Created
January 4, 2021 07:54
-
-
Save LinArcX/9d1d4a0de156cabf9967d0c698657938 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| -------------------------------------------------------------------------------- | |
| Starting profile on 1/3/2021 at 11:49:44 PM | |
| Operating System: Microsoft Windows XP Professional (32-bit), version 5.01.2600 Service Pack 3 | |
| Program Executable: z:\workspace\c++\test\videowidget\build\release\VIDEOWIDGET.EXE | |
| Program Arguments: | |
| Starting Directory: Z:\workspace\c++\test\videowidget\build\release\ | |
| Search Path: C:\Python27;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin | |
| Options Selected: | |
| Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable. | |
| Log DllMain calls for process attach and process detach messages. | |
| Hook the process to gather more detailed dependency information. | |
| Log LoadLibrary function calls. | |
| Log GetProcAddress function calls. | |
| Log first chance exceptions. | |
| Log debug output messages. | |
| Log a time stamp with each line of log. | |
| Automatically open and profile child processes. | |
| -------------------------------------------------------------------------------- | |
| 00:00:00.000: Started "VIDEOWIDGET.EXE" (process 0xB18) at address 0x00400000. Successfully hooked module. | |
| 00:00:00.000: Loaded "NTDLL.DLL" at address 0x7C900000. Successfully hooked module. | |
| 00:00:00.010: Loaded "KERNEL32.DLL" at address 0x7C800000. Successfully hooked module. | |
| 00:00:00.010: DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" called. | |
| 00:00:00.010: DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1). | |
| 00:00:00.010: DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called. | |
| 00:00:00.010: DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1). | |
| 00:00:00.020: Injected "DEPENDS.DLL" at address 0x08370000. | |
| 00:00:00.020: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called. | |
| 00:00:00.020: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1). | |
| 00:00:00.050: Loaded "QT5CORE.DLL" at address 0x67000000. Successfully hooked module. | |
| 00:00:00.050: Loaded "USER32.DLL" at address 0x7E410000. Successfully hooked module. | |
| 00:00:00.050: Loaded "GDI32.DLL" at address 0x77F10000. Successfully hooked module. | |
| 00:00:00.060: Loaded "SHELL32.DLL" at address 0x7C9C0000. Successfully hooked module. | |
| 00:00:00.070: Loaded "ADVAPI32.DLL" at address 0x77DD0000. Successfully hooked module. | |
| 00:00:00.070: Loaded "RPCRT4.DLL" at address 0x77E70000. Successfully hooked module. | |
| 00:00:00.080: Loaded "SECUR32.DLL" at address 0x77FE0000. Successfully hooked module. | |
| 00:00:00.080: Loaded "MSVCRT.DLL" at address 0x77C10000. Successfully hooked module. | |
| 00:00:00.090: Loaded "SHLWAPI.DLL" at address 0x77F60000. Successfully hooked module. | |
| 00:00:00.090: Loaded "OLE32.DLL" at address 0x774E0000. Successfully hooked module. | |
| 00:00:00.100: Loaded "WS2_32.DLL" at address 0x71AB0000. Successfully hooked module. | |
| 00:00:00.100: Loaded "WS2HELP.DLL" at address 0x71AA0000. Successfully hooked module. | |
| 00:00:00.100: Loaded "MPR.DLL" at address 0x71B20000. Successfully hooked module. | |
| 00:00:00.100: Loaded "MSVCP100.DLL" at address 0x78050000. Successfully hooked module. | |
| 00:00:00.110: Loaded "MSVCR100.DLL" at address 0x78AA0000. Successfully hooked module. | |
| 00:00:00.130: Loaded "QT5MULTIMEDIAWIDGETS.DLL" at address 0x10000000. Successfully hooked module. | |
| 00:00:00.140: Loaded "QT5MULTIMEDIA.DLL" at address 0x00360000. Successfully hooked module. | |
| 00:00:00.150: Loaded "QT5NETWORK.DLL" at address 0x64000000. Successfully hooked module. | |
| 00:00:00.150: Loaded "DNSAPI.DLL" at address 0x76F20000. Successfully hooked module. | |
| 00:00:00.210: Loaded "QT5GUI.DLL" at address 0x00420000. Successfully hooked module. | |
| 00:00:00.250: Loaded "QT5WIDGETS.DLL" at address 0x65000000. Successfully hooked module. | |
| 00:00:00.260: Loaded "QT5OPENGL.DLL" at address 0x63000000. Successfully hooked module. | |
| 00:00:00.260: Entrypoint reached. All implicit modules have been loaded. | |
| 00:00:00.270: DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "GDI32.DLL" called. | |
| 00:00:00.270: DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "GDI32.DLL" returned 1 (0x1). | |
| 00:00:00.270: DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0012FD30) in "USER32.DLL" called. | |
| 00:00:00.270: LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "USER32.DLL" at address 0x7E44DF6E. | |
| 00:00:00.270: Loaded "IMM32.DLL" at address 0x76390000. Successfully hooked module. | |
| 00:00:00.270: DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x7E43D476 and returned 0x7639E679. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x7E43D48B and returned 0x7639E6A0. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x7E43D4A0 and returned 0x7639EB34. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x7E43D4B5 and returned 0x7639EB4F. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x7E43D4CA and returned 0x7639E769. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x7E43D4DF and returned 0x7639E79D. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x7E43D4F4 and returned 0x7639E804. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x7E43D509 and returned 0x7639E90C. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x7E43D51E and returned 0x7639E995. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x7E43D533 and returned 0x7639EAB9. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x7E43D548 and returned 0x76392378. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x7E43D55D and returned 0x76397C25. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x7E43D572 and returned 0x76397EA1. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x7E43D587 and returned 0x76395B62. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x7E43D59C and returned 0x7639548A. | |
| 00:00:00.270: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x7E43D5B1 and returned 0x76393B48. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x7E43D5C6 and returned 0x763923A1. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x7E43D5DB and returned 0x763997BE. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x7E43D5F0 and returned 0x76398C54. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x7E43D605 and returned 0x763929D3. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x7E43D61A and returned 0x763922B3. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x7E43D62F and returned 0x76394829. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x7E43D644 and returned 0x76394791. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x7E43D659 and returned 0x763949CE. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x7E43D66E and returned 0x763948C1. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x7E43D683 and returned 0x76394DD6. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x7E43D698 and returned 0x76396FD8. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x7E43D6AD and returned 0x76399F2D. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x7E43D6C2 and returned 0x76399F45. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x7E43D6D7 and returned 0x7639776F. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x7E43D6EC and returned 0x7639470B. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x7E43D701 and returned 0x76396E43. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x7E43D716 and returned 0x763977CD. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x7E43D72B and returned 0x76393B93. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x7E43D740 and returned 0x76394E54. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x7E43D755 and returned 0x76397A7B. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x7E43D76A and returned 0x76393A86. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x7E43D77F and returned 0x763945F7. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x7E43D794 and returned 0x76394D6E. | |
| 00:00:00.281: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x7E43D7A9 and returned 0x76399C7F. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x7E43D7BE and returned 0x76399BAC. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x7E43D7D3 and returned 0x76399BFC. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x7E43D7E8 and returned 0x76393AC3. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x7E43D7FD and returned 0x763929DE. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x7E43D812 and returned 0x7639DE65. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x7E43D827 and returned 0x76398719. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x7E43D83C and returned 0x7639E0D3. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x7E43D851 and returned 0x763A2E03. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x7E43D866 and returned 0x76398B8E. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x7E43D87B and returned 0x763967D5. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x7E43D890 and returned 0x763967FC. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x7E43D8A5 and returned 0x763937CA. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x7E43D8BA and returned 0x76399D74. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x7E43D8CF and returned 0x763A3F0B. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x7E43D8E4 and returned 0x763A34DA. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x7E43D8F9 and returned 0x763A3511. | |
| 00:00:00.291: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x7E43D90E and returned 0x763A4304. | |
| 00:00:00.291: DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1). | |
| 00:00:00.291: LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x76390000. | |
| 00:00:00.301: LoadLibraryW("LPK.DLL") called from "GDI32.DLL" at address 0x77F3DBE6. | |
| 00:00:00.301: Loaded "LPK.DLL" at address 0x629C0000. Successfully hooked module. | |
| 00:00:00.301: Loaded "USP10.DLL" at address 0x74D90000. Successfully hooked module. | |
| 00:00:00.301: DllMain(0x74D90000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" called. | |
| 00:00:00.301: LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x74DAE23F. | |
| 00:00:00.301: LoadLibraryA("gdi32.dll") returned 0x77F10000. | |
| 00:00:00.301: GetProcAddress(0x77F10000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x74DAE25F and returned 0x77F3E862. | |
| 00:00:00.301: DllMain(0x74D90000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" returned 1 (0x1). | |
| 00:00:00.301: DllMain(0x629C0000, DLL_PROCESS_ATTACH, 0x00000000) in "LPK.DLL" called. | |
| 00:00:00.301: DllMain(0x629C0000, DLL_PROCESS_ATTACH, 0x00000000) in "LPK.DLL" returned 1 (0x1). | |
| 00:00:00.301: LoadLibraryW("LPK.DLL") returned 0x629C0000. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkInitialize") called from "GDI32.DLL" at address 0x77F3DC01 and returned 0x629C2EC8. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkExtTextOut") called from "GDI32.DLL" at address 0x77F3DC0C and returned 0x629C3203. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkGetCharacterPlacement") called from "GDI32.DLL" at address 0x77F3DC19 and returned 0x629C387A. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkGetTextExtentExPoint") called from "GDI32.DLL" at address 0x77F3DC26 and returned 0x629C3235. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkUseGDIWidthCache") called from "GDI32.DLL" at address 0x77F3DC33 and returned 0x629C3D92. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkTabbedTextOut") called from "GDI32.DLL" at address 0x77F3DC40 and returned 0x629C3E53. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkPSMTextOut") called from "GDI32.DLL" at address 0x77F3DC4B and returned 0x629C1282. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkDrawTextEx") called from "GDI32.DLL" at address 0x77F3DC56 and returned 0x629C1235. | |
| 00:00:00.311: GetProcAddress(0x629C0000 [LPK.DLL], "LpkEditControl") called from "GDI32.DLL" at address 0x77F3DC61 and returned 0x629C6004. | |
| 00:00:00.311: DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0012FD30) in "USER32.DLL" returned 1 (0x1). | |
| 00:00:00.311: DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SECUR32.DLL" called. | |
| 00:00:00.321: DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SECUR32.DLL" returned 1 (0x1). | |
| 00:00:00.321: DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x0012FD30) in "RPCRT4.DLL" called. | |
| 00:00:00.321: DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x0012FD30) in "RPCRT4.DLL" returned 1 (0x1). | |
| 00:00:00.321: DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "ADVAPI32.DLL" called. | |
| 00:00:00.321: DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "ADVAPI32.DLL" returned 1 (0x1). | |
| 00:00:00.321: DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCRT.DLL" called. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "MSVCRT.DLL" at address 0x77C379C2 and returned 0x7C80B8C9. | |
| 00:00:00.321: DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCRT.DLL" returned 1 (0x1). | |
| 00:00:00.321: DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SHLWAPI.DLL" called. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D19 and returned 0x7C82B03E. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D28 and returned 0x7C864C53. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D37 and returned 0x7C8201D5. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ChangeTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D47 and returned 0x7C812C9B. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D55 and returned 0x7C820188. | |
| 00:00:00.321: DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SHLWAPI.DLL" returned 1 (0x1). | |
| 00:00:00.321: DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SHELL32.DLL" called. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "SHELL32.DLL" at address 0x7CA276E6 and returned 0x7C8144BC. | |
| 00:00:00.321: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "SHELL32.DLL" at address 0x7C9E76B9 and returned 0x7C80A6E4. | |
| 00:00:00.321: LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA27320. | |
| 00:00:00.331: Loaded "COMCTL32.DLL" at address 0x773D0000. Successfully hooked module. | |
| 00:00:00.331: DllMain(0x773D0000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" called. | |
| 00:00:00.331: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "COMCTL32.DLL" at address 0x7745B789 and returned 0x7C80ADC9. | |
| 00:00:00.331: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "COMCTL32.DLL" at address 0x7745B60C and returned 0x7C8144BC. | |
| 00:00:00.331: GetProcAddress(0x629C0000 [LPK.DLL], "LpkEditControl") called from "COMCTL32.DLL" at address 0x77422B75 and returned 0x629C6004. | |
| 00:00:00.331: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "COMCTL32.DLL" at address 0x7745B69E and returned 0x7C80A6E4. | |
| 00:00:00.331: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "COMCTL32.DLL" at address 0x7745B6F4 and returned 0x7C80A715. | |
| 00:00:00.331: DllMain(0x773D0000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" returned 1 (0x1). | |
| 00:00:00.331: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:00.341: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "SHELL32.DLL" at address 0x7C9E7724 and returned 0x7C80A715. | |
| 00:00:00.341: LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA2744E. | |
| 00:00:00.341: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:00.341: GetProcAddress(0x773D0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "SHELL32.DLL" at address 0x7CA2745E and returned 0x773D4088. | |
| 00:00:00.341: DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "SHELL32.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x774E0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "OLE32.DLL" called. | |
| 00:00:00.341: DllMain(0x774E0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "OLE32.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x71AA0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "WS2HELP.DLL" called. | |
| 00:00:00.341: DllMain(0x71AA0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "WS2HELP.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x71AB0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "WS2_32.DLL" called. | |
| 00:00:00.341: DllMain(0x71AB0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "WS2_32.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x71B20000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MPR.DLL" called. | |
| 00:00:00.341: DllMain(0x71B20000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MPR.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x78AA0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCR100.DLL" called. | |
| 00:00:00.341: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR100.DLL" at address 0x78ABBA3B and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.341: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR100.DLL" at address 0x78ABBA48 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.341: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR100.DLL" at address 0x78ABBA55 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.341: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsFree") called from "MSVCR100.DLL" at address 0x78ABBA62 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.341: DllMain(0x78AA0000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCR100.DLL" returned 1 (0x1). | |
