Process Dump v2.0 Copyright © 2016, Geoff McDonald http://www.split-code.com/ https://github.com/glmcdona/Process-Dump WARNING: This tool should be run with administrator rights for best results. Loading clean hash database from 'C:\Tools\splitcode\clean.hashes'. Loaded 0 clean hashes from database. ...adding process to work queue: pid 0x4,System ...adding process to work queue: pid 0x298,smss.exe ...adding process to work queue: pid 0x2c8,csrss.exe ...adding process to work queue: pid 0x2e0,winlogon.exe ...adding process to work queue: pid 0x30c,services.exe ...adding process to work queue: pid 0x318,lsass.exe ...adding process to work queue: pid 0x3cc,svchost.exe ...adding process to work queue: pid 0x410,svchost.exe ...adding process to work queue: pid 0x470,svchost.exe ...adding process to work queue: pid 0x4d4,svchost.exe ...adding process to work queue: pid 0x514,svchost.exe ...adding process to work queue: pid 0x570,spoolsv.exe ...adding process to work queue: pid 0x690,GoogleUpdate.exe ...adding process to work queue: pid 0x6e0,explorer.exe ...adding process to work queue: pid 0x76c,msnmsgr.exe ...adding process to work queue: pid 0x778,ctfmon.exe ...adding process to work queue: pid 0x79c,ApacheMonitor.exe ...adding process to work queue: pid 0x7c4,cmd.exe ...adding process to work queue: pid 0x7ec,cmd.exe ...adding process to work queue: pid 0x4e8,svchost.exe ...adding process to work queue: pid 0x394,Apache.exe ...adding process to work queue: pid 0x65c,Apache.exe ...adding process to work queue: pid 0x728,jqs.exe ...adding process to work queue: pid 0xa44,vmremoteguest.exe ...adding process to work queue: pid 0xc70,wscntfy.exe ...adding process to work queue: pid 0xcbc,alg.exe ...adding process to work queue: pid 0xd68,test.exe ...adding process to work queue: pid 0xee0,pd32.exe dumping process unknown with pid 0x4... ... building import reconstruction table ... WARNING: Could not gather process information for process pid 0x4, error code (8). WARNING: Could not gather process information for process pid 0x4, error code (8). INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process smss_exe with pid 0x298... ... building import reconstruction table ... WARNING: Could not gather process information for process pid 0x4, error code (8). INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name smss.exe. INFO: Loading PE header for smss.exe. INFO: Loaded PE header for smss.exe. Somewhat parsed: 1 INFO: Loading sections for smss.exe. INFO: smss.exe #0 .text 0x1000 0xac00 INFO: smss.exe #1 .data 0xc000 0x400 INFO: smss.exe #2 .rsrc 0xd000 0x600 INFO: smss.exe #3 .reloc 0xe000 0xc00 dumping process csrss_exe with pid 0x2c8... ... building import reconstruction table ... INFO: Loaded sections for smss.exe with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. dumping process winlogon_exe with pid 0x2e0... ... building import reconstruction table ... INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name basesrv.dll. INFO: Loading PE header for basesrv.dll. INFO: Loaded PE header for basesrv.dll. Somewhat parsed: 1 INFO: Loading sections for basesrv.dll. INFO: basesrv.dll #0 .text 0x1000 0xb600 INFO: basesrv.dll #1 .data 0xd000 0x400 INFO: basesrv.dll #2 .rsrc 0xe000 0x400 INFO: basesrv.dll #3 .reloc 0xf000 0xc00 INFO: Loaded sections for basesrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name csrss.exe. INFO: Loading PE header for csrss.exe. INFO: Loaded PE header for csrss.exe. Somewhat parsed: 1 INFO: Loading sections for csrss.exe. INFO: csrss.exe #0 .text 0x1000 0xc00 INFO: csrss.exe #1 .data 0x2000 0x200 INFO: csrss.exe #2 .rsrc 0x3000 0x400 INFO: csrss.exe #3 .reloc 0x4000 0x200 INFO: Loaded sections for csrss.exe with result: 1. 4 sections found. INFO: Initialized header for module name sxs.dll. INFO: Loading PE header for sxs.dll. INFO: Loaded PE header for sxs.dll. Somewhat parsed: 1 INFO: Loading sections for sxs.dll. INFO: sxs.dll #0 .text 0x1000 0x98e00 INFO: sxs.dll #1 .data 0x9a000 0x2800 INFO: sxs.dll #2 .rsrc 0x9d000 0x9800 INFO: sxs.dll #3 .reloc 0xa7000 0x9000 dumping process services_exe with pid 0x30c... ... building import reconstruction table ... dumping process lsass_exe with pid 0x318... ... building import reconstruction table ... INFO: Loaded sections for sxs.dll with result: 1. 4 sections found. INFO: Initialized header for module name KERNEL32.dll. INFO: Loading PE header for KERNEL32.dll. INFO: Loaded PE header for KERNEL32.dll. Somewhat parsed: 1 INFO: Loading sections for KERNEL32.dll. INFO: KERNEL32.dll #0 .text 0x1000 0x83200 INFO: KERNEL32.dll #1 .data 0x85000 0x2600 INFO: KERNEL32.dll #2 .rsrc 0x8a000 0x66000 INFO: KERNEL32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for KERNEL32.dll with result: 1. 4 sections found. INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name winlogon.exe. INFO: Loading PE header for winlogon.exe. INFO: Loaded PE header for winlogon.exe. Somewhat parsed: 1 INFO: Loading sections for winlogon.exe. INFO: winlogon.exe #0 .text 0x1000 0x70a00 INFO: winlogon.exe #1 .data 0x72000 0x2000 INFO: winlogon.exe #2 .rsrc 0x77000 0x9200 INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for winlogon.exe with result: 1. 3 sections found. INFO: Initialized header for module name sxs.dll. INFO: Loading PE header for sxs.dll. INFO: Loaded PE header for sxs.dll. Somewhat parsed: 1 INFO: Loading sections for sxs.dll. INFO: sxs.dll #0 .text 0x1000 0x98e00 INFO: sxs.dll #1 .data 0x9a000 0x2800 INFO: sxs.dll #2 .rsrc 0x9d000 0x9800 INFO: sxs.dll #3 .reloc 0xa7000 0x9000 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Loaded sections for sxs.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name lsass.exe. INFO: Loading PE header for lsass.exe. INFO: Loaded PE header for lsass.exe. Somewhat parsed: 1 INFO: Loading sections for lsass.exe. INFO: lsass.exe #0 .text 0x1000 0x1200 INFO: lsass.exe #1 .data 0x3000 0x200 INFO: lsass.exe #2 .rsrc 0x4000 0x1c00 INFO: Loaded sections for lsass.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 dumping process svchost_exe with pid 0x3cc... ... building import reconstruction table ... INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name wdigest.dll. INFO: Loading PE header for wdigest.dll. INFO: Loaded PE header for wdigest.dll. Somewhat parsed: 1 INFO: Loading sections for wdigest.dll. INFO: wdigest.dll #0 .text 0x1000 0xae00 INFO: wdigest.dll #1 .data 0xc000 0x200 INFO: wdigest.dll #2 .rsrc 0xd000 0x400 INFO: wdigest.dll #3 .reloc 0xe000 0x800 INFO: Loaded sections for wdigest.dll with result: 1. 4 sections found. INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name LSASRV.dll. INFO: Loading PE header for LSASRV.dll. INFO: Loaded PE header for LSASRV.dll. Somewhat parsed: 1 INFO: Loading sections for LSASRV.dll. INFO: LSASRV.dll #0 .text 0x1000 0x9d800 INFO: LSASRV.dll #1 .data 0x9f000 0x4000 INFO: LSASRV.dll #2 .rsrc 0xa4000 0x9400 INFO: LSASRV.dll #3 .reloc 0xae000 0x6c00 INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for LSASRV.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name MSGINA.dll. INFO: Loading PE header for MSGINA.dll. INFO: Loaded PE header for MSGINA.dll. Somewhat parsed: 1 INFO: Loading sections for MSGINA.dll. INFO: MSGINA.dll #0 .text 0x1000 0x2b400 INFO: MSGINA.dll #1 .data 0x2d000 0x1400 INFO: MSGINA.dll #2 .rsrc 0x30000 0xc4800 INFO: MSGINA.dll #3 .reloc 0xf5000 0x2400 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 dumping process svchost_exe with pid 0x410... ... building import reconstruction table ... INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for MSGINA.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process svchost_exe with pid 0x4d4... ... building import reconstruction table ... INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name msprivs.dll. INFO: Loading PE header for msprivs.dll. INFO: Loaded PE header for msprivs.dll. Somewhat parsed: 1 INFO: Loading sections for msprivs.dll. INFO: msprivs.dll #0 .rsrc 0x1000 0xb600 INFO: msprivs.dll #1 .reloc 0xd000 0x200 INFO: Loaded sections for msprivs.dll with result: 1. 2 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dnsrslvr.dll. INFO: Loading PE header for dnsrslvr.dll. INFO: Loaded PE header for dnsrslvr.dll. Somewhat parsed: 1 INFO: Loading sections for dnsrslvr.dll. INFO: dnsrslvr.dll #0 .text 0x1000 0x8e00 INFO: dnsrslvr.dll #1 .data 0xa000 0xe00 INFO: dnsrslvr.dll #2 .rsrc 0xb000 0x800 INFO: dnsrslvr.dll #3 .reloc 0xc000 0xa00 INFO: Loaded sections for dnsrslvr.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process svchost_exe with pid 0x514... ... building import reconstruction table ... INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name regsvc.dll. INFO: Loading PE header for regsvc.dll. INFO: Loaded PE header for regsvc.dll. Somewhat parsed: 1 INFO: Loading sections for regsvc.dll. INFO: regsvc.dll #0 .text 0x1000 0xd000 INFO: regsvc.dll #1 .data 0xe000 0x600 INFO: regsvc.dll #2 .rsrc 0x10000 0x400 INFO: regsvc.dll #3 .reloc 0x11000 0xc00 INFO: Loaded sections for regsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name webclnt.dll. INFO: Loading PE header for webclnt.dll. INFO: Loaded PE header for webclnt.dll. Somewhat parsed: 1 INFO: Loading sections for webclnt.dll. INFO: webclnt.dll #0 .text 0x1000 0xe000 INFO: webclnt.dll #1 .data 0xf000 0x1200 INFO: webclnt.dll #2 .rsrc 0x13000 0x400 INFO: webclnt.dll #3 .reloc 0x14000 0x1000 INFO: Loaded sections for webclnt.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 dumping process svchost_exe with pid 0x470... ... building import reconstruction table ... INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTDSAPI.dll. INFO: Loading PE header for NTDSAPI.dll. INFO: Loaded PE header for NTDSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for NTDSAPI.dll. INFO: NTDSAPI.dll #0 .text 0x1000 0xf000 INFO: NTDSAPI.dll #1 .data 0x10000 0x600 INFO: NTDSAPI.dll #2 .rsrc 0x11000 0x400 INFO: NTDSAPI.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for NTDSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name psbase.dll. INFO: Loading PE header for psbase.dll. INFO: Loaded PE header for psbase.dll. Somewhat parsed: 1 INFO: Loading sections for psbase.dll. INFO: psbase.dll #0 .text 0x1000 0xf400 INFO: psbase.dll #1 .data 0x11000 0x200 INFO: psbase.dll #2 .rsrc 0x12000 0x7400 INFO: psbase.dll #3 .reloc 0x1a000 0xc00 INFO: Loaded sections for psbase.dll with result: 1. 4 sections found. INFO: Initialized header for module name kerberos.dll. INFO: Loading PE header for kerberos.dll. INFO: Loaded PE header for kerberos.dll. Somewhat parsed: 1 INFO: Loading sections for kerberos.dll. INFO: kerberos.dll #0 .text 0x1000 0x42400 INFO: kerberos.dll #1 .data 0x44000 0x1a00 INFO: kerberos.dll #2 .rsrc 0x46000 0x2200 INFO: kerberos.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for kerberos.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMSRV.dll. INFO: Loading PE header for SAMSRV.dll. INFO: Loaded PE header for SAMSRV.dll. Somewhat parsed: 1 INFO: Loading sections for SAMSRV.dll. INFO: SAMSRV.dll #0 .text 0x1000 0x53c00 INFO: SAMSRV.dll #1 .data 0x55000 0x2800 INFO: SAMSRV.dll #2 .rsrc 0x5a000 0xbe00 INFO: SAMSRV.dll #3 .reloc 0x66000 0x3200 INFO: Loaded sections for SAMSRV.dll with result: 1. 4 sections found. INFO: Initialized header for module name cryptdll.dll. INFO: Loading PE header for cryptdll.dll. INFO: Loaded PE header for cryptdll.dll. Somewhat parsed: 1 INFO: Loading sections for cryptdll.dll. INFO: cryptdll.dll #0 .text 0x1000 0x6200 INFO: cryptdll.dll #1 .data 0x8000 0x1200 INFO: cryptdll.dll #2 .rsrc 0xa000 0x400 INFO: cryptdll.dll #3 .reloc 0xb000 0x600 INFO: Loaded sections for cryptdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name WINIPSEC.DLL. INFO: Loading PE header for WINIPSEC.DLL. INFO: Loaded PE header for WINIPSEC.DLL. Somewhat parsed: 1 INFO: Loading sections for WINIPSEC.DLL. INFO: WINIPSEC.DLL #0 .text 0x1000 0x6e00 INFO: WINIPSEC.DLL #1 .data 0x8000 0x200 INFO: WINIPSEC.DLL #2 .rsrc 0x9000 0x400 INFO: WINIPSEC.DLL #3 .reloc 0xa000 0x600 INFO: Loaded sections for WINIPSEC.DLL with result: 1. 4 sections found. INFO: Initialized header for module name setupapi.dll. INFO: Loading PE header for setupapi.dll. INFO: Loaded PE header for setupapi.dll. Somewhat parsed: 1 INFO: Loading sections for setupapi.dll. INFO: setupapi.dll #0 .text 0x1000 0x7d000 INFO: setupapi.dll #1 .data 0x7e000 0x1800 INFO: setupapi.dll #2 .rsrc 0x80000 0x6d600 INFO: setupapi.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for setupapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name schannel.dll. INFO: Loading PE header for schannel.dll. INFO: Loaded PE header for schannel.dll. Somewhat parsed: 1 INFO: Loading sections for schannel.dll. INFO: schannel.dll #0 .text 0x1000 0x20c00 INFO: schannel.dll #1 .data 0x22000 0xe00 INFO: schannel.dll #2 .rsrc 0x24000 0x400 INFO: schannel.dll #3 .reloc 0x25000 0x1200 INFO: Loaded sections for schannel.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name oakley.DLL. INFO: Loading PE header for oakley.DLL. INFO: Loaded PE header for oakley.DLL. Somewhat parsed: 1 INFO: Loading sections for oakley.DLL. INFO: oakley.DLL #0 .text 0x1000 0x30c00 INFO: oakley.DLL #1 .data 0x32000 0xd400 INFO: oakley.DLL #2 .rsrc 0xcb000 0x1a00 INFO: oakley.DLL #3 .reloc 0xcd000 0x2200 INFO: Loaded sections for oakley.DLL with result: 1. 4 sections found. INFO: Initialized header for module name msv1_0.dll. INFO: Loading PE header for msv1_0.dll. INFO: Loaded PE header for msv1_0.dll. Somewhat parsed: 1 INFO: Loading sections for msv1_0.dll. INFO: msv1_0.dll #0 .text 0x1000 0x1ca00 INFO: msv1_0.dll #1 .data 0x1e000 0x1200 INFO: msv1_0.dll #2 .rsrc 0x20000 0x1200 INFO: msv1_0.dll #3 .reloc 0x22000 0x1400 INFO: Loaded sections for msv1_0.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name netlogon.dll. INFO: Loading PE header for netlogon.dll. INFO: Loaded PE header for netlogon.dll. Somewhat parsed: 1 INFO: Loading sections for netlogon.dll. INFO: netlogon.dll #0 .text 0x1000 0x5d000 INFO: netlogon.dll #1 .data 0x5e000 0x1800 INFO: netlogon.dll #2 .rsrc 0x60000 0xc00 INFO: netlogon.dll #3 .reloc 0x61000 0x3e00 INFO: Loaded sections for netlogon.dll with result: 1. 4 sections found. INFO: Initialized header for module name w32time.dll. INFO: Loading PE header for w32time.dll. INFO: Loaded PE header for w32time.dll. Somewhat parsed: 1 INFO: Loading sections for w32time.dll. INFO: w32time.dll #0 .text 0x1000 0x23000 INFO: w32time.dll #1 .data 0x24000 0xc00 INFO: w32time.dll #2 .rsrc 0x25000 0x4e00 INFO: w32time.dll #3 .reloc 0x2a000 0x1e00 INFO: Loaded sections for w32time.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name scecli.dll. INFO: Loading PE header for scecli.dll. INFO: Loaded PE header for scecli.dll. Somewhat parsed: 1 INFO: Loading sections for scecli.dll. INFO: scecli.dll #0 .text 0x1000 0x24c00 INFO: scecli.dll #1 .data 0x26000 0x800 INFO: scecli.dll #2 .rsrc 0x28000 0x4e00 INFO: scecli.dll #3 .reloc 0x2d000 0x1e00 INFO: Loaded sections for scecli.dll with result: 1. 4 sections found. INFO: Initialized header for module name ipsecsvc.dll. INFO: Loading PE header for ipsecsvc.dll. INFO: Loaded PE header for ipsecsvc.dll. Somewhat parsed: 1 INFO: Loading sections for ipsecsvc.dll. INFO: ipsecsvc.dll #0 .text 0x1000 0x25800 INFO: ipsecsvc.dll #1 .data 0x27000 0x3800 INFO: ipsecsvc.dll #2 .rsrc 0x2b000 0x2000 INFO: ipsecsvc.dll #3 .reloc 0x2d000 0x1a00 INFO: Loaded sections for ipsecsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name AUTHZ.dll. INFO: Loading PE header for AUTHZ.dll. INFO: Loaded PE header for AUTHZ.dll. Somewhat parsed: 1 INFO: Loading sections for AUTHZ.dll. INFO: AUTHZ.dll #0 .text 0x1000 0xe000 INFO: AUTHZ.dll #1 .data 0xf000 0x400 INFO: AUTHZ.dll #2 .rsrc 0x10000 0x400 INFO: AUTHZ.dll #3 .reloc 0x11000 0x800 INFO: Loaded sections for AUTHZ.dll with result: 1. 4 sections found. INFO: Initialized header for module name pstorsvc.dll. INFO: Loading PE header for pstorsvc.dll. INFO: Loaded PE header for pstorsvc.dll. Somewhat parsed: 1 INFO: Loading sections for pstorsvc.dll. INFO: pstorsvc.dll #0 .text 0x1000 0x6c00 INFO: pstorsvc.dll #1 .data 0x8000 0x200 INFO: pstorsvc.dll #2 .rsrc 0x9000 0xe00 INFO: pstorsvc.dll #3 .reloc 0xa000 0x600 INFO: Loaded sections for pstorsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name dssenh.dll. INFO: Loading PE header for dssenh.dll. INFO: Loaded PE header for dssenh.dll. Somewhat parsed: 1 INFO: Loading sections for dssenh.dll. INFO: dssenh.dll #0 .text 0x1000 0x1f400 INFO: dssenh.dll #1 .data 0x21000 0x1200 INFO: dssenh.dll #2 .rsrc 0x24000 0x600 INFO: dssenh.dll #3 .reloc 0x25000 0xe00 INFO: Loaded sections for dssenh.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for WINMM.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: Loading sections for ADVAPI32.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 dumping process Explorer_EXE with pid 0x6e0... ... building import reconstruction table ... INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Initialized header for module name CSRSRV.dll. INFO: Loading PE header for CSRSRV.dll. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 dumping process GoogleUpdate_exe with pid 0x690... ... building import reconstruction table ... INFO: Loaded PE header for CSRSRV.dll. Somewhat parsed: 1 INFO: Loading sections for CSRSRV.dll. INFO: CSRSRV.dll #0 .text 0x1000 0x6c00 INFO: CSRSRV.dll #1 .data 0x8000 0x200 INFO: CSRSRV.dll #2 .rsrc 0x9000 0x400 INFO: CSRSRV.dll #3 .reloc 0xa000 0x800 INFO: Loaded sections for CSRSRV.dll with result: 1. 4 sections found. INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name winsrv.dll. INFO: Loading PE header for winsrv.dll. INFO: Loaded PE header for winsrv.dll. Somewhat parsed: 1 INFO: Loading sections for winsrv.dll. INFO: winsrv.dll #0 .text 0x1000 0x35400 INFO: winsrv.dll #1 FE_TEXT 0x37000 0x5800 INFO: winsrv.dll #2 .data 0x3d000 0xe00 INFO: winsrv.dll #3 .rsrc 0x3e000 0x9a00 INFO: winsrv.dll #4 .reloc 0x48000 0x2200 INFO: Initialized header for module name WINSPOOL.DRV. INFO: Loading PE header for WINSPOOL.DRV. INFO: Loaded PE header for WINSPOOL.DRV. Somewhat parsed: 1 INFO: Loading sections for WINSPOOL.DRV. INFO: WINSPOOL.DRV #0 .text 0x1000 0x20000 INFO: WINSPOOL.DRV #1 .data 0x21000 0x1800 INFO: WINSPOOL.DRV #2 .rsrc 0x23000 0xa00 INFO: WINSPOOL.DRV #3 .reloc 0x24000 0x1600 INFO: Loaded sections for WINSPOOL.DRV with result: 1. 4 sections found. INFO: Initialized header for module name AUTHZ.dll. INFO: Loading PE header for AUTHZ.dll. INFO: Loaded PE header for AUTHZ.dll. Somewhat parsed: 1 INFO: Loading sections for AUTHZ.dll. INFO: AUTHZ.dll #0 .text 0x1000 0xe000 INFO: AUTHZ.dll #1 .data 0xf000 0x400 INFO: AUTHZ.dll #2 .rsrc 0x10000 0x400 INFO: AUTHZ.dll #3 .reloc 0x11000 0x800 INFO: Loaded sections for AUTHZ.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded sections for winsrv.dll with result: 1. 5 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dimsntfy.dll. INFO: Loading PE header for dimsntfy.dll. INFO: Loaded PE header for dimsntfy.dll. Somewhat parsed: 1 INFO: Loading sections for dimsntfy.dll. INFO: dimsntfy.dll #0 .text 0x1000 0x3c00 INFO: dimsntfy.dll #1 .data 0x5000 0x200 INFO: dimsntfy.dll #2 .rsrc 0x6000 0x400 INFO: dimsntfy.dll #3 .reloc 0x7000 0x600 INFO: Loaded sections for dimsntfy.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 dumping process msnmsgr_exe with pid 0x76c... ... building import reconstruction table ... INFO: Initialized header for module name RASDLG.dll. INFO: Loading PE header for RASDLG.dll. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded PE header for RASDLG.dll. Somewhat parsed: 1 INFO: Loading sections for RASDLG.dll. INFO: RASDLG.dll #0 .text 0x1000 0x4fa00 INFO: RASDLG.dll #1 .data 0x51000 0x1200 INFO: RASDLG.dll #2 .rsrc 0x53000 0x4a600 INFO: RASDLG.dll #3 .reloc 0x9e000 0x5600 dumping process ctfmon_exe with pid 0x778... ... building import reconstruction table ... INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcAdProc.dll. INFO: Loading PE header for AcAdProc.dll. INFO: Loaded PE header for AcAdProc.dll. Somewhat parsed: 1 INFO: Loading sections for AcAdProc.dll. INFO: AcAdProc.dll #0 .text 0x1000 0x7400 INFO: AcAdProc.dll #1 .data 0x9000 0xc00 INFO: AcAdProc.dll #2 .rsrc 0xc000 0x400 INFO: AcAdProc.dll #3 .reloc 0xd000 0x1200 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Loaded sections for AcAdProc.dll with result: 1. 4 sections found. INFO: Initialized header for module name services.exe. INFO: Loading PE header for services.exe. INFO: Loaded PE header for services.exe. Somewhat parsed: 1 INFO: Loading sections for services.exe. INFO: services.exe #0 .text 0x1000 0x19000 INFO: services.exe #1 .data 0x1a000 0xc00 INFO: services.exe #2 .rsrc 0x1b000 0x800 dumping process ApacheMonitor_exe with pid 0x79c... ... building import reconstruction table ... INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded sections for services.exe with result: 1. 3 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 dumping process cmd_exe with pid 0x7c4... ... building import reconstruction table ... INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. dumping process cmd_exe with pid 0x7ec... ... building import reconstruction table ... INFO: Initialized header for module name ApacheMonitor.exe. INFO: Loading PE header for ApacheMonitor.exe. INFO: Loaded PE header for ApacheMonitor.exe. Somewhat parsed: 1 INFO: Loading sections for ApacheMonitor.exe. INFO: ApacheMonitor.exe #0 .text 0x1000 0x3000 INFO: ApacheMonitor.exe #1 .rdata 0x4000 0x1000 INFO: ApacheMonitor.exe #2 .data 0x5000 0x1000 INFO: ApacheMonitor.exe #3 .rsrc 0x7000 0x3000 INFO: Loaded sections for ApacheMonitor.exe with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. dumping process spoolsv_exe with pid 0x570... ... building import reconstruction table ... INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for RASDLG.dll with result: 1. 4 sections found. INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name cmd.exe. INFO: Loading PE header for cmd.exe. INFO: Loaded PE header for cmd.exe. Somewhat parsed: 1 INFO: Loading sections for cmd.exe. INFO: cmd.exe #0 .text 0x1000 0x1f800 INFO: cmd.exe #1 .data 0x21000 0x1ca00 INFO: cmd.exe #2 .rsrc 0x3e000 0x22a00 INFO: Loaded sections for cmd.exe with result: 1. 3 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. dumping process svchost_exe with pid 0x4e8... ... building import reconstruction table ... INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name Explorer.EXE. INFO: Loading PE header for Explorer.EXE. INFO: Loaded PE header for Explorer.EXE. Somewhat parsed: 1 INFO: Loading sections for Explorer.EXE. INFO: Explorer.EXE #0 .text 0x1000 0x44e00 INFO: Explorer.EXE #1 .data 0x46000 0x1800 INFO: Explorer.EXE #2 .rsrc 0x48000 0xb2400 INFO: Explorer.EXE #3 .reloc 0xfb000 0x3800 INFO: Initialized header for module name cmd.exe. INFO: Loading PE header for cmd.exe. INFO: Loaded PE header for cmd.exe. Somewhat parsed: 1 INFO: Loading sections for cmd.exe. INFO: cmd.exe #0 .text 0x1000 0x1f800 INFO: cmd.exe #1 .data 0x21000 0x1ca00 INFO: cmd.exe #2 .rsrc 0x3e000 0x22a00 INFO: Loaded sections for Explorer.EXE with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name ctfmon.exe. INFO: Loading PE header for ctfmon.exe. INFO: Loaded PE header for ctfmon.exe. Somewhat parsed: 1 INFO: Loading sections for ctfmon.exe. INFO: ctfmon.exe #0 .text 0x1000 0x2c00 INFO: ctfmon.exe #1 .data 0x4000 0x200 INFO: ctfmon.exe #2 .rsrc 0x5000 0xa00 INFO: Loaded sections for ctfmon.exe with result: 1. 3 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for cmd.exe with result: 1. 3 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Initialized header for module name GDI32.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading PE header for GDI32.dll. INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name IPHLPAPI.DLL. INFO: Loading PE header for IPHLPAPI.DLL. INFO: Loaded PE header for IPHLPAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for IPHLPAPI.DLL. INFO: IPHLPAPI.DLL #0 .text 0x1000 0x12e00 INFO: IPHLPAPI.DLL #1 .data 0x14000 0x1000 INFO: IPHLPAPI.DLL #2 .rsrc 0x15000 0x2200 INFO: IPHLPAPI.DLL #3 .reloc 0x18000 0xe00 INFO: Loaded sections for IPHLPAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GoogleUpdate.exe. INFO: Loading PE header for GoogleUpdate.exe. INFO: Loaded PE header for GoogleUpdate.exe. Somewhat parsed: 1 INFO: Loading sections for GoogleUpdate.exe. INFO: GoogleUpdate.exe #0 .text 0x1000 0x8e00 INFO: GoogleUpdate.exe #1 .data 0xa000 0xe00 INFO: GoogleUpdate.exe #2 .text/DE 0xc000 0x2000 INFO: GoogleUpdate.exe #3 .rsrc 0xe000 0xe400 INFO: GoogleUpdate.exe #4 .reloc 0x1d000 0x1000 INFO: Loaded sections for GoogleUpdate.exe with result: 1. 5 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name mstask.dll. INFO: Loading PE header for mstask.dll. INFO: Loaded PE header for mstask.dll. Somewhat parsed: 1 INFO: Loading sections for mstask.dll. INFO: mstask.dll #0 .text 0x1000 0x22c00 INFO: mstask.dll #1 .data 0x24000 0x800 INFO: mstask.dll #2 .rsrc 0x25000 0x1e000 INFO: mstask.dll #3 .reloc 0x43000 0x1a00 INFO: Loaded sections for mstask.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name svchost.exe. INFO: Loading PE header for svchost.exe. INFO: Loaded PE header for svchost.exe. Somewhat parsed: 1 INFO: Loading sections for svchost.exe. INFO: svchost.exe #0 .text 0x1000 0x2c00 INFO: svchost.exe #1 .data 0x4000 0x200 INFO: svchost.exe #2 .rsrc 0x5000 0x600 INFO: Loaded sections for svchost.exe with result: 1. 3 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name wsock32.dll. INFO: Loading PE header for wsock32.dll. INFO: Loaded PE header for wsock32.dll. Somewhat parsed: 1 INFO: Loading sections for wsock32.dll. INFO: wsock32.dll #0 .text 0x1000 0x2400 INFO: wsock32.dll #1 .data 0x4000 0x200 INFO: wsock32.dll #2 .rsrc 0x5000 0x2c00 INFO: wsock32.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for wsock32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name goopdate.dll. INFO: Loading PE header for goopdate.dll. INFO: Loaded PE header for goopdate.dll. Somewhat parsed: 1 INFO: Loading sections for goopdate.dll. INFO: goopdate.dll #0 .text 0x1000 0x96c00 INFO: goopdate.dll #1 .rdata 0x98000 0x18600 INFO: goopdate.dll #2 .data 0xb1000 0x5a00 INFO: goopdate.dll #3 .rsrc 0xba000 0x9a00 INFO: goopdate.dll #4 .reloc 0xc4000 0xa800 INFO: Loaded sections for goopdate.dll with result: 1. 5 sections found. INFO: Initialized header for module name NTDSAPI.dll. INFO: Loading PE header for NTDSAPI.dll. INFO: Loaded PE header for NTDSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for NTDSAPI.dll. INFO: NTDSAPI.dll #0 .text 0x1000 0xf000 INFO: NTDSAPI.dll #1 .data 0x10000 0x600 INFO: NTDSAPI.dll #2 .rsrc 0x11000 0x400 INFO: NTDSAPI.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for NTDSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msi.dll. INFO: Loading PE header for msi.dll. INFO: Loaded PE header for msi.dll. Somewhat parsed: 1 INFO: Loading sections for msi.dll. INFO: msi.dll #0 .orpc 0x1000 0x200 INFO: msi.dll #1 .text 0x2000 0x1b1600 INFO: msi.dll #2 .data 0x1b4000 0x9400 INFO: msi.dll #3 .rsrc 0x1c0000 0xeee00 INFO: msi.dll #4 .reloc 0x2af000 0xc400 INFO: Loaded sections for msi.dll with result: 1. 5 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name imagehlp.dll. INFO: Loading PE header for imagehlp.dll. INFO: Loaded PE header for imagehlp.dll. Somewhat parsed: 1 INFO: Loading sections for imagehlp.dll. INFO: imagehlp.dll #0 .text 0x1000 0x21200 INFO: imagehlp.dll #1 .data 0x23000 0x800 INFO: imagehlp.dll #2 .rsrc 0x25000 0x400 INFO: imagehlp.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for imagehlp.dll with result: 1. 4 sections found. INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dbghelp.dll. INFO: Loading PE header for dbghelp.dll. INFO: Loaded PE header for dbghelp.dll. Somewhat parsed: 1 INFO: Loading sections for dbghelp.dll. INFO: dbghelp.dll #0 .text 0x1000 0x8e400 INFO: dbghelp.dll #1 .data 0x90000 0x3600 INFO: dbghelp.dll #2 .rsrc 0x95000 0x400 INFO: dbghelp.dll #3 .reloc 0x96000 0xa200 INFO: Loaded sections for dbghelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name comdlg32.dll. INFO: Loading PE header for comdlg32.dll. INFO: Loaded PE header for comdlg32.dll. Somewhat parsed: 1 INFO: Loading sections for comdlg32.dll. INFO: comdlg32.dll #0 .text 0x1000 0x30000 INFO: comdlg32.dll #1 .data 0x31000 0xe00 INFO: comdlg32.dll #2 .rsrc 0x35000 0x10200 INFO: comdlg32.dll #3 .reloc 0x46000 0x2600 INFO: Loaded sections for comdlg32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Initialized header for module name NCObjAPI.DLL. INFO: Loading PE header for NCObjAPI.DLL. INFO: Loaded PE header for NCObjAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for NCObjAPI.DLL. INFO: NCObjAPI.DLL #0 .text 0x1000 0x7e00 INFO: NCObjAPI.DLL #1 .data 0x9000 0x200 INFO: NCObjAPI.DLL #2 .rsrc 0xa000 0x400 INFO: NCObjAPI.DLL #3 .reloc 0xb000 0x600 INFO: Loaded sections for NCObjAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name SCESRV.dll. INFO: Loading PE header for SCESRV.dll. INFO: Loaded PE header for SCESRV.dll. Somewhat parsed: 1 INFO: Loading sections for SCESRV.dll. INFO: SCESRV.dll #0 .text 0x1000 0x3f400 INFO: SCESRV.dll #1 .data 0x41000 0xa00 INFO: SCESRV.dll #2 .tls 0x42000 0x400 INFO: SCESRV.dll #3 .rsrc 0x43000 0xa200 INFO: SCESRV.dll #4 .reloc 0x4e000 0x2600 INFO: Loaded sections for SCESRV.dll with result: 1. 5 sections found. INFO: Initialized header for module name AUTHZ.dll. INFO: Loading PE header for AUTHZ.dll. INFO: Loaded PE header for AUTHZ.dll. Somewhat parsed: 1 INFO: Loading sections for AUTHZ.dll. INFO: AUTHZ.dll #0 .text 0x1000 0xe000 INFO: AUTHZ.dll #1 .data 0xf000 0x400 INFO: AUTHZ.dll #2 .rsrc 0x10000 0x400 INFO: AUTHZ.dll #3 .reloc 0x11000 0x800 INFO: Loaded sections for AUTHZ.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name umpnpmgr.dll. INFO: Loading PE header for umpnpmgr.dll. INFO: Loaded PE header for umpnpmgr.dll. Somewhat parsed: 1 INFO: Loading sections for umpnpmgr.dll. INFO: umpnpmgr.dll #0 .text 0x1000 0x1a400 INFO: umpnpmgr.dll #1 .data 0x1c000 0x1000 INFO: umpnpmgr.dll #2 .rsrc 0x1d000 0x1400 INFO: umpnpmgr.dll #3 .reloc 0x1f000 0x1600 INFO: Loaded sections for umpnpmgr.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name Apphelp.dll. INFO: Loading PE header for Apphelp.dll. INFO: Loaded PE header for Apphelp.dll. Somewhat parsed: 1 INFO: Loading sections for Apphelp.dll. INFO: Apphelp.dll #0 .text 0x1000 0x1c600 INFO: Apphelp.dll #1 .data 0x1e000 0xa00 INFO: Apphelp.dll #2 .rsrc 0x1f000 0x400 INFO: Apphelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for Apphelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name eventlog.dll. INFO: Loading PE header for eventlog.dll. INFO: Loaded PE header for eventlog.dll. Somewhat parsed: 1 INFO: Loading sections for eventlog.dll. INFO: eventlog.dll #0 .text 0x1000 0xc400 INFO: eventlog.dll #1 .data 0xe000 0x400 INFO: eventlog.dll #2 .rsrc 0xf000 0x600 INFO: eventlog.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for eventlog.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name wtsapi32.dll. INFO: Loading PE header for wtsapi32.dll. INFO: Loaded PE header for wtsapi32.dll. Somewhat parsed: 1 INFO: Loading sections for wtsapi32.dll. INFO: wtsapi32.dll #0 .text 0x1000 0x3800 INFO: wtsapi32.dll #1 .data 0x5000 0x200 INFO: wtsapi32.dll #2 .rsrc 0x6000 0x600 INFO: wtsapi32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for wtsapi32.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process Apache_exe with pid 0x394... ... building import reconstruction table ... INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_include.so. INFO: Loading PE header for mod_include.so. INFO: Loaded PE header for mod_include.so. Somewhat parsed: 1 INFO: Loading sections for mod_include.so. INFO: mod_include.so #0 .text 0x1000 0x5000 INFO: mod_include.so #1 .rdata 0x6000 0x1000 INFO: mod_include.so #2 .data 0x7000 0x1000 INFO: mod_include.so #3 .rsrc 0x8000 0x1000 INFO: mod_include.so #4 .reloc 0x9000 0x1000 INFO: Loaded sections for mod_include.so with result: 1. 5 sections found. INFO: Initialized header for module name Apache.exe. INFO: Loading PE header for Apache.exe. INFO: Loaded PE header for Apache.exe. Somewhat parsed: 1 INFO: Loading sections for Apache.exe. INFO: Apache.exe #0 .text 0x1000 0x1000 INFO: Apache.exe #1 .rdata 0x2000 0x1000 INFO: Apache.exe #2 .data 0x3000 0x1000 INFO: Apache.exe #3 .rsrc 0x4000 0x1000 INFO: Loaded sections for Apache.exe with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 dumping process Apache_exe with pid 0x65c... ... building import reconstruction table ... INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Initialized header for module name RPCRT4.dll. INFO: Initialized header for module name mod_cgi.so. INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loading PE header for mod_cgi.so. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loading PE header for RPCRT4.dll. INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name catsrvut.dll. INFO: Loading PE header for catsrvut.dll. INFO: Loaded PE header for catsrvut.dll. Somewhat parsed: 1 INFO: Loading sections for catsrvut.dll. INFO: catsrvut.dll #0 .text 0x1000 0x87000 INFO: catsrvut.dll #1 .data 0x88000 0x1600 INFO: catsrvut.dll #2 .rsrc 0x8d000 0x9c00 INFO: catsrvut.dll #3 .reloc 0x97000 0x6400 INFO: Loaded sections for catsrvut.dll with result: 1. 4 sections found. INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name spoolsv.exe. INFO: Loading PE header for spoolsv.exe. INFO: Loaded PE header for spoolsv.exe. Somewhat parsed: 1 INFO: Loading sections for spoolsv.exe. INFO: spoolsv.exe #0 .text 0x1000 0xbc00 INFO: spoolsv.exe #1 .data 0xd000 0x1400 INFO: spoolsv.exe #2 .rsrc 0xf000 0xe00 INFO: Loaded sections for spoolsv.exe with result: 1. 3 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. dumping process jqs_exe with pid 0x728... ... building import reconstruction table ... INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 Dump Queue -> Waiting: 5 Running: 16 Complete: 7 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded PE header for mod_cgi.so. Somewhat parsed: 1 INFO: Loading sections for mod_cgi.so. INFO: mod_cgi.so #0 .text 0x1000 0x2000 INFO: mod_cgi.so #1 .rdata 0x3000 0x1000 INFO: mod_cgi.so #2 .data 0x4000 0x1000 INFO: mod_cgi.so #3 .rsrc 0x5000 0x1000 INFO: mod_cgi.so #4 .reloc 0x6000 0x1000 INFO: Initialized header for module name SHSVCS.dll. INFO: Loading PE header for SHSVCS.dll. INFO: Loaded PE header for SHSVCS.dll. Somewhat parsed: 1 INFO: Loading sections for SHSVCS.dll. INFO: SHSVCS.dll #0 .text 0x1000 0x1de00 INFO: SHSVCS.dll #1 .data 0x1f000 0x400 INFO: SHSVCS.dll #2 .rsrc 0x20000 0x1000 INFO: SHSVCS.dll #3 .reloc 0x21000 0x1a00 INFO: Loaded sections for SHSVCS.dll with result: 1. 4 sections found. INFO: Initialized header for module name odbcint.dll. INFO: Loading PE header for odbcint.dll. INFO: Loaded PE header for odbcint.dll. Somewhat parsed: 1 INFO: Loading sections for odbcint.dll. INFO: odbcint.dll #0 .rsrc 0x1000 0x15000 INFO: odbcint.dll #1 .reloc 0x16000 0x1000 INFO: Loaded sections for odbcint.dll with result: 1. 2 sections found. INFO: Initialized header for module name NDdeApi.dll. INFO: Loading PE header for NDdeApi.dll. INFO: Loaded PE header for NDdeApi.dll. Somewhat parsed: 1 INFO: Loading sections for NDdeApi.dll. INFO: NDdeApi.dll #0 .text 0x1000 0x3200 INFO: NDdeApi.dll #1 .data 0x5000 0x200 INFO: NDdeApi.dll #2 .rsrc 0x6000 0xa00 INFO: NDdeApi.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for NDdeApi.dll with result: 1. 4 sections found. INFO: Initialized header for module name PROFMAP.dll. INFO: Loading PE header for PROFMAP.dll. INFO: Loaded PE header for PROFMAP.dll. Somewhat parsed: 1 INFO: Loading sections for PROFMAP.dll. INFO: PROFMAP.dll #0 .text 0x1000 0x5e00 INFO: PROFMAP.dll #1 .data 0x7000 0x200 INFO: PROFMAP.dll #2 .rsrc 0x8000 0x400 INFO: PROFMAP.dll #3 .reloc 0x9000 0x400 INFO: Loaded sections for PROFMAP.dll with result: 1. 4 sections found. INFO: Initialized header for module name cscui.dll. INFO: Loading PE header for cscui.dll. INFO: Loaded PE header for cscui.dll. Somewhat parsed: 1 INFO: Loading sections for cscui.dll. INFO: cscui.dll #0 .text 0x1000 0x22800 INFO: cscui.dll #1 .data 0x24000 0x600 INFO: cscui.dll #2 .rsrc 0x26000 0x2b200 INFO: cscui.dll #3 .reloc 0x52000 0x1800 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Loaded sections for cscui.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Initialized header for module name ssdpsrv.dll. INFO: Loading PE header for ssdpsrv.dll. INFO: Loaded sections for mod_cgi.so with result: 1. 5 sections found. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_negotiation.so. INFO: Loading PE header for mod_negotiation.so. INFO: Loaded PE header for mod_negotiation.so. Somewhat parsed: 1 INFO: Loading sections for mod_negotiation.so. INFO: mod_negotiation.so #0 .text 0x1000 0x4000 INFO: mod_negotiation.so #1 .rdata 0x5000 0x1000 INFO: mod_negotiation.so #2 .data 0x6000 0x1000 INFO: mod_negotiation.so #3 .rsrc 0x7000 0x1000 INFO: mod_negotiation.so #4 .reloc 0x8000 0x1000 INFO: Loaded sections for mod_negotiation.so with result: 1. 5 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msnmsgr.exe. INFO: Loading PE header for msnmsgr.exe. INFO: Loaded PE header for msnmsgr.exe. Somewhat parsed: 1 INFO: Loading sections for msnmsgr.exe. INFO: msnmsgr.exe #0 .text 0x1000 0x4bc000 INFO: msnmsgr.exe #1 .data 0x4bd000 0x89200 INFO: msnmsgr.exe #2 .rsrc 0x547000 0x2de00 INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name pjlmon.dll. INFO: Loading PE header for pjlmon.dll. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded PE header for pjlmon.dll. Somewhat parsed: 1 INFO: Loading sections for pjlmon.dll. INFO: pjlmon.dll #0 .text 0x1000 0x2a00 INFO: pjlmon.dll #1 .data 0x4000 0x600 INFO: pjlmon.dll #2 .rsrc 0x5000 0x400 INFO: pjlmon.dll #3 .reloc 0x6000 0x400 INFO: Loaded sections for pjlmon.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded PE header for ssdpsrv.dll. Somewhat parsed: 1 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading sections for ssdpsrv.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: ssdpsrv.dll #0 .text 0x1000 0xfc00 INFO: ssdpsrv.dll #1 .data 0x11000 0x400 INFO: ssdpsrv.dll #2 .rsrc 0x12000 0x400 INFO: ssdpsrv.dll #3 .reloc 0x13000 0x1000 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for ssdpsrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name lmhsvc.dll. INFO: Loading PE header for lmhsvc.dll. INFO: Loaded PE header for lmhsvc.dll. Somewhat parsed: 1 INFO: Loading sections for lmhsvc.dll. INFO: lmhsvc.dll #0 .text 0x1000 0x1c00 INFO: lmhsvc.dll #1 .data 0x3000 0xe00 INFO: lmhsvc.dll #2 .rsrc 0x4000 0x600 INFO: lmhsvc.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for lmhsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name jqs.exe. INFO: Loading PE header for jqs.exe. INFO: Loaded PE header for jqs.exe. Somewhat parsed: 1 INFO: Loading sections for jqs.exe. INFO: jqs.exe #0 .text 0x1000 0x1a200 INFO: jqs.exe #1 .rdata 0x1c000 0xc600 INFO: jqs.exe #2 .data 0x29000 0x1200 INFO: jqs.exe #3 .rsrc 0x2b000 0x800 INFO: jqs.exe #4 .reloc 0x2c000 0x2a00 INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for jqs.exe with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name mdippr.dll. INFO: Loading PE header for mdippr.dll. INFO: Loaded sections for msnmsgr.exe with result: 1. 3 sections found. INFO: Loaded PE header for mdippr.dll. Somewhat parsed: 1 INFO: Loading sections for mdippr.dll. INFO: mdippr.dll #0 .text 0x1000 0x3800 INFO: mdippr.dll #1 .data 0x5000 0x800 INFO: mdippr.dll #2 .rsrc 0x6000 0x400 INFO: mdippr.dll #3 .reloc 0x7000 0x200 INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded sections for mdippr.dll with result: 1. 4 sections found. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name es.dll. INFO: Loading PE header for es.dll. INFO: Loaded PE header for es.dll. Somewhat parsed: 1 INFO: Loading sections for es.dll. INFO: es.dll #0 .text 0x1000 0x31a00 INFO: es.dll #1 .orpc 0x33000 0x400 INFO: es.dll #2 .data 0x34000 0x1400 INFO: es.dll #3 .rsrc 0x38000 0x5800 INFO: es.dll #4 .reloc 0x3e000 0x3400 INFO: Loaded sections for es.dll with result: 1. 5 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name wbemess.dll. INFO: Loading PE header for wbemess.dll. INFO: Loaded PE header for wbemess.dll. Somewhat parsed: 1 INFO: Loading sections for wbemess.dll. INFO: wbemess.dll #0 .text 0x1000 0x3d600 INFO: wbemess.dll #1 .data 0x3f000 0x400 INFO: wbemess.dll #2 .rsrc 0x40000 0x400 INFO: wbemess.dll #3 .reloc 0x41000 0x4c00 INFO: Loaded sections for wbemess.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name REGAPI.dll. INFO: Loading PE header for REGAPI.dll. INFO: Loaded PE header for REGAPI.dll. Somewhat parsed: 1 INFO: Loading sections for REGAPI.dll. INFO: REGAPI.dll #0 .text 0x1000 0xb000 INFO: REGAPI.dll #1 .data 0xc000 0x200 INFO: REGAPI.dll #2 .rsrc 0xd000 0x400 INFO: REGAPI.dll #3 .reloc 0xe000 0x800 INFO: Loaded sections for REGAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name mod_include.so. INFO: Loading PE header for mod_include.so. INFO: Loaded PE header for mod_include.so. Somewhat parsed: 1 INFO: Loading sections for mod_include.so. INFO: mod_include.so #0 .text 0x1000 0x5000 INFO: mod_include.so #1 .rdata 0x6000 0x1000 INFO: mod_include.so #2 .data 0x7000 0x1000 INFO: mod_include.so #3 .rsrc 0x8000 0x1000 INFO: mod_include.so #4 .reloc 0x9000 0x1000 INFO: Loaded sections for mod_include.so with result: 1. 5 sections found. INFO: Initialized header for module name Apache.exe. INFO: Loading PE header for Apache.exe. INFO: Loaded PE header for Apache.exe. Somewhat parsed: 1 INFO: Loading sections for Apache.exe. INFO: Apache.exe #0 .text 0x1000 0x1000 INFO: Apache.exe #1 .rdata 0x2000 0x1000 INFO: Apache.exe #2 .data 0x3000 0x1000 INFO: Apache.exe #3 .rsrc 0x4000 0x1000 INFO: Loaded sections for Apache.exe with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_cgi.so. INFO: Loading PE header for mod_cgi.so. INFO: Loaded PE header for mod_cgi.so. Somewhat parsed: 1 INFO: Loading sections for mod_cgi.so. INFO: mod_cgi.so #0 .text 0x1000 0x2000 INFO: mod_cgi.so #1 .rdata 0x3000 0x1000 INFO: mod_cgi.so #2 .data 0x4000 0x1000 INFO: mod_cgi.so #3 .rsrc 0x5000 0x1000 INFO: mod_cgi.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for mod_cgi.so with result: 1. 5 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_negotiation.so. INFO: Loading PE header for mod_negotiation.so. INFO: Loaded PE header for mod_negotiation.so. Somewhat parsed: 1 INFO: Loading sections for mod_negotiation.so. INFO: mod_negotiation.so #0 .text 0x1000 0x4000 INFO: mod_negotiation.so #1 .rdata 0x5000 0x1000 INFO: mod_negotiation.so #2 .data 0x6000 0x1000 INFO: mod_negotiation.so #3 .rsrc 0x7000 0x1000 INFO: mod_negotiation.so #4 .reloc 0x8000 0x1000 INFO: Loaded sections for mod_negotiation.so with result: 1. 5 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name netapi32.dll. INFO: Loading PE header for netapi32.dll. INFO: Loaded PE header for netapi32.dll. Somewhat parsed: 1 INFO: Loading sections for netapi32.dll. INFO: netapi32.dll #0 .text 0x1000 0x4cc00 INFO: netapi32.dll #1 .data 0x4e000 0x2800 INFO: netapi32.dll #2 .rsrc 0x51000 0x400 INFO: netapi32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for netapi32.dll with result: 1. 4 sections found. INFO: Initialized header for module name appHelp.dll. INFO: Loading PE header for appHelp.dll. INFO: Loaded PE header for appHelp.dll. Somewhat parsed: 1 INFO: Loading sections for appHelp.dll. INFO: appHelp.dll #0 .text 0x1000 0x1c600 INFO: appHelp.dll #1 .data 0x1e000 0xa00 INFO: appHelp.dll #2 .rsrc 0x1f000 0x400 INFO: appHelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for appHelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name urlmon.dll. INFO: Loading PE header for urlmon.dll. INFO: Loaded PE header for urlmon.dll. Somewhat parsed: 1 INFO: Loading sections for urlmon.dll. INFO: urlmon.dll #0 .text 0x1000 0x70a00 INFO: urlmon.dll #1 .orpc 0x72000 0x1000 INFO: urlmon.dll #2 .data 0x73000 0x6000 INFO: urlmon.dll #3 .rsrc 0x82000 0x1a800 INFO: urlmon.dll #4 .reloc 0x9d000 0x4e00 INFO: Loaded sections for urlmon.dll with result: 1. 5 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process vmremoteguest_exe with pid 0xa44... ... building import reconstruction table ... INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name vmremoteguest.exe. INFO: Loading PE header for vmremoteguest.exe. INFO: Loaded PE header for vmremoteguest.exe. Somewhat parsed: 1 INFO: Loading sections for vmremoteguest.exe. INFO: vmremoteguest.exe #0 .text 0x1000 0x19e00 INFO: vmremoteguest.exe #1 .data 0x1b000 0x1600 INFO: vmremoteguest.exe #2 .reloc 0x1f000 0x1c00 INFO: Loaded sections for vmremoteguest.exe with result: 1. 3 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name WTSAPI32.dll. INFO: Loading PE header for WTSAPI32.dll. INFO: Loaded PE header for WTSAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WTSAPI32.dll. INFO: WTSAPI32.dll #0 .text 0x1000 0x3800 INFO: WTSAPI32.dll #1 .data 0x5000 0x200 INFO: WTSAPI32.dll #2 .rsrc 0x6000 0x600 INFO: WTSAPI32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WTSAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name vmbuspipe.dll. INFO: Loading PE header for vmbuspipe.dll. INFO: Loaded PE header for vmbuspipe.dll. Somewhat parsed: 1 INFO: Loading sections for vmbuspipe.dll. INFO: vmbuspipe.dll #0 .text 0x1000 0x2400 INFO: vmbuspipe.dll #1 .data 0x4000 0x200 INFO: vmbuspipe.dll #2 .idata 0x5000 0x800 INFO: vmbuspipe.dll #3 .rsrc 0x6000 0x600 INFO: vmbuspipe.dll #4 .reloc 0x7000 0x400 INFO: Loaded sections for vmbuspipe.dll with result: 1. 5 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name wldap32.dll. INFO: Loading PE header for wldap32.dll. INFO: Loaded PE header for wldap32.dll. Somewhat parsed: 1 INFO: Loading sections for wldap32.dll. INFO: wldap32.dll #0 .text 0x1000 0x20000 INFO: wldap32.dll #1 .data 0x21000 0x7800 INFO: wldap32.dll #2 .rsrc 0x29000 0x1000 INFO: wldap32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for wldap32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name COMCTL32.dll. INFO: Loading PE header for COMCTL32.dll. INFO: Loaded PE header for COMCTL32.dll. Somewhat parsed: 1 INFO: Loading sections for COMCTL32.dll. INFO: COMCTL32.dll #0 .text 0x1000 0x70c00 INFO: COMCTL32.dll #1 .data 0x72000 0x2600 INFO: COMCTL32.dll #2 .rsrc 0x75000 0x1f400 INFO: COMCTL32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for COMCTL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ODBC32.dll. INFO: Loading PE header for ODBC32.dll. INFO: Loaded PE header for ODBC32.dll. Somewhat parsed: 1 INFO: Loading sections for ODBC32.dll. INFO: ODBC32.dll #0 .text 0x1000 0x37000 INFO: ODBC32.dll #1 .data 0x38000 0x1000 INFO: ODBC32.dll #2 .sdbid 0x39000 0x1000 INFO: ODBC32.dll #3 .rsrc 0x3a000 0x1000 INFO: ODBC32.dll #4 .reloc 0x3b000 0x2000 INFO: Loaded sections for ODBC32.dll with result: 1. 5 sections found. INFO: Initialized header for module name uxtheme.dll. INFO: Loading PE header for uxtheme.dll. INFO: Loaded PE header for uxtheme.dll. Somewhat parsed: 1 INFO: Loading sections for uxtheme.dll. INFO: uxtheme.dll #0 .text 0x1000 0x2f200 INFO: uxtheme.dll #1 .data 0x31000 0x1000 INFO: uxtheme.dll #2 .rsrc 0x32000 0x3600 INFO: uxtheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for uxtheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name sfc.dll. INFO: Loading PE header for sfc.dll. INFO: Loaded PE header for sfc.dll. Somewhat parsed: 1 INFO: Loading sections for sfc.dll. INFO: sfc.dll #0 .text 0x1000 0x800 INFO: sfc.dll #1 .data 0x2000 0x200 INFO: sfc.dll #2 .rsrc 0x3000 0x400 INFO: sfc.dll #3 .reloc 0x4000 0x200 INFO: Loaded sections for sfc.dll with result: 1. 4 sections found. INFO: Initialized header for module name comdlg32.dll. INFO: Loading PE header for comdlg32.dll. INFO: Loaded PE header for comdlg32.dll. Somewhat parsed: 1 INFO: Loading sections for comdlg32.dll. INFO: comdlg32.dll #0 .text 0x1000 0x30000 INFO: comdlg32.dll #1 .data 0x31000 0xe00 INFO: comdlg32.dll #2 .rsrc 0x35000 0x10200 INFO: comdlg32.dll #3 .reloc 0x46000 0x2600 INFO: Loaded sections for comdlg32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name COMCTL32.dll. INFO: Loading PE header for COMCTL32.dll. INFO: Loaded PE header for COMCTL32.dll. Somewhat parsed: 1 INFO: Loading sections for COMCTL32.dll. INFO: COMCTL32.dll #0 .text 0x1000 0x70c00 INFO: COMCTL32.dll #1 .data 0x72000 0x2600 INFO: COMCTL32.dll #2 .rsrc 0x75000 0x1f400 INFO: COMCTL32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for COMCTL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Initialized header for module name mod_auth.so. INFO: Loading PE header for mod_auth.so. INFO: Loaded PE header for mod_auth.so. Somewhat parsed: 1 INFO: Loading sections for mod_auth.so. INFO: mod_auth.so #0 .text 0x1000 0x1000 INFO: mod_auth.so #1 .rdata 0x2000 0x1000 INFO: mod_auth.so #2 .data 0x3000 0x1000 INFO: mod_auth.so #3 .rsrc 0x4000 0x1000 INFO: mod_auth.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Loaded sections for mod_auth.so with result: 1. 5 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Initialized header for module name libapr.dll. INFO: Loading PE header for libapr.dll. INFO: Loaded PE header for libapr.dll. Somewhat parsed: 1 INFO: Loading sections for libapr.dll. INFO: libapr.dll #0 .text 0x1000 0x15000 INFO: libapr.dll #1 .rdata 0x16000 0x5000 INFO: libapr.dll #2 .data 0x1b000 0x2000 INFO: libapr.dll #3 .rsrc 0x1f000 0x1000 INFO: libapr.dll #4 .reloc 0x20000 0x1000 INFO: Loaded sections for libapr.dll with result: 1. 5 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Initialized header for module name mod_auth.so. INFO: Loading PE header for mod_auth.so. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Loaded PE header for mod_auth.so. Somewhat parsed: 1 INFO: Loading sections for mod_auth.so. INFO: mod_auth.so #0 .text 0x1000 0x1000 INFO: mod_auth.so #1 .rdata 0x2000 0x1000 INFO: mod_auth.so #2 .data 0x3000 0x1000 INFO: mod_auth.so #3 .rsrc 0x4000 0x1000 INFO: mod_auth.so #4 .reloc 0x5000 0x1000 INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. dumping process wscntfy_exe with pid 0xc70... ... building import reconstruction table ... INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for mod_auth.so with result: 1. 5 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name libapr.dll. INFO: Loading PE header for libapr.dll. INFO: Loaded PE header for libapr.dll. Somewhat parsed: 1 INFO: Loading sections for libapr.dll. INFO: libapr.dll #0 .text 0x1000 0x15000 INFO: libapr.dll #1 .rdata 0x16000 0x5000 INFO: libapr.dll #2 .data 0x1b000 0x2000 INFO: libapr.dll #3 .rsrc 0x1f000 0x1000 INFO: libapr.dll #4 .reloc 0x20000 0x1000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for libapr.dll with result: 1. 5 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Initialized header for module name wscntfy.exe. INFO: Loading PE header for wscntfy.exe. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded PE header for wscntfy.exe. Somewhat parsed: 1 INFO: Loading sections for wscntfy.exe. INFO: wscntfy.exe #0 .text 0x1000 0x2800 INFO: wscntfy.exe #1 .data 0x4000 0x200 INFO: wscntfy.exe #2 .rsrc 0x5000 0x800 INFO: Initialized header for module name sfc_os.dll. INFO: Loading PE header for sfc_os.dll. INFO: Loaded PE header for sfc_os.dll. Somewhat parsed: 1 INFO: Loading sections for sfc_os.dll. INFO: sfc_os.dll #0 .text 0x1000 0x18000 INFO: sfc_os.dll #1 .data 0x19000 0x200 INFO: sfc_os.dll #2 .rsrc 0x1f000 0x8600 INFO: sfc_os.dll #3 .reloc 0x28000 0x1800 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSUTB.dll. INFO: Loading PE header for MSUTB.dll. INFO: Loaded PE header for MSUTB.dll. Somewhat parsed: 1 INFO: Loading sections for MSUTB.dll. INFO: MSUTB.dll #0 .text 0x1000 0x25400 INFO: MSUTB.dll #1 .data 0x27000 0x400 INFO: MSUTB.dll #2 .rsrc 0x28000 0x6c00 INFO: MSUTB.dll #3 .reloc 0x2f000 0x3200 INFO: Loaded sections for MSUTB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Initialized header for module name pdh.dll. INFO: Loading PE header for pdh.dll. INFO: Loaded PE header for pdh.dll. Somewhat parsed: 1 INFO: Loading sections for pdh.dll. INFO: pdh.dll #0 .text 0x1000 0x3e000 INFO: pdh.dll #1 .data 0x3f000 0x600 INFO: pdh.dll #2 .rsrc 0x4f000 0x4000 INFO: pdh.dll #3 .reloc 0x53000 0x2c00 INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Initialized header for module name MSOERT2.dll. INFO: Loading PE header for MSOERT2.dll. INFO: Loaded sections for pdh.dll with result: 1. 4 sections found. INFO: Loaded PE header for MSOERT2.dll. Somewhat parsed: 1 INFO: Loading sections for MSOERT2.dll. INFO: MSOERT2.dll #0 .text 0x1000 0x15c00 INFO: MSOERT2.dll #1 .data 0x17000 0x1000 INFO: MSOERT2.dll #2 .rsrc 0x1e000 0x800 INFO: MSOERT2.dll #3 .reloc 0x1f000 0x2600 INFO: Loaded sections for MSOERT2.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Loaded sections for sfc_os.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name mod_imap.so. INFO: Loading PE header for mod_imap.so. INFO: Loaded PE header for mod_imap.so. Somewhat parsed: 1 INFO: Loading sections for mod_imap.so. INFO: mod_imap.so #0 .text 0x1000 0x2000 INFO: mod_imap.so #1 .rdata 0x3000 0x1000 INFO: mod_imap.so #2 .data 0x4000 0x1000 INFO: mod_imap.so #3 .rsrc 0x5000 0x1000 INFO: mod_imap.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for mod_imap.so with result: 1. 5 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_access.so. INFO: Loading PE header for mod_access.so. INFO: Loaded PE header for mod_access.so. Somewhat parsed: 1 INFO: Loading sections for mod_access.so. INFO: mod_access.so #0 .text 0x1000 0x1000 INFO: mod_access.so #1 .rdata 0x2000 0x1000 INFO: mod_access.so #2 .data 0x3000 0x1000 INFO: mod_access.so #3 .rsrc 0x4000 0x1000 INFO: mod_access.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_access.so with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Initialized header for module name MSWSOCK.dll. INFO: Loading PE header for MSWSOCK.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded PE header for MSWSOCK.dll. Somewhat parsed: 1 INFO: Loading sections for MSWSOCK.dll. INFO: MSWSOCK.dll #0 .text 0x1000 0x29400 INFO: MSWSOCK.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: MSWSOCK.dll #2 .data 0x37000 0xe00 INFO: MSWSOCK.dll #3 .rsrc 0x39000 0x2c00 INFO: MSWSOCK.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for MSWSOCK.dll with result: 1. 5 sections found. INFO: Initialized header for module name libaprutil.dll. INFO: Loading PE header for libaprutil.dll. INFO: Loaded PE header for libaprutil.dll. Somewhat parsed: 1 INFO: Loading sections for libaprutil.dll. INFO: libaprutil.dll #0 .text 0x1000 0x20000 INFO: libaprutil.dll #1 .rdata 0x21000 0x5000 INFO: libaprutil.dll #2 .data 0x26000 0x1000 INFO: libaprutil.dll #3 .rsrc 0x27000 0x1000 INFO: libaprutil.dll #4 .reloc 0x28000 0x2000 INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded sections for libaprutil.dll with result: 1. 5 sections found. INFO: Loaded sections for wscntfy.exe with result: 1. 3 sections found. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Initialized header for module name mod_actions.so. INFO: Loading PE header for mod_actions.so. INFO: Loaded PE header for mod_actions.so. Somewhat parsed: 1 INFO: Loading sections for mod_actions.so. INFO: mod_actions.so #0 .text 0x1000 0x1000 INFO: mod_actions.so #1 .rdata 0x2000 0x1000 INFO: mod_actions.so #2 .data 0x3000 0x1000 INFO: mod_actions.so #3 .rsrc 0x4000 0x1000 INFO: mod_actions.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_actions.so with result: 1. 5 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Initialized header for module name mod_imap.so. INFO: Loading PE header for mod_imap.so. INFO: Loaded PE header for mod_imap.so. Somewhat parsed: 1 INFO: Loading sections for mod_imap.so. INFO: mod_imap.so #0 .text 0x1000 0x2000 INFO: mod_imap.so #1 .rdata 0x3000 0x1000 INFO: mod_imap.so #2 .data 0x4000 0x1000 INFO: mod_imap.so #3 .rsrc 0x5000 0x1000 INFO: mod_imap.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for mod_imap.so with result: 1. 5 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_access.so. INFO: Loading PE header for mod_access.so. INFO: Loaded PE header for mod_access.so. Somewhat parsed: 1 INFO: Loading sections for mod_access.so. INFO: mod_access.so #0 .text 0x1000 0x1000 INFO: mod_access.so #1 .rdata 0x2000 0x1000 INFO: mod_access.so #2 .data 0x3000 0x1000 INFO: mod_access.so #3 .rsrc 0x4000 0x1000 INFO: mod_access.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_access.so with result: 1. 5 sections found. INFO: Initialized header for module name MSWSOCK.dll. INFO: Loading PE header for MSWSOCK.dll. INFO: Loaded PE header for MSWSOCK.dll. Somewhat parsed: 1 INFO: Loading sections for MSWSOCK.dll. INFO: MSWSOCK.dll #0 .text 0x1000 0x29400 INFO: MSWSOCK.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: MSWSOCK.dll #2 .data 0x37000 0xe00 INFO: MSWSOCK.dll #3 .rsrc 0x39000 0x2c00 INFO: MSWSOCK.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for MSWSOCK.dll with result: 1. 5 sections found. INFO: Initialized header for module name libaprutil.dll. INFO: Loading PE header for libaprutil.dll. INFO: Loaded PE header for libaprutil.dll. Somewhat parsed: 1 INFO: Loading sections for libaprutil.dll. INFO: libaprutil.dll #0 .text 0x1000 0x20000 INFO: libaprutil.dll #1 .rdata 0x21000 0x5000 INFO: libaprutil.dll #2 .data 0x26000 0x1000 INFO: libaprutil.dll #3 .rsrc 0x27000 0x1000 INFO: libaprutil.dll #4 .reloc 0x28000 0x2000 INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for libaprutil.dll with result: 1. 5 sections found. INFO: Initialized header for module name mod_actions.so. INFO: Loading PE header for mod_actions.so. INFO: Loaded PE header for mod_actions.so. Somewhat parsed: 1 INFO: Loading sections for mod_actions.so. INFO: mod_actions.so #0 .text 0x1000 0x1000 INFO: mod_actions.so #1 .rdata 0x2000 0x1000 INFO: mod_actions.so #2 .data 0x3000 0x1000 INFO: mod_actions.so #3 .rsrc 0x4000 0x1000 INFO: mod_actions.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_actions.so with result: 1. 5 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Initialized header for module name libapriconv.dll. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loading PE header for libapriconv.dll. INFO: Loaded PE header for libapriconv.dll. Somewhat parsed: 1 INFO: Loading sections for libapriconv.dll. INFO: libapriconv.dll #0 .text 0x1000 0x2000 INFO: libapriconv.dll #1 .rdata 0x3000 0x2000 INFO: libapriconv.dll #2 .data 0x5000 0x2000 INFO: libapriconv.dll #3 .rsrc 0x7000 0x1000 INFO: libapriconv.dll #4 .reloc 0x8000 0x1000 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for libapriconv.dll with result: 1. 5 sections found. INFO: Initialized header for module name libhttpd.dll. INFO: Loading PE header for libhttpd.dll. INFO: Loaded PE header for libhttpd.dll. Somewhat parsed: 1 INFO: Loading sections for libhttpd.dll. INFO: libhttpd.dll #0 .text 0x1000 0x27000 INFO: libhttpd.dll #1 .rdata 0x28000 0x7000 INFO: libhttpd.dll #2 .data 0x2f000 0xa000 INFO: libhttpd.dll #3 .rsrc 0x3e000 0x1000 INFO: libhttpd.dll #4 .reloc 0x3f000 0x4000 INFO: Loaded sections for libhttpd.dll with result: 1. 5 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCR100.dll. INFO: Loading PE header for MSVCR100.dll. INFO: Loaded PE header for MSVCR100.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCR100.dll. INFO: MSVCR100.dll #0 .text 0x1000 0xb1400 INFO: MSVCR100.dll #1 .data 0xb3000 0x4e00 INFO: MSVCR100.dll #2 .rsrc 0xb9000 0x400 INFO: MSVCR100.dll #3 .reloc 0xba000 0x4e00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Loaded sections for MSVCR100.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name rasman.dll. INFO: Loading PE header for rasman.dll. INFO: Loaded PE header for rasman.dll. Somewhat parsed: 1 INFO: Loading sections for rasman.dll. INFO: rasman.dll #0 .text 0x1000 0xda00 INFO: rasman.dll #1 .data 0xf000 0x200 INFO: rasman.dll #2 .rsrc 0x10000 0x400 INFO: rasman.dll #3 .reloc 0x11000 0xc00 INFO: Loaded sections for rasman.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINIPSEC.DLL. INFO: Loading PE header for WINIPSEC.DLL. INFO: Loaded PE header for WINIPSEC.DLL. Somewhat parsed: 1 INFO: Loading sections for WINIPSEC.DLL. INFO: WINIPSEC.DLL #0 .text 0x1000 0x6e00 INFO: WINIPSEC.DLL #1 .data 0x8000 0x200 INFO: WINIPSEC.DLL #2 .rsrc 0x9000 0x400 INFO: WINIPSEC.DLL #3 .reloc 0xa000 0x600 INFO: Loaded sections for WINIPSEC.DLL with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.DLL. INFO: Loading PE header for SETUPAPI.DLL. INFO: Loaded PE header for SETUPAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.DLL. INFO: SETUPAPI.DLL #0 .text 0x1000 0x7d000 INFO: SETUPAPI.DLL #1 .data 0x7e000 0x1800 INFO: SETUPAPI.DLL #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.DLL #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name SCHANNEL.dll. INFO: Loading PE header for SCHANNEL.dll. INFO: Loaded PE header for SCHANNEL.dll. Somewhat parsed: 1 INFO: Loading sections for SCHANNEL.dll. INFO: SCHANNEL.dll #0 .text 0x1000 0x20c00 INFO: SCHANNEL.dll #1 .data 0x22000 0xe00 INFO: SCHANNEL.dll #2 .rsrc 0x24000 0x400 INFO: SCHANNEL.dll #3 .reloc 0x25000 0x1200 INFO: Loaded sections for SCHANNEL.dll with result: 1. 4 sections found. INFO: Initialized header for module name srsvc.dll. INFO: Loading PE header for srsvc.dll. INFO: Loaded PE header for srsvc.dll. Somewhat parsed: 1 INFO: Loading sections for srsvc.dll. INFO: srsvc.dll #0 .text 0x1000 0x23600 INFO: srsvc.dll #1 .data 0x25000 0x1c00 INFO: srsvc.dll #2 .rsrc 0x29000 0xe00 INFO: srsvc.dll #3 .reloc 0x2a000 0x3800 INFO: Loaded sections for srsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name EapolQec.dll. INFO: Loading PE header for EapolQec.dll. INFO: Loaded PE header for EapolQec.dll. Somewhat parsed: 1 INFO: Loading sections for EapolQec.dll. INFO: EapolQec.dll #0 .text 0x1000 0x6200 INFO: EapolQec.dll #1 .data 0x8000 0x400 INFO: EapolQec.dll #2 .rsrc 0x9000 0x800 INFO: EapolQec.dll #3 .reloc 0xa000 0x600 INFO: Loaded sections for EapolQec.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPTUI.dll. INFO: Loading PE header for CRYPTUI.dll. INFO: Loaded PE header for CRYPTUI.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPTUI.dll. INFO: CRYPTUI.dll #0 .text 0x1000 0x47400 INFO: CRYPTUI.dll #1 .data 0x49000 0x400 INFO: CRYPTUI.dll #2 .rsrc 0x4a000 0x32a00 INFO: CRYPTUI.dll #3 .reloc 0x7d000 0x2c00 INFO: Loaded sections for CRYPTUI.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name kerberos.dll. INFO: Loading PE header for kerberos.dll. INFO: Loaded PE header for kerberos.dll. Somewhat parsed: 1 INFO: Loading sections for kerberos.dll. INFO: kerberos.dll #0 .text 0x1000 0x42400 INFO: kerberos.dll #1 .data 0x44000 0x1a00 INFO: kerberos.dll #2 .rsrc 0x46000 0x2200 INFO: kerberos.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for kerberos.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name shsvcs.dll. INFO: Loading PE header for shsvcs.dll. INFO: Loaded PE header for shsvcs.dll. Somewhat parsed: 1 INFO: Loading sections for shsvcs.dll. INFO: shsvcs.dll #0 .text 0x1000 0x1de00 INFO: shsvcs.dll #1 .data 0x1f000 0x400 INFO: shsvcs.dll #2 .rsrc 0x20000 0x1000 INFO: shsvcs.dll #3 .reloc 0x21000 0x1a00 INFO: Loaded sections for shsvcs.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dhcpcsvc.dll. INFO: Loading PE header for dhcpcsvc.dll. INFO: Loaded PE header for dhcpcsvc.dll. Somewhat parsed: 1 INFO: Loading sections for dhcpcsvc.dll. INFO: dhcpcsvc.dll #0 .text 0x1000 0x1ba00 INFO: dhcpcsvc.dll #1 .data 0x1d000 0xa00 INFO: dhcpcsvc.dll #2 .rsrc 0x1e000 0x1600 INFO: dhcpcsvc.dll #3 .reloc 0x20000 0x1200 INFO: Loaded sections for dhcpcsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dot3api.dll. INFO: Loading PE header for dot3api.dll. INFO: Loaded PE header for dot3api.dll. Somewhat parsed: 1 INFO: Loading sections for dot3api.dll. INFO: dot3api.dll #0 .text 0x1000 0x5200 INFO: dot3api.dll #1 .data 0x7000 0x200 INFO: dot3api.dll #2 .rsrc 0x8000 0x800 INFO: dot3api.dll #3 .reloc 0x9000 0x600 INFO: Loaded sections for dot3api.dll with result: 1. 4 sections found. INFO: Initialized header for module name msi.dll. INFO: Loading PE header for msi.dll. INFO: Loaded PE header for msi.dll. Somewhat parsed: 1 INFO: Loading sections for msi.dll. INFO: msi.dll #0 .orpc 0x1000 0x200 INFO: msi.dll #1 .text 0x2000 0x1b1600 INFO: msi.dll #2 .data 0x1b4000 0x9400 INFO: msi.dll #3 .rsrc 0x1c0000 0xeee00 INFO: msi.dll #4 .reloc 0x2af000 0xc400 INFO: Loaded sections for msi.dll with result: 1. 5 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name rtutils.dll. INFO: Loading PE header for rtutils.dll. INFO: Loaded PE header for rtutils.dll. Somewhat parsed: 1 INFO: Loading sections for rtutils.dll. INFO: rtutils.dll #0 .text 0x1000 0x9800 INFO: rtutils.dll #1 .data 0xb000 0x200 INFO: rtutils.dll #2 .rsrc 0xc000 0x400 INFO: rtutils.dll #3 .reloc 0xd000 0xa00 INFO: Loaded sections for rtutils.dll with result: 1. 4 sections found. INFO: Initialized header for module name wzcsvc.dll. INFO: Loading PE header for wzcsvc.dll. INFO: Loaded PE header for wzcsvc.dll. Somewhat parsed: 1 INFO: Loading sections for wzcsvc.dll. INFO: wzcsvc.dll #0 .text 0x1000 0x6a000 INFO: wzcsvc.dll #1 .data 0x6b000 0x800 INFO: wzcsvc.dll #2 .rsrc 0x80000 0x5e00 INFO: wzcsvc.dll #3 .reloc 0x86000 0x5600 INFO: Loaded sections for wzcsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name msv1_0.dll. INFO: Loading PE header for msv1_0.dll. INFO: Loaded PE header for msv1_0.dll. Somewhat parsed: 1 INFO: Loading sections for msv1_0.dll. INFO: msv1_0.dll #0 .text 0x1000 0x1ca00 INFO: msv1_0.dll #1 .data 0x1e000 0x1200 INFO: msv1_0.dll #2 .rsrc 0x20000 0x1200 INFO: msv1_0.dll #3 .reloc 0x22000 0x1400 INFO: Loaded sections for msv1_0.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name WMI.dll. INFO: Loading PE header for WMI.dll. INFO: Loaded PE header for WMI.dll. Somewhat parsed: 1 INFO: Loading sections for WMI.dll. INFO: WMI.dll #0 .text 0x1000 0xc00 INFO: WMI.dll #1 .rsrc 0x2000 0x400 INFO: WMI.dll #2 .reloc 0x3000 0x200 INFO: Loaded sections for WMI.dll with result: 1. 3 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name QUtil.dll. INFO: Loading PE header for QUtil.dll. INFO: Loaded PE header for QUtil.dll. Somewhat parsed: 1 INFO: Loading sections for QUtil.dll. INFO: QUtil.dll #0 .text 0x1000 0xf000 INFO: QUtil.dll #1 .orpc 0x10000 0x200 INFO: QUtil.dll #2 .data 0x11000 0x1000 INFO: QUtil.dll #3 .rsrc 0x13000 0xa00 INFO: QUtil.dll #4 .reloc 0x14000 0x1c00 INFO: Loaded sections for QUtil.dll with result: 1. 5 sections found. INFO: Initialized header for module name WTSAPI32.dll. INFO: Loading PE header for WTSAPI32.dll. INFO: Loaded PE header for WTSAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WTSAPI32.dll. INFO: WTSAPI32.dll #0 .text 0x1000 0x3800 INFO: WTSAPI32.dll #1 .data 0x5000 0x200 INFO: WTSAPI32.dll #2 .rsrc 0x6000 0x600 INFO: WTSAPI32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WTSAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ESENT.dll. INFO: Loading PE header for ESENT.dll. INFO: Loaded PE header for ESENT.dll. Somewhat parsed: 1 INFO: Loading sections for ESENT.dll. INFO: ESENT.dll #0 .text 0x1000 0xec400 INFO: ESENT.dll #1 .data 0xee000 0x6000 INFO: ESENT.dll #2 cachelin 0xf6000 0x200 INFO: ESENT.dll #3 .rsrc 0xf7000 0xda00 INFO: ESENT.dll #4 .reloc 0x105000 0x8000 INFO: Initialized header for module name rasman.dll. INFO: Loading PE header for rasman.dll. INFO: Loaded PE header for rasman.dll. Somewhat parsed: 1 INFO: Loading sections for rasman.dll. INFO: rasman.dll #0 .text 0x1000 0xda00 INFO: rasman.dll #1 .data 0xf000 0x200 INFO: rasman.dll #2 .rsrc 0x10000 0x400 INFO: rasman.dll #3 .reloc 0x11000 0xc00 INFO: Loaded sections for rasman.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name dot3dlg.dll. INFO: Loading PE header for dot3dlg.dll. INFO: Loaded PE header for dot3dlg.dll. Somewhat parsed: 1 INFO: Loading sections for dot3dlg.dll. INFO: dot3dlg.dll #0 .text 0x1000 0x1600 INFO: dot3dlg.dll #1 .data 0x3000 0x200 INFO: dot3dlg.dll #2 .rsrc 0x4000 0x600 INFO: dot3dlg.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for dot3dlg.dll with result: 1. 4 sections found. INFO: Initialized header for module name SXS.DLL. INFO: Loading PE header for SXS.DLL. INFO: Loaded PE header for SXS.DLL. Somewhat parsed: 1 INFO: Loading sections for SXS.DLL. INFO: SXS.DLL #0 .text 0x1000 0x98e00 INFO: SXS.DLL #1 .data 0x9a000 0x2800 INFO: SXS.DLL #2 .rsrc 0x9d000 0x9800 INFO: SXS.DLL #3 .reloc 0xa7000 0x9000 INFO: Loaded sections for SXS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name vmbuspipe.dll. INFO: Loading PE header for vmbuspipe.dll. INFO: Loaded PE header for vmbuspipe.dll. Somewhat parsed: 1 INFO: Loading sections for vmbuspipe.dll. INFO: vmbuspipe.dll #0 .text 0x1000 0x2400 INFO: vmbuspipe.dll #1 .data 0x4000 0x200 INFO: vmbuspipe.dll #2 .idata 0x5000 0x800 INFO: vmbuspipe.dll #3 .rsrc 0x6000 0x600 INFO: vmbuspipe.dll #4 .reloc 0x7000 0x400 INFO: Loaded sections for vmbuspipe.dll with result: 1. 5 sections found. INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name eappcfg.dll. INFO: Loading PE header for eappcfg.dll. INFO: Loaded PE header for eappcfg.dll. Somewhat parsed: 1 INFO: Loading sections for eappcfg.dll. INFO: eappcfg.dll #0 .text 0x1000 0x1b000 INFO: eappcfg.dll #1 .data 0x1c000 0xe00 INFO: eappcfg.dll #2 .rsrc 0x1e000 0x600 INFO: eappcfg.dll #3 .reloc 0x1f000 0x2800 INFO: Loaded sections for eappcfg.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name icsvc.dll. INFO: Loading PE header for icsvc.dll. INFO: Loaded PE header for icsvc.dll. Somewhat parsed: 1 INFO: Loading sections for icsvc.dll. INFO: icsvc.dll #0 .text 0x1000 0x61600 INFO: icsvc.dll #1 .data 0x63000 0x1e00 INFO: icsvc.dll #2 .idata 0x6a000 0x2000 INFO: icsvc.dll #3 .didat 0x6c000 0x200 INFO: icsvc.dll #4 .rsrc 0x6d000 0x1000 INFO: icsvc.dll #5 .reloc 0x6e000 0x4600 INFO: Loaded sections for icsvc.dll with result: 1. 6 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLUSAPI.dll. INFO: Loading PE header for CLUSAPI.dll. INFO: Loaded PE header for CLUSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for CLUSAPI.dll. INFO: CLUSAPI.dll #0 .text 0x1000 0xd200 INFO: CLUSAPI.dll #1 .data 0xf000 0x200 INFO: CLUSAPI.dll #2 .rsrc 0x10000 0x400 INFO: CLUSAPI.dll #3 .reloc 0x11000 0x800 INFO: Loaded sections for CLUSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for ESENT.dll with result: 1. 5 sections found. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name libapriconv.dll. INFO: Loading PE header for libapriconv.dll. INFO: Loaded PE header for libapriconv.dll. Somewhat parsed: 1 INFO: Loading sections for libapriconv.dll. INFO: libapriconv.dll #0 .text 0x1000 0x2000 INFO: libapriconv.dll #1 .rdata 0x3000 0x2000 INFO: libapriconv.dll #2 .data 0x5000 0x2000 INFO: libapriconv.dll #3 .rsrc 0x7000 0x1000 INFO: libapriconv.dll #4 .reloc 0x8000 0x1000 INFO: Loaded sections for libapriconv.dll with result: 1. 5 sections found. INFO: Initialized header for module name libhttpd.dll. INFO: Loading PE header for libhttpd.dll. INFO: Loaded PE header for libhttpd.dll. Somewhat parsed: 1 INFO: Loading sections for libhttpd.dll. INFO: libhttpd.dll #0 .text 0x1000 0x27000 INFO: libhttpd.dll #1 .rdata 0x28000 0x7000 INFO: libhttpd.dll #2 .data 0x2f000 0xa000 INFO: libhttpd.dll #3 .rsrc 0x3e000 0x1000 INFO: libhttpd.dll #4 .reloc 0x3f000 0x4000 dumping process alg_exe with pid 0xcbc... ... building import reconstruction table ... INFO: Loaded sections for libhttpd.dll with result: 1. 5 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Initialized header for module name alg.exe. INFO: Loading PE header for alg.exe. INFO: Loaded PE header for alg.exe. Somewhat parsed: 1 INFO: Loading sections for alg.exe. INFO: alg.exe #0 .text 0x1000 0x8a00 INFO: alg.exe #1 .data 0xa000 0x200 INFO: alg.exe #2 .rsrc 0xb000 0x1e00 INFO: Loaded sections for alg.exe with result: 1. 3 sections found. INFO: Initialized header for module name Apphelp.dll. INFO: Loading PE header for Apphelp.dll. INFO: Loaded PE header for Apphelp.dll. Somewhat parsed: 1 INFO: Loading sections for Apphelp.dll. INFO: Apphelp.dll #0 .text 0x1000 0x1c600 INFO: Apphelp.dll #1 .data 0x1e000 0xa00 INFO: Apphelp.dll #2 .rsrc 0x1f000 0x400 INFO: Apphelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for Apphelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSCARD.DLL. INFO: Loading PE header for WINSCARD.DLL. INFO: Loaded PE header for WINSCARD.DLL. Somewhat parsed: 1 INFO: Loading sections for WINSCARD.DLL. INFO: WINSCARD.DLL #0 .text 0x1000 0x14200 INFO: WINSCARD.DLL #1 .data 0x16000 0x400 INFO: WINSCARD.DLL #2 .rsrc 0x17000 0x2600 INFO: WINSCARD.DLL #3 .reloc 0x1a000 0x1400 INFO: Loaded sections for WINSCARD.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WTSAPI32.dll. INFO: Loading PE header for WTSAPI32.dll. INFO: Loaded PE header for WTSAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WTSAPI32.dll. INFO: WTSAPI32.dll #0 .text 0x1000 0x3800 INFO: WTSAPI32.dll #1 .data 0x5000 0x200 INFO: WTSAPI32.dll #2 .rsrc 0x6000 0x600 INFO: WTSAPI32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WTSAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name cscdll.dll. INFO: Loading PE header for cscdll.dll. INFO: Loaded PE header for cscdll.dll. Somewhat parsed: 1 INFO: Loading sections for cscdll.dll. INFO: cscdll.dll #0 .text 0x1000 0xe200 INFO: cscdll.dll #1 PAGE 0x10000 0x2600 INFO: cscdll.dll #2 .data 0x13000 0x1400 INFO: cscdll.dll #3 .rsrc 0x15000 0x6200 INFO: cscdll.dll #4 .reloc 0x1c000 0xc00 INFO: Loaded sections for cscdll.dll with result: 1. 5 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Initialized header for module name MSVCP60.dll. INFO: Loading PE header for MSVCP60.dll. INFO: Loaded PE header for MSVCP60.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP60.dll. INFO: MSVCP60.dll #0 .text 0x1000 0x2b000 INFO: MSVCP60.dll #1 .rdata 0x2c000 0x33000 INFO: MSVCP60.dll #2 .data 0x5f000 0x2000 INFO: MSVCP60.dll #3 .rsrc 0x61000 0x1000 INFO: MSVCP60.dll #4 .reloc 0x62000 0x3000 INFO: Initialized header for module name WlNotify.dll. INFO: Loading PE header for WlNotify.dll. INFO: Loaded PE header for WlNotify.dll. Somewhat parsed: 1 INFO: Loading sections for WlNotify.dll. INFO: WlNotify.dll #0 .text 0x1000 0x10e00 INFO: WlNotify.dll #1 .data 0x12000 0x600 INFO: WlNotify.dll #2 .rsrc 0x14000 0x4000 INFO: WlNotify.dll #3 .reloc 0x18000 0x1200 INFO: Loaded sections for WlNotify.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name msv1_0.dll. INFO: Loading PE header for msv1_0.dll. INFO: Loaded PE header for msv1_0.dll. Somewhat parsed: 1 INFO: Loading sections for msv1_0.dll. INFO: msv1_0.dll #0 .text 0x1000 0x1ca00 INFO: msv1_0.dll #1 .data 0x1e000 0x1200 INFO: msv1_0.dll #2 .rsrc 0x20000 0x1200 INFO: msv1_0.dll #3 .reloc 0x22000 0x1400 INFO: Loaded sections for msv1_0.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded sections for MSVCP60.dll with result: 1. 5 sections found. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name shell32.dll. INFO: Loading PE header for shell32.dll. INFO: Loaded PE header for shell32.dll. Somewhat parsed: 1 INFO: Loading sections for shell32.dll. INFO: shell32.dll #0 .text 0x1000 0x1fda00 INFO: shell32.dll #1 .data 0x1ff000 0x1a200 INFO: shell32.dll #2 .rsrc 0x21c000 0x5df600 INFO: shell32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Initialized header for module name adsldpc.dll. INFO: Loading PE header for adsldpc.dll. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded PE header for adsldpc.dll. Somewhat parsed: 1 INFO: Loading sections for adsldpc.dll. INFO: adsldpc.dll #0 .text 0x1000 0x21000 INFO: adsldpc.dll #1 .data 0x22000 0xa00 INFO: adsldpc.dll #2 .rsrc 0x23000 0x600 INFO: adsldpc.dll #3 .reloc 0x24000 0xc00 INFO: Loaded sections for adsldpc.dll with result: 1. 4 sections found. INFO: Initialized header for module name shell32.dll. INFO: Loading PE header for shell32.dll. INFO: Loaded PE header for shell32.dll. Somewhat parsed: 1 INFO: Loading sections for shell32.dll. INFO: shell32.dll #0 .text 0x1000 0x1fda00 INFO: shell32.dll #1 .data 0x1ff000 0x1a200 INFO: shell32.dll #2 .rsrc 0x21c000 0x5df600 INFO: shell32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name IPHLPAPI.DLL. INFO: Loading PE header for IPHLPAPI.DLL. INFO: Loaded PE header for IPHLPAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for IPHLPAPI.DLL. INFO: IPHLPAPI.DLL #0 .text 0x1000 0x12e00 INFO: IPHLPAPI.DLL #1 .data 0x14000 0x1000 INFO: IPHLPAPI.DLL #2 .rsrc 0x15000 0x2200 INFO: IPHLPAPI.DLL #3 .reloc 0x18000 0xe00 INFO: Loaded sections for IPHLPAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Initialized header for module name inetcomm.dll. INFO: Loading PE header for inetcomm.dll. INFO: Loaded PE header for inetcomm.dll. Somewhat parsed: 1 INFO: Loading sections for inetcomm.dll. INFO: inetcomm.dll #0 .text 0x1000 0x99600 INFO: inetcomm.dll #1 .data 0x9b000 0x3000 INFO: inetcomm.dll #2 .rsrc 0xa1000 0x3a00 INFO: inetcomm.dll #3 .reloc 0xa5000 0x8a00 INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name wbemsvc.dll. INFO: Loading PE header for wbemsvc.dll. INFO: Loaded PE header for wbemsvc.dll. Somewhat parsed: 1 INFO: Loading sections for wbemsvc.dll. INFO: wbemsvc.dll #0 .text 0x1000 0x8200 INFO: wbemsvc.dll #1 .orpc 0xa000 0x400 INFO: wbemsvc.dll #2 .data 0xb000 0xc00 INFO: wbemsvc.dll #3 .rsrc 0xc000 0x400 INFO: wbemsvc.dll #4 .reloc 0xd000 0x1000 INFO: Loaded sections for wbemsvc.dll with result: 1. 5 sections found. INFO: Initialized header for module name dot3api.dll. INFO: Loading PE header for dot3api.dll. INFO: Loaded PE header for dot3api.dll. Somewhat parsed: 1 INFO: Loading sections for dot3api.dll. INFO: dot3api.dll #0 .text 0x1000 0x5200 INFO: dot3api.dll #1 .data 0x7000 0x200 INFO: dot3api.dll #2 .rsrc 0x8000 0x800 INFO: dot3api.dll #3 .reloc 0x9000 0x600 INFO: Loaded sections for dot3api.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name TAPI32.dll. INFO: Loading PE header for TAPI32.dll. INFO: Loaded PE header for TAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for TAPI32.dll. INFO: TAPI32.dll #0 .text 0x1000 0x29600 INFO: TAPI32.dll #1 .data 0x2b000 0x600 INFO: TAPI32.dll #2 .rsrc 0x2c000 0x800 INFO: TAPI32.dll #3 .reloc 0x2d000 0x1e00 INFO: Loaded sections for TAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ACTIVEDS.dll. INFO: Loading PE header for ACTIVEDS.dll. INFO: Loaded PE header for ACTIVEDS.dll. Somewhat parsed: 1 INFO: Loading sections for ACTIVEDS.dll. INFO: ACTIVEDS.dll #0 .text 0x1000 0x25800 INFO: ACTIVEDS.dll #1 .data 0x27000 0x6e00 INFO: ACTIVEDS.dll #2 .rsrc 0x2f000 0x1000 INFO: ACTIVEDS.dll #3 .reloc 0x30000 0x1a00 INFO: Loaded sections for ACTIVEDS.dll with result: 1. 4 sections found. INFO: Initialized header for module name ESENT.dll. INFO: Loading PE header for ESENT.dll. INFO: Loaded PE header for ESENT.dll. Somewhat parsed: 1 INFO: Loading sections for ESENT.dll. INFO: ESENT.dll #0 .text 0x1000 0xec400 INFO: ESENT.dll #1 .data 0xee000 0x6000 INFO: ESENT.dll #2 cachelin 0xf6000 0x200 INFO: ESENT.dll #3 .rsrc 0xf7000 0xda00 INFO: ESENT.dll #4 .reloc 0x105000 0x8000 INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded sections for inetcomm.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSNCore.dll. INFO: Loading PE header for MSNCore.dll. INFO: Loaded PE header for MSNCore.dll. Somewhat parsed: 1 INFO: Loading sections for MSNCore.dll. INFO: MSNCore.dll #0 .text 0x1000 0xc8400 INFO: MSNCore.dll #1 .data 0xca000 0x22200 INFO: MSNCore.dll #2 .rsrc 0xed000 0x600 INFO: MSNCore.dll #3 .reloc 0xee000 0xa800 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name WTSAPI32.dll. INFO: Loading PE header for WTSAPI32.dll. INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded PE header for WTSAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WTSAPI32.dll. INFO: WTSAPI32.dll #0 .text 0x1000 0x3800 INFO: WTSAPI32.dll #1 .data 0x5000 0x200 INFO: WTSAPI32.dll #2 .rsrc 0x6000 0x600 INFO: WTSAPI32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WTSAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name RASAPI32.dll. INFO: Loading PE header for RASAPI32.dll. INFO: Loaded PE header for RASAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for RASAPI32.dll. INFO: RASAPI32.dll #0 .text 0x1000 0x35c00 INFO: RASAPI32.dll #1 .data 0x37000 0x400 INFO: RASAPI32.dll #2 .rsrc 0x38000 0xe00 INFO: RASAPI32.dll #3 .reloc 0x39000 0x2c00 INFO: Initialized header for module name psapi.dll. INFO: Loading PE header for psapi.dll. INFO: Loaded PE header for psapi.dll. Somewhat parsed: 1 INFO: Loading sections for psapi.dll. INFO: psapi.dll #0 .text 0x1000 0x4000 INFO: psapi.dll #1 .data 0x5000 0xe00 INFO: psapi.dll #2 .rsrc 0x9000 0x400 INFO: psapi.dll #3 .reloc 0xa000 0x400 INFO: Initialized header for module name BROWSEUI.dll. INFO: Loading PE header for BROWSEUI.dll. INFO: Loaded PE header for BROWSEUI.dll. Somewhat parsed: 1 INFO: Loading sections for BROWSEUI.dll. INFO: BROWSEUI.dll #0 .text 0x1000 0x85e00 INFO: BROWSEUI.dll #1 .data 0x87000 0xe00 INFO: BROWSEUI.dll #2 .rsrc 0x89000 0x6ba00 INFO: BROWSEUI.dll #3 .reloc 0xf5000 0x7a00 INFO: Loaded sections for MSNCore.dll with result: 1. 4 sections found. INFO: Loaded sections for psapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for ESENT.dll with result: 1. 5 sections found. INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name adsldpc.dll. INFO: Loading PE header for adsldpc.dll. INFO: Loaded PE header for adsldpc.dll. Somewhat parsed: 1 INFO: Loading sections for adsldpc.dll. INFO: adsldpc.dll #0 .text 0x1000 0x21000 INFO: adsldpc.dll #1 .data 0x22000 0xa00 INFO: adsldpc.dll #2 .rsrc 0x23000 0x600 INFO: adsldpc.dll #3 .reloc 0x24000 0xc00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for adsldpc.dll with result: 1. 4 sections found. INFO: Loaded sections for RASAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Loaded sections for BROWSEUI.dll with result: 1. 4 sections found. INFO: Initialized header for module name comdlg32.dll. INFO: Loading PE header for comdlg32.dll. INFO: Loaded PE header for comdlg32.dll. Somewhat parsed: 1 INFO: Loading sections for comdlg32.dll. INFO: comdlg32.dll #0 .text 0x1000 0x30000 INFO: comdlg32.dll #1 .data 0x31000 0xe00 INFO: comdlg32.dll #2 .rsrc 0x35000 0x10200 INFO: comdlg32.dll #3 .reloc 0x46000 0x2600 INFO: Loaded sections for comdlg32.dll with result: 1. 4 sections found. INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name wtsapi32.dll. INFO: Loading PE header for wtsapi32.dll. INFO: Loaded PE header for wtsapi32.dll. Somewhat parsed: 1 INFO: Loading sections for wtsapi32.dll. INFO: wtsapi32.dll #0 .text 0x1000 0x3800 INFO: wtsapi32.dll #1 .data 0x5000 0x200 INFO: wtsapi32.dll #2 .rsrc 0x6000 0x600 INFO: wtsapi32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for wtsapi32.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Initialized header for module name RASAPI32.dll. INFO: Loading PE header for RASAPI32.dll. INFO: Loaded PE header for RASAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for RASAPI32.dll. INFO: RASAPI32.dll #0 .text 0x1000 0x35c00 INFO: RASAPI32.dll #1 .data 0x37000 0x400 INFO: RASAPI32.dll #2 .rsrc 0x38000 0xe00 INFO: RASAPI32.dll #3 .reloc 0x39000 0x2c00 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for RASAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name netman.dll. INFO: Loading PE header for netman.dll. INFO: Loaded PE header for netman.dll. Somewhat parsed: 1 INFO: Loading sections for netman.dll. INFO: netman.dll #0 .text 0x1000 0x2a600 INFO: netman.dll #1 .data 0x2c000 0x800 INFO: netman.dll #2 .rsrc 0x2d000 0x2e00 INFO: netman.dll #3 .reloc 0x30000 0x2400 INFO: Loaded sections for netman.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPRAPI.dll. INFO: Loading PE header for MPRAPI.dll. INFO: Loaded PE header for MPRAPI.dll. Somewhat parsed: 1 INFO: Loading sections for MPRAPI.dll. INFO: MPRAPI.dll #0 .text 0x1000 0x13a00 INFO: MPRAPI.dll #1 .data 0x15000 0x200 INFO: MPRAPI.dll #2 .rsrc 0x16000 0x600 INFO: MPRAPI.dll #3 .reloc 0x17000 0xe00 INFO: Loaded sections for MPRAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name COMCTL32.dll. INFO: Loading PE header for COMCTL32.dll. INFO: Loaded PE header for COMCTL32.dll. Somewhat parsed: 1 INFO: Loading sections for COMCTL32.dll. INFO: COMCTL32.dll #0 .text 0x1000 0x70c00 INFO: COMCTL32.dll #1 .data 0x72000 0x2600 INFO: COMCTL32.dll #2 .rsrc 0x75000 0x1f400 INFO: COMCTL32.dll #3 .reloc 0x95000 0x4200 INFO: Initialized header for module name WZCSvc.DLL. INFO: Loading PE header for WZCSvc.DLL. INFO: Loaded PE header for WZCSvc.DLL. Somewhat parsed: 1 INFO: Loading sections for WZCSvc.DLL. INFO: WZCSvc.DLL #0 .text 0x1000 0x6a000 INFO: WZCSvc.DLL #1 .data 0x6b000 0x800 INFO: WZCSvc.DLL #2 .rsrc 0x80000 0x5e00 INFO: WZCSvc.DLL #3 .reloc 0x86000 0x5600 INFO: Initialized header for module name ADVAPI32.dll. INFO: Initialized header for module name COMRes.dll. INFO: Initialized header for module name Secur32.dll. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loading PE header for Secur32.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded sections for WZCSvc.DLL with result: 1. 4 sections found. INFO: Initialized header for module name rtutils.dll. INFO: Loading PE header for rtutils.dll. INFO: Loaded PE header for rtutils.dll. Somewhat parsed: 1 INFO: Loading sections for rtutils.dll. INFO: rtutils.dll #0 .text 0x1000 0x9800 INFO: rtutils.dll #1 .data 0xb000 0x200 INFO: rtutils.dll #2 .rsrc 0xc000 0x400 INFO: rtutils.dll #3 .reloc 0xd000 0xa00 INFO: Loaded sections for rtutils.dll with result: 1. 4 sections found. INFO: Initialized header for module name credui.dll. INFO: Loading PE header for credui.dll. INFO: Loaded PE header for credui.dll. Somewhat parsed: 1 INFO: Loading sections for credui.dll. INFO: credui.dll #0 .text 0x1000 0xe600 INFO: credui.dll #1 .data 0x10000 0x600 INFO: credui.dll #2 .rsrc 0x14000 0x17c00 INFO: credui.dll #3 .reloc 0x2c000 0x1400 INFO: Loaded sections for credui.dll with result: 1. 4 sections found. INFO: Initialized header for module name netshell.dll. INFO: Loading PE header for netshell.dll. INFO: Loaded PE header for netshell.dll. Somewhat parsed: 1 INFO: Loading sections for netshell.dll. INFO: netshell.dll #0 .text 0x1000 0x72200 INFO: netshell.dll #1 .orpc 0x74000 0x200 INFO: netshell.dll #2 .data 0x75000 0x2200 INFO: netshell.dll #3 .rsrc 0x79000 0x125e00 INFO: netshell.dll #4 .reloc 0x19f000 0x5600 INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCR80.dll. INFO: Loading PE header for MSVCR80.dll. INFO: Loaded PE header for MSVCR80.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCR80.dll. INFO: MSVCR80.dll #0 .text 0x1000 0x63000 INFO: MSVCR80.dll #1 .rdata 0x64000 0x2b000 INFO: MSVCR80.dll #2 .data 0x8f000 0x5000 INFO: MSVCR80.dll #3 .rsrc 0x96000 0x1000 INFO: MSVCR80.dll #4 .reloc 0x97000 0x4000 INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Loaded sections for netshell.dll with result: 1. 5 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name dot3dlg.dll. INFO: Loading PE header for dot3dlg.dll. INFO: Loaded PE header for dot3dlg.dll. Somewhat parsed: 1 INFO: Loading sections for dot3dlg.dll. INFO: dot3dlg.dll #0 .text 0x1000 0x1600 INFO: dot3dlg.dll #1 .data 0x3000 0x200 INFO: dot3dlg.dll #2 .rsrc 0x4000 0x600 INFO: dot3dlg.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for dot3dlg.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name eappcfg.dll. INFO: Loading PE header for eappcfg.dll. INFO: Loaded PE header for eappcfg.dll. Somewhat parsed: 1 INFO: Loading sections for eappcfg.dll. INFO: eappcfg.dll #0 .text 0x1000 0x1b000 INFO: eappcfg.dll #1 .data 0x1c000 0xe00 INFO: eappcfg.dll #2 .rsrc 0x1e000 0x600 INFO: eappcfg.dll #3 .reloc 0x1f000 0x2800 INFO: Loaded sections for eappcfg.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WSOCK32.dll. INFO: Loading PE header for WSOCK32.dll. INFO: Loaded PE header for WSOCK32.dll. Somewhat parsed: 1 INFO: Loading sections for WSOCK32.dll. INFO: WSOCK32.dll #0 .text 0x1000 0x2400 INFO: WSOCK32.dll #1 .data 0x4000 0x200 INFO: WSOCK32.dll #2 .rsrc 0x5000 0x2c00 INFO: WSOCK32.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for WSOCK32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSWSOCK.DLL. INFO: Loading PE header for MSWSOCK.DLL. INFO: Loaded PE header for MSWSOCK.DLL. Somewhat parsed: 1 INFO: Loading sections for MSWSOCK.DLL. INFO: MSWSOCK.DLL #0 .text 0x1000 0x29400 INFO: MSWSOCK.DLL #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: MSWSOCK.DLL #2 .data 0x37000 0xe00 INFO: MSWSOCK.DLL #3 .rsrc 0x39000 0x2c00 INFO: MSWSOCK.DLL #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for MSWSOCK.DLL with result: 1. 5 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Initialized header for module name OneX.DLL. INFO: Loading PE header for OneX.DLL. INFO: Loaded PE header for OneX.DLL. Somewhat parsed: 1 INFO: Loading sections for OneX.DLL. INFO: OneX.DLL #0 .text 0x1000 0x1b000 INFO: OneX.DLL #1 .data 0x1c000 0x400 INFO: OneX.DLL #2 .rsrc 0x1f000 0x6a00 INFO: OneX.DLL #3 .reloc 0x26000 0x1200 INFO: Loaded sections for OneX.DLL with result: 1. 4 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name rastls.dll. INFO: Loading PE header for rastls.dll. INFO: Loaded PE header for rastls.dll. Somewhat parsed: 1 INFO: Loading sections for rastls.dll. INFO: rastls.dll #0 .text 0x1000 0x21000 INFO: rastls.dll #1 .data 0x22000 0x200 INFO: rastls.dll #2 .rsrc 0x23000 0x1600 INFO: rastls.dll #3 .reloc 0x25000 0x1c00 INFO: Loaded sections for rastls.dll with result: 1. 4 sections found. INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for shell32.dll with result: 1. 4 sections found. INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for MSVCR80.dll with result: 1. 5 sections found. INFO: Loaded sections for COMCTL32.dll with result: 1. 4 sections found. INFO: Loaded sections for shell32.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mod_env.so. INFO: Loading PE header for mod_env.so. INFO: Loaded PE header for mod_env.so. Somewhat parsed: 1 INFO: Loading sections for mod_env.so. INFO: mod_env.so #0 .text 0x1000 0x1000 INFO: mod_env.so #1 .rdata 0x2000 0x1000 INFO: mod_env.so #2 .data 0x3000 0x1000 INFO: mod_env.so #3 .rsrc 0x4000 0x1000 INFO: mod_env.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_env.so with result: 1. 5 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name mod_alias.so. INFO: Loading PE header for mod_alias.so. INFO: Loaded PE header for mod_alias.so. Somewhat parsed: 1 INFO: Loading sections for mod_alias.so. INFO: mod_alias.so #0 .text 0x1000 0x1000 INFO: mod_alias.so #1 .rdata 0x2000 0x1000 INFO: mod_alias.so #2 .data 0x3000 0x1000 INFO: mod_alias.so #3 .rsrc 0x4000 0x1000 INFO: mod_alias.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_alias.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_asis.so. INFO: Loading PE header for mod_asis.so. INFO: Loaded PE header for mod_asis.so. Somewhat parsed: 1 INFO: Loading sections for mod_asis.so. INFO: mod_asis.so #0 .text 0x1000 0x1000 INFO: mod_asis.so #1 .rdata 0x2000 0x1000 INFO: mod_asis.so #2 .data 0x3000 0x1000 INFO: mod_asis.so #3 .rsrc 0x4000 0x1000 INFO: mod_asis.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_asis.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_autoindex.so. INFO: Loading PE header for mod_autoindex.so. INFO: Loaded PE header for mod_autoindex.so. Somewhat parsed: 1 INFO: Loading sections for mod_autoindex.so. INFO: mod_autoindex.so #0 .text 0x1000 0x4000 INFO: mod_autoindex.so #1 .rdata 0x5000 0x1000 INFO: mod_autoindex.so #2 .data 0x6000 0x1000 INFO: mod_autoindex.so #3 .rsrc 0x7000 0x1000 INFO: mod_autoindex.so #4 .reloc 0x8000 0x1000 INFO: Loaded sections for mod_autoindex.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_dir.so. INFO: Loading PE header for mod_dir.so. INFO: Loaded PE header for mod_dir.so. Somewhat parsed: 1 INFO: Loading sections for mod_dir.so. INFO: mod_dir.so #0 .text 0x1000 0x1000 INFO: mod_dir.so #1 .rdata 0x2000 0x1000 INFO: mod_dir.so #2 .data 0x3000 0x1000 INFO: mod_dir.so #3 .rsrc 0x4000 0x1000 INFO: mod_dir.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_dir.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_isapi.so. INFO: Loading PE header for mod_isapi.so. INFO: Loaded PE header for mod_isapi.so. Somewhat parsed: 1 INFO: Loading sections for mod_isapi.so. INFO: mod_isapi.so #0 .text 0x1000 0x3000 INFO: mod_isapi.so #1 .rdata 0x4000 0x1000 INFO: mod_isapi.so #2 .data 0x5000 0x1000 INFO: mod_isapi.so #3 .rsrc 0x6000 0x1000 INFO: mod_isapi.so #4 .reloc 0x7000 0x1000 INFO: Loaded sections for mod_isapi.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_log_config.so. INFO: Loading PE header for mod_log_config.so. INFO: Loaded PE header for mod_log_config.so. Somewhat parsed: 1 INFO: Loading sections for mod_log_config.so. INFO: mod_log_config.so #0 .text 0x1000 0x2000 INFO: mod_log_config.so #1 .rdata 0x3000 0x1000 INFO: mod_log_config.so #2 .data 0x4000 0x1000 INFO: mod_log_config.so #3 .rsrc 0x5000 0x1000 INFO: mod_log_config.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for mod_log_config.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_mime.so. INFO: Loading PE header for mod_mime.so. INFO: Loaded PE header for mod_mime.so. Somewhat parsed: 1 INFO: Loading sections for mod_mime.so. INFO: mod_mime.so #0 .text 0x1000 0x2000 INFO: mod_mime.so #1 .rdata 0x3000 0x1000 INFO: mod_mime.so #2 .data 0x4000 0x1000 INFO: mod_mime.so #3 .rsrc 0x5000 0x1000 INFO: mod_mime.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for mod_mime.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_rewrite.so. INFO: Loading PE header for mod_rewrite.so. INFO: Loaded PE header for mod_rewrite.so. Somewhat parsed: 1 INFO: Loading sections for mod_rewrite.so. INFO: mod_rewrite.so #0 .text 0x1000 0x7000 INFO: mod_rewrite.so #1 .rdata 0x8000 0x2000 INFO: mod_rewrite.so #2 .data 0xa000 0x2000 INFO: mod_rewrite.so #3 .rsrc 0xc000 0x1000 INFO: mod_rewrite.so #4 .reloc 0xd000 0x1000 INFO: Loaded sections for mod_rewrite.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_setenvif.so. INFO: Loading PE header for mod_setenvif.so. INFO: Loaded PE header for mod_setenvif.so. Somewhat parsed: 1 INFO: Loading sections for mod_setenvif.so. INFO: mod_setenvif.so #0 .text 0x1000 0x1000 INFO: mod_setenvif.so #1 .rdata 0x2000 0x1000 INFO: mod_setenvif.so #2 .data 0x3000 0x1000 INFO: mod_setenvif.so #3 .rsrc 0x4000 0x1000 INFO: mod_setenvif.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_setenvif.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_userdir.so. INFO: Loading PE header for mod_userdir.so. INFO: Loaded PE header for mod_userdir.so. Somewhat parsed: 1 INFO: Loading sections for mod_userdir.so. INFO: mod_userdir.so #0 .text 0x1000 0x1000 INFO: mod_userdir.so #1 .rdata 0x2000 0x1000 INFO: mod_userdir.so #2 .data 0x3000 0x1000 INFO: mod_userdir.so #3 .rsrc 0x4000 0x1000 INFO: mod_userdir.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_userdir.so with result: 1. 5 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... dumping process pd32_exe with pid 0xee0... ... building import reconstruction table ... INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name pd32.exe. INFO: Loading PE header for pd32.exe. INFO: Loaded PE header for pd32.exe. Somewhat parsed: 1 INFO: Loading sections for pd32.exe. INFO: pd32.exe #0 .text 0x1000 0x19e00 INFO: pd32.exe #1 .rdata 0x1b000 0x8200 INFO: pd32.exe #2 .data 0x24000 0x800 INFO: pd32.exe #3 .gfids 0x25000 0x200 INFO: pd32.exe #4 .tls 0x26000 0x200 INFO: pd32.exe #5 .rsrc 0x27000 0x200 INFO: pd32.exe #6 .reloc 0x28000 0x1600 INFO: Loaded sections for pd32.exe with result: 1. 7 sections found. INFO: Initialized header for module name api-ms-win-core-profile-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-profile-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-profile-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-profile-l1-1-0.dll. INFO: api-ms-win-core-profile-l1-1-0.dll #0 .text 0x1000 0x200 INFO: api-ms-win-core-profile-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-profile-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Initialized header for module name api-ms-win-crt-convert-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-convert-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-convert-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-convert-l1-1-0.dll. INFO: api-ms-win-crt-convert-l1-1-0.dll #0 .text 0x1000 0x1400 INFO: api-ms-win-crt-convert-l1-1-0.dll #1 .rsrc 0x3000 0x400 INFO: Loaded sections for api-ms-win-crt-convert-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Initialized header for module name MSASN1.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Initialized header for module name eappprxy.dll. INFO: Initialized header for module name GDI32.dll. INFO: Initialized header for module name USERENV.dll. INFO: Initialized header for module name MSASN1.dll. INFO: Initialized header for module name IMAGEHLP.dll. INFO: Initialized header for module name api-ms-win-core-datetime-l1-1-0.dll. INFO: Loading PE header for comctl32.dll. INFO: Loading PE header for USERENV.dll. INFO: Loading PE header for MSASN1.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPRAPI.dll. INFO: Loading PE header for MPRAPI.dll. INFO: Loaded PE header for MPRAPI.dll. Somewhat parsed: 1 INFO: Loading sections for MPRAPI.dll. INFO: MPRAPI.dll #0 .text 0x1000 0x13a00 INFO: MPRAPI.dll #1 .data 0x15000 0x200 INFO: MPRAPI.dll #2 .rsrc 0x16000 0x600 INFO: MPRAPI.dll #3 .reloc 0x17000 0xe00 INFO: Loaded sections for MPRAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name TAPI32.dll. INFO: Loading PE header for TAPI32.dll. INFO: Loaded PE header for TAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for TAPI32.dll. INFO: TAPI32.dll #0 .text 0x1000 0x29600 INFO: TAPI32.dll #1 .data 0x2b000 0x600 INFO: TAPI32.dll #2 .rsrc 0x2c000 0x800 INFO: TAPI32.dll #3 .reloc 0x2d000 0x1e00 INFO: Loaded sections for TAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ACTIVEDS.dll. INFO: Loading PE header for ACTIVEDS.dll. INFO: Loaded PE header for ACTIVEDS.dll. Somewhat parsed: 1 INFO: Loading sections for ACTIVEDS.dll. INFO: ACTIVEDS.dll #0 .text 0x1000 0x25800 INFO: ACTIVEDS.dll #1 .data 0x27000 0x6e00 INFO: ACTIVEDS.dll #2 .rsrc 0x2f000 0x1000 INFO: ACTIVEDS.dll #3 .reloc 0x30000 0x1a00 INFO: Loaded sections for ACTIVEDS.dll with result: 1. 4 sections found. INFO: Initialized header for module name WinSCard.dll. INFO: Loading PE header for WinSCard.dll. INFO: Loaded PE header for WinSCard.dll. Somewhat parsed: 1 INFO: Loading sections for WinSCard.dll. INFO: WinSCard.dll #0 .text 0x1000 0x14200 INFO: WinSCard.dll #1 .data 0x16000 0x400 INFO: WinSCard.dll #2 .rsrc 0x17000 0x2600 INFO: WinSCard.dll #3 .reloc 0x1a000 0x1400 INFO: Loaded sections for WinSCard.dll with result: 1. 4 sections found. INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name raschap.dll. INFO: Loading PE header for raschap.dll. INFO: Loaded PE header for raschap.dll. Somewhat parsed: 1 INFO: Loading sections for raschap.dll. INFO: raschap.dll #0 .text 0x1000 0x11c00 INFO: raschap.dll #1 .data 0x13000 0x200 INFO: raschap.dll #2 .rsrc 0x14000 0x800 INFO: raschap.dll #3 .reloc 0x15000 0xe00 INFO: Initialized header for module name SXS.DLL. INFO: Loading PE header for SXS.DLL. INFO: Loaded PE header for SXS.DLL. Somewhat parsed: 1 INFO: Loading sections for SXS.DLL. INFO: SXS.DLL #0 .text 0x1000 0x98e00 INFO: SXS.DLL #1 .data 0x9a000 0x2800 INFO: SXS.DLL #2 .rsrc 0x9d000 0x9800 INFO: SXS.DLL #3 .reloc 0xa7000 0x9000 INFO: Loaded sections for raschap.dll with result: 1. 4 sections found. INFO: Initialized header for module name schedsvc.dll. INFO: Loading PE header for schedsvc.dll. INFO: Loaded PE header for schedsvc.dll. Somewhat parsed: 1 INFO: Loading sections for schedsvc.dll. INFO: schedsvc.dll #0 .text 0x1000 0x29200 INFO: schedsvc.dll #1 .data 0x2b000 0x800 INFO: schedsvc.dll #2 .rsrc 0x2d000 0x3000 INFO: schedsvc.dll #3 .reloc 0x30000 0x2200 INFO: Loaded sections for schedsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTDSAPI.dll. INFO: Loading PE header for NTDSAPI.dll. INFO: Loaded PE header for NTDSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for NTDSAPI.dll. INFO: NTDSAPI.dll #0 .text 0x1000 0xf000 INFO: NTDSAPI.dll #1 .data 0x10000 0x600 INFO: NTDSAPI.dll #2 .rsrc 0x11000 0x400 INFO: NTDSAPI.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for NTDSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSIDLE.DLL. INFO: Loading PE header for MSIDLE.DLL. INFO: Loaded PE header for MSIDLE.DLL. Somewhat parsed: 1 INFO: Loading sections for MSIDLE.DLL. INFO: MSIDLE.DLL #0 .text 0x1000 0xc00 INFO: MSIDLE.DLL #1 .data 0x2000 0x200 INFO: MSIDLE.DLL #2 .rsrc 0x3000 0x600 INFO: MSIDLE.DLL #3 .reloc 0x4000 0x200 INFO: Loaded sections for MSIDLE.DLL with result: 1. 4 sections found. INFO: Initialized header for module name audiosrv.dll. INFO: Loading PE header for audiosrv.dll. INFO: Loaded PE header for audiosrv.dll. Somewhat parsed: 1 INFO: Loading sections for audiosrv.dll. INFO: audiosrv.dll #0 .text 0x1000 0x9000 INFO: audiosrv.dll #1 .data 0xa000 0x200 INFO: audiosrv.dll #2 .rsrc 0xb000 0x400 INFO: audiosrv.dll #3 .reloc 0xc000 0xc00 INFO: Loaded sections for audiosrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name wkssvc.dll. INFO: Loading PE header for wkssvc.dll. INFO: Loaded PE header for wkssvc.dll. Somewhat parsed: 1 INFO: Loading sections for wkssvc.dll. INFO: wkssvc.dll #0 .text 0x1000 0x1da00 INFO: wkssvc.dll #1 .data 0x1f000 0xc00 INFO: wkssvc.dll #2 .rsrc 0x20000 0x400 INFO: wkssvc.dll #3 .reloc 0x21000 0x1600 INFO: Loaded sections for wkssvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name cryptsvc.dll. INFO: Loading PE header for cryptsvc.dll. INFO: Loaded PE header for cryptsvc.dll. Somewhat parsed: 1 INFO: Loading sections for cryptsvc.dll. INFO: cryptsvc.dll #0 .text 0x1000 0xdc00 INFO: cryptsvc.dll #1 .data 0xf000 0x400 INFO: cryptsvc.dll #2 .rsrc 0x10000 0x400 INFO: cryptsvc.dll #3 .reloc 0x11000 0xc00 INFO: Loaded sections for cryptsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINHTTP.dll. INFO: Loading PE header for WINHTTP.dll. INFO: Loaded PE header for WINHTTP.dll. Somewhat parsed: 1 INFO: Loading sections for WINHTTP.dll. INFO: WINHTTP.dll #0 .text 0x1000 0x4dc00 INFO: WINHTTP.dll #1 .data 0x4f000 0x800 INFO: WINHTTP.dll #2 .rsrc 0x50000 0x4a00 INFO: WINHTTP.dll #3 .reloc 0x55000 0x3600 INFO: Loaded sections for WINHTTP.dll with result: 1. 4 sections found. INFO: Initialized header for module name certcli.dll. INFO: Loading PE header for certcli.dll. INFO: Loaded PE header for certcli.dll. Somewhat parsed: 1 INFO: Loading sections for certcli.dll. INFO: certcli.dll #0 .text 0x1000 0x25e00 INFO: certcli.dll #1 .orpc 0x27000 0x200 INFO: certcli.dll #2 .data 0x28000 0x1e00 INFO: certcli.dll #3 .rsrc 0x2a000 0x5800 INFO: certcli.dll #4 .reloc 0x30000 0x1e00 INFO: Loaded sections for certcli.dll with result: 1. 5 sections found. INFO: Loaded sections for SXS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name mlang.dll. INFO: Loading PE header for mlang.dll. INFO: Loaded PE header for mlang.dll. Somewhat parsed: 1 INFO: Loading sections for mlang.dll. INFO: mlang.dll #0 .text 0x1000 0x21000 INFO: mlang.dll #1 .data 0x22000 0x4800 INFO: mlang.dll #2 .rsrc 0x27000 0x67600 INFO: mlang.dll #3 .reloc 0x8f000 0x2000 INFO: Initialized header for module name wmiutils.dll. INFO: Loading PE header for wmiutils.dll. INFO: Loaded PE header for wmiutils.dll. Somewhat parsed: 1 INFO: Loading sections for wmiutils.dll. INFO: wmiutils.dll #0 .text 0x1000 0x11000 INFO: wmiutils.dll #1 .data 0x12000 0xa00 INFO: wmiutils.dll #2 .rsrc 0x15000 0x3e00 INFO: wmiutils.dll #3 .reloc 0x19000 0x1800 INFO: Loaded sections for wmiutils.dll with result: 1. 4 sections found. INFO: Initialized header for module name dmserver.dll. INFO: Loading PE header for dmserver.dll. INFO: Loaded PE header for dmserver.dll. Somewhat parsed: 1 INFO: Loading sections for dmserver.dll. INFO: dmserver.dll #0 .text 0x1000 0x3e00 INFO: dmserver.dll #1 .data 0x5000 0x200 INFO: dmserver.dll #2 .rsrc 0x6000 0x1400 INFO: dmserver.dll #3 .reloc 0x8000 0x400 INFO: Loaded sections for dmserver.dll with result: 1. 4 sections found. INFO: Initialized header for module name ersvc.dll. INFO: Loading PE header for ersvc.dll. INFO: Loaded PE header for ersvc.dll. Somewhat parsed: 1 INFO: Loading sections for ersvc.dll. INFO: ersvc.dll #0 .text 0x1000 0x4a00 INFO: ersvc.dll #1 .data 0x6000 0x200 INFO: ersvc.dll #2 .rsrc 0x7000 0x400 INFO: ersvc.dll #3 .reloc 0x8000 0x600 INFO: Loaded sections for ersvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name es.dll. INFO: Loading PE header for es.dll. INFO: Loaded PE header for es.dll. Somewhat parsed: 1 INFO: Loading sections for es.dll. INFO: es.dll #0 .text 0x1000 0x31a00 INFO: es.dll #1 .orpc 0x33000 0x400 INFO: es.dll #2 .data 0x34000 0x1400 INFO: es.dll #3 .rsrc 0x38000 0x5800 INFO: es.dll #4 .reloc 0x3e000 0x3400 INFO: Loaded sections for es.dll with result: 1. 5 sections found. INFO: Initialized header for module name pchsvc.dll. INFO: Loading PE header for pchsvc.dll. INFO: Loaded PE header for pchsvc.dll. Somewhat parsed: 1 INFO: Loading sections for pchsvc.dll. INFO: pchsvc.dll #0 .text 0x1000 0x8000 INFO: pchsvc.dll #1 .data 0x9000 0x600 INFO: pchsvc.dll #2 .rsrc 0xa000 0x400 INFO: pchsvc.dll #3 .reloc 0xb000 0x800 INFO: Loaded sections for pchsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name srvsvc.dll. INFO: Loading PE header for srvsvc.dll. INFO: Loaded PE header for srvsvc.dll. Somewhat parsed: 1 INFO: Loading sections for srvsvc.dll. INFO: srvsvc.dll #0 .text 0x1000 0x12000 INFO: srvsvc.dll #1 .data 0x13000 0x4000 INFO: srvsvc.dll #2 .rsrc 0x17000 0x400 INFO: srvsvc.dll #3 .reloc 0x18000 0x1200 INFO: Loaded sections for srvsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name netman.dll. INFO: Loading PE header for netman.dll. INFO: Loaded PE header for netman.dll. Somewhat parsed: 1 INFO: Loading sections for netman.dll. INFO: netman.dll #0 .text 0x1000 0x2a600 INFO: netman.dll #1 .data 0x2c000 0x800 INFO: netman.dll #2 .rsrc 0x2d000 0x2e00 INFO: netman.dll #3 .reloc 0x30000 0x2400 INFO: Loaded sections for netman.dll with result: 1. 4 sections found. INFO: Initialized header for module name netshell.dll. INFO: Loading PE header for netshell.dll. INFO: Loaded PE header for netshell.dll. Somewhat parsed: 1 INFO: Loading sections for netshell.dll. INFO: netshell.dll #0 .text 0x1000 0x72200 INFO: netshell.dll #1 .orpc 0x74000 0x200 INFO: netshell.dll #2 .data 0x75000 0x2200 INFO: netshell.dll #3 .rsrc 0x79000 0x125e00 INFO: netshell.dll #4 .reloc 0x19f000 0x5600 INFO: Loaded sections for mlang.dll with result: 1. 4 sections found. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loading PE header for api-ms-win-core-datetime-l1-1-0.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded PE header for api-ms-win-core-datetime-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-datetime-l1-1-0.dll. INFO: api-ms-win-core-datetime-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-datetime-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-datetime-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Initialized header for module name perfos.dll. INFO: Loading PE header for perfos.dll. INFO: Loaded PE header for perfos.dll. Somewhat parsed: 1 INFO: Loading sections for perfos.dll. INFO: perfos.dll #0 .text 0x1000 0x3200 INFO: perfos.dll #1 .data 0x5000 0x1400 INFO: perfos.dll #2 .rsrc 0x7000 0x1400 INFO: perfos.dll #3 .reloc 0x9000 0x400 INFO: Loaded sections for perfos.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loading PE header for eappprxy.dll. INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Initialized header for module name WSOCK32.dll. INFO: Loading PE header for WSOCK32.dll. INFO: Loaded PE header for WSOCK32.dll. Somewhat parsed: 1 INFO: Loading sections for WSOCK32.dll. INFO: WSOCK32.dll #0 .text 0x1000 0x2400 INFO: WSOCK32.dll #1 .data 0x4000 0x200 INFO: WSOCK32.dll #2 .rsrc 0x5000 0x2c00 INFO: WSOCK32.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for WSOCK32.dll with result: 1. 4 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Loaded PE header for eappprxy.dll. Somewhat parsed: 1 INFO: Loading sections for eappprxy.dll. INFO: eappprxy.dll #0 .text 0x1000 0x7600 INFO: eappprxy.dll #1 .data 0x9000 0xc00 INFO: eappprxy.dll #2 .rsrc 0xb000 0x600 INFO: eappprxy.dll #3 .reloc 0xc000 0x1400 INFO: Loaded PE header for MSASN1.dll. Somewhat parsed: 1 INFO: Loading sections for MSASN1.dll. INFO: MSASN1.dll #0 .text 0x1000 0xd200 INFO: MSASN1.dll #1 .data 0xf000 0x200 INFO: MSASN1.dll #2 .rsrc 0x10000 0x400 INFO: MSASN1.dll #3 .reloc 0x11000 0x400 INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded sections for eappprxy.dll with result: 1. 4 sections found. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for MSASN1.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHDOCVW.dll. INFO: Loading PE header for SHDOCVW.dll. INFO: Loaded PE header for SHDOCVW.dll. Somewhat parsed: 1 INFO: Loading sections for SHDOCVW.dll. INFO: SHDOCVW.dll #0 .text 0x1000 0xd8600 INFO: SHDOCVW.dll #1 .data 0xda000 0x1800 INFO: SHDOCVW.dll #2 .rsrc 0xdc000 0x88c00 INFO: SHDOCVW.dll #3 .reloc 0x165000 0xb200 INFO: Initialized header for module name MSACM32.dll. INFO: Loading PE header for MSACM32.dll. INFO: Loaded PE header for MSACM32.dll. Somewhat parsed: 1 INFO: Loading sections for MSACM32.dll. INFO: MSACM32.dll #0 .text 0x1000 0xf400 INFO: MSACM32.dll #1 .data 0x11000 0x200 INFO: MSACM32.dll #2 .rsrc 0x12000 0x1600 INFO: MSACM32.dll #3 .reloc 0x14000 0x800 INFO: Loaded sections for MSACM32.dll with result: 1. 4 sections found. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name mod_env.so. INFO: Loading PE header for mod_env.so. INFO: Loaded PE header for mod_env.so. Somewhat parsed: 1 INFO: Loading sections for mod_env.so. INFO: mod_env.so #0 .text 0x1000 0x1000 INFO: mod_env.so #1 .rdata 0x2000 0x1000 INFO: mod_env.so #2 .data 0x3000 0x1000 INFO: mod_env.so #3 .rsrc 0x4000 0x1000 INFO: mod_env.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_env.so with result: 1. 5 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ShimEng.dll. INFO: Loading PE header for ShimEng.dll. INFO: Loaded PE header for ShimEng.dll. Somewhat parsed: 1 INFO: Loading sections for ShimEng.dll. INFO: ShimEng.dll #0 .text 0x1000 0xda00 INFO: ShimEng.dll #1 .data 0xf000 0x600 INFO: ShimEng.dll #2 .rsrc 0x23000 0x400 INFO: ShimEng.dll #3 .reloc 0x24000 0x1600 INFO: Loaded sections for SHDOCVW.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: Loaded sections for ShimEng.dll with result: 1. 4 sections found. INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Initialized header for module name WZCSAPI.DLL. INFO: Loading PE header for WZCSAPI.DLL. INFO: Loaded PE header for WZCSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for WZCSAPI.DLL. INFO: WZCSAPI.DLL #0 .text 0x1000 0xb600 INFO: WZCSAPI.DLL #1 .data 0xd000 0x600 INFO: WZCSAPI.DLL #2 .rsrc 0xe000 0x600 INFO: WZCSAPI.DLL #3 .reloc 0xf000 0x800 INFO: Loaded sections for WZCSAPI.DLL with result: 1. 4 sections found. INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name mod_alias.so. INFO: Loading PE header for mod_alias.so. INFO: Loaded PE header for mod_alias.so. Somewhat parsed: 1 INFO: Loading sections for mod_alias.so. INFO: mod_alias.so #0 .text 0x1000 0x1000 INFO: mod_alias.so #1 .rdata 0x2000 0x1000 INFO: mod_alias.so #2 .data 0x3000 0x1000 INFO: mod_alias.so #3 .rsrc 0x4000 0x1000 INFO: mod_alias.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_alias.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_asis.so. INFO: Loading PE header for mod_asis.so. INFO: Loaded PE header for mod_asis.so. Somewhat parsed: 1 INFO: Loading sections for mod_asis.so. INFO: mod_asis.so #0 .text 0x1000 0x1000 INFO: mod_asis.so #1 .rdata 0x2000 0x1000 INFO: mod_asis.so #2 .data 0x3000 0x1000 INFO: mod_asis.so #3 .rsrc 0x4000 0x1000 INFO: mod_asis.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_asis.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_autoindex.so. INFO: Loading PE header for mod_autoindex.so. INFO: Loaded PE header for mod_autoindex.so. Somewhat parsed: 1 INFO: Loading sections for mod_autoindex.so. INFO: mod_autoindex.so #0 .text 0x1000 0x4000 INFO: mod_autoindex.so #1 .rdata 0x5000 0x1000 INFO: mod_autoindex.so #2 .data 0x6000 0x1000 INFO: mod_autoindex.so #3 .rsrc 0x7000 0x1000 INFO: mod_autoindex.so #4 .reloc 0x8000 0x1000 INFO: Loaded sections for mod_autoindex.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_dir.so. INFO: Loading PE header for mod_dir.so. INFO: Loaded PE header for mod_dir.so. Somewhat parsed: 1 INFO: Loading sections for mod_dir.so. INFO: mod_dir.so #0 .text 0x1000 0x1000 INFO: mod_dir.so #1 .rdata 0x2000 0x1000 INFO: mod_dir.so #2 .data 0x3000 0x1000 INFO: mod_dir.so #3 .rsrc 0x4000 0x1000 INFO: mod_dir.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_dir.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_isapi.so. INFO: Loading PE header for mod_isapi.so. INFO: Loaded PE header for mod_isapi.so. Somewhat parsed: 1 INFO: Loading sections for mod_isapi.so. INFO: mod_isapi.so #0 .text 0x1000 0x3000 INFO: mod_isapi.so #1 .rdata 0x4000 0x1000 INFO: mod_isapi.so #2 .data 0x5000 0x1000 INFO: mod_isapi.so #3 .rsrc 0x6000 0x1000 INFO: mod_isapi.so #4 .reloc 0x7000 0x1000 INFO: Loaded sections for mod_isapi.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_log_config.so. INFO: Loading PE header for mod_log_config.so. INFO: Loaded PE header for mod_log_config.so. Somewhat parsed: 1 INFO: Loading sections for mod_log_config.so. INFO: mod_log_config.so #0 .text 0x1000 0x2000 INFO: mod_log_config.so #1 .rdata 0x3000 0x1000 INFO: mod_log_config.so #2 .data 0x4000 0x1000 INFO: mod_log_config.so #3 .rsrc 0x5000 0x1000 INFO: mod_log_config.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Loaded sections for mod_log_config.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_mime.so. INFO: Loading PE header for mod_mime.so. INFO: Loaded PE header for mod_mime.so. Somewhat parsed: 1 INFO: Loading sections for mod_mime.so. INFO: mod_mime.so #0 .text 0x1000 0x2000 INFO: mod_mime.so #1 .rdata 0x3000 0x1000 INFO: mod_mime.so #2 .data 0x4000 0x1000 INFO: mod_mime.so #3 .rsrc 0x5000 0x1000 INFO: mod_mime.so #4 .reloc 0x6000 0x1000 INFO: Loaded sections for mod_mime.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_rewrite.so. INFO: Loading PE header for mod_rewrite.so. INFO: Loaded PE header for mod_rewrite.so. Somewhat parsed: 1 INFO: Loading sections for mod_rewrite.so. INFO: mod_rewrite.so #0 .text 0x1000 0x7000 INFO: mod_rewrite.so #1 .rdata 0x8000 0x2000 INFO: mod_rewrite.so #2 .data 0xa000 0x2000 INFO: mod_rewrite.so #3 .rsrc 0xc000 0x1000 INFO: mod_rewrite.so #4 .reloc 0xd000 0x1000 INFO: Loaded sections for mod_rewrite.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_setenvif.so. INFO: Loading PE header for mod_setenvif.so. INFO: Loaded PE header for mod_setenvif.so. Somewhat parsed: 1 INFO: Loading sections for mod_setenvif.so. INFO: mod_setenvif.so #0 .text 0x1000 0x1000 INFO: mod_setenvif.so #1 .rdata 0x2000 0x1000 INFO: mod_setenvif.so #2 .data 0x3000 0x1000 INFO: mod_setenvif.so #3 .rsrc 0x4000 0x1000 INFO: mod_setenvif.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_setenvif.so with result: 1. 5 sections found. INFO: Initialized header for module name mod_userdir.so. INFO: Loading PE header for mod_userdir.so. INFO: Loaded PE header for mod_userdir.so. Somewhat parsed: 1 INFO: Loading sections for mod_userdir.so. INFO: mod_userdir.so #0 .text 0x1000 0x1000 INFO: mod_userdir.so #1 .rdata 0x2000 0x1000 INFO: mod_userdir.so #2 .data 0x3000 0x1000 INFO: mod_userdir.so #3 .rsrc 0x4000 0x1000 INFO: mod_userdir.so #4 .reloc 0x5000 0x1000 INFO: Loaded sections for mod_userdir.so with result: 1. 5 sections found. INFO: Initialized header for module name MSVCR90.dll. INFO: Loading PE header for MSVCR90.dll. INFO: Loaded PE header for MSVCR90.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCR90.dll. INFO: MSVCR90.dll #0 .text 0x1000 0x95c00 INFO: MSVCR90.dll #1 .data 0x97000 0x4400 INFO: MSVCR90.dll #2 .rsrc 0x9e000 0x400 INFO: MSVCR90.dll #3 .reloc 0x9f000 0x3800 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for netshell.dll with result: 1. 5 sections found. dumping process test_exe with pid 0xd68... ... building import reconstruction table ... INFO: Initialized header for module name CONCRT140.dll. INFO: Loading PE header for CONCRT140.dll. INFO: Loaded PE header for CONCRT140.dll. Somewhat parsed: 1 INFO: Loading sections for CONCRT140.dll. INFO: CONCRT140.dll #0 .text 0x1000 0x30800 INFO: CONCRT140.dll #1 .data 0x32000 0x2c00 INFO: CONCRT140.dll #2 .idata 0x35000 0x1200 INFO: CONCRT140.dll #3 .rsrc 0x37000 0x400 INFO: CONCRT140.dll #4 .reloc 0x38000 0x2a00 INFO: Initialized header for module name credui.dll. INFO: Loading PE header for credui.dll. INFO: Loaded PE header for credui.dll. Somewhat parsed: 1 INFO: Loading sections for credui.dll. INFO: credui.dll #0 .text 0x1000 0xe600 INFO: credui.dll #1 .data 0x10000 0x600 INFO: credui.dll #2 .rsrc 0x14000 0x17c00 INFO: credui.dll #3 .reloc 0x2c000 0x1400 INFO: Loaded sections for credui.dll with result: 1. 4 sections found. INFO: Initialized header for module name dot3dlg.dll. INFO: Loading PE header for dot3dlg.dll. INFO: Loaded PE header for dot3dlg.dll. Somewhat parsed: 1 INFO: Loading sections for dot3dlg.dll. INFO: dot3dlg.dll #0 .text 0x1000 0x1600 INFO: dot3dlg.dll #1 .data 0x3000 0x200 INFO: dot3dlg.dll #2 .rsrc 0x4000 0x600 INFO: dot3dlg.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for dot3dlg.dll with result: 1. 4 sections found. INFO: Initialized header for module name OneX.DLL. INFO: Loading PE header for OneX.DLL. INFO: Loaded PE header for OneX.DLL. Somewhat parsed: 1 INFO: Loading sections for OneX.DLL. INFO: OneX.DLL #0 .text 0x1000 0x1b000 INFO: OneX.DLL #1 .data 0x1c000 0x400 INFO: OneX.DLL #2 .rsrc 0x1f000 0x6a00 INFO: OneX.DLL #3 .reloc 0x26000 0x1200 INFO: Loaded sections for OneX.DLL with result: 1. 4 sections found. INFO: Initialized header for module name eappcfg.dll. INFO: Loading PE header for eappcfg.dll. INFO: Loaded PE header for eappcfg.dll. Somewhat parsed: 1 INFO: Loading sections for eappcfg.dll. INFO: eappcfg.dll #0 .text 0x1000 0x1b000 INFO: eappcfg.dll #1 .data 0x1c000 0xe00 INFO: eappcfg.dll #2 .rsrc 0x1e000 0x600 INFO: eappcfg.dll #3 .reloc 0x1f000 0x2800 INFO: Loaded sections for eappcfg.dll with result: 1. 4 sections found. INFO: Initialized header for module name MfcSubs.dll. INFO: Loading PE header for MfcSubs.dll. INFO: Loaded PE header for MfcSubs.dll. Somewhat parsed: 1 INFO: Loading sections for MfcSubs.dll. INFO: MfcSubs.dll #0 .text 0x1000 0x4a00 INFO: MfcSubs.dll #1 .data 0x6000 0x200 INFO: MfcSubs.dll #2 .rsrc 0x7000 0x600 INFO: MfcSubs.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for MfcSubs.dll with result: 1. 4 sections found. INFO: Initialized header for module name eappprxy.dll. INFO: Loading PE header for eappprxy.dll. INFO: Loaded PE header for eappprxy.dll. Somewhat parsed: 1 INFO: Loading sections for eappprxy.dll. INFO: eappprxy.dll #0 .text 0x1000 0x7600 INFO: eappprxy.dll #1 .data 0x9000 0xc00 INFO: eappprxy.dll #2 .rsrc 0xb000 0x600 INFO: eappprxy.dll #3 .reloc 0xc000 0x1400 INFO: Loaded sections for eappprxy.dll with result: 1. 4 sections found. INFO: Initialized header for module name WZCSAPI.DLL. INFO: Loading PE header for WZCSAPI.DLL. INFO: Loaded PE header for WZCSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for WZCSAPI.DLL. INFO: WZCSAPI.DLL #0 .text 0x1000 0xb600 INFO: WZCSAPI.DLL #1 .data 0xd000 0x600 INFO: WZCSAPI.DLL #2 .rsrc 0xe000 0x600 INFO: WZCSAPI.DLL #3 .reloc 0xf000 0x800 INFO: Loaded sections for WZCSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name seclogon.dll. INFO: Loading PE header for seclogon.dll. INFO: Loaded PE header for seclogon.dll. Somewhat parsed: 1 INFO: Loading sections for seclogon.dll. INFO: seclogon.dll #0 .text 0x1000 0x3800 INFO: seclogon.dll #1 .data 0x5000 0x200 INFO: seclogon.dll #2 .rsrc 0x6000 0x800 INFO: seclogon.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for seclogon.dll with result: 1. 4 sections found. INFO: Initialized header for module name sens.dll. INFO: Loading PE header for sens.dll. INFO: Loaded PE header for sens.dll. Somewhat parsed: 1 INFO: Loading sections for sens.dll. INFO: sens.dll #0 .text 0x1000 0x7400 INFO: sens.dll #1 .data 0x9000 0x400 INFO: sens.dll #2 .rsrc 0xa000 0x1600 INFO: sens.dll #3 .reloc 0xc000 0x800 INFO: Loaded sections for sens.dll with result: 1. 4 sections found. INFO: Initialized header for module name POWRPROF.dll. INFO: Loading PE header for POWRPROF.dll. INFO: Loaded PE header for POWRPROF.dll. Somewhat parsed: 1 INFO: Loading sections for POWRPROF.dll. INFO: POWRPROF.dll #0 .text 0x1000 0x3400 INFO: POWRPROF.dll #1 .data 0x5000 0x400 INFO: POWRPROF.dll #2 .rsrc 0x6000 0x400 INFO: POWRPROF.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for POWRPROF.dll with result: 1. 4 sections found. INFO: Initialized header for module name trkwks.dll. INFO: Loading PE header for trkwks.dll. INFO: Loaded PE header for trkwks.dll. Somewhat parsed: 1 INFO: Loading sections for trkwks.dll. INFO: trkwks.dll #0 .text 0x1000 0x14200 INFO: trkwks.dll #1 .data 0x16000 0xa00 INFO: trkwks.dll #2 .rsrc 0x17000 0x400 INFO: trkwks.dll #3 .reloc 0x18000 0xc00 INFO: Loaded sections for trkwks.dll with result: 1. 4 sections found. INFO: Initialized header for module name w32time.dll. INFO: Loading PE header for w32time.dll. INFO: Loaded PE header for w32time.dll. Somewhat parsed: 1 INFO: Loading sections for w32time.dll. INFO: w32time.dll #0 .text 0x1000 0x23000 INFO: w32time.dll #1 .data 0x24000 0xc00 INFO: w32time.dll #2 .rsrc 0x25000 0x4e00 INFO: w32time.dll #3 .reloc 0x2a000 0x1e00 INFO: Loaded sections for w32time.dll with result: 1. 4 sections found. INFO: Initialized header for module name wmisvc.dll. INFO: Loading PE header for wmisvc.dll. INFO: Loaded PE header for wmisvc.dll. Somewhat parsed: 1 INFO: Loading sections for wmisvc.dll. INFO: wmisvc.dll #0 .text 0x1000 0x1f200 INFO: wmisvc.dll #1 .data 0x21000 0xa00 INFO: wmisvc.dll #2 .rsrc 0x24000 0x800 INFO: wmisvc.dll #3 .reloc 0x25000 0x2e00 INFO: Loaded sections for wmisvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name VSSAPI.DLL. INFO: Loading PE header for VSSAPI.DLL. INFO: Loaded PE header for VSSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for VSSAPI.DLL. INFO: VSSAPI.DLL #0 .text 0x1000 0x59800 INFO: VSSAPI.DLL #1 .data 0x5b000 0x9000 INFO: VSSAPI.DLL #2 .rsrc 0x66000 0x600 INFO: VSSAPI.DLL #3 .reloc 0x67000 0x6000 INFO: Loaded sections for MSVCR90.dll with result: 1. 4 sections found. INFO: Loaded sections for CONCRT140.dll with result: 1. 5 sections found. INFO: Loaded sections for VSSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WMI.dll. INFO: Loading PE header for WMI.dll. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Initialized header for module name office.odf. INFO: Loading PE header for office.odf. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded PE header for WMI.dll. Somewhat parsed: 1 INFO: Loading sections for WMI.dll. INFO: WMI.dll #0 .text 0x1000 0xc00 INFO: WMI.dll #1 .rsrc 0x2000 0x400 INFO: WMI.dll #2 .reloc 0x3000 0x200 INFO: Loaded sections for WMI.dll with result: 1. 3 sections found. INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name DHCPCSVC.DLL. INFO: Loading PE header for DHCPCSVC.DLL. INFO: Loaded PE header for DHCPCSVC.DLL. Somewhat parsed: 1 INFO: Loading sections for DHCPCSVC.DLL. INFO: DHCPCSVC.DLL #0 .text 0x1000 0x1ba00 INFO: DHCPCSVC.DLL #1 .data 0x1d000 0xa00 INFO: DHCPCSVC.DLL #2 .rsrc 0x1e000 0x1600 INFO: DHCPCSVC.DLL #3 .reloc 0x20000 0x1200 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name api-ms-win-core-rtlsupport-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-rtlsupport-l1-1-0.dll. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for api-ms-win-core-rtlsupport-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-rtlsupport-l1-1-0.dll. INFO: api-ms-win-core-rtlsupport-l1-1-0.dll #0 .text 0x1000 0x200 INFO: api-ms-win-core-rtlsupport-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-rtlsupport-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Loaded sections for DHCPCSVC.DLL with result: 1. 4 sections found. INFO: Initialized header for module name wuauserv.dll. INFO: Loading PE header for wuauserv.dll. INFO: Loaded PE header for wuauserv.dll. Somewhat parsed: 1 INFO: Loading sections for wuauserv.dll. INFO: wuauserv.dll #0 .text 0x1000 0xc00 INFO: wuauserv.dll #1 .data 0x2000 0x200 INFO: wuauserv.dll #2 .rsrc 0x3000 0x600 INFO: wuauserv.dll #3 .reloc 0x4000 0x200 INFO: Initialized header for module name DNSAPI.dll. INFO: Loading PE header for DNSAPI.dll. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded PE header for DNSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for DNSAPI.dll. INFO: DNSAPI.dll #0 .text 0x1000 0x1fa00 INFO: DNSAPI.dll #1 .data 0x21000 0x2000 INFO: DNSAPI.dll #2 .rsrc 0x24000 0x1000 INFO: DNSAPI.dll #3 .reloc 0x25000 0x1400 INFO: Loaded sections for wuauserv.dll with result: 1. 4 sections found. INFO: Initialized header for module name wuaueng.dll. INFO: Loading PE header for wuaueng.dll. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for wuaueng.dll. Somewhat parsed: 1 INFO: Loading sections for wuaueng.dll. INFO: wuaueng.dll #0 .text 0x1000 0x181e00 INFO: wuaueng.dll #1 .data 0x183000 0x7c00 INFO: wuaueng.dll #2 .rsrc 0x18c000 0x9000 INFO: wuaueng.dll #3 .reloc 0x195000 0xd000 INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name CRYPTUI.dll. INFO: Loading PE header for CRYPTUI.dll. INFO: Loaded PE header for CRYPTUI.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPTUI.dll. INFO: CRYPTUI.dll #0 .text 0x1000 0x47400 INFO: CRYPTUI.dll #1 .data 0x49000 0x400 INFO: CRYPTUI.dll #2 .rsrc 0x4a000 0x32a00 INFO: CRYPTUI.dll #3 .reloc 0x7d000 0x2c00 INFO: Loaded sections for CRYPTUI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for DNSAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name EapolQec.dll. INFO: Loading PE header for EapolQec.dll. INFO: Loaded PE header for EapolQec.dll. Somewhat parsed: 1 INFO: Loading sections for EapolQec.dll. INFO: EapolQec.dll #0 .text 0x1000 0x6200 INFO: EapolQec.dll #1 .data 0x8000 0x400 INFO: EapolQec.dll #2 .rsrc 0x9000 0x800 INFO: EapolQec.dll #3 .reloc 0xa000 0x600 INFO: Loaded sections for EapolQec.dll with result: 1. 4 sections found. INFO: Initialized header for module name QUtil.dll. INFO: Loading PE header for QUtil.dll. INFO: Loaded PE header for QUtil.dll. Somewhat parsed: 1 INFO: Loading sections for QUtil.dll. INFO: QUtil.dll #0 .text 0x1000 0xf000 INFO: QUtil.dll #1 .orpc 0x10000 0x200 INFO: QUtil.dll #2 .data 0x11000 0x1000 INFO: QUtil.dll #3 .rsrc 0x13000 0xa00 INFO: QUtil.dll #4 .reloc 0x14000 0x1c00 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Loaded sections for QUtil.dll with result: 1. 5 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Loaded sections for wuaueng.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Initialized header for module name WINSPOOL.DRV. INFO: Loading PE header for WINSPOOL.DRV. INFO: Loaded PE header for WINSPOOL.DRV. Somewhat parsed: 1 INFO: Loading sections for WINSPOOL.DRV. INFO: WINSPOOL.DRV #0 .text 0x1000 0x20000 INFO: WINSPOOL.DRV #1 .data 0x21000 0x1800 INFO: WINSPOOL.DRV #2 .rsrc 0x23000 0xa00 INFO: WINSPOOL.DRV #3 .reloc 0x24000 0x1600 INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for WINSPOOL.DRV with result: 1. 4 sections found. INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name api-ms-win-core-util-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-util-l1-1-0.dll. INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Loaded PE header for api-ms-win-core-util-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-util-l1-1-0.dll. INFO: api-ms-win-core-util-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-util-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Initialized header for module name Cabinet.dll. INFO: Loading PE header for Cabinet.dll. INFO: Loaded PE header for Cabinet.dll. Somewhat parsed: 1 INFO: Loading sections for Cabinet.dll. INFO: Cabinet.dll #0 .text 0x1000 0xde00 INFO: Cabinet.dll #1 .data 0xf000 0x200 INFO: Cabinet.dll #2 .rsrc 0x11000 0x400 INFO: Cabinet.dll #3 .reloc 0x12000 0x400 INFO: Loaded sections for Cabinet.dll with result: 1. 4 sections found. INFO: Initialized header for module name mspatcha.dll. INFO: Loading PE header for mspatcha.dll. INFO: Loaded PE header for mspatcha.dll. Somewhat parsed: 1 INFO: Loading sections for mspatcha.dll. INFO: mspatcha.dll #0 .text 0x1000 0x6800 INFO: mspatcha.dll #1 .data 0x8000 0x200 INFO: mspatcha.dll #2 .rsrc 0x9000 0x400 INFO: mspatcha.dll #3 .reloc 0xa000 0x200 INFO: Loaded sections for mspatcha.dll with result: 1. 4 sections found. INFO: Initialized header for module name ipnathlp.dll. INFO: Loading PE header for ipnathlp.dll. INFO: Loaded PE header for ipnathlp.dll. Somewhat parsed: 1 INFO: Loading sections for ipnathlp.dll. INFO: ipnathlp.dll #0 .text 0x1000 0x40a00 INFO: ipnathlp.dll #1 .data 0x42000 0xe00 INFO: ipnathlp.dll #2 .rsrc 0x45000 0xae00 INFO: ipnathlp.dll #3 .reloc 0x50000 0x4200 INFO: Loaded sections for ipnathlp.dll with result: 1. 4 sections found. INFO: Initialized header for module name AUTHZ.dll. INFO: Loading PE header for AUTHZ.dll. INFO: Loaded PE header for AUTHZ.dll. Somewhat parsed: 1 INFO: Loading sections for AUTHZ.dll. INFO: AUTHZ.dll #0 .text 0x1000 0xe000 INFO: AUTHZ.dll #1 .data 0xf000 0x400 INFO: AUTHZ.dll #2 .rsrc 0x10000 0x400 INFO: AUTHZ.dll #3 .reloc 0x11000 0x800 INFO: Loaded sections for AUTHZ.dll with result: 1. 4 sections found. INFO: Initialized header for module name browser.dll. INFO: Loading PE header for browser.dll. INFO: Loaded PE header for browser.dll. Somewhat parsed: 1 INFO: Loading sections for browser.dll. INFO: browser.dll #0 .text 0x1000 0x11400 INFO: browser.dll #1 .data 0x13000 0x600 INFO: browser.dll #2 .rsrc 0x14000 0x400 INFO: browser.dll #3 .reloc 0x15000 0xe00 INFO: Loaded sections for browser.dll with result: 1. 4 sections found. INFO: Initialized header for module name wscsvc.dll. INFO: Loading PE header for wscsvc.dll. INFO: Loaded PE header for wscsvc.dll. Somewhat parsed: 1 INFO: Loading sections for wscsvc.dll. INFO: wscsvc.dll #0 .text 0x1000 0x12200 INFO: wscsvc.dll #1 .data 0x14000 0x200 INFO: wscsvc.dll #2 .rsrc 0x15000 0x400 INFO: wscsvc.dll #3 .reloc 0x16000 0x1000 INFO: Loaded sections for api-ms-win-core-util-l1-1-0.dll with result: 1. 2 sections found. INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for wscsvc.dll with result: 1. 4 sections found. INFO: Initialized header for module name wbemcomn.dll. INFO: Loading PE header for wbemcomn.dll. INFO: Loaded PE header for wbemcomn.dll. Somewhat parsed: 1 INFO: Loading sections for wbemcomn.dll. INFO: wbemcomn.dll #0 .text 0x1000 0x30000 INFO: wbemcomn.dll #1 .data 0x31000 0x2600 INFO: wbemcomn.dll #2 .rsrc 0x34000 0x400 INFO: wbemcomn.dll #3 .reloc 0x35000 0x1800 INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name adsldp.dll. INFO: Loading PE header for adsldp.dll. INFO: Loaded PE header for adsldp.dll. Somewhat parsed: 1 INFO: Loading sections for adsldp.dll. INFO: adsldp.dll #0 .text 0x1000 0x24e00 INFO: adsldp.dll #1 .data 0x26000 0x3e00 INFO: adsldp.dll #2 .rsrc 0x2a000 0x600 INFO: adsldp.dll #3 .reloc 0x2b000 0x1800 INFO: Loaded sections for wbemcomn.dll with result: 1. 4 sections found. INFO: Loaded sections for adsldp.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded PE header for office.odf. Somewhat parsed: 1 INFO: Loading sections for office.odf. INFO: office.odf #0 .text 0x1000 0x200 INFO: office.odf #1 .rsrc 0x2000 0x417600 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name wbemcore.dll. INFO: Loading PE header for wbemcore.dll. INFO: Loaded PE header for wbemcore.dll. Somewhat parsed: 1 INFO: Loading sections for wbemcore.dll. INFO: wbemcore.dll #0 .text 0x1000 0x70c00 INFO: wbemcore.dll #1 .data 0x72000 0x1000 INFO: wbemcore.dll #2 .rsrc 0x74000 0x800 INFO: wbemcore.dll #3 .reloc 0x75000 0xf400 INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. ...adding new processes since we started this job INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Loaded sections for wbemcore.dll with result: 1. 4 sections found. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name ICAAPI.dll. INFO: Loading PE header for ICAAPI.dll. INFO: Loaded PE header for ICAAPI.dll. Somewhat parsed: 1 INFO: Loading sections for ICAAPI.dll. INFO: ICAAPI.dll #0 .text 0x1000 0x1e00 INFO: ICAAPI.dll #1 .data 0x3000 0x200 INFO: ICAAPI.dll #2 .rsrc 0x4000 0x600 INFO: ICAAPI.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for ICAAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCP140.dll. INFO: Loading PE header for MSVCP140.dll. INFO: Loaded PE header for MSVCP140.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP140.dll. INFO: MSVCP140.dll #0 .text 0x1000 0x60200 INFO: MSVCP140.dll #1 .data 0x62000 0x1800 INFO: MSVCP140.dll #2 .idata 0x65000 0x1600 INFO: MSVCP140.dll #3 .didat 0x67000 0x200 INFO: MSVCP140.dll #4 .rsrc 0x68000 0x400 INFO: MSVCP140.dll #5 .reloc 0x69000 0x3c00 INFO: Loaded sections for MSVCP140.dll with result: 1. 6 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Initialized header for module name VCRUNTIME140.dll. INFO: Loading PE header for VCRUNTIME140.dll. INFO: Loaded PE header for VCRUNTIME140.dll. Somewhat parsed: 1 INFO: Loading sections for VCRUNTIME140.dll. INFO: VCRUNTIME140.dll #0 .text 0x1000 0xf000 INFO: VCRUNTIME140.dll #1 .data 0x10000 0x200 INFO: VCRUNTIME140.dll #2 .idata 0x11000 0x600 INFO: VCRUNTIME140.dll #3 _RDATA 0x12000 0x200 INFO: VCRUNTIME140.dll #4 .rsrc 0x13000 0x400 INFO: VCRUNTIME140.dll #5 .reloc 0x14000 0xc00 INFO: Loaded sections for VCRUNTIME140.dll with result: 1. 6 sections found. INFO: Initialized header for module name api-ms-win-crt-runtime-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-runtime-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-runtime-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-runtime-l1-1-0.dll. INFO: api-ms-win-crt-runtime-l1-1-0.dll #0 .text 0x1000 0x1600 INFO: api-ms-win-crt-runtime-l1-1-0.dll #1 .rsrc 0x3000 0x400 INFO: Loaded sections for api-ms-win-crt-runtime-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name ucrtbase.dll. INFO: Loading PE header for ucrtbase.dll. INFO: Loaded PE header for ucrtbase.dll. Somewhat parsed: 1 INFO: Loading sections for ucrtbase.dll. INFO: ucrtbase.dll #0 .text 0x1000 0xcba00 INFO: ucrtbase.dll #1 .data 0xcd000 0xc00 INFO: ucrtbase.dll #2 .idata 0xcf000 0x1600 INFO: ucrtbase.dll #3 .rsrc 0xd1000 0x400 INFO: ucrtbase.dll #4 .reloc 0xd2000 0x5800 INFO: Loaded sections for ucrtbase.dll with result: 1. 5 sections found. INFO: Initialized header for module name api-ms-win-core-string-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-string-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-string-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-string-l1-1-0.dll. INFO: api-ms-win-core-string-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-string-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-string-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-errorhandling-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-errorhandling-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-errorhandling-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-errorhandling-l1-1-0.dll. INFO: api-ms-win-core-errorhandling-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-errorhandling-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-errorhandling-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-timezone-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-timezone-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-timezone-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-timezone-l1-1-0.dll. INFO: api-ms-win-core-timezone-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-timezone-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-timezone-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-file-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-file-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-file-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-file-l1-1-0.dll. INFO: api-ms-win-core-file-l1-1-0.dll #0 .text 0x1000 0x1200 INFO: api-ms-win-core-file-l1-1-0.dll #1 .rsrc 0x3000 0x400 INFO: Loaded sections for api-ms-win-core-file-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-namedpipe-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-namedpipe-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-namedpipe-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-namedpipe-l1-1-0.dll. INFO: api-ms-win-core-namedpipe-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-namedpipe-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-namedpipe-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-handle-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-handle-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-handle-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-handle-l1-1-0.dll. INFO: api-ms-win-core-handle-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-handle-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-handle-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-file-l2-1-0.dll. INFO: Loading PE header for api-ms-win-core-file-l2-1-0.dll. INFO: Loaded PE header for api-ms-win-core-file-l2-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-file-l2-1-0.dll. INFO: api-ms-win-core-file-l2-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-file-l2-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-file-l2-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-heap-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-heap-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-heap-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-heap-l1-1-0.dll. INFO: api-ms-win-core-heap-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-heap-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-heap-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-libraryloader-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-libraryloader-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-libraryloader-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-libraryloader-l1-1-0.dll. INFO: api-ms-win-core-libraryloader-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-libraryloader-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-libraryloader-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-synch-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-synch-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-synch-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-synch-l1-1-0.dll. INFO: api-ms-win-core-synch-l1-1-0.dll #0 .text 0x1000 0xc00 INFO: api-ms-win-core-synch-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-synch-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-processthreads-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-processthreads-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-processthreads-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-processthreads-l1-1-0.dll. INFO: api-ms-win-core-processthreads-l1-1-0.dll #0 .text 0x1000 0xc00 INFO: api-ms-win-core-processthreads-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-processthreads-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-processenvironment-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-processenvironment-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-processenvironment-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-processenvironment-l1-1-0.dll. INFO: api-ms-win-core-processenvironment-l1-1-0.dll #0 .text 0x1000 0x800 INFO: api-ms-win-core-processenvironment-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-processenvironment-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-localization-l1-2-0.dll. INFO: Loading PE header for api-ms-win-core-localization-l1-2-0.dll. INFO: Loaded PE header for api-ms-win-core-localization-l1-2-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-localization-l1-2-0.dll. INFO: api-ms-win-core-localization-l1-2-0.dll #0 .text 0x1000 0xe00 INFO: api-ms-win-core-localization-l1-2-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-localization-l1-2-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-sysinfo-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-sysinfo-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-sysinfo-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-sysinfo-l1-1-0.dll. INFO: api-ms-win-core-sysinfo-l1-1-0.dll #0 .text 0x1000 0x800 INFO: api-ms-win-core-sysinfo-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-sysinfo-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-synch-l1-2-0.dll. INFO: Loading PE header for api-ms-win-core-synch-l1-2-0.dll. INFO: Loaded PE header for api-ms-win-core-synch-l1-2-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-synch-l1-2-0.dll. INFO: api-ms-win-core-synch-l1-2-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-synch-l1-2-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-synch-l1-2-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-console-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-console-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-console-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-console-l1-1-0.dll. INFO: api-ms-win-core-console-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-console-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-console-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-debug-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-debug-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-debug-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-debug-l1-1-0.dll. INFO: api-ms-win-core-debug-l1-1-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-debug-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-debug-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-processthreads-l1-1-1.dll. INFO: Loading PE header for api-ms-win-core-processthreads-l1-1-1.dll. INFO: Loaded PE header for api-ms-win-core-processthreads-l1-1-1.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-processthreads-l1-1-1.dll. INFO: api-ms-win-core-processthreads-l1-1-1.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-processthreads-l1-1-1.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-processthreads-l1-1-1.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-file-l1-2-0.dll. INFO: Loading PE header for api-ms-win-core-file-l1-2-0.dll. INFO: Loaded PE header for api-ms-win-core-file-l1-2-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-file-l1-2-0.dll. INFO: api-ms-win-core-file-l1-2-0.dll #0 .text 0x1000 0x400 INFO: api-ms-win-core-file-l1-2-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-file-l1-2-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-memory-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-memory-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-memory-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-memory-l1-1-0.dll. INFO: api-ms-win-core-memory-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-memory-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-memory-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-core-interlocked-l1-1-0.dll. INFO: Loading PE header for api-ms-win-core-interlocked-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-core-interlocked-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-core-interlocked-l1-1-0.dll. INFO: api-ms-win-core-interlocked-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-core-interlocked-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-core-interlocked-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-string-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-string-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-string-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-string-l1-1-0.dll. INFO: api-ms-win-crt-string-l1-1-0.dll #0 .text 0x1000 0x1c00 INFO: api-ms-win-crt-string-l1-1-0.dll #1 .rsrc 0x3000 0x400 INFO: Loaded sections for api-ms-win-crt-string-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-heap-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-heap-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-heap-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-heap-l1-1-0.dll. INFO: api-ms-win-crt-heap-l1-1-0.dll #0 .text 0x1000 0x800 INFO: api-ms-win-crt-heap-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-heap-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-stdio-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-stdio-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-stdio-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-stdio-l1-1-0.dll. INFO: api-ms-win-crt-stdio-l1-1-0.dll #0 .text 0x1000 0x1c00 INFO: api-ms-win-crt-stdio-l1-1-0.dll #1 .rsrc 0x3000 0x400 INFO: Loaded sections for api-ms-win-crt-stdio-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-locale-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-locale-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-locale-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-locale-l1-1-0.dll. INFO: api-ms-win-crt-locale-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-crt-locale-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-locale-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-math-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-math-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-math-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-math-l1-1-0.dll. INFO: api-ms-win-crt-math-l1-1-0.dll #0 .text 0x1000 0x2e00 INFO: api-ms-win-crt-math-l1-1-0.dll #1 .rsrc 0x4000 0x400 INFO: Loaded sections for api-ms-win-crt-math-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-multibyte-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-multibyte-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-multibyte-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-multibyte-l1-1-0.dll. INFO: api-ms-win-crt-multibyte-l1-1-0.dll #0 .text 0x1000 0x2400 INFO: api-ms-win-crt-multibyte-l1-1-0.dll #1 .rsrc 0x4000 0x400 INFO: Loaded sections for api-ms-win-crt-multibyte-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-time-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-time-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-time-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-time-l1-1-0.dll. INFO: api-ms-win-crt-time-l1-1-0.dll #0 .text 0x1000 0xe00 INFO: api-ms-win-crt-time-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-time-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-filesystem-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-filesystem-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-filesystem-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-filesystem-l1-1-0.dll. INFO: api-ms-win-crt-filesystem-l1-1-0.dll #0 .text 0x1000 0xc00 INFO: api-ms-win-crt-filesystem-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-filesystem-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-environment-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-environment-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-environment-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-environment-l1-1-0.dll. INFO: api-ms-win-crt-environment-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-crt-environment-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-environment-l1-1-0.dll with result: 1. 2 sections found. INFO: Initialized header for module name api-ms-win-crt-utility-l1-1-0.dll. INFO: Loading PE header for api-ms-win-crt-utility-l1-1-0.dll. INFO: Loaded PE header for api-ms-win-crt-utility-l1-1-0.dll. Somewhat parsed: 1 INFO: Loading sections for api-ms-win-crt-utility-l1-1-0.dll. INFO: api-ms-win-crt-utility-l1-1-0.dll #0 .text 0x1000 0x600 INFO: api-ms-win-crt-utility-l1-1-0.dll #1 .rsrc 0x2000 0x400 INFO: Loaded sections for api-ms-win-crt-utility-l1-1-0.dll with result: 1. 2 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name gdiplus.dll. INFO: Loading PE header for gdiplus.dll. INFO: Loaded PE header for gdiplus.dll. Somewhat parsed: 1 INFO: Loading sections for gdiplus.dll. INFO: gdiplus.dll #0 .text 0x1000 0x17f000 INFO: gdiplus.dll #1 .data 0x180000 0xa000 INFO: gdiplus.dll #2 Shared 0x18b000 0x1000 INFO: gdiplus.dll #3 .rsrc 0x18c000 0x12000 INFO: gdiplus.dll #4 .reloc 0x19e000 0x8000 INFO: Loaded sections for gdiplus.dll with result: 1. 5 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name devenum.dll. INFO: Loading PE header for devenum.dll. INFO: Loaded PE header for devenum.dll. Somewhat parsed: 1 INFO: Loading sections for devenum.dll. INFO: devenum.dll #0 .text 0x1000 0xba00 INFO: devenum.dll #1 .data 0xd000 0x600 INFO: devenum.dll #2 .rsrc 0xe000 0x1600 INFO: devenum.dll #3 .reloc 0x10000 0x1000 INFO: Loaded sections for devenum.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: Initialized header for module name CRYPT32.dll. INFO: Initialized header for module name winrnr.dll. INFO: Initialized header for module name SHLWAPI.dll. INFO: Initialized header for module name esscli.dll. INFO: Initialized header for module name COMRes.dll. INFO: Initialized header for module name wshtcpip.dll. INFO: Initialized header for module name NETAPI32.dll. INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Loaded sections for office.odf with result: 1. 2 sections found. INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: Loading PE header for CRYPT32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Initialized header for module name Secur32.dll. INFO: Initialized header for module name MSVCP90.dll. INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading PE header for Secur32.dll. INFO: Loading PE header for MSVCP90.dll. INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntshrui.dll. INFO: Loading PE header for ntshrui.dll. INFO: Loaded PE header for ntshrui.dll. Somewhat parsed: 1 INFO: Loading sections for ntshrui.dll. INFO: ntshrui.dll #0 .text 0x1000 0xb000 INFO: ntshrui.dll #1 .data 0xc000 0x400 INFO: ntshrui.dll #2 .rsrc 0xd000 0x16e00 INFO: ntshrui.dll #3 .reloc 0x24000 0xa00 INFO: Loaded sections for ntshrui.dll with result: 1. 4 sections found. INFO: Initialized header for module name cscui.dll. INFO: Loading PE header for cscui.dll. INFO: Loaded PE header for cscui.dll. Somewhat parsed: 1 INFO: Loading sections for cscui.dll. INFO: cscui.dll #0 .text 0x1000 0x22800 INFO: cscui.dll #1 .data 0x24000 0x600 INFO: cscui.dll #2 .rsrc 0x26000 0x2b200 INFO: cscui.dll #3 .reloc 0x52000 0x1800 INFO: Loaded sections for cscui.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntlanman.dll. INFO: Loading PE header for ntlanman.dll. INFO: Loaded PE header for ntlanman.dll. Somewhat parsed: 1 INFO: Loading sections for ntlanman.dll. INFO: ntlanman.dll #0 .text 0x1000 0x9a00 INFO: ntlanman.dll #1 .data 0xb000 0x200 INFO: ntlanman.dll #2 .rsrc 0xc000 0x600 INFO: ntlanman.dll #3 .reloc 0xd000 0x600 INFO: Loaded sections for ntlanman.dll with result: 1. 4 sections found. INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name AcGenral.DLL. INFO: Loading PE header for AcGenral.DLL. INFO: Loaded PE header for AcGenral.DLL. Somewhat parsed: 1 INFO: Loading sections for AcGenral.DLL. INFO: AcGenral.DLL #0 .text 0x1000 0x32000 INFO: AcGenral.DLL #1 .data 0x33000 0x5c00 INFO: AcGenral.DLL #2 .rsrc 0x3c000 0x187200 INFO: AcGenral.DLL #3 .reloc 0x1c4000 0x5400 INFO: Loaded sections for AcGenral.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Initialized header for module name office.odf. INFO: Loading PE header for office.odf. INFO: Loaded PE header for office.odf. Somewhat parsed: 1 INFO: Loading sections for office.odf. INFO: office.odf #0 .text 0x1000 0x200 INFO: office.odf #1 .rsrc 0x2000 0x417600 INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loading PE header for esscli.dll. INFO: Loading PE header for COMRes.dll. INFO: Loading PE header for winrnr.dll. INFO: Loaded PE header for winrnr.dll. Somewhat parsed: 1 INFO: Loading sections for winrnr.dll. INFO: winrnr.dll #0 .text 0x1000 0x3200 INFO: winrnr.dll #1 .data 0x5000 0x400 INFO: winrnr.dll #2 .rsrc 0x6000 0x400 INFO: winrnr.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for winrnr.dll with result: 1. 4 sections found. INFO: Initialized header for module name hnetcfg.dll. INFO: Loading PE header for hnetcfg.dll. INFO: Loaded PE header for hnetcfg.dll. Somewhat parsed: 1 INFO: Loading sections for hnetcfg.dll. INFO: hnetcfg.dll #0 .text 0x1000 0x3e200 INFO: hnetcfg.dll #1 .orpc 0x40000 0x200 INFO: hnetcfg.dll #2 .data 0x41000 0xa00 INFO: hnetcfg.dll #3 .rsrc 0x42000 0x10600 INFO: hnetcfg.dll #4 .reloc 0x53000 0x4800 INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded PE header for esscli.dll. Somewhat parsed: 1 INFO: Loading sections for esscli.dll. INFO: esscli.dll #0 .text 0x1000 0x38000 INFO: esscli.dll #1 .data 0x39000 0x400 INFO: esscli.dll #2 .rsrc 0x3a000 0x400 INFO: esscli.dll #3 .reloc 0x3b000 0x3c00 INFO: Loaded PE header for MSVCP90.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP90.dll. INFO: MSVCP90.dll #0 .text 0x1000 0x83400 INFO: MSVCP90.dll #1 .data 0x85000 0x1a00 INFO: MSVCP90.dll #2 .rsrc 0x88000 0x400 INFO: MSVCP90.dll #3 .reloc 0x89000 0x4400 INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name wbemprox.dll. INFO: Loading PE header for wbemprox.dll. INFO: Loaded PE header for wbemprox.dll. Somewhat parsed: 1 INFO: Loading sections for wbemprox.dll. INFO: wbemprox.dll #0 .text 0x1000 0x3c00 INFO: wbemprox.dll #1 .data 0x5000 0x200 INFO: wbemprox.dll #2 .rsrc 0x6000 0x400 INFO: wbemprox.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for wbemprox.dll with result: 1. 4 sections found. INFO: Initialized header for module name wbemcomn.dll. INFO: Loading PE header for wbemcomn.dll. INFO: Loaded PE header for wbemcomn.dll. Somewhat parsed: 1 INFO: Loading sections for wbemcomn.dll. INFO: wbemcomn.dll #0 .text 0x1000 0x30000 INFO: wbemcomn.dll #1 .data 0x31000 0x2600 INFO: wbemcomn.dll #2 .rsrc 0x34000 0x400 INFO: wbemcomn.dll #3 .reloc 0x35000 0x1800 INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for hnetcfg.dll with result: 1. 5 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for wbemcomn.dll with result: 1. 4 sections found. INFO: Loaded sections for esscli.dll with result: 1. 4 sections found. INFO: Initialized header for module name FastProx.dll. INFO: Loading PE header for FastProx.dll. INFO: Loaded PE header for FastProx.dll. Somewhat parsed: 1 INFO: Loading sections for FastProx.dll. INFO: FastProx.dll #0 .text 0x1000 0x6c600 INFO: FastProx.dll #1 .data 0x6e000 0x600 INFO: FastProx.dll #2 .rsrc 0x6f000 0x400 INFO: FastProx.dll #3 .reloc 0x70000 0x6000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Loaded sections for FastProx.dll with result: 1. 4 sections found. INFO: Initialized header for module name ODBC32.dll. INFO: Loading PE header for ODBC32.dll. INFO: Loaded PE header for ODBC32.dll. Somewhat parsed: 1 INFO: Loading sections for ODBC32.dll. INFO: ODBC32.dll #0 .text 0x1000 0x37000 INFO: ODBC32.dll #1 .data 0x38000 0x1000 INFO: ODBC32.dll #2 .sdbid 0x39000 0x1000 INFO: ODBC32.dll #3 .rsrc 0x3a000 0x1000 INFO: ODBC32.dll #4 .reloc 0x3b000 0x2000 INFO: Loaded sections for ODBC32.dll with result: 1. 5 sections found. INFO: Initialized header for module name odbcbcp.dll. INFO: Loading PE header for odbcbcp.dll. INFO: Loaded PE header for odbcbcp.dll. Somewhat parsed: 1 INFO: Loading sections for odbcbcp.dll. INFO: odbcbcp.dll #0 .text 0x1000 0x2000 INFO: odbcbcp.dll #1 .data 0x3000 0x1000 INFO: odbcbcp.dll #2 .rsrc 0x4000 0x1000 INFO: odbcbcp.dll #3 .reloc 0x5000 0x1000 INFO: Loaded sections for odbcbcp.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name odbcint.dll. INFO: Loading PE header for odbcint.dll. INFO: Loaded PE header for odbcint.dll. Somewhat parsed: 1 INFO: Loading sections for odbcint.dll. INFO: odbcint.dll #0 .rsrc 0x1000 0x15000 INFO: odbcint.dll #1 .reloc 0x16000 0x1000 INFO: Loaded sections for odbcint.dll with result: 1. 2 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name perfdisk.dll. INFO: Loading PE header for perfdisk.dll. INFO: Loaded PE header for perfdisk.dll. Somewhat parsed: 1 INFO: Loading sections for perfdisk.dll. INFO: perfdisk.dll #0 .text 0x1000 0x4800 INFO: perfdisk.dll #1 .data 0x6000 0xc00 INFO: perfdisk.dll #2 .rsrc 0x7000 0xc00 INFO: perfdisk.dll #3 .reloc 0x8000 0x400 INFO: Loaded sections for perfdisk.dll with result: 1. 4 sections found. INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name fastprox.dll. INFO: Loading PE header for fastprox.dll. INFO: Loaded PE header for fastprox.dll. Somewhat parsed: 1 INFO: Loading sections for fastprox.dll. INFO: fastprox.dll #0 .text 0x1000 0x6c600 INFO: fastprox.dll #1 .data 0x6e000 0x600 INFO: fastprox.dll #2 .rsrc 0x6f000 0x400 INFO: fastprox.dll #3 .reloc 0x70000 0x6000 INFO: Loaded sections for fastprox.dll with result: 1. 4 sections found. INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name NTDSAPI.dll. INFO: Loading PE header for NTDSAPI.dll. INFO: Loaded PE header for NTDSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for NTDSAPI.dll. INFO: NTDSAPI.dll #0 .text 0x1000 0xf000 INFO: NTDSAPI.dll #1 .data 0x10000 0x600 INFO: NTDSAPI.dll #2 .rsrc 0x11000 0x400 INFO: NTDSAPI.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for NTDSAPI.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Initialized header for module name IMAGEHLP.dll. INFO: Loading PE header for IMAGEHLP.dll. INFO: Loaded PE header for IMAGEHLP.dll. Somewhat parsed: 1 INFO: Loading sections for IMAGEHLP.dll. INFO: IMAGEHLP.dll #0 .text 0x1000 0x21200 INFO: IMAGEHLP.dll #1 .data 0x23000 0x800 INFO: IMAGEHLP.dll #2 .rsrc 0x25000 0x400 INFO: IMAGEHLP.dll #3 .reloc 0x26000 0x1200 INFO: Loaded sections for IMAGEHLP.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSIMG32.dll. INFO: Loading PE header for MSIMG32.dll. INFO: Loaded PE header for MSIMG32.dll. Somewhat parsed: 1 INFO: Loading sections for MSIMG32.dll. INFO: MSIMG32.dll #0 .text 0x1000 0x600 INFO: MSIMG32.dll #1 .data 0x2000 0x200 INFO: MSIMG32.dll #2 .rsrc 0x3000 0x400 INFO: MSIMG32.dll #3 .reloc 0x4000 0x200 INFO: Loaded sections for MSIMG32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name urlmon.dll. INFO: Loading PE header for urlmon.dll. INFO: Loaded PE header for urlmon.dll. Somewhat parsed: 1 INFO: Loading sections for urlmon.dll. INFO: urlmon.dll #0 .text 0x1000 0x70a00 INFO: urlmon.dll #1 .orpc 0x72000 0x1000 INFO: urlmon.dll #2 .data 0x73000 0x6000 INFO: urlmon.dll #3 .rsrc 0x82000 0x1a800 INFO: urlmon.dll #4 .reloc 0x9d000 0x4e00 INFO: Loaded sections for urlmon.dll with result: 1. 5 sections found. INFO: Initialized header for module name msidcrl40.dll. INFO: Loading PE header for msidcrl40.dll. INFO: Loaded PE header for msidcrl40.dll. Somewhat parsed: 1 INFO: Loading sections for msidcrl40.dll. INFO: msidcrl40.dll #0 .text 0x1000 0xb7e00 INFO: msidcrl40.dll #1 .data 0xb9000 0x2a00 INFO: msidcrl40.dll #2 .rsrc 0xbe000 0x600 INFO: msidcrl40.dll #3 .reloc 0xbf000 0x9000 INFO: Loaded sections for msidcrl40.dll with result: 1. 4 sections found. INFO: Loaded sections for MSVCP90.dll with result: 1. 4 sections found. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Initialized header for module name COMCTL32.dll. INFO: Loading PE header for COMCTL32.dll. INFO: Initialized header for module name PSAPI.DLL. INFO: Loading PE header for PSAPI.DLL. INFO: Loaded PE header for PSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for PSAPI.DLL. INFO: PSAPI.DLL #0 .text 0x1000 0x4000 INFO: PSAPI.DLL #1 .data 0x5000 0xe00 INFO: PSAPI.DLL #2 .rsrc 0x9000 0x400 INFO: PSAPI.DLL #3 .reloc 0xa000 0x400 INFO: Loaded sections for PSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name WININET.dll. INFO: Loading PE header for WININET.dll. INFO: Loaded PE header for WININET.dll. Somewhat parsed: 1 INFO: Loading sections for WININET.dll. INFO: WININET.dll #0 .text 0x1000 0x89600 INFO: WININET.dll #1 .data 0x8b000 0x2400 INFO: WININET.dll #2 .rsrc 0x92000 0x11a00 INFO: WININET.dll #3 .reloc 0xa4000 0x5200 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Loaded sections for WININET.dll with result: 1. 4 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded PE header for COMCTL32.dll. Somewhat parsed: 1 INFO: Loading sections for COMCTL32.dll. INFO: COMCTL32.dll #0 .text 0x1000 0x90c00 INFO: COMCTL32.dll #1 .data 0x92000 0x600 INFO: COMCTL32.dll #2 .rsrc 0x93000 0x6a000 INFO: COMCTL32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name winrnr.dll. INFO: Loading PE header for winrnr.dll. INFO: Loaded PE header for winrnr.dll. Somewhat parsed: 1 INFO: Loading sections for winrnr.dll. INFO: winrnr.dll #0 .text 0x1000 0x3200 INFO: winrnr.dll #1 .data 0x5000 0x400 INFO: winrnr.dll #2 .rsrc 0x6000 0x400 INFO: winrnr.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for winrnr.dll with result: 1. 4 sections found. INFO: Initialized header for module name repdrvfs.dll. INFO: Loading PE header for repdrvfs.dll. INFO: Loaded PE header for repdrvfs.dll. Somewhat parsed: 1 INFO: Loading sections for repdrvfs.dll. INFO: repdrvfs.dll #0 .text 0x1000 0x28200 INFO: repdrvfs.dll #1 .data 0x2a000 0x600 INFO: repdrvfs.dll #2 .rsrc 0x2b000 0x400 INFO: repdrvfs.dll #3 .reloc 0x2c000 0x2800 INFO: Loaded sections for repdrvfs.dll with result: 1. 4 sections found. INFO: Initialized header for module name sfc.dll. INFO: Loading PE header for sfc.dll. INFO: Loaded PE header for sfc.dll. Somewhat parsed: 1 INFO: Loading sections for sfc.dll. INFO: sfc.dll #0 .text 0x1000 0x800 INFO: sfc.dll #1 .data 0x2000 0x200 INFO: sfc.dll #2 .rsrc 0x3000 0x400 INFO: sfc.dll #3 .reloc 0x4000 0x200 INFO: Loaded sections for sfc.dll with result: 1. 4 sections found. INFO: Initialized header for module name sfc_os.dll. INFO: Loading PE header for sfc_os.dll. INFO: Loaded PE header for sfc_os.dll. Somewhat parsed: 1 INFO: Loading sections for sfc_os.dll. INFO: sfc_os.dll #0 .text 0x1000 0x18000 INFO: sfc_os.dll #1 .data 0x19000 0x200 INFO: sfc_os.dll #2 .rsrc 0x1f000 0x8600 INFO: sfc_os.dll #3 .reloc 0x28000 0x1800 INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded sections for sfc_os.dll with result: 1. 4 sections found. INFO: Initialized header for module name SXS.DLL. INFO: Loading PE header for SXS.DLL. INFO: Loaded PE header for SXS.DLL. Somewhat parsed: 1 INFO: Loading sections for SXS.DLL. INFO: SXS.DLL #0 .text 0x1000 0x98e00 INFO: SXS.DLL #1 .data 0x9a000 0x2800 INFO: SXS.DLL #2 .rsrc 0x9d000 0x9800 INFO: SXS.DLL #3 .reloc 0xa7000 0x9000 INFO: Initialized header for module name COMCTL32.dll. INFO: Loading PE header for COMCTL32.dll. INFO: Loaded PE header for COMCTL32.dll. Somewhat parsed: 1 INFO: Loading sections for COMCTL32.dll. INFO: COMCTL32.dll #0 .text 0x1000 0x90c00 INFO: COMCTL32.dll #1 .data 0x92000 0x600 INFO: COMCTL32.dll #2 .rsrc 0x93000 0x6a000 INFO: COMCTL32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for SXS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name rasadhlp.dll. INFO: Loading PE header for rasadhlp.dll. INFO: Loaded PE header for rasadhlp.dll. Somewhat parsed: 1 INFO: Loading sections for rasadhlp.dll. INFO: rasadhlp.dll #0 .text 0x1000 0x1200 INFO: rasadhlp.dll #1 .data 0x3000 0x200 INFO: rasadhlp.dll #2 .rsrc 0x4000 0x400 INFO: rasadhlp.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for rasadhlp.dll with result: 1. 4 sections found. INFO: Initialized header for module name vmictimeprovider.dll. INFO: Loading PE header for vmictimeprovider.dll. INFO: Loaded PE header for vmictimeprovider.dll. Somewhat parsed: 1 INFO: Loading sections for vmictimeprovider.dll. INFO: vmictimeprovider.dll #0 .text 0x1000 0xa600 INFO: vmictimeprovider.dll #1 .data 0xc000 0x400 INFO: vmictimeprovider.dll #2 .idata 0x11000 0xc00 INFO: vmictimeprovider.dll #3 .rsrc 0x12000 0x600 INFO: vmictimeprovider.dll #4 .reloc 0x13000 0xa00 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name rpcss.dll. INFO: Loading PE header for rpcss.dll. INFO: Loaded PE header for rpcss.dll. Somewhat parsed: 1 INFO: Loading sections for rpcss.dll. INFO: rpcss.dll #0 .text 0x1000 0x3d600 INFO: rpcss.dll #1 .data 0x3f000 0x20e00 INFO: rpcss.dll #2 .rsrc 0x60000 0x400 INFO: rpcss.dll #3 .reloc 0x61000 0x2c00 INFO: Loaded sections for rpcss.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded sections for vmictimeprovider.dll with result: 1. 5 sections found. INFO: Initialized header for module name comsvcs.dll. INFO: Loading PE header for comsvcs.dll. INFO: Loaded PE header for comsvcs.dll. Somewhat parsed: 1 INFO: Loading sections for comsvcs.dll. INFO: comsvcs.dll #0 .text 0x1000 0xe9c00 INFO: comsvcs.dll #1 .orpc 0xeb000 0xe00 INFO: comsvcs.dll #2 .data 0xec000 0x10000 INFO: comsvcs.dll #3 .rsrc 0x101000 0x2c000 INFO: comsvcs.dll #4 .reloc 0x12d000 0xe800 INFO: Loaded sections for office.odf with result: 1. 2 sections found. INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Initialized header for module name MSVCP90.dll. INFO: Loading PE header for MSVCP90.dll. INFO: Loaded PE header for MSVCP90.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCP90.dll. INFO: MSVCP90.dll #0 .text 0x1000 0x83400 INFO: MSVCP90.dll #1 .data 0x85000 0x1a00 INFO: MSVCP90.dll #2 .rsrc 0x88000 0x400 INFO: MSVCP90.dll #3 .reloc 0x89000 0x4400 INFO: Loaded sections for COMCTL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name ADVAPI32.dll. INFO: Loading PE header for ADVAPI32.dll. INFO: Loaded PE header for ADVAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for ADVAPI32.dll. INFO: ADVAPI32.dll #0 .text 0x1000 0x74600 INFO: ADVAPI32.dll #1 .data 0x76000 0x2c00 INFO: ADVAPI32.dll #2 .rsrc 0x7b000 0x1aa00 INFO: ADVAPI32.dll #3 .reloc 0x96000 0x4c00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for COMCTL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINHTTP.dll. INFO: Loading PE header for WINHTTP.dll. INFO: Loaded PE header for WINHTTP.dll. Somewhat parsed: 1 INFO: Loading sections for WINHTTP.dll. INFO: WINHTTP.dll #0 .text 0x1000 0x4dc00 INFO: WINHTTP.dll #1 .data 0x4f000 0x800 INFO: WINHTTP.dll #2 .rsrc 0x50000 0x4a00 INFO: WINHTTP.dll #3 .reloc 0x55000 0x3600 INFO: Loaded sections for ADVAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for comsvcs.dll with result: 1. 5 sections found. INFO: Initialized header for module name colbact.DLL. INFO: Loading PE header for colbact.DLL. INFO: Loaded PE header for colbact.DLL. Somewhat parsed: 1 INFO: Loading sections for colbact.DLL. INFO: colbact.DLL #0 .text 0x1000 0xd400 INFO: colbact.DLL #1 .data 0xf000 0x200 INFO: colbact.DLL #2 .rsrc 0x12000 0x600 INFO: colbact.DLL #3 .reloc 0x13000 0xc00 INFO: Loaded sections for colbact.DLL with result: 1. 4 sections found. INFO: Initialized header for module name MTXCLU.DLL. INFO: Loading PE header for MTXCLU.DLL. INFO: Loaded PE header for MTXCLU.DLL. Somewhat parsed: 1 INFO: Loading sections for MTXCLU.DLL. INFO: MTXCLU.DLL #0 .text 0x1000 0xea00 INFO: MTXCLU.DLL #1 .data 0x10000 0x400 INFO: MTXCLU.DLL #2 .rsrc 0x11000 0x600 INFO: MTXCLU.DLL #3 .reloc 0x12000 0xc00 INFO: Loaded sections for MTXCLU.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WSOCK32.dll. INFO: Loading PE header for WSOCK32.dll. INFO: Loaded PE header for WSOCK32.dll. Somewhat parsed: 1 INFO: Loading sections for WSOCK32.dll. INFO: WSOCK32.dll #0 .text 0x1000 0x2400 INFO: WSOCK32.dll #1 .data 0x4000 0x200 INFO: WSOCK32.dll #2 .rsrc 0x5000 0x2c00 INFO: WSOCK32.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for WSOCK32.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLUSAPI.DLL. INFO: Loading PE header for CLUSAPI.DLL. INFO: Loaded PE header for CLUSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for CLUSAPI.DLL. INFO: CLUSAPI.DLL #0 .text 0x1000 0xd200 INFO: CLUSAPI.DLL #1 .data 0xf000 0x200 INFO: CLUSAPI.DLL #2 .rsrc 0x10000 0x400 INFO: CLUSAPI.DLL #3 .reloc 0x11000 0x800 INFO: Loaded sections for CLUSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name RESUTILS.DLL. INFO: Loading PE header for RESUTILS.DLL. INFO: Loaded PE header for RESUTILS.DLL. Somewhat parsed: 1 INFO: Loading sections for RESUTILS.DLL. INFO: RESUTILS.DLL #0 .text 0x1000 0xd400 INFO: RESUTILS.DLL #1 .data 0xf000 0x200 INFO: RESUTILS.DLL #2 .rsrc 0x10000 0x400 INFO: RESUTILS.DLL #3 .reloc 0x11000 0x800 INFO: Loaded sections for RESUTILS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name wmiprvsd.dll. INFO: Loading PE header for wmiprvsd.dll. INFO: Loaded PE header for wmiprvsd.dll. Somewhat parsed: 1 INFO: Loading sections for wmiprvsd.dll. INFO: wmiprvsd.dll #0 .text 0x1000 0x61000 INFO: wmiprvsd.dll #1 .data 0x62000 0x2400 INFO: wmiprvsd.dll #2 .rsrc 0x65000 0x400 INFO: wmiprvsd.dll #3 .reloc 0x66000 0x7000 INFO: Initialized header for module name test.exe. INFO: Loading PE header for test.exe. INFO: Loaded PE header for test.exe. Somewhat parsed: 1 INFO: Loading sections for test.exe. INFO: test.exe #0 .text 0x1000 0x8e00 INFO: test.exe #1 .data 0xa000 0x800 INFO: test.exe #2 .rsrc 0xb000 0x6800 INFO: test.exe #3 .reloc 0x12000 0x1600 INFO: Loaded sections for test.exe with result: 1. 4 sections found. INFO: Initialized header for module name msvcrt.dll. INFO: Loading PE header for msvcrt.dll. INFO: Loaded PE header for msvcrt.dll. Somewhat parsed: 1 INFO: Loading sections for msvcrt.dll. INFO: msvcrt.dll #0 .text 0x1000 0x4be00 INFO: msvcrt.dll #1 .data 0x4d000 0x4800 INFO: msvcrt.dll #2 .rsrc 0x54000 0x400 INFO: msvcrt.dll #3 .reloc 0x55000 0x2e00 INFO: Loaded sections for WINHTTP.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEACC.dll. INFO: Loading PE header for OLEACC.dll. INFO: Loaded PE header for OLEACC.dll. Somewhat parsed: 1 INFO: Loading sections for OLEACC.dll. INFO: OLEACC.dll #0 .text 0x1000 0x1f800 INFO: OLEACC.dll #1 .orpc 0x21000 0x200 INFO: OLEACC.dll #2 .data 0x22000 0xe00 INFO: OLEACC.dll #3 .rsrc 0x24000 0x5400 INFO: OLEACC.dll #4 .reloc 0x2a000 0x1e00 INFO: Loaded sections for MSVCP90.dll with result: 1. 4 sections found. INFO: Loaded sections for wmiprvsd.dll with result: 1. 4 sections found. INFO: Initialized header for module name NCObjAPI.DLL. INFO: Loading PE header for NCObjAPI.DLL. INFO: Loaded PE header for NCObjAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for NCObjAPI.DLL. INFO: NCObjAPI.DLL #0 .text 0x1000 0x7e00 INFO: NCObjAPI.DLL #1 .data 0x9000 0x200 INFO: NCObjAPI.DLL #2 .rsrc 0xa000 0x400 INFO: NCObjAPI.DLL #3 .reloc 0xb000 0x600 INFO: Loaded sections for NCObjAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ncprov.dll. INFO: Loading PE header for ncprov.dll. INFO: Loaded PE header for ncprov.dll. Somewhat parsed: 1 INFO: Loading sections for ncprov.dll. INFO: ncprov.dll #0 .text 0x1000 0x8a00 INFO: ncprov.dll #1 .data 0xa000 0x200 INFO: ncprov.dll #2 .rsrc 0xb000 0x1e00 INFO: ncprov.dll #3 .reloc 0xd000 0xa00 INFO: Loaded sections for ncprov.dll with result: 1. 4 sections found. INFO: Initialized header for module name ipconf.tsp. INFO: Loading PE header for ipconf.tsp. INFO: Loaded PE header for ipconf.tsp. Somewhat parsed: 1 INFO: Loading sections for ipconf.tsp. INFO: ipconf.tsp #0 .text 0x1000 0x3400 INFO: ipconf.tsp #1 .data 0x5000 0x200 INFO: ipconf.tsp #2 .rsrc 0x6000 0x600 INFO: ipconf.tsp #3 .reloc 0x7000 0x400 INFO: Loaded sections for ipconf.tsp with result: 1. 4 sections found. INFO: Loaded sections for OLEACC.dll with result: 1. 5 sections found. INFO: Initialized header for module name upnp.dll. INFO: Loading PE header for upnp.dll. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for upnp.dll. Somewhat parsed: 1 INFO: Loading sections for upnp.dll. INFO: upnp.dll #0 .text 0x1000 0x19400 INFO: upnp.dll #1 .orpc 0x1b000 0x200 INFO: upnp.dll #2 .data 0x1c000 0xc00 INFO: upnp.dll #3 .rsrc 0x1d000 0x4a00 INFO: upnp.dll #4 .reloc 0x22000 0x1a00 INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for upnp.dll with result: 1. 5 sections found. INFO: Initialized header for module name SSDPAPI.dll. INFO: Loading PE header for SSDPAPI.dll. INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Loaded PE header for SSDPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SSDPAPI.dll. INFO: SSDPAPI.dll #0 .text 0x1000 0x7400 INFO: SSDPAPI.dll #1 .data 0x9000 0x200 INFO: SSDPAPI.dll #2 .rsrc 0xa000 0x400 INFO: SSDPAPI.dll #3 .reloc 0xb000 0xa00 INFO: Initialized header for module name IMM32.dll. INFO: Loading PE header for IMM32.dll. INFO: Loaded sections for SSDPAPI.dll with result: 1. 4 sections found. INFO: Loaded PE header for IMM32.dll. Somewhat parsed: 1 INFO: Loading sections for IMM32.dll. INFO: IMM32.dll #0 .text 0x1000 0x14c00 INFO: IMM32.dll #1 .data 0x16000 0x200 INFO: IMM32.dll #2 .rsrc 0x17000 0x4e00 INFO: IMM32.dll #3 .reloc 0x1c000 0xe00 INFO: Initialized header for module name Apphelp.dll. INFO: Loading PE header for Apphelp.dll. INFO: Loaded PE header for Apphelp.dll. Somewhat parsed: 1 INFO: Loading sections for Apphelp.dll. INFO: Apphelp.dll #0 .text 0x1000 0x1c600 INFO: Apphelp.dll #1 .data 0x1e000 0xa00 INFO: Apphelp.dll #2 .rsrc 0x1f000 0x400 INFO: Apphelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for IMM32.dll with result: 1. 4 sections found. INFO: Loaded sections for Apphelp.dll with result: 1. 4 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Initialized header for module name WINMM.dll. INFO: Loading PE header for WINMM.dll. INFO: Loaded PE header for WINMM.dll. Somewhat parsed: 1 INFO: Loading sections for WINMM.dll. INFO: WINMM.dll #0 .text 0x1000 0x1ee00 INFO: WINMM.dll #1 .data 0x20000 0x1400 INFO: WINMM.dll #2 .rsrc 0x22000 0x9000 INFO: WINMM.dll #3 .reloc 0x2b000 0x1a00 INFO: Initialized header for module name netcfgx.dll. INFO: Loading PE header for netcfgx.dll. INFO: Loaded sections for WINMM.dll with result: 1. 4 sections found. INFO: Loaded PE header for netcfgx.dll. Somewhat parsed: 1 INFO: Loading sections for netcfgx.dll. INFO: netcfgx.dll #0 .text 0x1000 0x77e00 INFO: netcfgx.dll #1 .data 0x79000 0x800 INFO: netcfgx.dll #2 .rsrc 0x7a000 0x18c00 INFO: netcfgx.dll #3 .reloc 0x93000 0x6a00 INFO: Initialized header for module name sirenacm.dll. INFO: Loading PE header for sirenacm.dll. INFO: Loaded PE header for sirenacm.dll. Somewhat parsed: 1 INFO: Loading sections for sirenacm.dll. INFO: sirenacm.dll #0 .text 0x1000 0x4e00 INFO: sirenacm.dll #1 .data 0x6000 0x4200 INFO: sirenacm.dll #2 .rsrc 0x11000 0x800 INFO: sirenacm.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for sirenacm.dll with result: 1. 4 sections found. INFO: Initialized header for module name SensApi.dll. INFO: Loading PE header for SensApi.dll. INFO: Loaded PE header for SensApi.dll. Somewhat parsed: 1 INFO: Loading sections for SensApi.dll. INFO: SensApi.dll #0 .text 0x1000 0x1000 INFO: SensApi.dll #1 .data 0x2000 0x200 INFO: SensApi.dll #2 .rsrc 0x3000 0x400 INFO: SensApi.dll #3 .reloc 0x4000 0x200 INFO: Loaded sections for SensApi.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSGSWCAM.dll. INFO: Loading PE header for MSGSWCAM.dll. INFO: Loaded PE header for MSGSWCAM.dll. Somewhat parsed: 1 INFO: Loading sections for MSGSWCAM.dll. INFO: MSGSWCAM.dll #0 .text 0x1000 0x8c600 INFO: MSGSWCAM.dll #1 .data 0x8e000 0x8c00 INFO: MSGSWCAM.dll #2 .rsrc 0x98000 0x600 INFO: MSGSWCAM.dll #3 .reloc 0x99000 0xb800 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded sections for msvcrt.dll with result: 1. 4 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name rpcss.dll. INFO: Loading PE header for rpcss.dll. INFO: Loaded PE header for rpcss.dll. Somewhat parsed: 1 INFO: Loading sections for rpcss.dll. INFO: rpcss.dll #0 .text 0x1000 0x3d600 INFO: rpcss.dll #1 .data 0x3f000 0x20e00 INFO: rpcss.dll #2 .rsrc 0x60000 0x400 INFO: rpcss.dll #3 .reloc 0x61000 0x2c00 INFO: Loaded sections for rpcss.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded sections for netcfgx.dll with result: 1. 4 sections found. INFO: Initialized header for module name wups2.dll. INFO: Loading PE header for wups2.dll. INFO: Loaded PE header for wups2.dll. Somewhat parsed: 1 INFO: Loading sections for wups2.dll. INFO: wups2.dll #0 .text 0x1000 0x6600 INFO: wups2.dll #1 .orpc 0x8000 0x400 INFO: wups2.dll #2 .data 0x9000 0x800 INFO: wups2.dll #3 .rsrc 0xa000 0x600 INFO: wups2.dll #4 .reloc 0xb000 0x800 INFO: Loaded sections for wups2.dll with result: 1. 5 sections found. INFO: Initialized header for module name catsrv.dll. INFO: Loading PE header for catsrv.dll. INFO: Loaded PE header for catsrv.dll. Somewhat parsed: 1 INFO: Loading sections for catsrv.dll. INFO: catsrv.dll #0 .text 0x1000 0x2d400 INFO: catsrv.dll #1 .data 0x2f000 0x400 INFO: catsrv.dll #2 .rsrc 0x33000 0x7800 INFO: catsrv.dll #3 .reloc 0x3b000 0x2000 INFO: Loaded sections for catsrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name urlmon.dll. INFO: Loading PE header for urlmon.dll. INFO: Loaded PE header for urlmon.dll. Somewhat parsed: 1 INFO: Loading sections for urlmon.dll. INFO: urlmon.dll #0 .text 0x1000 0x70a00 INFO: urlmon.dll #1 .orpc 0x72000 0x1000 INFO: urlmon.dll #2 .data 0x73000 0x6000 INFO: urlmon.dll #3 .rsrc 0x82000 0x1a800 INFO: urlmon.dll #4 .reloc 0x9d000 0x4e00 INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for urlmon.dll with result: 1. 5 sections found. INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Loaded sections for MSGSWCAM.dll with result: 1. 4 sections found. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name appHelp.dll. INFO: Loading PE header for appHelp.dll. INFO: Loaded PE header for appHelp.dll. Somewhat parsed: 1 INFO: Loading sections for appHelp.dll. INFO: appHelp.dll #0 .text 0x1000 0x1c600 INFO: appHelp.dll #1 .data 0x1e000 0xa00 INFO: appHelp.dll #2 .rsrc 0x1f000 0x400 INFO: appHelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for appHelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GrooveIntlResource.dll. INFO: Loading PE header for GrooveIntlResource.dll. INFO: Loaded PE header for GrooveIntlResource.dll. Somewhat parsed: 1 INFO: Loading sections for GrooveIntlResource.dll. INFO: GrooveIntlResource.dll #0 .text 0x1000 0x200 INFO: GrooveIntlResource.dll #1 .rsrc 0x2000 0x863000 INFO: Loaded sections for GrooveIntlResource.dll with result: 1. 2 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name OneX.DLL. INFO: Loading PE header for OneX.DLL. INFO: Loaded PE header for OneX.DLL. Somewhat parsed: 1 INFO: Loading sections for OneX.DLL. INFO: OneX.DLL #0 .text 0x1000 0x1b000 INFO: OneX.DLL #1 .data 0x1c000 0x400 INFO: OneX.DLL #2 .rsrc 0x1f000 0x6a00 INFO: OneX.DLL #3 .reloc 0x26000 0x1200 INFO: Loaded sections for OneX.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GROOVEEX.DLL. INFO: Loading PE header for GROOVEEX.DLL. INFO: Loaded PE header for GROOVEEX.DLL. Somewhat parsed: 1 INFO: Loading sections for GROOVEEX.DLL. INFO: GROOVEEX.DLL #0 .text 0x1000 0x338e00 INFO: GROOVEEX.DLL #1 .data 0x33a000 0x53200 INFO: GROOVEEX.DLL #2 .rsrc 0x390000 0x3ea00 INFO: GROOVEEX.DLL #3 .reloc 0x3cf000 0x3a000 INFO: Loaded sections for GROOVEEX.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ATL90.DLL. INFO: Loading PE header for ATL90.DLL. INFO: Loaded PE header for ATL90.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL90.DLL. INFO: ATL90.DLL #0 .text 0x1000 0x1f200 INFO: ATL90.DLL #1 .data 0x21000 0x1400 INFO: ATL90.DLL #2 .rsrc 0x25000 0x2400 INFO: ATL90.DLL #3 .reloc 0x28000 0x2800 INFO: Loaded sections for ATL90.DLL with result: 1. 4 sections found. INFO: Initialized header for module name CSCDLL.dll. INFO: Loading PE header for CSCDLL.dll. INFO: Loaded PE header for CSCDLL.dll. Somewhat parsed: 1 INFO: Loading sections for CSCDLL.dll. INFO: CSCDLL.dll #0 .text 0x1000 0xe200 INFO: CSCDLL.dll #1 PAGE 0x10000 0x2600 INFO: CSCDLL.dll #2 .data 0x13000 0x1400 INFO: CSCDLL.dll #3 .rsrc 0x15000 0x6200 INFO: CSCDLL.dll #4 .reloc 0x1c000 0xc00 INFO: Loaded sections for CSCDLL.dll with result: 1. 5 sections found. INFO: Initialized header for module name actxprxy.dll. INFO: Loading PE header for actxprxy.dll. INFO: Loaded PE header for actxprxy.dll. Somewhat parsed: 1 INFO: Loading sections for actxprxy.dll. INFO: actxprxy.dll #0 .text 0x1000 0x11a00 INFO: actxprxy.dll #1 .orpc 0x13000 0xe00 INFO: actxprxy.dll #2 .data 0x14000 0x2600 INFO: actxprxy.dll #3 .rsrc 0x17000 0x600 INFO: actxprxy.dll #4 .reloc 0x18000 0x2800 INFO: Loaded sections for actxprxy.dll with result: 1. 5 sections found. INFO: Initialized header for module name themeui.dll. INFO: Loading PE header for themeui.dll. INFO: Loaded PE header for themeui.dll. Somewhat parsed: 1 INFO: Loading sections for themeui.dll. INFO: themeui.dll #0 .text 0x1000 0x36600 INFO: themeui.dll #1 .data 0x38000 0xe00 INFO: themeui.dll #2 .rsrc 0x4a000 0x22e00 INFO: themeui.dll #3 .reloc 0x6d000 0x3c00 INFO: Loaded sections for themeui.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSIMG32.dll. INFO: Loading PE header for MSIMG32.dll. INFO: Loaded PE header for MSIMG32.dll. Somewhat parsed: 1 INFO: Loading sections for MSIMG32.dll. INFO: MSIMG32.dll #0 .text 0x1000 0x600 INFO: MSIMG32.dll #1 .data 0x2000 0x200 INFO: MSIMG32.dll #2 .rsrc 0x3000 0x400 INFO: MSIMG32.dll #3 .reloc 0x4000 0x200 INFO: Loaded sections for MSIMG32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msutb.dll. INFO: Loading PE header for msutb.dll. INFO: Loaded PE header for msutb.dll. Somewhat parsed: 1 INFO: Loading sections for msutb.dll. INFO: msutb.dll #0 .text 0x1000 0x25400 INFO: msutb.dll #1 .data 0x27000 0x400 INFO: msutb.dll #2 .rsrc 0x28000 0x6c00 INFO: msutb.dll #3 .reloc 0x2f000 0x3200 INFO: Loaded sections for msutb.dll with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name dot3api.dll. INFO: Loading PE header for dot3api.dll. INFO: Loaded PE header for dot3api.dll. Somewhat parsed: 1 INFO: Loading sections for dot3api.dll. INFO: dot3api.dll #0 .text 0x1000 0x5200 INFO: dot3api.dll #1 .data 0x7000 0x200 INFO: dot3api.dll #2 .rsrc 0x8000 0x800 INFO: dot3api.dll #3 .reloc 0x9000 0x600 INFO: Loaded sections for dot3api.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name msi.dll. INFO: Loading PE header for msi.dll. INFO: Loaded PE header for msi.dll. Somewhat parsed: 1 INFO: Loading sections for msi.dll. INFO: msi.dll #0 .orpc 0x1000 0x200 INFO: msi.dll #1 .text 0x2000 0x1b1600 INFO: msi.dll #2 .data 0x1b4000 0x9400 INFO: msi.dll #3 .rsrc 0x1c0000 0xeee00 INFO: msi.dll #4 .reloc 0x2af000 0xc400 INFO: Loaded sections for msi.dll with result: 1. 5 sections found. INFO: Initialized header for module name credui.dll. INFO: Loading PE header for credui.dll. INFO: Loaded PE header for credui.dll. Somewhat parsed: 1 INFO: Loading sections for credui.dll. INFO: credui.dll #0 .text 0x1000 0xe600 INFO: credui.dll #1 .data 0x10000 0x600 INFO: credui.dll #2 .rsrc 0x14000 0x17c00 INFO: credui.dll #3 .reloc 0x2c000 0x1400 INFO: Loaded sections for credui.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETSHELL.dll. INFO: Loading PE header for NETSHELL.dll. INFO: Loaded PE header for NETSHELL.dll. Somewhat parsed: 1 INFO: Loading sections for NETSHELL.dll. INFO: NETSHELL.dll #0 .text 0x1000 0x72200 INFO: NETSHELL.dll #1 .orpc 0x74000 0x200 INFO: NETSHELL.dll #2 .data 0x75000 0x2200 INFO: NETSHELL.dll #3 .rsrc 0x79000 0x125e00 INFO: NETSHELL.dll #4 .reloc 0x19f000 0x5600 INFO: Loaded sections for NETSHELL.dll with result: 1. 5 sections found. INFO: Initialized header for module name rtutils.dll. INFO: Loading PE header for rtutils.dll. INFO: Loaded PE header for rtutils.dll. Somewhat parsed: 1 INFO: Loading sections for rtutils.dll. INFO: rtutils.dll #0 .text 0x1000 0x9800 INFO: rtutils.dll #1 .data 0xb000 0x200 INFO: rtutils.dll #2 .rsrc 0xc000 0x400 INFO: rtutils.dll #3 .reloc 0xd000 0xa00 INFO: Loaded sections for rtutils.dll with result: 1. 4 sections found. INFO: Initialized header for module name WTSAPI32.dll. INFO: Loading PE header for WTSAPI32.dll. INFO: Loaded PE header for WTSAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for WTSAPI32.dll. INFO: WTSAPI32.dll #0 .text 0x1000 0x3800 INFO: WTSAPI32.dll #1 .data 0x5000 0x200 INFO: WTSAPI32.dll #2 .rsrc 0x6000 0x600 INFO: WTSAPI32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WTSAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name eappprxy.dll. INFO: Loading PE header for eappprxy.dll. INFO: Loaded PE header for eappprxy.dll. Somewhat parsed: 1 INFO: Loading sections for eappprxy.dll. INFO: eappprxy.dll #0 .text 0x1000 0x7600 INFO: eappprxy.dll #1 .data 0x9000 0xc00 INFO: eappprxy.dll #2 .rsrc 0xb000 0x600 INFO: eappprxy.dll #3 .reloc 0xc000 0x1400 INFO: Loaded sections for eappprxy.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name msxml3.dll. INFO: Loading PE header for msxml3.dll. INFO: Loaded PE header for msxml3.dll. Somewhat parsed: 1 INFO: Loading sections for msxml3.dll. INFO: msxml3.dll #0 .text 0x1000 0xc8000 INFO: msxml3.dll #1 .data 0xc9000 0xdc00 INFO: msxml3.dll #2 .rsrc 0xda000 0x2c200 INFO: msxml3.dll #3 .reloc 0x107000 0xba00 INFO: Loaded sections for msxml3.dll with result: 1. 4 sections found. INFO: Initialized header for module name urlmon.dll. INFO: Loading PE header for urlmon.dll. INFO: Loaded PE header for urlmon.dll. Somewhat parsed: 1 INFO: Loading sections for urlmon.dll. INFO: urlmon.dll #0 .text 0x1000 0x70a00 INFO: urlmon.dll #1 .orpc 0x72000 0x1000 INFO: urlmon.dll #2 .data 0x73000 0x6000 INFO: urlmon.dll #3 .rsrc 0x82000 0x1a800 INFO: urlmon.dll #4 .reloc 0x9d000 0x4e00 INFO: Loaded sections for urlmon.dll with result: 1. 5 sections found. INFO: Initialized header for module name LINKINFO.dll. INFO: Loading PE header for LINKINFO.dll. INFO: Loaded PE header for LINKINFO.dll. Somewhat parsed: 1 INFO: Loading sections for LINKINFO.dll. INFO: LINKINFO.dll #0 .text 0x1000 0x4000 INFO: LINKINFO.dll #1 .data 0x5000 0x200 INFO: LINKINFO.dll #2 .rsrc 0x6000 0x400 INFO: LINKINFO.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for LINKINFO.dll with result: 1. 4 sections found. INFO: Initialized header for module name webcheck.dll. INFO: Loading PE header for webcheck.dll. INFO: Loaded PE header for webcheck.dll. Somewhat parsed: 1 INFO: Loading sections for webcheck.dll. INFO: webcheck.dll #0 .text 0x1000 0x2a800 INFO: webcheck.dll #1 .data 0x2c000 0xa00 INFO: webcheck.dll #2 .rsrc 0x2d000 0x16000 INFO: webcheck.dll #3 .reloc 0x43000 0x2200 INFO: Initialized header for module name kernel32.dll. INFO: Loading PE header for kernel32.dll. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Initialized header for module name rasmans.dll. INFO: Loading PE header for rasmans.dll. INFO: Loaded PE header for rasmans.dll. Somewhat parsed: 1 INFO: Loading sections for rasmans.dll. INFO: rasmans.dll #0 .text 0x1000 0x29c00 INFO: rasmans.dll #1 .data 0x2b000 0xa00 INFO: rasmans.dll #2 .rsrc 0x2e000 0x400 INFO: rasmans.dll #3 .reloc 0x2f000 0x2a00 INFO: Loaded sections for rasmans.dll with result: 1. 4 sections found. INFO: Initialized header for module name tapisrv.dll. INFO: Loading PE header for tapisrv.dll. INFO: Loaded PE header for tapisrv.dll. Somewhat parsed: 1 INFO: Loading sections for tapisrv.dll. INFO: tapisrv.dll #0 .text 0x1000 0x33800 INFO: tapisrv.dll #1 .data 0x35000 0x800 INFO: tapisrv.dll #2 .rsrc 0x36000 0x6200 INFO: tapisrv.dll #3 .reloc 0x3d000 0x2a00 INFO: Loaded sections for tapisrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name rastapi.dll. INFO: Loading PE header for rastapi.dll. INFO: Loaded PE header for rastapi.dll. Somewhat parsed: 1 INFO: Loading sections for rastapi.dll. INFO: rastapi.dll #0 .text 0x1000 0xd000 INFO: rastapi.dll #1 .data 0xe000 0x200 INFO: rastapi.dll #2 .rsrc 0xf000 0x400 INFO: rastapi.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for rastapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name unimdm.tsp. INFO: Loading PE header for unimdm.tsp. INFO: Loaded PE header for unimdm.tsp. Somewhat parsed: 1 INFO: Loading sections for unimdm.tsp. INFO: unimdm.tsp #0 .text 0x1000 0x25c00 INFO: unimdm.tsp #1 .data 0x27000 0x2200 INFO: unimdm.tsp #2 .rsrc 0x2a000 0x8400 INFO: unimdm.tsp #3 .reloc 0x33000 0x2200 INFO: Loaded sections for unimdm.tsp with result: 1. 4 sections found. INFO: Initialized header for module name uniplat.dll. INFO: Loading PE header for uniplat.dll. INFO: Loaded PE header for uniplat.dll. Somewhat parsed: 1 INFO: Loading sections for uniplat.dll. INFO: uniplat.dll #0 .text 0x1000 0x2600 INFO: uniplat.dll #1 .data 0x4000 0x200 INFO: uniplat.dll #2 .rsrc 0x5000 0x600 INFO: uniplat.dll #3 .reloc 0x6000 0x400 INFO: Loaded sections for uniplat.dll with result: 1. 4 sections found. INFO: Initialized header for module name kmddsp.tsp. INFO: Loading PE header for kmddsp.tsp. INFO: Loaded PE header for kmddsp.tsp. Somewhat parsed: 1 INFO: Loading sections for kmddsp.tsp. INFO: kmddsp.tsp #0 .text 0x1000 0x7000 INFO: kmddsp.tsp #1 .data 0x8000 0x200 INFO: kmddsp.tsp #2 .rsrc 0x9000 0x600 INFO: kmddsp.tsp #3 .reloc 0xa000 0x600 INFO: Loaded sections for kmddsp.tsp with result: 1. 4 sections found. INFO: Initialized header for module name ndptsp.tsp. INFO: Loading PE header for ndptsp.tsp. INFO: Loaded PE header for ndptsp.tsp. Somewhat parsed: 1 INFO: Loading sections for ndptsp.tsp. INFO: ndptsp.tsp #0 .text 0x1000 0xc000 INFO: ndptsp.tsp #1 .data 0xd000 0x400 INFO: ndptsp.tsp #2 .rsrc 0xe000 0xa00 INFO: ndptsp.tsp #3 .reloc 0xf000 0xc00 INFO: Loaded sections for ndptsp.tsp with result: 1. 4 sections found. INFO: Initialized header for module name rasppp.dll. INFO: Loading PE header for rasppp.dll. INFO: Loaded PE header for rasppp.dll. Somewhat parsed: 1 INFO: Loading sections for rasppp.dll. INFO: rasppp.dll #0 .text 0x1000 0x30200 INFO: rasppp.dll #1 .data 0x32000 0x600 INFO: rasppp.dll #2 .rsrc 0x33000 0x400 INFO: rasppp.dll #3 .reloc 0x34000 0x2800 INFO: Loaded sections for rasppp.dll with result: 1. 4 sections found. INFO: Initialized header for module name h323.tsp. INFO: Loading PE header for h323.tsp. INFO: Loaded PE header for h323.tsp. Somewhat parsed: 1 INFO: Loading sections for h323.tsp. INFO: h323.tsp #0 .text 0x1000 0x39c00 INFO: h323.tsp #1 .data 0x3b000 0x600 INFO: h323.tsp #2 .rsrc 0x3e000 0x2200 INFO: h323.tsp #3 .reloc 0x41000 0x4600 INFO: Loaded sections for h323.tsp with result: 1. 4 sections found. INFO: Initialized header for module name hidphone.tsp. INFO: Loading PE header for hidphone.tsp. INFO: Loaded PE header for hidphone.tsp. Somewhat parsed: 1 INFO: Loading sections for hidphone.tsp. INFO: hidphone.tsp #0 .text 0x1000 0x5e00 INFO: hidphone.tsp #1 .data 0x7000 0x200 INFO: hidphone.tsp #2 .rsrc 0x8000 0xa00 INFO: hidphone.tsp #3 .reloc 0x9000 0x600 INFO: Loaded sections for hidphone.tsp with result: 1. 4 sections found. INFO: Initialized header for module name HID.DLL. INFO: Loading PE header for HID.DLL. INFO: Loaded PE header for HID.DLL. Somewhat parsed: 1 INFO: Loading sections for HID.DLL. INFO: HID.DLL #0 .text 0x1000 0x4200 INFO: HID.DLL #1 .data 0x6000 0x600 INFO: HID.DLL #2 .rsrc 0x7000 0x400 INFO: HID.DLL #3 .reloc 0x8000 0x200 INFO: Loaded sections for HID.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntlsapi.dll. INFO: Loading PE header for ntlsapi.dll. INFO: Loaded PE header for ntlsapi.dll. Somewhat parsed: 1 INFO: Loading sections for ntlsapi.dll. INFO: ntlsapi.dll #0 .text 0x1000 0x1200 INFO: ntlsapi.dll #1 .data 0x3000 0x200 INFO: ntlsapi.dll #2 .rsrc 0x4000 0x600 INFO: ntlsapi.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for ntlsapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name cryptdll.dll. INFO: Loading PE header for cryptdll.dll. INFO: Loaded PE header for cryptdll.dll. Somewhat parsed: 1 INFO: Loading sections for cryptdll.dll. INFO: cryptdll.dll #0 .text 0x1000 0x6200 INFO: cryptdll.dll #1 .data 0x8000 0x1200 INFO: cryptdll.dll #2 .rsrc 0xa000 0x400 INFO: cryptdll.dll #3 .reloc 0xb000 0x600 INFO: Loaded sections for cryptdll.dll with result: 1. 4 sections found. INFO: Initialized header for module name RASQEC.DLL. INFO: Loading PE header for RASQEC.DLL. INFO: Loaded PE header for RASQEC.DLL. Somewhat parsed: 1 INFO: Loading sections for RASQEC.DLL. INFO: RASQEC.DLL #0 .text 0x1000 0xe200 INFO: RASQEC.DLL #1 .data 0x10000 0x200 INFO: RASQEC.DLL #2 .rsrc 0x11000 0x400 INFO: RASQEC.DLL #3 .reloc 0x12000 0x600 INFO: Loaded sections for RASQEC.DLL with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for webcheck.dll with result: 1. 4 sections found. INFO: Initialized header for module name WSOCK32.dll. INFO: Loading PE header for WSOCK32.dll. INFO: Loaded PE header for WSOCK32.dll. Somewhat parsed: 1 INFO: Loading sections for WSOCK32.dll. INFO: WSOCK32.dll #0 .text 0x1000 0x2400 INFO: WSOCK32.dll #1 .data 0x4000 0x200 INFO: WSOCK32.dll #2 .rsrc 0x5000 0x2c00 INFO: WSOCK32.dll #3 .reloc 0x8000 0x200 INFO: Loaded sections for WSOCK32.dll with result: 1. 4 sections found. INFO: Initialized header for module name stobject.dll. INFO: Loading PE header for stobject.dll. INFO: Loaded PE header for stobject.dll. Somewhat parsed: 1 INFO: Loading sections for stobject.dll. INFO: stobject.dll #0 .text 0x1000 0x7a00 INFO: stobject.dll #1 .data 0x9000 0x400 INFO: stobject.dll #2 .rsrc 0xa000 0x15200 INFO: stobject.dll #3 .reloc 0x20000 0x800 INFO: Loaded sections for stobject.dll with result: 1. 4 sections found. INFO: Initialized header for module name BatMeter.dll. INFO: Loading PE header for BatMeter.dll. INFO: Loaded PE header for BatMeter.dll. Somewhat parsed: 1 INFO: Loading sections for BatMeter.dll. INFO: BatMeter.dll #0 .text 0x1000 0x3800 INFO: BatMeter.dll #1 .data 0x5000 0x400 INFO: BatMeter.dll #2 .rsrc 0x6000 0x2e00 INFO: BatMeter.dll #3 .reloc 0x9000 0x400 INFO: Loaded sections for BatMeter.dll with result: 1. 4 sections found. INFO: Initialized header for module name POWRPROF.dll. INFO: Loading PE header for POWRPROF.dll. INFO: Loaded PE header for POWRPROF.dll. Somewhat parsed: 1 INFO: Loading sections for POWRPROF.dll. INFO: POWRPROF.dll #0 .text 0x1000 0x3400 INFO: POWRPROF.dll #1 .data 0x5000 0x400 INFO: POWRPROF.dll #2 .rsrc 0x6000 0x400 INFO: POWRPROF.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for POWRPROF.dll with result: 1. 4 sections found. INFO: Initialized header for module name rarext.dll. INFO: Loading PE header for rarext.dll. INFO: Loaded PE header for rarext.dll. Somewhat parsed: 1 INFO: Loading sections for rarext.dll. INFO: rarext.dll #0 .text 0x1000 0x18c00 INFO: rarext.dll #1 .data 0x1a000 0x3800 INFO: rarext.dll #2 .tls 0x27000 0x200 INFO: rarext.dll #3 .idata 0x28000 0x1000 INFO: rarext.dll #4 .edata 0x29000 0x200 INFO: rarext.dll #5 .rsrc 0x2a000 0x1600 INFO: rarext.dll #6 .reloc 0x2c000 0x1200 INFO: Loaded sections for rarext.dll with result: 1. 7 sections found. INFO: Initialized header for module name browselc.dll. INFO: Loading PE header for browselc.dll. INFO: Loaded PE header for browselc.dll. Somewhat parsed: 1 INFO: Loading sections for browselc.dll. INFO: browselc.dll #0 .rsrc 0x1000 0xf200 INFO: browselc.dll #1 .reloc 0x11000 0x200 INFO: Loaded sections for browselc.dll with result: 1. 2 sections found. INFO: Initialized header for module name AcroIEHelper.dll. INFO: Loading PE header for AcroIEHelper.dll. INFO: Loaded PE header for AcroIEHelper.dll. Somewhat parsed: 1 INFO: Loading sections for AcroIEHelper.dll. INFO: AcroIEHelper.dll #0 .text 0x1000 0x7000 INFO: AcroIEHelper.dll #1 .rdata 0x8000 0x2000 INFO: AcroIEHelper.dll #2 .data 0xa000 0x1000 INFO: AcroIEHelper.dll #3 .rsrc 0xb000 0x2000 INFO: AcroIEHelper.dll #4 .reloc 0xd000 0x1000 INFO: Loaded sections for AcroIEHelper.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSVCR71.dll. INFO: Loading PE header for MSVCR71.dll. INFO: Loaded PE header for MSVCR71.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCR71.dll. INFO: MSVCR71.dll #0 .text 0x1000 0x39000 INFO: MSVCR71.dll #1 .rdata 0x3a000 0x11000 INFO: MSVCR71.dll #2 .data 0x4b000 0x6000 INFO: MSVCR71.dll #3 .rsrc 0x52000 0x1000 INFO: MSVCR71.dll #4 .reloc 0x53000 0x3000 INFO: Loaded sections for MSVCR71.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSFTEDIT.DLL. INFO: Loading PE header for MSFTEDIT.DLL. INFO: Loaded PE header for MSFTEDIT.DLL. Somewhat parsed: 1 INFO: Loading sections for MSFTEDIT.DLL. INFO: MSFTEDIT.DLL #0 .text 0x1000 0x74c00 INFO: MSFTEDIT.DLL #1 .data 0x76000 0x600 INFO: MSFTEDIT.DLL #2 .rsrc 0x77000 0xb000 INFO: MSFTEDIT.DLL #3 .reloc 0x82000 0x3400 INFO: Loaded sections for MSFTEDIT.DLL with result: 1. 4 sections found. INFO: Initialized header for module name SXS.DLL. INFO: Loading PE header for SXS.DLL. INFO: Loaded PE header for SXS.DLL. Somewhat parsed: 1 INFO: Loading sections for SXS.DLL. INFO: SXS.DLL #0 .text 0x1000 0x98e00 INFO: SXS.DLL #1 .data 0x9a000 0x2800 INFO: SXS.DLL #2 .rsrc 0x9d000 0x9800 INFO: SXS.DLL #3 .reloc 0xa7000 0x9000 INFO: Loaded sections for SXS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name drprov.dll. INFO: Loading PE header for drprov.dll. INFO: Loaded PE header for drprov.dll. Somewhat parsed: 1 INFO: Loading sections for drprov.dll. INFO: drprov.dll #0 .text 0x1000 0x2800 INFO: drprov.dll #1 .data 0x4000 0x400 INFO: drprov.dll #2 .rsrc 0x5000 0x600 INFO: drprov.dll #3 .reloc 0x6000 0x200 INFO: Loaded sections for drprov.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETUI0.dll. INFO: Loading PE header for NETUI0.dll. INFO: Loaded PE header for NETUI0.dll. Somewhat parsed: 1 INFO: Loading sections for NETUI0.dll. INFO: NETUI0.dll #0 .text 0x1000 0xfc00 INFO: NETUI0.dll #1 .data 0x11000 0x200 INFO: NETUI0.dll #2 .rsrc 0x12000 0x3400 INFO: NETUI0.dll #3 .reloc 0x16000 0x600 INFO: Loaded sections for NETUI0.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETUI1.dll. INFO: Loading PE header for NETUI1.dll. INFO: Loaded PE header for NETUI1.dll. Somewhat parsed: 1 INFO: Loading sections for NETUI1.dll. INFO: NETUI1.dll #0 .text 0x1000 0x3a200 INFO: NETUI1.dll #1 .data 0x3c000 0x200 INFO: NETUI1.dll #2 .rsrc 0x3d000 0x600 INFO: NETUI1.dll #3 .reloc 0x3e000 0x1200 INFO: Loaded sections for NETUI1.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETRAP.dll. INFO: Loading PE header for NETRAP.dll. INFO: Loaded PE header for NETRAP.dll. Somewhat parsed: 1 INFO: Loading sections for NETRAP.dll. INFO: NETRAP.dll #0 .text 0x1000 0x2200 INFO: NETRAP.dll #1 .data 0x4000 0x200 INFO: NETRAP.dll #2 .rsrc 0x5000 0x400 INFO: NETRAP.dll #3 .reloc 0x6000 0x200 INFO: Loaded sections for NETRAP.dll with result: 1. 4 sections found. INFO: Initialized header for module name SAMLIB.dll. INFO: Loading PE header for SAMLIB.dll. INFO: Loaded PE header for SAMLIB.dll. Somewhat parsed: 1 INFO: Loading sections for SAMLIB.dll. INFO: SAMLIB.dll #0 .text 0x1000 0xe800 INFO: SAMLIB.dll #1 .data 0x10000 0x200 INFO: SAMLIB.dll #2 .rsrc 0x11000 0x400 INFO: SAMLIB.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for SAMLIB.dll with result: 1. 4 sections found. INFO: Initialized header for module name davclnt.dll. INFO: Loading PE header for davclnt.dll. INFO: Loaded PE header for davclnt.dll. Somewhat parsed: 1 INFO: Loading sections for davclnt.dll. INFO: davclnt.dll #0 .text 0x1000 0x5200 INFO: davclnt.dll #1 .data 0x7000 0x200 INFO: davclnt.dll #2 .rsrc 0x8000 0x600 INFO: davclnt.dll #3 .reloc 0x9000 0x400 INFO: Loaded sections for davclnt.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSGINA.dll. INFO: Loading PE header for MSGINA.dll. INFO: Loaded PE header for MSGINA.dll. Somewhat parsed: 1 INFO: Loading sections for MSGINA.dll. INFO: MSGINA.dll #0 .text 0x1000 0x2b400 INFO: MSGINA.dll #1 .data 0x2d000 0x1400 INFO: MSGINA.dll #2 .rsrc 0x30000 0xc4800 INFO: MSGINA.dll #3 .reloc 0xf5000 0x2400 INFO: Loaded sections for MSGINA.dll with result: 1. 4 sections found. INFO: Initialized header for module name ODBC32.dll. INFO: Loading PE header for ODBC32.dll. INFO: Loaded PE header for ODBC32.dll. Somewhat parsed: 1 INFO: Loading sections for ODBC32.dll. INFO: ODBC32.dll #0 .text 0x1000 0x37000 INFO: ODBC32.dll #1 .data 0x38000 0x1000 INFO: ODBC32.dll #2 .sdbid 0x39000 0x1000 INFO: ODBC32.dll #3 .rsrc 0x3a000 0x1000 INFO: ODBC32.dll #4 .reloc 0x3b000 0x2000 INFO: Loaded sections for ODBC32.dll with result: 1. 5 sections found. INFO: Initialized header for module name comdlg32.dll. INFO: Loading PE header for comdlg32.dll. INFO: Loaded PE header for comdlg32.dll. Somewhat parsed: 1 INFO: Loading sections for comdlg32.dll. INFO: comdlg32.dll #0 .text 0x1000 0x30000 INFO: comdlg32.dll #1 .data 0x31000 0xe00 INFO: comdlg32.dll #2 .rsrc 0x35000 0x10200 INFO: comdlg32.dll #3 .reloc 0x46000 0x2600 INFO: Loaded sections for comdlg32.dll with result: 1. 4 sections found. INFO: Initialized header for module name odbcint.dll. INFO: Loading PE header for odbcint.dll. INFO: Loaded PE header for odbcint.dll. Somewhat parsed: 1 INFO: Loading sections for odbcint.dll. INFO: odbcint.dll #0 .rsrc 0x1000 0x15000 INFO: odbcint.dll #1 .reloc 0x16000 0x1000 INFO: Loaded sections for odbcint.dll with result: 1. 2 sections found. INFO: Initialized header for module name msohevi.dll. INFO: Loading PE header for msohevi.dll. INFO: Loaded PE header for msohevi.dll. Somewhat parsed: 1 INFO: Loading sections for msohevi.dll. INFO: msohevi.dll #0 .text 0x1000 0xc000 INFO: msohevi.dll #1 .data 0xd000 0x200 INFO: msohevi.dll #2 .rsrc 0xe000 0xa00 INFO: msohevi.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for msohevi.dll with result: 1. 4 sections found. INFO: Initialized header for module name MLANG.dll. INFO: Loading PE header for MLANG.dll. INFO: Loaded PE header for MLANG.dll. Somewhat parsed: 1 INFO: Loading sections for MLANG.dll. INFO: MLANG.dll #0 .text 0x1000 0x21000 INFO: MLANG.dll #1 .data 0x22000 0x4800 INFO: MLANG.dll #2 .rsrc 0x27000 0x67600 INFO: MLANG.dll #3 .reloc 0x8f000 0x2000 INFO: Loaded sections for MLANG.dll with result: 1. 4 sections found. INFO: Initialized header for module name shdoclc.dll. INFO: Loading PE header for shdoclc.dll. INFO: Loaded PE header for shdoclc.dll. Somewhat parsed: 1 INFO: Loading sections for shdoclc.dll. INFO: shdoclc.dll #0 .rsrc 0x1000 0x85c00 INFO: shdoclc.dll #1 .reloc 0x87000 0x200 INFO: Loaded sections for shdoclc.dll with result: 1. 2 sections found. INFO: Initialized header for module name PDFShell.dll. INFO: Loading PE header for PDFShell.dll. INFO: Loaded PE header for PDFShell.dll. Somewhat parsed: 1 INFO: Loading sections for PDFShell.dll. INFO: PDFShell.dll #0 .text 0x1000 0xc000 INFO: PDFShell.dll #1 .rdata 0xd000 0x4000 INFO: PDFShell.dll #2 .data 0x11000 0x1000 INFO: PDFShell.dll #3 .rsrc 0x13000 0x7000 INFO: PDFShell.dll #4 .reloc 0x1a000 0x2000 INFO: Loaded sections for PDFShell.dll with result: 1. 5 sections found. INFO: Initialized header for module name WZCSAPI.DLL. INFO: Loading PE header for WZCSAPI.DLL. INFO: Loaded PE header for WZCSAPI.DLL. Somewhat parsed: 1 INFO: Loading sections for WZCSAPI.DLL. INFO: WZCSAPI.DLL #0 .text 0x1000 0xb600 INFO: WZCSAPI.DLL #1 .data 0xd000 0x600 INFO: WZCSAPI.DLL #2 .rsrc 0xe000 0x600 INFO: WZCSAPI.DLL #3 .reloc 0xf000 0x800 INFO: Loaded sections for WZCSAPI.DLL with result: 1. 4 sections found. INFO: Initialized header for module name zipfldr.dll. INFO: Loading PE header for zipfldr.dll. INFO: Loaded PE header for zipfldr.dll. Somewhat parsed: 1 INFO: Loading sections for zipfldr.dll. INFO: zipfldr.dll #0 .text 0x1000 0x33a00 INFO: zipfldr.dll #1 .data 0x35000 0x2600 INFO: zipfldr.dll #2 .rsrc 0x3a000 0x19600 INFO: zipfldr.dll #3 .reloc 0x54000 0x3000 INFO: Loaded sections for zipfldr.dll with result: 1. 4 sections found. INFO: Initialized header for module name NTMARTA.DLL. INFO: Loading PE header for NTMARTA.DLL. INFO: Loaded PE header for NTMARTA.DLL. Somewhat parsed: 1 INFO: Loading sections for NTMARTA.DLL. INFO: NTMARTA.DLL #0 .text 0x1000 0x19600 INFO: NTMARTA.DLL #1 .data 0x1b000 0xe00 INFO: NTMARTA.DLL #2 .rsrc 0x1d000 0x1600 INFO: NTMARTA.DLL #3 .reloc 0x1f000 0x1200 INFO: Loaded sections for NTMARTA.DLL with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded PE header for kernel32.dll. Somewhat parsed: 1 INFO: Loading sections for kernel32.dll. INFO: kernel32.dll #0 .text 0x1000 0x83200 INFO: kernel32.dll #1 .data 0x85000 0x2600 INFO: kernel32.dll #2 .rsrc 0x8a000 0x66000 INFO: kernel32.dll #3 .reloc 0xf0000 0x5e00 INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name ContactsUX.dll. INFO: Loading PE header for ContactsUX.dll. INFO: Loaded PE header for ContactsUX.dll. Somewhat parsed: 1 INFO: Loading sections for ContactsUX.dll. INFO: ContactsUX.dll #0 .text 0x1000 0x49800 INFO: ContactsUX.dll #1 .data 0x4b000 0x2e00 INFO: ContactsUX.dll #2 .rsrc 0x4f000 0x800 INFO: ContactsUX.dll #3 .reloc 0x50000 0x3800 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for ContactsUX.dll with result: 1. 4 sections found. INFO: Initialized header for module name CRYPTNET.dll. INFO: Loading PE header for CRYPTNET.dll. INFO: Loaded PE header for CRYPTNET.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPTNET.dll. INFO: CRYPTNET.dll #0 .text 0x1000 0xe600 INFO: CRYPTNET.dll #1 .data 0x10000 0x200 INFO: CRYPTNET.dll #2 .rsrc 0x11000 0x600 INFO: CRYPTNET.dll #3 .reloc 0x12000 0xa00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for CRYPTNET.dll with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name wshtcpip.dll. INFO: Loading PE header for wshtcpip.dll. INFO: Loaded PE header for wshtcpip.dll. Somewhat parsed: 1 INFO: Loading sections for wshtcpip.dll. INFO: wshtcpip.dll #0 .text 0x1000 0x3a00 INFO: wshtcpip.dll #1 .data 0x5000 0x800 INFO: wshtcpip.dll #2 .rsrc 0x6000 0x400 INFO: wshtcpip.dll #3 .reloc 0x7000 0x200 INFO: Loaded sections for wshtcpip.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded sections for kernel32.dll with result: 1. 4 sections found. INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Initialized header for module name MSGINA.dll. INFO: Loading PE header for MSGINA.dll. INFO: Loaded PE header for MSGINA.dll. Somewhat parsed: 1 INFO: Loading sections for MSGINA.dll. INFO: MSGINA.dll #0 .text 0x1000 0x2b400 INFO: MSGINA.dll #1 .data 0x2d000 0x1400 INFO: MSGINA.dll #2 .rsrc 0x30000 0xc4800 INFO: MSGINA.dll #3 .reloc 0xf5000 0x2400 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name rasadhlp.dll. INFO: Loading PE header for rasadhlp.dll. INFO: Loaded PE header for rasadhlp.dll. Somewhat parsed: 1 INFO: Loading sections for rasadhlp.dll. INFO: rasadhlp.dll #0 .text 0x1000 0x1200 INFO: rasadhlp.dll #1 .data 0x3000 0x200 INFO: rasadhlp.dll #2 .rsrc 0x4000 0x400 INFO: rasadhlp.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for rasadhlp.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name winrnr.dll. INFO: Loading PE header for winrnr.dll. INFO: Loaded PE header for winrnr.dll. Somewhat parsed: 1 INFO: Loading sections for winrnr.dll. INFO: winrnr.dll #0 .text 0x1000 0x3200 INFO: winrnr.dll #1 .data 0x5000 0x400 INFO: winrnr.dll #2 .rsrc 0x6000 0x400 INFO: winrnr.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for winrnr.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for MSGINA.dll with result: 1. 4 sections found. INFO: Initialized header for module name ATL.DLL. INFO: Loading PE header for ATL.DLL. INFO: Loaded PE header for ATL.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL.DLL. INFO: ATL.DLL #0 .text 0x1000 0xae00 INFO: ATL.DLL #1 .data 0xc000 0x400 INFO: ATL.DLL #2 .rsrc 0xd000 0x2400 INFO: ATL.DLL #3 .reloc 0x10000 0xc00 INFO: Loaded sections for ATL.DLL with result: 1. 4 sections found. INFO: Initialized header for module name ntdll.dll. INFO: Loading PE header for ntdll.dll. INFO: Loaded PE header for ntdll.dll. Somewhat parsed: 1 INFO: Loading sections for ntdll.dll. INFO: ntdll.dll #0 .text 0x1000 0x7a000 INFO: ntdll.dll #1 .data 0x7b000 0x3200 INFO: ntdll.dll #2 .rsrc 0x80000 0x2c000 INFO: ntdll.dll #3 .reloc 0xac000 0x3000 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name termsrv.dll. INFO: Loading PE header for termsrv.dll. INFO: Loaded PE header for termsrv.dll. Somewhat parsed: 1 INFO: Loading sections for termsrv.dll. INFO: termsrv.dll #0 .text 0x1000 0x3f800 INFO: termsrv.dll #1 .data 0x41000 0x1200 INFO: termsrv.dll #2 .rsrc 0x4b000 0x4000 INFO: termsrv.dll #3 .reloc 0x4f000 0x3400 INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Loaded sections for termsrv.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name inetres.dll. INFO: Loading PE header for inetres.dll. INFO: Loaded PE header for inetres.dll. Somewhat parsed: 1 INFO: Loading sections for inetres.dll. INFO: inetres.dll #0 .rsrc 0x1000 0xb600 INFO: inetres.dll #1 .reloc 0xd000 0x200 INFO: Loaded sections for inetres.dll with result: 1. 2 sections found. INFO: Initialized header for module name custsat.dll. INFO: Loading PE header for custsat.dll. INFO: Loaded PE header for custsat.dll. Somewhat parsed: 1 INFO: Loading sections for custsat.dll. INFO: custsat.dll #0 .text 0x1000 0x6e00 INFO: custsat.dll #1 .data 0x8000 0x200 INFO: custsat.dll #2 .rsrc 0x9000 0x400 INFO: custsat.dll #3 .reloc 0xa000 0xc00 INFO: Loaded sections for custsat.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name wtsapi32.dll. INFO: Loading PE header for wtsapi32.dll. INFO: Loaded PE header for wtsapi32.dll. Somewhat parsed: 1 INFO: Loading sections for wtsapi32.dll. INFO: wtsapi32.dll #0 .text 0x1000 0x3800 INFO: wtsapi32.dll #1 .data 0x5000 0x200 INFO: wtsapi32.dll #2 .rsrc 0x6000 0x600 INFO: wtsapi32.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for wtsapi32.dll with result: 1. 4 sections found. INFO: Initialized header for module name RichEd20.dll. INFO: Loading PE header for RichEd20.dll. INFO: Loaded PE header for RichEd20.dll. Somewhat parsed: 1 INFO: Loading sections for RichEd20.dll. INFO: RichEd20.dll #0 .text 0x1000 0x5f200 INFO: RichEd20.dll #1 .data 0x61000 0x600 INFO: RichEd20.dll #2 .rsrc 0x62000 0x7800 INFO: RichEd20.dll #3 .reloc 0x6a000 0x2a00 INFO: Loaded sections for RichEd20.dll with result: 1. 4 sections found. INFO: Initialized header for module name msgslang.8.5.1302.1018.dll. INFO: Loading PE header for msgslang.8.5.1302.1018.dll. INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Initialized header for module name lmdimon8.dll. INFO: Loading PE header for lmdimon8.dll. INFO: Loaded PE header for lmdimon8.dll. Somewhat parsed: 1 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Loading sections for lmdimon8.dll. INFO: lmdimon8.dll #0 .text 0x1000 0xec00 INFO: lmdimon8.dll #1 .data 0x10000 0x2600 INFO: lmdimon8.dll #2 .rsrc 0x13000 0x600 INFO: lmdimon8.dll #3 .reloc 0x14000 0xc00 INFO: Loaded sections for lmdimon8.dll with result: 1. 