Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ======================
- Proton: 1555612643 proton-4.2-3b
- SteamGameId: 359390
- Command: ['/home/marko/.local/share/Steam/steamapps/common/Amnesia/amnesia.exe']
- ======================
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored.
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored.
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87521.795:0008:0009:trace:module:load_builtin_callback loaded ntdll.dll 0x110b98 0x7bc10000
- 87521.795:0008:0009:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87521.795:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L""
- 87521.795:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=2
- 87521.795:0008:0009:trace:module:load_builtin_callback loaded KERNEL32.dll 0x110ca8 0x7b420000
- 87521.795:0008:0009:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path (null))
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87521.816:000a:000b:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87521.816:000a:000b:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87521.816:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L""
- 87521.816:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87521.816:000a:000b:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87521.817:000a:000b:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"")
- 87521.817:000a:000b:trace:module:load_dll looking for L"C:\\windows\\system32\\wineboot.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.817:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x1000b000
- 87521.817:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87521.817:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.817:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.817:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.817:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 7330 virt 8000 flags 40000040
- 87521.818:000a:000b:trace:module:map_image clearing 0x1000a400 - 0x1000b000
- 87521.818:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\wineboot.exe"
- 87521.818:000a:000b:trace:module:get_load_order got hardcoded default for L"wineboot.exe"
- 87521.818:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\wineboot.exe" is a fake Wine dll
- 87521.818:000a:000b:trace:module:load_builtin_dll Trying built-in L"wineboot.exe"
- 87521.818:000a:000b:trace:module:load_builtin_callback loaded wineboot.exe 0x11750 0x7fc742920000
- 87521.818:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\wineboot.exe" (builtin) at 0x7fc742920000
- 87521.819:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.819:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87521.820:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.820:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.820:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.820:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.820:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87521.820:000a:000b:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87521.820:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87521.820:000a:000b:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87521.820:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87521.820:000a:000b:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87521.820:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.820:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87521.820:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.820:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87521.820:000a:000b:trace:module:load_builtin_callback loaded advapi32.dll 0x112f0 0x7fc742790000
- 87521.820:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7fc742790000
- 87521.820:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.820:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87521.820:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.820:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=4
- 87521.820:000a:000b:trace:module:process_attach (L"wineboot.exe",0x22fb00) - START
- 87521.820:000a:000b:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87521.820:000a:000b:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87521.820:000a:000b:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87521.820:000a:000b:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.820:000a:000b:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.820:000a:000b:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87521.820:000a:000b:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.824:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87521.824:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87521.824:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.824:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.825:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.825:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.825:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.825:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.825:000a:000b:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.825:000a:000b:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87521.825:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.825:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.825:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.825:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.825:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.825:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.825:000a:000b:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.825:000a:000b:trace:module:LdrUnloadDll (0x7fc742790000)
- 87521.825:000a:000b:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87521.825:000a:000b:trace:module:LdrUnloadDll END
- 87521.825:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87521.825:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87521.826:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.826:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.826:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.826:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.826:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.826:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.826:000a:000b:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.826:000a:000b:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87521.826:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.826:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.826:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.826:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.826:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.826:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.826:000a:000b:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.826:000a:000b:trace:module:LdrUnloadDll (0x7fc742790000)
- 87521.826:000a:000b:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87521.826:000a:000b:trace:module:LdrUnloadDll END
- 87521.826:000a:000b:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.826:000a:000b:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87521.826:000a:000b:trace:module:MODULE_InitDLL (0x7fc742790000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.826:000a:000b:trace:module:MODULE_InitDLL (0x7fc742790000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.827:000a:000b:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87521.827:000a:000b:trace:module:process_attach (L"wineboot.exe",0x22fb00) - END
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87521.987:000c:000d:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87521.987:000c:000d:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87521.987:000c:000d:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.987:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87521.987:000c:000d:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87521.987:000c:000d:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87521.988:000c:000d:trace:module:load_dll looking for L"C:\\windows\\system32\\services.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.988:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87521.988:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87521.988:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.988:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.988:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.988:000c:000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\services.exe"
- 87521.988:000c:000d:trace:module:get_load_order got hardcoded default for L"services.exe"
- 87521.988:000c:000d:trace:module:load_dll L"\\??\\C:\\windows\\system32\\services.exe" is a fake Wine dll
- 87521.988:000c:000d:trace:module:load_builtin_dll Trying built-in L"services.exe"
- 87521.988:000c:000d:trace:module:load_builtin_callback loaded services.exe 0x11740 0x7f49e5890000
- 87521.988:000c:000d:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\services.exe" (builtin) at 0x7f49e5890000
- 87521.989:000c:000d:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.989:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87521.989:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.989:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.989:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.989:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.989:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87521.989:000c:000d:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87521.989:000c:000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87521.989:000c:000d:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87521.989:000c:000d:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87521.989:000c:000d:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87521.989:000c:000d:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.989:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87521.989:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.989:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.989:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.989:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.989:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87521.989:000c:000d:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87521.989:000c:000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87521.990:000c:000d:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87521.990:000c:000d:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87521.990:000c:000d:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87521.990:000c:000d:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87521.990:000c:000d:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87521.990:000c:000d:trace:module:load_builtin_callback loaded advapi32.dll 0x12140 0x7f49e5670000
- 87521.990:000c:000d:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7f49e5670000
- 87521.990:000c:000d:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87521.990:000c:000d:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=4
- 87521.990:000c:000d:trace:module:load_builtin_callback loaded rpcrt4.dll 0x112e0 0x7f49e5700000
- 87521.990:000c:000d:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7f49e5700000
- 87521.990:000c:000d:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f49e5670000, count=2
- 87521.990:000c:000d:trace:module:load_dll looking for L"userenv.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87521.990:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.990:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.990:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.990:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.990:000c:000d:trace:module:get_load_order looking for L"C:\\windows\\system32\\userenv.dll"
- 87521.990:000c:000d:trace:module:get_load_order got hardcoded default for L"userenv.dll"
- 87521.990:000c:000d:trace:module:load_dll L"\\??\\C:\\windows\\system32\\userenv.dll" is a fake Wine dll
- 87521.990:000c:000d:trace:module:load_builtin_dll Trying built-in L"userenv.dll"
- 87521.990:000c:000d:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f49e5670000, count=3
- 87521.990:000c:000d:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87521.990:000c:000d:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=5
- 87521.990:000c:000d:trace:module:load_builtin_callback loaded userenv.dll 0x12320 0x7f49e5640000
- 87521.990:000c:000d:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\userenv.dll" (builtin) at 0x7f49e5640000
- 87521.990:000c:000d:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=5
- 87521.990:000c:000d:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87521.990:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=6
- 87521.990:000c:000d:trace:module:process_attach (L"services.exe",0x22fb00) - START
- 87521.990:000c:000d:trace:module:process_attach (L"rpcrt4.dll",0x22fb00) - START
- 87521.990:000c:000d:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87521.990:000c:000d:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87521.990:000c:000d:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87521.990:000c:000d:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.990:000c:000d:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.990:000c:000d:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87521.990:000c:000d:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.994:000c:000d:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87521.994:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f49e5670000, count=-1
- 87521.994:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.994:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.994:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.994:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.994:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.994:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.994:000c:000d:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.994:000c:000d:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87521.994:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.994:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.994:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.994:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.994:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.994:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.994:000c:000d:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.994:000c:000d:trace:module:LdrUnloadDll (0x7f49e5670000)
- 87521.994:000c:000d:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87521.994:000c:000d:trace:module:LdrUnloadDll END
- 87521.994:000c:000d:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87521.994:000c:000d:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f49e5670000, count=-1
- 87521.995:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.995:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.995:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.995:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.995:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.995:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.995:000c:000d:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.995:000c:000d:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87521.995:000c:000d:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87521.995:000c:000d:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87521.995:000c:000d:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87521.995:000c:000d:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87521.995:000c:000d:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87521.995:000c:000d:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87521.995:000c:000d:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87521.995:000c:000d:trace:module:LdrUnloadDll (0x7f49e5670000)
- 87521.995:000c:000d:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87521.995:000c:000d:trace:module:LdrUnloadDll END
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.995:000c:000d:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5670000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5670000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.995:000c:000d:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5700000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.995:000c:000d:trace:module:process_attach (L"rpcrt4.dll",0x22fb00) - END
- 87521.995:000c:000d:trace:module:process_attach (L"userenv.dll",0x22fb00) - START
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5640000 L"userenv.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87521.995:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5640000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87521.995:000c:000d:trace:module:process_attach (L"userenv.dll",0x22fb00) - END
- 87521.995:000c:000d:trace:module:process_attach (L"services.exe",0x22fb00) - END
- 87522.001:000c:000e:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.001:000c:000e:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.001:000c:000d:trace:module:GetBinaryTypeW L"C:\\windows\\system32\\drivers\\mountmgr.sys"
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87522.020:000f:0010:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87522.020:000f:0010:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87522.021:000f:0010:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.021:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87522.021:000f:0010:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87522.021:000f:0010:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.021:000f:0010:trace:module:load_dll looking for L"C:\\windows\\system32\\winedevice.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.021:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.021:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.021:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.021:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.022:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.022:000f:0010:trace:module:get_load_order looking for L"C:\\windows\\system32\\winedevice.exe"
- 87522.022:000f:0010:trace:module:get_load_order got hardcoded default for L"winedevice.exe"
- 87522.022:000f:0010:trace:module:load_dll L"\\??\\C:\\windows\\system32\\winedevice.exe" is a fake Wine dll
- 87522.022:000f:0010:trace:module:load_builtin_dll Trying built-in L"winedevice.exe"
- 87522.022:000f:0010:trace:module:load_builtin_callback loaded winedevice.exe 0x11fc0 0x7ff10a5f0000
- 87522.022:000f:0010:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\winedevice.exe" (builtin) at 0x7ff10a5f0000
- 87522.023:000f:0010:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.023:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.023:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.023:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.023:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.023:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.023:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.023:000f:0010:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.024:000f:0010:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.024:000f:0010:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.024:000f:0010:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.024:000f:0010:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.024:000f:0010:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87522.024:000f:0010:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87522.024:000f:0010:trace:module:load_builtin_callback loaded advapi32.dll 0x11b60 0x7ff10a470000
- 87522.024:000f:0010:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7ff10a470000
- 87522.024:000f:0010:trace:module:load_dll looking for L"ntoskrnl.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.024:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.024:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.024:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.024:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.024:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.024:000f:0010:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.024:000f:0010:trace:module:get_load_order looking for L"C:\\windows\\system32\\ntoskrnl.exe"
- 87522.024:000f:0010:trace:module:get_load_order got hardcoded default for L"ntoskrnl.exe"
- 87522.024:000f:0010:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ntoskrnl.exe" is a fake Wine dll
- 87522.024:000f:0010:trace:module:load_builtin_dll Trying built-in L"ntoskrnl.exe"
- 87522.024:000f:0010:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=2
- 87522.024:000f:0010:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.024:000f:0010:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=4
- 87522.024:000f:0010:trace:module:load_builtin_callback loaded ntoskrnl.exe 0x111a0 0x7ff10a400000
- 87522.024:000f:0010:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ntoskrnl.exe" (builtin) at 0x7ff10a400000
- 87522.024:000f:0010:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.024:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87522.024:000f:0010:trace:module:process_attach (L"winedevice.exe",0x22fb00) - START
- 87522.024:000f:0010:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87522.024:000f:0010:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87522.024:000f:0010:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87522.024:000f:0010:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.024:000f:0010:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.024:000f:0010:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87522.024:000f:0010:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.027:000f:0010:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.027:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.027:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.027:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.027:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.027:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.027:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.027:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.027:000f:0010:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.027:000f:0010:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.028:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.028:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.028:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.028:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.028:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.028:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.028:000f:0010:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.028:000f:0010:trace:module:LdrUnloadDll (0x7ff10a470000)
- 87522.028:000f:0010:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.028:000f:0010:trace:module:LdrUnloadDll END
- 87522.028:000f:0010:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.028:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.028:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.028:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.028:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.028:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.028:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.028:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.028:000f:0010:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.028:000f:0010:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.029:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.029:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.029:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.029:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.029:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.029:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.029:000f:0010:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.029:000f:0010:trace:module:LdrUnloadDll (0x7ff10a470000)
- 87522.029:000f:0010:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.029:000f:0010:trace:module:LdrUnloadDll END
- 87522.029:000f:0010:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.029:000f:0010:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87522.029:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a470000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.029:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a470000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.029:000f:0010:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87522.029:000f:0010:trace:module:process_attach (L"ntoskrnl.exe",0x22fb00) - START
- 87522.029:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a400000 L"ntoskrnl.exe",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.029:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a400000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.029:000f:0010:trace:module:process_attach (L"ntoskrnl.exe",0x22fb00) - END
- 87522.029:000f:0010:trace:module:process_attach (L"winedevice.exe",0x22fb00) - END
- 87522.029:000f:0010:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.029:000f:0010:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.029:000f:0010:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.029:000f:0010:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.029:000f:0010:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.029:000f:0010:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.029:000f:0010:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.029:000f:0010:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.029:000f:0010:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.029:000f:0010:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.029:000f:0010:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.029:000f:0010:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.030:000f:0010:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.030:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.030:000f:0010:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.030:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.030:000f:0010:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.030:000f:0010:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.030:000f:0010:trace:module:load_builtin_callback loaded rpcrt4.dll 0x116a0 0x7ff10a360000
- 87522.030:000f:0010:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7ff10a360000
- 87522.030:000f:0010:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.030:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.030:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a360000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.030:000f:0010:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.031:000c:0011:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.031:000c:0011:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.032:000c:0012:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.032:000c:0012:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.032:000c:0013:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.032:000c:0013:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.033:000f:0014:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.033:000f:0014:trace:module:MODULE_InitDLL (0x7ff10a360000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.049:000f:0015:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.049:000f:0015:trace:module:MODULE_InitDLL (0x7ff10a360000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.051:000c:0016:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.051:000c:0016:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.054:000f:0014:trace:module:load_dll looking for L"C:\\windows\\system32\\drivers\\mountmgr.sys" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.055:000f:0014:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.055:000f:0014:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.055:000f:0014:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.055:000f:0014:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.055:000f:0014:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.055:000f:0014:trace:module:get_load_order looking for L"C:\\windows\\system32\\drivers\\mountmgr.sys"
- 87522.055:000f:0014:trace:module:get_load_order got hardcoded default for L"C:\\windows\\system32\\drivers\\mountmgr.sys"
- 87522.055:000f:0014:trace:module:load_dll L"\\??\\C:\\windows\\system32\\drivers\\mountmgr.sys" is a fake Wine dll
- 87522.055:000f:0014:trace:module:load_builtin_dll Trying built-in L"mountmgr.sys"
- 87522.055:000f:0014:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.055:000f:0014:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.055:000f:0014:trace:module:load_dll looking for L"ntoskrnl.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.055:000f:0014:trace:module:load_dll Found L"C:\\windows\\system32\\ntoskrnl.exe" for L"ntoskrnl.exe" at 0x7ff10a400000, count=-1
- 87522.055:000f:0014:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.055:000f:0014:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.055:000f:0014:trace:module:load_builtin_callback loaded mountmgr.sys 0x14ed0 0x7ff10a340000
- 87522.055:000f:0014:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\drivers\\mountmgr.sys" (builtin) at 0x7ff10a340000
- 87522.055:000f:0014:trace:module:process_attach (L"mountmgr.sys",(nil)) - START
- 87522.055:000f:0014:trace:module:process_attach (L"mountmgr.sys",(nil)) - END
- 87522.058:000f:0017:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.058:000f:0017:trace:module:MODULE_InitDLL (0x7ff10a360000,THREAD_ATTACH,(nil)) - RETURN 1
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87522.064:000f:0017:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.065:000f:0017:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.065:000f:0017:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.065:000f:0017:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.065:000f:0017:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.065:000f:0017:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.065:000f:0017:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.065:000f:0017:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.065:000f:0017:trace:module:get_load_order looking for L"C:\\windows\\system32\\user32.dll"
- 87522.065:000f:0017:trace:module:get_load_order got hardcoded default for L"user32.dll"
- 87522.065:000f:0017:trace:module:load_dll L"\\??\\C:\\windows\\system32\\user32.dll" is a fake Wine dll
- 87522.065:000f:0017:trace:module:load_builtin_dll Trying built-in L"user32.dll"
- 87522.065:000f:0017:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.066:000f:0017:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.066:000f:0017:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.066:000f:0017:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.066:000f:0017:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.066:000f:0017:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.066:000f:0017:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.066:000f:0017:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.066:000f:0017:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.066:000f:0017:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.066:000f:0017:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.066:000f:0017:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.066:000f:0017:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.066:000f:0017:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.066:000f:0017:trace:module:load_builtin_callback loaded gdi32.dll 0x17d40 0x7ff109ae0000
- 87522.066:000f:0017:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7ff109ae0000
- 87522.066:000f:0017:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.066:000f:0017:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.066:000f:0017:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.066:000f:0017:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.066:000f:0017:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.066:000f:0017:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.066:000f:0017:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.066:000f:0017:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.066:000f:0017:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.066:000f:0017:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.066:000f:0017:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.066:000f:0017:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.066:000f:0017:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.066:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.066:000f:0017:trace:module:load_builtin_callback loaded version.dll 0x17f50 0x7ff109ac0000
- 87522.067:000f:0017:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7ff109ac0000
- 87522.067:000f:0017:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.067:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.067:000f:0017:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.067:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.067:000f:0017:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.067:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.067:000f:0017:trace:module:load_builtin_callback loaded user32.dll 0x17bd0 0x7ff109c70000
- 87522.067:000f:0017:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\user32.dll" (builtin) at 0x7ff109c70000
- 87522.067:000f:0017:trace:module:process_attach (L"user32.dll",(nil)) - START
- 87522.067:000f:0017:trace:module:process_attach (L"gdi32.dll",(nil)) - START
- 87522.067:000f:0017:trace:module:MODULE_InitDLL (0x7ff109ae0000 L"gdi32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.080:0018:0019:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87522.080:0018:0019:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87522.080:0018:0019:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.080:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87522.080:0018:0019:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87522.080:0018:0019:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.081:0018:0019:trace:module:load_dll looking for L"C:\\windows\\system32\\plugplay.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.081:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.081:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.081:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.081:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.081:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.081:0018:0019:trace:module:get_load_order looking for L"C:\\windows\\system32\\plugplay.exe"
