. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  288. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  289. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  290. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  291. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  292. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  293. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  294. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  295. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  296. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  297. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  298. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  299. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  300. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  301. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  302. 000d:trace:module:LdrUnloadDll END
  303. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  304. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  305. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  306. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  307. 000d:trace:module:convert_to_pe64 0x400000
  308. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  309. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  310. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  311. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  312. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  313. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  314. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  315. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  316. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  317. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  318. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  319. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  320. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  321. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  322. 000d:trace:module:convert_to_pe64 0x400000
  323. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  324. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  325. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  326. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  327. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  328. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  329. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  330. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  331. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  332. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  333. 000d:trace:module:LdrShutdownProcess ()
  334. 000d:trace:module:MODULE_InitDLL (0x7f6dba780000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  335. 000d:trace:module:MODULE_InitDLL (0x7f6dba780000,PROCESS_DETACH,0x1) - RETURN 1
  336. 000d:trace:module:MODULE_InitDLL (0x7f6dba550000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  337. 000d:trace:module:MODULE_InitDLL (0x7f6dba550000,PROCESS_DETACH,0x1) - RETURN 1
  338. 000d:trace:module:MODULE_InitDLL (0x7f6dbb0a0000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
  339. 000d:trace:module:MODULE_InitDLL (0x7f6dbb0a0000,PROCESS_DETACH,0x1) - RETURN 1
  340. 000d:trace:module:MODULE_InitDLL (0x7f6dbc500000 L"windowscodecs.dll",PROCESS_DETACH,0x1) - CALL
  341. 000d:trace:module:MODULE_InitDLL (0x7f6dbc500000,PROCESS_DETACH,0x1) - RETURN 1
  342. 000d:trace:module:MODULE_InitDLL (0x7f6dbbae0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  343. 000d:trace:module:MODULE_InitDLL (0x7f6dbbae0000,PROCESS_DETACH,0x1) - RETURN 1
  344. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb10000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  345. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb10000,PROCESS_DETACH,0x1) - RETURN 1
  346. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb70000 L"propsys.dll",PROCESS_DETACH,0x1) - CALL
  347. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb70000,PROCESS_DETACH,0x1) - RETURN 1
