======================================================================== Bochs x86 Emulator 2.3.cvs Build from CVS snapshot, after release 2.3 ======================================================================== 00000000000i[CTRL ] restoring 'save/config' 00000000000i[ ] reading configuration from save/config 00000000000i[ ] installing x module as the Bochs GUI 00000000000i[ ] using log file bochsout.txt Next at t=6277490000 (0).[6277490000] ??? (physical address not available) info winproc winproc: KdVersionBlock at linear address 0x8054c038 winproc: KdVersionBlock fetched from emulated memory winproc: OwnerTag is 0x4742444b ('KDBG'), good Grmpf, about to traverse list at PsActiveProcessHead: 0x805604d8 winproc: PID 0x00000004 - PPID 0x00000000 - DTB 0x00039000,0x00000000 - Filename System - PEB at 0x00000000 winproc: PID 0x0000017c - PPID 0x00000004 - DTB 0x03cbd000,0x03cbe000 - Filename smss.exe - PEB at 0x7ffdb000 winproc: + ImageBaseAddress: 0x48580000 DllBase 0x00261ec0, EntryPoint 0x48580000, SizeOfImage 1213768904, BaseDllName smss.exe FullDllName \SystemRoot\System32\smss.exe DllBase 0x00261f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll winproc: PID 0x000001d8 - PPID 0x0000017c - DTB 0x04730000,0x04771000 - Filename csrss.exe - PEB at 0x7ffde000 winproc: + ImageBaseAddress: 0x4a680000 DllBase 0x00261ec0, EntryPoint 0x4a680000, SizeOfImage 1248334243, BaseDllName csrss.exe FullDllName \??\C:\WINDOWS\system32\csrss.exe DllBase 0x00261f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00261fb8, EntryPoint 0x75b40000, SizeOfImage 1974756843, BaseDllName CSRSRV.dll FullDllName C:\WINDOWS\system32\CSRSRV.dll DllBase 0x00262058, EntryPoint 0x75b50000, SizeOfImage 1974841430, BaseDllName basesrv.dll FullDllName C:\WINDOWS\system32\basesrv.dll DllBase 0x002620f8, EntryPoint 0x75b60000, SizeOfImage 1974891435, BaseDllName winsrv.dll FullDllName C:\WINDOWS\system32\winsrv.dll DllBase 0x00262198, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00262240, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName KERNEL32.dll FullDllName C:\WINDOWS\system32\KERNEL32.dll DllBase 0x002622e0, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00262378, EntryPoint 0x75e90000, SizeOfImage 1978356416, BaseDllName sxs.dll FullDllName C:\WINDOWS\system32\sxs.dll DllBase 0x00262420, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x002624c0, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll winproc: PID 0x00000204 - PPID 0x0000017c - DTB 0x04877000,0x048b8000 - Filename winlogon.exe - PEB at 0x7ffd5000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00171ec0, EntryPoint 0x01000000, SizeOfImage 17027923, BaseDllName winlogon.exe FullDllName \??\C:\WINDOWS\system32\winlogon.exe DllBase 0x00171f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00171fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00172068, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00172108, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001721a8, EntryPoint 0x776c0000, SizeOfImage 2003571152, BaseDllName AUTHZ.dll FullDllName C:\WINDOWS\system32\AUTHZ.dll DllBase 0x00172248, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x001722e8, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x00172388, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00172428, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x001724c8, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x00172568, EntryPoint 0x75940000, SizeOfImage 1972637952, BaseDllName NDdeApi.dll FullDllName C:\WINDOWS\system32\NDdeApi.dll DllBase 0x00172608, EntryPoint 0x75930000, SizeOfImage 1972572864, BaseDllName PROFMAP.dll FullDllName C:\WINDOWS\system32\PROFMAP.dll DllBase 0x001726b0, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName NETAPI32.dll FullDllName C:\WINDOWS\system32\NETAPI32.dll DllBase 0x00172750, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001727f0, EntryPoint 0x76bf0000, SizeOfImage 1992233201, BaseDllName PSAPI.DLL FullDllName C:\WINDOWS\system32\PSAPI.DLL DllBase 0x00172890, EntryPoint 0x76bc0000, SizeOfImage 1992036736, BaseDllName REGAPI.dll FullDllName C:\WINDOWS\system32\REGAPI.dll DllBase 0x00172930, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName C:\WINDOWS\system32\Secur32.dll DllBase 0x001729d8, EntryPoint 0x77920000, SizeOfImage 2006062490, BaseDllName SETUPAPI.dll FullDllName C:\WINDOWS\system32\SETUPAPI.dll DllBase 0x00172a78, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x00172b18, EntryPoint 0x76360000, SizeOfImage 1983254752, BaseDllName WINSTA.dll FullDllName C:\WINDOWS\system32\WINSTA.dll DllBase 0x00172bc0, EntryPoint 0x76c30000, SizeOfImage 1992496425, BaseDllName WINTRUST.dll FullDllName C:\WINDOWS\system32\WINTRUST.dll DllBase 0x00172c68, EntryPoint 0x76c90000, SizeOfImage 1992888941, BaseDllName IMAGEHLP.dll FullDllName C:\WINDOWS\system32\IMAGEHLP.dll DllBase 0x00172d08, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\system32\WS2_32.dll DllBase 0x00172da8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\system32\WS2HELP.dll DllBase 0x00172e48, EntryPoint 0x75970000, SizeOfImage 1972836381, BaseDllName MSGINA.dll FullDllName C:\WINDOWS\system32\MSGINA.dll DllBase 0x00172ee8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00172f88, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00173030, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName COMCTL32.dll FullDllName C:\WINDOWS\system32\COMCTL32.dll DllBase 0x001730d0, EntryPoint 0x74320000, SizeOfImage 1949496921, BaseDllName ODBC32.dll FullDllName C:\WINDOWS\system32\ODBC32.dll DllBase 0x00173178, EntryPoint 0x763b0000, SizeOfImage 1983584952, BaseDllName comdlg32.dll FullDllName C:\WINDOWS\system32\comdlg32.dll DllBase 0x001732c0, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00173360, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName odbcint.dll FullDllName C:\WINDOWS\system32\odbcint.dll DllBase 0x00173400, EntryPoint 0x776e0000, SizeOfImage 2003785218, BaseDllName SHSVCS.dll FullDllName C:\WINDOWS\system32\SHSVCS.dll DllBase 0x00173498, EntryPoint 0x76bb0000, SizeOfImage 1991971379, BaseDllName sfc.dll FullDllName C:\WINDOWS\system32\sfc.dll DllBase 0x00173538, EntryPoint 0x76c60000, SizeOfImage 1992749210, BaseDllName sfc_os.dll FullDllName C:\WINDOWS\system32\sfc_os.dll DllBase 0x001735d8, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00173678, EntryPoint 0x77b40000, SizeOfImage 2008292371, BaseDllName Apphelp.dll FullDllName C:\WINDOWS\system32\Apphelp.dll DllBase 0x00173810, EntryPoint 0x723d0000, SizeOfImage 