| 00:00:00.341: DllMain(0x78050000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCP100.DLL" called. | |
| 00:00:00.351: DllMain(0x78050000, DLL_PROCESS_ATTACH, 0x0012FD30) in "MSVCP100.DLL" returned 1 (0x1). | |
| 00:00:00.351: DllMain(0x67000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5CORE.DLL" called. | |
| 00:00:00.361: DllMain(0x67000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5CORE.DLL" returned 1 (0x1). | |
| 00:00:00.361: DllMain(0x76F20000, DLL_PROCESS_ATTACH, 0x0012FD30) in "DNSAPI.DLL" called. | |
| 00:00:00.361: DllMain(0x76F20000, DLL_PROCESS_ATTACH, 0x0012FD30) in "DNSAPI.DLL" returned 1 (0x1). | |
| 00:00:00.361: DllMain(0x64000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5NETWORK.DLL" called. | |
| 00:00:00.361: DllMain(0x64000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5NETWORK.DLL" returned 1 (0x1). | |
| 00:00:00.361: DllMain(0x00420000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5GUI.DLL" called. | |
| 00:00:00.361: DllMain(0x00420000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5GUI.DLL" returned 1 (0x1). | |
| 00:00:00.361: DllMain(0x00360000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5MULTIMEDIA.DLL" called. | |
| 00:00:00.371: LoadLibraryW("ADVAPI32.DLL") called from "MSVCR100.DLL" at address 0x78B2B585. | |
| 00:00:00.371: LoadLibraryW("ADVAPI32.DLL") returned 0x77DD0000. | |
| 00:00:00.371: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "SystemFunction036") called from "MSVCR100.DLL" at address 0x78B2B5AE and returned 0x77DD82A2. | |
| 00:00:00.371: DllMain(0x00360000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5MULTIMEDIA.DLL" returned 1 (0x1). | |
| 00:00:00.371: DllMain(0x65000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5WIDGETS.DLL" called. | |
| 00:00:00.371: DllMain(0x65000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5WIDGETS.DLL" returned 1 (0x1). | |
| 00:00:00.371: DllMain(0x63000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5OPENGL.DLL" called. | |
| 00:00:00.371: DllMain(0x63000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5OPENGL.DLL" returned 1 (0x1). | |
| 00:00:00.371: DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5MULTIMEDIAWIDGETS.DLL" called. | |
| 00:00:00.371: DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x0012FD30) in "QT5MULTIMEDIAWIDGETS.DLL" returned 1 (0x1). | |
| 00:00:00.381: LoadLibraryW("C:\WINDOWS\system32\shell32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.381: LoadLibraryW("C:\WINDOWS\system32\shell32.dll") returned 0x7C9C0000. | |
| 00:00:00.381: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetKnownFolderPath") called from "QT5CORE.DLL" at address 0x67124FE0 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.871: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\platforms\qwindows.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:00.881: Loaded "QWINDOWS.DLL" at address 0x00E50000. Successfully hooked module. | |
| 00:00:00.881: Loaded "WINMM.DLL" at address 0x76B40000. Successfully hooked module. | |
| 00:00:00.891: Loaded "OLEAUT32.DLL" at address 0x77120000. Successfully hooked module. | |
| 00:00:00.891: DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" called. | |
| 00:00:00.891: DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" returned 1 (0x1). | |
| 00:00:00.891: DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL" called. | |
| 00:00:00.891: DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1). | |
| 00:00:00.891: DllMain(0x00E50000, DLL_PROCESS_ATTACH, 0x00000000) in "QWINDOWS.DLL" called. | |
| 00:00:00.891: DllMain(0x00E50000, DLL_PROCESS_ATTACH, 0x00000000) in "QWINDOWS.DLL" returned 1 (0x1). | |
| 00:00:00.891: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\platforms\qwindows.dll") returned 0x00E50000. | |
| 00:00:00.901: GetProcAddress(0x00E50000 [QWINDOWS.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x00E9C3F0. | |
| 00:00:00.901: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E428055. | |
| 00:00:00.901: Loaded "UXTHEME.DLL" at address 0x5AD70000. Successfully hooked module. | |
| 00:00:00.901: DllMain(0x5AD70000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called. | |
| 00:00:00.901: DllMain(0x5AD70000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1). | |
| 00:00:00.901: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000. | |
| 00:00:00.901: LoadLibraryW("uxtheme.dll") called from "UXTHEME.DLL" at address 0x5AD7A1EC. | |
| 00:00:00.911: LoadLibraryW("uxtheme.dll") returned 0x5AD70000. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E428055. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E428055. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E428055. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000. | |
| 00:00:00.911: LoadLibraryExW("C:\WINDOWS\system32\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E428055. | |
| 00:00:00.911: Loaded "MSCTF.DLL" at address 0x74720000. Successfully hooked module. | |
| 00:00:00.911: DllMain(0x74720000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called. | |
| 00:00:00.911: GetProcAddress(0x7C900000 [NTDLL.DLL], "NtQueryInformationProcess") called from "MSCTF.DLL" at address 0x74723AB5 and returned 0x7C90D7FE. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmCoUninitialize") called from "MSCTF.DLL" at address 0x74722923 and returned 0x763A3E9F. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmLastEnabledWndDestroy") called from "MSCTF.DLL" at address 0x74722960 and returned 0x763A418A. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmSetCiceroStartInThread") called from "MSCTF.DLL" at address 0x747229A3 and returned 0x763A37A6. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmIsCiceroStartedInThread") called from "MSCTF.DLL" at address 0x747229E8 and returned 0x763A378E. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmIsCiceroEnabled") called from "MSCTF.DLL" at address 0x74722A2D and returned 0x763A3773. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmIsTextFrameServiceDisabled") called from "MSCTF.DLL" at address 0x74722A69 and returned 0x763A38A1. | |
| 00:00:00.911: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmEnterCoInitCountSkipMode") called from "MSCTF.DLL" at address 0x74722AB0 and returned 0x763A31F0. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "CtfImmLeaveCoInitCountSkipMode") called from "MSCTF.DLL" at address 0x74722AF6 and returned 0x763A3206. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "MSCTF.DLL" at address 0x74722B3A and returned 0x763997BE. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmReleaseContext") called from "MSCTF.DLL" at address 0x74722B73 and returned 0x763929D3. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmNotifyIME") called from "MSCTF.DLL" at address 0x74722BAD and returned 0x76396FD8. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetConversionStatus") called from "MSCTF.DLL" at address 0x74722BE0 and returned 0x763945F7. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetConversionStatus") called from "MSCTF.DLL" at address 0x74722C1E and returned 0x76393A86. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetProperty") called from "MSCTF.DLL" at address 0x74722C5A and returned 0x76398B8E. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetOpenStatus") called from "MSCTF.DLL" at address 0x74722C8E and returned 0x76393AC3. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetContext") called from "MSCTF.DLL" at address 0x74722CC4 and returned 0x763923A1. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetOpenStatus") called from "MSCTF.DLL" at address 0x74722CF9 and returned 0x7639470B. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmInstallIMEA") called from "MSCTF.DLL" at address 0x74722D30 and returned 0x763996DF. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetDescriptionA") called from "MSCTF.DLL" at address 0x74722D66 and returned 0x763989A2. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetDescriptionW") called from "MSCTF.DLL" at address 0x74722D9E and returned 0x763988F5. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetIMEFileNameA") called from "MSCTF.DLL" at address 0x74722DD6 and returned 0x76398AF0. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetIMEFileNameW") called from "MSCTF.DLL" at address 0x74722E0E and returned 0x76398A39. | |
| 00:00:00.921: GetProcAddress(0x76390000 [IMM32.DLL], "ImmSetHotKey") called from "MSCTF.DLL" at address 0x747232EC and returned 0x7E453C33. | |
| 00:00:00.921: LoadLibraryW("rpcrt4.dll") called from "RPCRT4.DLL" at address 0x77E8B525. | |
| 00:00:00.921: LoadLibraryW("rpcrt4.dll") returned 0x77E70000. | |
| 00:00:00.921: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetUserDefaultUILanguage") called from "MSCTF.DLL" at address 0x74722EAF and returned 0x7C82F6CC. | |
| 00:00:00.921: DllMain(0x74720000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1). | |
| 00:00:00.921: LoadLibraryExW("C:\WINDOWS\system32\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x74720000. | |
| 00:00:00.931: LoadLibraryW("C:\WINDOWS\system32\user32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.931: LoadLibraryW("C:\WINDOWS\system32\user32.dll") returned 0x7E410000. | |
| 00:00:00.931: GetProcAddress(0x7E410000 [USER32.DLL], "SetLayeredWindowAttributes") called from "QWINDOWS.DLL" at address 0x00E5ACB7 and returned 0x7E42CE12. | |
| 00:00:00.931: GetProcAddress(0x7E410000 [USER32.DLL], "UpdateLayeredWindow") called from "QWINDOWS.DLL" at address 0x00E5ACED and returned 0x7E42ACF3. | |
| 00:00:00.931: GetProcAddress(0x7E410000 [USER32.DLL], "UpdateLayeredWindowIndirect") called from "QWINDOWS.DLL" at address 0x00E5AD50 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.931: GetProcAddress(0x7E410000 [USER32.DLL], "IsHungAppWindow") called from "QWINDOWS.DLL" at address 0x00E5AD87 and returned 0x7E469C61. | |
| 00:00:00.931: GetProcAddress(0x7E410000 [USER32.DLL], "SetProcessDPIAware") called from "QWINDOWS.DLL" at address 0x00E5ADBA and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.931: LoadLibraryW("C:\WINDOWS\system32\shell32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.931: LoadLibraryW("C:\WINDOWS\system32\shell32.dll") returned 0x7C9C0000. | |
| 00:00:00.931: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHCreateItemFromParsingName") called from "QWINDOWS.DLL" at address 0x00E5B087 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.941: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetKnownFolderIDList") called from "QWINDOWS.DLL" at address 0x00E5B0BD and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.941: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetStockIconInfo") called from "QWINDOWS.DLL" at address 0x00E5B0F4 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.941: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetImageList") called from "QWINDOWS.DLL" at address 0x00E5B12B and returned 0x7C9FD005. | |
| 00:00:00.941: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHCreateItemFromIDList") called from "QWINDOWS.DLL" at address 0x00E5B15E and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\wintab32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\wintab32.dll") returned NULL. Error: The specified module could not be found (126). | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\winmm.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\winmm.dll") returned 0x76B40000. | |
| 00:00:00.941: GetProcAddress(0x76B40000 [WINMM.DLL], "timeSetEvent") called from "QT5CORE.DLL" at address 0x67124FE0 and returned 0x76B5B090. | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\winmm.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.941: LoadLibraryW("C:\WINDOWS\system32\winmm.dll") returned 0x76B40000. | |
| 00:00:00.941: GetProcAddress(0x76B40000 [WINMM.DLL], "timeKillEvent") called from "QT5CORE.DLL" at address 0x67124FE0 and returned 0x76B5AA45. | |
| 00:00:00.941: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetTickCount64") called from "QT5CORE.DLL" at address 0x67096417 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:00.961: LoadLibraryW("C:\WINDOWS\system32\uxtheme.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:00.961: LoadLibraryW("C:\WINDOWS\system32\uxtheme.dll") returned 0x5AD70000. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "IsAppThemed") called from "QT5WIDGETS.DLL" at address 0x650A28C5 and returned 0x5AD78B4D. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "IsThemeActive") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD78B85. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemePartSize") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD741A9. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "OpenThemeData") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD773B8. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "CloseThemeData") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD74773. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "DrawThemeBackground") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD72BEF. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "DrawThemeBackgroundEx") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD75458. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetCurrentThemeName") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7B76A. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeBool") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7BEA5. | |
| 00:00:00.961: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeColor") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7459D. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeEnumValue") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7459D. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeFilename") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9C05D. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeFont") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7BE06. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeInt") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7459D. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeIntList") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9BFF1. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeMargins") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7B0D2. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [ | |
| UXTHEME.DLL], "GetThemeMetric") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD8CA91. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemePartSize") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD741A9. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemePosition") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9BF85. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemePropertyOrigin") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9BF19. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeRect") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7BF0A. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeString") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9C05D. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeBackgroundRegion") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD77DD3. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeDocumentationProperty") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD9D3AF. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "IsThemeBackgroundPartiallyTransparent") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD8AEF2. | |
| 00:00:00.972: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "SetWindowTheme") called from "QT5WIDGETS.DLL" at address 0x650A27DC and returned 0x5AD7B39E. | |
| 00:00:01.342: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\mediaservice\wmfengine.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:01.352: Loaded "WMFENGINE.DLL" at address 0x01170000. Successfully hooked module. | |
| 00:00:01.352: Loaded "D3D9.DLL" at address 0x4FDD0000. Successfully hooked module. | |
| 00:00:01.352: Loaded "D3D8THK.DLL" at address 0x6D990000. Successfully hooked module. | |
| 00:00:01.362: Loaded "VERSION.DLL" at address 0x77C00000. Successfully hooked module. | |
| 00:00:01.362: First chance exception 0xC0000139 (DLL Not Found) occurred in "NTDLL.DLL" at address 0x7C967406. | |
| 00:00:01.362: Unloaded "WMFENGINE.DLL" at address 0x01170000. | |
| 00:00:01.362: Unloaded "D3D9.DLL" at address 0x4FDD0000. | |
| 00:00:01.362: Unloaded "VERSION.DLL" at address 0x77C00000. | |
| 00:00:01.362: Unloaded "D3D8THK.DLL" at address 0x6D990000. | |
| 00:00:01.362: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\mediaservice\wmfengine.dll") returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:01.362: defaultServiceProvider::requestService(): no service found for - "org.qt-project.qt.mediaplayer" | |
| 00:00:02.454: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qdds.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.464: Loaded "QDDS.DLL" at address 0x01170000. Successfully hooked module. | |
| 00:00:02.464: DllMain(0x01170000, DLL_PROCESS_ATTACH, 0x00000000) in "QDDS.DLL" called. | |
| 00:00:02.464: DllMain(0x01170000, DLL_PROCESS_ATTACH, 0x00000000) in "QDDS.DLL" returned 1 (0x1). | |
