[Wine] Re: App ask for admin privilege

chourmovs
Wed, 10 Sep 2008 20:07:12 -0000

Result of WINEDEBUG=+relay

0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,001444d8) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00144548) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,001445a8) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00144620) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00144680) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,001446d8) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00144740) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00144790) ret=7e8f8276
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e8f8276
0022:Ret  PE DLL (proc=0x7e910500,module=0x7e8d0000
L"crypt32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7eaea5c0,module=0x7ea80000
L"shell32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call comctl32.386(0013d2a8,7eaa4060,00000000) ret=7eaa3c3c
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013e9f8) ret=7eaa409a
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eaa409a
0022:Call KERNEL32.GetProcAddress(7e430000,7eb0b70e "CoTaskMemFree")
ret=7eaea555
0022:Ret  KERNEL32.GetProcAddress() retval=7e432e00 ret=7eaea555
0022:Call ole32.CoTaskMemFree(0013e928) ret=7eab6a69
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013e928) ret=7e464a38
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e464a38
0022:Ret  ole32.CoTaskMemFree() retval=00000001 ret=7eab6a69
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013e850) ret=7eaa409a
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eaa409a
0022:Call ole32.CoTaskMemFree(0013e830) ret=7eab6a69
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013e830) ret=7e464a38
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e464a38
0022:Ret  ole32.CoTaskMemFree() retval=00000001 ret=7eab6a69
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013d450) ret=7e97c351
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e97c351
0022:Call ntdll.RtlFreeHeap(00110000,00000000,0013d2a8) ret=7e97c36f
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e97c36f
0022:Ret  comctl32.386() retval=00000001 ret=7eaa3c3c
0022:Call comctl32.ImageList_Destroy(0013d4d8) ret=7eaa3c59
0022:Call gdi32.DeleteObject(000002c8) ret=7e98548f
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e98548f
0022:Call gdi32.DeleteObject(000002cc) ret=7e9854a1
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854a1
0022:Call gdi32.DeleteDC(000001f4) ret=7e9854b3
0022:Ret  gdi32.DeleteDC() retval=00000001 ret=7e9854b3
0022:Call gdi32.DeleteDC(00000200) ret=7e9854c5
0022:Ret  gdi32.DeleteDC() retval=00000001 ret=7e9854c5
0022:Call gdi32.DeleteObject(00000218) ret=7e9854d7
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854d7
0022:Call gdi32.DeleteObject(00000224) ret=7e9854e9
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854e9
0022:Call KERNEL32.LocalFree(0013d4d8) ret=7e9742e1
0022:Ret  KERNEL32.LocalFree() retval=00000000 ret=7e9742e1
0022:Ret  comctl32.ImageList_Destroy() retval=00000001 ret=7eaa3c59
0022:Call comctl32.ImageList_Destroy(0013de78) ret=7eaa3c72
0022:Call gdi32.DeleteObject(000002f8) ret=7e98548f
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e98548f
0022:Call gdi32.DeleteObject(000002fc) ret=7e9854a1
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854a1
0022:Call gdi32.DeleteDC(0000022c) ret=7e9854b3
0022:Ret  gdi32.DeleteDC() retval=00000001 ret=7e9854b3
0022:Call gdi32.DeleteDC(00000238) ret=7e9854c5
0022:Ret  gdi32.DeleteDC() retval=00000001 ret=7e9854c5
0022:Call gdi32.DeleteObject(00000250) ret=7e9854d7
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854d7
0022:Call gdi32.DeleteObject(0000025c) ret=7e9854e9
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e9854e9
0022:Call KERNEL32.LocalFree(0013de78) ret=7e9742e1
0022:Ret  KERNEL32.LocalFree() retval=00000000 ret=7e9742e1
0022:Ret  comctl32.ImageList_Destroy() retval=00000001 ret=7eaa3c72
0022:Call ntdll.RtlDeleteCriticalSection(7eb88180) ret=7eaa3c8e
0022:Ret  ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7eaa3c8e