1916605136, BaseDllName WINSCARD.DLL FullDllName C:\WINDOWS\system32\WINSCARD.DLL DllBase 0x001738b8, EntryPoint 0x76f50000, SizeOfImage 1995781085, BaseDllName WTSAPI32.dll FullDllName C:\WINDOWS\system32\WTSAPI32.dll DllBase 0x00173910, EntryPoint 0x76600000, SizeOfImage 1986007664, BaseDllName cscdll.dll FullDllName C:\WINDOWS\system32\cscdll.dll DllBase 0x001739b8, EntryPoint 0x75950000, SizeOfImage 1972706202, BaseDllName WlNotify.dll FullDllName C:\WINDOWS\system32\WlNotify.dll DllBase 0x00173a58, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x00173b00, EntryPoint 0x73000000, SizeOfImage 1929399552, BaseDllName WINSPOOL.DRV FullDllName C:\WINDOWS\system32\WINSPOOL.DRV DllBase 0x00173b98, EntryPoint 0x71b20000, SizeOfImage 1907495498, BaseDllName MPR.dll FullDllName C:\WINDOWS\system32\MPR.dll DllBase 0x00173c40, EntryPoint 0x00f70000, SizeOfImage 16284098, BaseDllName WgaLogon.dll FullDllName C:\WINDOWS\system32\WgaLogon.dll DllBase 0x00173ce8, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x00173d88, EntryPoint 0x0ffd0000, SizeOfImage 268317921, BaseDllName rsaenh.dll FullDllName C:\WINDOWS\system32\rsaenh.dll DllBase 0x00173e28, EntryPoint 0x77690000, SizeOfImage 2003375157, BaseDllName NTMARTA.DLL FullDllName C:\WINDOWS\system32\NTMARTA.DLL DllBase 0x00173ec8, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x00173f68, EntryPoint 0x71bf0000, SizeOfImage 1908347277, BaseDllName SAMLIB.dll FullDllName C:\WINDOWS\system32\SAMLIB.dll DllBase 0x00174008, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x001740a8, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll DllBase 0x00174148, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x001741e8, EntryPoint 0x77a20000, SizeOfImage 2007111664, BaseDllName cscui.dll FullDllName C:\WINDOWS\system32\cscui.dll DllBase 0x00174330, EntryPoint 0x76d40000, SizeOfImage 1993614945, BaseDllName MPRAPI.dll FullDllName C:\WINDOWS\system32\MPRAPI.dll DllBase 0x001743d8, EntryPoint 0x77cc0000, SizeOfImage 2009862928, BaseDllName ACTIVEDS.dll FullDllName C:\WINDOWS\system32\ACTIVEDS.dll DllBase 0x00174478, EntryPoint 0x76e10000, SizeOfImage 1994461952, BaseDllName adsldpc.dll FullDllName C:\WINDOWS\system32\adsldpc.dll DllBase 0x00174510, EntryPoint 0x76b20000, SizeOfImage 1991418080, BaseDllName ATL.DLL FullDllName C:\WINDOWS\system32\ATL.DLL DllBase 0x001745b0, EntryPoint 0x76e80000, SizeOfImage 1994925151, BaseDllName rtutils.dll FullDllName C:\WINDOWS\system32\rtutils.dll DllBase 0x00174288, EntryPoint 0x77c70000, SizeOfImage 2009548937, BaseDllName msv1_0.dll FullDllName C:\WINDOWS\system32\msv1_0.dll DllBase 0x00174650, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName C:\WINDOWS\system32\iphlpapi.dll DllBase 0x001747d8, EntryPoint 0x01290000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x00173718, EntryPoint 0x75e90000, SizeOfImage 1978356416, BaseDllName sxs.dll FullDllName C:\WINDOWS\system32\sxs.dll winproc: PID 0x00000258 - PPID 0x00000204 - DTB 0x049cc000,0x0498d000 - Filename services.exe - PEB at 0x7ffde000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16823756, BaseDllName services.exe FullDllName C:\WINDOWS\system32\services.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192108, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x001921a8, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x00192248, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x001922e8, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00192388, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x00192428, EntryPoint 0x758e0000, SizeOfImage 1972245536, BaseDllName SCESRV.dll FullDllName C:\WINDOWS\system32\SCESRV.dll DllBase 0x001924c8, EntryPoint 0x776c0000, SizeOfImage 2003571152, BaseDllName AUTHZ.dll FullDllName C:\WINDOWS\system32\AUTHZ.dll DllBase 0x00192570, EntryPoint 0x7dba0000, SizeOfImage 2109367500, BaseDllName umpnpmgr.dll FullDllName C:\WINDOWS\system32\umpnpmgr.dll DllBase 0x00192610, EntryPoint 0x76360000, SizeOfImage 1983254752, BaseDllName WINSTA.dll FullDllName C:\WINDOWS\system32\WINSTA.dll DllBase 0x001926b8, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName NETAPI32.dll FullDllName C:\WINDOWS\system32\NETAPI32.dll DllBase 0x00192760, EntryPoint 0x5f770000, SizeOfImage 1601638730, BaseDllName NCObjAPI.DLL FullDllName C:\WINDOWS\system32\NCObjAPI.DLL DllBase 0x00192800, EntryPoint 0x76080000, SizeOfImage 1980240658, BaseDllName MSVCP60.dll FullDllName C:\WINDOWS\system32\MSVCP60.dll DllBase 0x001928a0, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x00192948, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001929e8, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x00192a88, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192b30, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x00192bd0, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x00192c70, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x00192d10, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192db0, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192e50, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x00192f98, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00193040, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x001930e0, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName secur32.dll FullDllName C:\WINDOWS\system32\secur32.dll DllBase 0x00193180, EntryPoint 0x77b40000, SizeOfImage 2008292371, BaseDllName Apphelp.dll FullDllName C:\WINDOWS\system32\Apphelp.dll DllBase 0x00193228, EntryPoint 0x77b70000, SizeOfImage 2008491607, BaseDllName eventlog.dll FullDllName C:\WINDOWS\system32\eventlog.dll DllBase 0x001932c8, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\system32\WS2_32.dll DllBase 0x00193368, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\system32\WS2HELP.dll DllBase 0x00193408, EntryPoint 0x76bf0000, SizeOfImage 1992233201, BaseDllName PSAPI.DLL FullDllName C:\WINDOWS\system32\PSAPI.DLL DllBase 0x001934b0, EntryPoint 0x76f50000, SizeOfImage 1995781085, BaseDllName wtsapi32.dll FullDllName C:\WINDOWS\system32\wtsapi32.dll winproc: PID 0x00000264 - PPID 0x00000204 - DTB 0x04a25000,0x04926000 - Filename lsass.exe - PEB at 0x7ffde000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16782525, NOT FETCHABLE: 0x00140012 NOT FETCHABLE: 0x003c003a winproc: PID 0x00000360 - PPID 0x00000258 - DTB 0x06231000,0x061f2000 - Filename svchost.exe - PEB at 0x7ffd8000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16786697, BaseDllName svchost.exe FullDllName C:\WINDOWS\system32\svchost.