| 00:00:02.464: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qdds.dll") returned 0x01170000. | |
| 00:00:02.474: GetProcAddress(0x01170000 [QDDS.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x011714C0. | |
| 00:00:02.474: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qgif.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.474: Loaded "QGIF.DLL" at address 0x01180000. Successfully hooked module. | |
| 00:00:02.474: DllMain(0x01180000, DLL_PROCESS_ATTACH, 0x00000000) in "QGIF.DLL" called. | |
| 00:00:02.474: DllMain(0x01180000, DLL_PROCESS_ATTACH, 0x00000000) in "QGIF.DLL" returned 1 (0x1). | |
| 00:00:02.474: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qgif.dll") returned 0x01180000. | |
| 00:00:02.484: GetProcAddress(0x01180000 [QGIF.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x01183370. | |
| 00:00:02.484: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qicns.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.484: Loaded "QICNS.DLL" at address 0x01190000. Successfully hooked module. | |
| 00:00:02.484: DllMain(0x01190000, DLL_PROCESS_ATTACH, 0x00000000) in "QICNS.DLL" called. | |
| 00:00:02.484: DllMain(0x01190000, DLL_PROCESS_ATTACH, 0x00000000) in "QICNS.DLL" returned 1 (0x1). | |
| 00:00:02.484: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qicns.dll") returned 0x01190000. | |
| 00:00:02.494: GetProcAddress(0x01190000 [QICNS.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x011912C0. | |
| 00:00:02.494: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qico.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.494: Loaded "QICO.DLL" at address 0x011A0000. Successfully hooked module. | |
| 00:00:02.494: DllMain(0x011A0000, DLL_PROCESS_ATTACH, 0x00000000) in "QICO.DLL" called. | |
| 00:00:02.494: DllMain(0x011A0000, DLL_PROCESS_ATTACH, 0x00000000) in "QICO.DLL" returned 1 (0x1). | |
| 00:00:02.494: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qico.dll") returned 0x011A0000. | |
| 00:00:02.494: GetProcAddress(0x011A0000 [QICO.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x011A2E70. | |
| 00:00:02.494: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qjp2.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.514: Loaded "QJP2.DLL" at address 0x011B0000. Successfully hooked module. | |
| 00:00:02.514: DllMain(0x011B0000, DLL_PROCESS_ATTACH, 0x00000000) in "QJP2.DLL" called. | |
| 00:00:02.514: DllMain(0x011B0000, DLL_PROCESS_ATTACH, 0x00000000) in "QJP2.DLL" returned 1 (0x1). | |
| 00:00:02.514: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qjp2.dll") returned 0x011B0000. | |
| 00:00:02.514: GetProcAddress(0x011B0000 [QJP2.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x01202AB0. | |
| 00:00:02.514: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qjpeg.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.524: Loaded "QJPEG.DLL" at address 0x01220000. Successfully hooked module. | |
| 00:00:02.524: DllMain(0x01220000, DLL_PROCESS_ATTACH, 0x00000000) in "QJPEG.DLL" called. | |
| 00:00:02.524: DllMain(0x01220000, DLL_PROCESS_ATTACH, 0x00000000) in "QJPEG.DLL" returned 1 (0x1). | |
| 00:00:02.524: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qjpeg.dll") returned 0x01220000. | |
| 00:00:02.534: GetProcAddress(0x01220000 [QJPEG.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x0124C670. | |
| 00:00:02.534: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qmng.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.534: Loaded "QMNG.DLL" at address 0x01260000. Successfully hooked module. | |
| 00:00:02.544: DllMain(0x01260000, DLL_PROCESS_ATTACH, 0x00000000) in "QMNG.DLL" called. | |
| 00:00:02.544: DllMain(0x01260000, DLL_PROCESS_ATTACH, 0x00000000) in "QMNG.DLL" returned 1 (0x1). | |
| 00:00:02.544: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qmng.dll") returned 0x01260000. | |
| 00:00:02.544: GetProcAddress(0x01260000 [QMNG.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x0128F4C0. | |
| 00:00:02.544: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qsvg.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.544: Loaded "QSVG.DLL" at address 0x012A0000. Successfully hooked module. | |
| 00:00:02.554: Loaded "QT5SVG.DLL" at address 0x66000000. Successfully hooked module. | |
| 00:00:02.564: DllMain(0x66000000, DLL_PROCESS_ATTACH, 0x00000000) in "QT5SVG.DLL" called. | |
| 00:00:02.564: DllMain(0x66000000, DLL_PROCESS_ATTACH, 0x00000000) in "QT5SVG.DLL" returned 1 (0x1). | |
| 00:00:02.564: DllMain(0x012A0000, DLL_PROCESS_ATTACH, 0x00000000) in "QSVG.DLL" called. | |
| 00:00:02.564: DllMain(0x012A0000, DLL_PROCESS_ATTACH, 0x00000000) in "QSVG.DLL" returned 1 (0x1). | |
| 00:00:02.564: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qsvg.dll") returned 0x012A0000. | |
| 00:00:02.564: GetProcAddress(0x012A0000 [QSVG.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x012A1220. | |
| 00:00:02.564: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qtga.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.564: Loaded "QTGA.DLL" at address 0x012C0000. Successfully hooked module. | |
| 00:00:02.564: DllMain(0x012C0000, DLL_PROCESS_ATTACH, 0x00000000) in "QTGA.DLL" called. | |
| 00:00:02.564: DllMain(0x012C0000, DLL_PROCESS_ATTACH, 0x00000000) in "QTGA.DLL" returned 1 (0x1). | |
| 00:00:02.564: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qtga.dll") returned 0x012C0000. | |
| 00:00:02.574: GetProcAddress(0x012C0000 [QTGA.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x012C1B60. | |
| 00:00:02.574: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qtiff.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.584: Loaded "QTIFF.DLL" at address 0x012D0000. Successfully hooked module. | |
| 00:00:02.584: DllMain(0x012D0000, DLL_PROCESS_ATTACH, 0x00000000) in "QTIFF.DLL" called. | |
| 00:00:02.594: DllMain(0x012D0000, DLL_PROCESS_ATTACH, 0x00000000) in "QTIFF.DLL" returned 1 (0x1). | |
| 00:00:02.594: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qtiff.dll") returned 0x012D0000. | |
| 00:00:02.594: GetProcAddress(0x012D0000 [QTIFF.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x012D1230. | |
| 00:00:02.594: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qwbmp.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.594: Loaded "QWBMP.DLL" at address 0x01320000. Successfully hooked module. | |
| 00:00:02.594: DllMain(0x01320000, DLL_PROCESS_ATTACH, 0x00000000) in "QWBMP.DLL" called. | |
| 00:00:02.594: DllMain(0x01320000, DLL_PROCESS_ATTACH, 0x00000000) in "QWBMP.DLL" returned 1 (0x1). | |
| 00:00:02.594: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qwbmp.dll") returned 0x01320000. | |
| 00:00:02.594: GetProcAddress(0x01320000 [QWBMP.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x01321BA0. | |
| 00:00:02.594: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qwebp.dll") called from "QT5CORE.DLL" at address 0x67166D07. | |
| 00:00:02.604: Loaded "QWEBP.DLL" at address 0x01330000. Successfully hooked module. | |
| 00:00:02.604: DllMain(0x01330000, DLL_PROCESS_ATTACH, 0x00000000) in "QWEBP.DLL" called. | |
| 00:00:02.604: DllMain(0x01330000, DLL_PROCESS_ATTACH, 0x00000000) in "QWEBP.DLL" returned 1 (0x1). | |
| 00:00:02.604: LoadLibraryW("Z:\myqt\5.5.0\install\msvc2010\32bit-xp\plugins\imageformats\qwebp.dll") returned 0x01330000. | |
| 00:00:02.604: GetProcAddress(0x01330000 [QWEBP.DLL], "qt_plugin_instance") called from "QT5CORE.DLL" at address 0x671668C7 and returned 0x01331220. | |
| 00:00:02.624: LoadLibraryW("version.dll") called from "IMM32.DLL" at address 0x763985B6. | |
| 00:00:02.624: Loaded "VERSION.DLL" at address 0x77C00000. Successfully hooked module. | |
| 00:00:02.624: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" called. | |
| 00:00:02.624: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1). | |
| 00:00:02.624: LoadLibraryW("version.dll") returned 0x77C00000. | |
| 00:00:02.634: GetProcAddress(0x77C00000 [VERSION.DLL], "GetFileVersionInfoW") called from "IMM32.DLL" at address 0x763985D8 and returned 0x77C0166F. | |
| 00:00:02.634: GetProcAddress(0x77C00000 [VERSION.DLL], "GetFileVersionInfoSizeW") called from "IMM32.DLL" at address 0x763985ED and returned 0x77C0138C. | |
| 00:00:02.634: GetProcAddress(0x77C00000 [VERSION.DLL], "VerQueryValueW") called from "IMM32.DLL" at address 0x76398602 and returned 0x77C01805. | |
| 00:00:02.634: LoadLibraryExW("C:\WINDOWS\system32\msctfime.ime", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "VERSION.DLL" at address 0x77C013BD. | |
| 00:00:02.634: Mapped "MSCTFIME.IME" as a data file into memory at address 0x01380001. | |
| 00:00:02.634: LoadLibraryExW("C:\WINDOWS\system32\msctfime.ime", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x01380001. | |
| 00:00:02.634: LoadLibraryExW("C:\WINDOWS\system32\msctfime.ime", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "VERSION.DLL" at address 0x77C0169F. | |
| 00:00:02.634: Mapped "MSCTFIME.IME" as a data file into memory at address 0x01380001. | |
| 00:00:02.634: LoadLibraryExW("C:\WINDOWS\system32\msctfime.ime", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x01380001. | |
| 00:00:02.634: DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000000) in "VERSION.DLL" called. | |
| 00:00:02.634: DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1). | |
| 00:00:02.634: Unloaded "VERSION.DLL" at address 0x77C00000. | |
| 00:00:02.634: LoadLibraryW("C:\WINDOWS\system32\msctfime.ime") called from "IMM32.DLL" at address 0x763A3B26. | |
| 00:00:02.634: Loaded "MSCTFIME.IME" at address 0x755C0000. Successfully hooked module. | |
| 00:00:02.644: DllMain(0x755C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTFIME.IME" called. | |
| 00:00:02.644: LoadLibraryA("C:\WINDOWS\system32\ole32.dll") called from "MSCTFIME.IME" at address 0x755DD544. | |
| 00:00:02.644: LoadLibraryA("C:\WINDOWS\system32\ole32.dll") returned 0x774E0000. | |
| 00:00:02.644: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstance") called from "MSCTFIME.IME" at address 0x755DA37E and returned 0x774FF1D4. | |
| 00:00:02.644: DllMain(0x755C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTFIME.IME" returned 1 (0x1). | |
| 00:00:02.644: LoadLibraryW("C:\WINDOWS\system32\msctfime.ime") returned 0x755C0000. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeCreateThreadMgr") called from "IMM32.DLL" at address 0x763A3B42 and returned 0x755D95CB. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeDestroyThreadMgr") called from "IMM32.DLL" at address 0x763A3B5C and returned 0x755D9656. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeCreateInputContext") called from "IMM32.DLL" at address 0x763A3B76 and returned 0x755D96D4. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeDestroyInputContext") called from "IMM32.DLL" at address 0x763A3B8C and returned 0x755D9175. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeSetActiveContextAlways") called from "IMM32.DLL" at address 0x763A3BA2 and returned 0x755D9702. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeProcessCicHotkey") called from "IMM32.DLL" at address 0x763A3BB8 and returned 0x755D99B4. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeDispatchDefImeMessage") called from "IMM32.DLL" at address 0x763A3BCE and returned 0x755D3853. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeIsIME") called from "IMM32.DLL" at address 0x763A3BE4 and returned 0x755D97A6. | |
| 00:00:02.644: GetProcAddress(0x7C900000 [NTDLL.DLL], "RtlDllShutdownInProgress") called from "MSCTFIME.IME" at address 0x755D8B1C and returned 0x7C910501. | |
| 00:00:02.644: LoadLibraryW("C:\WINDOWS\system32\msctfime.ime") called from "IMM32.DLL" at address 0x763971F4. | |
| 00:00:02.644: LoadLibraryW("C:\WINDOWS\system32\msctfime.ime") returned 0x755C0000. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeInquire") called from "IMM32.DLL" at address 0x7639720D and returned 0x755C7734. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeConversionList") called from "IMM32.DLL" at address 0x76397222 and returned 0x755D9100. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeRegisterWord") called from "IMM32.DLL" at address 0x76397237 and returned 0x755C7734. | |
| 00:00:02.644: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeUnregisterWord") called from "IMM32.DLL" at address 0x7639724C and returned 0x755C7734. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeGetRegisterWordStyle") called from "IMM32.DLL" at address 0x76397261 and returned 0x755D915B. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeEnumRegisterWord") called from "IMM32.DLL" at address 0x76397276 and returned 0x755D9100. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeConfigure") called from "IMM32.DLL" at address 0x7639728B and returned 0x755D9449. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeDestroy") called from "IMM32.DLL" at address 0x763972A0 and returned 0x755D910A. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeEscape") called from "IMM32.DLL" at address 0x763972B5 and returned 0x755C7734. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeProcessKey") called from "IMM32.DLL" at address 0x763972CA and returned 0x755D98D4. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeSelect") called from "IMM32.DLL" at address 0x763972DF and returned 0x755D915B. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeSetActiveContext") called from "IMM32.DLL" at address 0x763972F4 and returned 0x755D915B. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeToAsciiEx") called from "IMM32.DLL" at address 0x7639730C and returned 0x755D94EA. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "NotifyIME") called from "IMM32.DLL" at address 0x76397324 and returned 0x755D9542. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeSetCompositionString") called from "IMM32.DLL" at address 0x7639733C and returned 0x755D94A8. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "ImeGetImeMenuItems") called from "IMM32.DLL" at address 0x76397354 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeInquireExW") called from "IMM32.DLL" at address 0x76397394 and returned 0x755D9583. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeSelectEx") called from "IMM32.DLL" at address 0x763973A8 and returned 0x755D9300. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeEscapeEx") called from "IMM32.DLL" at address 0x763973BC and returned 0x755D9739. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeGetGuidAtom") called from "IMM32.DLL" at address 0x763973D0 and returned 0x755D9772. | |
| 00:00:02.654: GetProcAddress(0x755C0000 [MSCTFIME.IME], "CtfImeIsGuidMapEnable") called from "IMM32.DLL" at address 0x763973E4 and returned 0x755D9355. | |
| 00:00:02.654: LoadLibraryExA("xpsp2res.dll", 0x00000000, 0x00000000) called from "OLE32.DLL" at address 0x77517646. | |
| 00:00:02.664: Loaded "XPSP2RES.DLL" at address 0x01660000. Successfully hooked module. | |
| 00:00:02.664: LoadLibraryExA("xpsp2res.dll", 0x00000000, 0x00000000) returned 0x01660000. | |
| 00:00:02.664: LoadLibraryW("OLE32") called from "RPCRT4.DLL" at address 0x77E8C36C. | |
| 00:00:02.664: LoadLibraryW("OLE32") returned 0x774E0000. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoGetClassObject") called from "RPCRT4.DLL" at address 0x77E8C387 and returned 0x7751522D. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoGetMarshalSizeMax") called from "RPCRT4.DLL" at address 0x77E8C3A1 and returned 0x7752D278. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoMarshalInterface") called from "RPCRT4.DLL" at address 0x77E8C3BB and returned 0x7750E5D9. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoUnmarshalInterface") called from "RPCRT4.DLL" at address 0x77E8C3D5 and returned 0x7752D3AC. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "StringFromIID") called from "RPCRT4.DLL" at address 0x77E8C3EF and returned 0x7754662D. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoGetPSClsid") called from "RPCRT4.DLL" at address 0x77E8C409 and returned 0x77519358. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemAlloc") called from "RPCRT4.DLL" at address 0x77E8C41F and returned 0x774FD020. | |
| 00:00:02.664: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemFree") called from "RPCRT4.DLL" at address 0x77E8C435 and returned 0x774FD004. | |
| 00:00:02.674: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstance") called from "RPCRT4.DLL" at address 0x77E8C44B and returned 0x774FF1D4. | |
| 00:00:02.674: GetProcAddress(0x774E0000 [OLE32.DLL], "CoReleaseMarshalData") called from "RPCRT4.DLL" at address 0x77E8C461 and returned 0x7750DA8B. | |
| 00:00:02.674: GetProcAddress(0x774E0000 [OLE32.DLL], "DcomChannelSetHResult") called from "RPCRT4.DLL" at address 0x77E8C477 and returned 0x7752AD6F. | |
| 00:00:02.674: GetProcAddress(0x77F10000 [GDI32.DLL], "GetLayout") called from "USP10.DLL" at address 0x74DAC9B8 and returned 0x77F16B2E. | |
| 00:00:02.674: GetProcAddress(0x77F10000 [GDI32.DLL], "GdiRealizationInfo") called from "USP10.DLL" at address 0x74DA5ADD and returned 0x77F3ED24. | |
| 00:00:02.674: GetProcAddress(0x77F10000 [GDI32.DLL], "FontIsLinked") called from "USP10.DLL" at address 0x74DA76F2 and returned 0x77F523C1. | |
| 00:00:02.674: GetProcAddress(0x77F10000 [GDI32.DLL], "GetFontAssocStatus") called from "USP10.DLL" at address 0x74DAC9E9 and returned 0x77F472E2. | |
| 00:00:02.674: LoadLibraryW("OLE32.DLL") called from "OLE32.DLL" at address 0x774FE518. | |
| 00:00:02.674: LoadLibraryW("OLE32.DLL") returned 0x774E0000. | |
| 00:00:02.684: LoadLibraryW("C:\WINDOWS\system32\gdi32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:02.684: LoadLibraryW("C:\WINDOWS\system32\gdi32.dll") returned 0x77F10000. | |
| 00:00:02.684: GetProcAddress(0x77F10000 [GDI32.DLL], "GetCharWidthI") called from "QWINDOWS.DLL" at address 0x00E6259C and returned 0x77F3E155. | |
| 00:00:02.694: GetProcAddress(0x77F10000 [GDI32.DLL], "GetTextExtentExPointWPri") called from "USP10.DLL" at address 0x74DC46D5 and returned 0x77F3E666. | |
| 00:00:02.694: GetProcAddress(0x7C900000 [NTDLL.DLL], "RtlDllShutdownInProgress") called from "MSCTF.DLL" at address 0x74760030 and returned 0x7C910501. | |
| 00:00:05.178: LoadLibraryW("C:\WINDOWS\system32\advapi32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:05.178: LoadLibraryW("C:\WINDOWS\system32\advapi32.dll") returned 0x77DD0000. | |
| 00:00:05.178: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "GetNamedSecurityInfoW") called from "QT5CORE.DLL" at address 0x6711D367 and returned 0x77DE4FE6. | |
| 00:00:05.178: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "LookupAccountSidW") called from "QT5CORE.DLL" at address 0x6711D374 and returned 0x77DE5707. | |
| 00:00:05.178: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "BuildTrusteeWithSidW") called from "QT5CORE.DLL" at address 0x6711D381 and returned 0x77E227EB. | |
| 00:00:05.178: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "GetEffectiveRightsFromAclW") called from "QT5CORE.DLL" at address 0x6711D38E and returned 0x77E21E07. | |
| 00:00:05.178: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "AllocateAndInitializeSid") called from "QT5CORE.DLL" at address 0x6711D473 and returned 0x77DD7CC9. | |
| 00:00:05.178: LoadLibraryW("C:\WINDOWS\system32\userenv.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:05.178: Loaded "USERENV.DLL" at address 0x769C0000. Successfully hooked module. | |
| 00:00:05.178: DllMain(0x769C0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" called. | |
| 00:00:05.178: DllMain(0x769C0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" returned 1 (0x1). | |
| 00:00:05.178: LoadLibraryW("C:\WINDOWS\system32\userenv.dll") returned 0x769C0000. | |
| 00:00:05.188: GetProcAddress(0x769C0000 [USERENV.DLL], "GetUserProfileDirectoryW") called from "QT5CORE.DLL" at address 0x6711D4CD and returned 0x769C6357. | |
| 00:00:05.188: LoadLibraryW("kernel32") called from "QT5CORE.DLL" at address 0x6711D4DD. | |
| 00:00:05.188: LoadLibraryW("kernel32") returned 0x7C800000. | |
| 00:00:05.188: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetVolumePathNamesForVolumeNameW") called from "QT5CORE.DLL" at address 0x6711D4E9 and returned 0x7C81FD6C. | |
| 00:00:05.188: LoadLibraryW("C:\WINDOWS\system32\Comdlg32.dll") called from "QT5CORE.DLL" at address 0x671675DE. | |
| 00:00:05.188: Loaded "COMDLG32.DLL" at address 0x763B0000. Successfully hooked module. | |
| 00:00:05.188: DllMain(0x763B0000, DLL_PROCESS_ATTACH, 0x00000000) in "COMDLG32.DLL" called. | |
| 00:00:05.188: DllMain(0x763B0000, DLL_PROCESS_ATTACH, 0x00000000) in "COMDLG32.DLL" returned 1 (0x1). | |
| 00:00:05.188: LoadLibraryW("C:\WINDOWS\system32\Comdlg32.dll") returned 0x763B0000. | |
| 00:00:05.198: GetProcAddress(0x763B0000 [COMDLG32.DLL], "GetOpenFileNameW") called from "QWINDOWS.DLL" at address 0x00E7D331 and returned 0x763C7B9D. | |
| 00:00:05.198: GetProcAddress(0x763B0000 [COMDLG32.DLL], "GetSaveFileNameW") called from "QWINDOWS.DLL" at address 0x00E7D367 and returned 0x763C7C2B. | |
| 00:00:05.198: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetUserDefaultUILanguage") called from "COMDLG32.DLL" at address 0x763B6691 and returned 0x7C82F6CC. | |
| 00:00:05.198: LoadLibraryA("UxTheme.dll") called from "COMCTL32.DLL" at address 0x773D3FAF. | |
| 00:00:05.198: LoadLibraryA("UxTheme.dll") returned 0x5AD70000. | |
| 00:00:05.198: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "OpenThemeData") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD773B8. | |
| 00:00:05.198: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "EnableThemeDialogTexture") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD7B45B. | |
| 00:00:05.198: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetUserDefaultUILanguage") called from "SHELL32.DLL" at address 0x7CA01610 and returned 0x7C82F6CC. | |
| 00:00:05.198: GetProcAddress(0x773D0000 [COMCTL32.DLL], "ImageList_Create") called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E9366. | |
| 00:00:05.198: GetProcAddress(0x773D0000 [COMCTL32.DLL], "ImageList_SetBkColor") called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E526F. | |
| 00:00:05.198: GetProcAddress(0x773D0000 [COMCTL32.DLL], "ImageList_GetImageCount") called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E515B. | |
| 00:00:05.198: GetProcAddress(0x773D0000 [COMCTL32.DLL], "ImageList_ReplaceIcon") called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E5228. | |
| 00:00:05.198: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000140) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0A80. | |
| 00:00:05.208: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000144) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0C2D. | |
| 00:00:05.208: GetProcAddress(0x773D0000 [COMCTL32.DLL], "ImageList_SetOverlayImage") called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E52F6. | |
| 00:00:05.208: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000143) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0B22. | |
| 00:00:05.208: LoadLibraryA("ole32.dll") called from "SHELL32.DLL" at address 0x7CA046A5. | |
| 00:00:05.208: LoadLibraryA("ole32.dll") returned 0x774E0000. | |
| 00:00:05.208: GetProcAddress(0x774E0000 [OLE32.DLL], "CoInitializeEx") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x7750149B. | |
| 00:00:05.208: LoadLibraryA("appHelp.dll") called from "SHLWAPI.DLL" at address 0x77F717D4. | |
| 00:00:05.208: Loaded "APPHELP.DLL" at address 0x77B40000. Successfully hooked module. | |
| 00:00:05.208: DllMain(0x77B40000, DLL_PROCESS_ATTACH, 0x00000000) in "APPHELP.DLL" called. | |
| 00:00:05.208: DllMain(0x77B40000, DLL_PROCESS_ATTACH, 0x00000000) in "APPHELP.DLL" returned 1 (0x1). | |
| 00:00:05.208: LoadLibraryA("appHelp.dll") returned 0x77B40000. | |
| 00:00:05.208: GetProcAddress(0x77B40000 [APPHELP.DLL], "ApphelpCheckShellObject") called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77B46906. | |
| 00:00:05.218: LoadLibraryA("ole32.dll") called from "SHLWAPI.DLL" at address 0x77F717D4. | |
| 00:00:05.218: LoadLibraryA("ole32.dll") returned 0x774E0000. | |
| 00:00:05.218: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstance") called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x774FF1D4. | |
| 00:00:05.218: LoadLibraryA("CLBCATQ.DLL") called from "OLE32.DLL" at address 0x77512CD5. | |
| 00:00:05.218: Loaded "CLBCATQ.DLL" at address 0x76FD0000. Successfully hooked module. | |
| 00:00:05.218: Loaded "COMRES.DLL" at address 0x77050000. Successfully hooked module. | |
| 00:00:05.218: Loaded "VERSION.DLL" at address 0x77C00000. Successfully hooked module. | |
| 00:00:05.218: DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "COMRES.DLL" called. | |
| 00:00:05.218: DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "COMRES.DLL" returned 1 (0x1). | |
| 00:00:05.218: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" called. | |
| 00:00:05.218: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1). | |
| 00:00:05.218: DllMain(0x76FD0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" called. | |
| 00:00:05.228: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "CLBCATQ.DLL" at address 0x76FD4BC2 and returned 0x7C80B8C9. | |
| 00:00:05.228: DllMain(0x76FD0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" returned 1 (0x1). | |
| 00:00:05.228: LoadLibraryA("CLBCATQ.DLL") returned 0x76FD0000. | |
| 00:00:05.228: GetProcAddress(0x76FD0000 [CLBCATQ.DLL], "GetCatalogObject") called from "OLE32.DLL" at address 0x77512CEA and returned 0x76FD3F78. | |
| 00:00:05.228: LoadLibraryA("CLBCATQ.DLL") called from "OLE32.DLL" at address 0x775134B1. | |
| 00:00:05.228: LoadLibraryA("CLBCATQ.DLL") returned 0x76FD0000. | |
| 00:00:05.228: GetProcAddress(0x76FD0000 [CLBCATQ.DLL], "GetCatalogObject2") called from "OLE32.DLL" at address 0x775134C4 and returned 0x76FD4017. | |
| 00:00:05.228: GetProcAddress(0x774E0000 [OLE32.DLL], "CLSIDFromOle1Class") called from "OLE32.DLL" at address 0x7751366D and returned 0x77518421. | |
| 00:00:05.228: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "CLBCATQ.DLL" at address 0x76FD6665 and returned 0x7C80B8C9. | |
| 00:00:05.228: LoadLibraryExW("C:\WINDOWS\System32\cscui.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0x77511FED. | |
| 00:00:05.228: Loaded "CSCUI.DLL" at address 0x77A20000. Successfully hooked module. | |
| 00:00:05.238: Loaded "CSCDLL.DLL" at address 0x76600000. Successfully hooked module. | |
| 00:00:05.238: DllMain(0x76600000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCDLL.DLL" called. | |
| 00:00:05.238: DllMain(0x76600000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCDLL.DLL" returned 1 (0x1). | |
| 00:00:05.238: DllMain(0x77A20000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCUI.DLL" called. | |
| 00:00:05.238: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "CSCUI.DLL" at address 0x77A2190F and returned 0x7C8144BC. | |
| 00:00:05.238: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "CSCUI.DLL" at address 0x77A21B2F and returned 0x7C80A6E4. | |
| 00:00:05.238: LoadLibraryW("comctl32.dll") called from "CSCUI.DLL" at address 0x77A21A29. | |
| 00:00:05.238: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.238: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "CSCUI.DLL" at address 0x77A21AA3 and returned 0x7C80A715. | |
| 00:00:05.238: DllMain(0x77A20000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCUI.DLL" returned 1 (0x1). | |
| 00:00:05.238: LoadLibraryExW("C:\WINDOWS\System32\cscui.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x77A20000. | |
| 00:00:05.248: GetProcAddress(0x77A20000 [CSCUI.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0x77512008 and returned 0x77A21D1D. | |
| 00:00:05.248: GetProcAddress(0x77A20000 [CSCUI.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0x7751201E and returned 0x77A2172D. | |
| 00:00:05.248: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000141) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0AAC. | |
| 00:00:05.248: GetProcAddress(0x774E0000 [OLE32.DLL], "CoUninitialize") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77501364. | |
| 00:00:05.248: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeInt") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD7459D. | |
| 00:00:05.248: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "SetWindowTheme") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD7B39E. | |
| 00:00:05.248: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "CloseThemeData") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD74773. | |
| 00:00:05.248: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeBackgroundExtent") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD8B1AD. | |
| 00:00:05.248: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeMargins") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD7B0D2. | |
| 00:00:05.248: LoadLibraryA("IMM32.dll") called from "COMCTL32.DLL" at address 0x773D3FAF. | |
| 00:00:05.248: LoadLibraryA("IMM32.dll") returned 0x76390000. | |
| 00:00:05.248: GetProcAddress(0x76390000 [IMM32.DLL], "ImmIsIME") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x76398C54. | |
| 00:00:05.258: LoadLibraryA("ole32.dll") called from "COMDLG32.DLL" at address 0x763B3AB7. | |
| 00:00:05.258: LoadLibraryA("ole32.dll") returned 0x774E0000. | |
| 00:00:05.258: GetProcAddress(0x774E0000 [OLE32.DLL], "OleInitialize") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x77501C0A. | |
| 00:00:05.258: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstance") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x774FF1D4. | |
| 00:00:05.258: LoadLibraryExW("C:\WINDOWS\system32\browseui.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0x77511FED. | |
| 00:00:05.258: Loaded "BROWSEUI.DLL" at address 0x75F80000. Successfully hooked module. | |
| 00:00:05.258: DllMain(0x75F80000, DLL_PROCESS_ATTACH, 0x00000000) in "BROWSEUI.DLL" called. | |
| 00:00:05.258: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "BROWSEUI.DLL" at address 0x75F86558 and returned 0x7C8144BC. | |
| 00:00:05.258: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "BROWSEUI.DLL" at address 0x75F855E1 and returned 0x7C80A6E4. | |
| 00:00:05.258: LoadLibraryW("comctl32.dll") called from "SHLWAPI.DLL" at address 0x77F7A66F. | |
| 00:00:05.258: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.258: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "BROWSEUI.DLL" at address 0x75F85626 and returned 0x7C80A715. | |
| 00:00:05.258: GetProcAddress(0x77F60000 [SHLWAPI.DLL], "DelayLoadFailureHook") called from "BROWSEUI.DLL" at address 0x75F854F0 and returned 0x77FC6C0D. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "GetSystemMetrics") called from "BROWSEUI.DLL" at address 0x75F86199 and returned 0x7E418F9C. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromWindow") called from "BROWSEUI.DLL" at address 0x75F861AE and returned 0x7E42A679. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromRect") called from "BROWSEUI.DLL" at address 0x75F861C3 and returned 0x7E42C713. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromPoint") called from "BROWSEUI.DLL" at address 0x75F861D8 and returned 0x7E42ABF5. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "EnumDisplayMonitors") called from "BROWSEUI.DLL" at address 0x75F861ED and returned 0x7E42A77B. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "EnumDisplayDevicesW") called from "BROWSEUI.DLL" at address 0x75F86202 and returned 0x7E41E03C. | |
| 00:00:05.268: GetProcAddress(0x7E410000 [USER32.DLL], "GetMonitorInfoW") called from "BROWSEUI.DLL" at address 0x75F8621F and returned 0x7E42A6D9. | |
| 00:00:05.268: GetProcAddress(0x773D0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773D4088. | |
| 00:00:05.268: DllMain(0x75F80000, DLL_PROCESS_ATTACH, 0x00000000) in "BROWSEUI.DLL" returned 1 (0x1). | |
| 00:00:05.268: LoadLibraryExW("C:\WINDOWS\system32\browseui.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75F80000. | |
| 00:00:05.268: GetProcAddress(0x75F80000 [BROWSEUI.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0x77512008 and returned 0x75F831E4. | |
| 00:00:05.268: GetProcAddress(0x75F80000 [BROWSEUI.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0x7751201E and returned 0x75F8A2E9. | |
| 00:00:05.268: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000148) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E1564. | |
| 00:00:05.268: GetProcAddress(0x76390000 [IMM32.DLL], "ImmGetContext") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x763923A1. | |
| 00:00:05.278: GetProcAddress(0x76390000 [IMM32.DLL], "ImmLockIMC") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x76399F2D. | |
| 00:00:05.278: GetProcAddress(0x76390000 [IMM32.DLL], "ImmUnlockIMC") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x76399F45. | |
| 00:00:05.278: GetProcAddress(0x76390000 [IMM32.DLL], "ImmReleaseContext") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x763929D3. | |
| 00:00:05.278: GetProcAddress(0x774E0000 [OLE32.DLL], "CreateBindCtx") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x774FE618. | |
| 00:00:05.278: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x000000EC) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E17A3. | |
| 00:00:05.278: GetProcAddress(0x774E0000 [OLE32.DLL], "CoGetMalloc") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x774FDEDC. | |
| 00:00:05.278: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x77F68A0E. | |
| 00:00:05.278: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) returned 0x7C9C0000. | |
| 00:00:05.278: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000148) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E1564. | |
| 00:00:05.278: LoadLibraryA("SETUPAPI.dll") called from "SHELL32.DLL" at address 0x7CA046A5. | |
| 00:00:05.278: Loaded "SETUPAPI.DLL" at address 0x77920000. Successfully hooked module. | |
| 00:00:05.288: DllMain(0x77920000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" called. | |
| 00:00:05.288: DllMain(0x77920000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1). | |
| 00:00:05.288: LoadLibraryA("SETUPAPI.dll") returned 0x77920000. | |
| 00:00:05.288: GetProcAddress(0x77920000 [SETUPAPI.DLL], "CM_Get_Device_Interface_List_Size_ExW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77929025. | |
| 00:00:05.288: GetProcAddress(0x77920000 [SETUPAPI.DLL], "CM_Get_Device_Interface_List_ExW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x7792A15C. | |
| 00:00:05.288: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000014E) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0F65. | |
| 00:00:05.288: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000014C) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0DFF. | |
| 00:00:05.288: LoadLibraryA("SHELL32.dll") called from "SHLWAPI.DLL" at address 0x77F717D4. | |
| 00:00:05.288: LoadLibraryA("SHELL32.dll") returned 0x7C9C0000. | |
| 00:00:05.288: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000066) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9EAA32. | |
| 00:00:05.288: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemAlloc") called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x774FD020. | |
| 00:00:05.288: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000184) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E1540. | |
| 00:00:05.288: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemFree") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x774FD004. | |
| 00:00:05.288: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000042) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9F009C. | |
| 00:00:05.298: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000064) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9EBF65. | |
| 00:00:05.298: LoadLibraryW("ntshrui.dll") called from "SHELL32.DLL" at address 0x7CA00BE3. | |
| 00:00:05.298: Loaded "NTSHRUI.DLL" at address 0x76990000. Successfully hooked module. | |
| 00:00:05.298: Loaded "ATL.DLL" at address 0x76B20000. Successfully hooked module. | |
| 00:00:05.298: Loaded "NETAPI32.DLL" at address 0x5B860000. Successfully hooked module. | |
| 00:00:05.298: DllMain(0x76B20000, DLL_PROCESS_ATTACH, 0x00000000) in "ATL.DLL" called. | |
| 00:00:05.298: DllMain(0x76B20000, DLL_PROCESS_ATTACH, 0x00000000) in "ATL.DLL" returned 1 (0x1). | |
| 00:00:05.298: DllMain(0x5B860000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" called. | |
| 00:00:05.298: DllMain(0x5B860000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" returned 1 (0x1). | |
| 00:00:05.308: DllMain(0x76990000, DLL_PROCESS_ATTACH, 0x00000000) in "NTSHRUI.DLL" called. | |
| 00:00:05.308: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "NTSHRUI.DLL" at address 0x769921A9 and returned 0x7C8144BC. | |
| 00:00:05.308: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "NTSHRUI.DLL" at address 0x7699240F and returned 0x7C80A6E4. | |
| 00:00:05.308: LoadLibraryW("comctl32.dll") called from "NTSHRUI.DLL" at address 0x76992305. | |
| 00:00:05.308: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.308: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "NTSHRUI.DLL" at address 0x76992383 and returned 0x7C80A715. | |
| 00:00:05.308: GetProcAddress(0x773D0000 [COMCTL32.DLL], "InitCommonControls") called from "NTSHRUI.DLL" at address 0x769924A9 and returned 0x7744B62A. | |
| 00:00:05.308: DllMain(0x76990000, DLL_PROCESS_ATTACH, 0x00000000) in "NTSHRUI.DLL" returned 1 (0x1). | |
| 00:00:05.308: LoadLibraryW("ntshrui.dll") returned 0x76990000. | |
| 00:00:05.308: GetProcAddress(0x76990000 [NTSHRUI.DLL], "IsPathSharedW") called from "SHELL32.DLL" at address 0x7CA00BFC and returned 0x76991640. | |
| 00:00:05.318: GetProcAddress(0x769C0000 [USERENV.DLL], "GetProfileType") called from "SHLWAPI.DLL" at address 0x77FC58F9 and returned 0x769C8E71. | |
| 00:00:05.318: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetUserDefaultUILanguage") called from "SHLWAPI.DLL" at address 0x77F71B21 and returned 0x7C82F6CC. | |
| 00:00:05.318: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemFree") called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x774FD004. | |
| 00:00:05.318: LoadLibraryA("UxTheme.dll") called from "COMDLG32.DLL" at address 0x763B3AB7. | |
| 00:00:05.318: LoadLibraryA("UxTheme.dll") returned 0x5AD70000. | |
| 00:00:05.318: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "SetWindowTheme") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x5AD7B39E. | |
| 00:00:05.318: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeTextMetrics") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD8B293. | |
| 00:00:05.318: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeTextExtent") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD72E63. | |
| 00:00:05.318: GetProcAddress(0x774E0000 [OLE32.DLL], "CoInitializeEx") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x7750149B. | |
| 00:00:05.318: GetProcAddress(0x774E0000 [OLE32.DLL], "StringFromGUID2") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x774FDB2A. | |
| 00:00:05.328: GetProcAddress(0x774E0000 [OLE32.DLL], "CoUninitialize") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x77501364. | |
| 00:00:05.328: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "IsAppThemed") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x5AD78B4D. | |
| 00:00:05.328: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000019A) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E21FA. | |
| 00:00:05.328: GetProcAddress(0x7C800000 [KERNEL32.DLL], "QueueUserWorkItem") called from "SHLWAPI.DLL" at address 0x77F71DAB and returned 0x7C830ADA. | |
| 00:00:05.328: LoadLibraryA("browseui.dll") called from "SHLWAPI.DLL" at address 0x77F69653. | |
| 00:00:05.328: LoadLibraryA("browseui.dll") returned 0x75F80000. | |
| 00:00:05.328: LoadLibraryA("UxTheme.dll") called from "BROWSEUI.DLL" at address 0x75F84148. | |
| 00:00:05.328: LoadLibraryA("UxTheme.dll") returned 0x5AD70000. | |
| 00:00:05.328: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "SetWindowTheme") called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x5AD7B39E. | |
| 00:00:05.338: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000019D) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E2041. | |
| 00:00:05.338: LoadLibraryA("USERENV.dll") called from "SHELL32.DLL" at address 0x7CA046A5. | |
| 00:00:05.338: LoadLibraryA("USERENV.dll") returned 0x769C0000. | |
| 00:00:05.338: GetProcAddress(0x769C0000 [USERENV.DLL], "GetUserProfileDirectoryW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x769C6357. | |
| 00:00:05.338: LoadLibraryA("MPR.dll") called from "SHELL32.DLL" at address 0x7CA046A5. | |
| 00:00:05.338: LoadLibraryA("MPR.dll") returned 0x71B20000. | |
| 00:00:05.338: GetProcAddress(0x71B20000 [MPR.DLL], "WNetOpenEnumW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x71B23910. | |
| 00:00:05.338: LoadLibraryExW("C:\WINDOWS\system32\VBoxMRXNP.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B22B62. | |
| 00:00:05.338: Loaded "VBOXMRXNP.DLL" at address 0x01D80000. Successfully hooked module. | |
| 00:00:05.338: DllMain(0x01D80000, DLL_PROCESS_ATTACH, 0x00000000) in "VBOXMRXNP.DLL" called. | |
| 00:00:05.338: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DecodePointer") called from "VBOXMRXNP.DLL" at address 0x01D90CCD and returned 0x7C913317. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "EncodePointer") called from "VBOXMRXNP.DLL" at address 0x01D90CE8 and returned 0x7C9132F1. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateIoCompletionPort") called from "VBOXMRXNP.DLL" at address 0x01D90D03 and returned 0x7C8313FD. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetQueuedCompletionStatus") called from "VBOXMRXNP.DLL" at address 0x01D90D1E and returned 0x7C80A7BD. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "HeapSetInformation") called from "VBOXMRXNP.DLL" at address 0x01D90D39 and returned 0x7C839509. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "HeapQueryInformation") called from "VBOXMRXNP.DLL" at address 0x01D90D54 and returned 0x7C860695. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeSListHead") called from "VBOXMRXNP.DLL" at address 0x01D90D6F and returned 0x7C9354BC. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InterlockedFlushSList") called from "VBOXMRXNP.DLL" at address 0x01D90D8A and returned 0x7C965B2D. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InterlockedPopEntrySList") called from "VBOXMRXNP.DLL" at address 0x01D90DA5 and returned 0x7C92B683. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InterlockedPushEntrySList") called from "VBOXMRXNP.DLL" at address 0x01D90DC0 and returned 0x7C92B641. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "PostQueuedCompletionStatus") called from "VBOXMRXNP.DLL" at address 0x01D90DDB and returned 0x7C812C6A. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "QueryDepthSList") called from "VBOXMRXNP.DLL" at address 0x01D90DF6 and returned 0x7C92B6F0. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueue") called from "VBOXMRXNP.DLL" at address 0x01D90E11 and returned 0x7C82B03E. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueueTimer") called from "VBOXMRXNP.DLL" at address 0x01D90E2C and returned 0x7C8201D5. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueueTimer") called from "VBOXMRXNP.DLL" at address 0x01D90E47 and returned 0x7C820188. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "VerSetConditionMask") called from "VBOXMRXNP.DLL" at address 0x01D90E62 and returned 0x7C935522. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "VerifyVersionInfoA") called from "VBOXMRXNP.DLL" at address 0x01D90E7D and returned 0x7C860A47. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "VBOXMRXNP.DLL" at address 0x01D90E98 and returned 0x7C80B8C9. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "IsProcessorFeaturePresent") called from "VBOXMRXNP.DLL" at address 0x01D90EB3 and returned 0x7C80AECA. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CancelIo") called from "VBOXMRXNP.DLL" at address 0x01D90ECE and returned 0x7C82F122. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "IsDebuggerPresent") called from "VBOXMRXNP.DLL" at address 0x01D90EE9 and returned 0x7C82F6EF. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetSystemTimeAsFileTime") called from "VBOXMRXNP.DLL" at address 0x01D90F04 and returned 0x7C8017E9. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetVersionExA") called from "VBOXMRXNP.DLL" at address 0x01D90F1F and returned 0x7C810830. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetVersionExW") called from "VBOXMRXNP.DLL" at address 0x01D90F3A and returned 0x7C80AF05. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetEnvironmentStringsW") called from "VBOXMRXNP.DLL" at address 0x01D90F55 and returned 0x7C810C58. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FreeEnvironmentStringsW") called from "VBOXMRXNP.DLL" at address 0x01D90F70 and returned 0x7C814107. | |
| 00:00:05.348: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetLocaleInfoA") called from "VBOXMRXNP.DLL" at address 0x01D90F8B and returned 0x7C80D302. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "EnumSystemLocalesA") called from "VBOXMRXNP.DLL" at address 0x01D90FA6 and returned 0x7C837D81. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "IsValidLocale") called from "VBOXMRXNP.DLL" at address 0x01D90FC1 and returned 0x7C81B653. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "SetThreadAffinityMask") called from "VBOXMRXNP.DLL" at address 0x01D90FDC and returned 0x7C82EAC2. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetProcessAffinityMask") called from "VBOXMRXNP.DLL" at address 0x01D90FF7 and returned 0x7C8207BD. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetHandleInformation") called from "VBOXMRXNP.DLL" at address 0x01D91012 and returned 0x7C82AE1D. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "SetHandleInformation") called from "VBOXMRXNP.DLL" at address 0x01D9102D and returned 0x7C82D20C. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsAlloc") called from "VBOXMRXNP.DLL" at address 0x01D8331A and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsGetValue") called from "VBOXMRXNP.DLL" at address 0x01D83327 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsSetValue") called from "VBOXMRXNP.DLL" at address 0x01D83334 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FlsFree") called from "VBOXMRXNP.DLL" at address 0x01D83341 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.358: GetProcAddress(0x7C900000 [NTDLL.DLL], "RtlGetVersion") called from "VBOXMRXNP.DLL" at address 0x01D8E1DF and returned 0x7C9183B1. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "VBOXMRXNP.DLL" at address 0x01D8ED1F and returned 0x7C80ADC9. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetWindowsDirectoryW") called from "VBOXMRXNP.DLL" at address 0x01D8ED36 and returned 0x7C80AE1B. | |
| 00:00:05.358: GetProcAddress(0x7C800000 [KERNEL32.DLL], "SystemTimeToTzSpecificLocalTime") called from "VBOXMRXNP.DLL" at address 0x01D8ED49 and returned 0x7C82DA19. | |
| 00:00:05.358: GetProcAddress(0x7C900000 [NTDLL.DLL], "NtQueryFullAttributesFile") called from "VBOXMRXNP.DLL" at address 0x01D8ED5B and returned 0x7C90D7AE. | |
| 00:00:05.358: GetProcAddress(0x7C900000 [NTDLL.DLL], "NtDuplicateToken") called from "VBOXMRXNP.DLL" at address 0x01D8ED6E and returned 0x7C90D2AE. | |
| 00:00:05.358: GetProcAddress(0x7C900000 [NTDLL.DLL], "NtAlertThread") called from "VBOXMRXNP.DLL" at address 0x01D8ED81 and returned 0x7C90CF2E. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSAStartup") called from "VBOXMRXNP.DLL" at address 0x01D8E2FF and returned 0x71AB6A55. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSACleanup") called from "VBOXMRXNP.DLL" at address 0x01D8E312 and returned 0x71AB3FED. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSAGetLastError") called from "VBOXMRXNP.DLL" at address 0x01D8E325 and returned 0x71AB3CCE. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSASetLastError") called from "VBOXMRXNP.DLL" at address 0x01D8E337 and returned 0x71AB2A5E. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSACreateEvent") called from "VBOXMRXNP.DLL" at address 0x01D8E34A and returned 0x71AB655D. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSACloseEvent") called from "VBOXMRXNP.DLL" at address 0x01D8E35D and returned 0x71AB65E8. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSASetEvent") called from "VBOXMRXNP.DLL" at address 0x01D8E36F and returned 0x71AB2C91. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSAEventSelect") called from "VBOXMRXNP.DLL" at address 0x01D8E382 and returned 0x71AB64D9. | |
| 00:00:05.358: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSAEnumNetworkEvents") called from "VBOXMRXNP.DLL" at address 0x01D8E395 and returned 0x71AB657D. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "WSASend") called from "VBOXMRXNP.DLL" at address 0x01D8E3A7 and returned 0x71AB68FA. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "socket") called from "VBOXMRXNP.DLL" at address 0x01D8E3BA and returned 0x71AB4211. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "closesocket") called from "VBOXMRXNP.DLL" at address 0x01D8E3CD and returned 0x71AB3E2B. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "recv") called from "VBOXMRXNP.DLL" at address 0x01D8E3DF and returned 0x71AB676F. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "send") called from "VBOXMRXNP.DLL" at address 0x01D8E3F2 and returned 0x71AB4C27. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "recvfrom") called from "VBOXMRXNP.DLL" at address 0x01D8E405 and returned 0x71AB2FF7. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "sendto") called from "VBOXMRXNP.DLL" at address 0x01D8E417 and returned 0x71AB2F51. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "bind") called from "VBOXMRXNP.DLL" at address 0x01D8E42A and returned 0x71AB4480. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "listen") called from "VBOXMRXNP.DLL" at address 0x01D8E43D and returned 0x71AB8CD3. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "accept") called from "VBOXMRXNP.DLL" at address 0x01D8E44F and returned 0x71AC1040. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "connect") called from "VBOXMRXNP.DLL" at address 0x01D8E462 and returned 0x71AB4A07. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "shutdown") called from "VBOXMRXNP.DLL" at address 0x01D8E475 and returned 0x71AC0BF6. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "getsockopt") called from "VBOXMRXNP.DLL" at address 0x01D8E487 and returned 0x71AB46EA. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "setsockopt") called from "VBOXMRXNP.DLL" at address 0x01D8E49A and returned 0x71AB4521. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "ioctlsocket") called from "VBOXMRXNP.DLL" at address 0x01D8E4AD and returned 0x71AB3F50. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "getpeername") called from "VBOXMRXNP.DLL" at address 0x01D8E4BF and returned 0x71AC0B68. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "getsockname") called from "VBOXMRXNP.DLL" at address 0x01D8E4D2 and returned 0x71AB3D10. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "__WSAFDIsSet") called from "VBOXMRXNP.DLL" at address 0x01D8E4E5 and returned 0x71AB3F7B. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "select") called from "VBOXMRXNP.DLL" at address 0x01D8E4F7 and returned 0x71AB30A8. | |
| 00:00:05.368: GetProcAddress(0x71AB0000 [WS2_32.DLL], "gethostbyname") called from "VBOXMRXNP.DLL" at address 0x01D8E50A and returned 0x71AB5355. | |
| 00:00:05.368: First chance exception 0x406D1388 (Thread was named) occurred in "KERNEL32.DLL" at address 0x7C812FD3. | |
| 00:00:05.368: GetProcAddress(0x7C900000 [NTDLL.DLL], "RtlGetInterruptTimePrecise") called from "VBOXMRXNP.DLL" at address 0x01DA11F9 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.378: DllMain(0x01D80000, DLL_PROCESS_ATTACH, 0x00000000) in "VBOXMRXNP.DLL" returned 1 (0x1). | |
