*****************************| System Information |*****************************

Dependency Walker:       2.2.9600 (32-bit)
Operating System:        Microsoft Windows NT/2000/XP/2003/Vista based Professional (64-bit)
OS Version:              6.01.7600
Processor:               Intel64 Family 6 Model 42 Stepping 7, GenuineIntel, ~2808MHz
Number of Processors:    4, Mask: 0x0000000F
Computer Name:           AUP_WS54
User Name:               Tumanova_TS
Local Date:              12  2017 .
Local Time:              23:08:31  (GMT+03:00)
OS Language:             0x0419: Russian
Memory Load:             71%
Physical Memory Total:   4208115712 (4014 MB)
Physical Memory Used:    2988249088
Physical Memory Free:    1219866624
Page File Memory Total:  4294967295
Page File Memory Used:   724721663
Page File Memory Free:   3570245632
Virtual Memory Total:    2147352576
Virtual Memory Used:     78000128
Virtual Memory Free:     2069352448
Page Size:               0x00001000 (4096)
Allocation Granularity:  0x00010000 (65536)
Min. App. Address:       0x00010000 (65536)
Max. App. Address:       0x7FFEFFFF (2147418111)

********************************| Search Order |********************************
*                                                                              *
* Legend: F  File                     E  Error (path not valid)                *
*                                                                              *
********************************************************************************

Side-by-Side components (Windows 2000/XP/2003/Vista/+)
   [F ] c:\windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.DLL
   [F ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCP90.DLL
   [F ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.DLL
   [F ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16661_none_ebfb56996c72aefc\COMCTL32.DLL
   [F ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
   [F ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
The system's "KnownDLLs" list
   [F ] c:\windows\syswow64\ADVAPI32.DLL
   [F ] c:\windows\syswow64\CFGMGR32.DLL
   [F ] c:\windows\syswow64\CLBCATQ.DLL
   [F ] c:\windows\syswow64\COMCTL32.DLL
   [F ] c:\windows\syswow64\COMDLG32.DLL
   [F ] c:\windows\syswow64\CRYPT32.DLL
   [F ] c:\windows\syswow64\CRYPTBASE.DLL
   [F ] c:\windows\syswow64\DEVOBJ.DLL
   [F ] c:\windows\syswow64\DIFXAPI.DLL
   [F ] c:\windows\syswow64\GDI32.DLL
   [F ] c:\windows\syswow64\IERTUTIL.DLL
   [F ] c:\windows\syswow64\IMAGEHLP.DLL
   [F ] c:\windows\syswow64\IMM32.DLL
   [F ] c:\windows\syswow64\KERNEL32.DLL
   [F ] c:\windows\syswow64\KERNELBASE.DLL
   [F ] c:\windows\syswow64\LPK.DLL
   [F ] c:\windows\syswow64\MSASN1.DLL
   [F ] c:\windows\syswow64\MSCTF.DLL
   [F ] c:\windows\syswow64\MSVCRT.DLL
   [F ] c:\windows\syswow64\NORMALIZ.DLL
   [F ] c:\windows\syswow64\NSI.DLL
   [F ] c:\windows\syswow64\NTDLL.DLL
   [F ] c:\windows\syswow64\NTDLL.DLL
   [F ] c:\windows\syswow64\OLE32.DLL
   [F ] c:\windows\syswow64\OLEAUT32.DLL
   [F ] c:\windows\syswow64\PSAPI.DLL
   [F ] c:\windows\syswow64\RPCRT4.DLL
   [F ] c:\windows\syswow64\SECHOST.DLL
   [F ] c:\windows\syswow64\SETUPAPI.DLL
   [F ] c:\windows\syswow64\SHELL32.DLL
   [F ] c:\windows\syswow64\SHLWAPI.DLL
   [F ] c:\windows\syswow64\SSPICLI.DLL
   [F ] c:\windows\syswow64\URLMON.DLL
   [F ] c:\windows\syswow64\USER32.DLL
   [F ] c:\windows\syswow64\USP10.DLL
   [F ] c:\windows\syswow64\WININET.DLL
   [F ] c:\windows\syswow64\WINTRUST.DLL
   [F ] c:\windows\syswow64\WLDAP32.DLL
   [F ] c:\windows\syswow64\WS2_32.DLL
The application directory
   [  ] C:\Intel\
A user defined directory
   [  ] C:\Windows\SysWOW64\
The 16-bit system directory (Windows NT/2000/XP/2003/Vista/+)
   [  ] C:\Windows\system\
The system's root OS directory
   [  ] C:\Windows\
The system's "PATH" environment variable directories
   [  ] C:\ProgramData\Oracle\Java\javapath\
   [  ] C:\Windows\system32\
   [  ] C:\Windows\
   [  ] C:\Windows\System32\Wbem\
   [  ] C:\Windows\System32\WindowsPowerShell\v1.0\
   [  ] C:\Program Files (x86)\Skype\Phone\

***************************| Module Dependency Tree |***************************
*                                                                              *
* Legend: F  Forwarded Module   ?  Missing Module        6  64-bit Module      *
*         D  Delay Load Module  !  Invalid Module                              *
*         *  Dynamic Module     E  Import/Export Mismatch or Load Failure      *
*                               ^  Duplicate Module                            *
*                                                                              *
********************************************************************************

[   ] c:\intel\PROCMON.EXE
     [   ] c:\windows\syswow64\WS2_32.DLL
          [   ] c:\windows\syswow64\MSVCRT.DLL
               [   ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-DATETIME-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-FIBERS-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-UTIL-L1-1-0.DLL
          [   ] c:\windows\syswow64\NTDLL.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [   ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [   ] c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [   ] c:\windows\syswow64\SSPICLI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\CRYPTBASE.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
               [D  ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\WS2_32.DLL
               [D  ] c:\windows\syswow64\IPHLPAPI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\NSI.DLL
                    [   ] c:\windows\syswow64\WINNSI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\NSI.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                    [D  ] c:\windows\syswow64\DHCPCSVC.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\NSI.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                    [D  ] c:\windows\syswow64\DHCPCSVC6.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                    [D  ] c:\windows\syswow64\DNSAPI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\NSI.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [D  ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                    [D^ ] c:\windows\syswow64\WS2_32.DLL
               [D  ] c:\windows\syswow64\CRYPTBASE.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
          [   ] c:\windows\syswow64\NSI.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
          [D  ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
          [D  ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\USER32.DLL
     [   ] c:\windows\syswow64\VERSION.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [*^ ] c:\windows\microsoft.net\framework\v4.0.30319\CLR.DLL
     [   ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\UXTHEME.DLL
          [D^ ] c:\windows\syswow64\IMM32.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\OLEACC.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\WINMM.DLL
          [D^ ] c:\windows\syswow64\WINDOWSCODECS.DLL
          [D^ ] c:\windows\syswow64\DWMAPI.DLL
          [D^ ] c:\windows\syswow64\DUSER.DLL
          [*^ ] c:\windows\syswow64\LPK.DLL
          [*  ] c:\windows\syswow64\IMAGERES.DLL
          [*^ ] c:\windows\syswow64\WINDOWSCODECS.DLL
     [   ] c:\windows\syswow64\FLTLIB.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
     [   ] c:\windows\syswow64\KERNEL32.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FIBERS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-UTIL-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [   ] c:\windows\syswow64\USER32.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D  ] c:\windows\syswow64\CFGMGR32.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D  ] c:\windows\syswow64\MSIMG32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
          [D  ] c:\windows\syswow64\POWRPROF.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
                    [F^ ] c:\windows\syswow64\CFGMGR32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
          [D  ] c:\windows\syswow64\WINSTA.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [D^ ] c:\windows\syswow64\RPCRT4.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
               [D^ ] c:\windows\syswow64\WS2_32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
          [*^ ] c:\windows\syswow64\IMM32.DLL
          [*^ ] c:\windows\syswow64\UXTHEME.DLL
          [*  ] c:\windows\system32\IMAGERES.DLL
          [*  ] c:\program files (x86)\pdf24\RESOURCES.DLL
     [   ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [   ] c:\windows\syswow64\LPK.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\USP10.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [*^ ] c:\windows\syswow64\GDI32.DLL
          [*^ ] c:\windows\syswow64\LPK.DLL
     [   ] c:\windows\syswow64\COMDLG32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
          [ ^ ] c:\windows\syswow64\SHELL32.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\VERSION.DLL
          [D^ ] c:\windows\syswow64\IMM32.DLL
          [D^ ] c:\windows\syswow64\MPR.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D  ] c:\windows\syswow64\PRINTUI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DATETIME-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\WINSPOOL.DRV
               [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [   ] c:\windows\syswow64\PUIAPI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\WINSPOOL.DRV
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
                    [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
                    [F^ ] c:\windows\syswow64\ADSLDPC.DLL
               [D^ ] c:\windows\syswow64\CFGMGR32.DLL
               [D^ ] c:\windows\syswow64\MPR.DLL
               [D  ] c:\windows\syswow64\ACLUI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [ ^ ] c:\windows\syswow64\OLE32.DLL
                    [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [ ^ ] c:\windows\syswow64\SHELL32.DLL
                    [ ^ ] c:\windows\syswow64\NTDSAPI.DLL
                    [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D^ ] c:\windows\syswow64\SAMCLI.DLL
                    [D^ ] c:\windows\syswow64\SECUR32.DLL
                         [F^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\WTSAPI32.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
               [D^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\WS2_32.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
               [D^ ] c:\windows\syswow64\DSROLE.DLL
               [D^ ] c:\windows\syswow64\LOGONCLI.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
          [D^ ] c:\windows\syswow64\WINSPOOL.DRV
          [D^ ] c:\windows\syswow64\UXTHEME.DLL
          [D  ] c:\windows\syswow64\FMS.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\XMLLITE.DLL
          [D^ ] c:\windows\syswow64\URLMON.DLL
          [D^ ] c:\windows\syswow64\PROPSYS.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
          [D^ ] c:\windows\syswow64\DSROLE.DLL
          [D  ] c:\windows\syswow64\DFSCLI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
               [D^ ] c:\windows\syswow64\WLDAP32.DLL
               [D^ ] c:\windows\syswow64\LOGONCLI.DLL
               [D^ ] c:\windows\syswow64\DSROLE.DLL
          [D^ ] c:\windows\syswow64\LOGONCLI.DLL
          [D^ ] c:\windows\syswow64\NETUTILS.DLL
          [D^ ] c:\windows\syswow64\WKSCLI.DLL
     [   ] c:\windows\syswow64\ADVAPI32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
          [   ] c:\windows\syswow64\API-MS-WIN-SERVICE-CORE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\RPCRT4.DLL
          [D  ] c:\windows\syswow64\CRYPTSP.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
          [D  ] c:\windows\syswow64\WINTRUST.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [   ] c:\windows\syswow64\CRYPT32.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\MSASN1.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                    [D^ ] c:\windows\syswow64\SSPICLI.DLL
                    [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\USER32.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D  ] c:\windows\syswow64\USERENV.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\PROFAPI.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\DNSAPI.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [D  ] c:\windows\syswow64\LOGONCLI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D  ] c:\windows\syswow64\WLDAP32.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\DNSAPI.DLL
                              [D  ] c:\windows\syswow64\BROWCLI.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                   [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                                   [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                                   [D  ] c:\windows\syswow64\WKSCLI.DLL
                                        [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                        [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                        [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                                        [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                                        [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                        [D  ] c:\windows\syswow64\NETJOIN.DLL
                                             [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                             [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                                             [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                             [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                                             [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                                             [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                                             [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                                             [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                                             [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                                             [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                                             [D  ] c:\windows\syswow64\NTDSAPI.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                                                  [ ^ ] c:\windows\syswow64\WS2_32.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [D  ] c:\windows\syswow64\W32TOPL.DLL
                                                       [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                       [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                                                       [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                                  [D^ ] c:\windows\syswow64\DNSAPI.DLL
                                                  [D^ ] c:\windows\syswow64\WLDAP32.DLL
                                                  [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                                  [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                                                  [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                                                  [D^ ] c:\windows\syswow64\SSPICLI.DLL
                                             [D^ ] c:\windows\syswow64\WLDAP32.DLL
                                             [D^ ] c:\windows\syswow64\DNSAPI.DLL
                                             [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                                             [D  ] c:\windows\syswow64\SAMCLI.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                                                  [D^ ] c:\windows\syswow64\SAMLIB.DLL
                                                  [D^ ] c:\windows\syswow64\DNSAPI.DLL
                                                  [D^ ] c:\windows\syswow64\SSPICLI.DLL
                                                  [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                                                  [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                             [D^ ] c:\windows\syswow64\WKSCLI.DLL
                                             [D  ] c:\windows\syswow64\SAMLIB.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                                                  [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                                                  [D^ ] c:\windows\syswow64\RPCRT4.DLL
                                                  [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                                                  [D^ ] c:\windows\syswow64\DNSAPI.DLL
                                             [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                             [D  ] c:\windows\syswow64\NETBIOS.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                                                  [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                                             [D  ] c:\windows\syswow64\DSROLE.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                                                  [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                                             [D  ] c:\windows\syswow64\WINBRAND.DLL
                                                  [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [ ^ ] c:\windows\syswow64\USER32.DLL
                                                  [ ^ ] c:\windows\syswow64\GDI32.DLL
                                             [D^ ] c:\windows\syswow64\RPCRT4.DLL
                                             [D  ] c:\windows\syswow64\SECUR32.DLL
                                                  [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                                  [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                                  [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                                                  [D^ ] c:\windows\syswow64\NETUTILS.DLL
                                                  [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                                                  [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                                                  [F^ ] c:\windows\syswow64\SSPICLI.DLL
                                        [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                                        [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D  ] c:\windows\syswow64\NETUTILS.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D  ] c:\windows\syswow64\GPAPI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D^ ] c:\windows\syswow64\USER32.DLL
                              [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                              [D^ ] c:\windows\syswow64\NETUTILS.DLL
                              [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                              [D^ ] c:\windows\syswow64\SLC.DLL
                         [D? ] GPSVC.DLL
                    [D^ ] c:\windows\syswow64\WINSTA.DLL
                    [D  ] c:\windows\syswow64\NCRYPT.DLL
                         [ ^ ] c:\windows\syswow64\BCRYPT.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\MSASN1.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\USERENV.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [F^ ] c:\windows\syswow64\BCRYPT.DLL
                    [D  ] c:\windows\syswow64\PROFAPI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\MSASN1.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\CRYPTSP.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
               [D  ] c:\windows\syswow64\IMAGEHLP.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\DBGHELP.DLL
               [D^ ] c:\windows\syswow64\BCRYPT.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D  ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\SSPICLI.DLL
          [D^ ] c:\windows\syswow64\USER32.DLL
          [D  ] c:\windows\syswow64\BCRYPT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
          [D  ] c:\windows\syswow64\PCWUM.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [*  ] c:\windows\syswow64\NTMARTA.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\WLDAP32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
               [D^ ] c:\windows\syswow64\RPCRT4.DLL
               [D^ ] c:\windows\syswow64\WINSPOOL.DRV
               [D^ ] c:\windows\syswow64\NTDSAPI.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
               [D^ ] c:\windows\syswow64\LOGONCLI.DLL
               [D^ ] c:\windows\syswow64\SRVCLI.DLL
               [D^ ] c:\windows\syswow64\SAMLIB.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\SHLWAPI.DLL
          [*^ ] c:\windows\syswow64\SECHOST.DLL
          [*^ ] c:\windows\syswow64\CRYPTSP.DLL
     [   ] c:\windows\syswow64\SHELL32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\CRYPTSP.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D  ] c:\windows\syswow64\RSTRTMGR.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\NCRYPT.DLL
                    [F^ ] c:\windows\syswow64\BCRYPT.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D  ] c:\windows\syswow64\WINMM.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\OLEACC.DLL
               [D^ ] c:\windows\syswow64\RPCRT4.DLL
               [D  ] c:\windows\syswow64\MMDEVAPI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\PROPSYS.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\SETUPAPI.DLL
                         [F^ ] c:\windows\syswow64\CFGMGR32.DLL
                    [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [D^ ] c:\windows\syswow64\WINSTA.DLL
          [D^ ] c:\windows\syswow64\MSILTCFG.DLL
          [D  ] c:\windows\syswow64\DEVMGR.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
                    [F^ ] c:\windows\syswow64\DEVRTL.DLL
                    [F^ ] c:\windows\syswow64\CFGMGR32.DLL
               [   ] c:\windows\syswow64\NEWDEV.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\UXTHEME.DLL
                    [ ^ ] c:\windows\syswow64\CFGMGR32.DLL
                    [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
                         [F^ ] c:\windows\syswow64\DEVRTL.DLL
                    [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [D^ ] c:\windows\syswow64\WININET.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\VERSION.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\UXTHEME.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\APPHELP.DLL
          [D  ] c:\windows\syswow64\DWMAPI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D  ] c:\windows\syswow64\URLMON.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
               [ ^ ] c:\windows\syswow64\WININET.DLL
               [D^ ] c:\windows\syswow64\WINTRUST.DLL
               [D^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\SHELL32.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D^ ] c:\windows\syswow64\MPR.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
                    [F^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\XMLLITE.DLL
               [D^ ] c:\windows\syswow64\APPHELP.DLL
               [D^ ] c:\windows\syswow64\PROPSYS.DLL
               [*^ ] c:\windows\syswow64\SECUR32.DLL
                    [F^ ] c:\windows\syswow64\SSPICLI.DLL
               [*^ ] c:\windows\syswow64\SHELL32.DLL
          [D  ] c:\windows\syswow64\WININET.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\NORMALIZ.DLL
                    [F^ ] c:\windows\syswow64\KERNEL32.DLL
               [   ] c:\windows\syswow64\IERTUTIL.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [F^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\WINTRUST.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\URLMON.DLL
               [D^ ] c:\windows\syswow64\SHELL32.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\WS2_32.DLL
               [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
               [D^ ] c:\windows\syswow64\DHCPCSVC.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
                    [F^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\CREDUI.DLL
               [D^ ] c:\windows\syswow64\CRYPTUI.DLL
               [D^ ] c:\windows\syswow64\WINTRUST.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D  ] c:\windows\syswow64\TAPI32.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [D  ] c:\windows\syswow64\RTUTILS.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D^ ] c:\windows\syswow64\WINMM.DLL
                    [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D^ ] c:\windows\syswow64\GDI32.DLL
               [D  ] c:\windows\syswow64\RASAPI32.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [   ] c:\windows\syswow64\RASMAN.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\RTUTILS.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D^ ] c:\windows\syswow64\WKSCLI.DLL
                    [D^ ] c:\windows\syswow64\TAPI32.DLL
                    [D^ ] c:\windows\syswow64\WS2_32.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D  ] c:\windows\syswow64\EAPPCFG.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                    [D^ ] c:\windows\syswow64\RTUTILS.DLL
                    [D  ] c:\windows\syswow64\VPNIKEAPI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D  ] c:\windows\syswow64\MPRMSG.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\USERENV.DLL
                    [D  ] c:\windows\syswow64\WINHTTP.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [   ] c:\windows\syswow64\WEBIO.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\CRYPT32.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D^ ] c:\windows\syswow64\SSPICLI.DLL
                              [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-CORE-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\WS2_32.DLL
                         [D^ ] c:\windows\syswow64\DNSAPI.DLL
                         [D^ ] c:\windows\syswow64\NSI.DLL
                         [D^ ] c:\windows\syswow64\CFGMGR32.DLL
                         [D^ ] c:\windows\syswow64\DHCPCSVC.DLL
                    [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                    [D^ ] c:\windows\syswow64\PROFAPI.DLL
               [D  ] c:\windows\syswow64\RASDLG.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [   ] c:\windows\syswow64\MPRAPI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
                         [D^ ] c:\windows\syswow64\DSROLE.DLL
                         [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                         [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\RTUTILS.DLL
                         [D^ ] c:\windows\syswow64\SAMCLI.DLL
                         [D^ ] c:\windows\syswow64\SAMLIB.DLL
                         [D^ ] c:\windows\syswow64\SETUPAPI.DLL
                              [F^ ] c:\windows\syswow64\CFGMGR32.DLL
                         [D^ ] c:\windows\syswow64\RASMAN.DLL
                         [D^ ] c:\windows\syswow64\MPRMSG.DLL
                         [D^ ] c:\windows\syswow64\SLC.DLL
                         [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\WS2_32.DLL
                    [ ^ ] c:\windows\syswow64\RASAPI32.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\RTUTILS.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [ ^ ] c:\windows\syswow64\RASMAN.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                    [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D^ ] c:\windows\syswow64\SAMCLI.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\SETUPAPI.DLL
                    [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\TAPI32.DLL
                    [D^ ] c:\windows\syswow64\WS2_32.DLL
                    [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                    [D^ ] c:\windows\syswow64\EAPPCFG.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\WKSCLI.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\USERENV.DLL
                    [D  ] c:\windows\syswow64\NDFAPI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [   ] c:\windows\syswow64\WDI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-CORE-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\RPCRT4.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                         [ ^ ] c:\windows\syswow64\SHELL32.DLL
                         [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\PROFAPI.DLL
          [D^ ] c:\windows\syswow64\SECUR32.DLL
               [F^ ] c:\windows\syswow64\SSPICLI.DLL
          [D^ ] c:\windows\syswow64\PROFAPI.DLL
          [D^ ] c:\windows\syswow64\USERENV.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D  ] c:\windows\syswow64\OLEACC.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\VERSION.DLL
          [D^ ] c:\windows\syswow64\MPR.DLL
          [D^ ] c:\windows\syswow64\DSROLE.DLL
          [D^ ] c:\windows\syswow64\NETUTILS.DLL
          [D^ ] c:\windows\syswow64\SAMCLI.DLL
          [D  ] c:\windows\syswow64\SRVCLI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\WKSCLI.DLL
               [*^ ] c:\windows\syswow64\CSCAPI.DLL
          [D^ ] c:\windows\syswow64\WKSCLI.DLL
          [D  ] c:\windows\syswow64\DAVHLPR.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
          [D  ] c:\windows\syswow64\CSCAPI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
          [D  ] c:\windows\syswow64\SLC.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D  ] c:\windows\syswow64\SPPC.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D  ] c:\windows\syswow64\UXTHEME.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\DWMAPI.DLL
               [D^ ] c:\windows\syswow64\WINDOWSCODECS.DLL
               [D^ ] c:\windows\syswow64\WINSTA.DLL
               [D^ ] c:\windows\syswow64\CRYPTSP.DLL
               [*^ ] c:\windows\syswow64\USER32.DLL
          [D  ] c:\windows\syswow64\NTSHRUI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\PROPSYS.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\LOGONCLI.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
               [D^ ] c:\windows\syswow64\SAMCLI.DLL
               [D^ ] c:\windows\syswow64\SRVCLI.DLL
               [D^ ] c:\windows\syswow64\USERENV.DLL
               [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
               [D^ ] c:\windows\syswow64\NTDSAPI.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
               [D^ ] c:\windows\syswow64\SLC.DLL
               [D^ ] c:\windows\syswow64\UXTHEME.DLL
               [D^ ] c:\windows\syswow64\WINSPOOL.DRV
               [D^ ] c:\windows\syswow64\POWRPROF.DLL
               [*^ ] c:\windows\syswow64\SRVCLI.DLL
               [*^ ] c:\windows\syswow64\SLC.DLL
               [*^ ] c:\windows\syswow64\ADVAPI32.DLL
               [*^ ] c:\windows\syswow64\OLE32.DLL
               [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
               [*^ ] c:\windows\syswow64\NETUTILS.DLL
          [D  ] c:\windows\syswow64\EFSUTIL.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\CRYPTSP.DLL
               [D^ ] c:\windows\syswow64\DSROLE.DLL
               [D^ ] c:\windows\syswow64\NTDSAPI.DLL
               [D^ ] c:\windows\syswow64\WINSCARD.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\NCRYPT.DLL
          [D^ ] c:\windows\syswow64\POWRPROF.DLL
          [D  ] c:\windows\syswow64\SHDOCVW.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\WININET.DLL
               [D^ ] c:\windows\syswow64\PROPSYS.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\CRYPTUI.DLL
               [D^ ] c:\windows\syswow64\URLMON.DLL
               [FE ] c:\windows\syswow64\IEFRAME.DLL
                    [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [   ] c:\windows\syswow64\PSAPI.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\OLE32.DLL
                    [ ^ ] c:\windows\syswow64\OLEACC.DLL
                    [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [ ^ ] c:\windows\syswow64\SHELL32.DLL
                    [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\MSIMG32.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\CRYPTUI.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\WINMM.DLL
                    [D^ ] c:\windows\syswow64\MPR.DLL
                    [D  ] c:\windows\syswow64\OCCACHE.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                         [ ^ ] c:\windows\syswow64\SHELL32.DLL
                         [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\VERSION.DLL
                         [D^ ] c:\windows\syswow64\URLMON.DLL
                         [D  ] c:\windows\syswow64\IEADVPACK.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\VERSION.DLL
                              [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
                              [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [D^ ] c:\windows\syswow64\URLMON.DLL
                    [D  ] c:\windows\syswow64\MLANG.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\WINTRUST.DLL
                    [D^ ] c:\windows\syswow64\IMM32.DLL
                    [D  ] c:\windows\syswow64\MSI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [*^ ] c:\windows\syswow64\KERNEL32.DLL
                    [D^ ] c:\windows\syswow64\WININET.DLL
                    [D  ] c:\windows\syswow64\MSHTML.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\PSAPI.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [ ^ ] c:\windows\syswow64\URLMON.DLL
                         [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\VERSION.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\SECUR32.DLL
                              [F^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
                         [D^ ] c:\windows\syswow64\IEFRAME.DLL
                         [D^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                         [D^ ] c:\windows\syswow64\COMDLG32.DLL