- 87522.081:0018:0019:trace:module:get_load_order got hardcoded default for L"plugplay.exe"
- 87522.081:0018:0019:trace:module:load_dll L"\\??\\C:\\windows\\system32\\plugplay.exe" is a fake Wine dll
- 87522.081:0018:0019:trace:module:load_builtin_dll Trying built-in L"plugplay.exe"
- 87522.081:0018:0019:trace:module:load_builtin_callback loaded plugplay.exe 0x11fb0 0x7f940a960000
- 87522.081:0018:0019:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\plugplay.exe" (builtin) at 0x7f940a960000
- 87522.082:0018:0019:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.082:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.082:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.082:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.082:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.082:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.082:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.082:0018:0019:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.083:0018:0019:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.083:0018:0019:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.083:0018:0019:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.083:0018:0019:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.083:0018:0019:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.083:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87522.083:0018:0019:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.083:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87522.083:0018:0019:trace:module:load_builtin_callback loaded advapi32.dll 0x11b50 0x7f940a7e0000
- 87522.083:0018:0019:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7f940a7e0000
- 87522.083:0018:0019:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.083:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.083:0018:0019:trace:module:process_attach (L"plugplay.exe",0x22fb00) - START
- 87522.083:0018:0019:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87522.083:0018:0019:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87522.083:0018:0019:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87522.083:0018:0019:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.083:0018:0019:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.083:0018:0019:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87522.083:0018:0019:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.086:0018:0019:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.086:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f940a7e0000, count=-1
- 87522.086:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.086:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.086:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.086:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.086:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.086:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.086:0018:0019:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.087:0018:0019:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.087:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.087:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.087:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.087:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.087:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.087:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.087:0018:0019:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.087:0018:0019:trace:module:LdrUnloadDll (0x7f940a7e0000)
- 87522.087:0018:0019:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.087:0018:0019:trace:module:LdrUnloadDll END
- 87522.087:0018:0019:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.087:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f940a7e0000, count=-1
- 87522.087:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.087:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.087:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.087:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.087:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.087:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.087:0018:0019:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.087:0018:0019:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.087:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.087:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.087:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.087:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.088:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.088:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.088:0018:0019:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.088:0018:0019:trace:module:LdrUnloadDll (0x7f940a7e0000)
- 87522.088:0018:0019:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.088:0018:0019:trace:module:LdrUnloadDll END
- 87522.088:0018:0019:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.088:0018:0019:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87522.088:0018:0019:trace:module:MODULE_InitDLL (0x7f940a7e0000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.088:0018:0019:trace:module:MODULE_InitDLL (0x7f940a7e0000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.088:0018:0019:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87522.088:0018:0019:trace:module:process_attach (L"plugplay.exe",0x22fb00) - END
- 87522.088:0018:0019:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.088:0018:0019:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.088:0018:0019:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.088:0018:0019:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.088:0018:0019:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.088:0018:0019:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.088:0018:0019:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.088:0018:0019:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.088:0018:0019:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.088:0018:0019:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.088:0018:0019:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.088:0018:0019:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.088:0018:0019:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.088:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f940a7e0000, count=-1
- 87522.088:0018:0019:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.088:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.088:0018:0019:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.088:0018:0019:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.088:0018:0019:trace:module:load_builtin_callback loaded rpcrt4.dll 0x11450 0x7f940a740000
- 87522.088:0018:0019:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7f940a740000
- 87522.088:0018:0019:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.088:0018:0019:trace:module:MODULE_InitDLL (0x7f940a740000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.088:0018:0019:trace:module:MODULE_InitDLL (0x7f940a740000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.088:0018:0019:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.089:000c:001a:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.089:000c:001a:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.090:0018:001b:trace:module:MODULE_InitDLL (0x7f940a740000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.090:0018:001b:trace:module:MODULE_InitDLL (0x7f940a740000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.092:0018:001c:trace:module:MODULE_InitDLL (0x7f940a740000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.092:0018:001c:trace:module:MODULE_InitDLL (0x7f940a740000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.092:000c:000d:trace:module:GetBinaryTypeW L"C:\\windows\\system32\\drivers\\winebus.sys"
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- 87522.114:001d:001e:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87522.114:001d:001e:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87522.114:001d:001e:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.114:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87522.114:001d:001e:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87522.114:001d:001e:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.115:001d:001e:trace:module:load_dll looking for L"C:\\windows\\system32\\winedevice.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.115:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.115:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.115:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.115:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.115:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.115:001d:001e:trace:module:get_load_order looking for L"C:\\windows\\system32\\winedevice.exe"
- 87522.115:001d:001e:trace:module:get_load_order got hardcoded default for L"winedevice.exe"
- 87522.115:001d:001e:trace:module:load_dll L"\\??\\C:\\windows\\system32\\winedevice.exe" is a fake Wine dll
- 87522.115:001d:001e:trace:module:load_builtin_dll Trying built-in L"winedevice.exe"
- 87522.116:001d:001e:trace:module:load_builtin_callback loaded winedevice.exe 0x11fc0 0x7f6ef8b40000
- 87522.116:001d:001e:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\winedevice.exe" (builtin) at 0x7f6ef8b40000
- 87522.116:001d:001e:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.117:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.117:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.117:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.117:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.117:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.117:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.117:001d:001e:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.117:001d:001e:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.117:001d:001e:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.117:001d:001e:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.117:001d:001e:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.117:001d:001e:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.117:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87522.117:001d:001e:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.117:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87522.117:001d:001e:trace:module:load_builtin_callback loaded advapi32.dll 0x11b60 0x7f6ef89c0000
- 87522.117:001d:001e:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7f6ef89c0000
- 87522.117:001d:001e:trace:module:load_dll looking for L"ntoskrnl.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.117:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.117:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.117:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.117:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.117:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.117:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.117:001d:001e:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.117:001d:001e:trace:module:get_load_order looking for L"C:\\windows\\system32\\ntoskrnl.exe"
- 87522.117:001d:001e:trace:module:get_load_order got hardcoded default for L"ntoskrnl.exe"
- 87522.117:001d:001e:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ntoskrnl.exe" is a fake Wine dll
- 87522.117:001d:001e:trace:module:load_builtin_dll Trying built-in L"ntoskrnl.exe"
- 87522.118:001d:001e:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.118:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=2
- 87522.118:001d:001e:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.118:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.118:001d:001e:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.118:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=4
- 87522.118:001d:001e:trace:module:load_builtin_callback loaded ntoskrnl.exe 0x111a0 0x7f6ef8950000
- 87522.118:001d:001e:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ntoskrnl.exe" (builtin) at 0x7f6ef8950000
- 87522.118:001d:001e:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.118:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87522.118:001d:001e:trace:module:process_attach (L"winedevice.exe",0x22fb00) - START
- 87522.118:001d:001e:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87522.118:001d:001e:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87522.118:001d:001e:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87522.118:001d:001e:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.118:001d:001e:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.118:001d:001e:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87522.118:001d:001e:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.121:001d:001e:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.121:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.121:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.122:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.122:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.122:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.122:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.122:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.122:001d:001e:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.122:001d:001e:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.122:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.122:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.122:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.122:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.122:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.122:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.122:001d:001e:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.122:001d:001e:trace:module:LdrUnloadDll (0x7f6ef89c0000)
- 87522.122:001d:001e:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.122:001d:001e:trace:module:LdrUnloadDll END
- 87522.122:001d:001e:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.122:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.122:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.122:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.123:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.123:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.123:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.123:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.123:001d:001e:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.123:001d:001e:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.123:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.123:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.123:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.123:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.123:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.123:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.123:001d:001e:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.123:001d:001e:trace:module:LdrUnloadDll (0x7f6ef89c0000)
- 87522.123:001d:001e:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.123:001d:001e:trace:module:LdrUnloadDll END
- 87522.123:001d:001e:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.123:001d:001e:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87522.123:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef89c0000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.123:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef89c0000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.123:001d:001e:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87522.123:001d:001e:trace:module:process_attach (L"ntoskrnl.exe",0x22fb00) - START
- 87522.123:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8950000 L"ntoskrnl.exe",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.123:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8950000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.123:001d:001e:trace:module:process_attach (L"ntoskrnl.exe",0x22fb00) - END
- 87522.123:001d:001e:trace:module:process_attach (L"winedevice.exe",0x22fb00) - END
- 87522.124:001d:001e:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.124:001d:001e:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.124:001d:001e:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.124:001d:001e:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.124:001d:001e:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.124:001d:001e:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.124:001d:001e:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.124:001d:001e:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.124:001d:001e:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.124:001d:001e:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.124:001d:001e:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.124:001d:001e:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.124:001d:001e:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.124:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.124:001d:001e:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.124:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.124:001d:001e:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.124:001d:001e:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.124:001d:001e:trace:module:load_builtin_callback loaded rpcrt4.dll 0x116a0 0x7f6ef88b0000
- 87522.124:001d:001e:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7f6ef88b0000
- 87522.124:001d:001e:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.124:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef88b0000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.124:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef88b0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.124:001d:001e:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.125:000c:001f:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.125:000c:001f:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.126:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef88b0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.126:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef88b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.128:001d:0021:trace:module:MODULE_InitDLL (0x7f6ef88b0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.128:001d:0021:trace:module:MODULE_InitDLL (0x7f6ef88b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.131:000c:0022:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.131:000c:0022:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.135:001d:0020:trace:module:load_dll looking for L"C:\\windows\\system32\\drivers\\winebus.sys" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.136:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.136:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.136:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.136:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.136:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.136:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\drivers\\winebus.sys"
- 87522.136:001d:0020:trace:module:get_load_order got hardcoded default for L"C:\\windows\\system32\\drivers\\winebus.sys"
- 87522.136:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\drivers\\winebus.sys" is a fake Wine dll
- 87522.136:001d:0020:trace:module:load_builtin_dll Trying built-in L"winebus.sys"
- 87522.136:001d:0020:trace:module:load_dll looking for L"ntoskrnl.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.136:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntoskrnl.exe" for L"ntoskrnl.exe" at 0x7f6ef8950000, count=-1
- 87522.136:001d:0020:trace:module:load_dll looking for L"setupapi.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.136:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x1000f000
- 87522.136:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.136:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.136:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.136:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.136:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size b564 virt c000 flags 40000040
- 87522.136:001d:0020:trace:module:map_image clearing 0x1000e600 - 0x1000f000
- 87522.136:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\setupapi.dll"
- 87522.136:001d:0020:trace:module:get_load_order got hardcoded default for L"setupapi.dll"
- 87522.136:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\setupapi.dll" is a fake Wine dll
- 87522.136:001d:0020:trace:module:load_builtin_dll Trying built-in L"setupapi.dll"
- 87522.137:001d:0020:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.137:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.137:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.137:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.137:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.137:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.137:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.137:001d:0020:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.137:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\user32.dll"
- 87522.137:001d:0020:trace:module:get_load_order got hardcoded default for L"user32.dll"
- 87522.137:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\user32.dll" is a fake Wine dll
- 87522.137:001d:0020:trace:module:load_builtin_dll Trying built-in L"user32.dll"
- 87522.138:001d:0020:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.138:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.138:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.138:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.138:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.138:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.138:001d:0020:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.138:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.138:001d:0020:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.138:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.138:001d:0020:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.138:001d:0020:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.138:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.138:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.138:001d:0020:trace:module:load_builtin_callback loaded gdi32.dll 0x153b0 0x7f6ef8230000
- 87522.138:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7f6ef8230000
- 87522.138:001d:0020:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.138:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.138:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.138:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.138:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.138:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.138:001d:0020:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.138:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.138:001d:0020:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.138:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.138:001d:0020:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.138:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.138:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.138:001d:0020:trace:module:load_builtin_callback loaded version.dll 0x155c0 0x7f6ef8200000
- 87522.138:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7f6ef8200000
- 87522.138:001d:0020:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.138:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.138:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.139:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.139:001d:0020:trace:module:load_builtin_callback loaded user32.dll 0x15240 0x7f6ef83b0000
- 87522.139:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\user32.dll" (builtin) at 0x7f6ef83b0000
- 87522.139:001d:0020:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\version.dll" for L"version.dll" at 0x7f6ef8200000, count=2
- 87522.139:001d:0020:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.139:001d:0020:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7f6ef88b0000, count=2
- 87522.139:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.139:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.139:001d:0020:trace:module:load_builtin_callback loaded setupapi.dll 0x15000 0x7f6ef8600000
- 87522.139:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\setupapi.dll" (builtin) at 0x7f6ef8600000
- 87522.139:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.139:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.139:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.139:001d:0020:trace:module:load_builtin_callback loaded winebus.sys 0x14f40 0x7f6ef8890000
- 87522.139:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\drivers\\winebus.sys" (builtin) at 0x7f6ef8890000
- 87522.139:001d:0020:trace:module:process_attach (L"winebus.sys",(nil)) - START
- 87522.139:001d:0020:trace:module:process_attach (L"setupapi.dll",(nil)) - START
- 87522.139:001d:0020:trace:module:process_attach (L"user32.dll",(nil)) - START
- 87522.139:001d:0020:trace:module:process_attach (L"gdi32.dll",(nil)) - START
- 87522.139:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8230000 L"gdi32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.470:000f:0017:trace:module:MODULE_InitDLL (0x7ff109ae0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.470:000f:0017:trace:module:process_attach (L"gdi32.dll",(nil)) - END
- 87522.470:000f:0017:trace:module:process_attach (L"version.dll",(nil)) - START
- 87522.470:000f:0017:trace:module:MODULE_InitDLL (0x7ff109ac0000 L"version.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.470:000f:0017:trace:module:MODULE_InitDLL (0x7ff109ac0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.470:000f:0017:trace:module:process_attach (L"version.dll",(nil)) - END
- 87522.470:000f:0017:trace:module:MODULE_InitDLL (0x7ff109c70000 L"user32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.471:000f:0017:trace:module:LdrGetDllHandle L"gdi32" -> 0x7ff109ae0000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.471:000f:0017:trace:module:load_dll looking for L"imm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.471:000f:0017:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.471:000f:0017:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.471:000f:0017:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.471:000f:0017:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.471:000f:0017:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.471:000f:0017:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.471:000f:0017:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.471:000f:0017:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.471:000f:0017:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.471:000f:0017:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.471:000f:0017:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.472:000f:0017:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7ff109c70000, count=2
- 87522.472:000f:0017:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.472:000f:0017:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.472:000f:0017:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.472:000f:0017:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.472:000f:0017:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.472:000f:0017:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.472:000f:0017:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.472:000f:0017:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.472:000f:0017:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.472:000f:0017:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.472:000f:0017:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.472:000f:0017:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.472:000f:0017:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7ff10a470000, count=-1
- 87522.472:000f:0017:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7ff109c70000, count=3
- 87522.472:000f:0017:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.472:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7ff109ae0000, count=2
- 87522.473:000f:0017:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.473:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7ff10a360000, count=2
- 87522.473:000f:0017:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.473:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.473:000f:0017:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.473:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.473:000f:0017:trace:module:load_builtin_callback loaded ole32.dll 0x40400 0x7ff109240000
- 87522.473:000f:0017:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7ff109240000
- 87522.473:000f:0017:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.473:000f:0017:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.473:000f:0017:trace:module:load_builtin_callback loaded imm32.dll 0x401f0 0x7ff1093c0000
- 87522.473:000f:0017:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7ff1093c0000
- 87522.473:000f:0017:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.473:000f:0017:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.473:000f:0017:trace:module:MODULE_InitDLL (0x7ff109240000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.473:000f:0017:trace:module:MODULE_InitDLL (0x7ff109240000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.473:000f:0017:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.473:000f:0017:trace:module:MODULE_InitDLL (0x7ff1093c0000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.473:000f:0017:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7ff1093c0000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.473:000f:0017:trace:module:MODULE_InitDLL (0x7ff1093c0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.473:000f:0017:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.473:000f:0017:trace:module:MODULE_InitDLL (0x7ff109c70000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.473:000f:0017:trace:module:process_attach (L"user32.dll",(nil)) - END
- 87522.536:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8230000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.536:001d:0020:trace:module:process_attach (L"gdi32.dll",(nil)) - END
- 87522.536:001d:0020:trace:module:process_attach (L"version.dll",(nil)) - START
- 87522.536:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8200000 L"version.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.536:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8200000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.536:001d:0020:trace:module:process_attach (L"version.dll",(nil)) - END
- 87522.536:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef83b0000 L"user32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.537:001d:0020:trace:module:LdrGetDllHandle L"gdi32" -> 0x7f6ef8230000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.537:001d:0020:trace:module:load_dll looking for L"imm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.537:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.537:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.537:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.537:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.537:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.537:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.537:001d:0020:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.537:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.537:001d:0020:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.537:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.537:001d:0020:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.537:001d:0020:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.537:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f6ef83b0000, count=2
- 87522.537:001d:0020:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.537:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.537:001d:0020:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.538:001d:0020:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.538:001d:0020:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.538:001d:0020:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.538:001d:0020:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.538:001d:0020:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.538:001d:0020:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.538:001d:0020:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.538:001d:0020:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.538:001d:0020:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.538:001d:0020:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.538:001d:0020:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f6ef89c0000, count=-1
- 87522.538:001d:0020:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f6ef83b0000, count=3
- 87522.538:001d:0020:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f6ef8230000, count=2
- 87522.538:001d:0020:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7f6ef88b0000, count=3
- 87522.538:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.538:001d:0020:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.538:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.538:001d:0020:trace:module:load_builtin_callback loaded ole32.dll 0x3d760 0x7f6ef3980000
- 87522.539:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7f6ef3980000
- 87522.539:001d:0020:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.539:001d:0020:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.539:001d:0020:trace:module:load_builtin_callback loaded imm32.dll 0x3d550 0x7f6ef3b00000
- 87522.539:001d:0020:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7f6ef3b00000
- 87522.539:001d:0020:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.539:001d:0020:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef3980000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef3980000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.539:001d:0020:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef3b00000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.539:001d:0020:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7f6ef3b00000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef3b00000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.539:001d:0020:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef83b0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.539:001d:0020:trace:module:process_attach (L"user32.dll",(nil)) - END
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8600000 L"setupapi.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.539:001d:0020:trace:module:MODULE_InitDLL (0x7f6ef8600000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.539:001d:0020:trace:module:process_attach (L"setupapi.dll",(nil)) - END
- 87522.539:001d:0020:trace:module:process_attach (L"winebus.sys",(nil)) - END
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef88b0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef88b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef83b0000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef83b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef3980000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef3980000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef3b00000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.540:001d:0023:trace:module:MODULE_InitDLL (0x7f6ef3b00000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.562:000a:000b:trace:module:load_dll looking for L"shell32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.563:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x108d2000
- 87522.563:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.563:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.563:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.563:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.563:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 8ce7f8 virt 8cf000 flags 40000040
- 87522.567:000a:000b:trace:module:map_image clearing 0x108d1800 - 0x108d2000
- 87522.567:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\shell32.dll"
- 87522.567:000a:000b:trace:module:get_load_order got hardcoded default for L"shell32.dll"
- 87522.567:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shell32.dll" is a fake Wine dll
- 87522.567:000a:000b:trace:module:load_builtin_dll Trying built-in L"shell32.dll"
- 87522.567:000a:000b:trace:module:load_dll looking for L"shlwapi.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.568:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10008000
- 87522.568:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.568:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.568:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.568:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.568:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 4b58 virt 5000 flags 40000040
- 87522.568:000a:000b:trace:module:map_image clearing 0x10007c00 - 0x10008000
- 87522.568:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\shlwapi.dll"
- 87522.568:000a:000b:trace:module:get_load_order got hardcoded default for L"shlwapi.dll"
- 87522.568:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shlwapi.dll" is a fake Wine dll
- 87522.568:000a:000b:trace:module:load_builtin_dll Trying built-in L"shlwapi.dll"
- 87522.568:000a:000b:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.568:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.568:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.568:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.568:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.568:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.568:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.568:000a:000b:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.568:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\user32.dll"
- 87522.568:000a:000b:trace:module:get_load_order got hardcoded default for L"user32.dll"
- 87522.568:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\user32.dll" is a fake Wine dll
- 87522.568:000a:000b:trace:module:load_builtin_dll Trying built-in L"user32.dll"
- 87522.569:000a:000b:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.569:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.569:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.569:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.569:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.569:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.569:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.569:000a:000b:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.569:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.569:000a:000b:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.569:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.569:000a:000b:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.569:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.569:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.569:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.569:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.569:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.569:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.569:000a:000b:trace:module:load_builtin_callback loaded gdi32.dll 0x134b0 0x7fc741920000
- 87522.569:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7fc741920000
- 87522.569:000a:000b:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.569:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.569:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.569:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.569:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.569:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.569:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.569:000a:000b:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.570:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.570:000a:000b:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.570:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.570:000a:000b:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.570:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.570:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.570:000a:000b:trace:module:load_builtin_callback loaded version.dll 0x136c0 0x7fc7418f0000
- 87522.570:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7fc7418f0000
- 87522.570:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.570:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.570:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.570:000a:000b:trace:module:load_builtin_callback loaded user32.dll 0x132a0 0x7fc741ab0000
- 87522.570:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\user32.dll" (builtin) at 0x7fc741ab0000
- 87522.570:000a:000b:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7fc741920000, count=2
- 87522.570:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.570:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.570:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.570:000a:000b:trace:module:load_builtin_callback loaded shlwapi.dll 0x12700 0x7fc741d00000
- 87522.570:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shlwapi.dll" (builtin) at 0x7fc741d00000
- 87522.570:000a:000b:trace:module:find_forwarded_export delay loading L"shcore.dll" for 'shcore.SHCreateStreamOnFileW'
- 87522.570:000a:000b:trace:module:load_dll looking for L"shcore.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.570:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.570:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.570:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.570:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.570:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.570:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\shcore.dll"
- 87522.570:000a:000b:trace:module:get_load_order got hardcoded default for L"shcore.dll"
- 87522.570:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shcore.dll" is a fake Wine dll
- 87522.570:000a:000b:trace:module:load_builtin_dll Trying built-in L"shcore.dll"
- 87522.571:000a:000b:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.571:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7fc741ab0000, count=2
- 87522.571:000a:000b:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.571:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.571:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.571:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.571:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.571:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.571:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.571:000a:000b:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.571:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.571:000a:000b:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.571:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.571:000a:000b:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.571:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.571:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.571:000a:000b:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.571:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7fc741ab0000, count=3
- 87522.571:000a:000b:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.571:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7fc741920000, count=3
- 87522.571:000a:000b:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.572:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.572:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.572:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.572:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.572:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.572:000a:000b:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.572:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.572:000a:000b:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.572:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.572:000a:000b:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.572:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.572:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.572:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.572:000a:000b:trace:module:load_builtin_callback loaded rpcrt4.dll 0x13af0 0x7fc741690000
- 87522.572:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7fc741690000
- 87522.572:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.572:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.572:000a:000b:trace:module:load_builtin_callback loaded ole32.dll 0x13980 0x7fc741740000
- 87522.572:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7fc741740000
- 87522.572:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.572:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.572:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.572:000a:000b:trace:module:load_builtin_callback loaded shcore.dll 0x13860 0x7fc7418d0000
- 87522.572:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shcore.dll" (builtin) at 0x7fc7418d0000
- 87522.572:000a:000b:trace:module:process_attach (L"shcore.dll",(nil)) - START
- 87522.572:000a:000b:trace:module:process_attach (L"user32.dll",(nil)) - START
- 87522.572:000a:000b:trace:module:process_attach (L"gdi32.dll",(nil)) - START
- 87522.572:000a:000b:trace:module:MODULE_InitDLL (0x7fc741920000 L"gdi32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.652:000a:000b:trace:module:MODULE_InitDLL (0x7fc741920000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.652:000a:000b:trace:module:process_attach (L"gdi32.dll",(nil)) - END
- 87522.652:000a:000b:trace:module:process_attach (L"version.dll",(nil)) - START
- 87522.652:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418f0000 L"version.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.652:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418f0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.652:000a:000b:trace:module:process_attach (L"version.dll",(nil)) - END
- 87522.652:000a:000b:trace:module:MODULE_InitDLL (0x7fc741ab0000 L"user32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.652:000a:000b:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\wineboot.exe"
- 87522.652:000a:000b:trace:module:LdrGetDllHandle L"gdi32" -> 0x7fc741920000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.653:000a:000b:trace:module:load_dll looking for L"imm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.653:000a:000b:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.653:000a:000b:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.653:000a:000b:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.653:000a:000b:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.653:000a:000b:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.653:000a:000b:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.653:000a:000b:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.653:000a:000b:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.653:000a:000b:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.653:000a:000b:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.653:000a:000b:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.653:000a:000b:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.653:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7fc741ab0000, count=4
- 87522.653:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.653:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.653:000a:000b:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.653:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7fc741740000, count=2
- 87522.653:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.653:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.653:000a:000b:trace:module:load_builtin_callback loaded imm32.dll 0x3bb90 0x7fc740f90000
- 87522.653:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7fc740f90000
- 87522.653:000a:000b:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.653:000a:000b:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.653:000a:000b:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.653:000a:000b:trace:module:MODULE_InitDLL (0x7fc741690000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.653:000a:000b:trace:module:MODULE_InitDLL (0x7fc741690000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.653:000a:000b:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.653:000a:000b:trace:module:MODULE_InitDLL (0x7fc741740000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.653:000a:000b:trace:module:MODULE_InitDLL (0x7fc741740000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.653:000a:000b:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.653:000a:000b:trace:module:MODULE_InitDLL (0x7fc740f90000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.653:000a:000b:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7fc740f90000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc740f90000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.654:000a:000b:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc741ab0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.654:000a:000b:trace:module:process_attach (L"user32.dll",(nil)) - END
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418d0000 L"shcore.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418d0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.654:000a:000b:trace:module:process_attach (L"shcore.dll",(nil)) - END
- 87522.654:000a:000b:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7fc741ab0000, count=5
- 87522.654:000a:000b:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7fc741920000, count=4
- 87522.654:000a:000b:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7fc742790000, count=-1
- 87522.654:000a:000b:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.654:000a:000b:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.654:000a:000b:trace:module:load_builtin_callback loaded shell32.dll 0x12590 0x7fc741d90000
- 87522.654:000a:000b:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shell32.dll" (builtin) at 0x7fc741d90000
- 87522.654:000a:000b:trace:module:process_attach (L"shell32.dll",(nil)) - START
- 87522.654:000a:000b:trace:module:process_attach (L"shlwapi.dll",(nil)) - START
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d00000 L"shlwapi.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d00000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.654:000a:000b:trace:module:process_attach (L"shlwapi.dll",(nil)) - END
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d90000 L"shell32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.654:000a:000b:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\shell32.dll"
- 87522.654:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d90000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.654:000a:000b:trace:module:process_attach (L"shell32.dll",(nil)) - END
- 87522.654:000a:000b:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.654:000a:000b:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7fc741740000, count=3
- 87522.655:000a:000b:trace:module:LdrShutdownProcess ()
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d90000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d90000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d00000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741d00000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418d0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418d0000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc740f90000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc740f90000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741740000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741740000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741690000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741690000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741ab0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741ab0000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418f0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc7418f0000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741920000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc741920000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc742790000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7fc742790000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87522.655:000a:000b:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- 87522.657:0008:0009:trace:module:load_dll looking for L"C:\\windows\\system32\\steam.exe" in L"C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.658:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\steam.exe"
- 87522.658:0008:0009:trace:module:get_load_order_value got environment b for L"steam.exe"
- 87522.658:0008:0009:trace:module:load_builtin_dll Trying built-in L"steam.exe"
- 87522.658:0008:0009:trace:module:load_builtin_callback loaded steam.exe 0x111e38 0x7eb60000
- 87522.658:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\steam.exe" (builtin) at 0x7eb60000
- 87522.659:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.659:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.660:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.660:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.660:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.660:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.660:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.660:0008:0009:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.660:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.660:0008:0009:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.660:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.660:0008:0009:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.660:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.660:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87522.660:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.660:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=3
- 87522.660:0008:0009:trace:module:load_builtin_callback loaded advapi32.dll 0x111ab0 0x7eaa0000
- 87522.660:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7eaa0000
- 87522.660:0008:0009:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.660:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.660:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.660:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.660:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.660:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.660:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.661:0008:0009:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.661:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\user32.dll"
- 87522.661:0008:0009:trace:module:get_load_order got hardcoded default for L"user32.dll"
- 87522.661:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\user32.dll" is a fake Wine dll
- 87522.661:0008:0009:trace:module:load_builtin_dll Trying built-in L"user32.dll"
- 87522.661:0008:0009:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.662:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.662:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.662:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.662:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.662:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.662:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.662:0008:0009:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.662:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.662:0008:0009:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.662:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.662:0008:0009:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.662:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.662:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=2
- 87522.662:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.662:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.662:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.662:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=4
- 87522.662:0008:0009:trace:module:load_builtin_callback loaded gdi32.dll 0x110538 0x7e770000
- 87522.662:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7e770000
- 87522.662:0008:0009:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.662:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.663:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.663:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.663:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.663:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.663:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.663:0008:0009:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.663:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.663:0008:0009:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.663:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.663:0008:0009:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.663:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87522.663:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=5
- 87522.663:0008:0009:trace:module:load_builtin_callback loaded version.dll 0x1105f0 0x7e750000
- 87522.663:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7e750000
- 87522.663:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=3
- 87522.663:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=5
- 87522.663:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=6
- 87522.663:0008:0009:trace:module:load_builtin_callback loaded user32.dll 0x111bc0 0x7e8a0000
- 87522.663:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\user32.dll" (builtin) at 0x7e8a0000
- 87522.663:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=6
- 87522.663:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.663:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=7
- 87522.663:0008:0009:trace:module:process_attach (L"steam.exe",0x32fd24) - START
- 87522.663:0008:0009:trace:module:process_attach (L"advapi32.dll",0x32fd24) - START
- 87522.663:0008:0009:trace:module:process_attach (L"KERNEL32.dll",0x32fd24) - START
- 87522.663:0008:0009:trace:module:process_attach (L"ntdll.dll",0x32fd24) - START
- 87522.663:0008:0009:trace:module:MODULE_InitDLL (0x7bc10000 L"ntdll.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.663:0008:0009:trace:module:MODULE_InitDLL (0x7bc10000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.663:0008:0009:trace:module:process_attach (L"ntdll.dll",0x32fd24) - END
- 87522.663:0008:0009:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.668:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.668:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.668:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.668:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.668:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.668:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.668:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.668:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.668:0008:0009:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.668:0008:0009:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.669:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.669:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.669:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.669:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.669:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.669:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.669:0008:0009:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.669:0008:0009:trace:module:LdrUnloadDll (0x7eaa0000)
- 87522.669:0008:0009:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.669:0008:0009:trace:module:LdrUnloadDll END
- 87522.669:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.669:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.669:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.669:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.669:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.669:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.669:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.669:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.670:0008:0009:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.670:0008:0009:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.670:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.670:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.670:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.670:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.670:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.670:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.670:0008:0009:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.670:0008:0009:trace:module:LdrUnloadDll (0x7eaa0000)
- 87522.671:0008:0009:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.671:0008:0009:trace:module:LdrUnloadDll END
- 87522.671:0008:0009:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.671:0008:0009:trace:module:process_attach (L"KERNEL32.dll",0x32fd24) - END
- 87522.671:0008:0009:trace:module:MODULE_InitDLL (0x7eaa0000 L"advapi32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.671:0008:0009:trace:module:MODULE_InitDLL (0x7eaa0000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.671:0008:0009:trace:module:process_attach (L"advapi32.dll",0x32fd24) - END
- 87522.671:0008:0009:trace:module:process_attach (L"user32.dll",0x32fd24) - START
- 87522.671:0008:0009:trace:module:process_attach (L"gdi32.dll",0x32fd24) - START
- 87522.671:0008:0009:trace:module:MODULE_InitDLL (0x7e770000 L"gdi32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.758:0008:0009:trace:module:MODULE_InitDLL (0x7e770000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.758:0008:0009:trace:module:process_attach (L"gdi32.dll",0x32fd24) - END
- 87522.758:0008:0009:trace:module:process_attach (L"version.dll",0x32fd24) - START
- 87522.758:0008:0009:trace:module:MODULE_InitDLL (0x7e750000 L"version.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.758:0008:0009:trace:module:MODULE_InitDLL (0x7e750000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.758:0008:0009:trace:module:process_attach (L"version.dll",0x32fd24) - END
- 87522.758:0008:0009:trace:module:MODULE_InitDLL (0x7e8a0000 L"user32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.758:0008:0009:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\steam.exe"
- 87522.758:0008:0009:trace:module:LdrGetDllHandle L"gdi32" -> 0x7e770000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.759:0008:0009:trace:module:load_dll looking for L"imm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.759:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.759:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.759:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.759:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.759:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.759:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.759:0008:0009:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.759:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.759:0008:0009:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.759:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.759:0008:0009:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.759:0008:0009:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.759:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e8a0000, count=-1
- 87522.759:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.759:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.759:0008:0009:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.760:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.760:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.760:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.760:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.760:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.760:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.760:0008:0009:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.760:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.760:0008:0009:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.760:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.760:0008:0009:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.760:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.760:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.760:0008:0009:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.760:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e8a0000, count=-1
- 87522.760:0008:0009:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.760:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e770000, count=-1
- 87522.760:0008:0009:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.760:0008:0009:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.760:0008:0009:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.760:0008:0009:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.760:0008:0009:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.760:0008:0009:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.760:0008:0009:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.760:0008:0009:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.760:0008:0009:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.760:0008:0009:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.760:0008:0009:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.760:0008:0009:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.761:0008:0009:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.761:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.761:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87522.761:0008:0009:trace:module:load_builtin_callback loaded rpcrt4.dll 0x12d1c8 0x7e1d0000
- 87522.761:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7e1d0000
- 87522.761:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.761:0008:0009:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87522.761:0008:0009:trace:module:load_builtin_callback loaded ole32.dll 0x12d018 0x7dfa0000
- 87522.761:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7dfa0000
- 87522.761:0008:0009:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.761:0008:0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.761:0008:0009:trace:module:load_builtin_callback loaded imm32.dll 0x12ceb8 0x7e250000
- 87522.761:0008:0009:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7e250000
- 87522.761:0008:0009:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.761:0008:0009:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.761:0008:0009:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7e1d0000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7e1d0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.761:0008:0009:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7dfa0000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7dfa0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.761:0008:0009:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7e250000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.761:0008:0009:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7e250000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7e250000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.761:0008:0009:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.761:0008:0009:trace:module:MODULE_InitDLL (0x7e8a0000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.761:0008:0009:trace:module:process_attach (L"user32.dll",0x32fd24) - END
- 87522.761:0008:0009:trace:module:process_attach (L"steam.exe",0x32fd24) - END
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e8a0000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e8a0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e1d0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e1d0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7dfa0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7dfa0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e250000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.762:0008:0024:trace:module:MODULE_InitDLL (0x7e250000,THREAD_ATTACH,(nil)) - RETURN 1
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
- Setting breakpad minidump AppID = 359390
- Steam_SetMinidumpSteamID: Caching Steam ID: 76561198040958349 [API loaded no]
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored.
- 87522.787:0025:0026:trace:module:load_builtin_callback loaded ntdll.dll 0x10d80 0x7bc20000
- 87522.787:0025:0026:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87522.788:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.788:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=2
- 87522.788:0025:0026:trace:module:load_builtin_callback loaded KERNEL32.dll 0x10e90 0x7b420000
- 87522.788:0025:0026:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.788:0025:0026:trace:module:load_dll looking for L"C:\\windows\\system32\\explorer.exe" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.788:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10005000
- 87522.788:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 8 virt 1000 flags 60000020
- 87522.788:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.788:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.788:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.788:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 144c virt 2000 flags 40000040
- 87522.788:0025:0026:trace:module:map_image clearing 0x10004600 - 0x10005000
- 87522.789:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\explorer.exe"
- 87522.789:0025:0026:trace:module:get_load_order got hardcoded default for L"explorer.exe"
- 87522.789:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\explorer.exe" is a fake Wine dll
- 87522.789:0025:0026:trace:module:load_builtin_dll Trying built-in L"explorer.exe"
- 87522.793:0025:0026:trace:module:load_builtin_callback loaded explorer.exe 0x11760 0x7f9566470000
- 87522.793:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\explorer.exe" (builtin) at 0x7f9566470000
- 87522.793:0025:0026:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.793:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.793:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.793:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.793:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.793:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.793:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.793:0025:0026:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.794:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.794:0025:0026:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.794:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.794:0025:0026:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.794:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.794:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.794:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.794:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.794:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.794:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.794:0025:0026:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.794:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.794:0025:0026:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.794:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.794:0025:0026:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.794:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=2
- 87522.794:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=3
- 87522.794:0025:0026:trace:module:load_builtin_callback loaded advapi32.dll 0x12180 0x7f9566240000
- 87522.794:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7f9566240000
- 87522.794:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.794:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=4
- 87522.794:0025:0026:trace:module:load_builtin_callback loaded rpcrt4.dll 0x11300 0x7f95662d0000
- 87522.794:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7f95662d0000
- 87522.794:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.794:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.794:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.794:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.794:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.794:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.794:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.795:0025:0026:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.795:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\user32.dll"
- 87522.795:0025:0026:trace:module:get_load_order got hardcoded default for L"user32.dll"
- 87522.795:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\user32.dll" is a fake Wine dll
- 87522.795:0025:0026:trace:module:load_builtin_dll Trying built-in L"user32.dll"
- 87522.795:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.796:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.796:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.796:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.796:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.796:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.796:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.796:0025:0026:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.796:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.796:0025:0026:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.796:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.796:0025:0026:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.796:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.796:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=2
- 87522.796:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.796:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87522.796:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.796:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=5
- 87522.796:0025:0026:trace:module:load_builtin_callback loaded gdi32.dll 0x124d0 0x7f9565e60000
- 87522.796:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7f9565e60000
- 87522.796:0025:0026:trace:module:load_dll looking for L"version.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.796:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.796:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.796:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.796:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.796:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.796:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.796:0025:0026:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.796:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.797:0025:0026:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.797:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.797:0025:0026:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.797:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=5
- 87522.797:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=6
- 87522.797:0025:0026:trace:module:load_builtin_callback loaded version.dll 0x126e0 0x7f9565e40000
- 87522.797:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7f9565e40000
- 87522.797:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=3
- 87522.797:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=6
- 87522.797:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=7
- 87522.797:0025:0026:trace:module:load_builtin_callback loaded user32.dll 0x12360 0x7f9565ff0000
- 87522.797:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\user32.dll" (builtin) at 0x7f9565ff0000
- 87522.797:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=2
- 87522.797:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=4
- 87522.797:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.797:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=7
- 87522.797:0025:0026:trace:module:process_attach (L"explorer.exe",0x22fb00) - START
- 87522.797:0025:0026:trace:module:process_attach (L"rpcrt4.dll",0x22fb00) - START
- 87522.797:0025:0026:trace:module:process_attach (L"advapi32.dll",0x22fb00) - START
- 87522.797:0025:0026:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - START
- 87522.797:0025:0026:trace:module:process_attach (L"ntdll.dll",0x22fb00) - START
- 87522.797:0025:0026:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.797:0025:0026:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.797:0025:0026:trace:module:process_attach (L"ntdll.dll",0x22fb00) - END
- 87522.797:0025:0026:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.800:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.800:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.800:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.800:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.800:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.800:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.801:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.801:0025:0026:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.801:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.801:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.801:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.801:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.801:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.801:0025:0026:trace:module:LdrUnloadDll (0x7f9566240000)
- 87522.801:0025:0026:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.801:0025:0026:trace:module:LdrUnloadDll END
- 87522.801:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.801:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.801:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.801:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.801:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.801:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.801:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.801:0025:0026:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.802:0025:0026:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.802:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.802:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.802:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.802:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.802:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.802:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.802:0025:0026:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.802:0025:0026:trace:module:LdrUnloadDll (0x7f9566240000)
- 87522.802:0025:0026:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.802:0025:0026:trace:module:LdrUnloadDll END
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.802:0025:0026:trace:module:process_attach (L"KERNEL32.dll",0x22fb00) - END
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7f9566240000 L"advapi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7f9566240000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.802:0025:0026:trace:module:process_attach (L"advapi32.dll",0x22fb00) - END
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7f95662d0000 L"rpcrt4.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7f95662d0000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.802:0025:0026:trace:module:process_attach (L"rpcrt4.dll",0x22fb00) - END
- 87522.802:0025:0026:trace:module:process_attach (L"user32.dll",0x22fb00) - START
- 87522.802:0025:0026:trace:module:process_attach (L"gdi32.dll",0x22fb00) - START
- 87522.802:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e60000 L"gdi32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.805:0027:0028:trace:module:load_builtin_callback loaded ntdll.dll 0x1106f8 0x7bc10000
- 87522.805:0027:0028:trace:module:load_builtin_dll Trying built-in L"kernel32.dll"
- 87522.805:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.805:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=2
- 87522.805:0027:0028:trace:module:load_builtin_callback loaded KERNEL32.dll 0x110808 0x7b420000
- 87522.805:0027:0028:trace:module:LdrGetDllHandle L"kernel32" -> 0x7b420000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.806:0027:0028:trace:module:load_dll looking for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.806:0027:0028:trace:module:map_image mapped PE file at 0x400000-0x894000
- 87522.806:0027:0028:trace:module:map_image mapping section .text at 0x401000 off 400 size 2a1a00 virt 2a18d2 flags 60000020
- 87522.807:0027:0028:trace:module:map_image clearing 0x6a2a00 - 0x6a3000
- 87522.807:0027:0028:trace:module:map_image mapping section .rdata at 0x6a3000 off 2a1e00 size 1b8c00 virt 1b8a38 flags 40000040
- 87522.808:0027:0028:trace:module:map_image clearing 0x85bc00 - 0x85c000
- 87522.808:0027:0028:trace:module:map_image mapping section .data at 0x85c000 off 45aa00 size 18a00 virt 1c0e4 flags c0000040
- 87522.808:0027:0028:trace:module:map_image clearing 0x874a00 - 0x875000
- 87522.808:0027:0028:trace:module:map_image mapping section .tls at 0x879000 off 473400 size 200 virt 2 flags c0000040
- 87522.808:0027:0028:trace:module:map_image clearing 0x879200 - 0x87a000
- 87522.808:0027:0028:trace:module:map_image mapping section .rsrc at 0x87a000 off 473600 size 19400 virt 192d0 flags 40000040
- 87522.808:0027:0028:trace:module:map_image clearing 0x893400 - 0x894000
- 87522.808:0027:0028:trace:module:get_load_order looking for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.808:0027:0028:trace:module:get_load_order got main exe default n,b for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.808:0027:0028:trace:module:load_native_dll Trying native dll L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.808:0027:0028:warn:module:alloc_module disabling no-exec because of L"amnesia.exe"
- 87522.808:0027:0028:trace:module:set_security_cookie initializing security cookie 0x85df68
- 87522.808:0027:0028:trace:module:load_dll Loaded module L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe" (native) at 0x400000
- 87522.809:0027:0028:trace:module:alloc_tls_slot module 0x400000 data 0x879000-0x879001 zerofill 0 index 0x874c74 callback 0x79bdd8 flags 0 -> slot 0
- 87522.809:0027:0028:trace:module:load_dll looking for L"KERNEL32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.809:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"KERNEL32.dll" at 0x7b420000, count=2
- 87522.809:0027:0028:trace:module:load_dll looking for L"USER32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.809:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x100e2000
- 87522.809:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.810:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.810:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.810:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.810:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size de548 virt df000 flags 40000040
- 87522.810:0027:0028:trace:module:map_image clearing 0x100e1600 - 0x100e2000
- 87522.810:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\USER32.dll"
- 87522.810:0027:0028:trace:module:get_load_order got hardcoded default for L"USER32.dll"
- 87522.810:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\USER32.dll" is a fake Wine dll
- 87522.810:0027:0028:trace:module:load_builtin_dll Trying built-in L"USER32.dll"
- 87522.810:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10007000
- 87522.811:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.811:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.811:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.811:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.811:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ca0 virt 4000 flags 40000040
- 87522.811:0027:0028:trace:module:map_image clearing 0x10006e00 - 0x10007000
- 87522.811:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\gdi32.dll"
- 87522.811:0027:0028:trace:module:get_load_order got hardcoded default for L"gdi32.dll"
- 87522.811:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\gdi32.dll" is a fake Wine dll
- 87522.811:0027:0028:trace:module:load_builtin_dll Trying built-in L"gdi32.dll"
- 87522.811:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.811:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.811:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.811:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.811:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.811:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b8 virt 1000 flags 40000040
- 87522.811:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.811:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\advapi32.dll"
- 87522.811:0027:0028:trace:module:get_load_order got hardcoded default for L"advapi32.dll"
- 87522.811:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\advapi32.dll" is a fake Wine dll
- 87522.811:0027:0028:trace:module:load_builtin_dll Trying built-in L"advapi32.dll"
- 87522.811:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=3
- 87522.811:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=3
- 87522.811:0027:0028:trace:module:load_builtin_callback loaded advapi32.dll 0x1120e0 0x7e7e0000
- 87522.811:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\advapi32.dll" (builtin) at 0x7e7e0000
- 87522.811:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=4
- 87522.811:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.811:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=4
- 87522.811:0027:0028:trace:module:load_builtin_callback loaded gdi32.dll 0x111fd0 0x7e850000
- 87522.811:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\gdi32.dll" (builtin) at 0x7e850000
- 87522.812:0027:0028:trace:module:load_dll looking for L"version.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.812:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.812:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.812:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.812:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.812:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3b4 virt 1000 flags 40000040
- 87522.812:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.812:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\version.dll"
- 87522.812:0027:0028:trace:module:get_load_order got hardcoded default for L"version.dll"
- 87522.812:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\version.dll" is a fake Wine dll
- 87522.812:0027:0028:trace:module:load_builtin_dll Trying built-in L"version.dll"
- 87522.812:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=5
- 87522.812:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=5
- 87522.812:0027:0028:trace:module:load_builtin_callback loaded version.dll 0x1121a0 0x7e7b0000
- 87522.812:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\version.dll" (builtin) at 0x7e7b0000
- 87522.812:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=2
- 87522.812:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=6
- 87522.812:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=6
- 87522.812:0027:0028:trace:module:load_builtin_callback loaded user32.dll 0x111ec8 0x7e980000
- 87522.812:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\USER32.dll" (builtin) at 0x7e980000
- 87522.812:0027:0028:trace:module:load_dll looking for L"GDI32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.812:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"GDI32.dll" at 0x7e850000, count=2
- 87522.812:0027:0028:trace:module:load_dll looking for L"SHELL32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.813:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x108d2000
- 87522.813:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.813:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.813:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.813:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.813:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 8ce7f8 virt 8cf000 flags 40000040
- 87522.817:0027:0028:trace:module:map_image clearing 0x108d1800 - 0x108d2000
- 87522.817:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\SHELL32.dll"
- 87522.817:0027:0028:trace:module:get_load_order got hardcoded default for L"SHELL32.dll"
- 87522.817:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\SHELL32.dll" is a fake Wine dll
- 87522.818:0027:0028:trace:module:load_builtin_dll Trying built-in L"SHELL32.dll"
- 87522.818:0027:0028:trace:module:load_dll looking for L"shlwapi.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.818:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10008000
- 87522.818:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.818:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.818:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.818:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.818:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 4b58 virt 5000 flags 40000040
- 87522.818:0027:0028:trace:module:map_image clearing 0x10007c00 - 0x10008000
- 87522.818:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\shlwapi.dll"
- 87522.818:0027:0028:trace:module:get_load_order got hardcoded default for L"shlwapi.dll"
- 87522.818:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shlwapi.dll" is a fake Wine dll
- 87522.818:0027:0028:trace:module:load_builtin_dll Trying built-in L"shlwapi.dll"
- 87522.819:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=2
- 87522.819:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=3
- 87522.819:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=3
- 87522.819:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=7
- 87522.819:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=7
- 87522.819:0027:0028:trace:module:load_builtin_callback loaded shlwapi.dll 0x112318 0x7e750000
- 87522.819:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shlwapi.dll" (builtin) at 0x7e750000
- 87522.819:0027:0028:trace:module:find_forwarded_export delay loading L"shcore.dll" for 'shcore.SHCreateStreamOnFileW'
- 87522.819:0027:0028:trace:module:load_dll looking for L"shcore.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.819:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.819:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.819:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.819:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.819:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\shcore.dll"
- 87522.819:0027:0028:trace:module:get_load_order got hardcoded default for L"shcore.dll"
- 87522.819:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shcore.dll" is a fake Wine dll
- 87522.819:0027:0028:trace:module:load_builtin_dll Trying built-in L"shcore.dll"
- 87522.819:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=3
- 87522.819:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.819:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.819:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.819:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.819:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.819:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.819:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.819:0027:0028:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.820:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.820:0027:0028:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.820:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.820:0027:0028:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.820:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=4
- 87522.820:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=4
- 87522.820:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=4
- 87522.820:0027:0028:trace:module:load_dll looking for L"rpcrt4.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.820:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.820:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.820:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.820:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.820:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a8 virt 1000 flags 40000040
- 87522.820:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.820:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\rpcrt4.dll"
- 87522.820:0027:0028:trace:module:get_load_order got hardcoded default for L"rpcrt4.dll"
- 87522.820:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\rpcrt4.dll" is a fake Wine dll
- 87522.820:0027:0028:trace:module:load_builtin_dll Trying built-in L"rpcrt4.dll"
- 87522.820:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=5
- 87522.820:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=8
- 87522.820:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=8
- 87522.820:0027:0028:trace:module:load_builtin_callback loaded rpcrt4.dll 0x112640 0x7e550000
- 87522.820:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\rpcrt4.dll" (builtin) at 0x7e550000
- 87522.820:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=9
- 87522.820:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=9
- 87522.820:0027:0028:trace:module:load_builtin_callback loaded ole32.dll 0x1125d0 0x7e5e0000
- 87522.820:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7e5e0000
- 87522.820:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=6
- 87522.820:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=10
- 87522.820:0027:0028:trace:module:load_builtin_callback loaded shcore.dll 0x1123d0 0x7e720000
- 87522.820:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shcore.dll" (builtin) at 0x7e720000
- 87522.820:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.820:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=5
- 87522.821:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=5
- 87522.821:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=7
- 87522.821:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=11
- 87522.821:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=10
- 87522.821:0027:0028:trace:module:load_builtin_callback loaded shell32.dll 0x112258 0x7d690000
- 87522.821:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\SHELL32.dll" (builtin) at 0x7d690000
- 87522.821:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=2
- 87522.821:0027:0028:trace:module:load_dll looking for L"WINMM.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.821:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10078000
- 87522.821:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.821:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.821:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.821:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.821:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 74ff4 virt 75000 flags 40000040
- 87522.822:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\WINMM.dll"
- 87522.822:0027:0028:trace:module:get_load_order got hardcoded default for L"WINMM.dll"
- 87522.822:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\WINMM.dll" is a fake Wine dll
- 87522.822:0027:0028:trace:module:load_builtin_dll Trying built-in L"WINMM.dll"
- 87522.822:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.822:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=6
- 87522.822:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.822:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=8
- 87522.822:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.822:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=3
- 87522.822:0027:0028:trace:module:load_dll looking for L"msacm32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.822:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10009000
- 87522.822:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.822:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.822:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.822:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.822:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 574c virt 6000 flags 40000040
- 87522.822:0027:0028:trace:module:map_image clearing 0x10008800 - 0x10009000
- 87522.822:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\msacm32.dll"
- 87522.822:0027:0028:trace:module:get_load_order got hardcoded default for L"msacm32.dll"
- 87522.822:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\msacm32.dll" is a fake Wine dll
- 87522.822:0027:0028:trace:module:load_builtin_dll Trying built-in L"msacm32.dll"
- 87522.822:0027:0028:trace:module:load_dll looking for L"winmm.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.822:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\winmm.dll" for L"winmm.dll" at 0x7e490000, count=2
- 87522.823:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=7
- 87522.823:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=9
- 87522.823:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=12
- 87522.823:0027:0028:trace:module:load_builtin_callback loaded msacm32.dll 0x1127b8 0x7e460000
- 87522.823:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\msacm32.dll" (builtin) at 0x7e460000
- 87522.823:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=13
- 87522.823:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=11
- 87522.823:0027:0028:trace:module:load_builtin_callback loaded winmm.dll 0x1126f8 0x7e490000
- 87522.823:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\WINMM.dll" (builtin) at 0x7e490000
- 87522.823:0027:0028:trace:module:load_dll looking for L"DINPUT.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.823:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x1000b000
- 87522.824:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.824:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.824:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.824:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.824:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 75f0 virt 8000 flags 40000040