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x00192c68, EntryPoint 0x76a80000, SizeOfImage 1990831412, BaseDllName rpcss.dll FullDllName c:\windows\system32\rpcss.dll DllBase 0x00192d08, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName c:\windows\system32\Secur32.dll DllBase 0x00192da8, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName c:\windows\system32\WS2_32.dll DllBase 0x00192e48, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName c:\windows\system32\WS2HELP.dll DllBase 0x00192ef0, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x00192f90, EntryPoint 0x0ffd0000, SizeOfImage 268317921, BaseDllName rsaenh.dll FullDllName C:\WINDOWS\system32\rsaenh.dll DllBase 0x00193030, EntryPoint 0x71a50000, SizeOfImage 1906644173, BaseDllName mswsock.dll FullDllName C:\WINDOWS\system32\mswsock.dll DllBase 0x001930d0, EntryPoint 0x662b0000, SizeOfImage 1714322001, BaseDllName hnetcfg.dll FullDllName C:\WINDOWS\system32\hnetcfg.dll DllBase 0x00193178, EntryPoint 0x71a90000, SizeOfImage 1906906158, BaseDllName wshtcpip.dll FullDllName C:\WINDOWS\System32\wshtcpip.dll DllBase 0x00193218, EntryPoint 0x76f20000, SizeOfImage 1995615519, BaseDllName DNSAPI.dll FullDllName C:\WINDOWS\system32\DNSAPI.dll DllBase 0x001932c0, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName C:\WINDOWS\system32\iphlpapi.dll DllBase 0x00193360, EntryPoint 0x76fb0000, SizeOfImage 1996165469, BaseDllName winrnr.dll FullDllName C:\WINDOWS\System32\winrnr.dll DllBase 0x00193400, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x001934a8, EntryPoint 0x76fc0000, SizeOfImage 1996231727, BaseDllName rasadhlp.dll FullDllName C:\WINDOWS\system32\rasadhlp.dll DllBase 0x00193548, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x001935e8, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll winproc: PID 0x000003d4 - PPID 0x00000258 - DTB 0x0683a000,0x067fb000 - Filename svchost.exe - PEB at 0x7ffdf000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16786697, BaseDllName svchost.exe FullDllName C:\WINDOWS\System32\svchost.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\System32\ShimEng.dll DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\System32\WINMM.dll DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\System32\MSACM32.dll DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\System32\UxTheme.dll DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x00192c68, EntryPoint 0x77690000, SizeOfImage 2003375157, BaseDllName NTMARTA.DLL FullDllName C:\WINDOWS\System32\NTMARTA.DLL DllBase 0x00192d08, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x00192da8, EntryPoint 0x71bf0000, SizeOfImage 1908347277, BaseDllName SAMLIB.dll FullDllName C:\WINDOWS\System32\SAMLIB.dll DllBase 0x00192e50, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\System32\xpsp2res.dll DllBase 0x00192ef0, EntryPoint 0x776e0000, SizeOfImage 2003785218, BaseDllName shsvcs.dll FullDllName c:\windows\system32\shsvcs.dll DllBase 0x00192f90, EntryPoint 0x76360000, SizeOfImage 1983254752, BaseDllName WINSTA.dll FullDllName C:\WINDOWS\System32\WINSTA.dll DllBase 0x00193038, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName NETAPI32.dll FullDllName C:\WINDOWS\system32\NETAPI32.dll DllBase 0x001930e0, EntryPoint 0x76d80000, SizeOfImage 1993872381, BaseDllName dhcpcsvc.dll FullDllName c:\windows\system32\dhcpcsvc.dll DllBase 0x00193180, EntryPoint 0x76f20000, SizeOfImage 1995615519, BaseDllName DNSAPI.dll FullDllName c:\windows\system32\DNSAPI.dll DllBase 0x00193220, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName c:\windows\system32\WS2_32.dll DllBase 0x001932c0, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName c:\windows\system32\WS2HELP.dll DllBase 0x00193368, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName c:\windows\system32\iphlpapi.dll DllBase 0x00193408, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName c:\windows\system32\Secur32.dll DllBase 0x001934a8, EntryPoint 0x71a50000, SizeOfImage 1906644173, BaseDllName mswsock.dll FullDllName C:\WINDOWS\system32\mswsock.dll DllBase 0x00193548, EntryPoint 0x662b0000, SizeOfImage 1714322001, BaseDllName hnetcfg.dll FullDllName C:\WINDOWS\System32\hnetcfg.dll DllBase 0x001935f0, EntryPoint 0x71a90000, SizeOfImage 1906906158, BaseDllName wshtcpip.dll FullDllName C:\WINDOWS\System32\wshtcpip.dll DllBase 0x00193690, EntryPoint 0x0ffd0000, SizeOfImage 268317921, BaseDllName rsaenh.dll FullDllName C:\WINDOWS\System32\rsaenh.dll DllBase 0x00193730, EntryPoint 0x77620000, SizeOfImage 2003070992, BaseDllName wzcsvc.dll FullDllName c:\windows\system32\wzcsvc.dll DllBase 0x001937d0, EntryPoint 0x76e80000, SizeOfImage 1994925151, BaseDllName rtutils.dll FullDllName c:\windows\system32\rtutils.dll DllBase 0x00193868, EntryPoint 0x76d30000, SizeOfImage 0, BaseDllName WMI.dll FullDllName c:\windows\system32\WMI.dll DllBase 0x00193908, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x001939a8, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x00193a50, EntryPoint 0x76f50000, SizeOfImage 1995781085, BaseDllName WTSAPI32.dll FullDllName c:\windows\system32\WTSAPI32.dll DllBase 0x00193af0, EntryPoint 0x606b0000, SizeOfImage 1617629917, BaseDllName ESENT.dll FullDllName c:\windows\system32\ESENT.dll DllBase 0x00193b88, EntryPoint 0x76b20000, SizeOfImage 1991418080, BaseDllName ATL.DLL FullDllName c:\windows\system32\ATL.DLL DllBase 0x00193c30, EntryPoint 0x77920000, SizeOfImage 2006062490, BaseDllName SETUPAPI.DLL FullDllName C:\WINDOWS\System32\SETUPAPI.DLL DllBase 0x00193cd0, EntryPoint 0x76b70000, SizeOfImage 1991798229, BaseDllName rastls.dll FullDllName C:\WINDOWS\System32\rastls.dll DllBase 0x00193d70, EntryPoint 0x754d0000, SizeOfImage 1967986347, BaseDllName CRYPTUI.dll FullDllName C:\WINDOWS\system32\CRYPTUI.dll DllBase 0x00193e18, EntryPoint 0x76c30000, SizeOfImage 1992496425, BaseDllName WINTRUST.dll FullDllName C:\WINDOWS\system32\WINTRUST.dll DllBase 0x00193ec0, EntryPoint 0x76c90000, SizeOfImage 1992888941, BaseDllName IMAGEHLP.dll FullDllName C:\WINDOWS\system32\IMAGEHLP.dll DllBase 0x00193f60, EntryPoint 0x771b0000, SizeOfImage 1998263633, BaseDllName WININET.dll FullDllName C:\WINDOWS\system32\WININET.dll DllBase 0x00194000, EntryPoint 0x76d40000, SizeOfImage 1993614945, BaseDllName MPRAPI.dll FullDllName C:\WINDOWS\System32\MPRAPI.dll DllBase 0x001940a8, EntryPoint 0x77cc0000, SizeOfImage 2009862928, BaseDllName ACTIVEDS.dll FullDllName C:\WINDOWS\System32\ACTIVEDS.dll DllBase 0x00194148, EntryPoint 0x76e10000, SizeOfImage 1994461952, BaseDllName adsldpc.dll FullDllName C:\WINDOWS\System32\adsldpc.dll DllBase 0x001941f0, EntryPoint 0x76ee0000, SizeOfImage 1995322021, BaseDllName RASAPI32.dll FullDllName C:\WINDOWS\System32\RASAPI32.dll DllBase 0x00194290, EntryPoint 0x76e90000, SizeOfImage 1994986000, BaseDllName rasman.dll FullDllName C:\WINDOWS\System32\rasman.dll DllBase 0x00194330, EntryPoint 0x76eb0000, SizeOfImage 1995117472, BaseDllName TAPI32.dll FullDllName C:\WINDOWS\System32\TAPI32.dll DllBase 0x001943d8, EntryPoint 0x767f0000, SizeOfImage 1988039789, BaseDllName SCHANNEL.dll FullDllName C:\WINDOWS\System32\SCHANNEL.dll DllBase 0x00194480, EntryPoint 0x723d0000, SizeOfImage 1916605136, BaseDllName WinSCard.dll FullDllName C:\WINDOWS\System32\WinSCard.dll DllBase 0x00194528, EntryPoint 0x76bd0000, SizeOfImage 1992145087, BaseDllName raschap.dll FullDllName C:\WINDOWS\System32\raschap.dll DllBase 0x00194610, EntryPoint 0x77c70000, SizeOfImage 2009548937, BaseDllName msv1_0.dll FullDllName C:\WINDOWS\system32\msv1_0.dll DllBase 0x001946b0, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\System32\CLBCATQ.DLL DllBase 0x00194750, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\System32\COMRes.dll DllBase 0x001948e8, EntryPoint 0x77300000, SizeOfImage 1999681899, BaseDllName schedsvc.dll FullDllName c:\windows\system32\schedsvc.dll DllBase 0x00194848, EntryPoint 0x767a0000, SizeOfImage 1987711568, BaseDllName NTDSAPI.dll FullDllName c:\windows\system32\NTDSAPI.dll DllBase 0x00194988, EntryPoint 0x74f50000, SizeOfImage 1962218177, BaseDllName MSIDLE.DLL FullDllName C:\WINDOWS\System32\MSIDLE.DLL DllBase 0x001947f0, EntryPoint 0x708b0000, SizeOfImage 1888168459, BaseDllName audiosrv.dll FullDllName c:\windows\system32\audiosrv.dll DllBase 0x00194a30, EntryPoint 0x76e40000, SizeOfImage 1994667978, BaseDllName wkssvc.dll FullDllName c:\windows\system32\wkssvc.dll DllBase 0x00194ad8, EntryPoint 0x71d40000, SizeOfImage 1909723837, BaseDllName actxprxy.dll FullDllName C:\WINDOWS\system32\actxprxy.dll DllBase 0x00194b80, EntryPoint 0x76ce0000, SizeOfImage 1993216992, BaseDllName cryptsvc.dll FullDllName c:\windows\system32\cryptsvc.dll DllBase 0x00194c20, EntryPoint 0x77b90000, SizeOfImage 2008619030, BaseDllName certcli.dll FullDllName c:\windows\system32\certcli.dll DllBase 0x00194cc0, EntryPoint 0x767c0000, SizeOfImage 1987845943, BaseDllName w32time.dll FullDllName c:\windows\system32\w32time.dll DllBase 0x00194d60, EntryPoint 0x76080000, SizeOfImage 1980240658, BaseDllName MSVCP60.dll FullDllName c:\windows\system32\MSVCP60.dll DllBase 0x00194e00, EntryPoint 0x75070000, SizeOfImage 1963400639, BaseDllName trkwks.dll FullDllName c:\windows\system32\trkwks.dll DllBase 0x00194ea0, EntryPoint 0x751a0000, SizeOfImage 1964699137, BaseDllName srsvc.dll FullDllName c:\windows\system32\srsvc.dll DllBase 0x00194f48, EntryPoint 0x74ad0000, SizeOfImage 1957499730, BaseDllName POWRPROF.dll FullDllName c:\windows\system32\POWRPROF.dll DllBase 0x00194ff0, EntryPoint 0x73d20000, SizeOfImage 1943146933, BaseDllName seclogon.dll FullDllName c:\windows\system32\seclogon.dll DllBase 0x00195090, EntryPoint 0x77d00000, SizeOfImage 2010127023, BaseDllName netman.dll FullDllName c:\windows\system32\netman.dll DllBase 0x00195138, EntryPoint 0x76400000, SizeOfImage 1983955113, BaseDllName netshell.dll FullDllName c:\windows\system32\netshell.dll DllBase 0x001951d8, EntryPoint 0x76c00000, SizeOfImage 1992344278, BaseDllName credui.dll FullDllName c:\windows\system32\credui.dll DllBase 0x00195278, EntryPoint 0x73030000, SizeOfImage 1929591385, BaseDllName WZCSAPI.DLL FullDllName c:\windows\system32\WZCSAPI.DLL DllBase 0x00195318, EntryPoint 0x75090000, SizeOfImage 1963567846, BaseDllName srvsvc.dll FullDllName c:\windows\system32\srvsvc.dll DllBase 0x001953e0, EntryPoint 0x74f40000, SizeOfImage 1962155692, BaseDllName pchsvc.dll FullDllName c:\windows\pchealth\helpctr\binaries\pchsvc.dll DllBase 0x00195518, EntryPoint 0x77710000, SizeOfImage 2004079882, BaseDllName es.dll FullDllName c:\windows\system32\es.dll DllBase 0x00195480, EntryPoint 0x74f80000, SizeOfImage 1962425078, BaseDllName ersvc.dll FullDllName c:\windows\system32\ersvc.dll DllBase 0x001955c0, EntryPoint 0x74f90000, SizeOfImage 1962479905, BaseDllName dmserver.dll FullDllName c:\windows\system32\dmserver.dll DllBase 0x00195668, EntryPoint 0x59490000, SizeOfImage 1498009826, BaseDllName wmisvc.dll FullDllName c:\windows\system32\wbem\wmisvc.dll DllBase 0x00195708, EntryPoint 0x753e0000, SizeOfImage 1967166274, BaseDllName VSSAPI.DLL FullDllName C:\WINDOWS\system32\VSSAPI.DLL DllBase 0x001957b0, EntryPoint 0x50000000, SizeOfImage 1342181602, BaseDllName wuauserv.dll FullDllName c:\windows\system32\wuauserv.dll DllBase 0x00195850, EntryPoint 0x50040000, SizeOfImage 1343441783, BaseDllName wuaueng.dll FullDllName C:\WINDOWS\system32\wuaueng.dll DllBase 0x001958f0, EntryPoint 0x75260000, SizeOfImage 1965503152, BaseDllName ADVPACK.dll FullDllName C:\WINDOWS\System32\ADVPACK.dll DllBase 0x00195998, EntryPoint 0x76780000, SizeOfImage 1987580272, BaseDllName SHFOLDER.dll FullDllName C:\WINDOWS\System32\SHFOLDER.dll DllBase 0x00195a40, EntryPoint 0x73000000, SizeOfImage 1929399552, BaseDllName WINSPOOL.DRV FullDllName C:\WINDOWS\System32\WINSPOOL.DRV DllBase 0x00195ae0, EntryPoint 0x4d4f0000, SizeOfImage 1297295142, BaseDllName WINHTTP.dll FullDllName C:\WINDOWS\System32\WINHTTP.dll DllBase 0x00195b80, EntryPoint 0x75150000, SizeOfImage 1964314768, BaseDllName Cabinet.dll FullDllName C:\WINDOWS\System32\Cabinet.dll DllBase 0x00195c28, EntryPoint 0x600a0000, SizeOfImage 1611289006, BaseDllName mspatcha.dll FullDllName C:\WINDOWS\System32\mspatcha.dll DllBase 0x00195cc0, EntryPoint 0x76bb0000, SizeOfImage 1991971379, BaseDllName sfc.dll FullDllName C:\WINDOWS\System32\sfc.dll DllBase 0x00195d60, EntryPoint 0x76c60000, SizeOfImage 1992749210, BaseDllName sfc_os.dll FullDllName C:\WINDOWS\System32\sfc_os.dll DllBase 0x00195e00, EntryPoint 0x722d0000, SizeOfImage 1915556515, BaseDllName sens.dll FullDllName c:\windows\system32\sens.dll DllBase 0x00195ea0, EntryPoint 0x76da0000, SizeOfImage 1994003852, BaseDllName browser.dll FullDllName c:\windows\system32\browser.dll DllBase 0x00195f40, EntryPoint 0x4c0a0000, SizeOfImage 1275747947, BaseDllName wscsvc.dll FullDllName c:\windows\system32\wscsvc.dll DllBase 0x00195fd8, EntryPoint 0x745e0000, SizeOfImage 1952329829, BaseDllName msi.dll FullDllName c:\windows\system32\msi.dll DllBase 0x00196088, EntryPoint 0x74ef0000, SizeOfImage 1961824879, BaseDllName wbemprox.dll FullDllName C:\WINDOWS\system32\wbem\wbemprox.dll DllBase 0x00196188, EntryPoint 0x75290000, SizeOfImage 1965688573, BaseDllName wbemcomn.dll FullDllName C:\WINDOWS\system32\wbem\wbemcomn.dll DllBase 0x00196238, EntryPoint 0x762c0000, SizeOfImage 1982931911, BaseDllName wbemcore.dll FullDllName C:\WINDOWS\System32\Wbem\wbemcore.dll DllBase 0x001962d8, EntryPoint 0x75310000, SizeOfImage 1966331650, BaseDllName esscli.dll FullDllName C:\WINDOWS\System32\Wbem\esscli.dll DllBase 0x001963d8, EntryPoint 0x75690000, SizeOfImage 1970096555, BaseDllName FastProx.dll FullDllName C:\WINDOWS\System32\Wbem\FastProx.dll DllBase 0x00196470, EntryPoint 0x75e90000, SizeOfImage 1978356416, BaseDllName SXS.DLL FullDllName C:\WINDOWS\System32\SXS.DLL DllBase 0x001964c8, EntryPoint 0x66460000, SizeOfImage 1716074020, BaseDllName ipnathlp.dll FullDllName c:\windows\system32\ipnathlp.dll DllBase 0x00196520, EntryPoint 0x776c0000, SizeOfImage 2003571152, BaseDllName AUTHZ.dll FullDllName c:\windows\system32\AUTHZ.dll DllBase 0x00196680, EntryPoint 0x75020000, SizeOfImage 1963127777, BaseDllName wmiutils.dll FullDllName C:\WINDOWS\system32\wbem\wmiutils.dll DllBase 0x00196720, EntryPoint 0x76620000, SizeOfImage 1986150637, BaseDllName comsvcs.dll FullDllName C:\WINDOWS\system32\comsvcs.dll DllBase 0x001967c0, EntryPoint 0x75130000, SizeOfImage 1964184742, BaseDllName colbact.DLL FullDllName C:\WINDOWS\system32\colbact.DLL DllBase 0x00196860, EntryPoint 0x750f0000, SizeOfImage 1963922085, BaseDllName MTXCLU.DLL FullDllName C:\WINDOWS\system32\MTXCLU.DLL DllBase 0x00196900, EntryPoint 0x71ad0000, SizeOfImage 1907167289, BaseDllName WSOCK32.dll FullDllName C:\WINDOWS\system32\WSOCK32.dll DllBase 0x001969a0, EntryPoint 0x76d10000, SizeOfImage 1993413081, BaseDllName CLUSAPI.DLL FullDllName C:\WINDOWS\System32\CLUSAPI.DLL DllBase 0x00196a48, EntryPoint 0x750b0000, SizeOfImage 1963659940, BaseDllName RESUTILS.DLL FullDllName C:\WINDOWS\System32\RESUTILS.DLL DllBase 0x00196af8, EntryPoint 0x75200000, SizeOfImage 1965172023, BaseDllName repdrvfs.dll FullDllName C:\WINDOWS\system32\wbem\repdrvfs.dll DllBase 0x00196c48, EntryPoint 0x597f0000, SizeOfImage 1501802666, BaseDllName wmiprvsd.dll FullDllName C:\WINDOWS\system32\wbem\wmiprvsd.dll DllBase 0x00196cf0, EntryPoint 0x5f770000, SizeOfImage 1601638730, BaseDllName NCObjAPI.DLL FullDllName C:\WINDOWS\system32\NCObjAPI.DLL DllBase 0x00196d90, EntryPoint 0x76de0000, SizeOfImage 1994314490, BaseDllName upnp.dll FullDllName C:\WINDOWS\system32\upnp.dll DllBase 0x00196e30, EntryPoint 0x74f00000, SizeOfImage 1961907764, BaseDllName SSDPAPI.dll FullDllName C:\WINDOWS\system32\SSDPAPI.dll DllBase 0x00196ed8, EntryPoint 0x76fc0000, SizeOfImage 1996231727, BaseDllName rasadhlp.dll FullDllName C:\WINDOWS\System32\rasadhlp.dll DllBase 0x00196f78, EntryPoint 0x77b40000, SizeOfImage 2008292371, BaseDllName Apphelp.dll FullDllName C:\WINDOWS\system32\Apphelp.dll DllBase 0x00197028, EntryPoint 0x75390000, SizeOfImage 1966864406, BaseDllName wbemess.dll FullDllName C:\WINDOWS\system32\wbem\wbemess.dll DllBase 0x00197168, EntryPoint 0x506a0000, SizeOfImage 1349347889, BaseDllName wuapi.dll FullDllName C:\WINDOWS\system32\wuapi.dll DllBase 0x00197208, EntryPoint 0x768d0000, SizeOfImage 1989180749, BaseDllName RASDLG.dll FullDllName C:\WINDOWS\System32\RASDLG.dll DllBase 0x001972b0, EntryPoint 0x5f740000, SizeOfImage 1601468462, BaseDllName ncprov.dll FullDllName C:\WINDOWS\system32\wbem\ncprov.dll DllBase 0x00197350, EntryPoint 0x50640000, SizeOfImage 1348763569, BaseDllName wups.dll FullDllName C:\WINDOWS\system32\wups.dll DllBase 0x001974a0, EntryPoint 0x76fb0000, SizeOfImage 1996165469, BaseDllName winrnr.dll FullDllName C:\WINDOWS\System32\winrnr.dll winproc: PID 0x000004d8 - PPID 0x00000258 - DTB 0x07fb0000,0x07ff1000 - Filename svchost.exe - PEB at 0x7ffde000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16786697, BaseDllName svchost.exe FullDllName C:\WINDOWS\system32\svchost.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x00192c68, EntryPoint 0x77690000, SizeOfImage 2003375157, BaseDllName NTMARTA.DLL FullDllName C:\WINDOWS\system32\NTMARTA.DLL DllBase 0x00192d08, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x00192da8, EntryPoint 0x71bf0000, SizeOfImage 1908347277, BaseDllName SAMLIB.dll FullDllName C:\WINDOWS\system32\SAMLIB.dll DllBase 0x00192e50, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x00192ef0, EntryPoint 0x74c40000, SizeOfImage 1959008251, BaseDllName lmhsvc.dll FullDllName c:\windows\system32\lmhsvc.dll DllBase 0x00192f98, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName c:\windows\system32\iphlpapi.dll DllBase 0x00193038, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName c:\windows\system32\WS2_32.dll DllBase 0x001930d8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName c:\windows\system32\WS2HELP.dll DllBase 0x00193178, EntryPoint 0x5a6e0000, SizeOfImage 1517211335, BaseDllName webclnt.dll FullDllName c:\windows\system32\webclnt.dll DllBase 0x00193218, EntryPoint 0x771b0000, SizeOfImage 1998263633, BaseDllName WININET.dll FullDllName C:\WINDOWS\system32\WININET.dll DllBase 0x001932b8, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x00193358, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x001933f8, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName C:\WINDOWS\system32\Secur32.dll DllBase 0x00193498, EntryPoint 0x71ad0000, SizeOfImage 1907167289, BaseDllName wsock32.dll FullDllName C:\WINDOWS\system32\wsock32.dll DllBase 0x00193538, EntryPoint 0x76af0000, SizeOfImage 1991185097, BaseDllName regsvc.dll FullDllName c:\windows\system32\regsvc.dll DllBase 0x001935d8, EntryPoint 0x765e0000, SizeOfImage 1985880687, BaseDllName ssdpsrv.dll FullDllName c:\windows\system32\ssdpsrv.dll DllBase 0x00193678, EntryPoint 0x662b0000, SizeOfImage 1714322001, BaseDllName hnetcfg.dll FullDllName C:\WINDOWS\system32\hnetcfg.dll DllBase 0x00193718, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x001937b8, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll DllBase 0x00193858, EntryPoint 0x71a50000, SizeOfImage 1906644173, BaseDllName mswsock.dll FullDllName C:\WINDOWS\system32\mswsock.dll DllBase 0x00193900, EntryPoint 0x71a90000, SizeOfImage 1906906158, BaseDllName wshtcpip.dll FullDllName C:\WINDOWS\System32\wshtcpip.dll winproc: PID 0x000005cc - PPID 0x00000258 - DTB 0x0899a000,0x0895b000 - Filename spoolsv.exe - PEB at 0x7ffdf000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16795163, BaseDllName spoolsv.exe FullDllName C:\WINDOWS\system32\spoolsv.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001921a8, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x00192248, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x001922e8, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192388, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x00192430, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001924d0, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x00192570, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x00192c68, EntryPoint 0x742e0000, SizeOfImage 1949194787, BaseDllName SPOOLSS.DLL FullDllName C:\WINDOWS\system32\SPOOLSS.DLL DllBase 0x00192d08, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\system32\WS2_32.dll DllBase 0x00192da8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\system32\WS2HELP.dll DllBase 0x00192ee8, EntryPoint 0x76f20000, SizeOfImage 1995615519, BaseDllName DNSAPI.dll FullDllName C:\WINDOWS\system32\DNSAPI.dll DllBase 0x00192f90, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName C:\WINDOWS\system32\iphlpapi.dll DllBase 0x00193178, EntryPoint 0x76fc0000, SizeOfImage 1996231727, BaseDllName rasadhlp.dll FullDllName C:\WINDOWS\system32\rasadhlp.dll DllBase 0x00192e48, EntryPoint 0x75bb0000, SizeOfImage 1975322525, BaseDllName localspl.dll FullDllName C:\WINDOWS\system32\localspl.dll DllBase 0x001930d0, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName C:\WINDOWS\system32\Secur32.dll DllBase 0x00193030, EntryPoint 0x76c60000, SizeOfImage 1992749210, BaseDllName sfc_os.dll FullDllName C:\WINDOWS\system32\sfc_os.dll DllBase 0x00193270, EntryPoint 0x76c30000, SizeOfImage 1992496425, BaseDllName WINTRUST.dll FullDllName C:\WINDOWS\system32\WINTRUST.dll DllBase 0x001932c8, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x00193368, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x00193410, EntryPoint 0x76c90000, SizeOfImage 1992888941, BaseDllName IMAGEHLP.dll FullDllName C:\WINDOWS\system32\IMAGEHLP.dll DllBase 0x001934b8, EntryPoint 0x73000000, SizeOfImage 1929399552, BaseDllName winspool.drv FullDllName C:\WINDOWS\system32\winspool.drv DllBase 0x00193560, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName netapi32.dll FullDllName C:\WINDOWS\system32\netapi32.dll DllBase 0x00193600, EntryPoint 0x742a0000, SizeOfImage 1948914953, BaseDllName cnbjmon.dll FullDllName C:\WINDOWS\system32\cnbjmon.dll DllBase 0x001936a0, EntryPoint 0x74280000, SizeOfImage 1948785005, BaseDllName pjlmon.dll FullDllName C:\WINDOWS\system32\pjlmon.dll DllBase 0x00193740, EntryPoint 0x72400000, SizeOfImage 1916801573, BaseDllName tcpmon.dll FullDllName C:\WINDOWS\system32\tcpmon.dll DllBase 0x001937e0, EntryPoint 0x723f0000, SizeOfImage 1916735963, BaseDllName usbmon.dll FullDllName C:\WINDOWS\system32\usbmon.dll DllBase 0x00193888, EntryPoint 0x71a50000, SizeOfImage 1906644173, BaseDllName mswsock.dll FullDllName C:\WINDOWS\System32\mswsock.dll DllBase 0x00193970, EntryPoint 0x76fb0000, SizeOfImage 1996165469, BaseDllName winrnr.dll FullDllName C:\WINDOWS\System32\winrnr.dll DllBase 0x00193a10, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x00193a68, EntryPoint 0x75c10000, SizeOfImage 1975599131, BaseDllName win32spl.dll FullDllName C:\WINDOWS\system32\win32spl.dll DllBase 0x00193b08, EntryPoint 0x71c80000, SizeOfImage 1908936821, BaseDllName NETRAP.dll FullDllName C:\WINDOWS\system32\NETRAP.dll DllBase 0x00193ba8, EntryPoint 0x767a0000, SizeOfImage 1987711568, BaseDllName NTDSAPI.dll FullDllName C:\WINDOWS\system32\NTDSAPI.dll DllBase 0x00193c48, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x00193ce8, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll DllBase 0x00193d90, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x00193e30, EntryPoint 0x74300000, SizeOfImage 1949307632, BaseDllName inetpp.dll FullDllName C:\WINDOWS\system32\inetpp.dll winproc: PID 0x00000600 - PPID 0x00000588 - DTB 0x08c7f000,0x09000000 - Filename explorer.exe - PEB at 0x7ffdb000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16900686, BaseDllName Explorer.EXE FullDllName C:\WINDOWS\Explorer.EXE DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x00192108, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x001921a8, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x00192248, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x001922e8, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00192388, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192428, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x001924c8, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x00192570, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x00192618, EntryPoint 0x75f80000, SizeOfImage 1979201246, BaseDllName BROWSEUI.dll FullDllName C:\WINDOWS\system32\BROWSEUI.dll DllBase 0x001926b8, EntryPoint 0x7e290000, SizeOfImage 2116705889, BaseDllName SHDOCVW.dll FullDllName C:\WINDOWS\system32\SHDOCVW.dll DllBase 0x00192758, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x001927f8, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x00192898, EntryPoint 0x754d0000, SizeOfImage 1967986347, BaseDllName CRYPTUI.dll FullDllName C:\WINDOWS\system32\CRYPTUI.dll DllBase 0x00192940, EntryPoint 0x76c30000, SizeOfImage 1992496425, BaseDllName WINTRUST.dll FullDllName C:\WINDOWS\system32\WINTRUST.dll DllBase 0x001929e8, EntryPoint 0x76c90000, SizeOfImage 1992888941, BaseDllName IMAGEHLP.dll FullDllName C:\WINDOWS\system32\IMAGEHLP.dll DllBase 0x00192a90, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName NETAPI32.dll FullDllName C:\WINDOWS\system32\NETAPI32.dll DllBase 0x00192b30, EntryPoint 0x771b0000, SizeOfImage 1998263633, BaseDllName WININET.dll FullDllName C:\WINDOWS\system32\WININET.dll DllBase 0x00192bd0, EntryPoint 0x76f60000, SizeOfImage 1995837744, BaseDllName WLDAP32.dll FullDllName C:\WINDOWS\system32\WLDAP32.dll DllBase 0x00192c70, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x00192d10, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x00192db0, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x00192e58, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x00192ef8, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x00192f98, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x00193038, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x00193180, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00193228, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x001932d0, EntryPoint 0x77b40000, SizeOfImage 2008292371, BaseDllName appHelp.dll FullDllName C:\WINDOWS\system32\appHelp.dll DllBase 0x001933b8, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x00193458, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll DllBase 0x001934f8, EntryPoint 0x77a20000, SizeOfImage 2007111664, BaseDllName cscui.dll FullDllName C:\WINDOWS\System32\cscui.dll DllBase 0x00193598, EntryPoint 0x76600000, SizeOfImage 1986007664, BaseDllName CSCDLL.dll FullDllName C:\WINDOWS\System32\CSCDLL.dll DllBase 0x001936d8, EntryPoint 0x5ba60000, SizeOfImage 1537815282, BaseDllName themeui.dll FullDllName C:\WINDOWS\system32\themeui.dll DllBase 0x00193778, EntryPoint 0x77fe0000, SizeOfImage 2013143345, BaseDllName Secur32.dll FullDllName C:\WINDOWS\system32\Secur32.dll DllBase 0x00193818, EntryPoint 0x76380000, SizeOfImage 1983385868, BaseDllName MSIMG32.dll FullDllName C:\WINDOWS\system32\MSIMG32.dll DllBase 0x00193638, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x001938c0, EntryPoint 0x71d40000, SizeOfImage 1909723837, BaseDllName actxprxy.dll FullDllName C:\WINDOWS\system32\actxprxy.dll DllBase 0x00193918, EntryPoint 0x71bf0000, SizeOfImage 1908347277, BaseDllName SAMLIB.dll FullDllName C:\WINDOWS\system32\SAMLIB.dll DllBase 0x001939c0, EntryPoint 0x77920000, SizeOfImage 2006062490, BaseDllName SETUPAPI.dll FullDllName C:\WINDOWS\system32\SETUPAPI.dll DllBase 0x00193a68, EntryPoint 0x76400000, SizeOfImage 1983955113, BaseDllName NETSHELL.dll FullDllName C:\WINDOWS\system32\NETSHELL.dll DllBase 0x00193b08, EntryPoint 0x76e80000, SizeOfImage 1994925151, BaseDllName rtutils.dll FullDllName C:\WINDOWS\system32\rtutils.dll DllBase 0x00193ba8, EntryPoint 0x76c00000, SizeOfImage 1992344278, BaseDllName credui.dll FullDllName C:\WINDOWS\system32\credui.dll DllBase 0x00193c48, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\system32\WS2_32.dll DllBase 0x00193ce8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\system32\WS2HELP.dll DllBase 0x00193d80, EntryPoint 0x76b20000, SizeOfImage 1991418080, BaseDllName ATL.DLL FullDllName C:\WINDOWS\system32\ATL.DLL DllBase 0x00193e28, EntryPoint 0x76d60000, SizeOfImage 1993757450, BaseDllName iphlpapi.dll FullDllName C:\WINDOWS\system32\iphlpapi.dll DllBase 0x00193ec8, EntryPoint 0x76360000, SizeOfImage 1983254752, BaseDllName WINSTA.dll FullDllName C:\WINDOWS\system32\WINSTA.dll DllBase 0x00193f70, EntryPoint 0x74b30000, SizeOfImage 1957894166, BaseDllName webcheck.dll FullDllName C:\WINDOWS\system32\webcheck.dll DllBase 0x00194010, EntryPoint 0x71ad0000, SizeOfImage 1907167289, BaseDllName WSOCK32.dll FullDllName C:\WINDOWS\system32\WSOCK32.dll DllBase 0x001940b8, EntryPoint 0x76280000, SizeOfImage 1982340440, BaseDllName stobject.dll FullDllName C:\WINDOWS\system32\stobject.dll DllBase 0x00194160, EntryPoint 0x74af0000, SizeOfImage 1957630758, BaseDllName BatMeter.dll FullDllName C:\WINDOWS\system32\BatMeter.dll DllBase 0x00194208, EntryPoint 0x74ad0000, SizeOfImage 1957499730, BaseDllName POWRPROF.dll FullDllName C:\WINDOWS\system32\POWRPROF.dll DllBase 0x001942b0, EntryPoint 0x76f50000, SizeOfImage 1995781085, BaseDllName WTSAPI32.dll FullDllName C:\WINDOWS\system32\WTSAPI32.dll DllBase 0x00194348, EntryPoint 0x71b20000, SizeOfImage 1907495498, BaseDllName MPR.dll FullDllName C:\WINDOWS\system32\MPR.dll DllBase 0x001943e8, EntryPoint 0x75f60000, SizeOfImage 1979060513, BaseDllName drprov.dll FullDllName C:\WINDOWS\System32\drprov.dll DllBase 0x00194490, EntryPoint 0x71c10000, SizeOfImage 1908479813, BaseDllName ntlanman.dll FullDllName C:\WINDOWS\System32\ntlanman.dll DllBase 0x00194530, EntryPoint 0x71cd0000, SizeOfImage 1909288257, BaseDllName NETUI0.dll FullDllName C:\WINDOWS\System32\NETUI0.dll DllBase 0x001945d0, EntryPoint 0x71c90000, SizeOfImage 1909101749, BaseDllName NETUI1.dll FullDllName C:\WINDOWS\System32\NETUI1.dll DllBase 0x00194670, EntryPoint 0x71c80000, SizeOfImage 1908936821, BaseDllName NETRAP.dll FullDllName C:\WINDOWS\System32\NETRAP.dll DllBase 0x00194710, EntryPoint 0x75f70000, SizeOfImage 1979126775, BaseDllName davclnt.dll FullDllName C:\WINDOWS\System32\davclnt.dll winproc: PID 0x0000021c - PPID 0x000003d4 - DTB 0x0be81000,0x0be42000 - Filename wuauclt.exe - PEB at 0x7ffd6000 winproc: + ImageBaseAddress: 0x00400000 DllBase 0x001a1ec0, EntryPoint 0x00400000, SizeOfImage 4244888, BaseDllName wuauclt.exe FullDllName C:\WINDOWS\system32\wuauclt.exe DllBase 0x001a1f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x001a1fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x001a2060, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x001a20f8, EntryPoint 0x76b20000, SizeOfImage 1991418080, BaseDllName ATL.DLL FullDllName C:\WINDOWS\system32\ATL.DLL DllBase 0x001a2198, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x001a2238, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x001a22e0, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x001a2380, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x001a24c8, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName COMCTL32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll DllBase 0x001a2568, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x001a2608, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x001a26b0, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x001a2750, EntryPoint 0x50940000, SizeOfImage 1351895412, BaseDllName wuaucpl.cpl FullDllName C:\WINDOWS\system32\wuaucpl.cpl DllBase 0x001a27f8, EntryPoint 0x76780000, SizeOfImage 1987580272, BaseDllName SHFOLDER.dll FullDllName C:\WINDOWS\system32\SHFOLDER.dll DllBase 0x001a2898, EntryPoint 0x50040000, SizeOfImage 1343441783, BaseDllName wuaueng.dll FullDllName C:\WINDOWS\system32\wuaueng.dll DllBase 0x001a2938, EntryPoint 0x75260000, SizeOfImage 1965503152, BaseDllName ADVPACK.dll FullDllName C:\WINDOWS\system32\ADVPACK.dll DllBase 0x001a29d8, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x001a2a78, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x001a2b18, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\system32\WS2_32.dll DllBase 0x001a2bb8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\system32\WS2HELP.dll DllBase 0x001a2c58, EntryPoint 0x606b0000, SizeOfImage 1617629917, BaseDllName ESENT.dll FullDllName C:\WINDOWS\system32\ESENT.dll DllBase 0x001a2d00, EntryPoint 0x76f50000, SizeOfImage 1995781085, BaseDllName WTSAPI32.dll FullDllName C:\WINDOWS\system32\WTSAPI32.dll DllBase 0x001a2da0, EntryPoint 0x76360000, SizeOfImage 1983254752, BaseDllName WINSTA.dll FullDllName C:\WINDOWS\system32\WINSTA.dll DllBase 0x001a2e48, EntryPoint 0x5b860000, SizeOfImage 1535543448, BaseDllName NETAPI32.dll FullDllName C:\WINDOWS\system32\NETAPI32.dll DllBase 0x001a2ef0, EntryPoint 0x73000000, SizeOfImage 