| 00:00:05.378: LoadLibraryExW("C:\WINDOWS\system32\VBoxMRXNP.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x01D80000. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetCaps") called from "MPR.DLL" at address 0x71B22BE5 and returned 0x01D810A0. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPAddConnection") called from "MPR.DLL" at address 0x71B22C2E and returned 0x01D82470. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPAddConnection3") called from "MPR.DLL" at address 0x71B22C40 and returned 0x01D81170. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetReconnectFlags") called from "MPR.DLL" at address 0x71B22C4D and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPCancelConnection") called from "MPR.DLL" at address 0x71B22C74 and returned 0x01D81360. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetConnection") called from "MPR.DLL" at address 0x71B22C86 and returned 0x01D81660. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetConnection3") called from "MPR.DLL" at address 0x71B22C93 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetUniversalName") called from "MPR.DLL" at address 0x71B22CA0 and returned 0x01D82230. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPOpenEnum") called from "MPR.DLL" at address 0x71B22CC2 and returned 0x01D81830. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPEnumResource") called from "MPR.DLL" at address 0x71B22CCF and returned 0x01D81990. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPCloseEnum") called from "MPR.DLL" at address 0x71B22CDC and returned 0x01D81F40. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetResourceParent") called from "MPR.DLL" at address 0x71B22D3D and returned 0x01D82490. | |
| 00:00:05.388: GetProcAddress(0x01D80000 [VBOXMRXNP.DLL], "NPGetResourceInformation") called from "MPR.DLL" at address 0x71B22D52 and returned 0x01D81F60. | |
| 00:00:05.388: LoadLibraryExW("C:\WINDOWS\System32\drprov.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B22B62. | |
| 00:00:05.388: Loaded "DRPROV.DLL" at address 0x75F60000. Successfully hooked module. | |
| 00:00:05.388: DllMain(0x75F60000, DLL_PROCESS_ATTACH, 0x00000000) in "DRPROV.DLL" called. | |
| 00:00:05.388: DllMain(0x75F60000, DLL_PROCESS_ATTACH, 0x00000000) in "DRPROV.DLL" returned 1 (0x1). | |
| 00:00:05.388: LoadLibraryExW("C:\WINDOWS\System32\drprov.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75F60000. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetCaps") called from "MPR.DLL" at address 0x71B22BE5 and returned 0x75F61410. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetUser") called from "MPR.DLL" at address 0x71B22C12 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPAddConnection") called from "MPR.DLL" at address 0x71B22C2E and returned 0x75F629BC. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPAddConnection3") called from "MPR.DLL" at address 0x71B22C40 and returned 0x75F618FB. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetReconnectFlags") called from "MPR.DLL" at address 0x71B22C4D and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPCancelConnection") called from "MPR.DLL" at address 0x71B22C74 and returned 0x75F61AD7. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetConnection") called from "MPR.DLL" at address 0x71B22C86 and returned 0x75F61690. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetConnection3") called from "MPR.DLL" at address 0x71B22C93 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetUniversalName") called from "MPR.DLL" at address 0x71B22CA0 and returned 0x75F622DF. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetConnectionPerformance") called from "MPR.DLL" at address 0x71B22E7C and returned 0x75F624F8. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPOpenEnum") called from "MPR.DLL" at address 0x71B22CC2 and returned 0x75F6145D. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPEnumResource") called from "MPR.DLL" at address 0x71B22CCF and returned 0x75F62134. | |
| 00:00:05.398: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPCloseEnum") called from "MPR.DLL" at address 0x71B22CDC and returned 0x75F621AE. | |
| 00:00:05.408: GetProcAddress(0x75F60000 [DRPROV.DLL], "NPGetResourceInformation") called from "MPR.DLL" at address 0x71B22D52 and returned 0x75F625B5. | |
| 00:00:05.408: LoadLibraryExW("C:\WINDOWS\System32\ntlanman.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B22B62. | |
| 00:00:05.408: Loaded "NTLANMAN.DLL" at address 0x71C10000. Successfully hooked module. | |
| 00:00:05.408: Loaded "NETUI0.DLL" at address 0x71CD0000. Successfully hooked module. | |
| 00:00:05.408: Loaded "NETUI1.DLL" at address 0x71C90000. Successfully hooked module. | |
| 00:00:05.408: Loaded "NETRAP.DLL" at address 0x71C80000. Successfully hooked module. | |
| 00:00:05.408: Loaded "SAMLIB.DLL" at address 0x71BF0000. Successfully hooked module. | |
| 00:00:05.408: DllMain(0x71CD0000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUI0.DLL" called. | |
| 00:00:05.408: DllMain(0x71CD0000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUI0.DLL" returned 1 (0x1). | |
| 00:00:05.408: DllMain(0x71C80000, DLL_PROCESS_ATTACH, 0x00000000) in "NETRAP.DLL" called. | |
| 00:00:05.408: DllMain(0x71C80000, DLL_PROCESS_ATTACH, 0x00000000) in "NETRAP.DLL" returned 1 (0x1). | |
| 00:00:05.408: DllMain(0x71BF0000, DLL_PROCESS_ATTACH, 0x00000000) in "SAMLIB.DLL" called. | |
| 00:00:05.408: DllMain(0x71BF0000, DLL_PROCESS_ATTACH, 0x00000000) in "SAMLIB.DLL" returned 1 (0x1). | |
| 00:00:05.408: DllMain(0x71C90000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUI1.DLL" called. | |
| 00:00:05.408: DllMain(0x71C90000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUI1.DLL" returned 1 (0x1). | |
| 00:00:05.408: DllMain(0x71C10000, DLL_PROCESS_ATTACH, 0x00000000) in "NTLANMAN.DLL" called. | |
| 00:00:05.408: DllMain(0x71C10000, DLL_PROCESS_ATTACH, 0x00000000) in "NTLANMAN.DLL" returned 1 (0x1). | |
| 00:00:05.408: LoadLibraryExW("C:\WINDOWS\System32\ntlanman.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x71C10000. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetCaps") called from "MPR.DLL" at address 0x71B22BE5 and returned 0x71C121A4. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetUser") called from "MPR.DLL" at address 0x71B22C12 and returned 0x71C13631. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPAddConnection") called from "MPR.DLL" at address 0x71B22C2E and returned 0x71C13478. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPAddConnection3") called from "MPR.DLL" at address 0x71B22C40 and returned 0x71C12E0A. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetReconnectFlags") called from "MPR.DLL" at address 0x71B22C4D and returned 0x71C135BE. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPCancelConnection") called from "MPR.DLL" at address 0x71B22C74 and returned 0x71C138DF. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetConnection") called from "MPR.DLL" at address 0x71B22C86 and returned 0x71C11AC4. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetConnection3") called from "MPR.DLL" at address 0x71B22C93 and returned 0x71C14005. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetUniversalName") called from "MPR.DLL" at address 0x71B22CA0 and returned 0x71C16E0F. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetConnectionPerformance") called from "MPR.DLL" at address 0x71B22E7C and returned 0x71C14198. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPOpenEnum") called from "MPR.DLL" at address 0x71B22CC2 and returned 0x71C1267A. | |
| 00:00:05.418: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPEnumResource") called from "MPR.DLL" at address 0x71B22CCF and returned 0x71C123DC. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPCloseEnum") called from "MPR.DLL" at address 0x71B22CDC and returned 0x71C124E1. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetDirectoryType") called from "MPR.DLL" at address 0x71B22EAD and returned 0x71C17D71. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPDirectoryNotify") called from "MPR.DLL" at address 0x71B22ED5 and returned 0x71C174AA. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetPropertyText") called from "MPR.DLL" at address 0x71B22EFC and returned 0x71C174B9. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPPropertyDialog") called from "MPR.DLL" at address 0x71B22F09 and returned 0x71C1753B. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPFormatNetworkName") called from "MPR.DLL" at address 0x71B22D1F and returned 0x71C17FDF. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetResourceParent") called from "MPR.DLL" at address 0x71B22D3D and returned 0x71C18432. | |
| 00:00:05.428: GetProcAddress(0x71C10000 [NTLANMAN.DLL], "NPGetResourceInformation") called from "MPR.DLL" at address 0x71B22D52 and returned 0x71C18864. | |
| 00:00:05.428: LoadLibraryExW("C:\WINDOWS\System32\davclnt.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B22B62. | |
| 00:00:05.428: Loaded "DAVCLNT.DLL" at address 0x75F70000. Successfully hooked module. | |
| 00:00:05.428: DllMain(0x75F70000, DLL_PROCESS_ATTACH, 0x00000000) in "DAVCLNT.DLL" called. | |
| 00:00:05.428: DllMain(0x75F70000, DLL_PROCESS_ATTACH, 0x00000000) in "DAVCLNT.DLL" returned 1 (0x1). | |
| 00:00:05.428: LoadLibraryExW("C:\WINDOWS\System32\davclnt.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75F70000. | |
| 00:00:05.428: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetCaps") called from "MPR.DLL" at address 0x71B22BE5 and returned 0x75F716C0. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetUser") called from "MPR.DLL" at address 0x71B22C12 and returned 0x75F73E8F. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPAddConnection") called from "MPR.DLL" at address 0x71B22C2E and returned 0x75F74975. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPAddConnection3") called from "MPR.DLL" at address 0x71B22C40 and returned 0x75F742C3. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetReconnectFlags") called from "MPR.DLL" at address 0x71B22C4D and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPCancelConnection") called from "MPR.DLL" at address 0x71B22C74 and returned 0x75F72322. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetConnection") called from "MPR.DLL" at address 0x71B22C86 and returned 0x75F740B9. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetConnection3") called from "MPR.DLL" at address 0x71B22C93 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetUniversalName") called from "MPR.DLL" at address 0x71B22CA0 and returned 0x75F74E42. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPOpenEnum") called from "MPR.DLL" at address 0x71B22CC2 and returned 0x75F71D4D. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPEnumResource") called from "MPR.DLL" at address 0x71B22CCF and returned 0x75F71EDC. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPCloseEnum") called from "MPR.DLL" at address 0x71B22CDC and returned 0x75F71E93. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPFormatNetworkName") called from "MPR.DLL" at address 0x71B22D1F and returned 0x75F7356B. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetResourceParent") called from "MPR.DLL" at address 0x71B22D3D and returned 0x75F74BC4. | |
| 00:00:05.438: GetProcAddress(0x75F70000 [DAVCLNT.DLL], "NPGetResourceInformation") called from "MPR.DLL" at address 0x71B22D52 and returned 0x75F74995. | |
| 00:00:05.438: LoadLibraryExW("C:\WINDOWS\system32\VBoxMRXNP.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B23AC8. | |
| 00:00:05.438: LoadLibraryExW("C:\WINDOWS\system32\VBoxMRXNP.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x01D80000. | |
| 00:00:05.438: LoadLibraryExW("C:\WINDOWS\System32\drprov.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B23AC8. | |
| 00:00:05.438: LoadLibraryExW("C:\WINDOWS\System32\drprov.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75F60000. | |
| 00:00:05.448: LoadLibraryExW("C:\WINDOWS\System32\ntlanman.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B23AC8. | |
| 00:00:05.448: LoadLibraryExW("C:\WINDOWS\System32\ntlanman.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x71C10000. | |
| 00:00:05.448: LoadLibraryExW("C:\WINDOWS\System32\davclnt.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MPR.DLL" at address 0x71B23AC8. | |
| 00:00:05.448: LoadLibraryExW("C:\WINDOWS\System32\davclnt.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75F70000. | |
| 00:00:05.448: GetProcAddress(0x71B20000 [MPR.DLL], "WNetEnumResourceW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x71B23C8A. | |
| 00:00:05.448: GetProcAddress(0x71B20000 [MPR.DLL], "WNetCloseEnum") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x71B23E4F. | |
| 00:00:05.448: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000014C) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E0DFF. | |
| 00:00:05.448: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000014E) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E0F65. | |
| 00:00:05.448: LoadLibraryA("browseui.dll") called from "SHLWAPI.DLL" at address 0x77F69653. | |
| 00:00:05.448: LoadLibraryA("browseui.dll") returned 0x75F80000. | |
| 00:00:05.448: LoadLibraryExW("XPSP2RES.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "SHELL32.DLL" at address 0x7CA3540C. | |
| 00:00:05.448: Mapped "XPSP2RES.DLL" as a data file into memory at address 0x01660000. | |
| 00:00:05.448: LoadLibraryExW("XPSP2RES.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x01660000. | |
| 00:00:05.458: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstance") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x774FF1D4. | |
| 00:00:05.458: GetProcAddress(0x71B20000 [MPR.DLL], "WNetGetConnectionW") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x71B21E09. | |
| 00:00:05.458: GetProcAddress(0x71B20000 [MPR.DLL], "WNetGetConnection3W") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x71B26497. | |
| 00:00:05.458: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x77F68A0E. | |
| 00:00:05.458: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) returned 0x7C9C0000. | |
| 00:00:05.458: LoadLibraryA("OLEAUT32.dll") called from "SHELL32.DLL" at address 0x7CA046A5. | |
| 00:00:05.458: LoadLibraryA("OLEAUT32.dll") returned 0x77120000. | |
| 00:00:05.458: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000008) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77124980. | |
| 00:00:05.458: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x0000019B) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x7712525B. | |
| 00:00:05.458: GetProcAddress(0x774E0000 [OLE32.DLL], "CoCreateInstanceEx") called from "OLEAUT32.DLL" at address 0x77125706 and returned 0x774FF17C. | |
| 00:00:05.458: LoadLibraryA("oleaut32.dll") called from "OLE32.DLL" at address 0x7752FAB6. | |
| 00:00:05.458: LoadLibraryA("oleaut32.dll") returned 0x77120000. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000011) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77124FFF. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000014) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77125218. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000013) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x771251CC. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000017) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x7712518D. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000018) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x771251BC. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000009) called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77124920. | |
| 00:00:05.468: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000150) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E0FD5. | |
| 00:00:05.468: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHBindToParent") called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9F3558. | |
| 00:00:05.468: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x77F68A0E. | |
| 00:00:05.468: LoadLibraryExW("C:\WINDOWS\system32\SHELL32.dll", 0x00000000, 0x00000000) returned 0x7C9C0000. | |
| 00:00:05.468: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x0000020C) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9F08F6. | |
| 00:00:05.468: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000012) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9EAC95. | |
| 00:00:05.468: LoadLibraryA("OLEAUT32.dll") called from "SHLWAPI.DLL" at address 0x77F717D4. | |
| 00:00:05.468: LoadLibraryA("OLEAUT32.dll") returned 0x77120000. | |
| 00:00:05.468: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000008) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77124980. | |
| 00:00:05.468: LoadLibraryExW("C:\WINDOWS\system32\shdocvw.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0x77511FED. | |
| 00:00:05.478: Loaded "SHDOCVW.DLL" at address 0x7E290000. Successfully hooked module. | |
| 00:00:05.478: Loaded "CRYPT32.DLL" at address 0x77A80000. Successfully hooked module. | |
| 00:00:05.478: Loaded "MSASN1.DLL" at address 0x77B20000. Successfully hooked module. | |
| 00:00:05.488: Loaded "CRYPTUI.DLL" at address 0x754D0000. Successfully hooked module. | |
| 00:00:05.488: Loaded "WININET.DLL" at address 0x3D930000. Successfully hooked module. | |
| 00:00:05.498: Loaded "NORMALIZ.DLL" at address 0x020C0000. Successfully hooked module. | |
| 00:00:05.498: Loaded "URLMON.DLL" at address 0x78130000. Successfully hooked module. | |
| 00:00:05.508: Loaded "IERTUTIL.DLL" at address 0x3DFD0000. Successfully hooked module. | |
| 00:00:05.508: Loaded "WINTRUST.DLL" at address 0x76C30000. Successfully hooked module. | |