4 sections found. INFO: Initialized header for module name sfc_os.dll. INFO: Loading PE header for sfc_os.dll. INFO: Loaded PE header for sfc_os.dll. Somewhat parsed: 1 INFO: Loading sections for sfc_os.dll. INFO: sfc_os.dll #0 .text 0x1000 0x18000 INFO: sfc_os.dll #1 .data 0x19000 0x200 INFO: sfc_os.dll #2 .rsrc 0x1f000 0x8600 INFO: sfc_os.dll #3 .reloc 0x28000 0x1800 INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for sfc_os.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Initialized header for module name AUTHZ.dll. INFO: Loading PE header for AUTHZ.dll. INFO: Loaded PE header for AUTHZ.dll. Somewhat parsed: 1 INFO: Loading sections for AUTHZ.dll. INFO: AUTHZ.dll #0 .text 0x1000 0xe000 INFO: AUTHZ.dll #1 .data 0xf000 0x400 INFO: AUTHZ.dll #2 .rsrc 0x10000 0x400 INFO: AUTHZ.dll #3 .reloc 0x11000 0x800 INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x90c00 INFO: comctl32.dll #1 .data 0x92000 0x600 INFO: comctl32.dll #2 .rsrc 0x93000 0x6a000 INFO: comctl32.dll #3 .reloc 0xfd000 0x6000 INFO: Loaded sections for AUTHZ.dll with result: 1. 4 sections found. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Initialized header for module name mstlsapi.dll. INFO: Loading PE header for mstlsapi.dll. INFO: Loaded PE header for mstlsapi.dll. Somewhat parsed: 1 INFO: Loading sections for mstlsapi.dll. INFO: mstlsapi.dll #0 .text 0x1000 0x19c00 INFO: mstlsapi.dll #1 .data 0x1b000 0x200 INFO: mstlsapi.dll #2 .rsrc 0x1c000 0x600 INFO: mstlsapi.dll #3 .reloc 0x1d000 0x1e00 INFO: Loaded sections for ntdll.dll with result: 1. 4 sections found. INFO: Loaded sections for mstlsapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name ACTIVEDS.dll. INFO: Loading PE header for ACTIVEDS.dll. INFO: Loaded PE header for ACTIVEDS.dll. Somewhat parsed: 1 INFO: Loading sections for ACTIVEDS.dll. INFO: ACTIVEDS.dll #0 .text 0x1000 0x25800 INFO: ACTIVEDS.dll #1 .data 0x27000 0x6e00 INFO: ACTIVEDS.dll #2 .rsrc 0x2f000 0x1000 INFO: ACTIVEDS.dll #3 .reloc 0x30000 0x1a00 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for ACTIVEDS.dll with result: 1. 4 sections found. INFO: Initialized header for module name adsldpc.dll. INFO: Loading PE header for adsldpc.dll. INFO: Loaded PE header for adsldpc.dll. Somewhat parsed: 1 INFO: Loading sections for adsldpc.dll. INFO: adsldpc.dll #0 .text 0x1000 0x21000 INFO: adsldpc.dll #1 .data 0x22000 0xa00 INFO: adsldpc.dll #2 .rsrc 0x23000 0x600 INFO: adsldpc.dll #3 .reloc 0x24000 0xc00 INFO: Initialized header for module name RPCRT4.dll. INFO: Loading PE header for RPCRT4.dll. INFO: Loaded PE header for RPCRT4.dll. Somewhat parsed: 1 INFO: Loading sections for RPCRT4.dll. INFO: RPCRT4.dll #0 .text 0x1000 0x82800 INFO: RPCRT4.dll #1 .orpc 0x84000 0x6a00 INFO: RPCRT4.dll #2 .data 0x8b000 0xc00 INFO: RPCRT4.dll #3 .rsrc 0x8c000 0x400 INFO: RPCRT4.dll #4 .reloc 0x8d000 0x4600 INFO: Loaded sections for adsldpc.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name win32spl.dll. INFO: Loading PE header for win32spl.dll. INFO: Loaded PE header for win32spl.dll. Somewhat parsed: 1 INFO: Loading sections for win32spl.dll. INFO: win32spl.dll #0 .text 0x1000 0x16200 INFO: win32spl.dll #1 .data 0x18000 0x1600 INFO: win32spl.dll #2 .rsrc 0x22000 0x600 INFO: win32spl.dll #3 .reloc 0x23000 0xe00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for win32spl.dll with result: 1. 4 sections found. INFO: Initialized header for module name cnbjmon.dll. INFO: Loading PE header for cnbjmon.dll. INFO: Loaded PE header for cnbjmon.dll. Somewhat parsed: 1 INFO: Loading sections for cnbjmon.dll. INFO: cnbjmon.dll #0 .text 0x1000 0x5c00 INFO: cnbjmon.dll #1 .data 0x7000 0x800 INFO: cnbjmon.dll #2 .rsrc 0x8000 0x4a00 INFO: cnbjmon.dll #3 .reloc 0xd000 0x600 INFO: Loaded sections for cnbjmon.dll with result: 1. 4 sections found. INFO: Initialized header for module name comctl32.dll. INFO: Loading PE header for comctl32.dll. INFO: Loaded PE header for comctl32.dll. Somewhat parsed: 1 INFO: Loading sections for comctl32.dll. INFO: comctl32.dll #0 .text 0x1000 0x70c00 INFO: comctl32.dll #1 .data 0x72000 0x2600 INFO: comctl32.dll #2 .rsrc 0x75000 0x1f400 INFO: comctl32.dll #3 .reloc 0x95000 0x4200 INFO: Initialized header for module name REGAPI.dll. INFO: Loading PE header for REGAPI.dll. INFO: Loaded PE header for REGAPI.dll. Somewhat parsed: 1 INFO: Loading sections for REGAPI.dll. INFO: REGAPI.dll #0 .text 0x1000 0xb000 INFO: REGAPI.dll #1 .data 0xc000 0x200 INFO: REGAPI.dll #2 .rsrc 0xd000 0x400 INFO: REGAPI.dll #3 .reloc 0xe000 0x800 INFO: Loaded sections for REGAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name rsaenh.dll. INFO: Loading PE header for rsaenh.dll. INFO: Loaded PE header for rsaenh.dll. Somewhat parsed: 1 INFO: Loading sections for rsaenh.dll. INFO: rsaenh.dll #0 .text 0x1000 0x2de00 INFO: rsaenh.dll #1 .data 0x2f000 0x2a00 INFO: rsaenh.dll #2 .rsrc 0x33000 0xe00 INFO: rsaenh.dll #3 .reloc 0x34000 0x1400 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for rsaenh.dll with result: 1. 4 sections found. INFO: Initialized header for module name Apphelp.dll. INFO: Loading PE header for Apphelp.dll. INFO: Loaded PE header for Apphelp.dll. Somewhat parsed: 1 INFO: Loading sections for Apphelp.dll. INFO: Apphelp.dll #0 .text 0x1000 0x1c600 INFO: Apphelp.dll #1 .data 0x1e000 0xa00 INFO: Apphelp.dll #2 .rsrc 0x1f000 0x400 INFO: Apphelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for Apphelp.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for comctl32.dll with result: 1. 4 sections found. INFO: Initialized header for module name SPOOLSS.DLL. INFO: Loading PE header for SPOOLSS.DLL. INFO: Loaded PE header for SPOOLSS.DLL. Somewhat parsed: 1 INFO: Loading sections for SPOOLSS.DLL. INFO: SPOOLSS.DLL #0 .text 0x1000 0x10a00 INFO: SPOOLSS.DLL #1 .data 0x12000 0x800 INFO: SPOOLSS.DLL #2 .rsrc 0x13000 0x400 INFO: SPOOLSS.DLL #3 .reloc 0x14000 0xc00 INFO: Loaded sections for SPOOLSS.DLL with result: 1. 4 sections found. INFO: Initialized header for module name NTDSAPI.dll. INFO: Loading PE header for NTDSAPI.dll. INFO: Loaded PE header for msgslang.8.5.1302.1018.dll. Somewhat parsed: 1 INFO: Loading sections for msgslang.8.5.1302.1018.dll. INFO: msgslang.8.5.1302.1018.dll #0 .rsrc 0x1000 0x197c00 INFO: Loaded PE header for NTDSAPI.dll. Somewhat parsed: 1 INFO: Loading sections for NTDSAPI.dll. INFO: NTDSAPI.dll #0 .text 0x1000 0xf000 INFO: NTDSAPI.dll #1 .data 0x10000 0x600 INFO: NTDSAPI.dll #2 .rsrc 0x11000 0x400 INFO: NTDSAPI.dll #3 .reloc 0x12000 0x800 INFO: Loaded sections for RPCRT4.dll with result: 1. 5 sections found. INFO: Loaded sections for msgslang.8.5.1302.1018.dll with result: 1. 1 sections found. INFO: Initialized header for module name msgsres.dll. INFO: Loading PE header for msgsres.dll. INFO: Initialized header for module name Secur32.dll. INFO: Loading PE header for Secur32.dll. INFO: Loaded PE header for Secur32.dll. Somewhat parsed: 1 INFO: Loading sections for Secur32.dll. INFO: Secur32.dll #0 .text 0x1000 0xc200 INFO: Secur32.dll #1 .data 0xe000 0x600 INFO: Secur32.dll #2 .rsrc 0xf000 0x600 INFO: Secur32.dll #3 .reloc 0x10000 0xa00 INFO: Loaded sections for NTDSAPI.dll with result: 1. 4 sections found. INFO: Loaded sections for Secur32.dll with result: 1. 4 sections found. INFO: Initialized header for module name UxTheme.dll. INFO: Loading PE header for UxTheme.dll. INFO: Initialized header for module name WS2_32.dll. INFO: Loading PE header for WS2_32.dll. INFO: Loaded PE header for WS2_32.dll. Somewhat parsed: 1 INFO: Loading sections for WS2_32.dll. INFO: WS2_32.dll #0 .text 0x1000 0x12200 INFO: WS2_32.dll #1 .data 0x14000 0xa00 INFO: WS2_32.dll #2 .rsrc 0x15000 0x400 INFO: WS2_32.dll #3 .reloc 0x16000 0xe00 INFO: Loaded PE header for UxTheme.dll. Somewhat parsed: 1 INFO: Loading sections for UxTheme.dll. INFO: UxTheme.dll #0 .text 0x1000 0x2f200 INFO: UxTheme.dll #1 .data 0x31000 0x1000 INFO: UxTheme.dll #2 .rsrc 0x32000 0x3600 INFO: UxTheme.dll #3 .reloc 0x36000 0x1a00 INFO: Loaded sections for UxTheme.dll with result: 1. 4 sections found. INFO: Loaded PE header for msgsres.dll. Somewhat parsed: 1 INFO: Loading sections for msgsres.dll. INFO: msgsres.dll #0 .rsrc 0x1000 0x25de00 INFO: Initialized header for module name COMDLG32.dll. INFO: Loading PE header for COMDLG32.dll. INFO: Loaded PE header for COMDLG32.dll. Somewhat parsed: 1 INFO: Loading sections for COMDLG32.dll. INFO: COMDLG32.dll #0 .text 0x1000 0x30000 INFO: COMDLG32.dll #1 .data 0x31000 0xe00 INFO: COMDLG32.dll #2 .rsrc 0x35000 0x10200 INFO: COMDLG32.dll #3 .reloc 0x46000 0x2600 INFO: Loaded sections for WS2_32.dll with result: 1. 4 sections found. INFO: Initialized header for module name lmdippr8.dll. INFO: Loading PE header for lmdippr8.dll. INFO: Loaded PE header for lmdippr8.dll. Somewhat parsed: 1 INFO: Loading sections for lmdippr8.dll. INFO: lmdippr8.dll #0 .text 0x1000 0xf800 INFO: lmdippr8.dll #1 .data 0x11000 0x1a00 INFO: lmdippr8.dll #2 .rsrc 0x14000 0x600 INFO: lmdippr8.dll #3 .reloc 0x15000 0xa00 INFO: Loaded sections for msgsres.dll with result: 1. 1 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for COMDLG32.dll with result: 1. 4 sections found. INFO: Initialized header for module name GDI32.dll. INFO: Loading PE header for GDI32.dll. INFO: Loaded sections for lmdippr8.dll with result: 1. 4 sections found. INFO: Initialized header for module name msi.dll. INFO: Loading PE header for msi.dll. INFO: Loaded PE header for msi.dll. Somewhat parsed: 1 INFO: Loading sections for msi.dll. INFO: msi.dll #0 .orpc 0x1000 0x200 INFO: msi.dll #1 .text 0x2000 0x1b1600 INFO: msi.dll #2 .data 0x1b4000 0x9400 INFO: msi.dll #3 .rsrc 0x1c0000 0xeee00 INFO: msi.dll #4 .reloc 0x2af000 0xc400 INFO: Loaded PE header for GDI32.dll. Somewhat parsed: 1 INFO: Loading sections for GDI32.dll. INFO: GDI32.dll #0 .text 0x1000 0x42600 INFO: GDI32.dll #1 .data 0x44000 0x1200 INFO: GDI32.dll #2 .rsrc 0x46000 0x400 INFO: GDI32.dll #3 .reloc 0x47000 0x1a00 INFO: Loaded sections for GDI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name USER32.dll. INFO: Loading PE header for USER32.dll. INFO: Loaded PE header for USER32.dll. Somewhat parsed: 1 INFO: Loading sections for USER32.dll. INFO: USER32.dll #0 .text 0x1000 0x5f400 INFO: USER32.dll #1 .data 0x61000 0xc00 INFO: USER32.dll #2 .rsrc 0x63000 0x2a200 INFO: USER32.dll #3 .reloc 0x8e000 0x2e00 INFO: Loaded sections for USER32.dll with result: 1. 4 sections found. INFO: Loaded sections for msi.dll with result: 1. 5 sections found. INFO: Initialized header for module name SHLWAPI.dll. INFO: Loading PE header for SHLWAPI.dll. INFO: Loaded PE header for SHLWAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SHLWAPI.dll. INFO: SHLWAPI.dll #0 .text 0x1000 0x6bc00 INFO: SHLWAPI.dll #1 .data 0x6d000 0xc00 INFO: SHLWAPI.dll #2 .rsrc 0x6e000 0x1600 INFO: SHLWAPI.dll #3 .reloc 0x70000 0x5a00 INFO: Loaded sections for SHLWAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name SHELL32.dll. INFO: Loading PE header for SHELL32.dll. INFO: Loaded PE header for SHELL32.dll. Somewhat parsed: 1 INFO: Loading sections for SHELL32.dll. INFO: SHELL32.dll #0 .text 0x1000 0x1fda00 INFO: SHELL32.dll #1 .data 0x1ff000 0x1a200 INFO: SHELL32.dll #2 .rsrc 0x21c000 0x5df600 INFO: SHELL32.dll #3 .reloc 0x7fc000 0x1a600 INFO: Initialized header for module name WS2HELP.dll. INFO: Loading PE header for WS2HELP.dll. INFO: Loaded PE header for WS2HELP.dll. Somewhat parsed: 1 INFO: Loading sections for WS2HELP.dll. INFO: WS2HELP.dll #0 .text 0x1000 0x3e00 INFO: WS2HELP.dll #1 .data 0x5000 0x200 INFO: WS2HELP.dll #2 .rsrc 0x6000 0x600 INFO: WS2HELP.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for WS2HELP.dll with result: 1. 4 sections found. INFO: Initialized header for module name localspl.dll. INFO: Loading PE header for localspl.dll. INFO: Loaded PE header for localspl.dll. Somewhat parsed: 1 INFO: Loading sections for localspl.dll. INFO: localspl.dll #0 .text 0x1000 0x49e00 INFO: localspl.dll #1 .data 0x4b000 0x3200 INFO: localspl.dll #2 .rsrc 0x4f000 0x3e00 INFO: localspl.dll #3 .reloc 0x53000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Loaded sections for localspl.dll with result: 1. 4 sections found. INFO: Initialized header for module name iphlpapi.dll. INFO: Loading PE header for iphlpapi.dll. INFO: Loaded PE header for iphlpapi.dll. Somewhat parsed: 1 INFO: Loading sections for iphlpapi.dll. INFO: iphlpapi.dll #0 .text 0x1000 0x12e00 INFO: iphlpapi.dll #1 .data 0x14000 0x1000 INFO: iphlpapi.dll #2 .rsrc 0x15000 0x2200 INFO: iphlpapi.dll #3 .reloc 0x18000 0xe00 INFO: Loaded sections for iphlpapi.dll with result: 1. 4 sections found. INFO: Initialized header for module name rasadhlp.dll. INFO: Loading PE header for rasadhlp.dll. INFO: Loaded PE header for rasadhlp.dll. Somewhat parsed: 1 INFO: Loading sections for rasadhlp.dll. INFO: rasadhlp.dll #0 .text 0x1000 0x1200 INFO: rasadhlp.dll #1 .data 0x3000 0x200 INFO: rasadhlp.dll #2 .rsrc 0x4000 0x400 INFO: rasadhlp.dll #3 .reloc 0x5000 0x200 INFO: Loaded sections for rasadhlp.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINTRUST.dll. INFO: Loading PE header for WINTRUST.dll. INFO: Loaded PE header for WINTRUST.dll. Somewhat parsed: 1 INFO: Loading sections for WINTRUST.dll. INFO: WINTRUST.dll #0 .text 0x1000 0x28400 INFO: WINTRUST.dll #1 .data 0x2a000 0x400 INFO: WINTRUST.dll #2 .rsrc 0x2b000 0x1000 INFO: WINTRUST.dll #3 .reloc 0x2c000 0x1600 INFO: Loaded sections for WINTRUST.dll with result: 1. 4 sections found. INFO: Initialized header for module name filterpipelineprintproc.dll. INFO: Loading PE header for filterpipelineprintproc.dll. INFO: Loaded PE header for filterpipelineprintproc.dll. Somewhat parsed: 1 INFO: Loading sections for filterpipelineprintproc.dll. INFO: filterpipelineprintproc.dll #0 .text 0x1000 0x5000 INFO: filterpipelineprintproc.dll #1 .orpc 0x6000 0x200 INFO: filterpipelineprintproc.dll #2 .data 0x7000 0x600 INFO: filterpipelineprintproc.dll #3 .rsrc 0x8000 0x600 INFO: filterpipelineprintproc.dll #4 .reloc 0x9000 0xa00 INFO: Loaded sections for filterpipelineprintproc.dll with result: 1. 5 sections found. INFO: Initialized header for module name CRYPT32.dll. INFO: Loading PE header for CRYPT32.dll. INFO: Loaded PE header for CRYPT32.dll. Somewhat parsed: 1 INFO: Loading sections for CRYPT32.dll. INFO: CRYPT32.dll #0 .text 0x1000 0x84400 INFO: CRYPT32.dll #1 .data 0x86000 0x2400 INFO: CRYPT32.dll #2 .rsrc 0x89000 0x6800 INFO: CRYPT32.dll #3 .reloc 0x90000 0x5000 INFO: Loaded sections for CRYPT32.dll with result: 1. 4 sections found. INFO: Initialized header for module name usbmon.dll. INFO: Loading PE header for usbmon.dll. INFO: Loaded PE header for usbmon.dll. Somewhat parsed: 1 INFO: Loading sections for usbmon.dll. INFO: usbmon.dll #0 .text 0x1000 0x3000 INFO: usbmon.dll #1 .data 0x4000 0x400 INFO: usbmon.dll #2 .rsrc 0x5000 0x600 INFO: usbmon.dll #3 .reloc 0x6000 0x400 INFO: Loaded sections for usbmon.dll with result: 1. 4 sections found. INFO: Initialized header for module name winspool.drv. INFO: Loading PE header for winspool.drv. INFO: Loaded PE header for winspool.drv. Somewhat parsed: 1 INFO: Loading sections for winspool.drv. INFO: winspool.drv #0 .text 0x1000 0x20000 INFO: winspool.drv #1 .data 0x21000 0x1800 INFO: winspool.drv #2 .rsrc 0x23000 0xa00 INFO: winspool.drv #3 .reloc 0x24000 0x1600 INFO: Loaded sections for winspool.drv with result: 1. 4 sections found. INFO: Initialized header for module name netapi32.dll. INFO: Loading PE header for netapi32.dll. INFO: Loaded PE header for netapi32.dll. Somewhat parsed: 1 INFO: Loading sections for netapi32.dll. INFO: netapi32.dll #0 .text 0x1000 0x4cc00 INFO: netapi32.dll #1 .data 0x4e000 0x2800 INFO: netapi32.dll #2 .rsrc 0x51000 0x400 INFO: netapi32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for netapi32.dll with result: 1. 4 sections found. INFO: Initialized header for module name tcpmon.dll. INFO: Loading PE header for tcpmon.dll. INFO: Initialized header for module name msxml3.dll. INFO: Loading PE header for msxml3.dll. INFO: Loaded PE header for tcpmon.dll. Somewhat parsed: 1 INFO: Loading sections for tcpmon.dll. INFO: tcpmon.dll #0 .text 0x1000 0x9400 INFO: tcpmon.dll #1 .data 0xb000 0x200 INFO: tcpmon.dll #2 .rsrc 0xc000 0x1000 INFO: tcpmon.dll #3 .reloc 0xd000 0x800 INFO: Loaded PE header for msxml3.dll. Somewhat parsed: 1 INFO: Loaded sections for tcpmon.dll with result: 1. 4 sections found. INFO: Initialized header for module name mswsock.dll. INFO: Loading PE header for mswsock.dll. INFO: Loading sections for msxml3.dll. INFO: msxml3.dll #0 .text 0x1000 0xc8000 INFO: Loaded PE header for mswsock.dll. Somewhat parsed: 1 INFO: Loading sections for mswsock.dll. INFO: mswsock.dll #0 .text 0x1000 0x29400 INFO: mswsock.dll #1 SANONTCPD˝ 0x2b000 0xbe00 INFO: mswsock.dll #2 .data 0x37000 0xe00 INFO: mswsock.dll #3 .rsrc 0x39000 0x2c00 INFO: mswsock.dll #4 .reloc 0x3c000 0x2e00 INFO: msxml3.dll #1 .data 0xc9000 0xdc00 INFO: msxml3.dll #2 .rsrc 0xda000 0x2c200 INFO: msxml3.dll #3 .reloc 0x107000 0xba00 INFO: Loaded sections for SHELL32.dll with result: 1. 4 sections found. INFO: Loaded sections for mswsock.dll with result: 1. 5 sections found. INFO: Initialized header for module name WLDAP32.dll. INFO: Loading PE header for WLDAP32.dll. INFO: Loaded sections for msxml3.dll with result: 1. 4 sections found. INFO: Initialized header for module name msdmo.dll. INFO: Loading PE header for msdmo.dll. INFO: Loaded PE header for msdmo.dll. Somewhat parsed: 1 INFO: Loading sections for msdmo.dll. INFO: msdmo.dll #0 .text 0x1000 0x2a00 INFO: msdmo.dll #1 .data 0x4000 0x200 INFO: msdmo.dll #2 .rsrc 0x5000 0x400 INFO: msdmo.dll #3 .reloc 0x6000 0x400 INFO: Loaded sections for msdmo.dll with result: 1. 4 sections found. INFO: Loaded PE header for WLDAP32.dll. Somewhat parsed: 1 INFO: Loading sections for WLDAP32.dll. INFO: WLDAP32.dll #0 .text 0x1000 0x20000 INFO: WLDAP32.dll #1 .data 0x21000 0x7800 INFO: WLDAP32.dll #2 .rsrc 0x29000 0x1000 INFO: WLDAP32.dll #3 .reloc 0x2a000 0x1400 INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded sections for WLDAP32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ODBC32.dll. INFO: Loading PE header for ODBC32.dll. INFO: Loaded PE header for ODBC32.dll. Somewhat parsed: 1 INFO: Loading sections for ODBC32.dll. INFO: ODBC32.dll #0 .text 0x1000 0x37000 INFO: ODBC32.dll #1 .data 0x38000 0x1000 INFO: ODBC32.dll #2 .sdbid 0x39000 0x1000 INFO: ODBC32.dll #3 .rsrc 0x3a000 0x1000 INFO: ODBC32.dll #4 .reloc 0x3b000 0x2000 INFO: Loaded sections for ODBC32.dll with result: 1. 5 sections found. INFO: Initialized header for module name MSCTF.dll. INFO: Loading PE header for MSCTF.dll. INFO: Loaded PE header for MSCTF.dll. Somewhat parsed: 1 INFO: Loading sections for MSCTF.dll. INFO: MSCTF.dll #0 .text 0x1000 0x41800 INFO: MSCTF.dll #1 .data 0x43000 0xc00 INFO: MSCTF.dll #2 .rsrc 0x45000 0x3600 INFO: MSCTF.dll #3 .reloc 0x49000 0x2e00 INFO: Loaded sections for MSCTF.dll with result: 1. 4 sections found. INFO: Initialized header for module name ole32.dll. INFO: Loading PE header for ole32.dll. INFO: Loaded PE header for ole32.dll. Somewhat parsed: 1 INFO: Loading sections for ole32.dll. INFO: ole32.dll #0 .text 0x1000 0x11f000 INFO: ole32.dll #1 .orpc 0x120000 0x6000 INFO: ole32.dll #2 .data 0x126000 0x6600 INFO: ole32.dll #3 .rsrc 0x12d000 0x1800 INFO: ole32.dll #4 .reloc 0x12f000 0xd200 INFO: Loaded sections for ole32.dll with result: 1. 5 sections found. INFO: Initialized header for module name NETRAP.dll. INFO: Loading PE header for NETRAP.dll. INFO: Loaded PE header for NETRAP.dll. Somewhat parsed: 1 INFO: Loading sections for NETRAP.dll. INFO: NETRAP.dll #0 .text 0x1000 0x2200 INFO: NETRAP.dll #1 .data 0x4000 0x200 INFO: NETRAP.dll #2 .rsrc 0x5000 0x400 INFO: NETRAP.dll #3 .reloc 0x6000 0x200 INFO: Loaded sections for NETRAP.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name xpsp2res.dll. INFO: Loading PE header for xpsp2res.dll. INFO: Loaded PE header for xpsp2res.dll. Somewhat parsed: 1 INFO: Loading sections for xpsp2res.dll. INFO: xpsp2res.dll #0 .rsrc 0x1000 0x2c3600 INFO: Initialized header for module name appHelp.dll. INFO: Loading PE header for appHelp.dll. INFO: Loaded PE header for appHelp.dll. Somewhat parsed: 1 INFO: Loading sections for appHelp.dll. INFO: appHelp.dll #0 .text 0x1000 0x1c600 INFO: appHelp.dll #1 .data 0x1e000 0xa00 INFO: appHelp.dll #2 .rsrc 0x1f000 0x400 INFO: appHelp.dll #3 .reloc 0x20000 0x1400 INFO: Loaded sections for appHelp.dll with result: 1. 4 sections found. INFO: Initialized header for module name CLBCATQ.DLL. INFO: Loading PE header for CLBCATQ.DLL. INFO: Loaded PE header for CLBCATQ.DLL. Somewhat parsed: 1 INFO: Loading sections for CLBCATQ.DLL. INFO: CLBCATQ.DLL #0 .text 0x1000 0x71600 INFO: CLBCATQ.DLL #1 .data 0x73000 0x1e00 INFO: CLBCATQ.DLL #2 .rsrc 0x78000 0x2000 INFO: CLBCATQ.DLL #3 .reloc 0x7a000 0x4400 INFO: Loaded sections for CLBCATQ.DLL with result: 1. 4 sections found. INFO: Initialized header for module name COMRes.dll. INFO: Loading PE header for COMRes.dll. INFO: Loaded PE header for COMRes.dll. Somewhat parsed: 1 INFO: Loading sections for COMRes.dll. INFO: COMRes.dll #0 .text 0x1000 0x200 INFO: COMRes.dll #1 .data 0x2000 0x0 INFO: COMRes.dll #2 .rsrc 0x3000 0xc0e00 INFO: COMRes.dll #3 .reloc 0xc4000 0x200 INFO: Loaded sections for COMRes.dll with result: 1. 4 sections found. INFO: Initialized header for module name SETUPAPI.dll. INFO: Loading PE header for SETUPAPI.dll. INFO: Loaded PE header for SETUPAPI.dll. Somewhat parsed: 1 INFO: Loading sections for SETUPAPI.dll. INFO: SETUPAPI.dll #0 .text 0x1000 0x7d000 INFO: SETUPAPI.dll #1 .data 0x7e000 0x1800 INFO: SETUPAPI.dll #2 .rsrc 0x80000 0x6d600 INFO: SETUPAPI.dll #3 .reloc 0xee000 0x4600 INFO: Loaded sections for SETUPAPI.dll with result: 1. 4 sections found. INFO: Initialized header for module name OLEAUT32.dll. INFO: Loading PE header for OLEAUT32.dll. INFO: Loaded PE header for OLEAUT32.dll. Somewhat parsed: 1 INFO: Loading sections for OLEAUT32.dll. INFO: OLEAUT32.dll #0 .text 0x1000 0x7ea00 INFO: OLEAUT32.dll #1 .orpc 0x80000 0x400 INFO: OLEAUT32.dll #2 .data 0x81000 0x2000 INFO: OLEAUT32.dll #3 .rsrc 0x84000 0x400 INFO: OLEAUT32.dll #4 .reloc 0x85000 0x5600 INFO: Loaded sections for OLEAUT32.dll with result: 1. 5 sections found. INFO: Initialized header for module name VERSION.dll. INFO: Loading PE header for VERSION.dll. INFO: Loaded PE header for VERSION.dll. Somewhat parsed: 1 INFO: Loading sections for VERSION.dll. INFO: VERSION.dll #0 .text 0x1000 0x3a00 INFO: VERSION.dll #1 .data 0x5000 0x200 INFO: VERSION.dll #2 .rsrc 0x6000 0x600 INFO: VERSION.dll #3 .reloc 0x7000 0x400 INFO: Loaded sections for VERSION.dll with result: 1. 4 sections found. INFO: Initialized header for module name GROOVEEX.DLL. INFO: Loading PE header for GROOVEEX.DLL. INFO: Loaded PE header for GROOVEEX.DLL. Somewhat parsed: 1 INFO: Loading sections for GROOVEEX.DLL. INFO: GROOVEEX.DLL #0 .text 0x1000 0x338e00 INFO: GROOVEEX.DLL #1 .data 0x33a000 0x53200 INFO: GROOVEEX.DLL #2 .rsrc 0x390000 0x3ea00 INFO: GROOVEEX.DLL #3 .reloc 0x3cf000 0x3a000 INFO: Loaded sections for GROOVEEX.DLL with result: 1. 4 sections found. INFO: Initialized header for module name USERENV.dll. INFO: Loading PE header for USERENV.dll. INFO: Loaded PE header for USERENV.dll. Somewhat parsed: 1 INFO: Loading sections for USERENV.dll. INFO: USERENV.dll #0 .text 0x1000 0x9f600 INFO: USERENV.dll #1 .data 0xa1000 0x1e00 INFO: USERENV.dll #2 .rsrc 0xa3000 0x9800 INFO: USERENV.dll #3 .reloc 0xad000 0x6800 INFO: Loaded sections for USERENV.dll with result: 1. 4 sections found. INFO: Initialized header for module name MSVCR90.dll. INFO: Loading PE header for MSVCR90.dll. INFO: Loaded PE header for MSVCR90.dll. Somewhat parsed: 1 INFO: Loading sections for MSVCR90.dll. INFO: MSVCR90.dll #0 .text 0x1000 0x95c00 INFO: MSVCR90.dll #1 .data 0x97000 0x4400 INFO: MSVCR90.dll #2 .rsrc 0x9e000 0x400 INFO: MSVCR90.dll #3 .reloc 0x9f000 0x3800 INFO: Loaded sections for MSVCR90.dll with result: 1. 4 sections found. INFO: Initialized header for module name ATL90.DLL. INFO: Loading PE header for ATL90.DLL. INFO: Loaded sections for xpsp2res.dll with result: 1. 1 sections found. INFO: Initialized header for module name inetpp.dll. INFO: Loading PE header for inetpp.dll. INFO: Loaded PE header for inetpp.dll. Somewhat parsed: 1 INFO: Loading sections for inetpp.dll. INFO: inetpp.dll #0 .text 0x1000 0xfc00 INFO: inetpp.dll #1 .data 0x11000 0x1400 INFO: inetpp.dll #2 .rsrc 0x13000 0x600 INFO: inetpp.dll #3 .reloc 0x14000 0xc00 INFO: Loaded sections for inetpp.dll with result: 1. 4 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Loaded PE header for ATL90.DLL. Somewhat parsed: 1 INFO: Loading sections for ATL90.DLL. INFO: ATL90.DLL #0 .text 0x1000 0x1f200 INFO: ATL90.DLL #1 .data 0x21000 0x1400 INFO: ATL90.DLL #2 .rsrc 0x25000 0x2400 INFO: ATL90.DLL #3 .reloc 0x28000 0x2800 INFO: Loaded sections for ATL90.DLL with result: 1. 4 sections found. INFO: Initialized header for module name GrooveIntlResource.dll. INFO: Loading PE header for GrooveIntlResource.dll. INFO: Loaded PE header for GrooveIntlResource.dll. Somewhat parsed: 1 INFO: Loading sections for GrooveIntlResource.dll. INFO: GrooveIntlResource.dll #0 .text 0x1000 0x200 INFO: GrooveIntlResource.dll #1 .rsrc 0x2000 0x863000 INFO: Loaded sections for GrooveIntlResource.dll with result: 1. 2 sections found. INFO: Initialized header for module name NETAPI32.dll. INFO: Loading PE header for NETAPI32.dll. INFO: Loaded PE header for NETAPI32.dll. Somewhat parsed: 1 INFO: Loading sections for NETAPI32.dll. INFO: NETAPI32.dll #0 .text 0x1000 0x4cc00 INFO: NETAPI32.dll #1 .data 0x4e000 0x2800 INFO: NETAPI32.dll #2 .rsrc 0x51000 0x400 INFO: NETAPI32.dll #3 .reloc 0x52000 0x2a00 INFO: Loaded sections for NETAPI32.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntshrui.dll. INFO: Loading PE header for ntshrui.dll. INFO: Loaded PE header for ntshrui.dll. Somewhat parsed: 1 INFO: Loading sections for ntshrui.dll. INFO: ntshrui.dll #0 .text 0x1000 0xb000 INFO: ntshrui.dll #1 .data 0xc000 0x400 INFO: ntshrui.dll #2 .rsrc 0xd000 0x16e00 INFO: ntshrui.dll #3 .reloc 0x24000 0xa00 INFO: Loaded sections for ntshrui.dll with result: 1. 4 sections found. INFO: Initialized header for module name MPR.dll. INFO: Loading PE header for MPR.dll. INFO: Loaded PE header for MPR.dll. Somewhat parsed: 1 INFO: Loading sections for MPR.dll. INFO: MPR.dll #0 .text 0x1000 0xd400 INFO: MPR.dll #1 .data 0xf000 0x200 INFO: MPR.dll #2 .rsrc 0x10000 0x600 INFO: MPR.dll #3 .reloc 0x11000 0xa00 INFO: Loaded sections for MPR.dll with result: 1. 4 sections found. INFO: Initialized header for module name drprov.dll. INFO: Loading PE header for drprov.dll. INFO: Loaded PE header for drprov.dll. Somewhat parsed: 1 INFO: Loading sections for drprov.dll. INFO: drprov.dll #0 .text 0x1000 0x2800 INFO: drprov.dll #1 .data 0x4000 0x400 INFO: drprov.dll #2 .rsrc 0x5000 0x600 INFO: drprov.dll #3 .reloc 0x6000 0x200 INFO: Loaded sections for drprov.dll with result: 1. 4 sections found. INFO: Initialized header for module name ntlanman.dll. INFO: Loading PE header for ntlanman.dll. INFO: Loaded PE header for ntlanman.dll. Somewhat parsed: 1 INFO: Loading sections for ntlanman.dll. INFO: ntlanman.dll #0 .text 0x1000 0x9a00 INFO: ntlanman.dll #1 .data 0xb000 0x200 INFO: ntlanman.dll #2 .rsrc 0xc000 0x600 INFO: ntlanman.dll #3 .reloc 0xd000 0x600 INFO: Loaded sections for ntlanman.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETUI0.dll. INFO: Loading PE header for NETUI0.dll. INFO: Loaded PE header for NETUI0.dll. Somewhat parsed: 1 INFO: Loading sections for NETUI0.dll. INFO: NETUI0.dll #0 .text 0x1000 0xfc00 INFO: NETUI0.dll #1 .data 0x11000 0x200 INFO: NETUI0.dll #2 .rsrc 0x12000 0x3400 INFO: NETUI0.dll #3 .reloc 0x16000 0x600 INFO: Loaded sections for NETUI0.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETUI1.dll. INFO: Loading PE header for NETUI1.dll. INFO: Loaded PE header for NETUI1.dll. Somewhat parsed: 1 INFO: Loading sections for NETUI1.dll. INFO: NETUI1.dll #0 .text 0x1000 0x3a200 INFO: NETUI1.dll #1 .data 0x3c000 0x200 INFO: NETUI1.dll #2 .rsrc 0x3d000 0x600 INFO: NETUI1.dll #3 .reloc 0x3e000 0x1200 INFO: Loaded sections for NETUI1.dll with result: 1. 4 sections found. INFO: Initialized header for module name NETRAP.dll. INFO: Loading PE header for NETRAP.dll. INFO: Loaded PE header for NETRAP.dll. Somewhat parsed: 1 INFO: Loading sections for NETRAP.dll. INFO: NETRAP.dll #0 .text 0x1000 0x2200 INFO: NETRAP.dll #1 .data 0x4000 0x200 INFO: NETRAP.dll #2 .rsrc 0x5000 0x400 INFO: NETRAP.dll #3 .reloc 0x6000 0x200 INFO: Loaded sections for NETRAP.dll with result: 1. 4 sections found. INFO: Initialized header for module name davclnt.dll. INFO: Loading PE header for davclnt.dll. INFO: Loaded PE header for davclnt.dll. Somewhat parsed: 1 INFO: Loading sections for davclnt.dll. INFO: davclnt.dll #0 .text 0x1000 0x5200 INFO: davclnt.dll #1 .data 0x7000 0x200 INFO: davclnt.dll #2 .rsrc 0x8000 0x600 INFO: davclnt.dll #3 .reloc 0x9000 0x400 INFO: Loaded sections for davclnt.dll with result: 1. 4 sections found. INFO: Initialized header for module name WINSTA.dll. INFO: Loading PE header for WINSTA.dll. INFO: Loaded PE header for WINSTA.dll. Somewhat parsed: 1 INFO: Loading sections for WINSTA.dll. INFO: WINSTA.dll #0 .text 0x1000 0xbe00 INFO: WINSTA.dll #1 .data 0xd000 0x200 INFO: WINSTA.dll #2 .rsrc 0xe000 0x400 INFO: WINSTA.dll #3 .reloc 0xf000 0xa00 INFO: Loaded sections for WINSTA.dll with result: 1. 4 sections found. INFO: Initialized header for module name odbcint.dll. INFO: Loading PE header for odbcint.dll. INFO: Loaded PE header for odbcint.dll. Somewhat parsed: 1 INFO: Loading sections for odbcint.dll. INFO: odbcint.dll #0 .rsrc 0x1000 0x15000 INFO: odbcint.dll #1 .reloc 0x16000 0x1000 INFO: Loaded sections for odbcint.dll with result: 1. 2 sections found. INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... INFO: Looking at unattached executable heaps... INFO: Done looking at unattached executable heaps... ...cleaning up system dump factory Finished running.