  348. 000d:trace:module:MODULE_InitDLL (0x7f6dbbbb0000 L"oleaut32.dll",PROCESS_DETACH,0x1) - CALL
  349. 000d:trace:module:MODULE_InitDLL (0x7f6dbbbb0000,PROCESS_DETACH,0x1) - RETURN 1
  350. 000d:trace:module:MODULE_InitDLL (0x7f6dbc390000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  351. 000d:trace:module:MODULE_InitDLL (0x7f6dbc390000,PROCESS_DETACH,0x1) - RETURN 1
  352. 000d:trace:module:MODULE_InitDLL (0x7f6dbbd00000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  353. 000d:trace:module:MODULE_InitDLL (0x7f6dbbd00000,PROCESS_DETACH,0x1) - RETURN 1
  354. 000d:trace:module:MODULE_InitDLL (0x7f6dba840000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  355. 000d:trace:module:MODULE_InitDLL (0x7f6dba840000,PROCESS_DETACH,0x1) - RETURN 1
  356. 000d:trace:module:MODULE_InitDLL (0x7f6dbc050000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  357. 000d:trace:module:MODULE_InitDLL (0x7f6dbc050000,PROCESS_DETACH,0x1) - RETURN 1
  358. 000d:trace:module:MODULE_InitDLL (0x7f6dbcb70000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  359. 000d:trace:module:MODULE_InitDLL (0x7f6dbcb70000,PROCESS_DETACH,0x1) - RETURN 1
  360. 000d:trace:module:MODULE_InitDLL (0x7f6dbbda0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  361. 000d:trace:module:MODULE_InitDLL (0x7f6dbbda0000,PROCESS_DETACH,0x1) - RETURN 1
  362. 000d:trace:module:MODULE_InitDLL (0x7f6dbbe90000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  363. 000d:trace:module:MODULE_InitDLL (0x7f6dbbe90000,PROCESS_DETACH,0x1) - RETURN 1
  364. 000d:trace:module:MODULE_InitDLL (0x7f6dbc2e0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  365. 000d:trace:module:MODULE_InitDLL (0x7f6dbc2e0000,PROCESS_DETACH,0x1) - RETURN 1
  366. 000d:trace:module:MODULE_InitDLL (0x7f6dbc750000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  367. 000d:trace:module:MODULE_InitDLL (0x7f6dbc750000,PROCESS_DETACH,0x1) - RETURN 1
  368. 000d:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  369. 000d:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  370. 000d:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  371. 000d:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  372. 002b:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\USER32.dll"
  373. 002b:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\USER32.dll" -> 0x7ec60000 (load path L"Z:\\home\\retkid\\Desktop\\downloads\\Slate.Digital.Virtual.Buss.Compressors.v1.2.9.1.WIN-AudioUTOPiA;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  374. 002b:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7ec60000 (load path L"Z:\\home\\retkid\\Desktop\\downloads\\Slate.Digital.Virtual.Buss.Compressors.v1.2.9.1.WIN-AudioUTOPiA;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  375. 002b:trace:module:FindResourceExW 7B430000 #0006 #0101 0409
  376. 002b:trace:module:LoadResource 7B430000 7B6926D8
  377. 002b:trace:module:LdrShutdownProcess ()
  378. 002b:trace:module:MODULE_InitDLL (0x7d040000 L"uxtheme.dll",PROCESS_DETACH,0x1) - CALL
  379. 002b:trace:module:MODULE_InitDLL (0x7d040000,PROCESS_DETACH,0x1) - RETURN 1
  380. 002b:trace:module:MODULE_InitDLL (0x7d080000 L"api-ms-win-security-systemfunctions-l1-1-0.dll",PROCESS_DETACH,0x1) - CALL
  381. 002b:trace:module:MODULE_InitDLL (0x7d080000,PROCESS_DETACH,0x1) - RETURN 1
  382. 002b:trace:module:MODULE_InitDLL (0x7d090000 L"wintab32.dll",PROCESS_DETACH,0x1) - CALL
  383. 002b:trace:module:MODULE_InitDLL (0x7d090000,PROCESS_DETACH,0x1) - RETURN 1
  384. 002b:trace:module:MODULE_InitDLL (0x7d3a0000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  385. 002b:trace:module:MODULE_InitDLL (0x7d3a0000,PROCESS_DETACH,0x1) - RETURN 1
  386. 002b:trace:module:MODULE_InitDLL (0x7d140000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  387. 002b:trace:module:MODULE_InitDLL (0x7d140000,PROCESS_DETACH,0x1) - RETURN 1
  388. 002b:trace:module:MODULE_InitDLL (0x7d440000 L"api-ms-win-core-localization-l1-2-1.dll",PROCESS_DETACH,0x1) - CALL
  389. 002b:trace:module:MODULE_InitDLL (0x7d440000,PROCESS_DETACH,0x1) - RETURN 1