- 87522.824:0027:0028:trace:module:map_image clearing 0x1000a600 - 0x1000b000
- 87522.824:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\DINPUT.dll"
- 87522.824:0027:0028:trace:module:get_load_order got hardcoded default for L"DINPUT.dll"
- 87522.824:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\DINPUT.dll" is a fake Wine dll
- 87522.824:0027:0028:trace:module:load_builtin_dll Trying built-in L"DINPUT.dll"
- 87522.824:0027:0028:trace:module:load_dll looking for L"comctl32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.824:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10051000
- 87522.824:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.824:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.824:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.824:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.824:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 4ddd4 virt 4e000 flags 40000040
- 87522.824:0027:0028:trace:module:map_image clearing 0x10050e00 - 0x10051000
- 87522.824:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\comctl32.dll"
- 87522.824:0027:0028:trace:module:get_load_order got hardcoded default for L"comctl32.dll"
- 87522.825:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\comctl32.dll" is a fake Wine dll
- 87522.825:0027:0028:trace:module:load_builtin_dll Trying built-in L"comctl32.dll"
- 87522.825:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=8
- 87522.825:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=6
- 87522.825:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=10
- 87522.825:0027:0028:trace:module:load_dll looking for L"usp10.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.825:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.825:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.825:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.825:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.825:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\usp10.dll"
- 87522.825:0027:0028:trace:module:get_load_order got hardcoded default for L"usp10.dll"
- 87522.825:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\usp10.dll" is a fake Wine dll
- 87522.825:0027:0028:trace:module:load_builtin_dll Trying built-in L"usp10.dll"
- 87522.825:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=11
- 87522.825:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=9
- 87522.825:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=7
- 87522.825:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.825:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=14
- 87522.825:0027:0028:trace:module:load_builtin_callback loaded usp10.dll 0x112b30 0x7e160000
- 87522.825:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\usp10.dll" (builtin) at 0x7e160000
- 87522.825:0027:0028:trace:module:load_dll looking for L"imm32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.826:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.826:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.826:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.826:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.826:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.826:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.826:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.826:0027:0028:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.826:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.826:0027:0028:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.826:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=10
- 87522.826:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=12
- 87522.826:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=4
- 87522.826:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=15
- 87522.826:0027:0028:trace:module:load_builtin_callback loaded imm32.dll 0x112be8 0x7e140000
- 87522.826:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7e140000
- 87522.826:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=16
- 87522.826:0027:0028:trace:module:load_builtin_callback loaded comctl32.dll 0x112928 0x7e1a0000
- 87522.826:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\comctl32.dll" (builtin) at 0x7e1a0000
- 87522.826:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=5
- 87522.826:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=11
- 87522.826:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=13
- 87522.826:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.826:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=17
- 87522.826:0027:0028:trace:module:load_builtin_callback loaded dinput.dll 0x112870 0x7e410000
- 87522.826:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\DINPUT.dll" (builtin) at 0x7e410000
- 87522.826:0027:0028:trace:module:load_dll looking for L"WS2_32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.827:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.827:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.827:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.827:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.827:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.827:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3ac virt 1000 flags 40000040
- 87522.827:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.827:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\WS2_32.dll"
- 87522.827:0027:0028:trace:module:get_load_order got hardcoded default for L"WS2_32.dll"
- 87522.827:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\WS2_32.dll" is a fake Wine dll
- 87522.827:0027:0028:trace:module:load_builtin_dll Trying built-in L"WS2_32.dll"
- 87522.827:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.827:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=18
- 87522.827:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.827:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=12
- 87522.827:0027:0028:trace:module:load_builtin_callback loaded ws2_32.dll 0x112a60 0x7e100000
- 87522.827:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\WS2_32.dll" (builtin) at 0x7e100000
- 87522.827:0027:0028:trace:module:load_dll looking for L"IMM32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.827:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\imm32.dll" for L"IMM32.dll" at 0x7e140000, count=2
- 87522.827:0027:0028:trace:module:load_dll looking for L"DSOUND.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.828:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.828:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.828:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.828:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.828:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.828:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 8d4 virt 1000 flags 40000040
- 87522.828:0027:0028:trace:module:map_image clearing 0x10003a00 - 0x10004000
- 87522.828:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\DSOUND.dll"
- 87522.828:0027:0028:trace:module:get_load_order got hardcoded default for L"DSOUND.dll"
- 87522.828:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\DSOUND.dll" is a fake Wine dll
- 87522.828:0027:0028:trace:module:load_builtin_dll Trying built-in L"DSOUND.dll"
- 87522.828:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.828:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=6
- 87522.828:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.828:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=14
- 87522.828:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.828:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=19
- 87522.828:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.828:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=13
- 87522.828:0027:0028:trace:module:load_builtin_callback loaded dsound.dll 0x112cf0 0x7e0c0000
- 87522.828:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\DSOUND.dll" (builtin) at 0x7e0c0000
- 87522.828:0027:0028:trace:module:load_dll looking for L"d3d9.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.829:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.829:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.829:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.829:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.829:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.829:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 398 virt 1000 flags 40000040
- 87522.829:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.829:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\d3d9.dll"
- 87522.829:0027:0028:trace:module:get_load_order got hardcoded default for L"d3d9.dll"
- 87522.829:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\d3d9.dll" is a fake Wine dll
- 87522.829:0027:0028:trace:module:load_builtin_dll Trying built-in L"d3d9.dll"
- 87522.829:0027:0028:trace:module:load_dll looking for L"wined3d.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.829:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.829:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.829:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.829:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.829:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.829:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 384 virt 1000 flags 40000040
- 87522.829:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.829:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\wined3d.dll"
- 87522.829:0027:0028:trace:module:get_load_order got hardcoded default for L"wined3d.dll"
- 87522.829:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\wined3d.dll" is a fake Wine dll
- 87522.829:0027:0028:trace:module:load_builtin_dll Trying built-in L"wined3d.dll"
- 87522.829:0027:0028:trace:module:load_dll looking for L"opengl32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.830:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.830:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.830:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.830:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.830:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 360 virt 1000 flags 40000040
- 87522.830:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.830:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\opengl32.dll"
- 87522.830:0027:0028:trace:module:get_load_order got hardcoded default for L"opengl32.dll"
- 87522.830:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\opengl32.dll" is a fake Wine dll
- 87522.830:0027:0028:trace:module:load_builtin_dll Trying built-in L"opengl32.dll"
- 87522.830:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=8
- 87522.830:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=15
- 87522.830:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=20
- 87522.830:0027:0028:trace:module:load_builtin_callback loaded opengl32.dll 0x1130b8 0x7a820000
- 87522.830:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\opengl32.dll" (builtin) at 0x7a820000
- 87522.830:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=12
- 87522.830:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=9
- 87522.830:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=16
- 87522.830:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=21
- 87522.830:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=14
- 87522.830:0027:0028:trace:module:load_builtin_callback loaded wined3d.dll 0x112eb0 0x7d500000
- 87522.830:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\wined3d.dll" (builtin) at 0x7d500000
- 87522.830:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.830:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=22
- 87522.830:0027:0028:trace:module:load_builtin_callback loaded d3d9.dll 0x112da8 0x7d650000
- 87522.830:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\d3d9.dll" (builtin) at 0x7d650000
- 87522.830:0027:0028:trace:module:alloc_thread_tls thread 0028 slot 0: 1/0 bytes at 0x1129e8
- 87522.830:0027:0028:trace:module:process_attach (L"amnesia.exe",0x32fd24) - START
- 87522.830:0027:0028:trace:module:process_attach (L"KERNEL32.dll",0x32fd24) - START
- 87522.830:0027:0028:trace:module:process_attach (L"ntdll.dll",0x32fd24) - START
- 87522.830:0027:0028:trace:module:MODULE_InitDLL (0x7bc10000 L"ntdll.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.830:0027:0028:trace:module:MODULE_InitDLL (0x7bc10000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.830:0027:0028:trace:module:process_attach (L"ntdll.dll",0x32fd24) - END
- 87522.830:0027:0028:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.833:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.833:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=17
- 87522.833:0027:0028:trace:module:process_attach (L"advapi32.dll",(nil)) - START
- 87522.833:0027:0028:trace:module:MODULE_InitDLL (0x7e7e0000 L"advapi32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.833:0027:0028:trace:module:MODULE_InitDLL (0x7e7e0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.833:0027:0028:trace:module:process_attach (L"advapi32.dll",(nil)) - END
- 87522.834:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.834:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.834:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.834:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.834:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.834:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.834:0027:0028:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.834:0027:0028:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.835:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.835:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.835:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.835:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.835:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.835:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.835:0027:0028:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.835:0027:0028:trace:module:LdrUnloadDll (0x7e7e0000)
- 87522.835:0027:0028:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.835:0027:0028:trace:module:MODULE_DecRefCount (L"advapi32.dll") ldr.LoadCount: 16
- 87522.835:0027:0028:trace:module:LdrUnloadDll END
- 87522.835:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32"
- 87522.835:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=17
- 87522.835:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.835:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.836:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.836:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.836:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.836:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.836:0027:0028:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.836:0027:0028:trace:module:LdrGetDllHandle L"tzres.dll" -> (nil) (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.836:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x1002b000
- 87522.836:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.836:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.836:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.836:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.836:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 27798 virt 28000 flags 40000040
- 87522.836:0027:0028:trace:module:map_image clearing 0x1002a800 - 0x1002b000
- 87522.836:0027:0028:trace:module:LdrUnloadDll (0x7e7e0000)
- 87522.836:0027:0028:trace:module:LdrUnloadDll (L"advapi32.dll") - START
- 87522.836:0027:0028:trace:module:MODULE_DecRefCount (L"advapi32.dll") ldr.LoadCount: 16
- 87522.836:0027:0028:trace:module:LdrUnloadDll END
- 87522.837:0027:0028:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.837:0027:0028:trace:module:process_attach (L"KERNEL32.dll",0x32fd24) - END
- 87522.837:0027:0028:trace:module:process_attach (L"user32.dll",0x32fd24) - START
- 87522.837:0027:0028:trace:module:process_attach (L"gdi32.dll",0x32fd24) - START
- 87522.837:0027:0028:trace:module:MODULE_InitDLL (0x7e850000 L"gdi32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.864:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e60000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.864:0025:0026:trace:module:process_attach (L"gdi32.dll",0x22fb00) - END
- 87522.864:0025:0026:trace:module:process_attach (L"version.dll",0x22fb00) - START
- 87522.864:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e40000 L"version.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.864:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e40000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.864:0025:0026:trace:module:process_attach (L"version.dll",0x22fb00) - END
- 87522.864:0025:0026:trace:module:MODULE_InitDLL (0x7f9565ff0000 L"user32.dll",PROCESS_ATTACH,0x22fb00) - CALL
- 87522.865:0025:0026:trace:module:LdrGetDllHandle L"gdi32" -> 0x7f9565e60000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.865:0025:0026:trace:module:load_dll looking for L"imm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.865:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.865:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.865:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.865:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.865:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.865:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 3a4 virt 1000 flags 40000040
- 87522.865:0025:0026:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.865:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\imm32.dll"
- 87522.865:0025:0026:trace:module:get_load_order got hardcoded default for L"imm32.dll"
- 87522.865:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\imm32.dll" is a fake Wine dll
- 87522.865:0025:0026:trace:module:load_builtin_dll Trying built-in L"imm32.dll"
- 87522.865:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.865:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.865:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.865:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.865:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10028000
- 87522.866:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.866:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.866:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.866:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.866:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 24bcc virt 25000 flags 40000040
- 87522.866:0025:0026:trace:module:map_image clearing 0x10027c00 - 0x10028000
- 87522.866:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\ole32.dll"
- 87522.866:0025:0026:trace:module:get_load_order got hardcoded default for L"ole32.dll"
- 87522.866:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\ole32.dll" is a fake Wine dll
- 87522.866:0025:0026:trace:module:load_builtin_dll Trying built-in L"ole32.dll"
- 87522.866:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.866:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.866:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=-1
- 87522.866:0025:0026:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7f95662d0000, count=-1
- 87522.866:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.866:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.866:0025:0026:trace:module:load_builtin_callback loaded ole32.dll 0x3a9c0 0x7f95655b0000
- 87522.866:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\ole32.dll" (builtin) at 0x7f95655b0000
- 87522.866:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.866:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.866:0025:0026:trace:module:load_builtin_callback loaded imm32.dll 0x3a7b0 0x7f9565740000
- 87522.866:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\imm32.dll" (builtin) at 0x7f9565740000
- 87522.866:0025:0026:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.866:0025:0026:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.866:0025:0026:trace:module:MODULE_InitDLL (0x7f95655b0000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.866:0025:0026:trace:module:MODULE_InitDLL (0x7f95655b0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.866:0025:0026:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.866:0025:0026:trace:module:MODULE_InitDLL (0x7f9565740000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.866:0025:0026:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7f9565740000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.867:0025:0026:trace:module:MODULE_InitDLL (0x7f9565740000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.867:0025:0026:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.867:0025:0026:trace:module:MODULE_InitDLL (0x7f9565ff0000,PROCESS_ATTACH,0x22fb00) - RETURN 1
- 87522.867:0025:0026:trace:module:process_attach (L"user32.dll",0x22fb00) - END
- 87522.867:0025:0026:trace:module:process_attach (L"explorer.exe",0x22fb00) - END
- 87522.867:0025:0026:trace:module:load_dll looking for L"winex11.drv" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.867:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.867:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.867:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.867:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.867:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.867:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 394 virt 1000 flags 40000040
- 87522.867:0025:0026:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.867:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\winex11.drv"
- 87522.867:0025:0026:trace:module:get_load_order got hardcoded default for L"winex11.drv"
- 87522.867:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\winex11.drv" is a fake Wine dll
- 87522.867:0025:0026:trace:module:load_builtin_dll Trying built-in L"winex11.drv"
- 87522.878:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.878:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.878:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.878:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=-1
- 87522.878:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.878:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.878:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.878:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.878:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.878:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.878:0025:0026:trace:module:load_builtin_callback loaded winex11.drv 0x3ab70 0x7f95654f0000
- 87522.878:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\winex11.drv" (builtin) at 0x7f95654f0000
- 87522.878:0025:0026:trace:module:process_attach (L"winex11.drv",(nil)) - START
- 87522.878:0025:0026:trace:module:MODULE_InitDLL (0x7f95654f0000 L"winex11.drv",PROCESS_ATTACH,(nil)) - CALL
- 87522.879:0025:0026:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\explorer.exe"
- 87522.882:0025:0026:trace:module:MODULE_InitDLL (0x7f95654f0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.882:0025:0026:trace:module:process_attach (L"winex11.drv",(nil)) - END
- 87522.882:0025:0026:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\winex11.drv"
- 87522.882:0025:0026:trace:module:load_dll looking for L"C:\\windows\\system32\\winex11.drv" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.882:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\winex11.drv" for L"C:\\windows\\system32\\winex11.drv" at 0x7f95654f0000, count=2
- 87522.882:0025:0026:trace:module:LdrAddRefDll (L"winex11.drv") ldr.LoadCount: 3
- 87522.882:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.882:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.882:0025:0026:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7f9565ff0000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f95662d0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f95662d0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f9565ff0000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f9565ff0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f95655b0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f95655b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f9565740000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.885:0025:0029:trace:module:MODULE_InitDLL (0x7f9565740000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.889:0025:0026:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\explorer.exe"
- 87522.890:0008:0024:trace:module:load_dll looking for L"C:\\windows\\system32\\winex11.drv" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.890:0008:0024:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.890:0008:0024:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.890:0008:0024:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.890:0008:0024:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.890:0008:0024:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.890:0008:0024:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 394 virt 1000 flags 40000040
- 87522.890:0008:0024:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.890:0008:0024:trace:module:get_load_order looking for L"C:\\windows\\system32\\winex11.drv"
- 87522.890:0008:0024:trace:module:get_load_order got hardcoded default for L"winex11.drv"
- 87522.890:0008:0024:trace:module:load_dll L"\\??\\C:\\windows\\system32\\winex11.drv" is a fake Wine dll
- 87522.890:0008:0024:trace:module:load_builtin_dll Trying built-in L"winex11.drv"
- 87522.891:0008:0024:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.891:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e8a0000, count=-1
- 87522.891:0008:0024:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.891:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e770000, count=-1
- 87522.891:0008:0024:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.891:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7eaa0000, count=-1
- 87522.891:0008:0024:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.891:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.891:0008:0024:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.891:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87522.891:0008:0024:trace:module:load_builtin_callback loaded winex11.drv 0x12d300 0x7dd80000
- 87522.891:0008:0024:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\winex11.drv" (builtin) at 0x7dd80000
- 87522.891:0008:0024:trace:module:process_attach (L"winex11.drv",(nil)) - START
- 87522.891:0008:0024:trace:module:MODULE_InitDLL (0x7dd80000 L"winex11.drv",PROCESS_ATTACH,(nil)) - CALL
- 87522.891:0008:0024:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\steam.exe"
- 87522.891:0025:0026:trace:module:load_dll looking for L"shell32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.892:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x108d2000
- 87522.892:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.892:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.892:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.892:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.892:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 8ce7f8 virt 8cf000 flags 40000040
- 87522.895:0008:0024:trace:module:MODULE_InitDLL (0x7dd80000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.895:0008:0024:trace:module:process_attach (L"winex11.drv",(nil)) - END
- 87522.896:0008:0024:trace:module:LdrAddRefDll (L"winex11.drv") ldr.LoadCount: 2
- 87522.896:0008:0024:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.896:0008:0024:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e8a0000, count=-1
- 87522.896:0008:0024:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7e8a0000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.897:0025:0026:trace:module:map_image clearing 0x108d1800 - 0x108d2000
- 87522.897:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\shell32.dll"
- 87522.897:0025:0026:trace:module:get_load_order got hardcoded default for L"shell32.dll"
- 87522.897:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shell32.dll" is a fake Wine dll
- 87522.898:0025:0026:trace:module:load_builtin_dll Trying built-in L"shell32.dll"
- 87522.898:0008:0024:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\steam.exe"
- 87522.898:0025:0026:trace:module:load_dll looking for L"shlwapi.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10008000
- 87522.899:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.899:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.899:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.899:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.899:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 4b58 virt 5000 flags 40000040
- 87522.899:0025:0026:trace:module:map_image clearing 0x10007c00 - 0x10008000
- 87522.899:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\shlwapi.dll"
- 87522.899:0025:0026:trace:module:get_load_order got hardcoded default for L"shlwapi.dll"
- 87522.899:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shlwapi.dll" is a fake Wine dll
- 87522.899:0025:0026:trace:module:load_builtin_dll Trying built-in L"shlwapi.dll"
- 87522.899:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.899:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=-1
- 87522.899:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.899:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.899:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.899:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.899:0025:0026:trace:module:load_builtin_callback loaded shlwapi.dll 0x4ce20 0x7f95643e0000
- 87522.899:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shlwapi.dll" (builtin) at 0x7f95643e0000
- 87522.899:0025:0026:trace:module:find_forwarded_export delay loading L"shcore.dll" for 'shcore.SHCreateStreamOnFileW'
- 87522.899:0025:0026:trace:module:load_dll looking for L"shcore.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10003000
- 87522.900:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.900:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.900:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.900:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.900:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\shcore.dll"
- 87522.900:0025:0026:trace:module:get_load_order got hardcoded default for L"shcore.dll"
- 87522.900:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\shcore.dll" is a fake Wine dll
- 87522.900:0025:0026:trace:module:load_builtin_dll Trying built-in L"shcore.dll"
- 87522.900:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7f95655b0000, count=2
- 87522.900:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.900:0025:0026:trace:module:load_builtin_callback loaded shcore.dll 0x4d030 0x7f95643b0000
- 87522.900:0008:0024:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\steam.exe" -> 0x7eb60000 (load path L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.900:0008:0024:trace:module:LdrAddRefDll (L"steam.exe") ldr.LoadCount: -1
- 87522.900:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shcore.dll" (builtin) at 0x7f95643b0000
- 87522.900:0008:0024:trace:module:LdrUnloadDll (0x7eb60000)
- 87522.900:0025:0026:trace:module:process_attach (L"shcore.dll",(nil)) - START
- 87522.900:0008:0024:trace:module:LdrUnloadDll (L"steam.exe") - START
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f95643b0000 L"shcore.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.900:0008:0024:trace:module:LdrUnloadDll END
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f95643b0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.900:0025:0026:trace:module:process_attach (L"shcore.dll",(nil)) - END
- 87522.900:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.900:0025:0026:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.900:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc20000, count=-1
- 87522.900:0025:0026:trace:module:load_builtin_callback loaded shell32.dll 0x4ccb0 0x7f9564470000
- 87522.900:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\shell32.dll" (builtin) at 0x7f9564470000
- 87522.900:0025:0026:trace:module:process_attach (L"shell32.dll",(nil)) - START
- 87522.900:0025:0026:trace:module:process_attach (L"shlwapi.dll",(nil)) - START
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f95643e0000 L"shlwapi.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f95643e0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.900:0025:0026:trace:module:process_attach (L"shlwapi.dll",(nil)) - END
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f9564470000 L"shell32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.900:0025:0026:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\shell32.dll"
- 87522.900:0025:0026:trace:module:MODULE_InitDLL (0x7f9564470000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.900:0025:0026:trace:module:process_attach (L"shell32.dll",(nil)) - END
- 87522.902:0025:0026:trace:module:load_dll looking for L"shell32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.902:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\shell32.dll" for L"shell32.dll" at 0x7f9564470000, count=2
- 87522.903:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.903:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7f95655b0000, count=3
- 87522.903:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.903:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7f95655b0000, count=4
- 87522.903:0025:0026:trace:module:load_dll looking for L"C:\\windows\\system32\\ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.903:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"C:\\windows\\system32\\ole32.dll" at 0x7f95655b0000, count=5
- 87522.908:0025:002a:trace:module:MODULE_InitDLL (0x7f95662d0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.908:0025:002a:trace:module:MODULE_InitDLL (0x7f95662d0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f9565ff0000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f9565ff0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f95655b0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f95655b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f9565740000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.909:0025:002a:trace:module:MODULE_InitDLL (0x7f9565740000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.909:0025:0026:trace:module:load_dll looking for L"C:\\windows\\system32\\actxprxy.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.909:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x1000a000
- 87522.909:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.909:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.909:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.909:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.909:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 6758 virt 7000 flags 40000040
- 87522.909:0025:0026:trace:module:map_image clearing 0x10009800 - 0x1000a000
- 87522.909:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\actxprxy.dll"
- 87522.909:0025:0026:trace:module:get_load_order got hardcoded default for L"actxprxy.dll"
- 87522.909:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\actxprxy.dll" is a fake Wine dll
- 87522.909:0025:0026:trace:module:load_builtin_dll Trying built-in L"actxprxy.dll"
- 87522.920:0025:0026:trace:module:load_dll looking for L"oleaut32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.921:0025:0026:trace:module:map_image mapped PE file at 0x10000000-0x10008000
- 87522.921:0025:0026:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.921:0025:0026:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.921:0025:0026:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.921:0025:0026:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.921:0025:0026:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 4e18 virt 5000 flags 40000040
- 87522.921:0025:0026:trace:module:get_load_order looking for L"C:\\windows\\system32\\oleaut32.dll"
- 87522.921:0025:0026:trace:module:get_load_order got hardcoded default for L"oleaut32.dll"
- 87522.921:0025:0026:trace:module:load_dll L"\\??\\C:\\windows\\system32\\oleaut32.dll" is a fake Wine dll
- 87522.921:0025:0026:trace:module:load_builtin_dll Trying built-in L"oleaut32.dll"
- 87522.921:0027:0028:trace:module:MODULE_InitDLL (0x7e850000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.921:0027:0028:trace:module:process_attach (L"gdi32.dll",0x32fd24) - END
- 87522.921:0027:0028:trace:module:process_attach (L"version.dll",0x32fd24) - START
- 87522.921:0027:0028:trace:module:MODULE_InitDLL (0x7e7b0000 L"version.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.921:0027:0028:trace:module:MODULE_InitDLL (0x7e7b0000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.921:0027:0028:trace:module:process_attach (L"version.dll",0x32fd24) - END
- 87522.921:0027:0028:trace:module:MODULE_InitDLL (0x7e980000 L"user32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:LdrGetDllHandle L"gdi32" -> 0x7e850000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.922:0027:0028:trace:module:load_dll looking for L"imm32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.922:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\imm32.dll" for L"imm32.dll" at 0x7e140000, count=3
- 87522.922:0027:0028:trace:module:process_attach (L"imm32.dll",(nil)) - START
- 87522.922:0027:0028:trace:module:process_attach (L"ole32.dll",(nil)) - START
- 87522.922:0027:0028:trace:module:process_attach (L"rpcrt4.dll",(nil)) - START
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e550000 L"rpcrt4.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e550000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"rpcrt4.dll",(nil)) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e5e0000 L"ole32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e5e0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"ole32.dll",(nil)) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e140000 L"imm32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.922:0027:0028:trace:module:LdrGetDllHandle L"imm32.dll" -> 0x7e140000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e140000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"imm32.dll",(nil)) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e980000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"user32.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:process_attach (L"shell32.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:process_attach (L"shlwapi.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e750000 L"shlwapi.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e750000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"shlwapi.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:process_attach (L"shcore.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e720000 L"shcore.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e720000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"shcore.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7d690000 L"shell32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\shell32.dll"
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7d690000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"shell32.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:process_attach (L"winmm.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:process_attach (L"msacm32.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e460000 L"msacm32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e460000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"msacm32.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e490000 L"winmm.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e490000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"winmm.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:process_attach (L"dinput.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:process_attach (L"comctl32.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:process_attach (L"usp10.dll",0x32fd24) - START
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e160000 L"usp10.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e160000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.922:0027:0028:trace:module:process_attach (L"usp10.dll",0x32fd24) - END
- 87522.922:0027:0028:trace:module:MODULE_InitDLL (0x7e1a0000 L"comctl32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.923:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.923:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87522.923:0027:0028:trace:module:load_dll looking for L"C:\\windows\\system32\\winex11.drv" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.923:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.923:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.923:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.923:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.923:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.923:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 394 virt 1000 flags 40000040
- 87522.923:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.923:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\winex11.drv"
- 87522.923:0027:0028:trace:module:get_load_order got hardcoded default for L"winex11.drv"
- 87522.923:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\winex11.drv" is a fake Wine dll
- 87522.923:0027:0028:trace:module:load_builtin_dll Trying built-in L"winex11.drv"
- 87522.923:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.923:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87522.923:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.923:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=-1
- 87522.924:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.924:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=17
- 87522.924:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.924:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.924:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.924:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87522.924:0027:0028:trace:module:load_builtin_callback loaded winex11.drv 0x12e4b8 0x7cec0000
- 87522.924:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\winex11.drv" (builtin) at 0x7cec0000
- 87522.924:0027:0028:trace:module:process_attach (L"winex11.drv",(nil)) - START
- 87522.924:0027:0028:trace:module:MODULE_InitDLL (0x7cec0000 L"winex11.drv",PROCESS_ATTACH,(nil)) - CALL
- 87522.924:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.926:0027:0028:trace:module:MODULE_InitDLL (0x7cec0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.926:0027:0028:trace:module:process_attach (L"winex11.drv",(nil)) - END
- 87522.926:0027:0028:trace:module:LdrAddRefDll (L"winex11.drv") ldr.LoadCount: 2
- 87522.926:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.926:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87522.926:0027:0028:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7e980000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.929:0027:0028:trace:module:load_dll looking for L"uxtheme.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.929:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10004000
- 87522.929:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 200 size 5 virt 1000 flags 60000020
- 87522.929:0027:0028:trace:module:map_image clearing 0x10001200 - 0x10002000
- 87522.929:0027:0028:trace:module:map_image mapping section .reloc at 0x10002000 off 400 size 8 virt 1000 flags 42000040
- 87522.929:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87522.929:0027:0028:trace:module:map_image mapping section .rsrc at 0x10003000 off 600 size 390 virt 1000 flags 40000040
- 87522.929:0027:0028:trace:module:map_image clearing 0x10003400 - 0x10004000
- 87522.929:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\uxtheme.dll"
- 87522.929:0027:0028:trace:module:get_load_order got hardcoded default for L"uxtheme.dll"
- 87522.929:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\uxtheme.dll" is a fake Wine dll
- 87522.929:0027:0028:trace:module:load_builtin_dll Trying built-in L"uxtheme.dll"
- 87522.929:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.929:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87522.929:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.929:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=-1
- 87522.929:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.929:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=18
- 87522.929:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.929:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.930:0027:0028:trace:module:load_builtin_callback loaded uxtheme.dll 0x139430 0x7ce30000
- 87522.930:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\uxtheme.dll" (builtin) at 0x7ce30000
- 87522.930:0027:0028:trace:module:process_attach (L"uxtheme.dll",(nil)) - START
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7ce30000 L"uxtheme.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7ce30000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"uxtheme.dll",(nil)) - END
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e1a0000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"comctl32.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e410000 L"dinput.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e410000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"dinput.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:process_attach (L"ws2_32.dll",0x32fd24) - START
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e100000 L"ws2_32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e100000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"ws2_32.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:process_attach (L"dsound.dll",0x32fd24) - START
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e0c0000 L"dsound.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:LdrAddRefDll (L"dsound.dll") ldr.LoadCount: -1
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7e0c0000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"dsound.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:process_attach (L"d3d9.dll",0x32fd24) - START
- 87522.930:0027:0028:trace:module:process_attach (L"wined3d.dll",0x32fd24) - START
- 87522.930:0027:0028:trace:module:process_attach (L"opengl32.dll",0x32fd24) - START
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7a820000 L"opengl32.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7a820000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"opengl32.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7d500000 L"wined3d.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7d500000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"wined3d.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7d650000 L"d3d9.dll",PROCESS_ATTACH,0x32fd24) - CALL
- 87522.930:0027:0028:trace:module:MODULE_InitDLL (0x7d650000,PROCESS_ATTACH,0x32fd24) - RETURN 1
- 87522.930:0027:0028:trace:module:process_attach (L"d3d9.dll",0x32fd24) - END
- 87522.930:0027:0028:trace:module:process_attach (L"amnesia.exe",0x32fd24) - END
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32.DLL" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.931:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.931:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87522.933:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87522.941:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7f95655b0000, count=6
- 87522.941:0025:0026:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7f95662d0000, count=-1
- 87522.941:0025:0026:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7f9565ff0000, count=-1
- 87522.941:0025:0026:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7f9565e60000, count=-1
- 87522.941:0025:0026:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7f9566240000, count=-1
- 87522.941:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.941:0025:0026:trace:module:load_builtin_callback loaded oleaut32.dll 0x4f360 0x7f95640e0000
- 87522.941:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\oleaut32.dll" (builtin) at 0x7f95640e0000
- 87522.941:0025:0026:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7f95655b0000, count=7
- 87522.941:0025:0026:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7f95662d0000, count=-1
- 87522.941:0025:0026:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87522.941:0025:0026:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87522.941:0025:0026:trace:module:load_builtin_callback loaded actxprxy.dll 0x4f1e0 0x7f9564260000
- 87522.941:0025:0026:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\actxprxy.dll" (builtin) at 0x7f9564260000
- 87522.941:0025:0026:trace:module:process_attach (L"actxprxy.dll",(nil)) - START
- 87522.941:0025:0026:trace:module:process_attach (L"oleaut32.dll",(nil)) - START
- 87522.941:0025:0026:trace:module:MODULE_InitDLL (0x7f95640e0000 L"oleaut32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.941:0025:0026:trace:module:MODULE_InitDLL (0x7f95640e0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.941:0025:0026:trace:module:process_attach (L"oleaut32.dll",(nil)) - END
- 87522.941:0025:0026:trace:module:MODULE_InitDLL (0x7f9564260000 L"actxprxy.dll",PROCESS_ATTACH,(nil)) - CALL
- 87522.941:0025:0026:trace:module:MODULE_InitDLL (0x7f9564260000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87522.941:0025:0026:trace:module:process_attach (L"actxprxy.dll",(nil)) - END
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f95662d0000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f95662d0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f9565ff0000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f9565ff0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f95655b0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f95655b0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f9565740000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87522.942:0025:002b:trace:module:MODULE_InitDLL (0x7f9565740000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.122:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87523.125:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87523.125:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87523.131:0027:0028:trace:module:LdrAddRefDll (L"dinput.dll") ldr.LoadCount: -1
- 87523.131:0027:002c:trace:module:alloc_thread_tls thread 002c slot 0: 1/0 bytes at 0x143bc8
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e980000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e980000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e550000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e550000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e5e0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e5e0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e140000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e140000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e100000 L"ws2_32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7e100000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7a820000 L"opengl32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.131:0027:002c:trace:module:MODULE_InitDLL (0x7a820000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:LdrUnloadDll (0x7e410000)
- 87523.149:0027:002c:trace:module:LdrUnloadDll (L"dinput.dll") - START
- 87523.149:0027:002c:trace:module:LdrUnloadDll END
- 87523.149:0027:002c:trace:module:LdrShutdownThread ()
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7a820000 L"opengl32.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7a820000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e100000 L"ws2_32.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e100000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e140000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e140000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e5e0000 L"ole32.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e5e0000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e550000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e550000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e980000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
- 87523.149:0027:002c:trace:module:MODULE_InitDLL (0x7e980000,THREAD_DETACH,(nil)) - RETURN 1
- 87523.248:0027:0028:trace:module:load_dll looking for L"opengl32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87523.248:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\opengl32.dll" for L"opengl32.dll" at 0x7a820000, count=-1
- 87523.366:0027:0028:trace:module:LdrAddRefDll (L"wined3d.dll") ldr.LoadCount: -1
- 87523.366:0027:002d:trace:module:alloc_thread_tls thread 002d slot 0: 1/0 bytes at 0x143e20
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e980000 L"user32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e980000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e550000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e550000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e5e0000 L"ole32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e5e0000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e140000 L"imm32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e140000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e100000 L"ws2_32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7e100000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7a820000 L"opengl32.dll",THREAD_ATTACH,(nil)) - CALL
- 87523.366:0027:002d:trace:module:MODULE_InitDLL (0x7a820000,THREAD_ATTACH,(nil)) - RETURN 1
- 87523.373:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87523.373:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87523.375:0027:0028:trace:module:load_dll looking for L"Kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87523.375:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"Kernel32.dll" at 0x7b420000, count=-1
- 87523.375:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87523.375:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87523.380:0027:0028:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\user32.dll"
- 87523.380:0027:0028:trace:module:LdrGetDllHandle L"C:\\windows\\system32\\user32.dll" -> 0x7e980000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87523.380:0027:0028:trace:module:LdrGetDllHandle L"user32.dll" -> 0x7e980000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.613:0027:0028:trace:module:load_dll looking for L"SteamForArtemis.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.613:0027:0028:trace:module:map_image mapped PE file at 0x10000000-0x10009000
- 87525.613:0027:0028:trace:module:map_image mapping section .text at 0x10001000 off 400 size 1200 virt 105c flags 60000020
- 87525.613:0027:0028:trace:module:map_image clearing 0x10002200 - 0x10003000
- 87525.613:0027:0028:trace:module:map_image mapping section .rdata at 0x10003000 off 1600 size e00 virt d90 flags 40000040
- 87525.613:0027:0028:trace:module:map_image clearing 0x10003e00 - 0x10004000
- 87525.613:0027:0028:trace:module:map_image mapping section .data at 0x10004000 off 2400 size 2a00 virt 2d20 flags c0000040
- 87525.613:0027:0028:trace:module:map_image clearing 0x10006a00 - 0x10007000
- 87525.613:0027:0028:trace:module:map_image mapping section .rsrc at 0x10007000 off 4e00 size 200 virt 1e0 flags 40000040
- 87525.613:0027:0028:trace:module:map_image clearing 0x10007200 - 0x10008000
- 87525.613:0027:0028:trace:module:map_image mapping section .reloc at 0x10008000 off 5000 size 400 virt 2a4 flags 42000040
- 87525.613:0027:0028:trace:module:map_image clearing 0x10008400 - 0x10009000
- 87525.613:0027:0028:trace:module:get_load_order looking for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\SteamForArtemis.dll"
- 87525.613:0027:0028:trace:module:get_load_order got hardcoded default for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\SteamForArtemis.dll"
- 87525.613:0027:0028:trace:module:load_builtin_dll Trying built-in L"SteamForArtemis.dll"
- 87525.614:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"SteamForArtemis.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steamforartemis.dll.so: cannot open shared object file: No such file or directory
- 87525.614:0027:0028:trace:module:load_native_dll Trying native dll L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\SteamForArtemis.dll"
- 87525.614:0027:0028:trace:module:set_security_cookie initializing security cookie 0x10004000
- 87525.614:0027:0028:trace:module:load_dll looking for L"steam_api.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.614:0027:0028:trace:module:map_image mapped PE file at 0x3b400000-0x3b432000
- 87525.614:0027:0028:trace:module:map_image mapping section .text at 0x3b401000 off 400 size 18c00 virt 18bbb flags 60000020
- 87525.614:0027:0028:trace:module:map_image clearing 0x3b419c00 - 0x3b41a000
- 87525.614:0027:0028:trace:module:map_image mapping section .rdata at 0x3b41a000 off 19000 size 10200 virt 10136 flags 40000040
- 87525.614:0027:0028:trace:module:map_image clearing 0x3b42a200 - 0x3b42b000
- 87525.614:0027:0028:trace:module:map_image mapping section .data at 0x3b42b000 off 29200 size 1600 virt 3828 flags c0000040
- 87525.614:0027:0028:trace:module:map_image clearing 0x3b42c600 - 0x3b42d000
- 87525.614:0027:0028:trace:module:map_image mapping section .rsrc at 0x3b42f000 off 2a800 size 800 virt 7c0 flags 40000040
- 87525.614:0027:0028:trace:module:map_image clearing 0x3b42f800 - 0x3b430000
- 87525.614:0027:0028:trace:module:map_image mapping section .reloc at 0x3b430000 off 2b000 size 1a00 virt 1804 flags 42000040
- 87525.614:0027:0028:trace:module:map_image clearing 0x3b431a00 - 0x3b432000
- 87525.615:0027:0028:trace:module:get_load_order looking for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\steam_api.dll"
- 87525.615:0027:0028:trace:module:get_load_order got hardcoded default for L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\steam_api.dll"
- 87525.615:0027:0028:trace:module:load_builtin_dll Trying built-in L"steam_api.dll"
- 87525.615:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"steam_api.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam_api.dll.so: cannot open shared object file: No such file or directory
- 87525.615:0027:0028:trace:module:load_native_dll Trying native dll L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\steam_api.dll"
- 87525.615:0027:0028:trace:module:set_security_cookie initializing security cookie 0x3b42b57c
- 87525.615:0027:0028:trace:module:load_dll looking for L"KERNEL32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.615:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"KERNEL32.dll" at 0x7b420000, count=-1
- 87525.615:0027:0028:trace:module:load_dll looking for L"ADVAPI32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.615:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"ADVAPI32.dll" at 0x7e7e0000, count=19
- 87525.615:0027:0028:trace:module:load_dll looking for L"SHELL32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.615:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\shell32.dll" for L"SHELL32.dll" at 0x7d690000, count=-1
- 87525.615:0027:0028:trace:module:load_dll Loaded module L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\steam_api.dll" (native) at 0x3b400000
- 87525.616:0027:0028:trace:module:load_dll looking for L"MSVCR120.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.616:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x393000
- 87525.616:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.616:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.616:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.616:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.616:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\MSVCR120.dll"
- 87525.616:0027:0028:trace:module:get_load_order_value got standard key n,b for L"MSVCR120"
- 87525.616:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\MSVCR120.dll" is a fake Wine dll
- 87525.616:0027:0028:trace:module:load_builtin_dll Trying built-in L"MSVCR120.dll"
- 87525.617:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.617:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.617:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.617:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87525.617:0027:0028:trace:module:load_builtin_callback loaded msvcr120.dll 0x1892b8 0x7ab30000
- 87525.617:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\MSVCR120.dll" (builtin) at 0x7ab30000
- 87525.617:0027:0028:trace:module:load_dll looking for L"KERNEL32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.617:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"KERNEL32.dll" at 0x7b420000, count=-1
- 87525.617:0027:0028:trace:module:load_dll Loaded module L"\\??\\Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\SteamForArtemis.dll" (native) at 0x10000000
- 87525.617:0027:0028:trace:module:process_attach (L"SteamForArtemis.dll",(nil)) - START
- 87525.617:0027:0028:trace:module:process_attach (L"steam_api.dll",(nil)) - START
- 87525.617:0027:0028:trace:module:MODULE_InitDLL (0x3b400000 L"steam_api.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.617:0027:0028:trace:module:LdrGetDllHandle L"kernel32.dll" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.617:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87525.617:0027:0028:trace:module:MODULE_InitDLL (0x3b400000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.617:0027:0028:trace:module:process_attach (L"steam_api.dll",(nil)) - END
- 87525.617:0027:0028:trace:module:process_attach (L"msvcr120.dll",(nil)) - START
- 87525.617:0027:0028:trace:module:MODULE_InitDLL (0x7ab30000 L"msvcr120.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.617:0027:0028:trace:module:LdrGetDllHandle L"KERNEL32" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.618:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87525.618:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87525.618:0027:0028:trace:module:MODULE_InitDLL (0x7ab30000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.618:0027:0028:trace:module:process_attach (L"msvcr120.dll",(nil)) - END
- 87525.618:0027:0028:trace:module:MODULE_InitDLL (0x10000000 L"SteamForArtemis.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.618:0027:0028:trace:module:MODULE_InitDLL (0x10000000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.618:0027:0028:trace:module:process_attach (L"SteamForArtemis.dll",(nil)) - END
- 87525.618:0027:0028:trace:module:load_dll looking for L"lsteamclient.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.619:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\lsteamclient.dll"
- 87525.619:0027:0028:trace:module:get_load_order got hardcoded default for L"lsteamclient.dll"
- 87525.619:0027:0028:trace:module:load_builtin_dll Trying built-in L"lsteamclient.dll"
- 87525.619:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.619:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.619:0027:0028:trace:module:load_builtin_callback loaded lsteamclient.dll 0x18aa10 0x6aa30000
- 87525.619:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\lsteamclient.dll" (builtin) at 0x6aa30000
- 87525.619:0027:0028:trace:module:process_attach (L"lsteamclient.dll",(nil)) - START
- 87525.619:0027:0028:trace:module:MODULE_InitDLL (0x6aa30000 L"lsteamclient.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.619:0027:0028:trace:module:MODULE_InitDLL (0x6aa30000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.620:0027:0028:trace:module:process_attach (L"lsteamclient.dll",(nil)) - END
- 87525.652:0027:0028:trace:module:map_image mapped PE file at 0x20f0000-0x222d000
- 87525.652:0027:0028:trace:module:map_image mapping section .text at 0x20f1000 off 400 size 3f800 virt 3f73c flags 60000020
- 87525.653:0027:0028:trace:module:map_image clearing 0x2130800 - 0x2131000
- 87525.653:0027:0028:trace:module:map_image mapping section .rdata at 0x2131000 off 3fc00 size 15e00 virt 15db6 flags 40000040
- 87525.653:0027:0028:trace:module:map_image clearing 0x2146e00 - 0x2147000
- 87525.653:0027:0028:trace:module:map_image mapping section .data at 0x2147000 off 55a00 size 2400 virt e0968 flags c0000040
- 87525.653:0027:0028:trace:module:map_image clearing 0x2149400 - 0x214a000
- 87525.653:0027:0028:trace:module:map_image mapping section .reloc at 0x2228000 off 57e00 size 4800 virt 473c flags 42000040
- 87525.653:0027:0028:trace:module:map_image clearing 0x222c800 - 0x222d000
- 87525.653:0027:0028:trace:module:LdrGetDllHandle L"steam.dll" -> (nil) (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.653:0027:0028:trace:module:load_dll looking for L"C:\\Program Files (x86)\\Steam\\steam.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.653:0027:0028:trace:module:map_image mapped PE file at 0x20f0000-0x222d000
- 87525.653:0027:0028:trace:module:map_image mapping section .text at 0x20f1000 off 400 size 3f800 virt 3f73c flags 60000020
- 87525.654:0027:0028:trace:module:map_image clearing 0x2130800 - 0x2131000
- 87525.654:0027:0028:trace:module:map_image mapping section .rdata at 0x2131000 off 3fc00 size 15e00 virt 15db6 flags 40000040
- 87525.654:0027:0028:trace:module:map_image clearing 0x2146e00 - 0x2147000
- 87525.654:0027:0028:trace:module:map_image mapping section .data at 0x2147000 off 55a00 size 2400 virt e0968 flags c0000040
- 87525.654:0027:0028:trace:module:map_image clearing 0x2149400 - 0x214a000
- 87525.654:0027:0028:trace:module:map_image mapping section .reloc at 0x2228000 off 57e00 size 4800 virt 473c flags 42000040
- 87525.654:0027:0028:trace:module:map_image clearing 0x222c800 - 0x222d000
- 87525.654:0027:0028:trace:module:get_load_order looking for L"C:\\Program Files (x86)\\Steam\\steam.dll"
- 87525.654:0027:0028:trace:module:get_load_order got hardcoded default for L"C:\\Program Files (x86)\\Steam\\steam.dll"
- 87525.654:0027:0028:trace:module:load_builtin_dll Trying built-in L"steam.dll"
- 87525.654:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"steam.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam.dll.so: cannot open shared object file: No such file or directory
- 87525.654:0027:0028:trace:module:load_native_dll Trying native dll L"\\??\\C:\\Program Files (x86)\\Steam\\steam.dll"
- 87525.654:0027:0028:trace:module:perform_relocations relocating from 0x10000000-0x1013d000 to 0x20f0000-0x222d000
- 87525.654:0027:0028:trace:module:set_security_cookie initializing security cookie 0x2147dd0
- 87525.654:0027:0028:trace:module:load_dll looking for L"SHELL32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.654:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\shell32.dll" for L"SHELL32.dll" at 0x7d690000, count=-1
- 87525.654:0027:0028:trace:module:load_dll looking for L"KERNEL32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.654:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"KERNEL32.dll" at 0x7b420000, count=-1
- 87525.654:0027:0028:trace:module:load_dll looking for L"USER32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.654:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"USER32.dll" at 0x7e980000, count=-1
- 87525.654:0027:0028:trace:module:load_dll looking for L"ADVAPI32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.654:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"ADVAPI32.dll" at 0x7e7e0000, count=20
- 87525.654:0027:0028:trace:module:load_dll looking for L"OLEAUT32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.655:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x398000
- 87525.655:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.655:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.655:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.655:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.655:0027:0028:trace:module:map_image mapping section .rsrc at 0x393000 off 600 size 4e18 virt 5000 flags 40000040
- 87525.655:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\OLEAUT32.dll"
- 87525.656:0027:0028:trace:module:get_load_order got hardcoded default for L"OLEAUT32.dll"
- 87525.656:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\OLEAUT32.dll" is a fake Wine dll
- 87525.656:0027:0028:trace:module:load_builtin_dll Trying built-in L"OLEAUT32.dll"
- 87525.656:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=7
- 87525.656:0027:0028:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7e550000, count=2
- 87525.656:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87525.656:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=-1
- 87525.656:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=21
- 87525.656:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.656:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.656:0027:0028:trace:module:load_builtin_callback loaded oleaut32.dll 0x18ae68 0x68f50000
- 87525.656:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\OLEAUT32.dll" (builtin) at 0x68f50000
- 87525.656:0027:0028:trace:module:load_dll looking for L"PSAPI.DLL" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.657:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x394000
- 87525.657:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.657:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.657:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.657:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.657:0027:0028:trace:module:map_image mapping section .rsrc at 0x393000 off 600 size 3c4 virt 1000 flags 40000040
- 87525.657:0027:0028:trace:module:map_image clearing 0x393400 - 0x394000
- 87525.657:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\PSAPI.DLL"
- 87525.657:0027:0028:trace:module:get_load_order got hardcoded default for L"PSAPI.DLL"
- 87525.657:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\PSAPI.DLL" is a fake Wine dll
- 87525.657:0027:0028:trace:module:load_builtin_dll Trying built-in L"PSAPI.DLL"
- 87525.657:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.657:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.657:0027:0028:trace:module:load_builtin_callback loaded psapi.dll 0x18af98 0x7c410000
- 87525.657:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\PSAPI.DLL" (builtin) at 0x7c410000
- 87525.657:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\Program Files (x86)\\Steam\\steam.dll" (native) at 0x20f0000
- 87525.657:0027:0028:trace:module:process_attach (L"steam.dll",(nil)) - START
- 87525.657:0027:0028:trace:module:process_attach (L"oleaut32.dll",(nil)) - START
- 87525.657:0027:0028:trace:module:MODULE_InitDLL (0x68f50000 L"oleaut32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.657:0027:0028:trace:module:MODULE_InitDLL (0x68f50000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.657:0027:0028:trace:module:process_attach (L"oleaut32.dll",(nil)) - END
- 87525.657:0027:0028:trace:module:process_attach (L"psapi.dll",(nil)) - START
- 87525.657:0027:0028:trace:module:MODULE_InitDLL (0x7c410000 L"psapi.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.657:0027:0028:trace:module:MODULE_InitDLL (0x7c410000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.657:0027:0028:trace:module:process_attach (L"psapi.dll",(nil)) - END
- 87525.657:0027:0028:trace:module:MODULE_InitDLL (0x20f0000 L"steam.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.657:0027:0028:trace:module:LdrGetDllHandle L"kernel32.dll" -> 0x7b420000 (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.658:0027:0028:trace:module:GetModuleFileNameW L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia\\amnesia.exe"
- 87525.658:0027:0028:trace:module:load_dll looking for L"psapi.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.658:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\psapi.dll" for L"psapi.dll" at 0x7c410000, count=2
- 87525.658:0027:0028:trace:module:load_dll looking for L"psapi.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.658:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\psapi.dll" for L"psapi.dll" at 0x7c410000, count=3
- 87525.658:0027:0028:trace:module:load_dll looking for L"psapi.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.658:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\psapi.dll" for L"psapi.dll" at 0x7c410000, count=4
- 87525.658:0027:0028:trace:module:MODULE_InitDLL (0x20f0000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.658:0027:0028:trace:module:process_attach (L"steam.dll",(nil)) - END
- 87525.658:0027:0028:trace:module:load_dll looking for L"C:\\Program Files (x86)\\Steam\\Steam2.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.658:0027:0028:trace:module:get_load_order looking for L"C:\\Program Files (x86)\\Steam\\Steam2.dll"
- 87525.658:0027:0028:trace:module:get_load_order got hardcoded default for L"C:\\Program Files (x86)\\Steam\\Steam2.dll"
- 87525.658:0027:0028:trace:module:load_builtin_dll Trying built-in L"Steam2.dll"
- 87525.658:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"Steam2.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam2.dll.so: cannot open shared object file: No such file or directory
- 87525.658:0027:0028:warn:module:load_dll Failed to load module L"C:\\Program Files (x86)\\Steam\\Steam2.dll"; status=c0000135
- 87525.658:0027:0028:trace:module:load_dll looking for L"C:\\Program Files (x86)\\Steam\\Steam2.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.658:0027:0028:trace:module:get_load_order looking for L"C:\\Program Files (x86)\\Steam\\Steam2.dll"
- 87525.658:0027:0028:trace:module:get_load_order got hardcoded default for L"C:\\Program Files (x86)\\Steam\\Steam2.dll"
- 87525.658:0027:0028:trace:module:load_builtin_dll Trying built-in L"Steam2.dll"
- 87525.658:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"Steam2.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam2.dll.so: cannot open shared object file: No such file or directory
- 87525.658:0027:0028:warn:module:load_dll Failed to load module L"C:\\Program Files (x86)\\Steam\\Steam2.dll"; status=c0000135
- 87525.658:0027:0028:trace:module:load_dll looking for L"Steam2.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.660:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\Steam2.dll"
- 87525.660:0027:0028:trace:module:get_load_order got hardcoded default for L"Steam2.dll"
- 87525.660:0027:0028:trace:module:load_builtin_dll Trying built-in L"Steam2.dll"
- 87525.660:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"Steam2.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam2.dll.so: cannot open shared object file: No such file or directory
- 87525.660:0027:0028:warn:module:load_dll Failed to load module L"Steam2.dll"; status=c0000135
- 87525.660:0027:0028:trace:module:load_dll looking for L"Steam2.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.662:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\Steam2.dll"
- 87525.662:0027:0028:trace:module:get_load_order got hardcoded default for L"Steam2.dll"
- 87525.662:0027:0028:trace:module:load_builtin_dll Trying built-in L"Steam2.dll"
- 87525.662:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"Steam2.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/steam2.dll.so: cannot open shared object file: No such file or directory
- 87525.662:0027:0028:warn:module:load_dll Failed to load module L"Steam2.dll"; status=c0000135
- 87525.663:0027:0028:trace:module:LdrGetDllHandle L"gameoverlayrenderer.dll" -> (nil) (load path L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.663:0027:0028:trace:module:load_dll looking for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.663:0027:0028:trace:module:get_load_order looking for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"
- 87525.663:0027:0028:trace:module:get_load_order got hardcoded default for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"
- 87525.663:0027:0028:trace:module:load_builtin_dll Trying built-in L"gameoverlayrenderer.dll"
- 87525.663:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"gameoverlayrenderer.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/gameoverlayrenderer.dll.so: cannot open shared object file: No such file or directory
- 87525.663:0027:0028:warn:module:load_dll Failed to load module L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"; status=c0000135
- 87525.663:0027:0028:trace:module:load_dll looking for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll" in L"C:\\Program Files (x86)\\Steam;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.663:0027:0028:trace:module:get_load_order looking for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"
- 87525.663:0027:0028:trace:module:get_load_order got hardcoded default for L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"
- 87525.663:0027:0028:trace:module:load_builtin_dll Trying built-in L"gameoverlayrenderer.dll"
- 87525.663:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"gameoverlayrenderer.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/gameoverlayrenderer.dll.so: cannot open shared object file: No such file or directory
- 87525.663:0027:0028:warn:module:load_dll Failed to load module L"C:\\Program Files (x86)\\Steam\\gameoverlayrenderer.dll"; status=c0000135
- 87525.663:0027:0028:trace:module:load_dll looking for L"gameoverlayrenderer.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.664:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\gameoverlayrenderer.dll"
- 87525.664:0027:0028:trace:module:get_load_order got hardcoded default for L"gameoverlayrenderer.dll"
- 87525.664:0027:0028:trace:module:load_builtin_dll Trying built-in L"gameoverlayrenderer.dll"
- 87525.664:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"gameoverlayrenderer.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/gameoverlayrenderer.dll.so: cannot open shared object file: No such file or directory
- 87525.664:0027:0028:warn:module:load_dll Failed to load module L"gameoverlayrenderer.dll"; status=c0000135
- 87525.664:0027:0028:trace:module:load_dll looking for L"gameoverlayrenderer.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.665:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\gameoverlayrenderer.dll"
- 87525.665:0027:0028:trace:module:get_load_order got hardcoded default for L"gameoverlayrenderer.dll"
- 87525.665:0027:0028:trace:module:load_builtin_dll Trying built-in L"gameoverlayrenderer.dll"
- 87525.666:0027:0028:warn:module:load_builtin_dll cannot open .so lib for builtin L"gameoverlayrenderer.dll": /mnt/07f48b18-29fd-4f57-9850-4359789b4082/steamapps/common/Proton 4.2/dist/lib/wine/gameoverlayrenderer.dll.so: cannot open shared object file: No such file or directory
- 87525.666:0027:0028:warn:module:load_dll Failed to load module L"gameoverlayrenderer.dll"; status=c0000135
- 87525.667:0027:0028:trace:module:load_dll looking for L"C:\\windows\\system32\\quartz.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.667:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x399000
- 87525.667:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.667:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.667:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.667:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.667:0027:0028:trace:module:map_image mapping section .rsrc at 0x393000 off 600 size 5d90 virt 6000 flags 40000040
- 87525.667:0027:0028:trace:module:map_image clearing 0x398e00 - 0x399000
- 87525.668:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\quartz.dll"
- 87525.668:0027:0028:trace:module:get_load_order got hardcoded default for L"quartz.dll"
- 87525.668:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\quartz.dll" is a fake Wine dll
- 87525.668:0027:0028:trace:module:load_builtin_dll Trying built-in L"quartz.dll"
- 87525.668:0027:0028:trace:module:load_dll looking for L"dsound.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.668:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\dsound.dll" for L"dsound.dll" at 0x7e0c0000, count=-1
- 87525.668:0027:0028:trace:module:load_dll looking for L"msacm32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.668:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\msacm32.dll" for L"msacm32.dll" at 0x7e460000, count=-1
- 87525.668:0027:0028:trace:module:load_dll looking for L"msvfw32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.668:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x39b000
- 87525.668:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.668:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.669:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.669:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.669:0027:0028:trace:module:map_image mapping section .rsrc at 0x393000 off 600 size 7db4 virt 8000 flags 40000040
- 87525.669:0027:0028:trace:module:map_image clearing 0x39ae00 - 0x39b000
- 87525.669:0027:0028:trace:module:get_load_order looking for L"C:\\windows\\system32\\msvfw32.dll"
- 87525.669:0027:0028:trace:module:get_load_order got hardcoded default for L"msvfw32.dll"
- 87525.669:0027:0028:trace:module:load_dll L"\\??\\C:\\windows\\system32\\msvfw32.dll" is a fake Wine dll
- 87525.669:0027:0028:trace:module:load_builtin_dll Trying built-in L"msvfw32.dll"
- 87525.669:0027:0028:trace:module:load_dll looking for L"winmm.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\winmm.dll" for L"winmm.dll" at 0x7e490000, count=-1
- 87525.669:0027:0028:trace:module:load_dll looking for L"comctl32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\comctl32.dll" for L"comctl32.dll" at 0x7e1a0000, count=-1
- 87525.669:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87525.669:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=-1
- 87525.669:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=22
- 87525.669:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.669:0027:0028:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.669:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7bc10000, count=-1
- 87525.669:0027:0028:trace:module:load_builtin_callback loaded msvfw32.dll 0x1f65b8 0x7c370000
- 87525.669:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\msvfw32.dll" (builtin) at 0x7c370000
- 87525.670:0027:0028:trace:module:load_dll looking for L"ole32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\ole32.dll" for L"ole32.dll" at 0x7e5e0000, count=8
- 87525.670:0027:0028:trace:module:load_dll looking for L"oleaut32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\oleaut32.dll" for L"oleaut32.dll" at 0x68f50000, count=2
- 87525.670:0027:0028:trace:module:load_dll looking for L"shlwapi.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\shlwapi.dll" for L"shlwapi.dll" at 0x7e750000, count=-1
- 87525.670:0027:0028:trace:module:load_dll looking for L"rpcrt4.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\rpcrt4.dll" for L"rpcrt4.dll" at 0x7e550000, count=3
- 87525.670:0027:0028:trace:module:load_dll looking for L"user32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\user32.dll" for L"user32.dll" at 0x7e980000, count=-1
- 87525.670:0027:0028:trace:module:load_dll looking for L"gdi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\gdi32.dll" for L"gdi32.dll" at 0x7e850000, count=-1
- 87525.670:0027:0028:trace:module:load_dll looking for L"advapi32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\advapi32.dll" for L"advapi32.dll" at 0x7e7e0000, count=23
- 87525.670:0027:0028:trace:module:load_dll looking for L"kernel32.dll" in L"C:\\windows\\system32;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.670:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"kernel32.dll" at 0x7b420000, count=-1
- 87525.670:0027:0028:trace:module:load_builtin_callback loaded quartz.dll 0x18ac38 0x70b20000
- 87525.670:0027:0028:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\quartz.dll" (builtin) at 0x70b20000
- 87525.670:0027:0028:trace:module:process_attach (L"quartz.dll",(nil)) - START
- 87525.670:0027:0028:trace:module:process_attach (L"msvfw32.dll",(nil)) - START
- 87525.670:0027:0028:trace:module:MODULE_InitDLL (0x7c370000 L"msvfw32.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.670:0027:0028:trace:module:MODULE_InitDLL (0x7c370000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.670:0027:0028:trace:module:process_attach (L"msvfw32.dll",(nil)) - END
- 87525.670:0027:0028:trace:module:MODULE_InitDLL (0x70b20000 L"quartz.dll",PROCESS_ATTACH,(nil)) - CALL
- 87525.670:0027:0028:trace:module:MODULE_InitDLL (0x70b20000,PROCESS_ATTACH,(nil)) - RETURN 1
- 87525.670:0027:0028:trace:module:process_attach (L"quartz.dll",(nil)) - END
- 87525.671:0027:0028:trace:module:load_dll looking for L"d3d9.dll" in L"Z:\\home\\marko\\.local\\share\\Steam\\steamapps\\common\\Amnesia;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem"
- 87525.671:0027:0028:trace:module:load_dll Found L"C:\\windows\\system32\\d3d9.dll" for L"d3d9.dll" at 0x7d650000, count=-1
- 87525.672:0027:0028:trace:module:map_image mapped PE file at 0x390000-0x399000
- 87525.672:0027:0028:trace:module:map_image mapping section .text at 0x391000 off 200 size 5 virt 1000 flags 60000020
- 87525.672:0027:0028:trace:module:map_image clearing 0x391200 - 0x392000
- 87525.672:0027:0028:trace:module:map_image mapping section .reloc at 0x392000 off 400 size 8 virt 1000 flags 42000040
- 87525.672:0027:0028:trace:module:map_image clearing 0x392200 - 0x393000
- 87525.672:0027:0028:trace:module:map_image mapping section .rsrc at 0x393000 off 600 size 5d90 virt 6000 flags 40000040
- 87525.672:0027:0028:trace:module:map_image clearing 0x398e00 - 0x399000
- 87525.672:0027:0028:trace:module:LdrGetDllHandle L"C:\\windows\\syswow64\\quartz.dll" -> (nil) (load path L"C:\\windows\\syswow64;C:\\Program Files (x86)\\Steam;C:\\windows\\system32;C:\\windows\\system;C:\\windows;.;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem")
- 87525.673:0027:0028:fixme:quartz:VMR7FilterConfig_SetRenderingMode (0x1f6cfc/0x1f6b00)->(2) stub
- 87525.674:0027:0028:fixme:quartz:VMR9Inner_QueryInterface No interface for {0eb1088c-4dcd-46f0-878f-39dae86a51b7}
- 87525.674:0027:0028:trace:seh:raise_exception code=c0000005 flags=0 addr=0x602cc6 ip=00602cc6 tid=0028
- 87525.674:0027:0028:trace:seh:raise_exception info[0]=00000000
- 87525.674:0027:0028:trace:seh:raise_exception info[1]=00000000
- 87525.674:0027:0028:trace:seh:raise_exception eax=00bd44a4 ebx=00000001 ecx=00000000 edx=00000000 esi=00000002 edi=fffffffe
- 87525.674:0027:0028:trace:seh:raise_exception ebp=0032dd6c esp=0032db4c cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x68a215 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x68a215 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x691c48 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x691c48 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x689cc3 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x689cc3 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x689cf3 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x689cf3 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x695dc8 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x695dc8 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x695e30 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x695e30 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x6896f2 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x6896f2 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x689718 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x689718 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x691c48 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x691c48 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x689cc3 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x689cc3 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x68b2d2 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x68b2d2 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x5125d0 code=c0000005 flags=0
- 87525.674:0027:0028:trace:seh:call_stack_handlers handler at 0x5125d0 returned 1
- 87525.674:0027:0028:trace:seh:call_stack_handlers calling handler at 0x7b486d60 code=c0000005 flags=0
- wine: Unhandled page fault on read access to 0x00000000 at address 0x602cc6 (thread 0028), starting debugger...
- 87525.674:0027:0028:trace:seh:start_debugger Starting debugger "winedbg --auto 39 172"
- ERROR: ld.so: object '/home/marko/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored.
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- 87526.669:0027:0028:trace:seh:call_stack_handlers handler at 0x7b486d60 returned 1
- Unhandled exception: page fault on read access to 0x00000000 in 32-bit code (0x00602cc6).
- 002f:fixme:dbghelp:elf_search_auxv can't find symbol in module
- Register dump:
- CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
- EIP:00602cc6 ESP:0032db4c EBP:0032dd6c EFLAGS:00010206( R- -- I - -P- )
- EAX:00bd44a4 EBX:00000001 ECX:00000000 EDX:00000000
- ESI:00000002 EDI:fffffffe
- Stack dump:
- 0x0032db4c: 0001005c 00bd44a4 68fa48d6 001f6cfc
- 0x0032db5c: 006192f4 01fbdc00 00000000 009b0000
- 0x0032db6c: 01fbdc08 009b0060 00000002 0032dbc8
- 0x0032db7c: 01760000 02b3a2b8 00000000 0032dbb0
- 0x0032db8c: 00000001 01fbdc08 fffffffe 0032dbe8
- 0x0032db9c: 005093b8 01e35228 fffffffe 0032dbe8
- Backtrace:
- =>0 0x00602cc6 in amnesia (+0x202cc6) (0x0032dd6c)
- 1 0x00639516 in amnesia (+0x239515) (0x0032e058)
- 2 0x00478fda EntryPoint+0xffffffff() in amnesia (0x0032e06c)
- 3 0x0047a58a EntryPoint+0xffffffff() in amnesia (0x0032e084)
- 4 0x00479fe8 EntryPoint+0xffffffff() in amnesia (0x0032e0ac)
- 5 0x004791ed EntryPoint+0xffffffff() in amnesia (0x0032e0c0)
- 6 0x00436664 EntryPoint+0xffffffff() in amnesia (0x0032e118)
- 7 0x00638b14 in amnesia (+0x238b13) (0x0032e2dc)
- 8 0x00674f93 in amnesia (+0x274f92) (0x0032e398)
- 9 0x004970d4 EntryPoint+0xffffffff() in amnesia (0x0032e404)
- 10 0x00496926 EntryPoint+0xffffffff() in amnesia (0x0032e430)
- 11 0x00496201 EntryPoint+0xffffffff() in amnesia (0x0032e45c)
- 12 0x00495b91 EntryPoint+0xffffffff() in amnesia (0x0032e4dc)
- 13 0x005f9284 in amnesia (+0x1f9283) (0x0032e514)
- 14 0x005e949c in amnesia (+0x1e949b) (0x0032e81c)
- 15 0x005f93f4 in amnesia (+0x1f93f3) (0x0032e82c)
- 16 0x00600cd0 in amnesia (+0x200ccf) (0x0032e844)
- 17 0x005f88cc in amnesia (+0x1f88cb) (0x0032e89c)
- 18 0x005f961c in amnesia (+0x1f961b) (0x0032e8c8)
- 19 0x0060106e in amnesia (+0x20106d) (0x0032e8f8)
- 20 0x0067f01a in amnesia (+0x27f019) (0x0032e920)
- 21 0x00492a0a EntryPoint+0xffffffff() in amnesia (0x0032e958)
- 22 0x00674b7f in amnesia (+0x274b7e) (0x0032ea60)
- 23 0x00637088 in amnesia (+0x237087) (0x0032eaa4)
- 24 0x00478fda EntryPoint+0xffffffff() in amnesia (0x0032eab8)
- 25 0x0047a58a EntryPoint+0xffffffff() in amnesia (0x0032ead0)
- 26 0x00479fe8 EntryPoint+0xffffffff() in amnesia (0x0032eaf8)
- 27 0x004791ed EntryPoint+0xffffffff() in amnesia (0x0032eb0c)
- 28 0x00436664 EntryPoint+0xffffffff() in amnesia (0x0032eb64)
- 29 0x00638b14 in amnesia (+0x238b13) (0x0032ed28)
- 30 0x00643077 in amnesia (+0x243076) (0x0032f108)
- 31 0x0066bc75 in amnesia (+0x26bc74) (0x0032f118)
- 32 0x00655f3a in amnesia (+0x255f39) (0x0032f140)
- 33 0x0067e8dd in amnesia (+0x27e8dc) (0x0032fe30)
- 34 0x0050fb91 EntryPoint+0xffffffff() in amnesia (0x0032fec0)
- 35 0x7b4622c2 call_process_entry+0x11() in kernel32 (0x0032fed8)
- 36 0x7b464026 start_process+0x105() in kernel32 (0x0032ffd8)
- 37 0x7b4622ce start_process_wrapper+0x9() in kernel32 (0x0032ffec)
- 0x00602cc6: movl 0x0(%edx),%edx
- Modules:
- Module Address Debug info Name (127 modules)
- PE 400000- 894000 Export amnesia
- PE 20f0000- 222d000 Deferred steam
- PE 10000000-10009000 Deferred steamforartemis
- PE 3b400000-3b432000 Deferred steam_api
- ELF 68f31000-69059000 Deferred oleaut32<elf>
- \-PE 68f50000-69059000 \ oleaut32
- ELF 69059000-6a92d000 Deferred steamclient.so
- ELF 6a92d000-6ac00000 Deferred lsteamclient<elf>
- \-PE 6aa30000-6ac00000 \ lsteamclient
- ELF 70b0d000-70bfe000 Deferred quartz<elf>
- \-PE 70b20000-70bfe000 \ quartz
- ELF 73519000-74f5d000 Deferred libicudata.so.64
- ELF 74f5d000-798fa000 Deferred libllvm-8.so
- ELF 798fa000-7a800000 Deferred radeonsi_dri.so
- ELF 7a800000-7a942000 Deferred opengl32<elf>
- \-PE 7a820000-7a942000 \ opengl32
- ELF 7ab10000-7abff000 Deferred msvcr120<elf>
- \-PE 7ab30000-7abff000 \ msvcr120
- ELF 7b400000-7b7fc000 Export kernel32<elf>
- \-PE 7b420000-7b7fc000 \ kernel32
- ELF 7bc00000-7bd1c000 Deferred ntdll<elf>
- \-PE 7bc10000-7bd1c000 \ ntdll
- ELF 7be29000-7c000000 Deferred libicuuc.so.64
- ELF 7c000000-7c004000 Deferred <wine-loader>
- ELF 7c07f000-7c200000 Deferred libxml2.so.2
- ELF 7c365000-7c390000 Deferred msvfw32<elf>
- \-PE 7c370000-7c390000 \ msvfw32
- ELF 7c390000-7c400000 Deferred libncursesw.so.6
- ELF 7c408000-7c41c000 Deferred psapi<elf>
- \-PE 7c410000-7c41c000 \ psapi
- ELF 7c421000-7c44d000 Deferred liblzma.so.5
- ELF 7c44d000-7c456000 Deferred libffi.so.6
- ELF 7c456000-7c461000 Deferred libdrm_nouveau.so.2
- ELF 7c461000-7c46d000 Deferred libdrm_amdgpu.so.1
- ELF 7c46d000-7c48b000 Deferred libelf.so.1
- ELF 7c48b000-7c49a000 Deferred libdrm_radeon.so.1
- ELF 7c49a000-7c4ab000 Deferred libsensors.so.5
- ELF 7c4ab000-7c4ae000 Deferred libxshmfence.so.1
- ELF 7c4ae000-7c4b7000 Deferred libxcb-sync.so.1
- ELF 7c4b7000-7c4bc000 Deferred libxcb-present.so.0
- ELF 7c4bc000-7c4c3000 Deferred libxcb-dri3.so.0
- ELF 7c4c3000-7c4c7000 Deferred libxdamage.so.1
- ELF 7c4c7000-7c4ce000 Deferred libxcb-dri2.so.0
- ELF 7c4ce000-7c4d3000 Deferred libx11-xcb.so.1
- ELF 7c4d3000-7c4f0000 Deferred libxcb-glx.so.0
- ELF 7c4f0000-7c505000 Deferred libdrm.so.2
- ELF 7c505000-7c524000 Deferred libglapi.so.0
- ELF 7c524000-7c59e000 Deferred libglx_mesa.so.0
- ELF 7c5de000-7c5ee000 Deferred libudev.so.0
- ELF 7ce2c000-7ce64000 Deferred uxtheme<elf>
- \-PE 7ce30000-7ce64000 \ uxtheme
- ELF 7ce66000-7ce6e000 Deferred libxfixes.so.3
- ELF 7ce6e000-7ce7a000 Deferred libxcursor.so.1
- ELF 7ce7a000-7ce88000 Deferred libxrender.so.1
- ELF 7ce88000-7ce9c000 Deferred libxi.so.6
- ELF 7ce9c000-7cea0000 Deferred libxcomposite.so.1
- ELF 7cea0000-7cea7000 Deferred libxxf86vm.so.1
- ELF 7cea7000-7ceac000 Deferred libxinerama.so.1
- ELF 7ceac000-7cf41000 Deferred winex11<elf>
- \-PE 7cec0000-7cf41000 \ winex11
- ELF 7d07e000-7d088000 Deferred libuuid.so.1
- ELF 7d088000-7d0c4000 Deferred libexpat.so.1
- ELF 7d0c4000-7d110000 Deferred libfontconfig.so.1
- ELF 7d110000-7d189000 Deferred libpcre.so.1
- ELF 7d189000-7d2c5000 Deferred libglib-2.0.so.0
- ELF 7d2c5000-7d3da000 Deferred libharfbuzz.so.0
- ELF 7d3da000-7d41a000 Deferred libpng16.so.16
- ELF 7d41a000-7d4f0000 Deferred libfreetype.so.6
- ELF 7d4f0000-7d643000 Deferred wined3d<elf>
- \-PE 7d500000-7d643000 \ wined3d
- ELF 7d643000-7d685000 Deferred d3d9<elf>
- \-PE 7d650000-7d685000 \ d3d9
- ELF 7d685000-7e044000 Deferred shell32<elf>
- \-PE 7d690000-7e044000 \ shell32
- ELF 7e084000-7e09e000 Deferred libz.so.1
- ELF 7e09e000-7e0b0000 Deferred libbz2.so.1.0
- ELF 7e0b0000-7e0fb000 Deferred dsound<elf>
- \-PE 7e0c0000-7e0fb000 \ dsound
- ELF 7e0fb000-7e132000 Deferred ws2_32<elf>
- \-PE 7e100000-7e132000 \ ws2_32
- ELF 7e132000-7e157000 Deferred imm32<elf>
- \-PE 7e140000-7e157000 \ imm32
- ELF 7e157000-7e19c000 Deferred usp10<elf>
- \-PE 7e160000-7e19c000 \ usp10
- ELF 7e19c000-7e2d9000 Deferred comctl32<elf>
- \-PE 7e1a0000-7e2d9000 \ comctl32
- ELF 7e2d9000-7e404000 Deferred libsdl2-2.0.so.0
- ELF 7e404000-7e459000 Deferred dinput<elf>
- \-PE 7e410000-7e459000 \ dinput
- ELF 7e459000-7e485000 Deferred msacm32<elf>
- \-PE 7e460000-7e485000 \ msacm32
- ELF 7e485000-7e53e000 Deferred winmm<elf>
- \-PE 7e490000-7e53e000 \ winmm
- ELF 7e53e000-7e5c3000 Deferred rpcrt4<elf>
- \-PE 7e550000-7e5c3000 \ rpcrt4
- ELF 7e5c3000-7e71c000 Deferred ole32<elf>
- \-PE 7e5e0000-7e71c000 \ ole32
- ELF 7e71c000-7e740000 Deferred shcore<elf>
- \-PE 7e720000-7e740000 \ shcore
- ELF 7e740000-7e7ae000 Deferred shlwapi<elf>
- \-PE 7e750000-7e7ae000 \ shlwapi
- ELF 7e7ae000-7e7c8000 Deferred version<elf>
- \-PE 7e7b0000-7e7c8000 \ version
- ELF 7e7c8000-7e840000 Deferred advapi32<elf>
- \-PE 7e7e0000-7e840000 \ advapi32
- ELF 7e840000-7e96f000 Deferred gdi32<elf>
- \-PE 7e850000-7e96f000 \ gdi32
- ELF 7e96f000-7eb71000 Deferred user32<elf>
- \-PE 7e980000-7eb71000 \ user32
- ELF 7efeb000-7f000000 Deferred libnss_files.so.2
- ELF f75ef000-f75f6000 Deferred libxdmcp.so.6
- ELF f75f8000-f75fd000 Deferred libxau.so.6
- ELF f75fd000-f7629000 Deferred libxcb.so.1
- ELF f7629000-f7646000 Deferred libgcc_s.so.1
- ELF f7646000-f76a8000 Deferred libgldispatch.so.0
- ELF f76a8000-f76bd000 Deferred libxext.so.6
- ELF f76bd000-f780a000 Deferred libx11.so.6
- ELF f780a000-f782d000 Deferred libglx.so.0
- ELF f782d000-f78f9000 Deferred libm.so.6
- ELF f7a7d000-f7a83000 Deferred libdl.so.2
- ELF f7a85000-f7a90000 Deferred librt.so.1
- ELF f7a90000-f7af4000 Deferred libgl.so.1
- ELF f7af4000-f7cd0000 Deferred libc.so.6
- ELF f7cd0000-f7cf1000 Deferred libpthread.so.0
- ELF f7cf1000-f7eac000 Export libwine.so.1
- ELF f7eac000-f7ee9000 Deferred gameoverlayrenderer.so
- ELF f7eeb000-f7f15000 Deferred ld-linux.so.2
- Threads:
- process tid prio (all id:s are in hex)
- 00000008 steam.exe
- 00000024 0
- 00000009 0
- 0000000c services.exe
- 00000022 0
- 0000001f 0
- 0000001a 0
- 00000016 0
- 00000013 0
- 00000012 0
- 00000011 0
- 0000000e 0
- 0000000d 0
- 0000000f winedevice.exe
- 00000017 0
- 00000015 0
- 00000014 0
- 00000010 0
- 00000018 plugplay.exe
- 0000001c 0
- 0000001b 0
- 00000019 0
- 0000001d winedevice.exe
- 00000023 0
- 00000021 0
- 00000020 0
- 0000001e 0
- 00000025 explorer.exe
- 0000002b 0
- 0000002a 0
- 00000029 0
- 00000026 0
- 00000027 (D) Z:\home\marko\.local\share\Steam\steamapps\common\Amnesia\amnesia.exe
- 0000002d 0
- 00000028 0 <==
- System information:
- Wine build: wine-4.2
- Platform: i386 (WOW64)
- Version: Windows 7
- Host system: Linux
- Host version: 5.0.9-arch1-1-ARCH
- 87527.135:000c:0012:trace:module:LdrShutdownThread ()
- 87527.135:000c:0012:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.135:000c:0012:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.562:000c:0013:trace:module:LdrShutdownThread ()
- 87527.562:000c:0013:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.562:000c:0013:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.724:0025:0026:trace:module:LdrShutdownProcess ()
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9564260000 L"actxprxy.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9564260000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95640e0000 L"oleaut32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95640e0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9564470000 L"shell32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9564470000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95643e0000 L"shlwapi.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95643e0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95643b0000 L"shcore.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95643b0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95654f0000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95654f0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565740000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565740000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95655b0000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95655b0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565ff0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565ff0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e40000 L"version.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e40000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e60000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9565e60000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95662d0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f95662d0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9566240000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7f9566240000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.724:0025:0026:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:LdrShutdownProcess ()
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7dd80000 L"winex11.drv",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7dd80000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e250000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e250000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7dfa0000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7dfa0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e1d0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e1d0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e8a0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e8a0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e750000 L"version.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e750000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e770000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7e770000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7eaa0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7eaa0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7bc10000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.727:0008:0009:trace:module:MODULE_InitDLL (0x7bc10000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.728:000c:0030:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.728:000c:0030:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.728:000c:0031:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.728:000c:0031:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.728:000c:0032:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.728:000c:0032:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.728:000c:0033:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.728:000c:0033:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.732:000c:0034:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.733:000c:0034:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.733:001d:001e:trace:module:LdrShutdownProcess ()
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8600000 L"setupapi.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8600000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef3b00000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef3b00000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef3980000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef3980000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef83b0000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef83b0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8200000 L"version.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8200000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8230000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8230000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef88b0000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef88b0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8950000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef8950000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef89c0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7f6ef89c0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.733:001d:001e:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.736:000c:0022:trace:module:LdrShutdownThread ()
- 87527.736:000c:0022:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.736:000c:0022:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.749:000c:001f:trace:module:LdrShutdownThread ()
- 87527.749:000c:001f:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.749:000c:001f:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.749:000c:0035:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_ATTACH,(nil)) - CALL
- 87527.749:000c:0035:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_ATTACH,(nil)) - RETURN 1
- 87527.750:0018:001c:trace:module:LdrShutdownThread ()
- 87527.750:0018:001c:trace:module:MODULE_InitDLL (0x7f940a740000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.750:0018:001c:trace:module:MODULE_InitDLL (0x7f940a740000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.750:000f:0015:trace:module:LdrShutdownThread ()
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff1093c0000 L"imm32.dll",THREAD_DETACH,(nil)) - CALL
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff1093c0000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff109240000 L"ole32.dll",THREAD_DETACH,(nil)) - CALL
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff109240000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff109c70000 L"user32.dll",THREAD_DETACH,(nil)) - CALL
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff109c70000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.750:000f:0015:trace:module:MODULE_InitDLL (0x7ff10a360000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.751:0018:0019:trace:module:LdrShutdownProcess ()
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7f940a740000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7f940a740000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7f940a7e0000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7f940a7e0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.751:0018:0019:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.753:000c:001a:trace:module:LdrShutdownThread ()
- 87527.753:000c:001a:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.753:000c:001a:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.753:000c:0034:trace:module:LdrShutdownThread ()
- 87527.753:000c:0034:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.753:000c:0034:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.835:000f:0010:trace:module:LdrShutdownProcess ()
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff1093c0000 L"imm32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff1093c0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109240000 L"ole32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109240000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109c70000 L"user32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109c70000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109ac0000 L"version.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109ac0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109ae0000 L"gdi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff109ae0000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a360000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a360000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a400000 L"ntoskrnl.exe",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a400000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a470000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7ff10a470000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.835:000f:0010:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.838:000c:0011:trace:module:LdrShutdownThread ()
- 87527.838:000c:0016:trace:module:LdrShutdownThread ()
- 87527.839:000c:0011:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.839:000c:0011:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.839:000c:0016:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.839:000c:0016:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.839:000c:000e:trace:module:LdrShutdownThread ()
- 87527.839:000c:000e:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",THREAD_DETACH,(nil)) - CALL
- 87527.839:000c:000e:trace:module:MODULE_InitDLL (0x7f49e5700000,THREAD_DETACH,(nil)) - RETURN 1
- 87527.839:000c:000d:trace:module:LdrShutdownProcess ()
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5640000 L"userenv.dll",PROCESS_DETACH,0x1) - CALL
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5640000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5700000 L"rpcrt4.dll",PROCESS_DETACH,0x1) - CALL
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5700000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5670000 L"advapi32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7f49e5670000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.839:000c:000d:trace:module:MODULE_InitDLL (0x7b420000 L"KERNEL32.dll",PROCESS_DETACH,0x1) - CALL
- 87527.840:000c:000d:trace:module:MODULE_InitDLL (0x7b420000,PROCESS_DETACH,0x1) - RETURN 1
- 87527.840:000c:000d:trace:module:MODULE_InitDLL (0x7bc20000 L"ntdll.dll",PROCESS_DETACH,0x1) - CALL
- 87527.840:000c:000d:trace:module:MODULE_InitDLL (0x7bc20000,PROCESS_DETACH,0x1) - RETURN 1
- pid 21426 != 21425, skipping destruction (fork without exec?)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement