0009:Call ntdll.LdrAccessResource(7b820000,7b8bada0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8badb0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8badc0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8badd0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bade0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8badf0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae00,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae00,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae10,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae20,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae30,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae40,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae50,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae60,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae70,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae80,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae90,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bae90,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baea0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baeb0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baec0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baed0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baee0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baef0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baef0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf00,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf10,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf20,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf30,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf30,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf40,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf50,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf60,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf70,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf70,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf80,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baf90,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafa0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafa0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafb0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafc0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafd0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafd0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bafe0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8baff0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb000,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb000,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb010,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb020,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb030,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb030,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb040,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb050,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb060,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb060,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb070,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb080,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb090,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb090,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0a0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0b0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0c0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0d0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0e0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb0f0,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb100,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb110,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb120,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb130,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbee84,00000003,bfbbeea0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb140,bfbbeee8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.NtSetDefaultUILanguage(00000409) ret=7b85dc4f
0009:Ret  ntdll.NtSetDefaultUILanguage() retval=00000000 ret=7b85dc4f
0009:Call ntdll.NtSetDefaultLocale(00000001,00000409) ret=7b85dc68
0009:Ret  ntdll.NtSetDefaultLocale() retval=00000000 ret=7b85dc68
0009:Call ntdll.NtSetDefaultLocale(00000000,00000409) ret=7b85dc81
0009:Ret  ntdll.NtSetDefaultLocale() retval=00000000 ret=7b85dc81
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbf094,00000003,bfbbf0b0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bb1d0,bfbbf0f8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=001122e8 ret=7b84bc3b
0009:Call ntdll.RtlFreeHeap(00110000,00000000,001122e8) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbf094,00000003,bfbbf0b0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8bbad0,bfbbf0f8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=001122e8 ret=7b84bc3b
0009:Call ntdll.RtlFreeHeap(00110000,00000000,001122e8) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.LdrFindResource_U(7b820000,bfbbf094,00000003,bfbbf0b0) ret=7b87d5a2
0009:Ret  ntdll.LdrFindResource_U() retval=00000000 ret=7b87d5a2
0009:Call ntdll.LdrAccessResource(7b820000,7b8b7bd0,bfbbf0f8,00000000) ret=7b87c8a7
0009:Ret  ntdll.LdrAccessResource() retval=00000000 ret=7b87c8a7
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=001122e8 ret=7b84bc3b
0009:Call ntdll.RtlFreeHeap(00110000,00000000,001122e8) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.__wine_init_codepages(b7f923fc,b7f92068,00000000) ret=7b85dd98
0009:Ret  ntdll.__wine_init_codepages() retval=7bc82aa8 ret=7b85dd98
0009:Call ntdll.NtAllocateVirtualMemory(ffffffff,bfbbfd54,00000000,bfbbfd58,00003000,00000004) ret=7b872b22
0009:Ret  ntdll.NtAllocateVirtualMemory() retval=00000000 ret=7b872b22
0009:Call ntdll.RtlInitUnicodeString(bfbbf5dc,7b8a5c00 L"DynData\\PerfStats\\StatData") ret=7b869371
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000034 ret=7b869371
0009:Call ntdll.NtCreateKey(bfbbf5e8,000f003f,bfbbf5b8,00000000,00000000,00000000,bfbbf5e4) ret=7b8693b0
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b8693b0
0009:Call ntdll.NtClose(00000010) ret=7b8697c3
