All pastes #383709 Raw Edit

Something

public text v1 · immutable
·published 2007-03-06 15:45 UTC
rendered paste body
========================================================================
                      Bochs x86 Emulator 2.3.cvs
              Build from CVS snapshot, after release 2.3
========================================================================
00000000000i[CTRL ] restoring 'save/config'
00000000000i[     ] reading configuration from save/config
00000000000i[     ] installing x module as the Bochs GUI
00000000000i[     ] using log file bochsout.txt
Next at t=6277490000
(0).[6277490000] ??? (physical address not available)
<bochs:1> info winproc
winproc: KdVersionBlock at linear address 0x8054c038
winproc: KdVersionBlock fetched from emulated memory
winproc: OwnerTag is 0x4742444b ('KDBG'), good
Grmpf, about to traverse list at PsActiveProcessHead: 0x805604d8
winproc: PID 0x00000004 - PPID 0x00000000 - DTB 0x00039000,0x00000000 - Filename           System - PEB at 0x00000000
winproc: PID 0x0000017c - PPID 0x00000004 - DTB 0x03cbd000,0x03cbe000 - Filename         smss.exe - PEB at 0x7ffdb000
winproc:   +     ImageBaseAddress: 0x48580000
        DllBase 0x00261ec0, EntryPoint 0x48580000, SizeOfImage 1213768904,
                 BaseDllName smss.exe
                 FullDllName \SystemRoot\System32\smss.exe
        DllBase 0x00261f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
winproc: PID 0x000001d8 - PPID 0x0000017c - DTB 0x04730000,0x04771000 - Filename        csrss.exe - PEB at 0x7ffde000
winproc:   +     ImageBaseAddress: 0x4a680000
        DllBase 0x00261ec0, EntryPoint 0x4a680000, SizeOfImage 1248334243,
                 BaseDllName csrss.exe
                 FullDllName \??\C:\WINDOWS\system32\csrss.exe
        DllBase 0x00261f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00261fb8, EntryPoint 0x75b40000, SizeOfImage 1974756843,
                 BaseDllName CSRSRV.dll
                 FullDllName C:\WINDOWS\system32\CSRSRV.dll
        DllBase 0x00262058, EntryPoint 0x75b50000, SizeOfImage 1974841430,
                 BaseDllName basesrv.dll
                 FullDllName C:\WINDOWS\system32\basesrv.dll
        DllBase 0x002620f8, EntryPoint 0x75b60000, SizeOfImage 1974891435,
                 BaseDllName winsrv.dll
                 FullDllName C:\WINDOWS\system32\winsrv.dll
        DllBase 0x00262198, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00262240, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName KERNEL32.dll
                 FullDllName C:\WINDOWS\system32\KERNEL32.dll
        DllBase 0x002622e0, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00262378, EntryPoint 0x75e90000, SizeOfImage 1978356416,
                 BaseDllName sxs.dll
                 FullDllName C:\WINDOWS\system32\sxs.dll
        DllBase 0x00262420, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x002624c0, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
winproc: PID 0x00000204 - PPID 0x0000017c - DTB 0x04877000,0x048b8000 - Filename     winlogon.exe - PEB at 0x7ffd5000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00171ec0, EntryPoint 0x01000000, SizeOfImage   17027923,
                 BaseDllName winlogon.exe
                 FullDllName \??\C:\WINDOWS\system32\winlogon.exe
        DllBase 0x00171f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00171fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00172068, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00172108, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001721a8, EntryPoint 0x776c0000, SizeOfImage 2003571152,
                 BaseDllName AUTHZ.dll
                 FullDllName C:\WINDOWS\system32\AUTHZ.dll
        DllBase 0x00172248, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x001722e8, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x00172388, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00172428, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x001724c8, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x00172568, EntryPoint 0x75940000, SizeOfImage 1972637952,