0022:Call ntdll.RtlDeleteCriticalSection(7eb88060) ret=7ea95d79
0022:Ret  ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ea95d79
0022:Call KERNEL32.FreeLibrary(7e430000) ret=7eaea4e4
0022:Ret  KERNEL32.FreeLibrary() retval=00000001 ret=7eaea4e4
0022:Call KERNEL32.__wine_dll_unregister_16(7eb87704) ret=7ea902b0
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000013 ret=7ea902b0
0022:Ret  PE DLL (proc=0x7eaea5c0,module=0x7ea80000
L"shell32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e4d6aa0,module=0x7e430000
L"ole32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call user32.UnregisterClassW(7e4dd000 L"OleMainThreadWndClass
0x######## ",7e430000) ret=7e44cbf9
001c:Call KERNEL32.CloseHandle(ffffffff) ret=7eabcec4
0025:Ret  KERNEL32.Sleep() retval=00000000 ret=00403a17
0025:Call ws2_32.recvfrom(00000068,00410c70,000005db,00000000,7e26f838,7e26f814)
ret=00403827
0025:Call KERNEL32.GetTickCount() ret=7ee17cec
0025:Ret  KERNEL32.GetTickCount() retval=0000544b ret=7ee17cec
0025:Call ntdll.wine_server_handle_to_fd(00000068,00000001,7e26f704,7e26f708)
ret=7ee17de7
0025:Ret  ntdll.wine_server_handle_to_fd() retval=00000000 ret=7ee17de7
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e44cbf9
0022:Call KERNEL32.__wine_dll_unregister_16(7e4f66f8) ret=7e436854
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000014 ret=7e436854
0022:Call KERNEL32.__wine_dll_unregister_16(7e4f8c54) ret=7e437db4
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000015 ret=7e437db4
0022:Call KERNEL32.__wine_dll_unregister_16(7e4fa500) ret=7e437ef8
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000016 ret=7e437ef8
0022:Call KERNEL32.__wine_dll_unregister_16(7e4fa6a4) ret=7e4380d0
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000017 ret=7e4380d0
0022:Call KERNEL32.__wine_dll_unregister_16(7e4fabbc) ret=7e43813c
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000018 ret=7e43813c
0022:Call KERNEL32.__wine_dll_unregister_16(7e4facbc) ret=7e43825c
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000019 ret=7e43825c
0022:Call KERNEL32.__wine_dll_unregister_16(7e4fae68) ret=7e438974
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=0000001a ret=7e438974
0022:Ret  PE DLL (proc=0x7e4d6aa0,module=0x7e430000
L"ole32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e3f69e0,module=0x7e3b0000
L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7e3f69e0,module=0x7e3b0000
L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e9f1cc0,module=0x7e960000
L"comctl32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call user32.UnregisterClassW(0033f8fe L"SysAnimate32",00000000)
ret=7e96b267
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e96b267
0022:Call user32.UnregisterClassW(0033f8fe L"ComboBoxEx32",00000000)
ret=7e96dd47
0025:Call ntdll.wine_server_release_fd(00000068,0000000f) ret=7ee18051
0025:Ret  ntdll.wine_server_release_fd() retval=00000000 ret=7ee18051
0025:Ret  ws2_32.recvfrom() retval=ffffffff ret=00403827
0025:Call KERNEL32.Sleep(00000064) ret=00403a17
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e96dd47
0022:Call user32.UnregisterClassW(0033f8f4
L"SysDateTimePick32",00000000) ret=7e978545
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e978545
0022:Call user32.UnregisterClassW(0033f8fa L"flatsb_class32",00000000)
ret=7e97e1e3
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e97e1e3
0022:Call user32.UnregisterClassW(0033f900 L"SysHeader32",00000000)
ret=7e97e6b1
001c:Ret  KERNEL32.CloseHandle() retval=00000000 ret=7eabcec4
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e97e6b1
0022:Call user32.UnregisterClassW(0033f8f8
L"msctls_hotkey32",00000000) ret=7e982ed9
001c:Call ntdll.RtlFreeHeap(00110000,00000000,0011d0d8) ret=7eac0b08
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e982ed9
0022:Call user32.UnregisterClassW(0033f8fa L"SysIPAddress32",00000000)
ret=7e989d53
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0b08
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e989d53
0022:Call user32.UnregisterClassW(0033f8fc L"SysListView32",00000000)
ret=7e98b69d
001c:Call ntdll.RtlFreeHeap(00110000,00000000,0011dc38) ret=7eac0b31
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e98b69d
0022:Call user32.UnregisterClassW(0033f8fc L"SysMonthCal32",00000000)
ret=7e9a1fbd
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0b31
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9a1fbd
0022:Call user32.UnregisterClassW(0033f8fc L"NativeFontCtl",00000000)
ret=7e9a75cd
001c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eac0b5a
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0b5a
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9a75cd
0022:Call user32.UnregisterClassW(0033f906 L"SysPager",00000000)
ret=7e9a793f
001c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eac0b83
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9a793f
0022:Call user32.UnregisterClassW(0033f8f4
L"msctls_progress32",00000000) ret=7e9aa9f5
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0b83
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9aa9f5
0022:Call user32.UnregisterClassW(0033f8fc L"ReBarWindow32",00000000)
ret=7e9b3a5d
001c:Call ntdll.RtlFreeHeap(00110000,00000000,0011c648) ret=7eac0bac
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9b3a5d
0022:Call user32.UnregisterClassW(0033f8f2
L"msctls_statusbar32",00000000) ret=7e9bbe4b
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0bac
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9bbe4b
0022:Call user32.UnregisterClassW(0033f908 L"SysLink",00000000)
ret=7e9c0e39
001c:Call ntdll.RtlFreeHeap(00110000,00000000,0011c758) ret=7eac0bd5
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9c0e39
0022:Call user32.UnregisterClassW(0033f8f8
L"SysTabControl32",00000000) ret=7e9c3679
001c:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7eac0bd5
001c:Call KERNEL32.SetConsoleCtrlHandler(7eac3ad0,00000000) ret=7eac40f8
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9c3679
0022:Call user32.UnregisterClassW(0033f8f8
L"ToolbarWindow32",00000000) ret=7e9cc169
001c:Ret  KERNEL32.SetConsoleCtrlHandler() retval=00000001 ret=7eac40f8
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9cc169
0022:Call user32.DestroyIcon(000010ee) ret=7e9dbabe
0022:Ret  user32.DestroyIcon() retval=00000001 ret=7e9dbabe
0022:Call user32.DestroyIcon(000010f6) ret=7e9dbabe
0022:Ret  user32.DestroyIcon() retval=00000001 ret=7e9dbabe
0022:Call user32.DestroyIcon(000010fe) ret=7e9dbabe
0022:Ret  user32.DestroyIcon() retval=00000001 ret=7e9dbabe
0022:Call user32.UnregisterClassW(0033f8ea
L"tooltips_class32",00000000) ret=7e9dbb3e
001c:Call KERNEL32.SetUnhandledExceptionFilter(00000000) ret=7eac4107
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9dbb3e
0022:Call user32.UnregisterClassW(0033f8f4
L"msctls_trackbar32",00000000) ret=7e9e1605
001c:Ret  KERNEL32.SetUnhandledExceptionFilter() retval=7eac3b20 ret=7eac4107
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9e1605
0022:Call user32.UnregisterClassW(0033f8fc L"SysTreeView32",00000000)
ret=7e9e58bd
001c:Call KERNEL32.TlsFree(00000000) ret=7eace5da
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9e58bd
0022:Call user32.UnregisterClassW(0033f8f8
L"msctls_updown32",00000000) ret=7e9ef789
0022:Ret  user32.UnregisterClassW() retval=00000001 ret=7e9ef789
0022:Call gdi32.DeleteObject(000001b8) ret=7e977d8f
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e977d8f
0022:Call gdi32.DeleteObject(000001b4) ret=7e977da6
0022:Ret  gdi32.DeleteObject() retval=00000001 ret=7e977da6
0022:Call KERNEL32.GlobalDeleteAtom(0000c013) ret=7e977dc4
001c:Ret  KERNEL32.TlsFree() retval=00000001 ret=7eace5da
0022:Ret  KERNEL32.GlobalDeleteAtom() retval=00000000 ret=7e977dc4
0022:Call KERNEL32.FreeLibrary(7e530000) ret=7e9f1be4
0022:Ret  KERNEL32.FreeLibrary() retval=00000001 ret=7e9f1be4
0022:Ret  PE DLL (proc=0x7e9f1cc0,module=0x7e960000
L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e5460c0,module=0x7e530000
L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7e5460c0,module=0x7e530000
L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7ea5b2c0,module=0x7ea20000