| 00:00:05.508: Loaded "IMAGEHLP.DLL" at address 0x76C90000. Successfully hooked module. | |
| 00:00:05.518: Loaded "WLDAP32.DLL" at address 0x76F60000. Successfully hooked module. | |
| 00:00:05.518: DllMain(0x77B20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSASN1.DLL" called. | |
| 00:00:05.518: DllMain(0x77B20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSASN1.DLL" returned 1 (0x1). | |
| 00:00:05.518: DllMain(0x77A80000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL" called. | |
| 00:00:05.518: LoadLibraryA("advapi32.dll") called from "CRYPT32.DLL" at address 0x77A86566. | |
| 00:00:05.518: LoadLibraryA("advapi32.dll") returned 0x77DD0000. | |
| 00:00:05.518: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptAcquireContextW") called from "CRYPT32.DLL" at address 0x77A86579 and returned 0x77DE7F99. | |
| 00:00:05.518: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptSignHashW") called from "CRYPT32.DLL" at address 0x77A8658B and returned 0x77E12299. | |
| 00:00:05.518: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptVerifySignatureW") called from "CRYPT32.DLL" at address 0x77A8659D and returned 0x77DF3522. | |
| 00:00:05.518: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptSetProviderW") called from "CRYPT32.DLL" at address 0x77A865AF and returned 0x77E12F31. | |
| 00:00:05.518: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptEnumProvidersW") called from "CRYPT32.DLL" at address 0x77A865C1 and returned 0x77E12DD9. | |
| 00:00:05.528: LoadLibraryA("kernel32.dll") called from "CRYPT32.DLL" at address 0x77A87982. | |
| 00:00:05.528: LoadLibraryA("kernel32.dll") returned 0x7C800000. | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "RegisterWaitForSingleObject") called from "CRYPT32.DLL" at address 0x77A8799D and returned 0x7C820225. | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "UnregisterWaitEx") called from "CRYPT32.DLL" at address 0x77A879B7 and returned 0x7C82F0AA. | |
| 00:00:05.528: LoadLibraryA("advapi32.dll") called from "MSASN1.DLL" at address 0x77B235EA. | |
| 00:00:05.528: LoadLibraryA("advapi32.dll") returned 0x77DD0000. | |
| 00:00:05.528: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "RegOpenKeyExA") called from "MSASN1.DLL" at address 0x77B23600 and returned 0x77DD7852. | |
| 00:00:05.528: DllMain(0x77A80000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1). | |
| 00:00:05.528: DllMain(0x020C0000, DLL_PROCESS_ATTACH, 0x00000000) in "NORMALIZ.DLL" called. | |
| 00:00:05.528: DllMain(0x020C0000, DLL_PROCESS_ATTACH, 0x00000000) in "NORMALIZ.DLL" returned 1 (0x1). | |
| 00:00:05.528: DllMain(0x3DFD0000, DLL_PROCESS_ATTACH, 0x00000000) in "IERTUTIL.DLL" called. | |
| 00:00:05.528: DllMain(0x3DFD0000, DLL_PROCESS_ATTACH, 0x00000000) in "IERTUTIL.DLL" returned 1 (0x1). | |
| 00:00:05.528: DllMain(0x78130000, DLL_PROCESS_ATTACH, 0x00000000) in "URLMON.DLL" called. | |
| 00:00:05.528: LoadLibraryW("comctl32.dll") called from "URLMON.DLL" at address 0x78153784. | |
| 00:00:05.528: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeSRWLock") called from "IERTUTIL.DLL" at address 0x3E123993 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "AcquireSRWLockExclusive") called from "IERTUTIL.DLL" at address 0x3E1239A0 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "AcquireSRWLockShared") called from "IERTUTIL.DLL" at address 0x3E1239AD and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseSRWLockExclusive") called from "IERTUTIL.DLL" at address 0x3E1239BA and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.528: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseSRWLockShared") called from "IERTUTIL.DLL" at address 0x3E1239C7 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.528: DllMain(0x78130000, DLL_PROCESS_ATTACH, 0x00000000) in "URLMON.DLL" returned 1 (0x1). | |
| 00:00:05.538: DllMain(0x3D930000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" called. | |
| 00:00:05.538: LoadLibraryW("comctl32.dll") called from "WININET.DLL" at address 0x3D93D2A7. | |
| 00:00:05.538: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.538: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "EventRegister") called from "WININET.DLL" at address 0x3D93D41F and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.538: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "EventUnregister") called from "WININET.DLL" at address 0x3D93D431 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.538: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "EventEnabled") called from "WININET.DLL" at address 0x3D93D443 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.538: GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "EventWrite") called from "WININET.DLL" at address 0x3D93D455 and returned NULL. Error: The specified procedure could not be found (127). | |
| 00:00:05.538: DllMain(0x3D930000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" returned 1 (0x1). | |
| 00:00:05.538: DllMain(0x76C90000, DLL_PROCESS_ATTACH, 0x00000000) in "IMAGEHLP.DLL" called. | |
| 00:00:05.538: DllMain(0x76C90000, DLL_PROCESS_ATTACH, 0x00000000) in "IMAGEHLP.DLL" returned 1 (0x1). | |
| 00:00:05.538: DllMain(0x76C30000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" called. | |
| 00:00:05.538: DllMain(0x76C30000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" returned 1 (0x1). | |
| 00:00:05.538: DllMain(0x76F60000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" called. | |
| 00:00:05.538: DllMain(0x76F60000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1). | |
| 00:00:05.538: DllMain(0x754D0000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPTUI.DLL" called. | |
| 00:00:05.538: GetProcAddress(0x7C800000 [KERNEL32.DLL], "QueryActCtxW") called from "CRYPTUI.DLL" at address 0x754D1AFD and returned 0x7C81533B. | |
| 00:00:05.538: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "CRYPTUI.DLL" at address 0x754D1AFD and returned 0x7C80A6E4. | |
| 00:00:05.538: GetProcAddress(0x7C800000 [KERNEL32.DLL], "FindActCtxSectionStringW") called from "CRYPTUI.DLL" at address 0x754D1AFD and returned 0x7C82ED94. | |
| 00:00:05.538: LoadLibraryW("Comctl32.dll") called from "CRYPTUI.DLL" at address 0x754D198D. | |
| 00:00:05.538: LoadLibraryW("Comctl32.dll") returned 0x773D0000. | |
| 00:00:05.538: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "CRYPTUI.DLL" at address 0x754D1AFD and returned 0x7C80A715. | |
| 00:00:05.538: LoadLibraryA("RichEd20.dll") called from "CRYPTUI.DLL" at address 0x754D1DD8. | |
| 00:00:05.548: Loaded "RICHED20.DLL" at address 0x74E30000. Successfully hooked module. | |
| 00:00:05.548: DllMain(0x74E30000, DLL_PROCESS_ATTACH, 0x00000000) in "RICHED20.DLL" called. | |
| 00:00:05.548: DllMain(0x74E30000, DLL_PROCESS_ATTACH, 0x00000000) in "RICHED20.DLL" returned 1 (0x1). | |
| 00:00:05.548: LoadLibraryA("RichEd20.dll") returned 0x74E30000. | |
| 00:00:05.548: DllMain(0x74E30000, DLL_PROCESS_DETACH, 0x00000000) in "RICHED20.DLL" called. | |
| 00:00:05.548: DllMain(0x74E30000, DLL_PROCESS_DETACH, 0x00000000) in "RICHED20.DLL" returned 1 (0x1). | |
| 00:00:05.548: Unloaded "RICHED20.DLL" at address 0x74E30000. | |
| 00:00:05.548: LoadLibraryW("Comctl32.dll") called from "CRYPTUI.DLL" at address 0x754D1CA1. | |
| 00:00:05.548: LoadLibraryW("Comctl32.dll") returned 0x773D0000. | |
| 00:00:05.548: GetProcAddress(0x773D0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "CRYPTUI.DLL" at address 0x754D1C39 and returned 0x773D4088. | |
| 00:00:05.548: DllMain(0x754D0000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPTUI.DLL" returned 1 (0x1). | |
| 00:00:05.548: DllMain(0x7E290000, DLL_PROCESS_ATTACH, 0x00000000) in "SHDOCVW.DLL" called. | |
| 00:00:05.548: GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "SHDOCVW.DLL" at address 0x7E2A7203 and returned 0x7C8144BC. | |
| 00:00:05.548: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "SHDOCVW.DLL" at address 0x7E2A7325 and returned 0x7C80A6E4. | |
| 00:00:05.548: LoadLibraryW("comctl32.dll") called from "SHLWAPI.DLL" at address 0x77F7A66F. | |
| 00:00:05.548: LoadLibraryW("comctl32.dll") returned 0x773D0000. | |
| 00:00:05.548: GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "SHDOCVW.DLL" at address 0x7E2A761B and returned 0x7C80A715. | |
| 00:00:05.548: GetProcAddress(0x77F60000 [SHLWAPI.DLL], "DelayLoadFailureHook") called from "SHDOCVW.DLL" at address 0x7E2A73AF and returned 0x77FC6C0D. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "GetSystemMetrics") called from "SHDOCVW.DLL" at address 0x7E2A7667 and returned 0x7E418F9C. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromWindow") called from "SHDOCVW.DLL" at address 0x7E2A767C and returned 0x7E42A679. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromRect") called from "SHDOCVW.DLL" at address 0x7E2A7691 and returned 0x7E42C713. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "MonitorFromPoint") called from "SHDOCVW.DLL" at address 0x7E2A76A6 and returned 0x7E42ABF5. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "EnumDisplayMonitors") called from "SHDOCVW.DLL" at address 0x7E2A76BB and returned 0x7E42A77B. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "EnumDisplayDevicesW") called from "SHDOCVW.DLL" at address 0x7E2A76D0 and returned 0x7E41E03C. | |
| 00:00:05.558: GetProcAddress(0x7E410000 [USER32.DLL], "GetMonitorInfoW") called from "SHDOCVW.DLL" at address 0x7E2A76F1 and returned 0x7E42A6D9. | |
| 00:00:05.558: GetProcAddress(0x773D0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "SHDOCVW.DLL" at address 0x7E2A6176 and returned 0x773D4088. | |
| 00:00:05.558: DllMain(0x7E290000, DLL_PROCESS_ATTACH, 0x00000000) in "SHDOCVW.DLL" returned 1 (0x1). | |
| 00:00:05.558: LoadLibraryExW("C:\WINDOWS\system32\shdocvw.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E290000. | |
| 00:00:05.568: GetProcAddress(0x7E290000 [SHDOCVW.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0x77512008 and returned 0x7E2A55ED. | |
| 00:00:05.568: GetProcAddress(0x7E290000 [SHDOCVW.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0x7751201E and returned 0x7E2B2282. | |
| 00:00:05.568: LoadLibraryA("SHELL32.dll") called from "SHDOCVW.DLL" at address 0x7E2A64EB. | |
| 00:00:05.568: LoadLibraryA("SHELL32.dll") returned 0x7C9C0000. | |
| 00:00:05.568: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetDesktopFolder") called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EB608. | |
| 00:00:05.568: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000013) called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EAF04. | |
| 00:00:05.568: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x0000009B) called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EA56C. | |
| 00:00:05.568: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000096) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77124C98. | |
| 00:00:05.568: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000009) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77124920. | |
| 00:00:05.568: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000015) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x7C9F0C6F. | |
| 00:00:05.568: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000002) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77124C05. | |
| 00:00:05.578: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x0000000C) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77126C03. | |
| 00:00:05.578: GetProcAddress(0x77120000 [OLEAUT32.DLL], 0x00000006) called from "SHLWAPI.DLL" at address 0x77F7170A and returned 0x77124880. | |
| 00:00:05.578: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000146) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0CCC. | |
| 00:00:05.578: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000150) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0FD5. | |
| 00:00:05.578: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000149) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E0DC0. | |
| 00:00:05.578: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000182) called from "SHELL32.DLL" at address 0x7CA04742 and returned 0x773E10D1. | |
| 00:00:05.578: GetProcAddress(0x774E0000 [OLE32.DLL], "RegisterDragDrop") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77501B4A. | |
| 00:00:05.588: LoadLibraryA("SHDOCVW.dll") called from "BROWSEUI.DLL" at address 0x75F84148. | |
| 00:00:05.588: LoadLibraryA("SHDOCVW.dll") returned 0x7E290000. | |
| 00:00:05.588: GetProcAddress(0x7E290000 [SHDOCVW.DLL], 0x000000DE) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7E2B23F3. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHParseDisplayName") called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EDA7C. | |
| 00:00:05.588: LoadLibraryA("SHELL32.dll") called from "BROWSEUI.DLL" at address 0x75F84148. | |
| 00:00:05.588: LoadLibraryA("SHELL32.dll") returned 0x7C9C0000. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000012) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7C9EAC95. | |
| 00:00:05.588: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000153) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E1397. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetSpecialFolderLocation") called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7C9EF1FB. | |
| 00:00:05.588: GetProcAddress(0x7E290000 [SHDOCVW.DLL], 0x000000DB) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7E2B28A9. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000098) called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EAC30. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000098) called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9EAC30. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x00000015) called from "SHDOCVW.DLL" at address 0x7E2A6425 and returned 0x7C9F0C6F. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x0000009B) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7C9EA56C. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], "SHGetSpecialFolderLocation") called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7C9EF1FB. | |
| 00:00:05.588: GetProcAddress(0x7C9C0000 [SHELL32.DLL], 0x0000009B) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7C9EA56C. | |
| 00:00:05.588: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "DrawThemeBackground") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD72BEF. | |
| 00:00:05.598: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeBackgroundContentRect") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD73E8A. | |
| 00:00:05.598: GetProcAddress(0x77F10000 [GDI32.DLL], "GetLayout") called from "COMCTL32.DLL" at address 0x7745A59D and returned 0x77F16B2E. | |
| 00:00:05.598: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "GetThemeColor") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD7459D. | |
| 00:00:05.598: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "DrawThemeText") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD72FF8. | |
| 00:00:05.598: LoadLibraryA("browseui.dll") called from "SHLWAPI.DLL" at address 0x77F69653. | |
| 00:00:05.598: LoadLibraryA("browseui.dll") returned 0x75F80000. | |
| 00:00:05.598: LoadLibraryA("browseui.dll") called from "SHLWAPI.DLL" at address 0x77F69653. | |
| 00:00:05.598: LoadLibraryA("browseui.dll") returned 0x75F80000. | |
| 00:00:05.608: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "IsThemeBackgroundPartiallyTransparent") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD8AEF2. | |
| 00:00:05.608: GetProcAddress(0x5AD70000 [UXTHEME.DLL], "DrawThemeParentBackground") called from "COMCTL32.DLL" at address 0x773D4010 and returned 0x5AD8AF7D. | |
| 00:00:06.740: GetProcAddress(0x774E0000 [OLE32.DLL], "ReleaseStgMedium") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x7752B6EB. | |
| 00:00:06.920: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000181) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E109D. | |
| 00:00:06.920: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000151) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E105D. | |
| 00:00:06.920: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000149) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E0DC0. | |
| 00:00:06.920: GetProcAddress(0x774E0000 [OLE32.DLL], "RevokeDragDrop") called from "SHELL32.DLL" at address 0x7CA0465C and returned 0x77532BED. | |
| 00:00:06.920: GetProcAddress(0x774E0000 [OLE32.DLL], "CoTaskMemFree") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x774FD004. | |
| 00:00:06.930: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x0000019C) called from "BROWSEUI.DLL" at address 0x75F820AB and returned 0x773E1D47. | |
| 00:00:06.930: GetProcAddress(0x7E290000 [SHDOCVW.DLL], 0x000000AB) called from "BROWSEUI.DLL" at address 0x75F84082 and returned 0x7E2B2754. | |
| 00:00:06.930: GetProcAddress(0x773D0000 [COMCTL32.DLL], 0x00000182) called from "SHDOCVW.DLL" at address 0x7E2A6176 and returned 0x773E10D1. | |
| 00:00:06.930: GetProcAddress(0x774E0000 [OLE32.DLL], "OleUninitialize") called from "COMDLG32.DLL" at address 0x763B2AC5 and returned 0x7753327F. | |
| 00:00:09.273: DllMain(0x75F80000, DLL_PROCESS_DETACH, 0x00000000) in "BROWSEUI.DLL" called. | |
| 00:00:09.273: GetProcAddress(0x7E410000 [USER32.DLL], "GetLastInputInfo") called from "BROWSEUI.DLL" at address 0x75F8391E and returned 0x7E4194F4. | |