                 BaseDllName NDdeApi.dll
                 FullDllName C:\WINDOWS\system32\NDdeApi.dll
        DllBase 0x00172608, EntryPoint 0x75930000, SizeOfImage 1972572864,
                 BaseDllName PROFMAP.dll
                 FullDllName C:\WINDOWS\system32\PROFMAP.dll
        DllBase 0x001726b0, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName NETAPI32.dll
                 FullDllName C:\WINDOWS\system32\NETAPI32.dll
        DllBase 0x00172750, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001727f0, EntryPoint 0x76bf0000, SizeOfImage 1992233201,
                 BaseDllName PSAPI.DLL
                 FullDllName C:\WINDOWS\system32\PSAPI.DLL
        DllBase 0x00172890, EntryPoint 0x76bc0000, SizeOfImage 1992036736,
                 BaseDllName REGAPI.dll
                 FullDllName C:\WINDOWS\system32\REGAPI.dll
        DllBase 0x00172930, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName C:\WINDOWS\system32\Secur32.dll
        DllBase 0x001729d8, EntryPoint 0x77920000, SizeOfImage 2006062490,
                 BaseDllName SETUPAPI.dll
                 FullDllName C:\WINDOWS\system32\SETUPAPI.dll
        DllBase 0x00172a78, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x00172b18, EntryPoint 0x76360000, SizeOfImage 1983254752,
                 BaseDllName WINSTA.dll
                 FullDllName C:\WINDOWS\system32\WINSTA.dll
        DllBase 0x00172bc0, EntryPoint 0x76c30000, SizeOfImage 1992496425,
                 BaseDllName WINTRUST.dll
                 FullDllName C:\WINDOWS\system32\WINTRUST.dll
        DllBase 0x00172c68, EntryPoint 0x76c90000, SizeOfImage 1992888941,
                 BaseDllName IMAGEHLP.dll
                 FullDllName C:\WINDOWS\system32\IMAGEHLP.dll
        DllBase 0x00172d08, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\system32\WS2_32.dll
        DllBase 0x00172da8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\system32\WS2HELP.dll
        DllBase 0x00172e48, EntryPoint 0x75970000, SizeOfImage 1972836381,
                 BaseDllName MSGINA.dll
                 FullDllName C:\WINDOWS\system32\MSGINA.dll
        DllBase 0x00172ee8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00172f88, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00173030, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName COMCTL32.dll
                 FullDllName C:\WINDOWS\system32\COMCTL32.dll
        DllBase 0x001730d0, EntryPoint 0x74320000, SizeOfImage 1949496921,
                 BaseDllName ODBC32.dll
                 FullDllName C:\WINDOWS\system32\ODBC32.dll
        DllBase 0x00173178, EntryPoint 0x763b0000, SizeOfImage 1983584952,
                 BaseDllName comdlg32.dll
                 FullDllName C:\WINDOWS\system32\comdlg32.dll
        DllBase 0x001732c0, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00173360, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName odbcint.dll
                 FullDllName C:\WINDOWS\system32\odbcint.dll
        DllBase 0x00173400, EntryPoint 0x776e0000, SizeOfImage 2003785218,
                 BaseDllName SHSVCS.dll
                 FullDllName C:\WINDOWS\system32\SHSVCS.dll
        DllBase 0x00173498, EntryPoint 0x76bb0000, SizeOfImage 1991971379,
                 BaseDllName sfc.dll
                 FullDllName C:\WINDOWS\system32\sfc.dll
        DllBase 0x00173538, EntryPoint 0x76c60000, SizeOfImage 1992749210,
                 BaseDllName sfc_os.dll
                 FullDllName C:\WINDOWS\system32\sfc_os.dll
        DllBase 0x001735d8, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00173678, EntryPoint 0x77b40000, SizeOfImage 2008292371,
                 BaseDllName Apphelp.dll
                 FullDllName C:\WINDOWS\system32\Apphelp.dll
        DllBase 0x00173810, EntryPoint 0x723d0000, SizeOfImage 1916605136,
                 BaseDllName WINSCARD.DLL
                 FullDllName C:\WINDOWS\system32\WINSCARD.DLL
        DllBase 0x001738b8, EntryPoint 0x76f50000, SizeOfImage 1995781085,
                 BaseDllName WTSAPI32.dll
                 FullDllName C:\WINDOWS\system32\WTSAPI32.dll
        DllBase 0x00173910, EntryPoint 0x76600000, SizeOfImage 1986007664,
                 BaseDllName cscdll.dll
                 FullDllName C:\WINDOWS\system32\cscdll.dll
        DllBase 0x001739b8, EntryPoint 0x75950000, SizeOfImage 1972706202,
                 BaseDllName WlNotify.dll
                 FullDllName C:\WINDOWS\system32\WlNotify.dll
        DllBase 0x00173a58, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x00173b00, EntryPoint 0x73000000, SizeOfImage 1929399552,
                 BaseDllName WINSPOOL.DRV
                 FullDllName C:\WINDOWS\system32\WINSPOOL.DRV
        DllBase 0x00173b98, EntryPoint 0x71b20000, SizeOfImage 1907495498,
                 BaseDllName MPR.dll
                 FullDllName C:\WINDOWS\system32\MPR.dll
        DllBase 0x00173c40, EntryPoint 0x00f70000, SizeOfImage   16284098,
                 BaseDllName WgaLogon.dll
                 FullDllName C:\WINDOWS\system32\WgaLogon.dll
        DllBase 0x00173ce8, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x00173d88, EntryPoint 0x0ffd0000, SizeOfImage  268317921,
                 BaseDllName rsaenh.dll
                 FullDllName C:\WINDOWS\system32\rsaenh.dll
        DllBase 0x00173e28, EntryPoint 0x77690000, SizeOfImage 2003375157,
                 BaseDllName NTMARTA.DLL
                 FullDllName C:\WINDOWS\system32\NTMARTA.DLL
        DllBase 0x00173ec8, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x00173f68, EntryPoint 0x71bf0000, SizeOfImage 1908347277,
                 BaseDllName SAMLIB.dll
                 FullDllName C:\WINDOWS\system32\SAMLIB.dll
        DllBase 0x00174008, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x001740a8, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
        DllBase 0x00174148, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x001741e8, EntryPoint 0x77a20000, SizeOfImage 2007111664,
                 BaseDllName cscui.dll
                 FullDllName C:\WINDOWS\system32\cscui.dll
        DllBase 0x00174330, EntryPoint 0x76d40000, SizeOfImage 1993614945,
                 BaseDllName MPRAPI.dll
                 FullDllName C:\WINDOWS\system32\MPRAPI.dll
        DllBase 0x001743d8, EntryPoint 0x77cc0000, SizeOfImage 2009862928,
                 BaseDllName ACTIVEDS.dll
                 FullDllName C:\WINDOWS\system32\ACTIVEDS.dll
        DllBase 0x00174478, EntryPoint 0x76e10000, SizeOfImage 1994461952,
                 BaseDllName adsldpc.dll
                 FullDllName C:\WINDOWS\system32\adsldpc.dll
        DllBase 0x00174510, EntryPoint 0x76b20000, SizeOfImage 1991418080,
                 BaseDllName ATL.DLL
                 FullDllName C:\WINDOWS\system32\ATL.DLL
        DllBase 0x001745b0, EntryPoint 0x76e80000, SizeOfImage 1994925151,
                 BaseDllName rtutils.dll
                 FullDllName C:\WINDOWS\system32\rtutils.dll
        DllBase 0x00174288, EntryPoint 0x77c70000, SizeOfImage 2009548937,
                 BaseDllName msv1_0.dll
                 FullDllName C:\WINDOWS\system32\msv1_0.dll
        DllBase 0x00174650, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName C:\WINDOWS\system32\iphlpapi.dll
        DllBase 0x001747d8, EntryPoint 0x01290000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x00173718, EntryPoint 0x75e90000, SizeOfImage 1978356416,
                 BaseDllName sxs.dll
                 FullDllName C:\WINDOWS\system32\sxs.dll
winproc: PID 0x00000258 - PPID 0x00000204 - DTB 0x049cc000,0x0498d000 - Filename     services.exe - PEB at 0x7ffde000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16823756,
                 BaseDllName services.exe