  390. 002b:trace:module:MODULE_InitDLL (0x7da00000 L"api-ms-win-core-fibers-l1-1-1.dll",PROCESS_DETACH,0x1) - CALL
  391. 002b:trace:module:MODULE_InitDLL (0x7da00000,PROCESS_DETACH,0x1) - RETURN 1
  392. 002b:trace:module:MODULE_InitDLL (0x7da10000 L"api-ms-win-core-synch-l1-2-0.dll",PROCESS_DETACH,0x1) - CALL
  393. 002b:trace:module:MODULE_InitDLL (0x7da10000,PROCESS_DETACH,0x1) - RETURN 1
  394. 002b:trace:module:MODULE_InitDLL (0x7da80000 L"OLEAUT32.dll",PROCESS_DETACH,0x1) - CALL
  395. 002b:trace:module:MODULE_InitDLL (0x7da80000,PROCESS_DETACH,0x1) - RETURN 1
  396. 002b:trace:module:MODULE_InitDLL (0x7db90000 L"WS2_32.dll",PROCESS_DETACH,0x1) - CALL
  397. 002b:trace:module:MODULE_InitDLL (0x7db90000,PROCESS_DETACH,0x1) - RETURN 1
  398. 002b:trace:module:MODULE_InitDLL (0x7dc00000 L"WINMM.dll",PROCESS_DETACH,0x1) - CALL
  399. 002b:trace:module:MODULE_InitDLL (0x7dc00000,PROCESS_DETACH,0x1) - RETURN 1
  400. 002b:trace:module:MODULE_InitDLL (0x7dbd0000 L"msacm32.dll",PROCESS_DETACH,0x1) - CALL
  401. 002b:trace:module:MODULE_InitDLL (0x7dbd0000,PROCESS_DETACH,0x1) - RETURN 1
  402. 002b:trace:module:MODULE_InitDLL (0x7df90000 L"SHELL32.dll",PROCESS_DETACH,0x1) - CALL
  403. 002b:trace:module:MODULE_InitDLL (0x7df90000,PROCESS_DETACH,0x1) - RETURN 1
  404. 002b:trace:module:MODULE_InitDLL (0x7ded0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  405. 002b:trace:module:MODULE_InitDLL (0x7ded0000,PROCESS_DETACH,0x1) - RETURN 1
  406. 002b:trace:module:MODULE_InitDLL (0x7dd90000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  407. 002b:trace:module:MODULE_InitDLL (0x7dd90000,PROCESS_DETACH,0x1) - RETURN 1
  408. 002b:trace:module:MODULE_InitDLL (0x7dce0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  409. 002b:trace:module:MODULE_InitDLL (0x7dce0000,PROCESS_DETACH,0x1) - RETURN 1
  410. 002b:trace:module:MODULE_InitDLL (0x7df00000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  411. 002b:trace:module:MODULE_InitDLL (0x7df00000,PROCESS_DETACH,0x1) - RETURN 1
  412. 002b:trace:module:MODULE_InitDLL (0x7da30000 L"IMM32.dll",PROCESS_DETACH,0x1) - CALL
  413. 002b:trace:module:MODULE_InitDLL (0x7da30000,PROCESS_DETACH,0x1) - RETURN 1
  414. 002b:trace:module:MODULE_InitDLL (0x7ec60000 L"USER32.dll",PROCESS_DETACH,0x1) - CALL
  415. 002b:trace:module:MODULE_InitDLL (0x7ec60000,PROCESS_DETACH,0x1) - RETURN 1
  416. 002b:trace:module:MODULE_InitDLL (0x7eff0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  417. 002b:trace:module:MODULE_InitDLL (0x7eff0000,PROCESS_DETACH,0x1) - RETURN 1
  418. 002b:trace:module:MODULE_InitDLL (0x7e990000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  419. 002b:trace:module:MODULE_InitDLL (0x7e990000,PROCESS_DETACH,0x1) - RETURN 1
  420. 002b:trace:module:MODULE_InitDLL (0x7eaf0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  421. 002b:trace:module:MODULE_InitDLL (0x7eaf0000,PROCESS_DETACH,0x1) - RETURN 1
  422. 002b:trace:module:MODULE_InitDLL (0x7ea60000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  423. 002b:trace:module:MODULE_InitDLL (0x7ea60000,PROCESS_DETACH,0x1) - RETURN 1
  424. 002b:trace:module:MODULE_InitDLL (0x7b430000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  425. 002b:trace:module:MODULE_InitDLL (0x7b430000,PROCESS_DETACH,0x1) - RETURN 1
  426. 002b:trace:module:MODULE_InitDLL (0x7ee80000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  427. 002b:trace:module:MODULE_InitDLL (0x7ee80000,PROCESS_DETACH,0x1) - RETURN 1
  428. 002b:trace:module:MODULE_InitDLL (0x7bc30000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  429. 002b:trace:module:MODULE_InitDLL (0x7bc30000,PROCESS_DETACH,0x1) - RETURN 1
  430. 001f:trace:module:LdrShutdownProcess ()
  431. 001f:trace:module:MODULE_InitDLL (0x7fe8d10b0000 L"actxprxy.dll",PROCESS_DETACH,0x1) - CALL
  432. 001f:trace:module:MODULE_InitDLL (0x7fe8d10b0000,PROCESS_DETACH,0x1) - RETURN 1
  433. 001f:trace:module:MODULE_InitDLL (0x7fe8d0f50000 L"oleaut32.dll",PROCESS_DETACH,0x1) - CALL
  434. 001f:trace:module:MODULE_InitDLL (0x7fe8d0f50000,PROCESS_DETACH,0x1) - RETURN 1
  435. 001f:trace:module:MODULE_InitDLL (0x7fe8d13f0000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
  436. 001f:trace:module:MODULE_InitDLL (0x7fe8d13f0000,PROCESS_DETACH,0x1) - RETURN 1
  437. 001f:trace:module:MODULE_InitDLL (0x7fe8d1380000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  438. 001f:trace:module:MODULE_InitDLL (0x7fe8d1380000,PROCESS_DETACH,0x1) - RETURN 1
  439. 001f:trace:module:MODULE_InitDLL (0x7fe8d1350000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  440. 001f:trace:module:MODULE_InitDLL (0x7fe8d1350000,PROCESS_DETACH,0x1) - RETURN 1
  441. 001f:trace:module:MODULE_InitDLL (0x7fe8d1200000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  442. 001f:trace:module:MODULE_InitDLL (0x7fe8d1200000,PROCESS_DETACH,0x1) - RETURN 1
  443. 001f:trace:module:MODULE_InitDLL (0x7fe8d26d0000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  444. 001f:trace:module:MODULE_InitDLL (0x7fe8d26d0000,PROCESS_DETACH,0x1) - RETURN 1
  445. 001f:trace:module:MODULE_InitDLL (0x7fe8d24b0000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  446. 001f:trace:module:MODULE_InitDLL (0x7fe8d24b0000,PROCESS_DETACH,0x1) - RETURN 1
  447. 001f:trace:module:MODULE_InitDLL (0x7fe8d2790000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  448. 001f:trace:module:MODULE_InitDLL (0x7fe8d2790000,PROCESS_DETACH,0x1) - RETURN 1
  449. 001f:trace:module:MODULE_InitDLL (0x7fe8d31b0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  450. 001f:trace:module:MODULE_InitDLL (0x7fe8d31b0000,PROCESS_DETACH,0x1) - RETURN 1
  451. 001f:trace:module:MODULE_InitDLL (0x7fe8d3bb0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  452. 001f:trace:module:MODULE_InitDLL (0x7fe8d3bb0000,PROCESS_DETACH,0x1) - RETURN 1
  453. 001f:trace:module:MODULE_InitDLL (0x7fe8d2ff0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  454. 001f:trace:module:MODULE_InitDLL (0x7fe8d2ff0000,PROCESS_DETACH,0x1) - RETURN 1
  455. 001f:trace:module:MODULE_InitDLL (0x7fe8d35d0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  456. 001f:trace:module:MODULE_InitDLL (0x7fe8d35d0000,PROCESS_DETACH,0x1) - RETURN 1
  457. 001f:trace:module:MODULE_InitDLL (0x7fe8d3450000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  458. 001f:trace:module:MODULE_InitDLL (0x7fe8d3450000,PROCESS_DETACH,0x1) - RETURN 1
  459. 001f:trace:module:MODULE_InitDLL (0x7fe8d3530000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  460. 001f:trace:module:MODULE_InitDLL (0x7fe8d3530000,PROCESS_DETACH,0x1) - RETURN 1
  461. 001f:trace:module:MODULE_InitDLL (0x7fe8d37a0000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  462. 001f:trace:module:MODULE_InitDLL (0x7fe8d37a0000,PROCESS_DETACH,0x1) - RETURN 1
  463. 001f:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  464. 001f:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  465. 001f:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  466. 001f:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  467. 0015:trace:module:LdrShutdownThread ()
  468. 0015:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  469. 0015:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  470. 0015:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  471. 0015:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  472. 0014:trace:module:LdrShutdownThread ()
  473. 0014:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  474. 0014:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  475. 0014:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  476. 0014:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  477. 002c:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  478. 002c:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  479. 002c:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  480. 002c:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  481. 002d:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  482. 002d:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  483. 002d:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  484. 002d:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  485. 002e:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  486. 002e:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  487. 002e:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  488. 002e:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  489. 002f:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  490. 002f:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  491. 002f:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  492. 002f:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  493. 0030:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  494. 0030:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  495. 0030:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  496. 0030:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  497. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  498. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  499. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  500. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  501. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  502. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  503. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  504. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  505. 0017:trace:module:LdrShutdownThread ()
  506. 0017:trace:module:MODULE_InitDLL (0x7f5235510000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  507. 0017:trace:module:MODULE_InitDLL (0x7f5235510000,THREAD_DETACH,(nil)) - RETURN 1
  508. 0017:trace:module:MODULE_InitDLL (0x7f52355b0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  509. 0017:trace:module:MODULE_InitDLL (0x7f52355b0000,THREAD_DETACH,(nil)) - RETURN 1
  510. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  511. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  512. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  513. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  514. 0025:trace:module:LdrShutdownThread ()
  515. 0025:trace:module:MODULE_InitDLL (0x7f1c4f9b0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  516. 0025:trace:module:MODULE_InitDLL (0x7f1c4f9b0000,THREAD_DETACH,(nil)) - RETURN 1
  517. 0025:trace:module:MODULE_InitDLL (0x7f1c4fa60000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  518. 0025:trace:module:MODULE_InitDLL (0x7f1c4fa60000,THREAD_DETACH,(nil)) - RETURN 1
  519. 0022:trace:module:LdrShutdownProcess ()
  520. 0022:trace:module:MODULE_InitDLL (0x7f1c4f450000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  521. 0022:trace:module:MODULE_InitDLL (0x7f1c4f450000,PROCESS_DETACH,0x1) - RETURN 1
  522. 0022:trace:module:MODULE_InitDLL (0x7f1c4f960000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  523. 0022:trace:module:MODULE_InitDLL (0x7f1c4f960000,PROCESS_DETACH,0x1) - RETURN 1
  524. 0022:trace:module:MODULE_InitDLL (0x7f1c4f9b0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  525. 0022:trace:module:MODULE_InitDLL (0x7f1c4f9b0000,PROCESS_DETACH,0x1) - RETURN 1
  526. 0022:trace:module:MODULE_InitDLL (0x7f1c4fb50000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
  527. 0022:trace:module:MODULE_InitDLL (0x7f1c4fb50000,PROCESS_DETACH,0x1) - RETURN 1
  528. 0022:trace:module:MODULE_InitDLL (0x7f1c4fa60000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  529. 0022:trace:module:MODULE_InitDLL (0x7f1c4fa60000,PROCESS_DETACH,0x1) - RETURN 1
  530. 0022:trace:module:MODULE_InitDLL (0x7f1c4fbb0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  531. 0022:trace:module:MODULE_InitDLL (0x7f1c4fbb0000,PROCESS_DETACH,0x1) - RETURN 1
  532. 0022:trace:module:MODULE_InitDLL (0x7f1c4fd50000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  533. 0022:trace:module:MODULE_InitDLL (0x7f1c4fd50000,PROCESS_DETACH,0x1) - RETURN 1
  534. 0022:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  535. 0022:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  536. 0022:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  537. 0022:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  538. 0012:trace:module:LdrShutdownProcess ()
  539. 0012:trace:module:MODULE_InitDLL (0x7f5235510000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  540. 0012:trace:module:MODULE_InitDLL (0x7f5235510000,PROCESS_DETACH,0x1) - RETURN 1
  541. 0012:trace:module:MODULE_InitDLL (0x7f52355b0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  542. 0012:trace:module:MODULE_InitDLL (0x7f52355b0000,PROCESS_DETACH,0x1) - RETURN 1
  543. 0012:trace:module:MODULE_InitDLL (0x7f52356a0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  544. 0012:trace:module:MODULE_InitDLL (0x7f52356a0000,PROCESS_DETACH,0x1) - RETURN 1
  545. 0012:trace:module:MODULE_InitDLL (0x7f5235840000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  546. 0012:trace:module:MODULE_InitDLL (0x7f5235840000,PROCESS_DETACH,0x1) - RETURN 1
  547. 0012:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  548. 0012:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  549. 0012:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  550. 0012:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  551. 0031:trace:module:LdrShutdownThread ()
  552. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  553. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  554. 0032:trace:module:LdrShutdownThread ()
  555. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  556. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  557. 0013:trace:module:LdrShutdownThread ()
  558. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  559. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  560. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  561. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  562. 0013:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  563. 0013:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  564. 0013:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  565. 0013:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  566. 0023:trace:module:LdrShutdownThread ()
  567. 0023:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  568. 0023:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  569. 0023:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  570. 0023:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  571. 001d:trace:module:LdrShutdownThread ()
  572. 001d:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
  573. 001d:trace:module:MODULE_InitDLL (0x7f11bd140000,THREAD_DETACH,(nil)) - RETURN 1
  574. 001d:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
  575. 001d:trace:module:MODULE_InitDLL (0x7f11bdb60000,THREAD_DETACH,(nil)) - RETURN 1
  576. 001d:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  577. 001d:trace:module:MODULE_InitDLL (0x7f11bdf40000,THREAD_DETACH,(nil)) - RETURN 1
  578. 001d:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  579. 001d:trace:module:MODULE_InitDLL (0x7f11bdfe0000,THREAD_DETACH,(nil)) - RETURN 1
  580. 001c:trace:module:LdrUnloadDll (0x7f11bdef0000)
  581. 001c:trace:module:LdrUnloadDll (L"winehid.sys") - START
  582. 001c:trace:module:MODULE_DecRefCount (L"winehid.sys") ldr.LoadCount: 0
  583. 001c:trace:module:MODULE_DecRefCount (L"hidclass.sys") ldr.LoadCount: 0
  584. 001c:trace:module:MODULE_InitDLL (0x7f11bddf0000 L"hidclass.sys",PROCESS_DETACH,(nil)) - CALL
  585. 001c:trace:module:MODULE_InitDLL (0x7f11bddf0000,PROCESS_DETACH,(nil)) - RETURN 1
  586. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\drivers\\winehid.sys"
  587. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\hidclass.sys"
  588. 001c:trace:module:LdrUnloadDll (0x7f11bde20000)
  589. 001c:trace:module:LdrUnloadDll (L"setupapi.dll") - START
  590. 001c:trace:module:MODULE_DecRefCount (L"setupapi.dll") ldr.LoadCount: 2
  591. 001c:trace:module:LdrUnloadDll END
  592. 001c:trace:module:LdrUnloadDll (0x7f11bded0000)
  593. 001c:trace:module:LdrUnloadDll (L"hid.dll") - START
  594. 001c:trace:module:MODULE_DecRefCount (L"hid.dll") ldr.LoadCount: 0
  595. 001c:trace:module:LdrUnloadDll END
  596. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\hid.dll"
  597. 001c:trace:module:LdrUnloadDll END
  598. 001c:trace:module:LdrUnloadDll (0x7f11bdf00000)