                         [D  ] c:\windows\syswow64\HLINK.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\SHELL32.DLL
                         [D^ ] c:\windows\syswow64\IMGUTIL.DLL
                         [D^ ] c:\windows\syswow64\MPR.DLL
                         [D  ] c:\windows\syswow64\MSLS31.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [D^ ] c:\windows\syswow64\MSRATING.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D^ ] c:\windows\syswow64\UXTHEME.DLL
                         [D^ ] c:\windows\syswow64\USP10.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\PROPSYS.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\WINDOWSCODECS.DLL
                         [D^ ] c:\windows\syswow64\XMLLITE.DLL
                         [D^ ] c:\windows\syswow64\WS2_32.DLL
                         [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                         [D  ] c:\windows\syswow64\D2D1.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\DXGI.DLL
                         [D^ ] c:\windows\syswow64\DWMAPI.DLL
                         [D  ] c:\windows\syswow64\DWRITE.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [D  ] c:\windows\syswow64\D3D10_1.DLL
                              [   ] c:\windows\syswow64\D3D10_1CORE.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\DXGI.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\USER32.DLL
                                   [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [ ^ ] c:\windows\syswow64\PSAPI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\DXGI.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [D  ] c:\windows\syswow64\PRNTVPT.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\VERSION.DLL
                              [ ^ ] c:\windows\syswow64\WINSPOOL.DRV
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [D^ ] c:\windows\syswow64\WINSPOOL.DRV
                         [D^ ] c:\windows\syswow64\DNSAPI.DLL
                         [D  ] c:\windows\syswow64\WLANAPI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                              [   ] c:\windows\syswow64\WLANUTIL.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D  ] c:\windows\syswow64\ONEX.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                                   [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                                   [   ] c:\windows\syswow64\EAPPPRXY.DLL
                                        [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                        [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                        [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                             [F^ ] c:\windows\syswow64\NTDLL.DLL
                                        [D^ ] c:\windows\syswow64\OLE32.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                                   [D^ ] c:\windows\syswow64\WTSAPI32.DLL
                                   [D^ ] c:\windows\syswow64\EAPPCFG.DLL
                                   [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                                   [D^ ] c:\windows\syswow64\OLE32.DLL
                                   [D^ ] c:\windows\syswow64\CRYPT32.DLL
                              [D^ ] c:\windows\syswow64\BCRYPT.DLL
                              [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [D^ ] c:\windows\syswow64\EAPPCFG.DLL
                              [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\WINMM.DLL
                         [D  ] c:\windows\syswow64\D3D9.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\VERSION.DLL
                              [   ] c:\windows\syswow64\D3D8THK.DLL
                                   [ ^ ] c:\windows\syswow64\GDI32.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\DWMAPI.DLL
                         [D  ] c:\windows\syswow64\MFPLAT.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\WS2_32.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                              [ ^ ] c:\windows\syswow64\AVRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [D^ ] c:\windows\syswow64\BCRYPT.DLL
                         [D  ] c:\windows\syswow64\MFREADWRITE.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [ ^ ] c:\windows\syswow64\MFPLAT.DLL
                              [D  ] c:\windows\syswow64\EVR.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\GDI32.DLL
                                   [ ^ ] c:\windows\syswow64\USER32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\OLE32.DLL
                                   [ ^ ] c:\windows\syswow64\WINMM.DLL
                                   [ ^ ] c:\windows\syswow64\MFPLAT.DLL
                                   [ ^ ] c:\windows\syswow64\POWRPROF.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [D^ ] c:\windows\syswow64\MF.DLL
                              [D^ ] c:\windows\syswow64\PROPSYS.DLL
                         [D  ] c:\windows\syswow64\MF.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\ATL.DLL
                              [ ^ ] c:\windows\syswow64\MFPLAT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\VERSION.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                              [   ] c:\windows\syswow64\KSUSER.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\AVRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [D  ] c:\windows\syswow64\WMDRMSDK.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\MFPLAT.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\OLE32.DLL
                                   [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                                   [ ^ ] c:\windows\syswow64\USER32.DLL
                                   [ ^ ] c:\windows\syswow64\WS2_32.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [D^ ] c:\windows\syswow64\SHELL32.DLL
                                   [D^ ] c:\windows\syswow64\WINHTTP.DLL
                              [D^ ] c:\windows\syswow64\SLC.DLL
                              [D^ ] c:\windows\syswow64\WTSAPI32.DLL
                              [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\EVR.DLL
                              [D^ ] c:\windows\syswow64\SHELL32.DLL
                              [D^ ] c:\windows\syswow64\WININET.DLL
                              [D^ ] c:\windows\syswow64\WINMM.DLL
                              [D^ ] c:\windows\syswow64\WINHTTP.DLL
                              [D^ ] c:\windows\syswow64\URLMON.DLL
                              [D  ] c:\windows\syswow64\MSACM32.DLL
                                   [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                                   [ ^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                        [F^ ] c:\windows\syswow64\NTDLL.DLL
                                   [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [ ^ ] c:\windows\syswow64\USER32.DLL
                                   [ ^ ] c:\windows\syswow64\GDI32.DLL
                                   [ ^ ] c:\windows\syswow64\WINMM.DLL
                              [D^ ] c:\windows\syswow64\CRYPT32.DLL
                              [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                              [D^ ] c:\windows\syswow64\PROPSYS.DLL
                              [D^ ] c:\windows\syswow64\SETUPAPI.DLL
                         [D  ] c:\windows\syswow64\AVRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D  ] c:\windows\syswow64\INETCOMM.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [   ] c:\windows\syswow64\MSOERT2.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\OLE32.DLL
                              [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [D^ ] c:\windows\syswow64\CRYPT32.DLL
                              [D^ ] c:\windows\syswow64\RASAPI32.DLL
                              [D^ ] c:\windows\syswow64\SHELL32.DLL
                              [D^ ] c:\windows\syswow64\VERSION.DLL
                              [D^ ] c:\windows\syswow64\WININET.DLL
                              [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\MLANG.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\OLEACC.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\MLANG.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\MSIMG32.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\PROPSYS.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D^ ] c:\windows\syswow64\URLMON.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\WS2_32.DLL
                         [D^ ] c:\windows\syswow64\WINTRUST.DLL
                    [D  ] c:\windows\syswow64\MSRATING.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\WS2_32.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\SHELL32.DLL
                         [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\URLMON.DLL
                         [D^ ] c:\windows\syswow64\GDI32.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\UXTHEME.DLL
                    [D  ] c:\windows\syswow64\IEUI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\MSIMG32.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
                    [D  ] c:\windows\syswow64\MSFEEDS.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\URLMON.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\IEFRAME.DLL
                         [D^ ] c:\windows\syswow64\PROPSYS.DLL
                    [D^ ] c:\windows\syswow64\RASAPI32.DLL
                    [D^ ] c:\windows\syswow64\USP10.DLL
                    [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
                    [D^ ] c:\windows\syswow64\WS2_32.DLL
                    [D^ ] c:\windows\syswow64\CREDUI.DLL
                    [D? ] IESHIMS.DLL
                    [D  ] c:\windows\syswow64\WER.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D  ] c:\windows\syswow64\DBGHELP.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\WINHTTP.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D  ] c:\windows\syswow64\SENSAPI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\RPCRT4.DLL
                              [D^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\syswow64\USERENV.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [D^ ] c:\windows\syswow64\WTSAPI32.DLL
                         [D  ] c:\windows\syswow64\WERUI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                              [ ^ ] c:\windows\syswow64\WER.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [D^ ] c:\windows\syswow64\SHELL32.DLL
                              [D^ ] c:\windows\syswow64\OLE32.DLL
                              [D^ ] c:\windows\syswow64\DUI70.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\VERSION.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                    [D^ ] c:\windows\syswow64\PROPSYS.DLL
                    [D^ ] c:\windows\syswow64\DWMAPI.DLL
                    [D  ] c:\windows\syswow64\DXGI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\VERSION.DLL
                         [ ^ ] c:\windows\syswow64\DWMAPI.DLL
                    [D  ] c:\windows\syswow64\IMGUTIL.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [ ^ ] c:\windows\syswow64\IERTUTIL.DLL
          [D  ] c:\windows\syswow64\EFSADU.DLL
               [   ] c:\windows\syswow64\MFC42U.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\OLE32.DLL
                    [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [   ] c:\windows\syswow64\ODBC32.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [D^ ] c:\windows\syswow64\BCRYPT.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                         [D^ ] c:\windows\syswow64\COMDLG32.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D  ] c:\windows\syswow64\OLEDLG.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\GDI32.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\COMDLG32.DLL
                    [D^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
                    [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\WININET.DLL
                    [D^ ] c:\windows\syswow64\WS2_32.DLL
                    [D^ ] c:\windows\syswow64\URLMON.DLL
                    [D^ ] c:\windows\syswow64\WINSPOOL.DRV
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\CREDUI.DLL
               [ ^ ] c:\windows\syswow64\CRYPTUI.DLL
               [ ^ ] c:\windows\syswow64\CRYPT32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\USERENV.DLL
               [ ^ ] c:\windows\syswow64\WLDAP32.DLL
               [   ] c:\windows\syswow64\NETAPI32.DLL
                    [ ^ ] c:\windows\syswow64\NETUTILS.DLL
                    [ ^ ] c:\windows\syswow64\SRVCLI.DLL
                    [ ^ ] c:\windows\syswow64\WKSCLI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [D^ ] c:\windows\syswow64\SSPICLI.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\LOGONCLI.DLL
                    [F^ ] c:\windows\syswow64\DSROLE.DLL
                    [F^ ] c:\windows\syswow64\NETUTILS.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\EFSUTIL.DLL
          [D  ] c:\windows\syswow64\LINKINFO.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
               [D^ ] c:\windows\syswow64\SHLWAPI.DLL
               [D^ ] c:\windows\syswow64\NTSHRUI.DLL
               [D^ ] c:\windows\syswow64\MPR.DLL
          [D  ] c:\windows\syswow64\DUSER.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\UXTHEME.DLL
               [D^ ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
          [D  ] c:\windows\syswow64\DUI70.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\UXTHEME.DLL
               [D^ ] c:\windows\syswow64\DWMAPI.DLL
               [D^ ] c:\windows\syswow64\DUSER.DLL
               [D^ ] c:\windows\syswow64\OLEACC.DLL
               [D^ ] c:\windows\syswow64\WINDOWSCODECS.DLL
          [D  ] c:\windows\syswow64\SETUPAPI.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\CFGMGR32.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [   ] c:\windows\syswow64\DEVOBJ.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\CFGMGR32.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\DEVRTL.DLL
               [D  ] c:\windows\syswow64\DEVRTL.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [D  ] c:\windows\syswow64\DRVSTORE.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\USER32.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\CABINET.DLL
                    [D^ ] c:\windows\syswow64\SCECLI.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [D  ] c:\windows\syswow64\CABINET.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\MPR.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D  ] c:\windows\syswow64\SCECLI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                    [D^ ] c:\windows\syswow64\SETUPAPI.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D^ ] c:\windows\syswow64\SAMCLI.DLL
                    [D^ ] c:\windows\syswow64\USERENV.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D  ] c:\windows\syswow64\AUTHZ.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\SAMLIB.DLL
                         [D^ ] c:\windows\syswow64\WLDAP32.DLL
                         [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                         [D^ ] c:\windows\syswow64\DSROLE.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\SHELL32.DLL
               [D^ ] c:\windows\syswow64\SHLWAPI.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D  ] c:\windows\syswow64\WINSPOOL.DRV
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D  ] c:\windows\syswow64\ACTIVEDS.DLL
                         [   ] c:\windows\syswow64\ADSLDPC.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\WLDAP32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [D^ ] c:\windows\syswow64\WKSCLI.DLL
                              [D^ ] c:\windows\syswow64\NETUTILS.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D^ ] c:\windows\syswow64\CREDUI.DLL
                              [D^ ] c:\windows\syswow64\WS2_32.DLL
                              [D^ ] c:\windows\syswow64\USERENV.DLL
                              [D^ ] c:\windows\syswow64\CRYPT32.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [   ] c:\windows\syswow64\ATL.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\GDI32.DLL
                              [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [D^ ] c:\windows\syswow64\OLE32.DLL
                              [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\SRVCLI.DLL
                         [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                    [D^ ] c:\windows\syswow64\DNSAPI.DLL
               [D^ ] c:\windows\syswow64\WINTRUST.DLL
               [D^ ] c:\windows\syswow64\USERENV.DLL
               [D^ ] c:\windows\syswow64\APPHELP.DLL
               [D  ] c:\windows\syswow64\SPINF.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [D  ] c:\windows\syswow64\SPFILEQ.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [D^ ] c:\windows\syswow64\CABINET.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\SCECLI.DLL
               [F^ ] c:\windows\syswow64\CFGMGR32.DLL
               [*^ ] c:\windows\syswow64\KERNEL32.DLL
               [*^ ] c:\windows\syswow64\DEVRTL.DLL
          [D  ] c:\windows\syswow64\APPHELP.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [*  ] c:\windows\system32\TWEXT.DLL
               [*  ] c:\windows\system32\SHDOCVW.DLL
               [*^ ] c:\progra~2\micros~1\office14\GROOVEEX.DLL
                    [*^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [*^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [*E ] c:\intel\PROCMON.EXE
                    [*  ] c:\progra~2\common~1\micros~1\office14\cultures\OFFICE.ODF
               [*  ] c:\windows\system32\NTSHRUI.DLL
               [*  ] c:\windows\system32\SYNCUI.DLL
               [*  ] c:\windows\system32\ACPPAGE.DLL
               [*  ] c:\windows\system32\EHSTORSHELL.DLL
          [D  ] c:\windows\syswow64\ADVPACK.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\VERSION.DLL
               [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
          [D^ ] c:\windows\syswow64\WINBRAND.DLL
          [D  ] c:\windows\syswow64\PROPSYS.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\XMLLITE.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [*^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [*^ ] c:\windows\syswow64\PROPSYS.DLL
          [D  ] c:\windows\syswow64\WINDOWSCODECS.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D  ] c:\windows\syswow64\CREDUI.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\CRYPTSP.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [D^ ] c:\windows\syswow64\SHELL32.DLL
               [D^ ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\GDI32.DLL
               [D^ ] c:\windows\syswow64\NETUTILS.DLL
               [D^ ] c:\windows\syswow64\SAMCLI.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D  ] c:\windows\syswow64\CRYPTUI.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\CRYPT32.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\SSPICLI.DLL
                    [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                    [D^ ] c:\windows\syswow64\WINTRUST.DLL
                    [D^ ] c:\windows\syswow64\OLE32.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\RPCRT4.DLL
                    [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D  ] c:\windows\syswow64\MSSIGN32.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [ ^ ] c:\windows\syswow64\OLE32.DLL
                         [ ^ ] c:\windows\syswow64\CRYPT32.DLL
                         [ ^ ] c:\windows\syswow64\WININET.DLL
                         [ ^ ] c:\windows\syswow64\NCRYPT.DLL
                    [D  ] c:\windows\syswow64\CERTCLI.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\ATL.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [ ^ ] c:\windows\syswow64\CRYPT32.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                         [ ^ ] c:\windows\syswow64\WLDAP32.DLL
                         [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL
                         [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\NCRYPT.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                         [D  ] c:\windows\syswow64\WEBSERVICES.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                              [D^ ] c:\windows\syswow64\RPCRT4.DLL
                              [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\AUTHZ.DLL
                    [D  ] c:\windows\syswow64\CERTENROLL.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\CERTCLI.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\CRYPT32.DLL
                         [ ^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                         [D^ ] c:\windows\syswow64\NCRYPT.DLL
                              [F^ ] c:\windows\syswow64\BCRYPT.DLL
                         [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                         [D^ ] c:\windows\syswow64\RPCRT4.DLL
                         [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                         [D^ ] c:\windows\syswow64\SSPICLI.DLL
                         [D  ] c:\windows\syswow64\VAULTCLI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                                   [F^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\USER32.DLL
                         [D^ ] c:\windows\syswow64\WEBSERVICES.DLL
                         [D^ ] c:\windows\syswow64\WINSCARD.DLL
                         [D^ ] c:\windows\syswow64\WLDAP32.DLL
                         [D^ ] c:\windows\syswow64\OLE32.DLL
                         [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                         [D^ ] c:\windows\syswow64\WININET.DLL
                         [D^ ] c:\windows\syswow64\DSROLE.DLL
                         [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                         [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D^ ] c:\windows\syswow64\CREDUI.DLL
                         [D^ ] c:\windows\syswow64\CRYPTUI.DLL
                         [D^ ] c:\windows\syswow64\SHELL32.DLL
                    [D^ ] c:\windows\syswow64\WININET.DLL
                    [D^ ] c:\windows\syswow64\WLDAP32.DLL
                    [D^ ] c:\windows\syswow64\VERSION.DLL
                    [D^ ] c:\windows\syswow64\NCRYPT.DLL
                    [D^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [D^ ] c:\windows\syswow64\CREDUI.DLL
               [D  ] c:\windows\syswow64\WINSCARD.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\RPCRT4.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL
                    [D^ ] c:\windows\syswow64\USER32.DLL
                    [D  ] c:\windows\syswow64\WTSAPI32.DLL
                         [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                         [ ^ ] c:\windows\syswow64\NTDLL.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                         [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [D  ] c:\windows\syswow64\REGAPI.DLL
                              [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                              [ ^ ] c:\windows\syswow64\NTDLL.DLL
                              [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                              [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                              [D^ ] c:\windows\syswow64\CRYPT32.DLL
                              [D^ ] c:\windows\syswow64\NCRYPT.DLL
                              [D^ ] c:\windows\syswow64\SAMLIB.DLL
                              [D^ ] c:\windows\syswow64\NETUTILS.DLL
                              [D^ ] c:\windows\syswow64\WINSTA.DLL
                              [D^ ] c:\windows\syswow64\CRYPTSP.DLL
                         [D^ ] c:\windows\syswow64\WINSTA.DLL
                         [D^ ] c:\windows\syswow64\BROWCLI.DLL
                         [D^ ] c:\windows\syswow64\NETUTILS.DLL
                         [D^ ] c:\windows\syswow64\SAMCLI.DLL
                         [D^ ] c:\windows\syswow64\USER32.DLL
                    [D^ ] c:\windows\syswow64\WINSTA.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\DNSAPI.DLL
               [D^ ] c:\windows\syswow64\NCRYPT.DLL
               [D^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
          [D^ ] c:\windows\syswow64\WS2_32.DLL
          [D^ ] c:\windows\syswow64\RPCRT4.DLL
          [D  ] c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
          [D  ] c:\windows\syswow64\IMM32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\MSCTF.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\IMM32.DLL
                    [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
          [D  ] c:\windows\syswow64\XMLLITE.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
          [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
          [*^ ] c:\windows\syswow64\SFC.DLL
     [   ] c:\windows\syswow64\OLE32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FIBERS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-UTIL-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\RPCRT4.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-CORE-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\CRYPTSP.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\SHELL32.DLL
          [D  ] c:\windows\syswow64\MPR.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\USER32.DLL
               [D^ ] c:\windows\syswow64\CREDUI.DLL
               [D  ] c:\windows\syswow64\NETPLWIZ.DLL
                    [ ^ ] c:\windows\syswow64\MSVCRT.DLL
                    [ ^ ] c:\windows\syswow64\NTDLL.DLL
                    [ ^ ] c:\windows\syswow64\USER32.DLL
                    [ ^ ] c:\windows\syswow64\GDI32.DLL
                    [ ^ ] c:\windows\syswow64\SHELL32.DLL
                    [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
                    [ ^ ] c:\windows\syswow64\OLE32.DLL
                    [ ^ ] c:\windows\syswow64\MPR.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [D^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [D^ ] c:\windows\syswow64\DSROLE.DLL
                    [D^ ] c:\windows\syswow64\LOGONCLI.DLL
                    [D^ ] c:\windows\syswow64\NETUTILS.DLL
                    [D^ ] c:\windows\syswow64\SAMCLI.DLL
                    [D^ ] c:\windows\syswow64\WKSCLI.DLL
                    [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
                    [D^ ] c:\windows\syswow64\OLEAUT32.DLL
                    [D^ ] c:\windows\syswow64\NTDSAPI.DLL
                    [D^ ] c:\windows\syswow64\RASDLG.DLL
                    [D^ ] c:\windows\syswow64\RASAPI32.DLL
                    [D^ ] c:\windows\syswow64\SECUR32.DLL
                    [D^ ] c:\windows\syswow64\CRYPT32.DLL
                    [D^ ] c:\windows\syswow64\CREDUI.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\CRYPT32.DLL
          [D  ] c:\windows\syswow64\MSILTCFG.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\VERSION.DLL
          [D  ] c:\windows\syswow64\CLBCATQ.DLL
               [ ^ ] c:\windows\syswow64\MSVCRT.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\IMAGEHLP.DLL
     [   ] c:\windows\syswow64\OLEAUT32.DLL
          [ ^ ] c:\windows\syswow64\OLE32.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\RPCRT4.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [   ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
          [D^ ] c:\windows\syswow64\MPR.DLL
          [D^ ] c:\windows\syswow64\URLMON.DLL
          [D^ ] c:\windows\syswow64\SHELL32.DLL
          [D^ ] c:\windows\syswow64\PROPSYS.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\APPHELP.DLL
          [D^ ] c:\windows\syswow64\CRYPT32.DLL
          [D^ ] c:\windows\syswow64\WINTRUST.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\MSILTCFG.DLL
          [D^ ] c:\windows\syswow64\SETUPAPI.DLL
          [D^ ] c:\windows\syswow64\USERENV.DLL
          [D^ ] c:\windows\syswow64\VERSION.DLL
          [D^ ] c:\windows\syswow64\SLC.DLL
          [D^ ] c:\windows\syswow64\WKSCLI.DLL
          [D^ ] c:\windows\syswow64\NETUTILS.DLL
          [*^ ] c:\windows\syswow64\SHELL32.DLL
          [*^ ] c:\windows\syswow64\OLE32.DLL
          [*^ ] c:\windows\syswow64\ADVAPI32.DLL
          [*^ ] c:\windows\syswow64\PROPSYS.DLL
          [*^ ] c:\windows\syswow64\OLEAUT32.DLL
          [*^ ] c:\windows\syswow64\EHSTORSHELL.DLL
          [*  ] c:\progra~2\micros~1\office14\GROOVEEX.DLL
               [ ^ ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.DLL
               [ ^ ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCP90.DLL
               [ ^ ] c:\windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\GDI32.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\OLE32.DLL
               [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
               [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\UXTHEME.DLL
               [ ^ ] c:\windows\syswow64\RPCRT4.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D^ ] c:\windows\syswow64\SECUR32.DLL
                    [F^ ] c:\windows\syswow64\SSPICLI.DLL
               [D^ ] c:\windows\syswow64\BCRYPT.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\MSIMG32.DLL
               [D^ ] c:\windows\syswow64\PROPSYS.DLL
               [D^ ] c:\windows\syswow64\URLMON.DLL
               [D^ ] c:\windows\syswow64\WININET.DLL
               [D^ ] c:\windows\syswow64\WS2_32.DLL
               [D? ] CSI.DLL
               [*^ ] c:\windows\syswow64\KERNEL32.DLL
               [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
               [*  ] c:\progra~2\micros~1\office14\1049\GROOVEINTLRESOURCE.DLL
          [*^ ] c:\windows\syswow64\NTSHRUI.DLL
     [*E ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
          [F^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
     [*^ ] c:\windows\syswow64\UXTHEME.DLL
     [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
     [*^ ] c:\windows\syswow64\NTDLL.DLL
     [*^ ] c:\windows\syswow64\MSCOREE.DLL
[*  ] c:\windows\syswow64\SECHOST.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\RPCRT4.DLL
     [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
[*? ] <empty string>
[*  ] c:\windows\syswow64\TWEXT.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\PROPSYS.DLL
     [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
     [D^ ] c:\windows\syswow64\OLE32.DLL
     [D^ ] c:\windows\syswow64\OLEAUT32.DLL
     [D^ ] c:\windows\syswow64\OLEACC.DLL
     [D^ ] c:\windows\syswow64\ACTIVEDS.DLL
     [D^ ] c:\windows\syswow64\NTSHRUI.DLL
     [D^ ] c:\windows\syswow64\MPR.DLL
     [D^ ] c:\windows\syswow64\DSROLE.DLL
     [D^ ] c:\windows\syswow64\DFSCLI.DLL
     [D^ ] c:\windows\syswow64\LOGONCLI.DLL
     [D^ ] c:\windows\syswow64\NETUTILS.DLL
     [D^ ] c:\windows\syswow64\WKSCLI.DLL
     [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
     [*^ ] c:\windows\syswow64\OLE32.DLL
[*  ] c:\windows\syswow64\RSAENH.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [D^ ] c:\windows\syswow64\CRYPTBASE.DLL
     [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [D^ ] c:\windows\syswow64\RPCRT4.DLL
     [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
     [D^ ] c:\windows\syswow64\USERENV.DLL
     [D^ ] c:\windows\syswow64\CRYPT32.DLL
     [D^ ] c:\windows\syswow64\SHELL32.DLL
     [*^ ] c:\windows\syswow64\ADVAPI32.DLL
     [*^ ] c:\windows\syswow64\CRYPTBASE.DLL
[*  ] c:\windows\syswow64\RPCRTREMOTE.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\KERNELBASE.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
     [ ^ ] c:\windows\syswow64\RPCRT4.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
     [D^ ] c:\windows\syswow64\CRYPTSP.DLL
     [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [D^ ] c:\windows\syswow64\CRYPT32.DLL
     [D  ] c:\windows\syswow64\FWPUCLNT.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\RPCRT4.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\AUTHZ.DLL
          [D  ] c:\windows\syswow64\KTMW32.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\DNSAPI.DLL
          [D^ ] c:\windows\syswow64\WS2_32.DLL
     [D^ ] c:\windows\syswow64\AUTHZ.DLL
     [D  ] c:\windows\syswow64\FIREWALLAPI.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\RPCRT4.DLL
          [ ^ ] c:\windows\syswow64\VERSION.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\USER32.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\SHLWAPI.DLL
          [D^ ] c:\windows\syswow64\WS2_32.DLL
          [D^ ] c:\windows\syswow64\IPHLPAPI.DLL
          [D^ ] c:\windows\syswow64\CRYPT32.DLL
     [D  ] c:\windows\syswow64\RPCHTTP.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
          [D^ ] c:\windows\syswow64\RPCRT4.DLL
          [D^ ] c:\windows\syswow64\WS2_32.DLL
          [D^ ] c:\windows\syswow64\WINHTTP.DLL
[*  ] c:\windows\syswow64\shellext\HASHCHECK.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\GDI32.DLL
     [ ^ ] c:\windows\syswow64\COMDLG32.DLL
     [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\OLE32.DLL
     [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
     [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
     [ ^ ] c:\windows\syswow64\UXTHEME.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
[*  ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [*^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
[*  ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCP90.DLL
     [ ^ ] c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
[*  ] c:\windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [D^ ] c:\windows\syswow64\GDI32.DLL
     [D^ ] c:\windows\syswow64\OLE32.DLL
     [D^ ] c:\windows\syswow64\OLEAUT32.DLL
     [D^ ] c:\windows\syswow64\USER32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [*^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
[*  ] c:\program files\winrar\RAREXT32.DLL
     [   ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16661_none_ebfb56996c72aefc\COMCTL32.DLL
          [ ^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
          [ ^ ] c:\windows\syswow64\GDI32.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\GDI32.DLL
     [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\OLE32.DLL