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8697c3
0009:Call ntdll.RtlInitUnicodeString(bfbbf5dc,7b8a5bc0 L"DynData\\Config Manager\\Enum") ret=7b8693dd
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000036 ret=7b8693dd
0009:Call ntdll.NtCreateKey(bfbbf5e8,000f003f,bfbbf5b8,00000000,00000000,00000000,00000000) ret=7b86941a
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b86941a
0009:Call ntdll.NtClose(00000010) ret=7b869857
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b869857
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a56ac "Machine\\HARDWARE\\DEVICEMAP\\Scsi") ret=7b868946
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868946
0009:Call ntdll.NtCreateKey(bfbbf450,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b8689b5
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b8689b5
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8689ca
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8689ca
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Scsi Port 1") ret=7b868a1c
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868a1c
0009:Call ntdll.NtCreateKey(bfbbf44c,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868a9e
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868a9e
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ab7
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ab7
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a59ea "Driver") ret=7b868acf
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868acf
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,7b8a5a06,00000005) ret=7b868b14
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b868b14
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000001,bfbbf38c,0000000a) ret=7b868b4d
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868b4d
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868b58
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868b58
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a59f1 "FirstBusTimeScanInMs") ret=7b868b74
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868b74
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000004,bfbbf454,00000004) ret=7b868bab
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868bab
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868bb6
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868bb6
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5a0c "DMAEnabled") ret=7b868ca3
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868ca3
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000004,bfbbf454,00000004) ret=7b868cdd
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868cdd
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868cee
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868cee
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Scsi Bus 0") ret=7b868c24
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868c24
0009:Call ntdll.NtCreateKey(bfbbf448,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868d35
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868d35
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868d4e
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868d4e
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5a23 "Initiator Id 255") ret=7b868d69
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868d69
0009:Call ntdll.NtCreateKey(bfbbf444,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868dc7
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868dc7
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ddc
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ddc
0009:Call ntdll.NtClose(0000001c) ret=7b868dea
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b868dea
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Target Id 0") ret=7b868e33
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868e33
0009:Call ntdll.NtCreateKey(bfbbf444,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868e8e
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868e8e
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ea3
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ea3
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Logical Unit Id 0") ret=7b868eec
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868eec
0009:Call ntdll.NtCreateKey(bfbbf440,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868f4a
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868f4a
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868f65
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868f65
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5aa1 "Type") ret=7b868fe2
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868fe2
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,7b8a5a91,0000000f) ret=7b869015
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b869015
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,0000001e) ret=7b869048
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b869048
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b869059
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b869059
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5aa6 "Identifier") ret=7b869074
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b869074
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,bfbbf568,00000023) ret=7b8690ad
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b8690ad
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,00000046) ret=7b8690e6
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b8690e6
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8690f1
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8690f1
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5ab5 "DeviceName") ret=7b869251
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b869251
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,bfbbf3f0,00000006) ret=7b8692b8
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b8692b8
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,0000000c) ret=7b8692f1
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b8692f1
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8692fc
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8692fc
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5ab1 "UnixDeviceName") ret=7b869126
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b869126
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,bfbbf540,00000008) ret=7b86915f
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b86915f
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,00000010) ret=7b869198
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b869198
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8691a9
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8691a9
0009:Call ntdll.NtClose(00000020) ret=7b8691b7
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691b7
0009:Call ntdll.NtClose(0000001c) ret=7b8691c5
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691c5
0009:Call ntdll.NtClose(00000018) ret=7b8691d3
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691d3
0009:Call ntdll.NtClose(00000014) ret=7b8691e1
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691e1
0009:Call ntdll.NtClose(00000010) ret=7b8691ef
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691ef
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a56ac "Machine\\HARDWARE\\DEVICEMAP\\Scsi") ret=7b868946
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868946
0009:Call ntdll.NtCreateKey(bfbbf450,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b8689b5
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b8689b5
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8689ca
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8689ca
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Scsi Port 0") ret=7b868a1c
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868a1c
0009:Call ntdll.NtCreateKey(bfbbf44c,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868a9e
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868a9e
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ab7
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ab7
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a59ea "Driver") ret=7b868acf
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868acf
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,7b8a5a06,00000005) ret=7b868b14
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b868b14
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000001,bfbbf38c,0000000a) ret=7b868b4d
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868b4d
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868b58
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868b58
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a59f1 "FirstBusTimeScanInMs") ret=7b868b74
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868b74
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000004,bfbbf454,00000004) ret=7b868bab
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868bab
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868bb6
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868bb6
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5a0c "DMAEnabled") ret=7b868ca3
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868ca3
0009:Call ntdll.NtSetValueKey(00000014,bfbbf430,00000000,00000004,bfbbf454,00000004) ret=7b868cdd
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b868cdd
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868cee
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868cee
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Scsi Bus 0") ret=7b868c24
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868c24
0009:Call ntdll.NtCreateKey(bfbbf448,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868d35
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868d35
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868d4e
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868d4e
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5a23 "Initiator Id 255") ret=7b868d69
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868d69
0009:Call ntdll.NtCreateKey(bfbbf444,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868dc7
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868dc7
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ddc
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ddc
0009:Call ntdll.NtClose(0000001c) ret=7b868dea
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b868dea
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Target Id 1") ret=7b868e33
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868e33
0009:Call ntdll.NtCreateKey(bfbbf444,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868e8e
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868e8e
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868ea3
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868ea3
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,bfbbf3f0 "Logical Unit Id 0") ret=7b868eec
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868eec
0009:Call ntdll.NtCreateKey(bfbbf440,000f003f,bfbbf418,00000000,00000000,00000001,bfbbf43c) ret=7b868f4a
0009:Ret  ntdll.NtCreateKey() retval=00000000 ret=7b868f4a
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b868f65
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b868f65
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5aa1 "Type") ret=7b868fe2
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b868fe2
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,7b8a5a64,0000000e) ret=7b869015
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b869015
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,0000001c) ret=7b869048
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b869048
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b869059
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b869059
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5aa6 "Identifier") ret=7b869074
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b869074
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,bfbbf568,00000009) ret=7b8690ad
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b8690ad
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,00000012) ret=7b8690e6
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b8690e6
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8690f1
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8690f1
0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(bfbbf430,7b8a5ab1 "UnixDeviceName") ret=7b869126
0009:Ret  ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=7b869126
0009:Call ntdll.RtlMultiByteToUnicodeN(bfbbf38c,00000064,bfbbf458,bfbbf540,00000008) ret=7b86915f
0009:Ret  ntdll.RtlMultiByteToUnicodeN() retval=00000000 ret=7b86915f
0009:Call ntdll.NtSetValueKey(00000020,bfbbf430,00000000,00000001,bfbbf38c,00000010) ret=7b869198
0009:Ret  ntdll.NtSetValueKey() retval=00000000 ret=7b869198
0009:Call ntdll.RtlFreeUnicodeString(bfbbf430) ret=7b8691a9
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8691a9
0009:Call ntdll.NtClose(00000020) ret=7b8691b7
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691b7
0009:Call ntdll.NtClose(0000001c) ret=7b8691c5
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691c5
0009:Call ntdll.NtClose(00000018) ret=7b8691d3
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691d3
0009:Call ntdll.NtClose(00000014) ret=7b8691e1
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691e1
0009:Call ntdll.NtClose(00000010) ret=7b8691ef
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b8691ef
0009:Call ntdll.RtlInitUnicodeString(bfbbfd44,7b8a6c40 L"Machine\\System\\CurrentControlSet\\Control\\Session Manager\\Environment") ret=7b872cad
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000088 ret=7b872cad
0009:Call ntdll.NtOpenKey(bfbbfd54,000f003f,bfbbfd00) ret=7b872cd3
0009:Ret  ntdll.NtOpenKey() retval=00000000 ret=7b872cd3
0009:Call ntdll.NtEnumerateValueKey(00000010,00000000,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000001,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000002,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000003,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000004,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000005,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000006,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000007,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000008,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,00000009,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000a,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000b,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000c,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000d,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000e,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.RtlSetEnvironmentVariable(00000000,bfbbf5e0,bfbbf5d8) ret=7b86e4e6
0009:Ret  ntdll.RtlSetEnvironmentVariable() retval=00000000 ret=7b86e4e6
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000f,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=8000001a ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000000,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000001,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000002,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000003,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000004,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000005,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000006,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000007,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000008,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,00000009,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000a,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000b,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000c,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000d,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000e,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=00000000 ret=7b86e45f
0009:Call ntdll.NtEnumerateValueKey(00000010,0000000f,00000001,bfbbe5b8,00000818,bfbbf5e8) ret=7b86e45f
0009:Ret  ntdll.NtEnumerateValueKey() retval=8000001a ret=7b86e45f
0009:Call ntdll.NtClose(00000010) ret=7b873151
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b873151
0009:Call ntdll.RtlOpenCurrentUser(000f003f,bfbbfd04) ret=7b872cf1
0009:Ret  ntdll.RtlOpenCurrentUser() retval=00000000 ret=7b872cf1
0009:Call ntdll.RtlInitUnicodeString(bfbbfd44,7b8a6c28 L"Environment") ret=7b872d0e
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000016 ret=7b872d0e
0009:Call ntdll.NtOpenKey(bfbbfd54,000f003f,bfbbfd00) ret=7b872d31
0009:Ret  ntdll.NtOpenKey() retval=c0000034 ret=7b872d31
0009:Call ntdll.NtClose(00000010) ret=7b872d47
0009:Ret  ntdll.NtClose() retval=00000000 ret=7b872d47
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,7b8a6d1a L"windir") ret=7b83fbaf
0009:Ret  ntdll.RtlInitUnicodeString() retval=0000000c ret=7b83fbaf
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b83fbeb
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=c0000023 ret=7b83fbeb
0009:Call ntdll.RtlNtStatusToDosError(c0000023) ret=7b83fc1d
0009:Ret  ntdll.RtlNtStatusToDosError() retval=0000007a ret=7b83fc1d
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=001122e8 ret=7b84bc3b
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,7b8a6d1a L"windir") ret=7b83fbaf
0009:Ret  ntdll.RtlInitUnicodeString() retval=0000000c ret=7b83fbaf
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b83fbeb
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=00000000 ret=7b83fbeb
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,7b8a6d06 L"winsysdir") ret=7b83fbaf
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000012 ret=7b83fbaf
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b83fbeb
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=c0000023 ret=7b83fbeb
0009:Call ntdll.RtlNtStatusToDosError(c0000023) ret=7b83fc1d
0009:Ret  ntdll.RtlNtStatusToDosError() retval=0000007a ret=7b83fc1d
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000028) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114760 ret=7b84bc3b
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,7b8a6d06 L"winsysdir") ret=7b83fbaf
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000012 ret=7b83fbaf
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b83fbeb
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=00000000 ret=7b83fbeb
0009:Call ntdll.RtlDosPathNameToNtPathName_U(001122e8 L"c:\\windows",bfbbf5e0,00000000,00000000) ret=7b844988
0009:Ret  ntdll.RtlDosPathNameToNtPathName_U() retval=00000001 ret=7b844988
0009:Call ntdll.NtQueryAttributesFile(bfbbf5c8,bfbbf5a0) ret=7b844a2b
0009:Ret  ntdll.NtQueryAttributesFile() retval=00000000 ret=7b844a2b
0009:Call ntdll.RtlFreeUnicodeString(bfbbf5e0) ret=7b844a39
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b844a39
0009:Call ntdll.RtlDosPathNameToNtPathName_U(00114760 L"c:\\windows\\system32",bfbbf5e0,00000000,00000000) ret=7b844988
0009:Ret  ntdll.RtlDosPathNameToNtPathName_U() retval=00000001 ret=7b844988
0009:Call ntdll.NtQueryAttributesFile(bfbbf5c8,bfbbf5a0) ret=7b844a2b
0009:Ret  ntdll.NtQueryAttributesFile() retval=00000000 ret=7b844a2b
0009:Call ntdll.RtlFreeUnicodeString(bfbbf5e0) ret=7b844a39
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b844a39
0009:Call ntdll.__wine_init_windows_dir(001122e8 L"c:\\windows",00114760 L"c:\\windows\\system32") ret=7b87225b
0009:Ret  ntdll.__wine_init_windows_dir() retval=00000018 ret=7b87225b
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000100) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114858 ret=7b84bc3b
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000005c) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114960 ret=7b84bc3b
0009:Call ntdll.RtlInitUnicodeString(bfbbfd44,00114960 L"/home/don/.wine/drive_c/Program Files/Xenimus") ret=7b8730b6
0009:Ret  ntdll.RtlInitUnicodeString() retval=0000005a ret=7b8730b6
0009:Call ntdll.RtlSetCurrentDirectory_U(bfbbfd44) ret=7b8730c1
0009:Ret  ntdll.RtlSetCurrentDirectory_U() retval=00000000 ret=7b8730c1
0009:Call ntdll.RtlFreeUnicodeString(bfbbfd44) ret=7b8730cc
0009:Ret  ntdll.RtlFreeUnicodeString() retval=00000001 ret=7b8730cc
0009:Call ntdll.RtlFreeHeap(00110000,00000000,00114858) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000022) ret=7b872507
0009:Ret  ntdll.RtlAllocateHeap() retval=00114858 ret=7b872507
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000015) ret=7b872649
0009:Ret  ntdll.RtlAllocateHeap() retval=00114888 ret=7b872649
0009:Call ntdll.RtlDetermineDosPathNameType_U(00114860 L"xeniumus.exe") ret=7b86aec2
0009:Ret  ntdll.RtlDetermineDosPathNameType_U() retval=00000005 ret=7b86aec2
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000006c) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=001148a8 ret=7b84bc3b
0009:Call ntdll.RtlInitUnicodeString(bfbbf5a4,7b8a46e8 L"PATH") ret=7b86166c
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000008 ret=7b86166c
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5a4,bfbbf59c) ret=7b86169f
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=c0000023 ret=7b86169f
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,000000a4) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114920 ret=7b84bc3b
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5a4,bfbbf59c) ret=7b861856
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=00000000 ret=7b861856
0009:Call ntdll.RtlDosSearchPath_U(00114920 L".;c:\\windows\\system32;c:\\windows\\system;c:\\windows;c:\\windows\\system32;c:\\windows",00114860 L"xeniumus.exe",7b8a6c08 L".exe",00000208,bfbbfaf6,00000000) ret=7b86af74
0009:Ret  ntdll.RtlDosSearchPath_U() retval=00000000 ret=7b86af74
0009:Call ntdll.RtlFreeHeap(00110000,00000000,00114920) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7b8732a4
0009:Ret  ntdll.RtlAllocateHeap() retval=00114920 ret=7b8732a4
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,7b8a46e8 L"PATH") ret=7b86166c
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000008 ret=7b86166c
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b86169f
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=c0000023 ret=7b86169f
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,000000cc) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114948 ret=7b84bc3b
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf5e4,bfbbf5dc) ret=7b861856
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=00000000 ret=7b861856
0009:Call ntdll.RtlInitUnicodeString(7bc93a10,00114948 L"c:\\windows\\system32;.;c:\\windows\\system32;c:\\windows\\system;c:\\windows;c:\\windows\\system32;c:\\windows") ret=7b872812
0009:Ret  ntdll.RtlInitUnicodeString() retval=000000ca ret=7b872812
0009:Call ntdll.RtlInitUnicodeString(bfbbf5e4,bfbbfaf6 L"c:\\windows\\system32\\xeniumus.exe") ret=7b861c9e
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000040 ret=7b861c9e
0009:Call ntdll.RtlInitUnicodeString(bfbbf364,7b8a46e8 L"PATH") ret=7b86166c
0009:Ret  ntdll.RtlInitUnicodeString() retval=00000008 ret=7b86166c
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf364,bfbbf35c) ret=7b86169f
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=c0000023 ret=7b86169f
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,000000a4) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114a20 ret=7b84bc3b
0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,bfbbf364,bfbbf35c) ret=7b861856
0009:Ret  ntdll.RtlQueryEnvironmentVariable_U() retval=00000000 ret=7b861856
0009:Call ntdll.LdrLoadDll(00114a20 L".;c:\\windows\\system32;c:\\windows\\system;c:\\windows;c:\\windows\\system32;c:\\windows",00000001,bfbbf5e4,bfbbf5b8) ret=7b861aab
0009:Ret  ntdll.LdrLoadDll() retval=c0000135 ret=7b861aab
0009:Call ntdll.RtlFreeHeap(00110000,00000000,00114a20) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.RtlNtStatusToDosError(c0000135) ret=7b861b4f
0009:Ret  ntdll.RtlNtStatusToDosError() retval=0000007e ret=7b861b4f
0009:Call ntdll.RtlFindMessage(7b820000,0000000b,00000000,0000007e,bfbbf568) ret=7b847ca4
0009:Ret  ntdll.RtlFindMessage() retval=00000000 ret=7b847ca4
0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114a20 ret=7b84bc3b
0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000064) ret=7b84bc3b
0009:Ret  ntdll.RtlAllocateHeap() retval=00114a40 ret=7b84bc3b
0009:Call ntdll.RtlReAllocateHeap(00110000,00000008,00114a40,00000400) ret=7b84bbc2
0009:Ret  ntdll.RtlReAllocateHeap() retval=00114a40 ret=7b84bbc2
0009:Call ntdll.RtlFreeHeap(00110000,00000000,00114a40) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
0009:Call ntdll.RtlFreeHeap(00110000,00000000,00114a20) ret=7b84bbfb
0009:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7b84bbfb
wine: could not load L"c:\\windows\\system32\\xeniumus.exe": Module not found
0009:Call ntdll.LdrShutdownProcess() ret=7b86d9cf
0009:Ret  ntdll.LdrShutdownProcess() retval=00000000 ret=7b86d9cf
0009:Call ntdll.NtTerminateProcess(ffffffff,0000007e) ret=7b86d9df
don@dads:~/.wine/drive_c/Program Files/Xenimus$