| 00:00:09.273: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "BROWSEUI.DLL" at address 0x75F916D4 and returned 0x7C82F6BB. | |
| 00:00:09.273: DllMain(0x75F80000, DLL_PROCESS_DETACH, 0x00000000) in "BROWSEUI.DLL" returned 1 (0x1). | |
| 00:00:09.273: DllMain(0x7E290000, DLL_PROCESS_DETACH, 0x00000000) in "SHDOCVW.DLL" called. | |
| 00:00:09.273: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "SHDOCVW.DLL" at address 0x7E2B3A68 and returned 0x7C82F6BB. | |
| 00:00:09.273: DllMain(0x7E290000, DLL_PROCESS_DETACH, 0x00000000) in "SHDOCVW.DLL" returned 1 (0x1). | |
| 00:00:09.273: DllMain(0x754D0000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPTUI.DLL" called. | |
| 00:00:09.273: DllMain(0x754D0000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPTUI.DLL" returned 1 (0x1). | |
| 00:00:09.273: DllMain(0x76F60000, DLL_PROCESS_DETACH, 0x00000000) in "WLDAP32.DLL" called. | |
| 00:00:09.273: DllMain(0x76F60000, DLL_PROCESS_DETACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1). | |
| 00:00:09.273: DllMain(0x76C30000, DLL_PROCESS_DETACH, 0x00000000) in "WINTRUST.DLL" called. | |
| 00:00:09.273: DllMain(0x76C30000, DLL_PROCESS_DETACH, 0x00000000) in "WINTRUST.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x76C90000, DLL_PROCESS_DETACH, 0x00000000) in "IMAGEHLP.DLL" called. | |
| 00:00:09.283: DllMain(0x76C90000, DLL_PROCESS_DETACH, 0x00000000) in "IMAGEHLP.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x3D930000, DLL_PROCESS_DETACH, 0x00000000) in "WININET.DLL" called. | |
| 00:00:09.283: DllMain(0x3D930000, DLL_PROCESS_DETACH, 0x00000000) in "WININET.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x78130000, DLL_PROCESS_DETACH, 0x00000000) in "URLMON.DLL" called. | |
| 00:00:09.283: DllMain(0x78130000, DLL_PROCESS_DETACH, 0x00000000) in "URLMON.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x3DFD0000, DLL_PROCESS_DETACH, 0x00000000) in "IERTUTIL.DLL" called. | |
| 00:00:09.283: DllMain(0x3DFD0000, DLL_PROCESS_DETACH, 0x00000000) in "IERTUTIL.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x020C0000, DLL_PROCESS_DETACH, 0x00000000) in "NORMALIZ.DLL" called. | |
| 00:00:09.283: DllMain(0x020C0000, DLL_PROCESS_DETACH, 0x00000000) in "NORMALIZ.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x77A80000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPT32.DLL" called. | |
| 00:00:09.283: DllMain(0x77A80000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1). | |
| 00:00:09.283: DllMain(0x77B20000, DLL_PROCESS_DETACH, 0x00000000) in "MSASN1.DLL" called. | |
| 00:00:09.283: DllMain(0x77B20000, DLL_PROCESS_DETACH, 0x00000000) in "MSASN1.DLL" returned 1 (0x1). | |
| 00:00:09.283: Unloaded "BROWSEUI.DLL" at address 0x75F80000. | |
| 00:00:09.283: Unloaded "SHDOCVW.DLL" at address 0x7E290000. | |
| 00:00:09.283: Unloaded "CRYPTUI.DLL" at address 0x754D0000. | |
| 00:00:09.283: Unloaded "WLDAP32.DLL" at address 0x76F60000. | |
| 00:00:09.283: Unloaded "WINTRUST.DLL" at address 0x76C30000. | |
| 00:00:09.283: Unloaded "IMAGEHLP.DLL" at address 0x76C90000. | |
| 00:00:09.283: Unloaded "WININET.DLL" at address 0x3D930000. | |
| 00:00:09.283: Unloaded "URLMON.DLL" at address 0x78130000. | |
| 00:00:09.283: Unloaded "IERTUTIL.DLL" at address 0x3DFD0000. | |
| 00:00:09.283: Unloaded "NORMALIZ.DLL" at address 0x020C0000. | |
| 00:00:09.283: Unloaded "CRYPT32.DLL" at address 0x77A80000. | |
| 00:00:09.283: Unloaded "MSASN1.DLL" at address 0x77B20000. | |
| 00:00:09.293: DllMain(0x77A20000, DLL_PROCESS_DETACH, 0x00000000) in "CSCUI.DLL" called. | |
| 00:00:09.293: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "CSCUI.DLL" at address 0x77A2205C and returned 0x7C82F6BB. | |
| 00:00:09.293: DllMain(0x77A20000, DLL_PROCESS_DETACH, 0x00000000) in "CSCUI.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x76600000, DLL_PROCESS_DETACH, 0x00000000) in "CSCDLL.DLL" called. | |
| 00:00:09.293: DllMain(0x76600000, DLL_PROCESS_DETACH, 0x00000000) in "CSCDLL.DLL" returned 1 (0x1). | |
| 00:00:09.293: Unloaded "CSCUI.DLL" at address 0x77A20000. | |
| 00:00:09.293: Unloaded "CSCDLL.DLL" at address 0x76600000. | |
| 00:00:09.293: DllMain(0x75F70000, DLL_PROCESS_DETACH, 0x00000001) in "DAVCLNT.DLL" called. | |
| 00:00:09.293: DllMain(0x75F70000, DLL_PROCESS_DETACH, 0x00000001) in "DAVCLNT.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x71C10000, DLL_PROCESS_DETACH, 0x00000001) in "NTLANMAN.DLL" called. | |
| 00:00:09.293: DllMain(0x71C10000, DLL_PROCESS_DETACH, 0x00000001) in "NTLANMAN.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x71C90000, DLL_PROCESS_DETACH, 0x00000001) in "NETUI1.DLL" called. | |
| 00:00:09.293: DllMain(0x71C90000, DLL_PROCESS_DETACH, 0x00000001) in "NETUI1.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x71BF0000, DLL_PROCESS_DETACH, 0x00000001) in "SAMLIB.DLL" called. | |
| 00:00:09.293: DllMain(0x71BF0000, DLL_PROCESS_DETACH, 0x00000001) in "SAMLIB.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x71C80000, DLL_PROCESS_DETACH, 0x00000001) in "NETRAP.DLL" called. | |
| 00:00:09.293: DllMain(0x71C80000, DLL_PROCESS_DETACH, 0x00000001) in "NETRAP.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x71CD0000, DLL_PROCESS_DETACH, 0x00000001) in "NETUI0.DLL" called. | |
| 00:00:09.293: DllMain(0x71CD0000, DLL_PROCESS_DETACH, 0x00000001) in "NETUI0.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x75F60000, DLL_PROCESS_DETACH, 0x00000001) in "DRPROV.DLL" called. | |
| 00:00:09.293: DllMain(0x75F60000, DLL_PROCESS_DETACH, 0x00000001) in "DRPROV.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x01D80000, DLL_PROCESS_DETACH, 0x00000001) in "VBOXMRXNP.DLL" called. | |
| 00:00:09.293: DllMain(0x01D80000, DLL_PROCESS_DETACH, 0x00000001) in "VBOXMRXNP.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x76990000, DLL_PROCESS_DETACH, 0x00000001) in "NTSHRUI.DLL" called. | |
| 00:00:09.293: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "NTSHRUI.DLL" at address 0x76992A60 and returned 0x7C82F6BB. | |
| 00:00:09.293: DllMain(0x76990000, DLL_PROCESS_DETACH, 0x00000001) in "NTSHRUI.DLL" returned 1 (0x1). | |
| 00:00:09.293: DllMain(0x5B860000, DLL_PROCESS_DETACH, 0x00000001) in "NETAPI32.DLL" called. | |
| 00:00:09.303: DllMain(0x5B860000, DLL_PROCESS_DETACH, 0x00000001) in "NETAPI32.DLL" returned 1244417 (0x12FD01). | |
| 00:00:09.303: DllMain(0x76B20000, DLL_PROCESS_DETACH, 0x00000001) in "ATL.DLL" called. | |
| 00:00:09.303: DllMain(0x76B20000, DLL_PROCESS_DETACH, 0x00000001) in "ATL.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x77920000, DLL_PROCESS_DETACH, 0x00000001) in "SETUPAPI.DLL" called. | |
| 00:00:09.303: DllMain(0x77920000, DLL_PROCESS_DETACH, 0x00000001) in "SETUPAPI.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x76FD0000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL" called. | |
| 00:00:09.303: DllMain(0x76FD0000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL" called. | |
| 00:00:09.303: DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "COMRES.DLL" called. | |
| 00:00:09.303: DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "COMRES.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x77B40000, DLL_PROCESS_DETACH, 0x00000001) in "APPHELP.DLL" called. | |
| 00:00:09.303: DllMain(0x77B40000, DLL_PROCESS_DETACH, 0x00000001) in "APPHELP.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x763B0000, DLL_PROCESS_DETACH, 0x00000001) in "COMDLG32.DLL" called. | |
| 00:00:09.303: DllMain(0x763B0000, DLL_PROCESS_DETACH, 0x00000001) in "COMDLG32.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x769C0000, DLL_PROCESS_DETACH, 0x00000001) in "USERENV.DLL" called. | |
| 00:00:09.303: DllMain(0x769C0000, DLL_PROCESS_DETACH, 0x00000001) in "USERENV.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x755C0000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTFIME.IME" called. | |
| 00:00:09.303: LoadLibraryW("C:\WINDOWS\system32\Msctf.dll") called from "MSCTFIME.IME" at address 0x755DD5E6. | |
| 00:00:09.303: LoadLibraryW("C:\WINDOWS\system32\Msctf.dll") returned 0x74720000. | |
| 00:00:09.303: GetProcAddress(0x74720000 [MSCTF.DLL], "TF_DllDetachInOther") called from "MSCTFIME.IME" at address 0x755D9AC5 and returned 0x7472F326. | |
| 00:00:09.303: DllMain(0x755C0000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTFIME.IME" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x01330000, DLL_PROCESS_DETACH, 0x00000001) in "QWEBP.DLL" called. | |
| 00:00:09.303: DllMain(0x01330000, DLL_PROCESS_DETACH, 0x00000001) in "QWEBP.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x01320000, DLL_PROCESS_DETACH, 0x00000001) in "QWBMP.DLL" called. | |
| 00:00:09.303: DllMain(0x01320000, DLL_PROCESS_DETACH, 0x00000001) in "QWBMP.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x012D0000, DLL_PROCESS_DETACH, 0x00000001) in "QTIFF.DLL" called. | |
| 00:00:09.303: DllMain(0x012D0000, DLL_PROCESS_DETACH, 0x00000001) in "QTIFF.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x012C0000, DLL_PROCESS_DETACH, 0x00000001) in "QTGA.DLL" called. | |
| 00:00:09.303: DllMain(0x012C0000, DLL_PROCESS_DETACH, 0x00000001) in "QTGA.DLL" returned 1 (0x1). | |
| 00:00:09.303: DllMain(0x012A0000, DLL_PROCESS_DETACH, 0x00000001) in "QSVG.DLL" called. | |
| 00:00:09.314: DllMain(0x012A0000, DLL_PROCESS_DETACH, 0x00000001) in "QSVG.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x66000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5SVG.DLL" called. | |
| 00:00:09.314: DllMain(0x66000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5SVG.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x01260000, DLL_PROCESS_DETACH, 0x00000001) in "QMNG.DLL" called. | |
| 00:00:09.314: DllMain(0x01260000, DLL_PROCESS_DETACH, 0x00000001) in "QMNG.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x01220000, DLL_PROCESS_DETACH, 0x00000001) in "QJPEG.DLL" called. | |
| 00:00:09.314: DllMain(0x01220000, DLL_PROCESS_DETACH, 0x00000001) in "QJPEG.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x011B0000, DLL_PROCESS_DETACH, 0x00000001) in "QJP2.DLL" called. | |
| 00:00:09.314: DllMain(0x011B0000, DLL_PROCESS_DETACH, 0x00000001) in "QJP2.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x011A0000, DLL_PROCESS_DETACH, 0x00000001) in "QICO.DLL" called. | |
| 00:00:09.314: DllMain(0x011A0000, DLL_PROCESS_DETACH, 0x00000001) in "QICO.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x01190000, DLL_PROCESS_DETACH, 0x00000001) in "QICNS.DLL" called. | |
| 00:00:09.314: DllMain(0x01190000, DLL_PROCESS_DETACH, 0x00000001) in "QICNS.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x01180000, DLL_PROCESS_DETACH, 0x00000001) in "QGIF.DLL" called. | |
| 00:00:09.314: DllMain(0x01180000, DLL_PROCESS_DETACH, 0x00000001) in "QGIF.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x01170000, DLL_PROCESS_DETACH, 0x00000001) in "QDDS.DLL" called. | |
| 00:00:09.314: DllMain(0x01170000, DLL_PROCESS_DETACH, 0x00000001) in "QDDS.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x74720000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" called. | |
| 00:00:09.314: DllMain(0x74720000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x5AD70000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL" called. | |
| 00:00:09.314: DllMain(0x5AD70000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x00E50000, DLL_PROCESS_DETACH, 0x00000001) in "QWINDOWS.DLL" called. | |
| 00:00:09.314: DllMain(0x00E50000, DLL_PROCESS_DETACH, 0x00000001) in "QWINDOWS.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x77120000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL" called. | |
| 00:00:09.314: DllMain(0x77120000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x76B40000, DLL_PROCESS_DETACH, 0x00000001) in "WINMM.DLL" called. | |
| 00:00:09.314: DllMain(0x76B40000, DLL_PROCESS_DETACH, 0x00000001) in "WINMM.DLL" returned 1 (0x1). | |
| 00:00:09.314: DllMain(0x773D0000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" called. | |
| 00:00:09.314: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "COMCTL32.DLL" at address 0x7745B656 and returned 0x7C82F6BB. | |
| 00:00:09.314: DllMain(0x773D0000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x629C0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" called. | |
| 00:00:09.324: DllMain(0x629C0000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x74D90000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" called. | |
| 00:00:09.324: DllMain(0x74D90000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x76390000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" called. | |
| 00:00:09.324: DllMain(0x76390000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x10000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5MULTIMEDIAWIDGETS.DLL" called. | |
| 00:00:09.324: DllMain(0x10000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5MULTIMEDIAWIDGETS.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x63000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5OPENGL.DLL" called. | |
| 00:00:09.324: DllMain(0x63000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5OPENGL.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x65000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5WIDGETS.DLL" called. | |
| 00:00:09.324: DllMain(0x65000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5WIDGETS.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x00360000, DLL_PROCESS_DETACH, 0x00000001) in "QT5MULTIMEDIA.DLL" called. | |
| 00:00:09.324: DllMain(0x00360000, DLL_PROCESS_DETACH, 0x00000001) in "QT5MULTIMEDIA.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x00420000, DLL_PROCESS_DETACH, 0x00000001) in "QT5GUI.DLL" called. | |
| 00:00:09.324: DllMain(0x00420000, DLL_PROCESS_DETACH, 0x00000001) in "QT5GUI.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x64000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5NETWORK.DLL" called. | |
| 00:00:09.324: DllMain(0x64000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5NETWORK.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x76F20000, DLL_PROCESS_DETACH, 0x00000001) in "DNSAPI.DLL" called. | |
| 00:00:09.324: DllMain(0x76F20000, DLL_PROCESS_DETACH, 0x00000001) in "DNSAPI.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x67000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5CORE.DLL" called. | |
| 00:00:09.324: DllMain(0x67000000, DLL_PROCESS_DETACH, 0x00000001) in "QT5CORE.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x78050000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCP100.DLL" called. | |
| 00:00:09.324: DllMain(0x78050000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCP100.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x78AA0000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR100.DLL" called. | |
| 00:00:09.324: DllMain(0x78AA0000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR100.DLL" returned 1 (0x1). | |
| 00:00:09.324: DllMain(0x71B20000, DLL_PROCESS_DETACH, 0x00000001) in "MPR.DLL" called. | |
| 00:00:09.324: DllMain(0x71B20000, DLL_PROCESS_DETACH, 0x00000001) in "MPR.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x71AB0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" called. | |
| 00:00:09.334: DllMain(0x71AB0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x71AA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2HELP.DLL" called. | |
| 00:00:09.334: DllMain(0x71AA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2HELP.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x774E0000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" called. | |
| 00:00:09.334: DllMain(0x774E0000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x7C9C0000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" called. | |
| 00:00:09.334: GetProcAddress(0x7C800000 [KERNEL32.DLL], "ReleaseActCtx") called from "SHELL32.DLL" at address 0x7CA2AB1B and returned 0x7C82F6BB. | |
| 00:00:09.334: DllMain(0x7C9C0000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77F60000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" called. | |
| 00:00:09.334: DllMain(0x77F60000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" called. | |
| 00:00:09.334: DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" called. | |
| 00:00:09.334: DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77E70000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" called. | |
| 00:00:09.334: DllMain(0x77E70000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77FE0000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL" called. | |
| 00:00:09.334: DllMain(0x77FE0000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x7E410000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" called. | |
| 00:00:09.334: DllMain(0x7E410000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x77F10000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" called. | |
| 00:00:09.334: DllMain(0x77F10000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" called. | |
| 00:00:09.334: DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x7C800000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" called. | |
| 00:00:09.334: DllMain(0x7C800000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" returned 1 (0x1). | |
| 00:00:09.334: DllMain(0x7C900000, DLL_PROCESS_DETACH, 0x00000001) in "NTDLL.DLL" called. | |
| 00:00:09.344: DllMain(0x7C900000, DLL_PROCESS_DETACH, 0x00000001) in "NTDLL.DLL" returned 1 (0x1). | |
| 00:00:09.344: Exited "VIDEOWIDGET.EXE" (process 0xB18) with code 0 (0x0). |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment