Guest User

Untitled

a guest
Jul 19th, 2019
106
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. e 8 virt 1000 flags 60000020
  2. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  3. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  4. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  5. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\winebrowser.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  6. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  7. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  8. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  9. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  10. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  11. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  12. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  13. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  14. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  15. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  16. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  17. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  18. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  19. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  20. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  21. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  22. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  23. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  24. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  25. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  26. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  27. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  28. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  29. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  30. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  31. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  32. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  33. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  34. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  35. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  36. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  37. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  38. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  39. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  40. 000d:trace:module:LdrUnloadDll END
  41. 000d:trace:module:map_image mapped PE file at 0x100000000-0x1002e8000
  42. 000d:trace:module:map_image mapping section .text at 0x100001000 off 400 size 296800 virt 296762 flags 60000020
  43. 000d:trace:module:map_image clearing 0x100297800 - 0x100298000
  44. 000d:trace:module:map_image mapping section .data at 0x100298000 off 296c00 size 6000 virt 16ae0 flags c0000040
  45. 000d:trace:module:map_image mapping section .pdata at 0x1002af000 off 29cc00 size c600 virt c4c8 flags 40000040
  46. 000d:trace:module:map_image clearing 0x1002bb600 - 0x1002bc000
  47. 000d:trace:module:map_image mapping section .rsrc at 0x1002bc000 off 2a9200 size 21e00 virt 21cd8 flags 40000040
  48. 000d:trace:module:map_image clearing 0x1002dde00 - 0x1002de000
  49. 000d:trace:module:map_image mapping section .reloc at 0x1002de000 off 2cb000 size 9e00 virt 9dca flags 42000040
  50. 000d:trace:module:map_image clearing 0x1002e7e00 - 0x1002e8000
  51. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x64\\PIXWin.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  52. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  53. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0080 0000
  54. 000d:trace:module:LoadResource 0000000000360001 000000000060AA50
  55. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  56. 000d:trace:module:LoadResource 0000000000360001 000000000060A490
  57. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  58. 000d:trace:module:LoadResource 0000000000360001 000000000060A4A0
  59. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  60. 000d:trace:module:LoadResource 0000000000360001 000000000060A4B0
  61. 000d:trace:module:map_image mapped PE file at 0x100000000-0x1002e8000
  62. 000d:trace:module:map_image mapping section .text at 0x100001000 off 400 size 296800 virt 296762 flags 60000020
  63. 000d:trace:module:map_image clearing 0x100297800 - 0x100298000
  64. 000d:trace:module:map_image mapping section .data at 0x100298000 off 296c00 size 6000 virt 16ae0 flags c0000040
  65. 000d:trace:module:map_image mapping section .pdata at 0x1002af000 off 29cc00 size c600 virt c4c8 flags 40000040
  66. 000d:trace:module:map_image clearing 0x1002bb600 - 0x1002bc000
  67. 000d:trace:module:map_image mapping section .rsrc at 0x1002bc000 off 2a9200 size 21e00 virt 21cd8 flags 40000040
  68. 000d:trace:module:map_image clearing 0x1002dde00 - 0x1002de000
  69. 000d:trace:module:map_image mapping section .reloc at 0x1002de000 off 2cb000 size 9e00 virt 9dca flags 42000040
  70. 000d:trace:module:map_image clearing 0x1002e7e00 - 0x1002e8000
  71. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x64\\PIXWin.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  72. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  73. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0080 0000
  74. 000d:trace:module:LoadResource 0000000000360001 000000000060AA50
  75. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  76. 000d:trace:module:LoadResource 0000000000360001 000000000060A490
  77. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  78. 000d:trace:module:LoadResource 0000000000360001 000000000060A4A0
  79. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  80. 000d:trace:module:LoadResource 0000000000360001 000000000060A4B0
  81. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10019000
  82. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  83. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  84. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  85. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  86. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 15334 virt 16000 flags 40000040