     [*^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [*  ] c:\program files\winrar\RARLNG.DLL
     [*E6] c:\program files\winrar\formats\TAR.FMT
          [ E ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
     [*E6] c:\program files\winrar\formats\GZ.FMT
          [ E ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
     [*E6] c:\program files\winrar\formats\ARJ.FMT
          [ E ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
     [*^ ] c:\windows\syswow64\UXTHEME.DLL
     [*^ ] c:\windows\syswow64\SHELL32.DLL
[*  ] c:\program files (x86)\wincdemu\x86\WINCDEMUCONTEXTMENU.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\GDI32.DLL
     [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\OLE32.DLL
     [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
     [ ^ ] c:\windows\syswow64\RPCRT4.DLL
     [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
     [*^ ] c:\windows\syswow64\KERNEL32.DLL
[*  ] c:\windows\syswow64\MSCOREE.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [D^ ] c:\windows\syswow64\USER32.DLL
     [D^ ] c:\windows\syswow64\OLEAUT32.DLL
     [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [D^ ] c:\windows\syswow64\SHLWAPI.DLL
     [D^ ] c:\windows\syswow64\URLMON.DLL
     [D^ ] c:\windows\syswow64\VERSION.DLL
     [*^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [*^ ] c:\windows\syswow64\ADVAPI32.DLL
     [*E ] c:\windows\microsoft.net\framework\v4.0.30319\MSCOREEI.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\USER32.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\SHLWAPI.DLL
          [D^ ] c:\windows\syswow64\URLMON.DLL
          [D^ ] c:\windows\syswow64\VERSION.DLL
          [*E ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
               [F^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
          [*E ] c:\windows\syswow64\ADVAPI32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [*^ ] c:\windows\syswow64\MSCOREE.DLL
          [*  ] c:\windows\syswow64\SXS.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\ADVAPI32.DLL
               [D^ ] c:\windows\syswow64\RPCRT4.DLL
          [*^ ] c:\windows\syswow64\VERSION.DLL
          [*  ] c:\windows\microsoft.net\framework\v4.0.30319\CLR.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [   ] c:\windows\syswow64\MSVCR120_CLR0400.DLL
                    [ ^ ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [*E ] c:\windows\syswow64\KERNEL32.DLL
                         [F^ ] c:\windows\syswow64\NTDLL.DLL
                         [F^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\USER32.DLL
               [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
               [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
               [D^ ] c:\windows\syswow64\MSCOREE.DLL
               [DE ] c:\windows\syswow64\OLE32.DLL
               [D^ ] c:\windows\syswow64\OLEAUT32.DLL
               [D^ ] c:\windows\syswow64\WINTRUST.DLL
               [D^ ] c:\windows\syswow64\CRYPT32.DLL
               [D^ ] c:\windows\syswow64\URLMON.DLL
               [D^ ] c:\windows\syswow64\BCRYPT.DLL
               [D? ] API-MS-WIN-CORE-WINRT-STRING-L1-1-0.DLL
               [D? ] API-MS-WIN-CORE-WINRT-L1-1-0.DLL
               [D? ] API-MS-WIN-CORE-WINRT-ROPARAMETERIZEDIID-L1-1-0.DLL
               [D? ] API-MS-WIN-RO-TYPERESOLUTION-L1-1-0.DLL
               [D^ ] c:\windows\syswow64\CABINET.DLL
               [D^ ] c:\windows\syswow64\WININET.DLL
               [D^ ] c:\windows\syswow64\MPR.DLL
               [D^ ] c:\windows\syswow64\VERSION.DLL
               [D^ ] c:\windows\syswow64\WTSAPI32.DLL
               [D^ ] c:\windows\syswow64\RSTRTMGR.DLL
               [D^ ] c:\windows\syswow64\MSI.DLL
               [*E ] c:\windows\syswow64\ADVAPI32.DLL
               [*? ] API-MS-WIN-CORE-QUIRKS-L1-1-0.DLL
               [*? ] c:\windows\microsoft.net\framework\v4.0.30319\MSCOREE.DLL
               [*^ ] c:\windows\syswow64\MSCOREE.DLL
               [*^ ] c:\windows\syswow64\KERNEL32.DLL
                    [F^ ] c:\windows\syswow64\NTDLL.DLL
                    [F^ ] c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL
               [*? ] c:\windows\system32\COMBASE.DLL
               [*E ] c:\windows\syswow64\KERNELBASE.DLL
               [*^ ] c:\windows\syswow64\NTDLL.DLL
               [*  ] c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\affcb83bba04f782c2586a1788330891\MSCORLIB.NI.DLL
               [*? ] c:\windows\microsoft.net\framework\v4.0.30319\OLE32.DLL
               [*^ ] c:\windows\syswow64\OLE32.DLL
               [*^ ] c:\windows\syswow64\SXS.DLL
               [*? ] c:\windows\microsoft.net\framework\v4.0.30319\ru-ru\MSCORRC.DLL
               [*  ] c:\windows\microsoft.net\framework\v4.0.30319\ru\MSCORRC.DLL
          [*^ ] c:\windows\syswow64\SHLWAPI.DLL
[*  ] c:\windows\syswow64\SYNCUI.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\GDI32.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
     [   ] c:\windows\syswow64\SYNCENG.DLL
          [ ^ ] c:\windows\syswow64\MSVCRT.DLL
          [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
          [ ^ ] c:\windows\syswow64\USER32.DLL
          [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
          [ ^ ] c:\windows\syswow64\SHELL32.DLL
               [FE ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
          [ ^ ] c:\windows\syswow64\LINKINFO.DLL
          [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [F^ ] c:\windows\syswow64\NTDLL.DLL
          [D^ ] c:\windows\syswow64\OLE32.DLL
          [D^ ] c:\windows\syswow64\OLEAUT32.DLL
          [D^ ] c:\windows\syswow64\PROPSYS.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [D^ ] c:\windows\syswow64\ADVAPI32.DLL
     [D^ ] c:\windows\syswow64\OLE32.DLL
     [D^ ] c:\windows\syswow64\OLEAUT32.DLL
     [D^ ] c:\windows\syswow64\PROPSYS.DLL
     [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
[*  ] c:\windows\syswow64\ACPPAGE.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\OLE32.DLL
     [ ^ ] c:\windows\syswow64\RPCRT4.DLL
     [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
     [   ] c:\windows\syswow64\SFC.DLL
          [F  ] c:\windows\syswow64\SFC_OS.DLL
               [ ^ ] c:\windows\syswow64\NTDLL.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL
               [ ^ ] c:\windows\syswow64\KERNEL32.DLL
               [D^ ] c:\windows\syswow64\SETUPAPI.DLL
               [*^ ] c:\windows\syswow64\SETUPAPI.DLL
     [ ^ ] c:\windows\syswow64\MSI.DLL
     [ ^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\VERSION.DLL
     [ ^ ] c:\windows\syswow64\WER.DLL
     [*^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL
[*  ] c:\windows\syswow64\EHSTORSHELL.DLL
     [ ^ ] c:\windows\syswow64\MSVCRT.DLL
     [ ^ ] c:\windows\syswow64\KERNEL32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\USER32.DLL
     [ ^ ] c:\windows\syswow64\OLE32.DLL
     [ ^ ] c:\windows\syswow64\OLEAUT32.DLL
     [ ^ ] c:\windows\syswow64\SETUPAPI.DLL
     [ ^ ] c:\windows\syswow64\ADVAPI32.DLL
          [F^ ] c:\windows\syswow64\NTDLL.DLL
     [ ^ ] c:\windows\syswow64\SHELL32.DLL
     [ ^ ] c:\windows\syswow64\PROPSYS.DLL
     [ ^ ] c:\windows\syswow64\SHLWAPI.DLL
     [ ^ ] c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL

********************************| Module List |*********************************
*                                                                              *
* Legend: D  Delay Load Module   ?  Missing Module           6  64-bit Module  *
*         *  Dynamic Module      !  Invalid Module                             *
*                                E  Import/Export Mismatch or Load Failure     *
*                                                                              *
********************************************************************************

       Module                                                                                                                       File Time Stamp   Link Time Stamp   File Size   Attr.  Link Checksum  Real Checksum  CPU  Subsystem  Symbols     Preferred Base      Actual Base         Virtual Size  Load Order  File Ver            Product Ver       Image Ver    Linker Ver  OS Ver  Subsystem Ver
-----  ---------------------------------------------------------------------------------------------------------------------------  ----------------  ----------------  ----------  -----  -------------  -------------  ---  ---------  ----------  ------------------  ------------------  ------------  ----------  ------------------  ----------------  -----------  ----------  ------  -------------
[D? ]  API-MS-WIN-CORE-WINRT-L1-1-0.DLL                                                                                             Error opening file.      (2).
[D? ]  API-MS-WIN-CORE-WINRT-ROPARAMETERIZEDIID-L1-1-0.DLL                                                                          Error opening file.      (2).
[D? ]  API-MS-WIN-CORE-WINRT-STRING-L1-1-0.DLL                                                                                      Error opening file.      (2).
[D? ]  API-MS-WIN-RO-TYPERESOLUTION-L1-1-0.DLL                                                                                      Error opening file.      (2).
[D? ]  CSI.DLL                                                                                                                      Error opening file.      (2).
[D? ]  GPSVC.DLL                                                                                                                    Error opening file.      (2).
[D? ]  IESHIMS.DLL                                                                                                                  Error opening file.      (2).
[*? ]  <empty string>                                                                                                               Error opening file.       (3).
[*? ]  API-MS-WIN-CORE-QUIRKS-L1-1-0.DLL                                                                                            Error opening file.      (2).
[*? ]  c:\windows\microsoft.net\framework\v4.0.30319\MSCOREE.DLL                                                                    Error opening file.      (2).
[*? ]  c:\windows\microsoft.net\framework\v4.0.30319\OLE32.DLL                                                                      Error opening file.      (2).
[*? ]  c:\windows\microsoft.net\framework\v4.0.30319\ru-ru\MSCORRC.DLL                                                              Error opening file.      (2).
[*? ]  c:\windows\system32\COMBASE.DLL                                                                                              Error opening file.      (2).
[   ]  c:\intel\PROCMON.EXE                                                                                                         07.02.2017  5:13  06.02.2017 23:12   2126496  A      0x00211233     0x00211233     x86  GUI        CV,Unknown  0x--------00400000  0x--------00EC0000  0x0020E000    1           3.32.0.0            3.32.0.0          0.0          12.0        5.1     5.1
[   ]  c:\windows\syswow64\ADVAPI32.DLL                                                                                             14.07.2009  4:14  14.07.2009  4:03     640000  A      0x000A29FF     0x000A29FF     x86  Console    CV          0x--------77C60000  0x--------74FB0000  0x000A0000    16          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\KERNEL32.DLL                                                                                             04.01.2013  7:51  04.01.2013  7:53   1114112  A      0x0011BF91     0x0011BF91     x86  Console    CV          0x--------7DD60000  0x--------76C00000  0x00110000    3           6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\KERNELBASE.DLL                                                                                           04.01.2013  7:51  04.01.2013  7:53     274944  A      0x0004D622     0x0004D622     x86  Console    CV          0x--------7D850000  0x--------76E00000  0x00047000    4           6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\OLE32.DLL                                                                                                29.06.2010  8:02  29.06.2010  7:53   1413632  A      0x00166F16     0x00166F16     x86  Console    CV          0x--------72540000  0x--------75400000  0x0015C000    23          6.1.7600.16624      6.1.7600.16624    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\SHLWAPI.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     350208  A      0x0005A8D4     0x0005A8D4     x86  GUI        CV          0x--------6DE20000  0x--------75640000  0x00057000    19          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*E ]  c:\windows\microsoft.net\framework\v4.0.30319\MSCOREEI.DLL                                                                   02.03.2016 21:10  03.03.2016  5:20     497824  A      0x0007B319     0x0007B319     x86  GUI        CV,Unknown  0x--------10000000  0x--------72790000  0x00079000    63          4.6.1076.0          4.0.30319.0       10.0         12.10       6.0     6.0
[*E ]  c:\windows\syswow64\IEFRAME.DLL                                                                                              27.09.2013 14:24  31.07.2013 13:03   9738752  A      0x00956F56     0x00956F56     x86  GUI        CV          0x--------10000000  Unknown             0x0094D000    Not Loaded  9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.1
[*E6]  c:\program files\winrar\formats\ARJ.FMT                                                                                      22.08.2013 18:01  22.08.2013 16:00      87128  A      0x000158BA     0x000158BA     x64  GUI        CV          0x0000000180000000  Unknown             0x0001E000    Not Loaded  5.0.0.0             5.0.0.0           0.0          9.0         5.2     5.2
[*E6]  c:\program files\winrar\formats\GZ.FMT                                                                                       22.08.2013 18:01  22.08.2013 16:00      89688  A      0x00023A2F     0x00023A2F     x64  GUI        CV          0x0000000180000000  Unknown             0x00028000    Not Loaded  5.0.0.0             5.0.0.0           0.0          9.0         5.2     5.2
[*E6]  c:\program files\winrar\formats\TAR.FMT                                                                                      22.08.2013 18:01  22.08.2013 16:00      75352  A      0x0001440D     0x0001440D     x64  GUI        CV          0x0000000180000000  Unknown             0x0001A000    Not Loaded  5.0.0.0             5.0.0.0           0.0          9.0         5.2     5.2
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL                                                                       04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x0000F010     0x0000F010     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-DATETIME-L1-1-0.DLL                                                                      04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x000103E3     0x000103E3     x86  Console    CV          0x--------12000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-DEBUG-L1-1-0.DLL                                                                         04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00003527     0x00003527     x86  Console    CV          0x--------11C00000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL                                                                     04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00003AAE     0x00003AAE     x86  Console    CV          0x--------11800000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL                                                                 04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00004E44     0x00004E44     x86  Console    CV          0x--------11400000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-FIBERS-L1-1-0.DLL                                                                        04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x0000EC1F     0x0000EC1F     x86  Console    CV          0x--------11000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-FILE-L1-1-0.DLL                                                                          04.01.2013  7:43  04.01.2013  7:44       5120  HA     0x0000F121     0x0000F121     x86  Console    CV          0x--------0F9B0000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-HANDLE-L1-1-0.DLL                                                                        04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00009172     0x00009172     x86  Console    CV          0x--------09C00000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-HEAP-L1-1-0.DLL                                                                          04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x0000866B     0x0000866B     x86  Console    CV          0x--------09800000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL                                                                   04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x0000947B     0x0000947B     x86  Console    CV          0x--------09400000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-IO-L1-1-0.DLL                                                                            04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x0000825C     0x0000825C     x86  Console    CV          0x--------09000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL                                                                 04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x0000256A     0x0000256A     x86  Console    CV          0x--------08C00000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL                                                                  04.01.2013  7:43  04.01.2013  7:44       4096  HA     0x0000B7E8     0x0000B7E8     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL                                                                 04.01.2013  7:43  04.01.2013  7:44       4096  HA     0x0000C9BA     0x0000C9BA     x86  Console    CV          0x--------08800000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-MEMORY-L1-1-0.DLL                                                                        04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x0000E8B6     0x0000E8B6     x86  Console    CV          0x--------08400000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-MISC-L1-1-0.DLL                                                                          04.01.2013  7:43  04.01.2013  7:44       4096  HA     0x0000B98B     0x0000B98B     x86  Console    CV          0x--------08000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL                                                                     04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x000100D3     0x000100D3     x86  Console    CV          0x--------07C00000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL                                                            04.01.2013  7:43  04.01.2013  7:44       3584  HA     0x00006CA2     0x00006CA2     x86  Console    CV          0x--------07800000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL                                                                04.01.2013  7:43  04.01.2013  7:44       4608  HA     0x0000B79D     0x0000B79D     x86  Console    CV          0x--------07400000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-PROFILE-L1-1-0.DLL                                                                       04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00001076     0x00001076     x86  Console    CV          0x--------07000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL                                                                    04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x00004301     0x00004301     x86  Console    CV          0x--------06C00000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-STRING-L1-1-0.DLL                                                                        04.01.2013  7:43  04.01.2013  7:44       3072  HA     0x0000D994     0x0000D994     x86  Console    CV          0x--------06800000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-SYNCH-L1-1-0.DLL                                                                         04.01.2013  7:43  04.01.2013  7:44       4096  HA     0x000090DA     0x000090DA     x86  Console    CV          0x--------06400000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL                                                                       04.01.2013  7:43  04.01.2013  7:44       4096  HA     0x00006435     0x00006435     x86  Console    CV          0x--------01FB0000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL                                                                    04.01.2013  5:43  04.01.2013  5:43       4608  HA     0x0000DBE9     0x0000DBE9     x86  Console    CV          0x--------10000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-CORE-UTIL-L1-1-0.DLL                                                                          04.01.2013  5:43  04.01.2013  5:43       3072  HA     0x0000F761     0x0000F761     x86  Console    CV          0x--------10000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SECURITY-BASE-L1-1-0.DLL                                                                      04.01.2013  5:43  04.01.2013  5:43       6144  HA     0x00008E1E     0x00008E1E     x86  Console    CV          0x--------10000000  Unknown             0x00004000    Not Loaded  6.1.7600.17206      6.1.7600.17206    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL                                                                 14.07.2009  2:11  14.07.2009  2:11       3584  HA     0x00010AC0     0x00010AC0     x86  Console    CV          0x--------10000000  Unknown             0x00004000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SERVICE-CORE-L1-1-0.DLL                                                                       14.07.2009  4:03  14.07.2009  4:04       2560  HA     0x00010014     0x00010014     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL                                                                 14.07.2009  4:03  14.07.2009  4:04       2560  HA     0x00002B2F     0x00002B2F     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL                                                                 14.07.2009  4:03  14.07.2009  4:04       2560  HA     0x0000D4B5     0x0000D4B5     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL                                                                     14.07.2009  4:03  14.07.2009  4:04       3584  HA     0x0000F9DE     0x0000F9DE     x86  Console    CV          0x--------00400000  Unknown             0x00003000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\COMDLG32.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06     486912  A      0x00081828     0x00081828     x86  GUI        CV          0x--------6F050000  0x--------75560000  0x0007B000    21          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\CRYPTBASE.DLL                                                                                            14.07.2009  4:15  14.07.2009  2:12      36864  A      0x00014593     0x00014593     x86  Console    CV          0x--------10000000  0x--------74E30000  0x0000C000    9           6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\FLTLIB.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:05      14848  A      0x0000E62A     0x0000E62A     x86  GUI        CV          0x--------403F0000  0x--------60EE0000  0x00007000    20          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\GDI32.DLL                                                                                                14.07.2009  4:11  14.07.2009  4:11     310784  A      0x0004D131     0x0004D131     x86  Console    CV          0x--------7DAB0000  0x--------75C90000  0x00090000    14          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\LPK.DLL                                                                                                  14.07.2009  4:11  14.07.2009  4:11      25600  A      0x0001268A     0x0001268A     x86  Console    CV          0x--------7D620000  0x--------77730000  0x0000A000    17          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\MSVCRT.DLL                                                                                               16.12.2011 10:59  16.12.2011 10:50     690688  A      0x000B730B     0x000B730B     x86  GUI        CV          0x--------6FF50000  0x--------75230000  0x000AC000    6           7.0.7600.16930      6.1.8638.16930    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\NSI.DLL                                                                                                  14.07.2009  4:16  14.07.2009  4:09       8704  A      0x00004FE4     0x00004FE4     x86  Console    CV          0x--------40160000  0x--------74EE0000  0x00006000    11          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\NTDLL.DLL                                                                                                17.11.2011  8:41  17.11.2011  8:35   1292592  A      0x0013E00E     0x0013E00E     x86  Console    CV          0x--------7DE70000  0x--------77760000  0x00180000    2           6.1.7600.16915      6.1.7600.16915    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\OLEAUT32.DLL                                                                                             27.08.2011  7:43  27.08.2011  7:34     571904  A      0x00093409     0x00093409     x86  Console    CV          0x--------6FC30000  0x--------74F20000  0x0008F000    24          6.1.7600.16872      6.1.7600.16872    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\RPCRT4.DLL                                                                                               14.07.2009  4:11  14.07.2009  4:11     662528  A      0x000A5F78     0x000A5F78     x86  Console    CV          0x--------7DB50000  0x--------756A0000  0x000F0000    7           6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\SHELL32.DLL                                                                                              09.06.2012  7:46  09.06.2012  7:39  12868608  A      0x00C5019C     0x00C5019C     x86  GUI        CV          0x--------73800000  0x--------75E40000  0x00C49000    22          6.1.7600.17038      6.1.7600.17038    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\SSPICLI.DLL                                                                                              02.06.2012  7:42  02.06.2012  7:42      96768  A      0x0001BD00     0x0001BD00     x86  Console    CV          0x--------7D8A0000  0x--------74E40000  0x00060000    8           6.1.7600.17035      6.1.7600.17035    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\USER32.DLL                                                                                               14.07.2009  4:11  14.07.2009  4:11     833024  A      0x000D5685     0x000D5685     x86  GUI        CV          0x--------7DC50000  0x--------75790000  0x00100000    15          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\USP10.DLL                                                                                                22.11.2012 12:33  22.11.2012 12:33     627712  A      0x0009C36A     0x0009C36A     x86  GUI        CV          0x--------6F8E0000  0x--------76B60000  0x0009E000    18          1.626.7600.17174    1.626.7600.17174  6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\VERSION.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:11      21504  A      0x000138C1     0x000138C1     x86  GUI        CV          0x--------3FE00000  0x--------73A90000  0x00009000    12          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\syswow64\WS2_32.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:11     206336  A      0x0003BA01     0x0003BA01     x86  Console    CV          0x--------41AC0000  0x--------74EA0000  0x00035000    5           6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[   ]  c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL   21.08.2010  8:21  21.08.2010  8:21   1680896  A      0x001A0A38     0x001A0A38     x86  GUI        CV          0x--------75C00000  0x--------702D0000  0x0019E000    13          6.10.7600.16661     6.1.7600.16661    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ACLUI.DLL                                                                                                14.07.2009  4:14  14.07.2009  4:03     125440  A      0x0002436C     0x0002436C     x86  Console    CV          0x--------74800000  Unknown             0x00022000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ACTIVEDS.DLL                                                                                             14.07.2009  4:14  14.07.2009  4:04     202752  A      0x00032F08     0x00032F08     x86  Console    CV          0x--------6E000000  Unknown             0x00035000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ADSLDPC.DLL                                                                                              14.07.2009  4:14  14.07.2009  4:03     202752  A      0x000344E6     0x000344E6     x86  Console    CV          0x--------6DCD0000  Unknown             0x00034000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ADVPACK.DLL                                                                                              14.07.2009  4:14  14.07.2009  4:03     126464  A      0x000261E8     0x000261E8     x86  GUI        CV          0x--------6FC00000  Unknown             0x0002E000    Not Loaded  8.0.7600.16385      8.0.7600.16385    6.1          9.0         6.1     5.0
[D  ]  c:\windows\syswow64\API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL                                                                      14.07.2009  2:11  14.07.2009  2:11       3072  HA     0x00000C58     0x00000C58     x86  Console    CV          0x--------10000000  Unknown             0x00004000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ATL.DLL                                                                                                  14.07.2009  4:14  14.07.2009  4:03      70144  A      0x0001B4FA     0x0001B4FA     x86  Console    CV          0x--------6E400000  Unknown             0x00014000    Not Loaded  3.5.2284.0          6.5.0.2284        6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\AUTHZ.DLL                                                                                                14.07.2009  4:14  14.07.2009  4:04      98816  A      0x0001EBC9     0x0001EBC9     x86  Console    CV          0x--------6DE00000  Unknown             0x0001B000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\AVRT.DLL                                                                                                 14.07.2009  4:14  14.07.2009  4:04      14336  A      0x0000910A     0x0000910A     x86  Console    CV          0x--------75400000  Unknown             0x00007000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\BCRYPT.DLL                                                                                               14.07.2009  4:11  14.07.2009  4:11      80896  A      0x0001636B     0x0001636B     x86  Console    CV          0x--------7D830000  Unknown             0x00017000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\BROWCLI.DLL                                                                                              05.07.2012  0:23  04.07.2012 22:34      41472  A      0x0000CA35     0x0000CA35     x86  Console    CV          0x--------10000000  Unknown             0x0000D000    Not Loaded  6.1.7600.17056      6.1.7600.17056    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\CABINET.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04      72704  A      0x0001A876     0x0001A876     x86  GUI        CV          0x--------6C7E0000  Unknown             0x00015000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.1
[D  ]  c:\windows\syswow64\CERTCLI.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04     335360  A      0x00053D6A     0x00053D6A     x86  Console    CV          0x--------70000000  Unknown             0x00055000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.0
[D  ]  c:\windows\syswow64\CERTENROLL.DLL                                                                                           03.09.2009 10:04  03.09.2009  9:58   1320960  A      0x0014BFA1     0x0014BFA1     x86  Console    CV          0x--------72D60000  Unknown             0x00145000    Not Loaded  6.1.7600.16418      6.1.7600.16418    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\CREDUI.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:07     189952  A      0x0002F4BA     0x0002F4BA     x86  Console    CV          0x--------6CCC0000  Unknown             0x00031000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\CRYPT32.DLL                                                                                              02.06.2012  7:45  02.06.2012  7:38   1157632  A      0x0012A7D1     0x0012A7D1     x86  GUI        CV          0x--------719B0000  Unknown             0x0011E000    Not Loaded  6.1.7600.17035      6.1.7600.17035    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\CRYPTUI.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:07   1003520  A      0x000F9DB9     0x000F9DB9     x86  GUI        CV          0x--------714D0000  Unknown             0x000F8000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\D2D1.DLL                                                                                                 03.03.2012  8:40  03.03.2012  8:30     739840  A      0x000B4C49     0x000B4C49     x86  GUI        CV          0x--------33000000  Unknown             0x000BA000    Not Loaded  6.1.7600.16972      6.1.7600.16972    6.1          9.0         6.1     6.0