L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call KERNEL32.TlsFree(00000002) ret=7ea4f05c
0022:Ret  KERNEL32.TlsFree() retval=00000001 ret=7ea4f05c
0022:Ret  PE DLL (proc=0x7ea5b2c0,module=0x7ea20000
L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7ecf8c30,module=0x7ec40000
L"user32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7ecf8c30,module=0x7ec40000
L"user32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e75d1f0,module=0x7e6f0000
L"winex11.drv",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7eae2c50,module=0x7eab0000
L"msvcrt.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Ret  PE DLL (proc=0x7e75d1f0,module=0x7e6f0000
L"winex11.drv",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7e59ee20,module=0x7e590000
L"imm32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call KERNEL32.TlsGetValue(00000000) ret=7e59c971
0022:Ret  KERNEL32.TlsGetValue() retval=00130f00 ret=7e59c971
0022:Call user32.DestroyWindow(00000000) ret=7e59c988
0022:Ret  user32.DestroyWindow() retval=00000000 ret=7e59c988
0022:Call ntdll.RtlFreeHeap(00110000,00000000,00130f00) ret=7e59c9a8
0022:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7e59c9a8
0022:Call KERNEL32.TlsFree(00000000) ret=7e59cacf
0022:Ret  KERNEL32.TlsFree() retval=00000001 ret=7e59cacf
0022:Call KERNEL32.__wine_dll_unregister_16(7e5a271c) ret=7e59719c
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000012 ret=7e59719c
0022:Ret  PE DLL (proc=0x7e59ee20,module=0x7e590000
L"imm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7ebfee80,module=0x7eba0000
L"gdi32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7ebfee80,module=0x7eba0000
L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7ee34730,module=0x7ee30000
L"wsock32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7ee34730,module=0x7ee30000
L"wsock32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7edf1270,module=0x7ede0000
L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7edf1270,module=0x7ede0000
L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7edb3b90,module=0x7ed80000
L"advapi32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7edb3b90,module=0x7ed80000
L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7ee1a8c0,module=0x7ee00000
L"ws2_32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Call KERNEL32.__wine_dll_unregister_16(7ee1fcd0) ret=7ee0a580
0022:Ret  KERNEL32.__wine_dll_unregister_16() retval=00000009 ret=7ee0a580
0022:Ret  PE DLL (proc=0x7ee1a8c0,module=0x7ee00000
L"ws2_32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7b8a3aa0,module=0x7b820000
L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7b8a3aa0,module=0x7b820000
L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
0022:Call PE DLL (proc=0x7bc78890,module=0x7bc10000
L"ntdll.dll",reason=PROCESS_DETACH,res=0x1)
0022:Ret  PE DLL (proc=0x7bc78890,module=0x7bc10000
L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7ec9a9e0,module=0x7ec60000
L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7ec9a9e0,module=0x7ec60000
L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7ec46270,module=0x7ec30000
L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7ec46270,module=0x7ec30000
L"iphlpapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7eddef50,module=0x7edd0000
L"ntoskrnl.exe",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7eddef50,module=0x7edd0000
L"ntoskrnl.exe",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7ee3ab90,module=0x7ee00000
L"advapi32.dll",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7ee3ab90,module=0x7ee00000
L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7b8a3aa0,module=0x7b820000
L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7b8a3aa0,module=0x7b820000
L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001c:Call PE DLL (proc=0x7bc78890,module=0x7bc10000
L"ntdll.dll",reason=PROCESS_DETACH,res=0x1)
001c:Ret  PE DLL (proc=0x7bc78890,module=0x7bc10000
L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1
001d:Call rpcrt4.I_RpcExceptionFilter(000006be) ret=7ee31681
001d:Ret  rpcrt4.I_RpcExceptionFilter() retval=00000001 ret=7ee31681