  599. 001c:trace:module:LdrUnloadDll (L"winebus.sys") - START
  600. 001c:trace:module:MODULE_DecRefCount (L"winebus.sys") ldr.LoadCount: 0
  601. 001c:trace:module:MODULE_DecRefCount (L"setupapi.dll") ldr.LoadCount: 1
  602. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\drivers\\winebus.sys"
  603. 001c:trace:module:LdrUnloadDll END
  604. 001c:trace:module:LdrShutdownThread ()
  605. 001c:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
  606. 001c:trace:module:MODULE_InitDLL (0x7f11bd140000,THREAD_DETACH,(nil)) - RETURN 1
  607. 001c:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
  608. 001c:trace:module:MODULE_InitDLL (0x7f11bdb60000,THREAD_DETACH,(nil)) - RETURN 1
  609. 001c:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  610. 001c:trace:module:MODULE_InitDLL (0x7f11bdf40000,THREAD_DETACH,(nil)) - RETURN 1
  611. 001c:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  612. 001c:trace:module:MODULE_InitDLL (0x7f11bdfe0000,THREAD_DETACH,(nil)) - RETURN 1
  613. 0019:trace:module:LdrShutdownProcess ()
  614. 0019:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  615. 0019:trace:module:MODULE_InitDLL (0x7f11bd140000,PROCESS_DETACH,0x1) - RETURN 1
  616. 0019:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  617. 0019:trace:module:MODULE_InitDLL (0x7f11bdb60000,PROCESS_DETACH,0x1) - RETURN 1
  618. 0019:trace:module:MODULE_InitDLL (0x7f11bd9a0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  619. 0019:trace:module:MODULE_InitDLL (0x7f11bd9a0000,PROCESS_DETACH,0x1) - RETURN 1
  620. 0019:trace:module:MODULE_InitDLL (0x7f11bde20000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  621. 0019:trace:module:MODULE_InitDLL (0x7f11bde20000,PROCESS_DETACH,0x1) - RETURN 1
  622. 0019:trace:module:MODULE_InitDLL (0x7f11bde00000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  623. 0019:trace:module:MODULE_InitDLL (0x7f11bde00000,PROCESS_DETACH,0x1) - RETURN 1
  624. 0019:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  625. 0019:trace:module:MODULE_InitDLL (0x7f11bdf40000,PROCESS_DETACH,0x1) - RETURN 1
  626. 0019:trace:module:MODULE_InitDLL (0x7f11be0d0000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
  627. 0019:trace:module:MODULE_InitDLL (0x7f11be0d0000,PROCESS_DETACH,0x1) - RETURN 1
  628. 0019:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  629. 0019:trace:module:MODULE_InitDLL (0x7f11bdfe0000,PROCESS_DETACH,0x1) - RETURN 1
  630. 0019:trace:module:MODULE_InitDLL (0x7f11be140000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  631. 0019:trace:module:MODULE_InitDLL (0x7f11be140000,PROCESS_DETACH,0x1) - RETURN 1
  632. 0019:trace:module:MODULE_InitDLL (0x7f11be2e0000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  633. 0019:trace:module:MODULE_InitDLL (0x7f11be2e0000,PROCESS_DETACH,0x1) - RETURN 1
  634. 0019:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  635. 0019:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  636. 0019:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  637. 0019:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  638. 001a:trace:module:LdrShutdownThread ()
  639. 001a:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  640. 001a:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  641. 001a:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  642. 001a:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  643. 0033:trace:module:LdrShutdownThread ()
  644. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  645. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  646. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  647. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  648. 0010:trace:module:LdrShutdownThread ()
  649. 0010:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  650. 0010:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  651. 0010:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  652. 0010:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  653. 000f:trace:module:LdrShutdownProcess ()
  654. ^C
  655. [retkid@retkid ~]$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!