[D  ]  c:\windows\syswow64\D3D10_1.DLL                                                                                              03.03.2012  8:40  03.03.2012  8:30     161792  A      0x0002EFAB     0x0002EFAB     x86  Console    CV          0x--------09740000  Unknown             0x0002C000    Not Loaded  6.1.7600.16972      6.1.7600.16972    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\D3D10_1CORE.DLL                                                                                          03.03.2012  8:40  03.03.2012  8:30     218624  A      0x00035DF3     0x00035DF3     x86  Console    CV          0x--------0D000000  Unknown             0x0003A000    Not Loaded  6.1.7600.16972      6.1.7600.16972    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\D3D8THK.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04      11264  A      0x00009663     0x00009663     x86  Console    CV          0x--------41000000  Unknown             0x00006000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\D3D9.DLL                                                                                                 14.07.2009  4:15  14.07.2009  4:04   1826816  A      0x001C3FAD     0x001C3FAD     x86  Console    CV          0x--------75410000  Unknown             0x001C3000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DAVHLPR.DLL                                                                                              14.07.2009  4:15  14.07.2009  2:14      19456  A      0x000089A9     0x000089A9     x86  GUI        CV          0x--------10000000  Unknown             0x00008000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DBGHELP.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04     854528  A      0x000DC324     0x000DC324     x86  Console    CV          0x--------71110000  Unknown             0x000EB000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DEVMGR.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:05     410624  A      0x0006D7F5     0x0006D7F5     x86  GUI        CV          0x--------6E8B0000  Unknown             0x00067000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DFSCLI.DLL                                                                                               14.07.2009  4:15  14.07.2009  2:37      43008  A      0x000180DD     0x000180DD     x86  Console    CV          0x--------10000000  Unknown             0x0000D000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DHCPCSVC.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:04      61952  A      0x0001B476     0x0001B476     x86  Console    CV          0x--------40ED0000  Unknown             0x00012000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DHCPCSVC6.DLL                                                                                            14.07.2009  4:15  14.07.2009  4:04      43008  A      0x00013DD9     0x00013DD9     x86  Console    CV          0x--------40460000  Unknown             0x0000D000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DNSAPI.DLL                                                                                               03.03.2011  8:29  03.03.2011  8:19     269824  A      0x0004C3E1     0x0004C3E1     x86  Console    CV          0x--------6DC00000  Unknown             0x00044000    Not Loaded  6.1.7600.16772      6.1.7600.16772    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DRVSTORE.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:05     318464  A      0x00051069     0x00051069     x86  Console    CV          0x--------10D20000  Unknown             0x00051000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.1
[D  ]  c:\windows\syswow64\DSROLE.DLL                                                                                               14.07.2009  4:15  14.07.2009  2:33      22016  A      0x00013CD4     0x00013CD4     x86  Console    CV          0x--------10000000  Unknown             0x00009000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DUI70.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:06     717824  A      0x000B54EF     0x000B54EF     x86  GUI        CV          0x--------24400000  Unknown             0x000B2000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DUSER.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:06     181248  A      0x0002FBA2     0x0002FBA2     x86  GUI        CV          0x--------6CC00000  Unknown             0x0002F000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DWMAPI.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:06      67072  A      0x0001EB6F     0x0001EB6F     x86  GUI        CV          0x--------40E50000  Unknown             0x00013000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\DWRITE.DLL                                                                                               03.03.2012  8:40  03.03.2012  8:32   1074176  A      0x00109713     0x00109713     x86  Console    CV          0x--------1E4D0000  Unknown             0x0010A000    Not Loaded  6.1.7600.16972      6.1.7600.16972    6.1          9.0         6.1     6.0
[D  ]  c:\windows\syswow64\DXGI.DLL                                                                                                 14.07.2009  4:15  14.07.2009  4:06     507392  A      0x00081E01     0x00081E01     x86  Console    CV          0x--------152D0000  Unknown             0x00083000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\EAPPCFG.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04     183296  A      0x00035714     0x00035714     x86  Console    CV          0x--------6CB80000  Unknown             0x0002F000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\EAPPPRXY.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:05      56320  A      0x0001B54E     0x0001B54E     x86  Console    CV          0x--------40E10000  Unknown             0x00011000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\EFSADU.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:05      82944  A      0x0001A473     0x0001A473     x86  GUI        CV          0x--------40DB0000  Unknown             0x00019000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\EFSUTIL.DLL                                                                                              14.07.2009  4:15  14.07.2009  2:33      24576  A      0x0000DAD4     0x0000DAD4     x86  Console    CV          0x--------10000000  Unknown             0x00009000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\EVR.DLL                                                                                                  14.07.2009  4:15  14.07.2009  4:07     488448  A      0x0008617E     0x0008617E     x86  Console    CV          0x--------13B80000  Unknown             0x0007A000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\FIREWALLAPI.DLL                                                                                          14.07.2009  4:15  14.07.2009  4:05     462848  A      0x0007D38F     0x0007D38F     x86  GUI        CV          0x--------13B00000  Unknown             0x00076000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\FMS.DLL                                                                                                  14.07.2009  4:15  14.07.2009  4:05      93696  A      0x00025A72     0x00025A72     x86  GUI        CV          0x--------04480000  Unknown             0x00019000    Not Loaded  1.1.6000.16384      1.1.6000.16384    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\FWPUCLNT.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06     216576  A      0x00044D8D     0x00044D8D     x86  Console    CV          0x--------6CA80000  Unknown             0x00038000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\GPAPI.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:05      79872  A      0x0001CCE2     0x0001CCE2     x86  Console    CV          0x--------40D50000  Unknown             0x00016000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\HLINK.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:05      84992  A      0x00018E09     0x00018E09     x86  Console    CV          0x--------40D10000  Unknown             0x00018000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.1
[D  ]  c:\windows\syswow64\IEADVPACK.DLL                                                                                            27.09.2013 14:24  08.03.2011 15:46     110592  A      0x00026F20     0x00026F20     x86  GUI        CV          0x--------65000000  Unknown             0x0002B000    Not Loaded  9.0.8112.16421      9.0.8112.16421    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\IEUI.DLL                                                                                                 27.09.2013 14:24  31.07.2013 12:42     176640  A      0x0002F7FB     0x0002F7FB     x86  GUI        CV          0x--------10000000  Unknown             0x0002D000    Not Loaded  9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     5.1
[D  ]  c:\windows\syswow64\IMAGEHLP.DLL                                                                                             01.03.2012  8:45  01.03.2012  8:34     158720  A      0x00035AFC     0x00035AFC     x86  Console    CV          0x--------41870000  Unknown             0x0002A000    Not Loaded  6.1.7600.16970      6.1.7600.16970    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\IMGUTIL.DLL                                                                                              27.09.2013 14:24  08.03.2011 15:46      35840  A      0x00012760     0x00012760     x86  GUI        CV          0x--------1B000000  Unknown             0x0000C000    Not Loaded  9.0.8112.16421      9.0.8112.16421    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\INETCOMM.DLL                                                                                             03.05.2011  7:50  03.05.2011  7:42     740864  A      0x000C0525     0x000C0525     x86  GUI        CV          0x--------70410000  Unknown             0x000B9000    Not Loaded  6.1.7600.16807      6.1.7600.16807    6.1          9.0         6.1     6.0
[D  ]  c:\windows\syswow64\IPHLPAPI.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06     103936  A      0x00028FF6     0x00028FF6     x86  Console    CV          0x--------40C90000  Unknown             0x0001C000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\KSUSER.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:09       4608  A      0x0000DC4D     0x0000DC4D     x86  GUI        CV          0x--------40300000  Unknown             0x00004000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\KTMW32.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:09      20480  A      0x0000C5D6     0x0000C5D6     x86  GUI        CV          0x--------402F0000  Unknown             0x00009000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\LOGONCLI.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06     127488  A      0x0002675C     0x0002675C     x86  GUI        CV          0x--------08680000  Unknown             0x00022000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MF.DLL                                                                                                   23.05.2010 13:11  23.05.2010 13:03   3181568  A      0x0030F048     0x0030F048     x86  Console    CV          0x--------324F0000  Unknown             0x0030C000    Not Loaded  12.0.7600.16597     12.0.7600.16597   21315.20512  9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MFC42U.DLL                                                                                               11.03.2011  8:40  11.03.2011  8:31   1164288  A      0x00123BDE     0x00123BDE     x86  Console    CV          0x--------71D80000  Unknown             0x0011F000    Not Loaded  6.6.8064.0          6.6.4.0           6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MFPLAT.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:07     352768  A      0x0005F385     0x0005F385     x86  Console    CV          0x--------0FDC0000  Unknown             0x00059000    Not Loaded  12.0.7600.16385     12.0.7600.16385   6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MFREADWRITE.DLL                                                                                          23.05.2010 13:11  23.05.2010 13:03     196608  A      0x0003AB1A     0x0003AB1A     x86  Console    CV          0x--------0B7C0000  Unknown             0x00033000    Not Loaded  12.0.7600.16597     12.0.7600.16597   6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MLANG.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:06     177664  A      0x0002C723     0x0002C723     x86  GUI        CV          0x--------417A0000  Unknown             0x0002E000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.1
[D  ]  c:\windows\syswow64\MMDEVAPI.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06     213504  A      0x000376B9     0x000376B9     x86  Console    CV          0x--------6C980000  Unknown             0x00039000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MPR.DLL                                                                                                  14.07.2009  4:15  14.07.2009  4:07      64000  A      0x0001055D     0x0001055D     x86  Console    CV          0x--------40BC0000  Unknown             0x00012000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MPRAPI.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:07     158720  A      0x0002BC53     0x0002BC53     x86  Console    CV          0x--------41740000  Unknown             0x00029000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MPRMSG.DLL                                                                                               14.07.2009  4:15  14.07.2009  4:07     104960  A      0x00027CF0     0x00027CF0     x86  Console    CV          0x--------03840000  Unknown             0x0001D000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MSACM32.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:07      72192  A      0x0001DEA3     0x0001DEA3     x86  GUI        CV          0x--------40BA0000  Unknown             0x00014000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MSASN1.DLL                                                                                               29.08.2009  9:57  29.08.2009  9:52      34816  A      0x00017DBC     0x00017DBC     x86  GUI        CV          0x--------6C520000  Unknown             0x0000C000    Not Loaded  6.1.7600.16415      6.1.7600.16415    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MSFEEDS.DLL                                                                                              27.09.2013 14:24  31.07.2013 12:47     607744  A      0x000A1E39     0x000A1E39     x86  GUI        CV          0x--------10000000  Unknown             0x00097000    Not Loaded  9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\MSHTML.DLL                                                                                               27.09.2013 14:24  31.07.2013 13:27  12335104  A      0x00BCA41D     0x00BCA41D     x86  GUI        CV          0x--------63580000  Unknown             0x00BC9000    Not Loaded  9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\MSILTCFG.DLL                                                                                             14.07.2009  4:15  14.07.2009  2:31      15872  A      0x000062B3     0x000062B3     x86  Console    CV          0x--------10000000  Unknown             0x00007000    Not Loaded  5.0.7600.16385      5.0.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\MSIMG32.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:08       4608  A      0x0000B835     0x0000B835     x86  Console    CV          0x--------40210000  Unknown             0x00005000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.0
[D  ]  c:\windows\syswow64\MSLS31.DLL                                                                                               27.09.2013 14:24  08.03.2011 15:45     161792  A      0x000290D2     0x000290D2     x86  GUI        CV          0x--------10000000  Unknown             0x0002B000    Not Loaded  3.10.349.0          3.10.0.0          6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\MSOERT2.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:07      86528  A      0x0001AF54     0x0001AF54     x86  GUI        CV          0x--------40B40000  Unknown             0x0001C000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.0
[D  ]  c:\windows\syswow64\MSRATING.DLL                                                                                             27.09.2013 14:24  08.03.2011 15:47     162304  A      0x00034589     0x00034589     x86  GUI        CV          0x--------63400000  Unknown             0x0002B000    Not Loaded  9.0.8112.16421      9.0.8112.16421    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\MSSIGN32.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:07      39424  A      0x00010270     0x00010270     x86  GUI        CV          0x--------401D0000  Unknown             0x0000D000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NCRYPT.DLL                                                                                               20.11.2012  8:10  20.11.2012  8:10     219136  A      0x0003F6EA     0x0003F6EA     x86  Console    CV          0x--------6C800000  Unknown             0x00038000    Not Loaded  6.1.7600.17172      6.1.7600.17172    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NDFAPI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:08     200192  A      0x00036781     0x00036781     x86  Console    CV          0x--------0B100000  Unknown             0x00034000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NETAPI32.DLL                                                                                             05.07.2012  0:26  05.07.2012  0:18      57344  A      0x0000FA69     0x0000FA69     x86  Console    CV          0x--------40AC0000  Unknown             0x00011000    Not Loaded  6.1.7600.17056      6.1.7600.17056    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NETBIOS.DLL                                                                                              14.07.2009  4:16  14.07.2009  2:53      14336  A      0x0000E9B5     0x0000E9B5     x86  Console    CV          0x--------10000000  Unknown             0x00008000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NETJOIN.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:07     161792  A      0x000373E5     0x000373E5     x86  Console    CV          0x--------07E20000  Unknown             0x0002B000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NETPLWIZ.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:08     175616  A      0x00034D8B     0x00034D8B     x86  GUI        CV          0x--------07DF0000  Unknown             0x0002E000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NEWDEV.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:08     313856  A      0x0004DB96     0x0004DB96     x86  Console    CV          0x--------6E160000  Unknown             0x0004F000    Not Loaded  6.0.5054.0          6.0.5054.0        6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\NTDSAPI.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:09      90112  A      0x00020D5A     0x00020D5A     x86  Console    CV          0x--------40A80000  Unknown             0x00018000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\OCCACHE.DLL                                                                                              27.09.2013 14:24  08.03.2011 15:47     123392  A      0x00020EBD     0x00020EBD     x86  GUI        CV          0x--------63780000  Unknown             0x00020000    Not Loaded  9.0.8112.16421      9.0.8112.16421    6.1          10.0        6.1     6.0
[D  ]  c:\windows\syswow64\ODBC32.DLL                                                                                               16.10.2010  7:34  16.10.2010  7:26     573440  A      0x00099C10     0x00099C10     x86  GUI        CV          0x--------6F4A0000  Unknown             0x0008C000    Not Loaded  6.1.7600.16688      6.1.7600.16688    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\OLEDLG.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09     103424  A      0x000223B4     0x000223B4     x86  GUI        CV          0x--------40A00000  Unknown             0x0001C000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\ONEX.DLL                                                                                                 14.07.2009  4:16  14.07.2009  4:09     199168  A      0x0003EEB0     0x0003EEB0     x86  Console    CV          0x--------6C3B0000  Unknown             0x00034000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\PCWUM.DLL                                                                                                14.07.2009  4:16  14.07.2009  2:11      33280  A      0x000115FB     0x000115FB     x86  Native     CV          0x--------10000000  Unknown             0x0000B000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\POWRPROF.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:10     145408  A      0x00026DF1     0x00026DF1     x86  Console    CV          0x--------41470000  Unknown             0x00025000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\PRINTUI.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     931840  A      0x000E4F30     0x000E4F30     x86  Console    CV          0x--------70F10000  Unknown             0x000E7000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\PRNTVPT.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     119808  A      0x000271E9     0x000271E9     x86  Console    CV          0x--------41440000  Unknown             0x00020000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.1
[D  ]  c:\windows\syswow64\PUIAPI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09     169472  A      0x000336A4     0x000336A4     x86  Console    CV          0x--------413D0000  Unknown             0x0002C000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RASAPI32.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:09     325120  A      0x0005842F     0x0005842F     x86  GUI        CV          0x--------6DFA0000  Unknown             0x00052000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RASDLG.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09     772608  A      0x000CA078     0x000CA078     x86  Console    CV          0x--------70730000  Unknown             0x000C1000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RASMAN.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09      76800  A      0x00019ACC     0x00019ACC     x86  GUI        CV          0x--------408E0000  Unknown             0x00015000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\REGAPI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10      71680  A      0x00017E92     0x00017E92     x86  Console    CV          0x--------40880000  Unknown             0x00015000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RPCHTTP.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:09     134656  A      0x00021482     0x00021482     x86  Console    CV          0x--------077D0000  Unknown             0x00024000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RSTRTMGR.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:09     152064  A      0x00030933     0x00030933     x86  GUI        CV          0x--------41310000  Unknown             0x00028000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\RTUTILS.DLL                                                                                              19.06.2010  9:23  19.06.2010  9:14      37376  A      0x0000A645     0x0000A645     x86  Console    CV          0x--------3FFC0000  Unknown             0x0000D000    Not Loaded  6.1.7600.16617      6.1.7600.16617    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SAMCLI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09      50688  A      0x00014104     0x00014104     x86  Console    CV          0x--------02C80000  Unknown             0x0000F000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SAMLIB.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:09      60928  A      0x000145E4     0x000145E4     x86  Console    CV          0x--------40840000  Unknown             0x00012000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SCECLI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10     175616  A      0x000378F0     0x000378F0     x86  Console    CV          0x--------412C0000  Unknown             0x0002E000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SENSAPI.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10      10752  A      0x0000FC8D     0x0000FC8D     x86  Console    CV          0x--------3FF90000  Unknown             0x00006000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SPFILEQ.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:11      81920  A      0x00021516     0x00021516     x86  GUI        CV          0x--------02340000  Unknown             0x00016000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SPINF.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:11      75776  A      0x0001B56B     0x0001B56B     x86  GUI        CV          0x--------02320000  Unknown             0x00015000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\SPPC.DLL                                                                                                 14.07.2009  4:16  14.07.2009  4:09     121344  A      0x00020B4B     0x00020B4B     x86  Console    CV          0x--------07AB0000  Unknown             0x00021000    Not Loaded  6.1.7600.16385      6.1.7600.16385    21315.20512  9.0         6.1     6.1
[D  ]  c:\windows\syswow64\TAPI32.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10     192000  A      0x00036B1B     0x00036B1B     x86  GUI        CV          0x--------41C80000  Unknown             0x00032000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\VAULTCLI.DLL                                                                                             14.07.2009  4:16  14.07.2009  2:36      36352  A      0x000147E7     0x000147E7     x86  Console    CV          0x--------10000000  Unknown             0x0000C000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\VPNIKEAPI.DLL                                                                                            14.07.2009  4:16  14.07.2009  2:54      24576  A      0x0000771F     0x0000771F     x86  Console    CV          0x--------10000000  Unknown             0x00009000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\W32TOPL.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:11      26624  A      0x00011A17     0x00011A17     x86  Console    CV          0x--------3FDF0000  Unknown             0x0000A000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WDI.DLL                                                                                                  14.07.2009  4:16  14.07.2009  4:11      76288  A      0x000145CC     0x000145CC     x86  Console    CV          0x--------40620000  Unknown             0x00015000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WEBIO.DLL                                                                                                17.11.2011  8:39  17.11.2011  8:34     314368  A      0x0005BE88     0x0005BE88     x86  Console    CV          0x--------0EB40000  Unknown             0x0004F000    Not Loaded  6.1.7600.16915      6.1.7600.16915    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WEBSERVICES.DLL                                                                                          14.07.2009  4:16  14.07.2009  4:11     782336  A      0x000C3780     0x000C3780     x86  Console    CV          0x--------19660000  Unknown             0x000C2000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WERUI.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:11     160256  A      0x00036DE5     0x00036DE5     x86  Console    CV          0x--------068D0000  Unknown             0x0002A000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINBRAND.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:11      12800  A      0x00012985     0x00012985     x86  Console    CV          0x--------3FDB0000  Unknown             0x00007000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     5.0
[D  ]  c:\windows\syswow64\WINHTTP.DLL                                                                                              21.12.2010  8:38  21.12.2010  8:31     350720  A      0x0006594A     0x0006594A     x86  GUI        CV          0x--------0EAE0000  Unknown             0x00058000    Not Loaded  6.1.7600.16723      6.1.7600.16723    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINMM.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:11     194048  A      0x00033CE9     0x00033CE9     x86  GUI        CV          0x--------41B00000  Unknown             0x00032000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINNSI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:11      16896  A      0x00006A64     0x00006A64     x86  Console    CV          0x--------3FD90000  Unknown             0x00007000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINSCARD.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:11     134144  A      0x00030534     0x00030534     x86  Console    CV          0x--------410A0000  Unknown             0x00023000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINSPOOL.DRV                                                                                             14.07.2009  4:14  14.07.2009  4:11     319488  A      0x00053D1A     0x00053D1A     x86  GUI        CV          0x--------6D930000  Unknown             0x00051000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINSTA.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:11     156160  A      0x000264AC     0x000264AC     x86  Console    CV          0x--------41040000  Unknown             0x00029000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WINTRUST.DLL                                                                                             24.08.2012 20:10  24.08.2012 20:05     172544  A      0x000356A9     0x000356A9     x86  GUI        CV          0x--------41010000  Unknown             0x0002D000    Not Loaded  6.1.7600.17115      6.1.7600.17115    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WKSCLI.DLL                                                                                               14.07.2009  4:16  14.07.2009  2:37      47104  A      0x0000FB43     0x0000FB43     x86  Console    CV          0x--------10000000  Unknown             0x0000F000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WLANAPI.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:11      81408  A      0x00017E22     0x00017E22     x86  Console    CV          0x--------405A0000  Unknown             0x00016000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WLANUTIL.DLL                                                                                             14.07.2009  4:16  14.07.2009  2:51       8192  A      0x00010789     0x00010789     x86  Console    CV          0x--------10000000  Unknown             0x00006000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WMDRMSDK.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:12     616960  A      0x000A04EC     0x000A04EC     x86  GUI        CV          0x--------15580000  Unknown             0x00099000    Not Loaded  11.0.7600.16385     11.0.7600.16385   21315.20512  9.0         6.1     6.1
[D  ]  c:\windows\syswow64\WTSAPI32.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:11      39936  A      0x00012019     0x00012019     x86  Console    CV          0x--------3FD00000  Unknown             0x0000D000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[D  ]  c:\windows\syswow64\XMLLITE.DLL                                                                                              16.06.2011  7:35  16.06.2011  7:30     180224  A      0x0002E374     0x0002E374     x86  GUI        CV          0x--------09EC0000  Unknown             0x0002F000    Not Loaded  1.3.1001.0          1.3.1001.0        6.1          9.0         6.1     5.0
[D  ]  c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\GDIPLUS.DLL            21.04.2012  7:23  21.04.2012  7:23   1625088  A      0x00191C22     0x00191C22     x86  Console    CV          0x--------25CB0000  Unknown             0x00190000    Not Loaded  6.1.7600.17007      6.1.7600.17007    6.1          9.0         6.1     6.1
[*  ]  c:\program files (x86)\wincdemu\x86\WINCDEMUCONTEXTMENU.DLL                                                                  28.09.2015 21:08  28.09.2015 21:08     222720  A      0x0003CADB     0x0003CADB     x86  GUI        CV          0x--------10000000  0x--------53E00000  0x0003C000    55          4.0.0.0             4.0.0.0           0.0          10.0        5.1     5.1
[*  ]  c:\program files\winrar\RAREXT32.DLL                                                                                         22.08.2013 18:01  22.08.2013 16:01     185432  A      0x0003A271     0x0003A271     x86  GUI        CV          0x--------10000000  0x--------54020000  0x0003A000    52          5.0.0.0             5.0.0.0           0.0          9.0         5.0     5.0
[*  ]  c:\progra~2\micros~1\office14\1049\GROOVEINTLRESOURCE.DLL                                                                    14.12.2012 13:34  20.10.2010 18:15   8878696  A      0x0087CEFE     0x0087CEFE     x86  Console    CV          0x--------10000000  0x--------62950000  0x00878000    83          14.0.7007.1000      14.0.7007.1000    0.0          9.0         5.1     5.1
[*  ]  c:\progra~2\micros~1\office14\GROOVEEX.DLL                                                                                   19.12.2013  0:41  19.12.2013  3:37   4171480  A      0x00407EB3     0x00407EB3     x86  Console    CV          0x--------49460000  0x--------635F0000  0x00406000    47          14.0.7113.5005      14.0.7113.0       0.0          9.0         5.1     5.1
[*  ]  c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\affcb83bba04f782c2586a1788330891\MSCORLIB.NI.DLL                     30.08.2016 16:05  03.03.2016  5:21  18111488  A      0x00000000     0x0115141A     x86  Console    CV          0x--------79720000  0x--------795D0000  0x01149000    67          4.6.1076.0          4.0.30319.0       0.0          11.0        5.0     5.0
[*  ]  c:\windows\microsoft.net\framework\v4.0.30319\CLR.DLL                                                                        02.03.2016 21:10  03.03.2016  5:27   7003272  A      0x006BB197     0x006BB197     x86  GUI        CV,Unknown  0x--------10000000  0x--------52BE0000  0x006B1000    65          4.6.1076.0          4.0.30319.0       10.0         12.10       6.0     6.0
[*  ]  c:\windows\syswow64\ACPPAGE.DLL                                                                                              14.07.2009  4:14  14.07.2009  4:03      45568  A      0x0001B19B     0x0001B19B     x86  GUI        CV          0x--------21400000  0x--------60E70000  0x0000E000    74          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\APPHELP.DLL                                                                                              14.07.2009  4:14  14.07.2009  4:04     292352  A      0x00049785     0x00049785     x86  GUI        CV          0x--------6F000000  0x--------73840000  0x0004B000    33          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\CFGMGR32.DLL                                                                                             24.05.2011 13:34  24.05.2011 13:26     145920  A      0x00030705     0x00030705     x86  Console    CV          0x--------6D000000  0x--------76A90000  0x00027000    45          6.1.7600.16820      6.1.7600.16820    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\CLBCATQ.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:04     522240  A      0x0008558C     0x0008558C     x86  GUI        CV          0x--------6F850000  0x--------75C00000  0x00083000    29          2001.12.8530.16385  6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\CRYPTSP.DLL                                                                                              14.07.2009  4:15  14.07.2009  4:07      78848  A      0x00017990     0x00017990     x86  Console    CV          0x--------05140000  0x--------71540000  0x00016000    37          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\CSCAPI.DLL                                                                                               14.07.2009  4:15  14.07.2009  2:14      34816  A      0x00015338     0x00015338     x86  Console    CV          0x--------10000000  0x--------72640000  0x0000B000    59          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\DEVOBJ.DLL                                                                                               24.05.2011 13:34  24.05.2011 13:26      64512  A      0x00012CA7     0x00012CA7     x86  Console    CV          0x--------05040000  0x--------76DE0000  0x00012000    46          6.1.7600.16820      6.1.7600.16820    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\DEVRTL.DLL                                                                                               24.05.2011 13:34  24.05.2011 11:34      44544  A      0x0000F1F3     0x0000F1F3     x86  Console    CV          0x--------10000000  0x--------737A0000  0x0000E000    79          6.1.7600.16820      6.1.7600.16820    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\EHSTORSHELL.DLL                                                                                          14.07.2009  4:15  14.07.2009  4:05     189952  A      0x0003392D     0x0003392D     x86  GUI        CV          0x--------0C080000  0x--------63EC0000  0x00031000    82          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\IERTUTIL.DLL                                                                                             27.09.2013 14:24  31.07.2013 12:46   1796096  A      0x001C1A6F     0x001C1A6F     x86  GUI        CV          0x--------5DCA0000  0x--------75A40000  0x001B9000    87          9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.0
[*  ]  c:\windows\syswow64\IMM32.DLL                                                                                                14.07.2009  4:11  14.07.2009  4:11     119808  A      0x0002B37C     0x0002B37C     x86  GUI        CV          0x--------7D910000  0x--------755E0000  0x00060000    25          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\LINKINFO.DLL                                                                                             14.07.2009  4:15  14.07.2009  4:06      22016  A      0x0000DF7C     0x0000DF7C     x86  GUI        CV          0x--------402E0000  0x--------715D0000  0x00009000    72          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\MSCOREE.DLL                                                                                              25.11.2009 11:47  06.11.2009  8:09     297808  A      0x00055340     0x00055340     x86  GUI        CV          0x--------79000000  0x--------72810000  0x0004A000    62          4.0.31106.0         4.0.31106.0       8.0          9.0         5.0     5.0
[*  ]  c:\windows\syswow64\MSCTF.DLL                                                                                                14.07.2009  4:15  14.07.2009  4:07     828928  A      0x000CB820     0x000CB820     x86  GUI        CV          0x--------70990000  0x--------76D10000  0x000CC000    26          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\MSI.DLL                                                                                                  07.04.2012 14:34  07.04.2012 14:28   2342400  A      0x00240ADC     0x00240ADC     x86  Console    CV          0x--------759B0000  0x--------70470000  0x00240000    77          5.0.7600.16992      5.0.7600.16992    6.1          9.0         6.1     5.2
[*  ]  c:\windows\syswow64\MSVCR120_CLR0400.DLL                                                                                     22.10.2015 11:09  09.04.2015  6:18     987848  A      0x000F3703     0x000F3703     x86  GUI        CV          0x--------10000000  0x--------53F20000  0x000F5000    66          12.0.52512.0        12.0.52512.0      10.0         12.10       6.0     6.0
[*  ]  c:\windows\syswow64\NETUTILS.DLL                                                                                             14.07.2009  4:16  14.07.2009  2:37      22016  A      0x00015232     0x00015232     x86  Console    CV          0x--------10000000  0x--------739C0000  0x00009000    61          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\NORMALIZ.DLL                                                                                             14.07.2009  4:09  14.07.2009  4:09       2048  A      0x0000F8D7     0x0000F8D7     x86  GUI        CV          0x--------00400000  0x--------75050000  0x00003000    89          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\NTMARTA.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     121856  A      0x0002760C     0x0002760C     x86  Console    CV          0x--------41500000  0x--------73A00000  0x00021000    30          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\NTSHRUI.DLL                                                                                              04.01.2012 12:03  04.01.2012 11:55     442880  A      0x0006FB22     0x0006FB22     x86  GUI        CV          0x--------6ED80000  0x--------72650000  0x0006F000    57          6.1.7600.16941      6.1.7600.16941    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\OLEACC.DLL                                                                                               27.08.2011  7:43  27.08.2011  7:34     233472  A      0x0003A9FB     0x0003A9FB     x86  GUI        CV          0x--------6C490000  Unknown             0x0003C000    Not Loaded  7.0.0.0             6.1.7600.16872    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\PROFAPI.DLL                                                                                              14.07.2009  4:16  14.07.2009  2:12      31744  A      0x000126FB     0x000126FB     x86  GUI        CV          0x--------10000000  0x--------73430000  0x0000B000    32          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\PROPSYS.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:09     988160  A      0x000FF92D     0x000FF92D     x86  GUI        CV          0x--------1D300000  0x--------701D0000  0x000F5000    28          7.0.7600.16385      7.0.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\PSAPI.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:09       6144  A      0x0000CCD3     0x0000CCD3     x86  Console    CV          0x--------7DAA0000  Unknown             0x00005000    Not Loaded  6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\RPCRTREMOTE.DLL                                                                                          14.07.2009  4:16  14.07.2009  2:43      45568  A      0x00010593     0x00010593     x86  Console    CV          0x--------10000000  0x--------714F0000  0x0000E000    39          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\RSAENH.DLL                                                                                               14.07.2009  4:17  14.07.2009  4:09     242936  A      0x000401A8     0x000401A8     x86  Console    CV          0x--------0AC00000  0x--------71500000  0x0003B000    38          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SECHOST.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10      92160  A      0x00025332     0x00025332     x86  Console    CV          0x--------02B20000  0x--------76AD0000  0x00019000    10          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SECUR32.DLL                                                                                              02.06.2012  7:48  02.06.2012  7:41      22016  A      0x0000A7CE     0x0000A7CE     x86  Console    CV          0x--------3FFA0000  0x--------73790000  0x00008000    90          6.1.7600.17035      6.1.7600.17035    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SETUPAPI.DLL                                                                                             14.07.2009  4:16  14.07.2009  4:10   1668608  A      0x0019D3CA     0x0019D3CA     x86  GUI        CV          0x--------734B0000  0x--------75090000  0x0019D000    44          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SFC.DLL                                                                                                  14.07.2009  4:10  14.07.2009  4:10       2560  A      0x00009C0F     0x00009C0F     x86  Console    CV          0x--------00400000  0x--------63D70000  0x00003000    75          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SFC_OS.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10      40960  A      0x00011F0E     0x00011F0E     x86  Console    CV          0x--------3FF60000  0x--------63D60000  0x0000D000    76          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SHDOCVW.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     179712  A      0x00031932     0x00031932     x86  GUI        CV          0x--------41260000  0x--------63E90000  0x0002E000    43          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\shellext\HASHCHECK.DLL                                                                                   02.07.2009  3:10  02.07.2009  3:10      92672  A      0x0001DEE7     0x0001DEE7     x86  GUI        None        0x--------1F010000  0x--------00A20000  0x0001A000    40          2.1.11.0            2.1.11.0          2.1          7.10        5.1     5.1
[*  ]  c:\windows\syswow64\SLC.DLL                                                                                                  14.07.2009  4:16  14.07.2009  4:10      27136  A      0x0000FD69     0x0000FD69     x86  Console    CV          0x--------3FEF0000  0x--------720D0000  0x0000A000    60          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.0
[*  ]  c:\windows\syswow64\SRVCLI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:11      90112  A      0x00021CBF     0x00021CBF     x86  Console    CV          0x--------02240000  0x--------739A0000  0x00019000    58          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SXS.DLL                                                                                                  14.07.2009  4:16  14.07.2009  4:10     380416  A      0x00064B35     0x00064B35     x86  GUI        CV          0x--------6E560000  0x--------73B10000  0x0005F000    64          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SYNCENG.DLL                                                                                              26.09.2012  0:55  26.09.2012  0:55      78336  A      0x0001AF4B     0x0001AF4B     x86  GUI        CV          0x--------01FE0000  0x--------60B20000  0x00016000    71          6.1.7600.17130      6.1.7600.17130    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\SYNCUI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10     158720  A      0x000338C1     0x000338C1     x86  GUI        CV          0x--------411A0000  0x--------53EF0000  0x00029000    70          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\TWEXT.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:11     146432  A      0x00030E3E     0x00030E3E     x86  GUI        CV          0x--------06D00000  0x--------54060000  0x00027000    36          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\URLMON.DLL                                                                                               27.09.2013 14:24  31.07.2013 12:53   1104896  A      0x00112B00     0x00112B00     x86  GUI        CV          0x--------1A400000  0x--------75920000  0x00111000    86          9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.0
[*  ]  c:\windows\syswow64\USERENV.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:11      79360  A      0x0001BA77     0x0001BA77     x86  GUI        CV          0x--------406A0000  0x--------720A0000  0x00017000    41          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\UXTHEME.DLL                                                                                              14.07.2009  4:11  14.07.2009  4:11     245760  A      0x000479E1     0x000479E1     x86  GUI        CV          0x--------7D980000  0x--------73890000  0x00080000    27          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\WER.DLL                                                                                                  14.07.2009  4:16  14.07.2009  4:11     377856  A      0x00062A5B     0x00062A5B     x86  Console    CV          0x--------6E480000  0x--------53E90000  0x00060000    78          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\WINDOWSCODECS.DLL                                                                                        14.07.2009  4:16  14.07.2009  4:11   1011200  A      0x00103F2A     0x00103F2A     x86  GUI        CV          0x--------1D000000  0x--------72E40000  0x000FB000    54          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.0
[*  ]  c:\windows\syswow64\WININET.DLL                                                                                              27.09.2013 14:24  31.07.2013 12:52   1129472  A      0x00122F14     0x00122F14     x86  GUI        CV          0x--------63000000  0x--------75D20000  0x0011B000    88          9.0.8112.16506      9.0.8112.16506    6.1          10.0        6.1     6.1
[*  ]  c:\windows\syswow64\WLDAP32.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:12     268800  A      0x0004B5B1     0x0004B5B1     x86  GUI        CV          0x--------6CD80000  0x--------76E50000  0x00045000    31          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.DLL                     02.04.2017 19:12  19.04.2011  4:30     159048  A      0x000314FA     0x000314FA     x86  GUI        CV          0x--------78E20000  0x--------54340000  0x0002B000    50          9.0.30729.6161      9.0.30729.6161    9.0          9.0         5.0     5.0
[*  ]  c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCP90.DLL                   02.04.2017 19:12  19.04.2011  4:30     569680  A      0x00098094     0x00098094     x86  GUI        CV          0x--------78480000  0x--------54240000  0x0008E000    49          9.0.30729.6161      9.0.30729.6161    9.0          9.0         5.0     5.0
[*  ]  c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.DLL                   02.04.2017 19:12  19.04.2011  4:30     653136  A      0x000A4DB7     0x000A4DB7     x86  GUI        CV          0x--------78520000  0x--------54370000  0x000A3000    48          9.0.30729.6161      9.0.30729.6161    9.0          9.0         5.0     5.0
[*  ]  c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16661_none_ebfb56996c72aefc\COMCTL32.DLL  21.08.2010  8:33  21.08.2010  8:25     530432  A      0x0008C165     0x0008C165     x86  GUI        CV          0x--------6F770000  Unknown             0x00084000    Not Loaded  5.82.7600.16661     6.1.7600.16661    6.1          9.0         6.1     6.0
[*  ]  c:\program files (x86)\pdf24\RESOURCES.DLL                                                                                   20.12.2016 13:28  20.12.2016 15:21     565896  A      0x0008E57E     0x0008E57E     x86  GUI        None        0x--------10000000  Data file           0x0008D000    85          8.0.4.0             8.0.4.0           0.0          12.0        5.1     5.1
[*  ]  c:\program files\winrar\RARLNG.DLL                                                                                           01.09.2013 19:33  01.09.2013 19:32     268288  A      0x00000000     0x000494A7     x86  GUI        None        0x--------10000000  Data file           0x00043000    53          5.0.0.0             5.0.0.0           0.0          10.0        5.1     5.1
[*  ]  c:\progra~2\common~1\micros~1\office14\cultures\OFFICE.ODF                                                                   05.09.2013  0:14  05.09.2013  2:51   4300456  A      0x00425E02     0x00425E02     x86  Console    CV          0x--------10000000  0x--------631D0000  0x0041A000    51          14.0.7109.5000      14.0.7109.0       0.0          9.0         5.1     5.1
[*  ]  c:\windows\microsoft.net\framework\v4.0.30319\ru\MSCORRC.DLL                                                                 05.11.2015 23:25  06.11.2015  5:20     447288  A      0x00077179     0x00077179     x86  GUI        Unknown     0x--------10000000  Data file           0x0006B000    68          4.6.1055.0          4.0.30319.0       10.0         12.10       6.0     6.0
[*  ]  c:\windows\system32\ACPPAGE.DLL                                                                                              14.07.2009  4:14  14.07.2009  4:03      45568  A      0x0001B19B     0x0001B19B     x86  GUI        CV          0x--------21400000  Data file           0x0000E000    73          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\EHSTORSHELL.DLL                                                                                          14.07.2009  4:15  14.07.2009  4:05     189952  A      0x0003392D     0x0003392D     x86  GUI        CV          0x--------0C080000  Data file           0x00031000    81          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\IMAGERES.DLL                                                                                             14.07.2009  4:06  14.07.2009  4:06  20268032  A      0x01357693     0x01357693     x86  Console    None        0x--------00400000  Data file           0x01356000    84          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\NTSHRUI.DLL                                                                                              04.01.2012 12:03  04.01.2012 11:55     442880  A      0x0006FB22     0x0006FB22     x86  GUI        CV          0x--------6ED80000  Data file           0x0006F000    56          6.1.7600.16941      6.1.7600.16941    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\SHDOCVW.DLL                                                                                              14.07.2009  4:16  14.07.2009  4:10     179712  A      0x00031932     0x00031932     x86  GUI        CV          0x--------41260000  Data file           0x0002E000    42          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\SYNCUI.DLL                                                                                               14.07.2009  4:16  14.07.2009  4:10     158720  A      0x000338C1     0x000338C1     x86  GUI        CV          0x--------411A0000  Data file           0x00029000    69          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\system32\TWEXT.DLL                                                                                                14.07.2009  4:16  14.07.2009  4:11     146432  A      0x00030E3E     0x00030E3E     x86  GUI        CV          0x--------06D00000  Data file           0x00027000    34          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1
[*  ]  c:\windows\syswow64\IMAGERES.DLL                                                                                             14.07.2009  4:06  14.07.2009  4:06  20268032  A      0x01357693     0x01357693     x86  Console    None        0x--------00400000  Data file           0x01356000    80          6.1.7600.16385      6.1.7600.16385    6.1          9.0         6.1     6.1

************************************| Log |*************************************

Warning: At least one delay-load dependency module was not found.
Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.

--------------------------------------------------------------------------------
Starting profile on 12.04.2017 at 23:08:22

Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Professional (64-bit), version 6.01.7600
Program Executable: c:\intel\PROCMON.EXE
Search Path: C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Skype\Phone\

Options Selected:
     Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
     Log DllMain calls for process attach and process detach messages.
     Hook the process to gather more detailed dependency information.
     Log LoadLibrary function calls.
     Log GetProcAddress function calls.
     Log debug output messages.
--------------------------------------------------------------------------------

Started "PROCMON.EXE" (process 0x190C) at address 0x00EC0000.  Successfully hooked module.
Loaded "NTDLL.DLL" at address 0x77760000.  Successfully hooked module.
Loaded "KERNEL32.DLL" at address 0x76C00000.  Successfully hooked module.
Loaded "KERNELBASE.DLL" at address 0x76E00000.  Successfully hooked module.
DllMain(0x76E00000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" called.
DllMain(0x76E00000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNELBASE.DLL" returned 1 (0x1).
DllMain(0x76C00000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x76C00000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
Injected "DEPENDS.DLL" at address 0x63BD0000.
DllMain(0x63BD0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
DllMain(0x63BD0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
Loaded "WS2_32.DLL" at address 0x74EA0000.  Successfully hooked module.
Loaded "MSVCRT.DLL" at address 0x75230000.  Successfully hooked module.
Loaded "RPCRT4.DLL" at address 0x756A0000.  Successfully hooked module.
Loaded "SSPICLI.DLL" at address 0x74E40000.  Successfully hooked module.
Loaded "CRYPTBASE.DLL" at address 0x74E30000.  Successfully hooked module.
Loaded "SECHOST.DLL" at address 0x76AD0000.  Successfully hooked module.
Loaded "NSI.DLL" at address 0x74EE0000.  Successfully hooked module.
Loaded "VERSION.DLL" at address 0x73A90000.  Successfully hooked module.
Loaded "COMCTL32.DLL" at address 0x702D0000.  Successfully hooked module.
Loaded "GDI32.DLL" at address 0x75C90000.  Successfully hooked module.
Loaded "USER32.DLL" at address 0x75790000.  Successfully hooked module.
Loaded "ADVAPI32.DLL" at address 0x74FB0000.  Successfully hooked module.
Loaded "LPK.DLL" at address 0x77730000.  Successfully hooked module.
Loaded "USP10.DLL" at address 0x76B60000.  Successfully hooked module.
Loaded "SHLWAPI.DLL" at address 0x75640000.  Successfully hooked module.
Loaded "FLTLIB.DLL" at address 0x60EE0000.  Successfully hooked module.
Loaded "COMDLG32.DLL" at address 0x75560000.  Successfully hooked module.
Loaded "SHELL32.DLL" at address 0x75E40000.  Successfully hooked module.
Loaded "OLE32.DLL" at address 0x75400000.  Successfully hooked module.
Loaded "OLEAUT32.DLL" at address 0x74F20000.  Successfully hooked module.
Entrypoint reached. All implicit modules have been loaded.
DllMain(0x75230000, DLL_PROCESS_ATTACH, 0x002EF858) in "MSVCRT.DLL" called.
DllMain(0x75230000, DLL_PROCESS_ATTACH, 0x002EF858) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x74E30000, DLL_PROCESS_ATTACH, 0x002EF858) in "CRYPTBASE.DLL" called.
DllMain(0x74E30000, DLL_PROCESS_ATTACH, 0x002EF858) in "CRYPTBASE.DLL" returned 1 (0x1).
DllMain(0x76AD0000, DLL_PROCESS_ATTACH, 0x002EF858) in "SECHOST.DLL" called.
DllMain(0x76AD0000, DLL_PROCESS_ATTACH, 0x002EF858) in "SECHOST.DLL" returned 1 (0x1).
DllMain(0x74E40000, DLL_PROCESS_ATTACH, 0x002EF858) in "SSPICLI.DLL" called.
DllMain(0x74E40000, DLL_PROCESS_ATTACH, 0x002EF858) in "SSPICLI.DLL" returned 1 (0x1).
DllMain(0x756A0000, DLL_PROCESS_ATTACH, 0x002EF858) in "RPCRT4.DLL" called.
DllMain(0x756A0000, DLL_PROCESS_ATTACH, 0x002EF858) in "RPCRT4.DLL" returned 1969989377 (0x756BA701).
DllMain(0x74EE0000, DLL_PROCESS_ATTACH, 0x002EF858) in "NSI.DLL" called.
DllMain(0x74EE0000, DLL_PROCESS_ATTACH, 0x002EF858) in "NSI.DLL" returned 1 (0x1).
DllMain(0x74EA0000, DLL_PROCESS_ATTACH, 0x002EF858) in "WS2_32.DLL" called.
DllMain(0x74EA0000, DLL_PROCESS_ATTACH, 0x002EF858) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x73A90000, DLL_PROCESS_ATTACH, 0x002EF858) in "VERSION.DLL" called.
DllMain(0x73A90000, DLL_PROCESS_ATTACH, 0x002EF858) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x74FB0000, DLL_PROCESS_ATTACH, 0x002EF858) in "ADVAPI32.DLL" called.
DllMain(0x74FB0000, DLL_PROCESS_ATTACH, 0x002EF858) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x75790000, DLL_PROCESS_ATTACH, 0x002EF858) in "USER32.DLL" called.
LoadLibraryW("C:\Windows\system32\IMM32.DLL") called from "USER32.DLL" at address 0x757AC2B5.
Loaded "IMM32.DLL" at address 0x755E0000.  Successfully hooked module.
Loaded "MSCTF.DLL" at address 0x76D10000.  Successfully hooked module.
DllMain(0x76D10000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called.
DllMain(0x76D10000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
DllMain(0x755E0000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x757AB776 and returned 0x755FF637.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x757AB78B and returned 0x755FF65E.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x757AB7A0 and returned 0x755FF8EC.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x757AB7B5 and returned 0x755FF907.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x757AB7CA and returned 0x755FFB65.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x757AB7DF and returned 0x755FFB99.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x757AB7F4 and returned 0x755FF9CA.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x757AB809 and returned 0x755FFAD6.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x757AB81E and returned 0x755FF746.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x757AB833 and returned 0x755FF86E.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x757AB848 and returned 0x755F3691.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x757AB85D and returned 0x755F9327.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x757AB872 and returned 0x755F95A9.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x757AB887 and returned 0x755F7A37.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x757AB89C and returned 0x755F420D.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x757AB8B1 and returned 0x755F2DF9.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x757AB8C6 and returned 0x755F2004.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x757AB8DB and returned 0x755F1F1D.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x757AB8F0 and returned 0x755F2FC8.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x757AB905 and returned 0x755F2122.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x757AB91A and returned 0x755F135E.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x757AB92F and returned 0x755F68C8.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x757AB944 and returned 0x755F682C.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x757AB959 and returned 0x755F3966.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x757AB96E and returned 0x755F6964.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x757AB983 and returned 0x755F38D8.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x757AB998 and returned 0x755F3BB9.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x757AB9AD and returned 0x755F1DDD.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x757AB9C2 and returned 0x755F1D89.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x757AB9D7 and returned 0x755F18F9.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x757AB9EC and returned 0x755F3FF4.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x757ABA01 and returned 0x755F97EF.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x757ABA16 and returned 0x755F8DF5.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x757ABA2B and returned 0x755F2E3C.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x757ABA40 and returned 0x755F3E03.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x757ABA55 and returned 0x755F913F.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x757ABA6A and returned 0x755F2469.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x757ABA7F and returned 0x755F3EE7.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x757ABA94 and returned 0x755F6A7C.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x757ABAA9 and returned 0x755F14F0.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x757ABABE and returned 0x755F1FA5.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x757ABAD3 and returned 0x755F1F58.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x757ABAE8 and returned 0x755F3DD0.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x757ABAFD and returned 0x755F21D1.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x757ABB12 and returned 0x755FF27F.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x757ABB27 and returned 0x755F9E79.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x757ABB3C and returned 0x755F3A6A.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x757ABB51 and returned 0x75604E96.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x757ABB66 and returned 0x755F3C1B.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x757ABB7B and returned 0x755F83C2.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x757ABB90 and returned 0x755F83E9.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x757ABBA5 and returned 0x755F320A.
GetProcAddress(0x755E0000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x757ABBBA and returned 0x755FB1CF.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x757ABBCB and returned 0x755F1807.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x757ABBDC and returned 0x75605114.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x757ABBED and returned 0x7560514B.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x757ABBFE and returned 0x755F1611.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmNotify") called from "USER32.DLL" at address 0x757ABC0F and returned 0x755F1346.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmSetDefaultRemoteKeyboardLayout") called from "USER32.DLL" at address 0x757ABC20 and returned 0x756053CC.
GetProcAddress(0x755E0000 [IMM32.DLL], "CtfImmGetCompatibleKeyboardLayout") called from "USER32.DLL" at address 0x757ABC31 and returned 0x756053DC.
DllMain(0x755E0000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
LoadLibraryW("C:\Windows\system32\IMM32.DLL") returned 0x755E0000.
GetProcAddress(0x77730000 [LPK.DLL], "LpkTabbedTextOut") called from "GDI32.DLL" at address 0x75CA6970 and returned 0x777348A0.
GetProcAddress(0x77730000 [LPK.DLL], "LpkPSMTextOut") called from "GDI32.DLL" at address 0x75CA697B and returned 0x77731430.
GetProcAddress(0x77730000 [LPK.DLL], "LpkDrawTextEx") called from "GDI32.DLL" at address 0x75CA6986 and returned 0x777313D0.
GetProcAddress(0x77730000 [LPK.DLL], "LpkEditControl") called from "GDI32.DLL" at address 0x75CA6991 and returned 0x77737000.
DllMain(0x75790000, DLL_PROCESS_ATTACH, 0x002EF858) in "USER32.DLL" returned 1 (0x1).
DllMain(0x76B60000, DLL_PROCESS_ATTACH, 0x002EF858) in "USP10.DLL" called.
LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x76B76890.
LoadLibraryA("gdi32.dll") returned 0x75C90000.
GetProcAddress(0x75C90000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x76B768C5 and returned 0x75CAAFF8.
DllMain(0x76B60000, DLL_PROCESS_ATTACH, 0x002EF858) in "USP10.DLL" returned 1 (0x1).
DllMain(0x77730000, DLL_PROCESS_ATTACH, 0x002EF858) in "LPK.DLL" called.
DllMain(0x77730000, DLL_PROCESS_ATTACH, 0x002EF858) in "LPK.DLL" returned 1 (0x1).
DllMain(0x75C90000, DLL_PROCESS_ATTACH, 0x002EF858) in "GDI32.DLL" called.
DllMain(0x75C90000, DLL_PROCESS_ATTACH, 0x002EF858) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x75640000, DLL_PROCESS_ATTACH, 0x002EF858) in "SHLWAPI.DLL" called.
DllMain(0x75640000, DLL_PROCESS_ATTACH, 0x002EF858) in "SHLWAPI.DLL" returned 1 (0x1).
DllMain(0x702D0000, DLL_PROCESS_ATTACH, 0x002EF858) in "COMCTL32.DLL" called.
GetProcAddress(0x77730000 [LPK.DLL], "LpkEditControl") called from "COMCTL32.DLL" at address 0x703039BC and returned 0x77737000.
DllMain(0x702D0000, DLL_PROCESS_ATTACH, 0x002EF858) in "COMCTL32.DLL" returned 1 (0x1).
DllMain(0x60EE0000, DLL_PROCESS_ATTACH, 0x002EF858) in "FLTLIB.DLL" called.
DllMain(0x60EE0000, DLL_PROCESS_ATTACH, 0x002EF858) in "FLTLIB.DLL" returned 1 (0x1).
DllMain(0x75E40000, DLL_PROCESS_ATTACH, 0x002EF858) in "SHELL32.DLL" called.
DllMain(0x75E40000, DLL_PROCESS_ATTACH, 0x002EF858) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x75560000, DLL_PROCESS_ATTACH, 0x002EF858) in "COMDLG32.DLL" called.
DllMain(0x75560000, DLL_PROCESS_ATTACH, 0x002EF858) in "COMDLG32.DLL" returned 1 (0x1).
DllMain(0x75400000, DLL_PROCESS_ATTACH, 0x002EF858) in "OLE32.DLL" called.
DllMain(0x75400000, DLL_PROCESS_ATTACH, 0x002EF858) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x74F20000, DLL_PROCESS_ATTACH, 0x002EF858) in "OLEAUT32.DLL" called.
DllMain(0x74F20000, DLL_PROCESS_ATTACH, 0x002EF858) in "OLEAUT32.DLL" returned 1 (0x1).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "PROCMON.EXE" at address 0x00F38418 and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "PROCMON.EXE" at address 0x00F3842B and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "PROCMON.EXE" at address 0x00F3843E and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "PROCMON.EXE" at address 0x00F38451 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "PROCMON.EXE" at address 0x00F38464 and returned 0x76C1386B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateEventExW") called from "PROCMON.EXE" at address 0x00F38477 and returned 0x76C943B3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSemaphoreExW") called from "PROCMON.EXE" at address 0x00F3848A and returned 0x76C9443D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadStackGuarantee") called from "PROCMON.EXE" at address 0x00F3849D and returned 0x76C1D81D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolTimer") called from "PROCMON.EXE" at address 0x00F384B0 and returned 0x76C2E6E3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolTimer") called from "PROCMON.EXE" at address 0x00F384C3 and returned 0x777B3067.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "WaitForThreadpoolTimerCallbacks") called from "PROCMON.EXE" at address 0x00F384D6 and returned 0x777CDC9A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolTimer") called from "PROCMON.EXE" at address 0x00F384E9 and returned 0x777CDB0D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolWait") called from "PROCMON.EXE" at address 0x00F384FC and returned 0x76C2E759.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolWait") called from "PROCMON.EXE" at address 0x00F3850F and returned 0x777A4CF3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolWait") called from "PROCMON.EXE" at address 0x00F38522 and returned 0x777D3CDA.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlushProcessWriteBuffers") called from "PROCMON.EXE" at address 0x00F38535 and returned 0x77780B2C.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FreeLibraryWhenCallbackReturns") called from "PROCMON.EXE" at address 0x00F38548 and returned 0x77840098.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentProcessorNumber") called from "PROCMON.EXE" at address 0x00F3855B and returned 0x777D7029.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLogicalProcessorInformation") called from "PROCMON.EXE" at address 0x00F3856E and returned 0x76C949F9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSymbolicLinkW") called from "PROCMON.EXE" at address 0x00F38581 and returned 0x76C8CF71.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetDefaultDllDirectories") called from "PROCMON.EXE" at address 0x00F38594 and returned 0x76E1207D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumSystemLocalesEx") called from "PROCMON.EXE" at address 0x00F385A7 and returned 0x76C944F7.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CompareStringEx") called from "PROCMON.EXE" at address 0x00F385BA and returned 0x76C94949.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetDateFormatEx") called from "PROCMON.EXE" at address 0x00F385CD and returned 0x76CA65B6.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "PROCMON.EXE" at address 0x00F385E0 and returned 0x76C949E9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTimeFormatEx") called from "PROCMON.EXE" at address 0x00F385F3 and returned 0x76CA6531.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetUserDefaultLocaleName") called from "PROCMON.EXE" at address 0x00F38606 and returned 0x76C94A59.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsValidLocaleName") called from "PROCMON.EXE" at address 0x00F38619 and returned 0x76C94A79.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "LCMapStringEx") called from "PROCMON.EXE" at address 0x00F3862C and returned 0x76C94A89.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentPackageId") called from "PROCMON.EXE" at address 0x00F3863F and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTickCount64") called from "PROCMON.EXE" at address 0x00F38652 and returned 0x76C2CEB0.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetFileInformationByHandleExW") called from "PROCMON.EXE" at address 0x00F38665 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetFileInformationByHandleW") called from "PROCMON.EXE" at address 0x00F38678 and returned NULL. Error:     (127).
LoadLibraryW("uxtheme.dll") called from "PROCMON.EXE" at address 0x00EC126B.
Loaded "UXTHEME.DLL" at address 0x73890000.  Successfully hooked module.
DllMain(0x73890000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
DllMain(0x73890000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1).
LoadLibraryW("uxtheme.dll") returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "IsThemeActive") called from "PROCMON.EXE" at address 0x00EC12F5 and returned 0x738B6F36.
GetProcAddress(0x73890000 [UXTHEME.DLL], "OpenThemeData") called from "PROCMON.EXE" at address 0x00EC1325 and returned 0x738A5F29.
GetProcAddress(0x73890000 [UXTHEME.DLL], "DrawThemeBackground") called from "PROCMON.EXE" at address 0x00EC12C5 and returned 0x738AD464.
GetProcAddress(0x73890000 [UXTHEME.DLL], "CloseThemeData") called from "PROCMON.EXE" at address 0x00EC1295 and returned 0x738A1FA1.
LoadLibraryW("comctl32.dll") called from "PROCMON.EXE" at address 0x00EEE790.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
GetProcAddress(0x702D0000 [COMCTL32.DLL], "DllGetVersion") called from "PROCMON.EXE" at address 0x00EEE797 and returned 0x7032A7BD.
GetProcAddress(0x77760000 [NTDLL.DLL], "NtOpenSymbolicLinkObject") called from "PROCMON.EXE" at address 0x00EC15E7 and returned 0x777810B0.
GetProcAddress(0x77760000 [NTDLL.DLL], "NtQuerySymbolicLinkObject") called from "PROCMON.EXE" at address 0x00EC1607 and returned 0x777814E8.
GetProcAddress(0x77760000 [NTDLL.DLL], "NtClose") called from "PROCMON.EXE" at address 0x00EC15C7 and returned 0x7777F970.
LoadLibraryW("Kernel32.dll") called from "PROCMON.EXE" at address 0x00F1E88C.
LoadLibraryW("Kernel32.dll") returned 0x76C00000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetDllDirectoryW") called from "PROCMON.EXE" at address 0x00F1E895 and returned 0x76C90347.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsWow64Process") called from "PROCMON.EXE" at address 0x00F1E8B3 and returned 0x76C11592.
LoadLibraryW("kernel32.dll") called from "PROCMON.EXE" at address 0x00EF70B7.
LoadLibraryW("kernel32.dll") returned 0x76C00000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetNativeSystemInfo") called from "PROCMON.EXE" at address 0x00EF70BE and returned 0x76C1E067.
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x756581B7.
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) returned 0x75E40000.
GetProcAddress(0x75E40000 [SHELL32.DLL], "SHGetInstanceExplorer") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x75E866D0.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x756581B7.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) returned 0x75400000.
GetProcAddress(0x75400000 [OLE32.DLL], "OleInitialize") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x7541EF3B.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x757A982D.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x757A986D and returned 0x738A4571.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x757A982D.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x757A986D and returned 0x738A4571.
GetProcAddress(0x75790000 [USER32.DLL], "IsProcessDPIAware") called from "UXTHEME.DLL" at address 0x738A4F6B and returned 0x757A79AB.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x757A982D.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x757A986D and returned 0x738A4571.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x757A982D.
LoadLibraryExW("C:\Windows\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "ThemeInitApiHook") called from "USER32.DLL" at address 0x757A986D and returned 0x738A4571.
GetProcAddress(0x75400000 [OLE32.DLL], "CoTaskMemAlloc") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x7545415C.
Loaded "PROPSYS.DLL" at address 0x701D0000.  Successfully hooked module.
DllMain(0x701D0000, DLL_PROCESS_ATTACH, 0x00000000) in "PROPSYS.DLL" called.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "PROPSYS.DLL" at address 0x701DE3C4.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegisterTraceGuidsW") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x7779F8C0.
LoadLibraryExW("propsys.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "PROPSYS.DLL" at address 0x701DE2DB.
Mapped "PROPSYS.DLL" as a data file into memory at address 0x701D0000.
LoadLibraryExW("propsys.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x701D0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventRegister") called from "PROPSYS.DLL" at address 0x701DDE1C and returned 0x7779F737.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventUnregister") called from "PROPSYS.DLL" at address 0x701DDE43 and returned 0x777AD941.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventEnabled") called from "PROPSYS.DLL" at address 0x701DDE50 and returned 0x77798932.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventWrite") called from "PROPSYS.DLL" at address 0x701DDE5D and returned 0x777B6891.
DllMain(0x701D0000, DLL_PROCESS_ATTACH, 0x00000000) in "PROPSYS.DLL" returned 1 (0x1).
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x75EACE5C.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x75EACE5C.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
GetProcAddress(0x75E40000 [SHELL32.DLL], 0x00000066) called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x75EDF62D.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x756581B7.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenThreadToken") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x74FCB79C.
Loaded "CLBCATQ.DLL" at address 0x75C00000.  Successfully hooked module.
DllMain(0x75C00000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" called.
DllMain(0x75C00000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" returned 1 (0x1).
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "InitializeSecurityDescriptor") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FCBB1D.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "SetEntriesInAclW") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FC350E.
LoadLibraryW("ntmarta.dll") called from "ADVAPI32.DLL" at address 0x74FC33C3.
Loaded "NTMARTA.DLL" at address 0x73A00000.  Successfully hooked module.
Loaded "WLDAP32.DLL" at address 0x76E50000.  Successfully hooked module.
DllMain(0x76E50000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76E50000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x73A00000, DLL_PROCESS_ATTACH, 0x00000000) in "NTMARTA.DLL" called.
DllMain(0x73A00000, DLL_PROCESS_ATTACH, 0x00000000) in "NTMARTA.DLL" returned 1 (0x1).
LoadLibraryW("ntmarta.dll") returned 0x73A00000.
GetProcAddress(0x73A00000 [NTMARTA.DLL], "GetMartaExtensionInterface") called from "ADVAPI32.DLL" at address 0x74FC33D9 and returned 0x73A021F2.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "SetSecurityDescriptorDacl") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FCB82F.
Loaded "PROFAPI.DLL" at address 0x73430000.  Successfully hooked module.
DllMain(0x73430000, DLL_PROCESS_ATTACH, 0x00000000) in "PROFAPI.DLL" called.
DllMain(0x73430000, DLL_PROCESS_ATTACH, 0x00000000) in "PROFAPI.DLL" returned 1 (0x1).
Loaded "APPHELP.DLL" at address 0x73840000.  Successfully hooked module.
DllMain(0x73840000, DLL_PROCESS_ATTACH, 0x00000000) in "APPHELP.DLL" called.
DllMain(0x73840000, DLL_PROCESS_ATTACH, 0x00000000) in "APPHELP.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\system32\twext.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "TWEXT.DLL" as a data file into memory at address 0x54310002.
LoadLibraryExW("C:\Windows\system32\twext.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x54310002.
LoadLibraryExW("C:\Windows\system32\twext.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "TWEXT.DLL" as a data file into memory at address 0x54060002.
LoadLibraryExW("C:\Windows\system32\twext.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x54060002.
Loaded "" at address 0x54310000.  Successfully hooked module.
Unloaded "" at address 0x54310000.
Loaded "TWEXT.DLL" at address 0x54060000.  Successfully hooked module.
DllMain(0x54060000, DLL_PROCESS_ATTACH, 0x00000000) in "TWEXT.DLL" called.
LoadLibraryW("comctl32.dll") called from "TWEXT.DLL" at address 0x5406F946.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
DllMain(0x54060000, DLL_PROCESS_ATTACH, 0x00000000) in "TWEXT.DLL" returned 1 (0x1).
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegOpenKeyExW") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FCBEC4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegGetValueW") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FC18CB.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegCloseKey") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FCBED4.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) called from "TWEXT.DLL" at address 0x5406EC07.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) returned 0x75400000.
GetProcAddress(0x75400000 [OLE32.DLL], "CoTaskMemFree") called from "TWEXT.DLL" at address 0x5406EC97 and returned 0x7545410B.
GetProcAddress(0x75E40000 [SHELL32.DLL], 0x00000042) called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x75EE48E9.
LoadLibraryExA("API-MS-Win-Security-LSALookup-L1-1-0.dll", 0x00000000, 0x00000000) called from "ADVAPI32.DLL" at address 0x74FCBDD5.
LoadLibraryExA("API-MS-Win-Security-LSALookup-L1-1-0.dll", 0x00000000, 0x00000000) returned 0x76AD0000.
GetProcAddress(0x76AD0000 [SECHOST.DLL], "LookupAccountSidLocalW") called from "ADVAPI32.DLL" at address 0x74FCBE39 and returned 0x76AE05DA.
Loaded "CRYPTSP.DLL" at address 0x71540000.  Successfully hooked module.
DllMain(0x71540000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPTSP.DLL" called.
DllMain(0x71540000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPTSP.DLL" returned 1 (0x1).
Loaded "RSAENH.DLL" at address 0x71500000.  Successfully hooked module.
DllMain(0x71500000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called.
DllMain(0x71500000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1).
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "RSAENH.DLL" at address 0x715058D0.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenThreadToken") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB79C.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenProcessToken") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB7C4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "GetTokenInformation") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB7B4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AllocateAndInitializeSid") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB7DC.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EqualSid") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB633.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "FreeSid") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74FCB7F4.
LoadLibraryExA("CRYPTBASE.dll", 0x00000000, 0x00000000) called from "RSAENH.DLL" at address 0x715058D0.
LoadLibraryExA("CRYPTBASE.dll", 0x00000000, 0x00000000) returned 0x74E30000.
GetProcAddress(0x74E30000 [CRYPTBASE.DLL], "SystemFunction036") called from "RSAENH.DLL" at address 0x715057EF and returned 0x74E312F0.
Loaded "RPCRTREMOTE.DLL" at address 0x714F0000.  Successfully hooked module.
DllMain(0x714F0000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRTREMOTE.DLL" called.
DllMain(0x714F0000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRTREMOTE.DLL" returned 1 (0x1).
Loaded "HASHCHECK.DLL" at address 0x00A20000.  Successfully hooked module.
DllMain(0x00A20000, DLL_PROCESS_ATTACH, 0x00000000) in "HASHCHECK.DLL" called.
DllMain(0x00A20000, DLL_PROCESS_ATTACH, 0x00000000) in "HASHCHECK.DLL" returned 1 (0x1).
GetProcAddress(0x75400000 [OLE32.DLL], "CoTaskMemFree") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x7545410B.
Loaded "SHELL32.DLL" at address 0x20EF0000.  Successfully hooked module.
Unloaded "SHELL32.DLL" at address 0x20EF0000.
Loaded "USERENV.DLL" at address 0x720A0000.  Successfully hooked module.
DllMain(0x720A0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" called.
DllMain(0x720A0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" returned 1 (0x1).
GetProcAddress(0x75400000 [OLE32.DLL], "CoGetMalloc") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x75442C8C.
LoadLibraryExW("C:\Windows\System32\shdocvw.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "SHDOCVW.DLL" as a data file into memory at address 0x63E90002.
LoadLibraryExW("C:\Windows\System32\shdocvw.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x63E90002.
LoadLibraryExW("C:\Windows\System32\shdocvw.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "SHDOCVW.DLL" as a data file into memory at address 0x63E90002.
LoadLibraryExW("C:\Windows\System32\shdocvw.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x63E90002.
Loaded "" at address 0x63E90000.  Successfully hooked module.
Unloaded "" at address 0x63E90000.
Loaded "SHDOCVW.DLL" at address 0x63E90000.  Successfully hooked module.
DllMain(0x63E90000, DLL_PROCESS_ATTACH, 0x00000000) in "SHDOCVW.DLL" called.
DllMain(0x63E90000, DLL_PROCESS_ATTACH, 0x00000000) in "SHDOCVW.DLL" returned 1 (0x1).
LoadLibraryExA("PROPSYS.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x756581B7.
LoadLibraryExA("PROPSYS.dll", 0x00000000, 0x00000000) returned 0x701D0000.
GetProcAddress(0x701D0000 [PROPSYS.DLL], "PSPropertyBag_ReadDWORD") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x701E42EC.
LoadLibraryExA("OLEAUT32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x756581B7.
LoadLibraryExA("OLEAUT32.dll", 0x00000000, 0x00000000) returned 0x74F20000.
GetProcAddress(0x74F20000 [OLEAUT32.DLL], 0x00000008) called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x74F23ED5.
GetProcAddress(0x701D0000 [PROPSYS.DLL], "PSPropertyBag_ReadBSTR") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x701E3F13.
GetProcAddress(0x701D0000 [PROPSYS.DLL], "PSPropertyBag_ReadGUID") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x701E4395.
GetProcAddress(0x74F20000 [OLEAUT32.DLL], 0x00000096) called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x74F24731.
Loaded "SETUPAPI.DLL" at address 0x75090000.  Successfully hooked module.
Loaded "CFGMGR32.DLL" at address 0x76A90000.  Successfully hooked module.
Loaded "DEVOBJ.DLL" at address 0x76DE0000.  Successfully hooked module.
DllMain(0x76A90000, DLL_PROCESS_ATTACH, 0x00000000) in "CFGMGR32.DLL" called.
DllMain(0x76A90000, DLL_PROCESS_ATTACH, 0x00000000) in "CFGMGR32.DLL" returned 1 (0x1).
DllMain(0x76DE0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEVOBJ.DLL" called.
DllMain(0x76DE0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEVOBJ.DLL" returned 1 (0x1).
DllMain(0x75090000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" called.
LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "SETUPAPI.DLL" at address 0x7509C2DC.
LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x76C00000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "RegQueryValueExW") called from "SETUPAPI.DLL" at address 0x7509C296 and returned 0x76C12182.
DllMain(0x75090000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\system32\shell32.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
Loaded "SHELL32.DLL" at address 0x211B0000.  Successfully hooked module.
Unloaded "SHELL32.DLL" at address 0x211B0000.
LoadLibraryExW("C:\Windows\system32\shell32.dll", 0x00000000, 0x00000000) returned 0x75E40000.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "GROOVEEX.DLL" as a data file into memory at address 0x635F0002.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x635F0002.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "GROOVEEX.DLL" as a data file into memory at address 0x635F0002.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x635F0002.
Loaded "" at address 0x635F0000.  Successfully hooked module.
Unloaded "" at address 0x635F0000.
Loaded "GROOVEEX.DLL" at address 0x635F0000.  Successfully hooked module.
Loaded "MSVCR90.DLL" at address 0x54370000.  Successfully hooked module.
Loaded "MSVCP90.DLL" at address 0x54240000.  Successfully hooked module.
Loaded "ATL90.DLL" at address 0x54340000.  Successfully hooked module.
DllMain(0x54370000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR90.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR90.DLL" at address 0x54393ACC and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR90.DLL" at address 0x54393AD9 and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR90.DLL" at address 0x54393AE6 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "MSVCR90.DLL" at address 0x54393AF3 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x5439379B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x543937AB and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsProcessorFeaturePresent") called from "MSVCR90.DLL" at address 0x543F386B and returned 0x76C14F3A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FindActCtxSectionStringW") called from "MSVCR90.DLL" at address 0x54392822 and returned 0x76C1B5D5.
DllMain(0x54370000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR90.DLL" returned 1 (0x1).
DllMain(0x54240000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCP90.DLL" called.
DllMain(0x54240000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCP90.DLL" returned 1 (0x1).
DllMain(0x54340000, DLL_PROCESS_ATTACH, 0x00000000) in "ATL90.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "ATL90.DLL" at address 0x5435520A and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "ATL90.DLL" at address 0x54355217 and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "ATL90.DLL" at address 0x54355224 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "ATL90.DLL" at address 0x54355231 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354EEF and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354EFF and returned 0x77799DA5.
DllMain(0x54340000, DLL_PROCESS_ATTACH, 0x00000000) in "ATL90.DLL" returned 1 (0x1).
DllMain(0x635F0000, DLL_PROCESS_ATTACH, 0x00000000) in "GROOVEEX.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "HeapSetInformation") called from "GROOVEEX.DLL" at address 0x6386EA35 and returned 0x76C1BED6.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventWrite") called from "GROOVEEX.DLL" at address 0x6385F866 and returned 0x777B6891.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventRegister") called from "GROOVEEX.DLL" at address 0x6385F877 and returned 0x7779F737.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventUnregister") called from "GROOVEEX.DLL" at address 0x6385F888 and returned 0x777AD941.
GetProcAddress(0x00EC0000 [PROCMON.EXE], "GrooveChainGetGlobalInterfacePtrAddress") called from "GROOVEEX.DLL" at address 0x638B4B1E and returned NULL. Error:     (127).
GetProcAddress(0x00EC0000 [PROCMON.EXE], "GrooveChainCoCreateInstance") called from "GROOVEEX.DLL" at address 0x638B4B39 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "GROOVEEX.DLL" at address 0x63873E0E and returned 0x777A103B.
DllMain(0x635F0000, DLL_PROCESS_ATTACH, 0x00000000) in "GROOVEEX.DLL" returned 1 (0x1).
LoadLibraryExA("CRYPTSP.dll", 0x00000000, 0x00000000) called from "ADVAPI32.DLL" at address 0x74FCBDD5.
LoadLibraryExA("CRYPTSP.dll", 0x00000000, 0x00000000) returned 0x71540000.
GetProcAddress(0x71540000 [CRYPTSP.DLL], "CryptAcquireContextA") called from "ADVAPI32.DLL" at address 0x74FCBE39 and returned 0x715442A3.
GetProcAddress(0x71540000 [CRYPTSP.DLL], "CryptGenRandom") called from "ADVAPI32.DLL" at address 0x74FCBE39 and returned 0x71544F73.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) called from "GROOVEEX.DLL" at address 0x6386BD66.
Loaded "OFFICE.ODF" at address 0x631D0000.  Successfully hooked module.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) returned 0x631D0000.
Unloaded "OFFICE.ODF" at address 0x631D0000.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) called from "GROOVEEX.DLL" at address 0x6386BD66.
Loaded "OFFICE.ODF" at address 0x631D0000.  Successfully hooked module.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) returned 0x631D0000.
Unloaded "OFFICE.ODF" at address 0x631D0000.
Loaded "RAREXT32.DLL" at address 0x54020000.  Successfully hooked module.
DllMain(0x54020000, DLL_PROCESS_ATTACH, 0x00000000) in "RAREXT32.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "RAREXT32.DLL" at address 0x54033B0D and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "RAREXT32.DLL" at address 0x54033B1A and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "RAREXT32.DLL" at address 0x54033B27 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "RAREXT32.DLL" at address 0x54033B34 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x540336BC and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x5403380B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x5403381B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsProcessorFeaturePresent") called from "RAREXT32.DLL" at address 0x5403754A and returned 0x76C14F3A.
LoadLibraryExW("C:\Program Files\WinRAR\rarlng.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "RAREXT32.DLL" at address 0x5402D8FC.
Mapped "RARLNG.DLL" as a data file into memory at address 0x20C50001.
LoadLibraryExW("C:\Program Files\WinRAR\rarlng.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x20C50001.
DllMain(0x54020000, DLL_PROCESS_ATTACH, 0x00000000) in "RAREXT32.DLL" returned 1 (0x1).
LoadLibraryW("C:\Program Files\WinRAR\Formats\tar.fmt") called from "RAREXT32.DLL" at address 0x54024ABB.
LoadLibraryW("C:\Program Files\WinRAR\Formats\tar.fmt") returned NULL. Error: %1    Win32 (193).
LoadLibraryW("C:\Program Files\WinRAR\Formats\gz.fmt") called from "RAREXT32.DLL" at address 0x54024ABB.
LoadLibraryW("C:\Program Files\WinRAR\Formats\gz.fmt") returned NULL. Error: %1    Win32 (193).
LoadLibraryW("C:\Program Files\WinRAR\Formats\arj.fmt") called from "RAREXT32.DLL" at address 0x54024ABB.
LoadLibraryW("C:\Program Files\WinRAR\Formats\arj.fmt") returned NULL. Error: %1    Win32 (193).
Loaded "WINDOWSCODECS.DLL" at address 0x72E40000.  Successfully hooked module.
DllMain(0x72E40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINDOWSCODECS.DLL" called.
DllMain(0x72E40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINDOWSCODECS.DLL" returned 1 (0x1).
LoadLibraryW("UxTheme.dll") called from "RAREXT32.DLL" at address 0x5402A79B.
LoadLibraryW("UxTheme.dll") returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "IsAppThemed") called from "RAREXT32.DLL" at address 0x5402A7AE and returned 0x738B7009.
LoadLibraryW("Shell32.dll") called from "RAREXT32.DLL" at address 0x5402A49F.
LoadLibraryW("Shell32.dll") returned 0x75E40000.
GetProcAddress(0x75E40000 [SHELL32.DLL], "SHCreateItemFromParsingName") called from "RAREXT32.DLL" at address 0x5402A4B1 and returned 0x75E92C08.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryValueExW") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x74FCBCD5.
LoadLibraryW("UxTheme.dll") called from "RAREXT32.DLL" at address 0x5402A79B.
LoadLibraryW("UxTheme.dll") returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "IsAppThemed") called from "RAREXT32.DLL" at address 0x5402A7AE and returned 0x738B7009.
LoadLibraryW("UxTheme.dll") called from "RAREXT32.DLL" at address 0x5402A79B.
LoadLibraryW("UxTheme.dll") returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "IsAppThemed") called from "RAREXT32.DLL" at address 0x5402A7AE and returned 0x738B7009.
LoadLibraryW("UxTheme.dll") called from "RAREXT32.DLL" at address 0x5402A79B.
LoadLibraryW("UxTheme.dll") returned 0x73890000.
GetProcAddress(0x73890000 [UXTHEME.DLL], "IsAppThemed") called from "RAREXT32.DLL" at address 0x5402A7AE and returned 0x738B7009.
Loaded "WINCDEMUCONTEXTMENU.DLL" at address 0x53E00000.  Successfully hooked module.
DllMain(0x53E00000, DLL_PROCESS_ATTACH, 0x00000000) in "WINCDEMUCONTEXTMENU.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "WINCDEMUCONTEXTMENU.DLL" at address 0x53E1276E and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "WINCDEMUCONTEXTMENU.DLL" at address 0x53E1277B and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "WINCDEMUCONTEXTMENU.DLL" at address 0x53E12788 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "WINCDEMUCONTEXTMENU.DLL" at address 0x53E12795 and returned 0x76C13954.
DllMain(0x53E00000, DLL_PROCESS_ATTACH, 0x00000000) in "WINCDEMUCONTEXTMENU.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "NTSHRUI.DLL" as a data file into memory at address 0x72650002.
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x72650002.
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "NTSHRUI.DLL" as a data file into memory at address 0x72650002.
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x72650002.
Loaded "" at address 0x72650000.  Successfully hooked module.
Unloaded "" at address 0x72650000.
Loaded "NTSHRUI.DLL" at address 0x72650000.  Successfully hooked module.
DllMain(0x72650000, DLL_PROCESS_ATTACH, 0x00000000) in "NTSHRUI.DLL" called.
DllMain(0x72650000, DLL_PROCESS_ATTACH, 0x00000000) in "NTSHRUI.DLL" returned 1 (0x1).
LoadLibraryExA("srvcli.dll", 0x00000000, 0x00000000) called from "NTSHRUI.DLL" at address 0x72651B70.
Loaded "SRVCLI.DLL" at address 0x739A0000.  Successfully hooked module.
DllMain(0x739A0000, DLL_PROCESS_ATTACH, 0x00000000) in "SRVCLI.DLL" called.
DllMain(0x739A0000, DLL_PROCESS_ATTACH, 0x00000000) in "SRVCLI.DLL" returned 1 (0x1).
LoadLibraryExA("srvcli.dll", 0x00000000, 0x00000000) returned 0x739A0000.
GetProcAddress(0x739A0000 [SRVCLI.DLL], "NetShareEnum") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x739A3F91.
LoadLibraryW("cscapi.dll") called from "SRVCLI.DLL" at address 0x739A3E75.
Loaded "CSCAPI.DLL" at address 0x72640000.  Successfully hooked module.
DllMain(0x72640000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCAPI.DLL" called.
DllMain(0x72640000, DLL_PROCESS_ATTACH, 0x00000000) in "CSCAPI.DLL" returned 1 (0x1).
LoadLibraryW("cscapi.dll") returned 0x72640000.
GetProcAddress(0x72640000 [CSCAPI.DLL], "CscNetApiGetInterface") called from "SRVCLI.DLL" at address 0x739A3E94 and returned 0x72641881.
LoadLibraryExA("slc.dll", 0x00000000, 0x00000000) called from "NTSHRUI.DLL" at address 0x72651B70.
Loaded "SLC.DLL" at address 0x720D0000.  Successfully hooked module.
DllMain(0x720D0000, DLL_PROCESS_ATTACH, 0x00000000) in "SLC.DLL" called.
DllMain(0x720D0000, DLL_PROCESS_ATTACH, 0x00000000) in "SLC.DLL" returned 1 (0x1).
LoadLibraryExA("slc.dll", 0x00000000, 0x00000000) returned 0x720D0000.
GetProcAddress(0x720D0000 [SLC.DLL], "SLGetWindowsInformationDWORD") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x720D215B.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "NTSHRUI.DLL" at address 0x72651B70.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegOpenKeyExW") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x74FCBEC4.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) called from "NTSHRUI.DLL" at address 0x72651B70.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) returned 0x75400000.
GetProcAddress(0x75400000 [OLE32.DLL], "CoTaskMemAlloc") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x7545415C.
GetProcAddress(0x75400000 [OLE32.DLL], "CoCreateInstance") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x7545590C.
LoadLibraryW("comctl32.dll") called from "NTSHRUI.DLL" at address 0x726573A4.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
LoadLibraryW("comctl32.dll") called from "NTSHRUI.DLL" at address 0x726573A4.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000148) called from "NTSHRUI.DLL" at address 0x7265741B and returned 0x703066DD.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenThreadToken") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x74FCB79C.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenProcessToken") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x74FCB7C4.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x0000014E) called from "NTSHRUI.DLL" at address 0x7265741B and returned 0x703041AE.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x0000014C) called from "NTSHRUI.DLL" at address 0x7265741B and returned 0x703064F2.
GetProcAddress(0x75400000 [OLE32.DLL], "CoGetCallContext") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x75417122.
GetProcAddress(0x75400000 [OLE32.DLL], "CoTaskMemFree") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x7545410B.
LoadLibraryExA("netutils.dll", 0x00000000, 0x00000000) called from "NTSHRUI.DLL" at address 0x72651B70.
Loaded "NETUTILS.DLL" at address 0x739C0000.  Successfully hooked module.
DllMain(0x739C0000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUTILS.DLL" called.
DllMain(0x739C0000, DLL_PROCESS_ATTACH, 0x00000000) in "NETUTILS.DLL" returned 1 (0x1).
LoadLibraryExA("netutils.dll", 0x00000000, 0x00000000) returned 0x739C0000.
GetProcAddress(0x739C0000 [NETUTILS.DLL], "NetApiBufferFree") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x739C13D2.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000182) called from "NTSHRUI.DLL" at address 0x7265741B and returned 0x7030665D.
Loaded "MSCOREE.DLL" at address 0x72810000.  Successfully hooked module.
DllMain(0x72810000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCOREE.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "MSCOREE.DLL" at address 0x72816F3C and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "MSCOREE.DLL" at address 0x72816F49 and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "MSCOREE.DLL" at address 0x72816F56 and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "MSCOREE.DLL" at address 0x72816F63 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x72812B97 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812BA7 and returned 0x77799DA5.
DllMain(0x72810000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCOREE.DLL" returned 1 (0x1).
LoadLibraryA("ADVAPI32.dll") called from "MSCOREE.DLL" at address 0x72815D58.
LoadLibraryA("ADVAPI32.dll") returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegOpenKeyExW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBEC4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryInfoKeyW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBB42.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegEnumKeyExW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBB65.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegEnumValueW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBB72.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegCloseKey") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBED4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryValueExW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBCD5.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryValueExW") called from "MSCOREE.DLL" at address 0x72815E6F and returned 0x74FCBCD5.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MSCOREE.DLL" at address 0x72814B0F.
Loaded "MSCOREEI.DLL" at address 0x72790000.  Successfully hooked module.
DllMain(0x72790000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCOREEI.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "MSCOREEI.DLL" at address 0x7279F8B6 and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "MSCOREEI.DLL" at address 0x7279F8C9 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "MSCOREEI.DLL" at address 0x7279F8DC and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "MSCOREEI.DLL" at address 0x7279F8EF and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "MSCOREEI.DLL" at address 0x7279F902 and returned 0x76C1386B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateEventExW") called from "MSCOREEI.DLL" at address 0x7279F915 and returned 0x76C943B3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSemaphoreExW") called from "MSCOREEI.DLL" at address 0x7279F928 and returned 0x76C9443D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadStackGuarantee") called from "MSCOREEI.DLL" at address 0x7279F93B and returned 0x76C1D81D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolTimer") called from "MSCOREEI.DLL" at address 0x7279F94E and returned 0x76C2E6E3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolTimer") called from "MSCOREEI.DLL" at address 0x7279F961 and returned 0x777B3067.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "WaitForThreadpoolTimerCallbacks") called from "MSCOREEI.DLL" at address 0x7279F974 and returned 0x777CDC9A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolTimer") called from "MSCOREEI.DLL" at address 0x7279F987 and returned 0x777CDB0D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolWait") called from "MSCOREEI.DLL" at address 0x7279F99A and returned 0x76C2E759.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolWait") called from "MSCOREEI.DLL" at address 0x7279F9AD and returned 0x777A4CF3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolWait") called from "MSCOREEI.DLL" at address 0x7279F9C0 and returned 0x777D3CDA.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlushProcessWriteBuffers") called from "MSCOREEI.DLL" at address 0x7279F9D3 and returned 0x77780B2C.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FreeLibraryWhenCallbackReturns") called from "MSCOREEI.DLL" at address 0x7279F9E6 and returned 0x77840098.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentProcessorNumber") called from "MSCOREEI.DLL" at address 0x7279F9F9 and returned 0x777D7029.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLogicalProcessorInformation") called from "MSCOREEI.DLL" at address 0x7279FA0C and returned 0x76C949F9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSymbolicLinkW") called from "MSCOREEI.DLL" at address 0x7279FA1F and returned 0x76C8CF71.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetDefaultDllDirectories") called from "MSCOREEI.DLL" at address 0x7279FA32 and returned 0x76E1207D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumSystemLocalesEx") called from "MSCOREEI.DLL" at address 0x7279FA45 and returned 0x76C944F7.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CompareStringEx") called from "MSCOREEI.DLL" at address 0x7279FA58 and returned 0x76C94949.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetDateFormatEx") called from "MSCOREEI.DLL" at address 0x7279FA6B and returned 0x76CA65B6.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "MSCOREEI.DLL" at address 0x7279FA7E and returned 0x76C949E9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTimeFormatEx") called from "MSCOREEI.DLL" at address 0x7279FA91 and returned 0x76CA6531.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetUserDefaultLocaleName") called from "MSCOREEI.DLL" at address 0x7279FAA4 and returned 0x76C94A59.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsValidLocaleName") called from "MSCOREEI.DLL" at address 0x7279FAB7 and returned 0x76C94A79.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "LCMapStringEx") called from "MSCOREEI.DLL" at address 0x7279FACA and returned 0x76C94A89.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentPackageId") called from "MSCOREEI.DLL" at address 0x7279FADD and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTickCount64") called from "MSCOREEI.DLL" at address 0x7279FAF0 and returned 0x76C2CEB0.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetFileInformationByHandleExW") called from "MSCOREEI.DLL" at address 0x7279FB03 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetFileInformationByHandleW") called from "MSCOREEI.DLL" at address 0x7279FB16 and returned NULL. Error:     (127).
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "MSCOREEI.DLL" at address 0x72797FC7.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x74FB0000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventRegister") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x7779F737.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventSetInformation") called from "MSCOREEI.DLL" at address 0x727A0079 and returned NULL. Error:     (127).
GetProcAddress(0x72810000 [MSCOREE.DLL], 0x0000008E) called from "MSCOREEI.DLL" at address 0x727A0351 and returned 0x72824C4D.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegOpenKeyExW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x74FCBEC4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryValueExW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x74FCBCD5.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegCloseKey") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x74FCBED4.
DllMain(0x72790000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCOREEI.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x72790000.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "RegisterShimImplCallback") called from "MSCOREE.DLL" at address 0x72817E9C and returned 0x727913C3.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "RegisterShimImplCleanupCallback") called from "MSCOREE.DLL" at address 0x72817EA8 and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "SetShellShimInstance") called from "MSCOREE.DLL" at address 0x7281C820 and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "OnShimDllMainCalled") called from "MSCOREE.DLL" at address 0x7281C84A and returned 0x727995B6.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "DllGetClassObject_RetAddr") called from "MSCOREE.DLL" at address 0x728251A1 and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "DllGetClassObject") called from "MSCOREE.DLL" at address 0x728251D8 and returned 0x727B85BA.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegQueryInfoKeyW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x74FCBB42.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegEnumKeyExW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x74FCBB65.
LoadLibraryExW("sxs.dll", 0x00000000, 0x00000000) called from "MSCOREEI.DLL" at address 0x727CFF1E.
Loaded "SXS.DLL" at address 0x73B10000.  Successfully hooked module.
DllMain(0x73B10000, DLL_PROCESS_ATTACH, 0x00000000) in "SXS.DLL" called.
DllMain(0x73B10000, DLL_PROCESS_ATTACH, 0x00000000) in "SXS.DLL" returned 1 (0x1).
LoadLibraryExW("sxs.dll", 0x00000000, 0x00000000) returned 0x73B10000.
GetProcAddress(0x73B10000 [SXS.DLL], "SxsLookupClrGuid") called from "MSCOREEI.DLL" at address 0x727CFF33 and returned 0x73B425B1.
LoadLibraryExA("VERSION.dll", 0x00000000, 0x00000000) called from "MSCOREEI.DLL" at address 0x72797FC7.
LoadLibraryExA("VERSION.dll", 0x00000000, 0x00000000) returned 0x73A90000.
GetProcAddress(0x73A90000 [VERSION.DLL], "GetFileVersionInfoSizeW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x73A919D9.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "VERSION.DLL" at address 0x73A91919.
Mapped "CLR.DLL" as a data file into memory at address 0x52BE0002.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x52BE0002.
GetProcAddress(0x73A90000 [VERSION.DLL], "GetFileVersionInfoW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x73A919F4.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "VERSION.DLL" at address 0x73A91A45.
Mapped "CLR.DLL" as a data file into memory at address 0x52BE0002.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x52BE0002.
GetProcAddress(0x73A90000 [VERSION.DLL], "VerQueryValueW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x73A91B51.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "MSCOREEI.DLL" at address 0x7279D1DC.
Loaded "CLR.DLL" at address 0x52BE0000.  Successfully hooked module.
Loaded "MSVCR120_CLR0400.DLL" at address 0x53F20000.  Successfully hooked module.
DllMain(0x53F20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR120_CLR0400.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD66A and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD681 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD698 and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD6AF and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD6C6 and returned 0x76C1386B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateEventExW") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD6DD and returned 0x76C943B3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSemaphoreExW") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD6F4 and returned 0x76C9443D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadStackGuarantee") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD70B and returned 0x76C1D81D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolTimer") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD722 and returned 0x76C2E6E3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolTimer") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD739 and returned 0x777B3067.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "WaitForThreadpoolTimerCallbacks") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD750 and returned 0x777CDC9A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolTimer") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD767 and returned 0x777CDB0D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateThreadpoolWait") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD77E and returned 0x76C2E759.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetThreadpoolWait") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD795 and returned 0x777A4CF3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CloseThreadpoolWait") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD7AC and returned 0x777D3CDA.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlushProcessWriteBuffers") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD7C3 and returned 0x77780B2C.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FreeLibraryWhenCallbackReturns") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD7DA and returned 0x77840098.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentProcessorNumber") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD7F1 and returned 0x777D7029.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLogicalProcessorInformation") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD808 and returned 0x76C949F9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateSymbolicLinkW") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD81F and returned 0x76C8CF71.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetDefaultDllDirectories") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD836 and returned 0x76E1207D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumSystemLocalesEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD84D and returned 0x76C944F7.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CompareStringEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD864 and returned 0x76C94949.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetDateFormatEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD87B and returned 0x76CA65B6.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD892 and returned 0x76C949E9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTimeFormatEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD8A9 and returned 0x76CA6531.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetUserDefaultLocaleName") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD8C0 and returned 0x76C94A59.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "IsValidLocaleName") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD8D7 and returned 0x76C94A79.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "LCMapStringEx") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD8EE and returned 0x76C94A89.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentPackageId") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD905 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetTickCount64") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD91C and returned 0x76C2CEB0.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetFileInformationByHandleExW") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD933 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "SetFileInformationByHandleW") called from "MSVCR120_CLR0400.DLL" at address 0x53FBD94A and returned NULL. Error:     (127).
DllMain(0x53F20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR120_CLR0400.DLL" returned 1 (0x1).
DllMain(0x52BE0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLR.DLL" called.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventSetInformation") called from "CLR.DLL" at address 0x52D14553 and returned NULL. Error:     (127).
DllMain(0x52BE0000, DLL_PROCESS_ATTACH, 0x00000000) in "CLR.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x52BE0000.
GetProcAddress(0x52BE0000 [CLR.DLL], "SetRuntimeInfo") called from "MSCOREEI.DLL" at address 0x7279B601 and returned 0x52C80A87.
GetProcAddress(0x52BE0000 [CLR.DLL], "DllGetClassObjectInternal") called from "MSCOREEI.DLL" at address 0x7279E724 and returned 0x52C82392.
LoadLibraryExW("api-ms-win-core-quirks-l1-1-0.dll", 0x00000000, 0x00000800) called from "CLR.DLL" at address 0x52D0E739.
LoadLibraryExW("api-ms-win-core-quirks-l1-1-0.dll", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "CLR.DLL" at address 0x52CA9D3A.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned NULL. Error:     (126).
LoadLibraryExA("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52D4276E.
LoadLibraryExA("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
GetProcAddress(0x72810000 [MSCOREE.DLL], "CreateConfigStream") called from "CLR.DLL" at address 0x52CDD18B and returned 0x72817DD7.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "CreateConfigStream_RetAddr") called from "MSCOREE.DLL" at address 0x7281CB2D and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "CreateConfigStream") called from "MSCOREE.DLL" at address 0x72817F68 and returned 0x72799668.
LoadLibraryExA("SHLWAPI.dll", 0x00000000, 0x00000000) called from "MSCOREEI.DLL" at address 0x72797FC7.
LoadLibraryExA("SHLWAPI.dll", 0x00000000, 0x00000000) returned 0x75640000.
GetProcAddress(0x75640000 [SHLWAPI.DLL], "UrlIsW") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x756553E6.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetNumaHighestNodeNumber") called from "CLR.DLL" at address 0x52D14797 and returned 0x76C923AA.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsSetValue") called from "CLR.DLL" at address 0x52CFE91F and returned 0x76C118E4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsGetValue") called from "CLR.DLL" at address 0x52CFE92C and returned 0x76C1123D.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsAlloc") called from "CLR.DLL" at address 0x52CFE939 and returned 0x76C11F22.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FlsFree") called from "CLR.DLL" at address 0x52CFE946 and returned 0x76C13954.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "CLR.DLL" at address 0x52D14B6E and returned 0x76C19FAE.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AllocateAndInitializeSid") called from "CLR.DLL" at address 0x52D08E52 and returned 0x74FCB7DC.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenProcessToken") called from "CLR.DLL" at address 0x52CFEFEC and returned 0x74FCB7C4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "GetTokenInformation") called from "CLR.DLL" at address 0x52CFF00F and returned 0x74FCB7B4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "InitializeAcl") called from "CLR.DLL" at address 0x52D08F7F and returned 0x74FCBAFA.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AddAccessAllowedAce") called from "CLR.DLL" at address 0x52D08FE0 and returned 0x74FCB95E.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "FreeSid") called from "CLR.DLL" at address 0x52D0902F and returned 0x74FCB7F4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AllocateAndInitializeSid") called from "CLR.DLL" at address 0x52D08E52 and returned 0x74FCB7DC.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenProcessToken") called from "CLR.DLL" at address 0x52CFEFEC and returned 0x74FCB7C4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "GetTokenInformation") called from "CLR.DLL" at address 0x52CFF00F and returned 0x74FCB7B4.
LoadLibraryExW("C:\Windows\system32\combase.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52D0F0AB.
LoadLibraryExW("C:\Windows\system32\combase.dll", 0x00000000, 0x00000000) returned NULL. Error:     (126).
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "InitializeAcl") called from "CLR.DLL" at address 0x52D08F7F and returned 0x74FCBAFA.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AddAccessAllowedAce") called from "CLR.DLL" at address 0x52D08FE0 and returned 0x74FCB95E.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "FreeSid") called from "CLR.DLL" at address 0x52D0902F and returned 0x74FCB7F4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "AddSIDToBoundaryDescriptor") called from "CLR.DLL" at address 0x52D091EC and returned 0x76C370F5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateBoundaryDescriptorW") called from "CLR.DLL" at address 0x52D09207 and returned 0x76C2F911.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreatePrivateNamespaceW") called from "CLR.DLL" at address 0x52D09223 and returned 0x76C3C82E.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "OpenPrivateNamespaceW") called from "CLR.DLL" at address 0x52D09242 and returned 0x76C323BE.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AllocateAndInitializeSid") called from "CLR.DLL" at address 0x52D08E52 and returned 0x74FCB7DC.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "OpenProcessToken") called from "CLR.DLL" at address 0x52CFEFEC and returned 0x74FCB7C4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "GetTokenInformation") called from "CLR.DLL" at address 0x52CFF00F and returned 0x74FCB7B4.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "InitializeAcl") called from "CLR.DLL" at address 0x52D08F7F and returned 0x74FCBAFA.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "AddAccessAllowedAce") called from "CLR.DLL" at address 0x52D08FE0 and returned 0x74FCB95E.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "FreeSid") called from "CLR.DLL" at address 0x52D0902F and returned 0x74FCB7F4.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DeleteBoundaryDescriptor") called from "CLR.DLL" at address 0x52CFF22D and returned 0x7778E695.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "WerRegisterRuntimeExceptionModule") called from "CLR.DLL" at address 0x52D0D3B9 and returned 0x76C9E2ED.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "RaiseException") called from "CLR.DLL" at address 0x52D0FE43 and returned 0x76C11B42.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x5439379B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x543937AB and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x5403380B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x5403381B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x72812B97 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812BA7 and returned 0x77799DA5.
GetProcAddress(0x72810000 [MSCOREE.DLL], 0x00000018) called from "CLR.DLL" at address 0x52CFFC6D and returned 0x72818017.
GetProcAddress(0x72790000 [MSCOREEI.DLL], 0x00000018) called from "MSCOREE.DLL" at address 0x72818056 and returned 0x7279D9C6.
GetProcAddress(0x76E00000 [KERNELBASE.DLL], "SetSystemFileCacheSize") called from "CLR.DLL" at address 0x52D104B6 and returned NULL. Error:     (127).
GetProcAddress(0x77760000 [NTDLL.DLL], "NtSetSystemInformation") called from "CLR.DLL" at address 0x52D104D9 and returned 0x77781B74.
GetProcAddress(0x76E00000 [KERNELBASE.DLL], "PrivIsDllSynchronizationHeld") called from "CLR.DLL" at address 0x52D104F3 and returned NULL. Error:     (127).
GetProcAddress(0x76C00000 [KERNEL32.DLL], "AddDllDirectory") called from "CLR.DLL" at address 0x52D14671 and returned 0x76E11E84.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x5439379B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x543937AB and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x54033737 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "RAREXT32.DLL" at address 0x5403380B and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "RAREXT32.DLL" at address 0x5403381B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x72812B97 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812BA7 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetNativeSystemInfo") called from "CLR.DLL" at address 0x5302A168 and returned 0x76C1E067.
LoadLibraryExW("C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\affcb83bba04f782c2586a1788330891\mscorlib.ni.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "CLR.DLL" at address 0x52CA9D3A.
Loaded "MSCORLIB.NI.DLL" at address 0x795D0000.  Successfully hooked module.
LoadLibraryExW("C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\affcb83bba04f782c2586a1788330891\mscorlib.ni.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x795D0000.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "CLR.DLL" at address 0x52CA9D3A.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned NULL. Error:     (126).
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52D4276E.
LoadLibraryExA("ole32.dll", 0x00000000, 0x00000000) returned 0x75400000.
GetProcAddress(0x75400000 [OLE32.DLL], "CoInitializeEx") called from "CLR.DLL" at address 0x52CDD18B and returned 0x754408CC.
LoadLibraryExW("sxs.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52D19660.
LoadLibraryExW("sxs.dll", 0x00000000, 0x00000000) returned 0x73B10000.
GetProcAddress(0x73B10000 [SXS.DLL], "SxsLookupClrGuid") called from "CLR.DLL" at address 0x52D19675 and returned 0x73B425B1.
GetProcAddress(0x75400000 [OLE32.DLL], "CoGetContextToken") called from "CLR.DLL" at address 0x52CDD18B and returned 0x75439DCF.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "VERSION.DLL" at address 0x73A91919.
Mapped "CLR.DLL" as a data file into memory at address 0x52BE0000.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x52BE0000.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "VERSION.DLL" at address 0x73A91A45.
Mapped "CLR.DLL" as a data file into memory at address 0x52BE0000.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x52BE0000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "LCIDToLocaleName") called from "CLR.DLL" at address 0x52CAB967 and returned 0x76C2DAA8.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "CLR.DLL" at address 0x52CAB967 and returned 0x76C949E9.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ru-RU\mscorrc.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "CLR.DLL" at address 0x52C8CA69.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ru-RU\mscorrc.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned NULL. Error:      (2).
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ru\mscorrc.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "CLR.DLL" at address 0x52C8CA69.
Mapped "MSCORRC.DLL" as a data file into memory at address 0x21450001.
LoadLibraryExW("C:\Windows\Microsoft.NET\Framework\v4.0.30319\ru\mscorrc.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x21450001.
LoadLibraryExW("C:\Windows\system32\syncui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "SYNCUI.DLL" as a data file into memory at address 0x54310002.
LoadLibraryExW("C:\Windows\system32\syncui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x54310002.
LoadLibraryExW("C:\Windows\system32\syncui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "SYNCUI.DLL" as a data file into memory at address 0x53EF0002.
LoadLibraryExW("C:\Windows\system32\syncui.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x53EF0002.
Loaded "" at address 0x54310000.  Successfully hooked module.
Unloaded "" at address 0x54310000.
Loaded "SYNCUI.DLL" at address 0x53EF0000.  Successfully hooked module.
Loaded "SYNCENG.DLL" at address 0x60B20000.  Successfully hooked module.
Loaded "LINKINFO.DLL" at address 0x715D0000.  Successfully hooked module.
DllMain(0x715D0000, DLL_PROCESS_ATTACH, 0x00000000) in "LINKINFO.DLL" called.
DllMain(0x715D0000, DLL_PROCESS_ATTACH, 0x00000000) in "LINKINFO.DLL" returned 1 (0x1).
DllMain(0x60B20000, DLL_PROCESS_ATTACH, 0x00000000) in "SYNCENG.DLL" called.
DllMain(0x60B20000, DLL_PROCESS_ATTACH, 0x00000000) in "SYNCENG.DLL" returned 1 (0x1).
DllMain(0x53EF0000, DLL_PROCESS_ATTACH, 0x00000000) in "SYNCUI.DLL" called.
LoadLibraryW("comctl32.dll") called from "SYNCUI.DLL" at address 0x53EF198C.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
LoadLibraryW("comctl32.dll") called from "SYNCUI.DLL" at address 0x53EF198C.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000140) called from "SYNCUI.DLL" at address 0x53EF15EB and returned 0x703067DB.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000148) called from "SYNCUI.DLL" at address 0x53EF15EB and returned 0x703066DD.
DllMain(0x53EF0000, DLL_PROCESS_ATTACH, 0x00000000) in "SYNCUI.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\system32\acppage.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "ACPPAGE.DLL" as a data file into memory at address 0x60E80002.
LoadLibraryExW("C:\Windows\system32\acppage.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x60E80002.
LoadLibraryExW("C:\Windows\system32\acppage.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "ACPPAGE.DLL" as a data file into memory at address 0x60E70002.
LoadLibraryExW("C:\Windows\system32\acppage.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x60E70002.
Loaded "" at address 0x60E80000.  Successfully hooked module.
Unloaded "" at address 0x60E80000.
Loaded "ACPPAGE.DLL" at address 0x60E70000.  Successfully hooked module.
Loaded "SFC.DLL" at address 0x63D70000.  Successfully hooked module.
Loaded "SFC_OS.DLL" at address 0x63D60000.  Successfully hooked module.
Loaded "MSI.DLL" at address 0x70470000.  Successfully hooked module.
Loaded "WER.DLL" at address 0x53E90000.  Successfully hooked module.
DllMain(0x63D60000, DLL_PROCESS_ATTACH, 0x00000000) in "SFC_OS.DLL" called.
DllMain(0x63D60000, DLL_PROCESS_ATTACH, 0x00000000) in "SFC_OS.DLL" returned 1 (0x1).
DllMain(0x70470000, DLL_PROCESS_ATTACH, 0x00000000) in "MSI.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetNativeSystemInfo") called from "MSI.DLL" at address 0x704A00ED and returned 0x76C1E067.
DllMain(0x70470000, DLL_PROCESS_ATTACH, 0x00000000) in "MSI.DLL" returned 1 (0x1).
DllMain(0x53E90000, DLL_PROCESS_ATTACH, 0x00000000) in "WER.DLL" called.
DllMain(0x53E90000, DLL_PROCESS_ATTACH, 0x00000000) in "WER.DLL" returned 1 (0x1).
DllMain(0x60E70000, DLL_PROCESS_ATTACH, 0x00000000) in "ACPPAGE.DLL" called.
LoadLibraryW("comctl32.dll") called from "ACPPAGE.DLL" at address 0x60E77B35.
LoadLibraryW("comctl32.dll") returned 0x702D0000.
DllMain(0x60E70000, DLL_PROCESS_ATTACH, 0x00000000) in "ACPPAGE.DLL" returned 1 (0x1).
LoadLibraryExA("SETUPAPI.dll", 0x00000000, 0x00000000) called from "SFC_OS.DLL" at address 0x63D634A0.
LoadLibraryExA("SETUPAPI.dll", 0x00000000, 0x00000000) returned 0x75090000.
GetProcAddress(0x75090000 [SETUPAPI.DLL], "PnpIsFilePnpDriver") called from "SFC_OS.DLL" at address 0x63D63504 and returned 0x7509E4F1.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "RegOpenKeyExW") called from "SETUPAPI.DLL" at address 0x7509B91A and returned 0x76C12794.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "RegCloseKey") called from "SETUPAPI.DLL" at address 0x7509B999 and returned 0x76C1251E.
LoadLibraryExA("DEVRTL.dll", 0x00000000, 0x00000000) called from "SETUPAPI.DLL" at address 0x750D7404.
Loaded "DEVRTL.DLL" at address 0x737A0000.  Successfully hooked module.
DllMain(0x737A0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEVRTL.DLL" called.
DllMain(0x737A0000, DLL_PROCESS_ATTACH, 0x00000000) in "DEVRTL.DLL" returned 1 (0x1).
LoadLibraryExA("DEVRTL.dll", 0x00000000, 0x00000000) returned 0x737A0000.
GetProcAddress(0x737A0000 [DEVRTL.DLL], "DevRtlGetThreadLogToken") called from "SETUPAPI.DLL" at address 0x7509B31F and returned 0x737A1D5F.
LoadLibraryExW("imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "COMCTL32.DLL" at address 0x7037360B.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x23C00001.
LoadLibraryExW("imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x23C00001.
LoadLibraryExA("WindowsCodecs.dll", 0x00000000, 0x00000000) called from "COMCTL32.DLL" at address 0x7030600E.
LoadLibraryExA("WindowsCodecs.dll", 0x00000000, 0x00000000) returned 0x72E40000.
GetProcAddress(0x72E40000 [WINDOWSCODECS.DLL], "WICCreateImagingFactory_Proxy") called from "COMCTL32.DLL" at address 0x70305FB2 and returned 0x72E48801.
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x73848844.
Mapped "EHSTORSHELL.DLL" as a data file into memory at address 0x63EC0002.
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x63EC0002.
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "APPHELP.DLL" at address 0x7384903B.
Mapped "EHSTORSHELL.DLL" as a data file into memory at address 0x63EC0002.
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x63EC0002.
Loaded "" at address 0x63EC0000.  Successfully hooked module.
Unloaded "" at address 0x63EC0000.
Loaded "EHSTORSHELL.DLL" at address 0x63EC0000.  Successfully hooked module.
DllMain(0x63EC0000, DLL_PROCESS_ATTACH, 0x00000000) in "EHSTORSHELL.DLL" called.
DllMain(0x63EC0000, DLL_PROCESS_ATTACH, 0x00000000) in "EHSTORSHELL.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\Windows\system32\EhStorShell.dll", 0x00000000, 0x00000000) returned 0x63EC0000.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) called from "GROOVEEX.DLL" at address 0x6386BD66.
Loaded "OFFICE.ODF" at address 0x631D0000.  Successfully hooked module.
LoadLibraryExW("C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf", 0x00000000, DONT_RESOLVE_DLL_REFERENCES) returned 0x631D0000.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) returned 0x635F0000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "QueryActCtxW") called from "GROOVEEX.DLL" at address 0x63728EF6 and returned 0x76C1973A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "ActivateActCtx") called from "GROOVEEX.DLL" at address 0x63728EF6 and returned 0x76C2A0DF.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "FindActCtxSectionStringW") called from "GROOVEEX.DLL" at address 0x63728EF6 and returned 0x76C1B5D5.
LoadLibraryW("Comctl32.dll") called from "GROOVEEX.DLL" at address 0x6372915F.
LoadLibraryW("Comctl32.dll") returned 0x702D0000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DeactivateActCtx") called from "GROOVEEX.DLL" at address 0x63728EF6 and returned 0x76C2A110.
LoadLibraryW("C:\PROGRA~2\MICROS~1\Office14\1049\GrooveIntlResource.dll") called from "GROOVEEX.DLL" at address 0x63734265.
Loaded "GROOVEINTLRESOURCE.DLL" at address 0x62950000.  Successfully hooked module.
LoadLibraryW("C:\PROGRA~2\MICROS~1\Office14\1049\GrooveIntlResource.dll") returned 0x62950000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetLocaleInfoEx") called from "GROOVEEX.DLL" at address 0x6386E177 and returned 0x76C949E9.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCalendarInfoEx") called from "GROOVEEX.DLL" at address 0x6386E184 and returned 0x76CBEAB1.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "LocaleNameToLCID") called from "GROOVEEX.DLL" at address 0x6386E191 and returned 0x76C94A99.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumSystemLocalesEx") called from "GROOVEEX.DLL" at address 0x6386E19E and returned 0x76C944F7.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumCalendarInfoExEx") called from "GROOVEEX.DLL" at address 0x6386E1AB and returned 0x76C94959.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumDateFormatsExEx") called from "GROOVEEX.DLL" at address 0x6386E1B8 and returned 0x76C94969.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EnumTimeFormatsEx") called from "GROOVEEX.DLL" at address 0x6386E1C5 and returned 0x76C94979.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetThreadUILanguage") called from "GROOVEEX.DLL" at address 0x6386E1D2 and returned 0x76C2DA3D.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) returned 0x635F0000.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) returned 0x635F0000.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) returned 0x635F0000.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL", 0x00000000, 0x00000000) returned 0x635F0000.
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, 0x00000000) called from "SHLWAPI.DLL" at address 0x7564E2DC.
LoadLibraryExW("C:\Windows\system32\ntshrui.dll", 0x00000000, 0x00000000) returned 0x72650000.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "IMAGERES.DLL" as a data file into memory at address 0x24F60002.
LoadLibraryExW("c:\windows\system32\imageres.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x24F60002.
LoadLibraryExW("c:\program files (x86)\pdf24\resources.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) called from "USER32.DLL" at address 0x757BE229.
Mapped "RESOURCES.DLL" as a data file into memory at address 0x53870002.
LoadLibraryExW("c:\program files (x86)\pdf24\resources.dll", 0x00000000, LOAD_LIBRARY_AS_DATAFILE | 0x00000020) returned 0x53870002.
GetProcAddress(0x75400000 [OLE32.DLL], "CoCreateInstance") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x7545590C.
Loaded "URLMON.DLL" at address 0x75920000.  Successfully hooked module.
Loaded "IERTUTIL.DLL" at address 0x75A40000.  Successfully hooked module.
Loaded "WININET.DLL" at address 0x75D20000.  Successfully hooked module.
Loaded "NORMALIZ.DLL" at address 0x75050000.  Successfully hooked module.
DllMain(0x75A40000, DLL_PROCESS_ATTACH, 0x00000000) in "IERTUTIL.DLL" called.
DllMain(0x75A40000, DLL_PROCESS_ATTACH, 0x00000000) in "IERTUTIL.DLL" returned 1 (0x1).
DllMain(0x75D20000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" called.
DllMain(0x75D20000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" returned 1 (0x1).
DllMain(0x75920000, DLL_PROCESS_ATTACH, 0x00000000) in "URLMON.DLL" called.
DllMain(0x75920000, DLL_PROCESS_ATTACH, 0x00000000) in "URLMON.DLL" returned 1 (0x1).
LoadLibraryA("Secur32.dll") called from "URLMON.DLL" at address 0x75930DF4.
Loaded "SECUR32.DLL" at address 0x73790000.  Successfully hooked module.
DllMain(0x73790000, DLL_PROCESS_ATTACH, 0x00000000) in "SECUR32.DLL" called.
DllMain(0x73790000, DLL_PROCESS_ATTACH, 0x00000000) in "SECUR32.DLL" returned 1 (0x1).
LoadLibraryA("Secur32.dll") returned 0x73790000.
GetProcAddress(0x73790000 [SECUR32.DLL], "GetUserNameExW") called from "URLMON.DLL" at address 0x75930E41 and returned 0x74E5A365.
LoadLibraryA("SHELL32.dll") called from "URLMON.DLL" at address 0x75930DF4.
LoadLibraryA("SHELL32.dll") returned 0x75E40000.
GetProcAddress(0x75E40000 [SHELL32.DLL], "SHGetFolderPathW") called from "URLMON.DLL" at address 0x75930E41 and returned 0x75EBCA9E.
LoadLibraryW("C:\Windows\system32\sfc.dll") called from "SHELL32.DLL" at address 0x75F19BF2.
LoadLibraryW("C:\Windows\system32\sfc.dll") returned 0x63D70000.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "RegCloseKey") called from "NTSHRUI.DLL" at address 0x72651BD4 and returned 0x74FCBED4.
GetProcAddress(0x75400000 [OLE32.DLL], "OleUninitialize") called from "SHLWAPI.DLL" at address 0x7565821B and returned 0x7541E982.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "DllCanUnloadNow_RetAddr") called from "MSCOREE.DLL" at address 0x7282526D and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "DllCanUnloadNow") called from "MSCOREE.DLL" at address 0x7282529B and returned 0x727B7E4C.
DllMain(0x60E70000, DLL_PROCESS_DETACH, 0x00000000) in "ACPPAGE.DLL" called.
DllMain(0x60E70000, DLL_PROCESS_DETACH, 0x00000000) in "ACPPAGE.DLL" returned 1 (0x1).
DllMain(0x53E90000, DLL_PROCESS_DETACH, 0x00000000) in "WER.DLL" called.
DllMain(0x53E90000, DLL_PROCESS_DETACH, 0x00000000) in "WER.DLL" returned 1 (0x1).
DllMain(0x70470000, DLL_PROCESS_DETACH, 0x00000000) in "MSI.DLL" called.
DllMain(0x70470000, DLL_PROCESS_DETACH, 0x00000000) in "MSI.DLL" returned 1 (0x1).
Unloaded "ACPPAGE.DLL" at address 0x60E70000.
Unloaded "WER.DLL" at address 0x53E90000.
Unloaded "MSI.DLL" at address 0x70470000.
Unloaded "SFC.DLL" at address 0x63D70000.
DllMain(0x63D60000, DLL_PROCESS_DETACH, 0x00000000) in "SFC_OS.DLL" called.
DllMain(0x63D60000, DLL_PROCESS_DETACH, 0x00000000) in "SFC_OS.DLL" returned 1 (0x1).
Unloaded "SFC_OS.DLL" at address 0x63D60000.
DllMain(0x53EF0000, DLL_PROCESS_DETACH, 0x00000000) in "SYNCUI.DLL" called.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000149) called from "SYNCUI.DLL" at address 0x53EF15EB and returned 0x70306618.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000141) called from "SYNCUI.DLL" at address 0x53EF15EB and returned 0x70306729.
DllMain(0x53EF0000, DLL_PROCESS_DETACH, 0x00000000) in "SYNCUI.DLL" returned 1 (0x1).
DllMain(0x60B20000, DLL_PROCESS_DETACH, 0x00000000) in "SYNCENG.DLL" called.
DllMain(0x60B20000, DLL_PROCESS_DETACH, 0x00000000) in "SYNCENG.DLL" returned 1 (0x1).
DllMain(0x715D0000, DLL_PROCESS_DETACH, 0x00000000) in "LINKINFO.DLL" called.
DllMain(0x715D0000, DLL_PROCESS_DETACH, 0x00000000) in "LINKINFO.DLL" returned 1 (0x1).
Unloaded "SYNCUI.DLL" at address 0x53EF0000.
Unloaded "SYNCENG.DLL" at address 0x60B20000.
Unloaded "LINKINFO.DLL" at address 0x715D0000.
DllMain(0x54020000, DLL_PROCESS_DETACH, 0x00000000) in "RAREXT32.DLL" called.
DllMain(0x54020000, DLL_PROCESS_DETACH, 0x00000000) in "RAREXT32.DLL" returned 1 (0x1).
Unloaded "RAREXT32.DLL" at address 0x54020000.
DllMain(0x63E90000, DLL_PROCESS_DETACH, 0x00000000) in "SHDOCVW.DLL" called.
DllMain(0x63E90000, DLL_PROCESS_DETACH, 0x00000000) in "SHDOCVW.DLL" returned 1 (0x1).
Unloaded "SHDOCVW.DLL" at address 0x63E90000.
DllMain(0x00A20000, DLL_PROCESS_DETACH, 0x00000000) in "HASHCHECK.DLL" called.
DllMain(0x00A20000, DLL_PROCESS_DETACH, 0x00000000) in "HASHCHECK.DLL" returned 1 (0x1).
Unloaded "HASHCHECK.DLL" at address 0x00A20000.
DllMain(0x54060000, DLL_PROCESS_DETACH, 0x00000000) in "TWEXT.DLL" called.
GetProcAddress(0x702D0000 [COMCTL32.DLL], 0x00000182) called from "TWEXT.DLL" at address 0x5406F9C6 and returned 0x7030665D.
DllMain(0x54060000, DLL_PROCESS_DETACH, 0x00000000) in "TWEXT.DLL" returned 1 (0x1).
Unloaded "TWEXT.DLL" at address 0x54060000.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x72810000 [MSCOREE.DLL], "CorExitProcess") called from "PROCMON.EXE" at address 0x00F301A2 and returned 0x72828619.
GetProcAddress(0x72790000 [MSCOREEI.DLL], "CorExitProcess_RetAddr") called from "MSCOREE.DLL" at address 0x72828664 and returned NULL. Error:     (127).
GetProcAddress(0x72790000 [MSCOREEI.DLL], "CorExitProcess") called from "MSCOREE.DLL" at address 0x72828695 and returned 0x727B7D83.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) called from "CLR.DLL" at address 0x52C9D102.
LoadLibraryExW("mscoree.dll", 0x00000000, 0x00000000) returned 0x72810000.
DllMain(0x73790000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL" called.
DllMain(0x73790000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL" returned 1 (0x1).
DllMain(0x75920000, DLL_PROCESS_DETACH, 0x00000001) in "URLMON.DLL" called.
DllMain(0x75920000, DLL_PROCESS_DETACH, 0x00000001) in "URLMON.DLL" returned 1 (0x1).
DllMain(0x75D20000, DLL_PROCESS_DETACH, 0x00000001) in "WININET.DLL" called.
DllMain(0x75D20000, DLL_PROCESS_DETACH, 0x00000001) in "WININET.DLL" returned 1 (0x1).
DllMain(0x75A40000, DLL_PROCESS_DETACH, 0x00000001) in "IERTUTIL.DLL" called.
DllMain(0x75A40000, DLL_PROCESS_DETACH, 0x00000001) in "IERTUTIL.DLL" returned 1 (0x1).
DllMain(0x63EC0000, DLL_PROCESS_DETACH, 0x00000001) in "EHSTORSHELL.DLL" called.
DllMain(0x63EC0000, DLL_PROCESS_DETACH, 0x00000001) in "EHSTORSHELL.DLL" returned 1 (0x1).
DllMain(0x737A0000, DLL_PROCESS_DETACH, 0x00000001) in "DEVRTL.DLL" called.
DllMain(0x737A0000, DLL_PROCESS_DETACH, 0x00000001) in "DEVRTL.DLL" returned 1 (0x1).
DllMain(0x52BE0000, DLL_PROCESS_DETACH, 0x00000001) in "CLR.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "CreateActCtxW") called from "CLR.DLL" at address 0x52D30DD6 and returned 0x76C1A17A.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "AddRefActCtx") called from "CLR.DLL" at address 0x52D30DE3 and returned 0x76C2C7F3.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "ReleaseActCtx") called from "CLR.DLL" at address 0x52D30DF0 and returned 0x76C2A184.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "ActivateActCtx") called from "CLR.DLL" at address 0x52D30DFD and returned 0x76C2A0DF.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DeactivateActCtx") called from "CLR.DLL" at address 0x52D30E0A and returned 0x76C2A110.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "GetCurrentActCtx") called from "CLR.DLL" at address 0x52D30E17 and returned 0x76C2C804.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "QueryActCtxW") called from "CLR.DLL" at address 0x52D30E24 and returned 0x76C1973A.
DllMain(0x52BE0000, DLL_PROCESS_DETACH, 0x00000001) in "CLR.DLL" returned 1 (0x1).
DllMain(0x53F20000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR120_CLR0400.DLL" called.
DllMain(0x53F20000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR120_CLR0400.DLL" returned 1 (0x1).
DllMain(0x73B10000, DLL_PROCESS_DETACH, 0x00000001) in "SXS.DLL" called.
DllMain(0x73B10000, DLL_PROCESS_DETACH, 0x00000001) in "SXS.DLL" returned 1 (0x1).
DllMain(0x72790000, DLL_PROCESS_DETACH, 0x00000001) in "MSCOREEI.DLL" called.
DllMain(0x72790000, DLL_PROCESS_DETACH, 0x00000001) in "MSCOREEI.DLL" returned 1 (0x1).
DllMain(0x72810000, DLL_PROCESS_DETACH, 0x00000001) in "MSCOREE.DLL" called.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "EventUnregister") called from "MSCOREEI.DLL" at address 0x727980C3 and returned 0x777AD941.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSCOREE.DLL" at address 0x7281315A and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSCOREE.DLL" at address 0x72812D1B and returned 0x77799DA5.
DllMain(0x72810000, DLL_PROCESS_DETACH, 0x00000001) in "MSCOREE.DLL" returned 1 (0x1).
DllMain(0x739C0000, DLL_PROCESS_DETACH, 0x00000001) in "NETUTILS.DLL" called.
DllMain(0x739C0000, DLL_PROCESS_DETACH, 0x00000001) in "NETUTILS.DLL" returned 1 (0x1).
DllMain(0x720D0000, DLL_PROCESS_DETACH, 0x00000001) in "SLC.DLL" called.
DllMain(0x720D0000, DLL_PROCESS_DETACH, 0x00000001) in "SLC.DLL" returned 1 (0x1).
DllMain(0x72640000, DLL_PROCESS_DETACH, 0x00000001) in "CSCAPI.DLL" called.
DllMain(0x72640000, DLL_PROCESS_DETACH, 0x00000001) in "CSCAPI.DLL" returned 1 (0x1).
DllMain(0x739A0000, DLL_PROCESS_DETACH, 0x00000001) in "SRVCLI.DLL" called.
DllMain(0x739A0000, DLL_PROCESS_DETACH, 0x00000001) in "SRVCLI.DLL" returned 1 (0x1).
DllMain(0x72650000, DLL_PROCESS_DETACH, 0x00000001) in "NTSHRUI.DLL" called.
DllMain(0x72650000, DLL_PROCESS_DETACH, 0x00000001) in "NTSHRUI.DLL" returned 1 (0x1).
DllMain(0x53E00000, DLL_PROCESS_DETACH, 0x00000001) in "WINCDEMUCONTEXTMENU.DLL" called.
DllMain(0x53E00000, DLL_PROCESS_DETACH, 0x00000001) in "WINCDEMUCONTEXTMENU.DLL" returned 1 (0x1).
DllMain(0x72E40000, DLL_PROCESS_DETACH, 0x00000001) in "WINDOWSCODECS.DLL" called.
DllMain(0x72E40000, DLL_PROCESS_DETACH, 0x00000001) in "WINDOWSCODECS.DLL" returned 1 (0x1).
DllMain(0x635F0000, DLL_PROCESS_DETACH, 0x00000001) in "GROOVEEX.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x71540000 [CRYPTSP.DLL], "CryptReleaseContext") called from "ADVAPI32.DLL" at address 0x74FCBE39 and returned 0x71542EF0.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
DllMain(0x635F0000, DLL_PROCESS_DETACH, 0x00000001) in "GROOVEEX.DLL" returned 1 (0x1).
DllMain(0x54340000, DLL_PROCESS_DETACH, 0x00000001) in "ATL90.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "ATL90.DLL" at address 0x54354D82 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "ATL90.DLL" at address 0x54354E07 and returned 0x77799DA5.
DllMain(0x54340000, DLL_PROCESS_DETACH, 0x00000001) in "ATL90.DLL" returned 1 (0x1).
DllMain(0x54240000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCP90.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
DllMain(0x54240000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCP90.DLL" returned 1 (0x1).
DllMain(0x54370000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR90.DLL" called.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "EncodePointer") called from "MSVCR90.DLL" at address 0x543935E2 and returned 0x777A103B.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
GetProcAddress(0x76C00000 [KERNEL32.DLL], "DecodePointer") called from "MSVCR90.DLL" at address 0x54393667 and returned 0x77799DA5.
DllMain(0x54370000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR90.DLL" returned 1 (0x1).
DllMain(0x75090000, DLL_PROCESS_DETACH, 0x00000001) in "SETUPAPI.DLL" called.
DllMain(0x75090000, DLL_PROCESS_DETACH, 0x00000001) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x76DE0000, DLL_PROCESS_DETACH, 0x00000001) in "DEVOBJ.DLL" called.
DllMain(0x76DE0000, DLL_PROCESS_DETACH, 0x00000001) in "DEVOBJ.DLL" returned 1 (0x1).
DllMain(0x76A90000, DLL_PROCESS_DETACH, 0x00000001) in "CFGMGR32.DLL" called.
DllMain(0x76A90000, DLL_PROCESS_DETACH, 0x00000001) in "CFGMGR32.DLL" returned 1 (0x1).
DllMain(0x720A0000, DLL_PROCESS_DETACH, 0x00000001) in "USERENV.DLL" called.
DllMain(0x720A0000, DLL_PROCESS_DETACH, 0x00000001) in "USERENV.DLL" returned 1 (0x1).
DllMain(0x714F0000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRTREMOTE.DLL" called.
DllMain(0x714F0000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRTREMOTE.DLL" returned 4294967041 (0xFFFFFF01).
DllMain(0x71500000, DLL_PROCESS_DETACH, 0x00000001) in "RSAENH.DLL" called.
DllMain(0x71500000, DLL_PROCESS_DETACH, 0x00000001) in "RSAENH.DLL" returned 1 (0x1).
DllMain(0x71540000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTSP.DLL" called.
DllMain(0x71540000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTSP.DLL" returned 1 (0x1).
DllMain(0x73840000, DLL_PROCESS_DETACH, 0x00000001) in "APPHELP.DLL" called.
DllMain(0x73840000, DLL_PROCESS_DETACH, 0x00000001) in "APPHELP.DLL" returned 1 (0x1).
DllMain(0x73430000, DLL_PROCESS_DETACH, 0x00000001) in "PROFAPI.DLL" called.
DllMain(0x73430000, DLL_PROCESS_DETACH, 0x00000001) in "PROFAPI.DLL" returned 1 (0x1).
DllMain(0x73A00000, DLL_PROCESS_DETACH, 0x00000001) in "NTMARTA.DLL" called.
DllMain(0x73A00000, DLL_PROCESS_DETACH, 0x00000001) in "NTMARTA.DLL" returned 1 (0x1).
DllMain(0x76E50000, DLL_PROCESS_DETACH, 0x00000001) in "WLDAP32.DLL" called.
DllMain(0x76E50000, DLL_PROCESS_DETACH, 0x00000001) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x75C00000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL" called.
DllMain(0x75C00000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL" returned 1 (0x1).
DllMain(0x701D0000, DLL_PROCESS_DETACH, 0x00000001) in "PROPSYS.DLL" called.
GetProcAddress(0x74FB0000 [ADVAPI32.DLL], "UnregisterTraceGuids") called from "PROPSYS.DLL" at address 0x701D8A89 and returned 0x777AD986.
DllMain(0x701D0000, DLL_PROCESS_DETACH, 0x00000001) in "PROPSYS.DLL" returned 1 (0x1).
DllMain(0x73890000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL" called.
DllMain(0x73890000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL" returned 1 (0x1).
DllMain(0x755E0000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" called.
DllMain(0x755E0000, DLL_PROCESS_DETACH, 0x00000001) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x76D10000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" called.
DllMain(0x76D10000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" returned 1 (0x1).
DllMain(0x74F20000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL" called.
DllMain(0x74F20000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x75400000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" called.
DllMain(0x75400000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x75560000, DLL_PROCESS_DETACH, 0x00000001) in "COMDLG32.DLL" called.
DllMain(0x75560000, DLL_PROCESS_DETACH, 0x00000001) in "COMDLG32.DLL" returned 1 (0x1).
DllMain(0x75E40000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" called.
DllMain(0x75E40000, DLL_PROCESS_DETACH, 0x00000001) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x60EE0000, DLL_PROCESS_DETACH, 0x00000001) in "FLTLIB.DLL" called.
DllMain(0x60EE0000, DLL_PROCESS_DETACH, 0x00000001) in "FLTLIB.DLL" returned 1 (0x1).
DllMain(0x702D0000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" called.
DllMain(0x702D0000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" returned 1 (0x1).
DllMain(0x75640000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" called.
DllMain(0x75640000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" returned 1 (0x1).
DllMain(0x75C90000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" called.
DllMain(0x75C90000, DLL_PROCESS_DETACH, 0x00000001) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x77730000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" called.
DllMain(0x77730000, DLL_PROCESS_DETACH, 0x00000001) in "LPK.DLL" returned 1 (0x1).
DllMain(0x76B60000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" called.
DllMain(0x76B60000, DLL_PROCESS_DETACH, 0x00000001) in "USP10.DLL" returned 1 (0x1).
DllMain(0x75790000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" called.
DllMain(0x75790000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" returned 1 (0x1).
DllMain(0x74FB0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" called.
DllMain(0x74FB0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x73A90000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL" called.
DllMain(0x73A90000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x74EA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" called.
DllMain(0x74EA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x74EE0000, DLL_PROCESS_DETACH, 0x00000001) in "NSI.DLL" called.
DllMain(0x74EE0000, DLL_PROCESS_DETACH, 0x00000001) in "NSI.DLL" returned 1 (0x1).
DllMain(0x756A0000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" called.
DllMain(0x756A0000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" returned 1 (0x1).
DllMain(0x74E40000, DLL_PROCESS_DETACH, 0x00000001) in "SSPICLI.DLL" called.
DllMain(0x74E40000, DLL_PROCESS_DETACH, 0x00000001) in "SSPICLI.DLL" returned 1 (0x1).
DllMain(0x76AD0000, DLL_PROCESS_DETACH, 0x00000001) in "SECHOST.DLL" called.
DllMain(0x76AD0000, DLL_PROCESS_DETACH, 0x00000001) in "SECHOST.DLL" returned 1 (0x1).
DllMain(0x74E30000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTBASE.DLL" called.
DllMain(0x74E30000, DLL_PROCESS_DETACH, 0x00000001) in "CRYPTBASE.DLL" returned 1 (0x1).
DllMain(0x75230000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" called.
DllMain(0x75230000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x63BD0000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" called.
DllMain(0x63BD0000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" returned 1 (0x1).
DllMain(0x76C00000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" called.
DllMain(0x76C00000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x76E00000, DLL_PROCESS_DETACH, 0x00000001) in "KERNELBASE.DLL" called.
DllMain(0x76E00000, DLL_PROCESS_DETACH, 0x00000001) in "KERNELBASE.DLL" returned 1 (0x1).
Exited "PROCMON.EXE" (process 0x190C) with code 0 (0x0).