1929399552, BaseDllName WINSPOOL.DRV FullDllName C:\WINDOWS\system32\WINSPOOL.DRV DllBase 0x001a2f98, EntryPoint 0x77920000, SizeOfImage 2006062490, BaseDllName SETUPAPI.dll FullDllName C:\WINDOWS\system32\SETUPAPI.dll DllBase 0x001a3038, EntryPoint 0x4d4f0000, SizeOfImage 1297295142, BaseDllName WINHTTP.dll FullDllName C:\WINDOWS\system32\WINHTTP.dll DllBase 0x001a30e0, EntryPoint 0x76c30000, SizeOfImage 1992496425, BaseDllName WINTRUST.dll FullDllName C:\WINDOWS\system32\WINTRUST.dll DllBase 0x001a3180, EntryPoint 0x77a80000, SizeOfImage 2007504450, BaseDllName CRYPT32.dll FullDllName C:\WINDOWS\system32\CRYPT32.dll DllBase 0x001a3220, EntryPoint 0x77b20000, SizeOfImage 2008167321, BaseDllName MSASN1.dll FullDllName C:\WINDOWS\system32\MSASN1.dll DllBase 0x001a32c8, EntryPoint 0x76c90000, SizeOfImage 1992888941, BaseDllName IMAGEHLP.dll FullDllName C:\WINDOWS\system32\IMAGEHLP.dll DllBase 0x001a3368, EntryPoint 0x75150000, SizeOfImage 1964314768, BaseDllName Cabinet.dll FullDllName C:\WINDOWS\system32\Cabinet.dll DllBase 0x001a3410, EntryPoint 0x600a0000, SizeOfImage 1611289006, BaseDllName mspatcha.dll FullDllName C:\WINDOWS\system32\mspatcha.dll DllBase 0x001a34a8, EntryPoint 0x76bb0000, SizeOfImage 1991971379, BaseDllName sfc.dll FullDllName C:\WINDOWS\system32\sfc.dll DllBase 0x001a3548, EntryPoint 0x76c60000, SizeOfImage 1992749210, BaseDllName sfc_os.dll FullDllName C:\WINDOWS\system32\sfc_os.dll DllBase 0x001a35e8, EntryPoint 0x76380000, SizeOfImage 1983385868, BaseDllName MSIMG32.dll FullDllName C:\WINDOWS\system32\MSIMG32.dll DllBase 0x001a3688, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x001a3728, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\system32\ShimEng.dll DllBase 0x001a37d0, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x001a3870, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\system32\WINMM.dll DllBase 0x001a3910, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\system32\MSACM32.dll DllBase 0x001a39b0, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\system32\UxTheme.dll DllBase 0x001a3a58, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\system32\xpsp2res.dll DllBase 0x001a3af8, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\system32\CLBCATQ.DLL DllBase 0x001a3b98, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\system32\COMRes.dll DllBase 0x001a3c88, EntryPoint 0x50640000, SizeOfImage 1348763569, BaseDllName wups.dll FullDllName C:\WINDOWS\system32\wups.dll winproc: PID 0x000003c8 - PPID 0x00000258 - DTB 0x0ce27000,0x0ce68000 - Filename alg.exe - PEB at 0x7ffdb000 winproc: + ImageBaseAddress: 0x01000000 DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage 16800710, BaseDllName alg.exe FullDllName C:\WINDOWS\System32\alg.exe DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134, BaseDllName ntdll.dll FullDllName C:\WINDOWS\system32\ntdll.dll DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902, BaseDllName kernel32.dll FullDllName C:\WINDOWS\system32\kernel32.dll DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265, BaseDllName msvcrt.dll FullDllName C:\WINDOWS\system32\msvcrt.dll DllBase 0x001920f8, EntryPoint 0x76b20000, SizeOfImage 1991418080, BaseDllName ATL.DLL FullDllName C:\WINDOWS\System32\ATL.DLL DllBase 0x00192198, EntryPoint 0x77d40000, SizeOfImage 2010445112, BaseDllName USER32.dll FullDllName C:\WINDOWS\system32\USER32.dll DllBase 0x00192238, EntryPoint 0x77f10000, SizeOfImage 2012308922, BaseDllName GDI32.dll FullDllName C:\WINDOWS\system32\GDI32.dll DllBase 0x001922e0, EntryPoint 0x77dd0000, SizeOfImage 2011001044, BaseDllName ADVAPI32.dll FullDllName C:\WINDOWS\system32\ADVAPI32.dll DllBase 0x00192380, EntryPoint 0x77e70000, SizeOfImage 2011652740, BaseDllName RPCRT4.dll FullDllName C:\WINDOWS\system32\RPCRT4.dll DllBase 0x00192420, EntryPoint 0x774e0000, SizeOfImage 2001719457, BaseDllName ole32.dll FullDllName C:\WINDOWS\system32\ole32.dll DllBase 0x001924c8, EntryPoint 0x77120000, SizeOfImage 1997673816, BaseDllName OLEAUT32.dll FullDllName C:\WINDOWS\system32\OLEAUT32.dll DllBase 0x00192568, EntryPoint 0x71ad0000, SizeOfImage 1907167289, BaseDllName WSOCK32.dll FullDllName C:\WINDOWS\System32\WSOCK32.dll DllBase 0x00192608, EntryPoint 0x71ab0000, SizeOfImage 1907036787, BaseDllName WS2_32.dll FullDllName C:\WINDOWS\System32\WS2_32.dll DllBase 0x001926a8, EntryPoint 0x71aa0000, SizeOfImage 1906972226, BaseDllName WS2HELP.dll FullDllName C:\WINDOWS\System32\WS2HELP.dll DllBase 0x00192748, EntryPoint 0x71a50000, SizeOfImage 1906644173, BaseDllName MSWSOCK.DLL FullDllName C:\WINDOWS\System32\MSWSOCK.DLL DllBase 0x001927e8, EntryPoint 0x5cb70000, SizeOfImage 1555533369, BaseDllName ShimEng.dll FullDllName C:\WINDOWS\System32\ShimEng.dll DllBase 0x00192890, EntryPoint 0x6f880000, SizeOfImage 1871339034, BaseDllName AcGenral.DLL FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL DllBase 0x00192930, EntryPoint 0x76b40000, SizeOfImage 1991519081, BaseDllName WINMM.dll FullDllName C:\WINDOWS\System32\WINMM.dll DllBase 0x001929d0, EntryPoint 0x77be0000, SizeOfImage 2008945298, BaseDllName MSACM32.dll FullDllName C:\WINDOWS\System32\MSACM32.dll DllBase 0x00192a70, EntryPoint 0x77c00000, SizeOfImage 2009076021, BaseDllName VERSION.dll FullDllName C:\WINDOWS\system32\VERSION.dll DllBase 0x00192b10, EntryPoint 0x7c9c0000, SizeOfImage 2090759014, BaseDllName SHELL32.dll FullDllName C:\WINDOWS\system32\SHELL32.dll DllBase 0x00192bb0, EntryPoint 0x77f60000, SizeOfImage 2012631547, BaseDllName SHLWAPI.dll FullDllName C:\WINDOWS\system32\SHLWAPI.dll DllBase 0x00192c50, EntryPoint 0x769c0000, SizeOfImage 1989940692, BaseDllName USERENV.dll FullDllName C:\WINDOWS\system32\USERENV.dll DllBase 0x00192cf0, EntryPoint 0x5ad70000, SizeOfImage 1524045350, BaseDllName UxTheme.dll FullDllName C:\WINDOWS\System32\UxTheme.dll DllBase 0x00192e38, EntryPoint 0x773d0000, SizeOfImage 2000503366, BaseDllName comctl32.dll FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll DllBase 0x00192ee0, EntryPoint 0x5d090000, SizeOfImage 1560884410, BaseDllName comctl32.dll FullDllName C:\WINDOWS\system32\comctl32.dll DllBase 0x00192f80, EntryPoint 0x76fd0000, SizeOfImage 1996304661, BaseDllName CLBCATQ.DLL FullDllName C:\WINDOWS\System32\CLBCATQ.DLL DllBase 0x00193020, EntryPoint 0x77050000, SizeOfImage 1996820565, BaseDllName COMRes.dll FullDllName C:\WINDOWS\System32\COMRes.dll DllBase 0x001930c8, EntryPoint 0x20000000, SizeOfImage 0, BaseDllName xpsp2res.dll FullDllName C:\WINDOWS\System32\xpsp2res.dll fgets() returned ERROR. intr request was 0