  87. 000d:trace:module:map_image clearing 0x10018400 - 0x10019000
  88. 000d:trace:module:open_dll_file L"\\??\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" is for arch 14c, continuing search
  89. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  90. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  91. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  92. 000d:trace:module:LoadResource 0000000000360001 00000000003608C0
  93. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  94. 000d:trace:module:LoadResource 0000000000360001 00000000003608B0
  95. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  96. 000d:trace:module:LoadResource 0000000000360001 00000000003608A0
  97. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  98. 000d:trace:module:LoadResource 0000000000360001 0000000000360890
  99. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  100. 000d:trace:module:LoadResource 0000000000360001 0000000000360880
  101. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  102. 000d:trace:module:LoadResource 0000000000360001 0000000000360870
  103. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  104. 000d:trace:module:LoadResource 0000000000360001 0000000000360860
  105. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  106. 000d:trace:module:LoadResource 0000000000360001 0000000000360850
  107. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  108. 000d:trace:module:LoadResource 0000000000360001 0000000000360840
  109. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  110. 000d:trace:module:LoadResource 0000000000360001 0000000000360830
  111. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  112. 000d:trace:module:LoadResource 0000000000360001 0000000000360820
  113. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10065000
  114. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  115. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  116. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  117. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  118. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 61328 virt 62000 flags 40000040
  119. 000d:trace:module:map_image clearing 0x10064400 - 0x10065000
  120. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  121. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  122. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0066 0000
  123. 000d:trace:module:LoadResource 0000000000360001 00000000003645D8
  124. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  125. 000d:trace:module:LoadResource 0000000000360001 0000000000361F38
  126. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  127. 000d:trace:module:LoadResource 0000000000360001 0000000000361F28
  128. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  129. 000d:trace:module:LoadResource 0000000000360001 0000000000361F18
  130. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  131. 000d:trace:module:LoadResource 0000000000360001 0000000000361F08
  132. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  133. 000d:trace:module:LoadResource 0000000000360001 0000000000361EF8
  134. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  135. 000d:trace:module:LoadResource 0000000000360001 0000000000361EE8
  136. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  137. 000d:trace:module:LoadResource 0000000000360001 0000000000361ED8
  138. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  139. 000d:trace:module:LoadResource 0000000000360001 0000000000361EC8
  140. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  141. 000d:trace:module:LoadResource 0000000000360001 0000000000361EB8
  142. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  143. 000d:trace:module:LoadResource 0000000000360001 0000000000361EA8
  144. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10031000
  145. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  146. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  147. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  148. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  149. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 2da28 virt 2e000 flags 40000040
  150. 000d:trace:module:map_image clearing 0x10030c00 - 0x10031000
  151. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\notepad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  152. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  153. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0300 0000
  154. 000d:trace:module:LoadResource 0000000000360001 0000000000362448
  155. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  156. 000d:trace:module:LoadResource 0000000000360001 0000000000361238
  157. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  158. 000d:trace:module:LoadResource 0000000000360001 0000000000361228
  159. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  160. 000d:trace:module:LoadResource 0000000000360001 0000000000361218
  161. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  162. 000d:trace:module:LoadResource 0000000000360001 0000000000361208
  163. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  164. 000d:trace:module:LoadResource 0000000000360001 00000000003611F8
  165. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  166. 000d:trace:module:LoadResource 0000000000360001 00000000003611E8
  167. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  168. 000d:trace:module:LoadResource 0000000000360001 00000000003611D8
  169. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  170. 000d:trace:module:LoadResource 0000000000360001 00000000003611C8
  171. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  172. 000d:trace:module:LoadResource 0000000000360001 00000000003611B8
  173. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  174. 000d:trace:module:LoadResource 0000000000360001 00000000003611A8
  175. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
  176. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  177. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  178. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  179. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  180. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\rundll32.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  181. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  182. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  183. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  184. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  185. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  186. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  187. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  188. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  189. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  190. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  191. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  192. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  193. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  194. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  195. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  196. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  197. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  198. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  199. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  200. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  201. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  202. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  203. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  204. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  205. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  206. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  207. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  208. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  209. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  210. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  211. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  212. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  213. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  214. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  215. 000d:trace:module:LdrUnloadDll END
  216. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10065000
  217. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  218. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  219. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  220. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  221. 000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 61328 virt 62000 flags 40000040
  222. 000d:trace:module:map_image clearing 0x10064400 - 0x10065000
  223. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  224. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  225. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0066 0000
  226. 000d:trace:module:LoadResource 0000000000360001 00000000003645D8
  227. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #000a 0000
  228. 000d:trace:module:LoadResource 0000000000360001 0000000000361F38
  229. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0009 0000
  230. 000d:trace:module:LoadResource 0000000000360001 0000000000361F28
  231. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0008 0000
  232. 000d:trace:module:LoadResource 0000000000360001 0000000000361F18
  233. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0007 0000
  234. 000d:trace:module:LoadResource 0000000000360001 0000000000361F08
  235. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0006 0000
  236. 000d:trace:module:LoadResource 0000000000360001 0000000000361EF8
  237. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0005 0000
  238. 000d:trace:module:LoadResource 0000000000360001 0000000000361EE8
  239. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0004 0000
  240. 000d:trace:module:LoadResource 0000000000360001 0000000000361ED8
  241. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  242. 000d:trace:module:LoadResource 0000000000360001 0000000000361EC8
  243. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  244. 000d:trace:module:LoadResource 0000000000360001 0000000000361EB8
  245. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  246. 000d:trace:module:LoadResource 0000000000360001 0000000000361EA8
  247. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  248. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  249. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  250. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  251. 000d:trace:module:convert_to_pe64 0x400000
  252. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  253. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  254. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  255. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  256. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  257. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  258. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  259. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  260. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  261. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  262. 000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
  263. 000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
  264. 000d:trace:module:map_image clearing 0x10001200 - 0x10002000
  265. 000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
  266. 000d:trace:module:map_image clearing 0x10002200 - 0x10003000
  267. 000d:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\winebrowser.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  268. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  269. 000d:trace:module:LdrGetDllHandle L"%1" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  270. 000d:trace:module:load_dll looking for L"%1" in L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
  271. 000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\%1.dll"
  272. 000d:trace:module:get_load_order got hardcoded default for L"%1.dll"
  273. 000d:trace:module:load_builtin_dll Trying built-in L"%1.dll"
  274. 000d:warn:module:find_builtin_dll cannot find builtin library for L"%1.dll"
  275. 000d:warn:module:load_dll Failed to load module L"%1"; status=c0000135
  276. 000d:trace:module:LdrGetDllHandle L"user32" -> 0x7f6dbc050000 (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  277. 000d:trace:module:LdrAddRefDll (L"user32.dll") ldr.LoadCount: -1
  278. 000d:trace:module:FindResourceExW 00007F6DBC050000 #000e #7f05 0000
  279. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC19B000
  280. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003c 0000
  281. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E70
  282. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003b 0000
  283. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E60
  284. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #003a 0000
  285. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E50
  286. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0039 0000
  287. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E40
  288. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0038 0000
  289. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E30
  290. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0037 0000
  291. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E20
  292. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0036 0000
  293. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E10
  294. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0035 0000
  295. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199E00
  296. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0034 0000
  297. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DF0
  298. 000d:trace:module:FindResourceExW 00007F6DBC050000 #0003 #0033 0000
  299. 000d:trace:module:LoadResource 00007F6DBC050000 00007F6DBC199DE0
  300. 000d:trace:module:LdrUnloadDll (0x7f6dbc050000)
  301. 000d:trace:module:LdrUnloadDll (L"user32.dll") - START
  302. 000d:trace:module:LdrUnloadDll END
  303. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  304. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  305. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  306. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  307. 000d:trace:module:convert_to_pe64 0x400000
  308. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  309. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  310. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  311. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  312. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  313. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  314. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  315. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  316. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  317. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  318. 000d:trace:module:map_image mapped PE file at 0x400000-0x780000
  319. 000d:trace:module:map_image mapping section .text at 0x402000 off 1000 size 375000 virt 374c14 flags 60000020
  320. 000d:trace:module:map_image mapping section .rsrc at 0x778000 off 376000 size 5000 virt 43d8 flags 40000040
  321. 000d:trace:module:map_image mapping section .reloc at 0x77e000 off 37b000 size 1000 virt c flags 42000040
  322. 000d:trace:module:convert_to_pe64 0x400000
  323. 000d:trace:module:LdrGetDllHandle L"C:\\Program Files (x86)\\Microsoft DirectX SDK (June 2010)\\Utilities\\Bin\\x86\\XACT3.exe" -> (nil) (load path L"C:\\windows\\system32;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  324. 000d:trace:module:EnumResourceNamesExW 0000000000360001 #000e 00007F6DBC618F50 22f550
  325. 000d:trace:module:FindResourceExW 0000000000360001 #000e #0001 0000
  326. 000d:trace:module:LoadResource 0000000000360001 00000000006D6160
  327. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0001 0000
  328. 000d:trace:module:LoadResource 0000000000360001 00000000006D6130
  329. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0002 0000
  330. 000d:trace:module:LoadResource 0000000000360001 00000000006D6140
  331. 000d:trace:module:FindResourceExW 0000000000360001 #0003 #0003 0000
  332. 000d:trace:module:LoadResource 0000000000360001 00000000006D6150
  333. 000d:trace:module:LdrShutdownProcess ()
  334. 000d:trace:module:MODULE_InitDLL (0x7f6dba780000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  335. 000d:trace:module:MODULE_InitDLL (0x7f6dba780000,PROCESS_DETACH,0x1) - RETURN 1
  336. 000d:trace:module:MODULE_InitDLL (0x7f6dba550000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  337. 000d:trace:module:MODULE_InitDLL (0x7f6dba550000,PROCESS_DETACH,0x1) - RETURN 1
  338. 000d:trace:module:MODULE_InitDLL (0x7f6dbb0a0000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
  339. 000d:trace:module:MODULE_InitDLL (0x7f6dbb0a0000,PROCESS_DETACH,0x1) - RETURN 1
  340. 000d:trace:module:MODULE_InitDLL (0x7f6dbc500000 L"windowscodecs.dll",PROCESS_DETACH,0x1) - CALL
  341. 000d:trace:module:MODULE_InitDLL (0x7f6dbc500000,PROCESS_DETACH,0x1) - RETURN 1
  342. 000d:trace:module:MODULE_InitDLL (0x7f6dbbae0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  343. 000d:trace:module:MODULE_InitDLL (0x7f6dbbae0000,PROCESS_DETACH,0x1) - RETURN 1
  344. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb10000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  345. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb10000,PROCESS_DETACH,0x1) - RETURN 1
  346. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb70000 L"propsys.dll",PROCESS_DETACH,0x1) - CALL
  347. 000d:trace:module:MODULE_InitDLL (0x7f6dbbb70000,PROCESS_DETACH,0x1) - RETURN 1
  348. 000d:trace:module:MODULE_InitDLL (0x7f6dbbbb0000 L"oleaut32.dll",PROCESS_DETACH,0x1) - CALL
  349. 000d:trace:module:MODULE_InitDLL (0x7f6dbbbb0000,PROCESS_DETACH,0x1) - RETURN 1
  350. 000d:trace:module:MODULE_InitDLL (0x7f6dbc390000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  351. 000d:trace:module:MODULE_InitDLL (0x7f6dbc390000,PROCESS_DETACH,0x1) - RETURN 1
  352. 000d:trace:module:MODULE_InitDLL (0x7f6dbbd00000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  353. 000d:trace:module:MODULE_InitDLL (0x7f6dbbd00000,PROCESS_DETACH,0x1) - RETURN 1
  354. 000d:trace:module:MODULE_InitDLL (0x7f6dba840000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  355. 000d:trace:module:MODULE_InitDLL (0x7f6dba840000,PROCESS_DETACH,0x1) - RETURN 1
  356. 000d:trace:module:MODULE_InitDLL (0x7f6dbc050000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  357. 000d:trace:module:MODULE_InitDLL (0x7f6dbc050000,PROCESS_DETACH,0x1) - RETURN 1
  358. 000d:trace:module:MODULE_InitDLL (0x7f6dbcb70000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  359. 000d:trace:module:MODULE_InitDLL (0x7f6dbcb70000,PROCESS_DETACH,0x1) - RETURN 1
  360. 000d:trace:module:MODULE_InitDLL (0x7f6dbbda0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  361. 000d:trace:module:MODULE_InitDLL (0x7f6dbbda0000,PROCESS_DETACH,0x1) - RETURN 1
  362. 000d:trace:module:MODULE_InitDLL (0x7f6dbbe90000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  363. 000d:trace:module:MODULE_InitDLL (0x7f6dbbe90000,PROCESS_DETACH,0x1) - RETURN 1
  364. 000d:trace:module:MODULE_InitDLL (0x7f6dbc2e0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  365. 000d:trace:module:MODULE_InitDLL (0x7f6dbc2e0000,PROCESS_DETACH,0x1) - RETURN 1
  366. 000d:trace:module:MODULE_InitDLL (0x7f6dbc750000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  367. 000d:trace:module:MODULE_InitDLL (0x7f6dbc750000,PROCESS_DETACH,0x1) - RETURN 1
  368. 000d:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  369. 000d:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  370. 000d:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  371. 000d:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  372. 002b:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\USER32.dll"
  373. 002b:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\USER32.dll" -> 0x7ec60000 (load path L"Z:\\home\\retkid\\Desktop\\downloads\\Slate.Digital.Virtual.Buss.Compressors.v1.2.9.1.WIN-AudioUTOPiA;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  374. 002b:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7ec60000 (load path L"Z:\\home\\retkid\\Desktop\\downloads\\Slate.Digital.Virtual.Buss.Compressors.v1.2.9.1.WIN-AudioUTOPiA;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
  375. 002b:trace:module:FindResourceExW 7B430000 #0006 #0101 0409
  376. 002b:trace:module:LoadResource 7B430000 7B6926D8
  377. 002b:trace:module:LdrShutdownProcess ()
  378. 002b:trace:module:MODULE_InitDLL (0x7d040000 L"uxtheme.dll",PROCESS_DETACH,0x1) - CALL
  379. 002b:trace:module:MODULE_InitDLL (0x7d040000,PROCESS_DETACH,0x1) - RETURN 1
  380. 002b:trace:module:MODULE_InitDLL (0x7d080000 L"api-ms-win-security-systemfunctions-l1-1-0.dll",PROCESS_DETACH,0x1) - CALL
  381. 002b:trace:module:MODULE_InitDLL (0x7d080000,PROCESS_DETACH,0x1) - RETURN 1
  382. 002b:trace:module:MODULE_InitDLL (0x7d090000 L"wintab32.dll",PROCESS_DETACH,0x1) - CALL
  383. 002b:trace:module:MODULE_InitDLL (0x7d090000,PROCESS_DETACH,0x1) - RETURN 1
  384. 002b:trace:module:MODULE_InitDLL (0x7d3a0000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  385. 002b:trace:module:MODULE_InitDLL (0x7d3a0000,PROCESS_DETACH,0x1) - RETURN 1
  386. 002b:trace:module:MODULE_InitDLL (0x7d140000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  387. 002b:trace:module:MODULE_InitDLL (0x7d140000,PROCESS_DETACH,0x1) - RETURN 1
  388. 002b:trace:module:MODULE_InitDLL (0x7d440000 L"api-ms-win-core-localization-l1-2-1.dll",PROCESS_DETACH,0x1) - CALL
  389. 002b:trace:module:MODULE_InitDLL (0x7d440000,PROCESS_DETACH,0x1) - RETURN 1
  390. 002b:trace:module:MODULE_InitDLL (0x7da00000 L"api-ms-win-core-fibers-l1-1-1.dll",PROCESS_DETACH,0x1) - CALL
  391. 002b:trace:module:MODULE_InitDLL (0x7da00000,PROCESS_DETACH,0x1) - RETURN 1
  392. 002b:trace:module:MODULE_InitDLL (0x7da10000 L"api-ms-win-core-synch-l1-2-0.dll",PROCESS_DETACH,0x1) - CALL
  393. 002b:trace:module:MODULE_InitDLL (0x7da10000,PROCESS_DETACH,0x1) - RETURN 1
  394. 002b:trace:module:MODULE_InitDLL (0x7da80000 L"OLEAUT32.dll",PROCESS_DETACH,0x1) - CALL
  395. 002b:trace:module:MODULE_InitDLL (0x7da80000,PROCESS_DETACH,0x1) - RETURN 1
  396. 002b:trace:module:MODULE_InitDLL (0x7db90000 L"WS2_32.dll",PROCESS_DETACH,0x1) - CALL
  397. 002b:trace:module:MODULE_InitDLL (0x7db90000,PROCESS_DETACH,0x1) - RETURN 1
  398. 002b:trace:module:MODULE_InitDLL (0x7dc00000 L"WINMM.dll",PROCESS_DETACH,0x1) - CALL
  399. 002b:trace:module:MODULE_InitDLL (0x7dc00000,PROCESS_DETACH,0x1) - RETURN 1
  400. 002b:trace:module:MODULE_InitDLL (0x7dbd0000 L"msacm32.dll",PROCESS_DETACH,0x1) - CALL
  401. 002b:trace:module:MODULE_InitDLL (0x7dbd0000,PROCESS_DETACH,0x1) - RETURN 1
  402. 002b:trace:module:MODULE_InitDLL (0x7df90000 L"SHELL32.dll",PROCESS_DETACH,0x1) - CALL
  403. 002b:trace:module:MODULE_InitDLL (0x7df90000,PROCESS_DETACH,0x1) - RETURN 1
  404. 002b:trace:module:MODULE_InitDLL (0x7ded0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  405. 002b:trace:module:MODULE_InitDLL (0x7ded0000,PROCESS_DETACH,0x1) - RETURN 1
  406. 002b:trace:module:MODULE_InitDLL (0x7dd90000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  407. 002b:trace:module:MODULE_InitDLL (0x7dd90000,PROCESS_DETACH,0x1) - RETURN 1
  408. 002b:trace:module:MODULE_InitDLL (0x7dce0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  409. 002b:trace:module:MODULE_InitDLL (0x7dce0000,PROCESS_DETACH,0x1) - RETURN 1
  410. 002b:trace:module:MODULE_InitDLL (0x7df00000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  411. 002b:trace:module:MODULE_InitDLL (0x7df00000,PROCESS_DETACH,0x1) - RETURN 1
  412. 002b:trace:module:MODULE_InitDLL (0x7da30000 L"IMM32.dll",PROCESS_DETACH,0x1) - CALL
  413. 002b:trace:module:MODULE_InitDLL (0x7da30000,PROCESS_DETACH,0x1) - RETURN 1
  414. 002b:trace:module:MODULE_InitDLL (0x7ec60000 L"USER32.dll",PROCESS_DETACH,0x1) - CALL
  415. 002b:trace:module:MODULE_InitDLL (0x7ec60000,PROCESS_DETACH,0x1) - RETURN 1
  416. 002b:trace:module:MODULE_InitDLL (0x7eff0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  417. 002b:trace:module:MODULE_InitDLL (0x7eff0000,PROCESS_DETACH,0x1) - RETURN 1
  418. 002b:trace:module:MODULE_InitDLL (0x7e990000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  419. 002b:trace:module:MODULE_InitDLL (0x7e990000,PROCESS_DETACH,0x1) - RETURN 1
  420. 002b:trace:module:MODULE_InitDLL (0x7eaf0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  421. 002b:trace:module:MODULE_InitDLL (0x7eaf0000,PROCESS_DETACH,0x1) - RETURN 1
  422. 002b:trace:module:MODULE_InitDLL (0x7ea60000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  423. 002b:trace:module:MODULE_InitDLL (0x7ea60000,PROCESS_DETACH,0x1) - RETURN 1
  424. 002b:trace:module:MODULE_InitDLL (0x7b430000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  425. 002b:trace:module:MODULE_InitDLL (0x7b430000,PROCESS_DETACH,0x1) - RETURN 1
  426. 002b:trace:module:MODULE_InitDLL (0x7ee80000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  427. 002b:trace:module:MODULE_InitDLL (0x7ee80000,PROCESS_DETACH,0x1) - RETURN 1
  428. 002b:trace:module:MODULE_InitDLL (0x7bc30000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  429. 002b:trace:module:MODULE_InitDLL (0x7bc30000,PROCESS_DETACH,0x1) - RETURN 1
  430. 001f:trace:module:LdrShutdownProcess ()
  431. 001f:trace:module:MODULE_InitDLL (0x7fe8d10b0000 L"actxprxy.dll",PROCESS_DETACH,0x1) - CALL
  432. 001f:trace:module:MODULE_InitDLL (0x7fe8d10b0000,PROCESS_DETACH,0x1) - RETURN 1
  433. 001f:trace:module:MODULE_InitDLL (0x7fe8d0f50000 L"oleaut32.dll",PROCESS_DETACH,0x1) - CALL
  434. 001f:trace:module:MODULE_InitDLL (0x7fe8d0f50000,PROCESS_DETACH,0x1) - RETURN 1
  435. 001f:trace:module:MODULE_InitDLL (0x7fe8d13f0000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
  436. 001f:trace:module:MODULE_InitDLL (0x7fe8d13f0000,PROCESS_DETACH,0x1) - RETURN 1
  437. 001f:trace:module:MODULE_InitDLL (0x7fe8d1380000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
  438. 001f:trace:module:MODULE_InitDLL (0x7fe8d1380000,PROCESS_DETACH,0x1) - RETURN 1
  439. 001f:trace:module:MODULE_InitDLL (0x7fe8d1350000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
  440. 001f:trace:module:MODULE_InitDLL (0x7fe8d1350000,PROCESS_DETACH,0x1) - RETURN 1
  441. 001f:trace:module:MODULE_InitDLL (0x7fe8d1200000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
  442. 001f:trace:module:MODULE_InitDLL (0x7fe8d1200000,PROCESS_DETACH,0x1) - RETURN 1
  443. 001f:trace:module:MODULE_InitDLL (0x7fe8d26d0000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
  444. 001f:trace:module:MODULE_InitDLL (0x7fe8d26d0000,PROCESS_DETACH,0x1) - RETURN 1
  445. 001f:trace:module:MODULE_InitDLL (0x7fe8d24b0000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  446. 001f:trace:module:MODULE_InitDLL (0x7fe8d24b0000,PROCESS_DETACH,0x1) - RETURN 1
  447. 001f:trace:module:MODULE_InitDLL (0x7fe8d2790000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  448. 001f:trace:module:MODULE_InitDLL (0x7fe8d2790000,PROCESS_DETACH,0x1) - RETURN 1
  449. 001f:trace:module:MODULE_InitDLL (0x7fe8d31b0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  450. 001f:trace:module:MODULE_InitDLL (0x7fe8d31b0000,PROCESS_DETACH,0x1) - RETURN 1
  451. 001f:trace:module:MODULE_InitDLL (0x7fe8d3bb0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  452. 001f:trace:module:MODULE_InitDLL (0x7fe8d3bb0000,PROCESS_DETACH,0x1) - RETURN 1
  453. 001f:trace:module:MODULE_InitDLL (0x7fe8d2ff0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  454. 001f:trace:module:MODULE_InitDLL (0x7fe8d2ff0000,PROCESS_DETACH,0x1) - RETURN 1
  455. 001f:trace:module:MODULE_InitDLL (0x7fe8d35d0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  456. 001f:trace:module:MODULE_InitDLL (0x7fe8d35d0000,PROCESS_DETACH,0x1) - RETURN 1
  457. 001f:trace:module:MODULE_InitDLL (0x7fe8d3450000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  458. 001f:trace:module:MODULE_InitDLL (0x7fe8d3450000,PROCESS_DETACH,0x1) - RETURN 1
  459. 001f:trace:module:MODULE_InitDLL (0x7fe8d3530000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  460. 001f:trace:module:MODULE_InitDLL (0x7fe8d3530000,PROCESS_DETACH,0x1) - RETURN 1
  461. 001f:trace:module:MODULE_InitDLL (0x7fe8d37a0000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  462. 001f:trace:module:MODULE_InitDLL (0x7fe8d37a0000,PROCESS_DETACH,0x1) - RETURN 1
  463. 001f:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  464. 001f:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  465. 001f:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  466. 001f:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  467. 0015:trace:module:LdrShutdownThread ()
  468. 0015:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  469. 0015:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  470. 0015:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  471. 0015:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  472. 0014:trace:module:LdrShutdownThread ()
  473. 0014:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  474. 0014:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  475. 0014:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  476. 0014:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  477. 002c:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  478. 002c:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  479. 002c:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  480. 002c:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  481. 002d:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  482. 002d:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  483. 002d:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  484. 002d:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  485. 002e:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  486. 002e:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  487. 002e:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  488. 002e:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  489. 002f:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  490. 002f:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  491. 002f:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  492. 002f:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  493. 0030:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  494. 0030:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  495. 0030:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  496. 0030:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  497. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  498. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  499. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  500. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  501. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  502. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  503. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  504. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  505. 0017:trace:module:LdrShutdownThread ()
  506. 0017:trace:module:MODULE_InitDLL (0x7f5235510000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  507. 0017:trace:module:MODULE_InitDLL (0x7f5235510000,THREAD_DETACH,(nil)) - RETURN 1
  508. 0017:trace:module:MODULE_InitDLL (0x7f52355b0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  509. 0017:trace:module:MODULE_InitDLL (0x7f52355b0000,THREAD_DETACH,(nil)) - RETURN 1
  510. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_ATTACH,(nil)) - CALL
  511. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_ATTACH,(nil)) - RETURN 1
  512. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
  513. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_ATTACH,(nil)) - RETURN 1
  514. 0025:trace:module:LdrShutdownThread ()
  515. 0025:trace:module:MODULE_InitDLL (0x7f1c4f9b0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  516. 0025:trace:module:MODULE_InitDLL (0x7f1c4f9b0000,THREAD_DETACH,(nil)) - RETURN 1
  517. 0025:trace:module:MODULE_InitDLL (0x7f1c4fa60000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  518. 0025:trace:module:MODULE_InitDLL (0x7f1c4fa60000,THREAD_DETACH,(nil)) - RETURN 1
  519. 0022:trace:module:LdrShutdownProcess ()
  520. 0022:trace:module:MODULE_InitDLL (0x7f1c4f450000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  521. 0022:trace:module:MODULE_InitDLL (0x7f1c4f450000,PROCESS_DETACH,0x1) - RETURN 1
  522. 0022:trace:module:MODULE_InitDLL (0x7f1c4f960000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  523. 0022:trace:module:MODULE_InitDLL (0x7f1c4f960000,PROCESS_DETACH,0x1) - RETURN 1
  524. 0022:trace:module:MODULE_InitDLL (0x7f1c4f9b0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  525. 0022:trace:module:MODULE_InitDLL (0x7f1c4f9b0000,PROCESS_DETACH,0x1) - RETURN 1
  526. 0022:trace:module:MODULE_InitDLL (0x7f1c4fb50000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
  527. 0022:trace:module:MODULE_InitDLL (0x7f1c4fb50000,PROCESS_DETACH,0x1) - RETURN 1
  528. 0022:trace:module:MODULE_InitDLL (0x7f1c4fa60000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  529. 0022:trace:module:MODULE_InitDLL (0x7f1c4fa60000,PROCESS_DETACH,0x1) - RETURN 1
  530. 0022:trace:module:MODULE_InitDLL (0x7f1c4fbb0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  531. 0022:trace:module:MODULE_InitDLL (0x7f1c4fbb0000,PROCESS_DETACH,0x1) - RETURN 1
  532. 0022:trace:module:MODULE_InitDLL (0x7f1c4fd50000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  533. 0022:trace:module:MODULE_InitDLL (0x7f1c4fd50000,PROCESS_DETACH,0x1) - RETURN 1
  534. 0022:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  535. 0022:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  536. 0022:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  537. 0022:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  538. 0012:trace:module:LdrShutdownProcess ()
  539. 0012:trace:module:MODULE_InitDLL (0x7f5235510000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  540. 0012:trace:module:MODULE_InitDLL (0x7f5235510000,PROCESS_DETACH,0x1) - RETURN 1
  541. 0012:trace:module:MODULE_InitDLL (0x7f52355b0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  542. 0012:trace:module:MODULE_InitDLL (0x7f52355b0000,PROCESS_DETACH,0x1) - RETURN 1
  543. 0012:trace:module:MODULE_InitDLL (0x7f52356a0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  544. 0012:trace:module:MODULE_InitDLL (0x7f52356a0000,PROCESS_DETACH,0x1) - RETURN 1
  545. 0012:trace:module:MODULE_InitDLL (0x7f5235840000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  546. 0012:trace:module:MODULE_InitDLL (0x7f5235840000,PROCESS_DETACH,0x1) - RETURN 1
  547. 0012:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  548. 0012:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  549. 0012:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  550. 0012:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  551. 0031:trace:module:LdrShutdownThread ()
  552. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  553. 0031:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  554. 0032:trace:module:LdrShutdownThread ()
  555. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  556. 0031:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  557. 0013:trace:module:LdrShutdownThread ()
  558. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  559. 0032:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  560. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  561. 0032:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  562. 0013:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  563. 0013:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  564. 0013:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  565. 0013:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  566. 0023:trace:module:LdrShutdownThread ()
  567. 0023:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  568. 0023:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  569. 0023:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  570. 0023:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  571. 001d:trace:module:LdrShutdownThread ()
  572. 001d:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
  573. 001d:trace:module:MODULE_InitDLL (0x7f11bd140000,THREAD_DETACH,(nil)) - RETURN 1
  574. 001d:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
  575. 001d:trace:module:MODULE_InitDLL (0x7f11bdb60000,THREAD_DETACH,(nil)) - RETURN 1
  576. 001d:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  577. 001d:trace:module:MODULE_InitDLL (0x7f11bdf40000,THREAD_DETACH,(nil)) - RETURN 1
  578. 001d:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  579. 001d:trace:module:MODULE_InitDLL (0x7f11bdfe0000,THREAD_DETACH,(nil)) - RETURN 1
  580. 001c:trace:module:LdrUnloadDll (0x7f11bdef0000)
  581. 001c:trace:module:LdrUnloadDll (L"winehid.sys") - START
  582. 001c:trace:module:MODULE_DecRefCount (L"winehid.sys") ldr.LoadCount: 0
  583. 001c:trace:module:MODULE_DecRefCount (L"hidclass.sys") ldr.LoadCount: 0
  584. 001c:trace:module:MODULE_InitDLL (0x7f11bddf0000 L"hidclass.sys",PROCESS_DETACH,(nil)) - CALL
  585. 001c:trace:module:MODULE_InitDLL (0x7f11bddf0000,PROCESS_DETACH,(nil)) - RETURN 1
  586. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\drivers\\winehid.sys"
  587. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\hidclass.sys"
  588. 001c:trace:module:LdrUnloadDll (0x7f11bde20000)
  589. 001c:trace:module:LdrUnloadDll (L"setupapi.dll") - START
  590. 001c:trace:module:MODULE_DecRefCount (L"setupapi.dll") ldr.LoadCount: 2
  591. 001c:trace:module:LdrUnloadDll END
  592. 001c:trace:module:LdrUnloadDll (0x7f11bded0000)
  593. 001c:trace:module:LdrUnloadDll (L"hid.dll") - START
  594. 001c:trace:module:MODULE_DecRefCount (L"hid.dll") ldr.LoadCount: 0
  595. 001c:trace:module:LdrUnloadDll END
  596. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\hid.dll"
  597. 001c:trace:module:LdrUnloadDll END
  598. 001c:trace:module:LdrUnloadDll (0x7f11bdf00000)
  599. 001c:trace:module:LdrUnloadDll (L"winebus.sys") - START
  600. 001c:trace:module:MODULE_DecRefCount (L"winebus.sys") ldr.LoadCount: 0
  601. 001c:trace:module:MODULE_DecRefCount (L"setupapi.dll") ldr.LoadCount: 1
  602. 001c:trace:module:free_modref unloading L"C:\\windows\\system32\\drivers\\winebus.sys"
  603. 001c:trace:module:LdrUnloadDll END
  604. 001c:trace:module:LdrShutdownThread ()
  605. 001c:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
  606. 001c:trace:module:MODULE_InitDLL (0x7f11bd140000,THREAD_DETACH,(nil)) - RETURN 1
  607. 001c:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
  608. 001c:trace:module:MODULE_InitDLL (0x7f11bdb60000,THREAD_DETACH,(nil)) - RETURN 1
  609. 001c:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  610. 001c:trace:module:MODULE_InitDLL (0x7f11bdf40000,THREAD_DETACH,(nil)) - RETURN 1
  611. 001c:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  612. 001c:trace:module:MODULE_InitDLL (0x7f11bdfe0000,THREAD_DETACH,(nil)) - RETURN 1
  613. 0019:trace:module:LdrShutdownProcess ()
  614. 0019:trace:module:MODULE_InitDLL (0x7f11bd140000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
  615. 0019:trace:module:MODULE_InitDLL (0x7f11bd140000,PROCESS_DETACH,0x1) - RETURN 1
  616. 0019:trace:module:MODULE_InitDLL (0x7f11bdb60000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
  617. 0019:trace:module:MODULE_InitDLL (0x7f11bdb60000,PROCESS_DETACH,0x1) - RETURN 1
  618. 0019:trace:module:MODULE_InitDLL (0x7f11bd9a0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
  619. 0019:trace:module:MODULE_InitDLL (0x7f11bd9a0000,PROCESS_DETACH,0x1) - RETURN 1
  620. 0019:trace:module:MODULE_InitDLL (0x7f11bde20000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
  621. 0019:trace:module:MODULE_InitDLL (0x7f11bde20000,PROCESS_DETACH,0x1) - RETURN 1
  622. 0019:trace:module:MODULE_InitDLL (0x7f11bde00000 L"version.dll",PROCESS_DETACH,0x1) - CALL
  623. 0019:trace:module:MODULE_InitDLL (0x7f11bde00000,PROCESS_DETACH,0x1) - RETURN 1
  624. 0019:trace:module:MODULE_InitDLL (0x7f11bdf40000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
  625. 0019:trace:module:MODULE_InitDLL (0x7f11bdf40000,PROCESS_DETACH,0x1) - RETURN 1
  626. 0019:trace:module:MODULE_InitDLL (0x7f11be0d0000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
  627. 0019:trace:module:MODULE_InitDLL (0x7f11be0d0000,PROCESS_DETACH,0x1) - RETURN 1
  628. 0019:trace:module:MODULE_InitDLL (0x7f11bdfe0000 L"msvcrt.dll",PROCESS_DETACH,0x1) - CALL
  629. 0019:trace:module:MODULE_InitDLL (0x7f11bdfe0000,PROCESS_DETACH,0x1) - RETURN 1
  630. 0019:trace:module:MODULE_InitDLL (0x7f11be140000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
  631. 0019:trace:module:MODULE_InitDLL (0x7f11be140000,PROCESS_DETACH,0x1) - RETURN 1
  632. 0019:trace:module:MODULE_InitDLL (0x7f11be2e0000 L"kernelbase.dll",PROCESS_DETACH,0x1) - CALL
  633. 0019:trace:module:MODULE_InitDLL (0x7f11be2e0000,PROCESS_DETACH,0x1) - RETURN 1
  634. 0019:trace:module:MODULE_InitDLL (0x7b420000 L"kernel32.dll",PROCESS_DETACH,0x1) - CALL
  635. 0019:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
  636. 0019:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
  637. 0019:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
  638. 001a:trace:module:LdrShutdownThread ()
  639. 001a:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  640. 001a:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  641. 001a:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  642. 001a:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  643. 0033:trace:module:LdrShutdownThread ()
  644. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  645. 0033:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  646. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  647. 0033:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  648. 0010:trace:module:LdrShutdownThread ()
  649. 0010:trace:module:MODULE_InitDLL (0x7ff8ccda0000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
  650. 0010:trace:module:MODULE_InitDLL (0x7ff8ccda0000,THREAD_DETACH,(nil)) - RETURN 1
  651. 0010:trace:module:MODULE_InitDLL (0x7ff8ccc20000 L"msvcrt.dll",THREAD_DETACH,(nil)) - CALL
  652. 0010:trace:module:MODULE_InitDLL (0x7ff8ccc20000,THREAD_DETACH,(nil)) - RETURN 1
  653. 000f:trace:module:LdrShutdownProcess ()
  654. ^C
  655. [retkid@retkid ~]$
RAW Paste Data