                 FullDllName C:\WINDOWS\system32\services.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192108, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x001921a8, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x00192248, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x001922e8, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00192388, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x00192428, EntryPoint 0x758e0000, SizeOfImage 1972245536,
                 BaseDllName SCESRV.dll
                 FullDllName C:\WINDOWS\system32\SCESRV.dll
        DllBase 0x001924c8, EntryPoint 0x776c0000, SizeOfImage 2003571152,
                 BaseDllName AUTHZ.dll
                 FullDllName C:\WINDOWS\system32\AUTHZ.dll
        DllBase 0x00192570, EntryPoint 0x7dba0000, SizeOfImage 2109367500,
                 BaseDllName umpnpmgr.dll
                 FullDllName C:\WINDOWS\system32\umpnpmgr.dll
        DllBase 0x00192610, EntryPoint 0x76360000, SizeOfImage 1983254752,
                 BaseDllName WINSTA.dll
                 FullDllName C:\WINDOWS\system32\WINSTA.dll
        DllBase 0x001926b8, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName NETAPI32.dll
                 FullDllName C:\WINDOWS\system32\NETAPI32.dll
        DllBase 0x00192760, EntryPoint 0x5f770000, SizeOfImage 1601638730,
                 BaseDllName NCObjAPI.DLL
                 FullDllName C:\WINDOWS\system32\NCObjAPI.DLL
        DllBase 0x00192800, EntryPoint 0x76080000, SizeOfImage 1980240658,
                 BaseDllName MSVCP60.dll
                 FullDllName C:\WINDOWS\system32\MSVCP60.dll
        DllBase 0x001928a0, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x00192948, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001929e8, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x00192a88, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192b30, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x00192bd0, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x00192c70, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x00192d10, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192db0, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192e50, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x00192f98, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00193040, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x001930e0, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName secur32.dll
                 FullDllName C:\WINDOWS\system32\secur32.dll
        DllBase 0x00193180, EntryPoint 0x77b40000, SizeOfImage 2008292371,
                 BaseDllName Apphelp.dll
                 FullDllName C:\WINDOWS\system32\Apphelp.dll
        DllBase 0x00193228, EntryPoint 0x77b70000, SizeOfImage 2008491607,
                 BaseDllName eventlog.dll
                 FullDllName C:\WINDOWS\system32\eventlog.dll
        DllBase 0x001932c8, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\system32\WS2_32.dll
        DllBase 0x00193368, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\system32\WS2HELP.dll
        DllBase 0x00193408, EntryPoint 0x76bf0000, SizeOfImage 1992233201,
                 BaseDllName PSAPI.DLL
                 FullDllName C:\WINDOWS\system32\PSAPI.DLL
        DllBase 0x001934b0, EntryPoint 0x76f50000, SizeOfImage 1995781085,
                 BaseDllName wtsapi32.dll
                 FullDllName C:\WINDOWS\system32\wtsapi32.dll
winproc: PID 0x00000264 - PPID 0x00000204 - DTB 0x04a25000,0x04926000 - Filename        lsass.exe - PEB at 0x7ffde000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16782525,
NOT FETCHABLE: 0x00140012
NOT FETCHABLE: 0x003c003a
winproc: PID 0x00000360 - PPID 0x00000258 - DTB 0x06231000,0x061f2000 - Filename      svchost.exe - PEB at 0x7ffd8000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16786697,
                 BaseDllName svchost.exe
                 FullDllName C:\WINDOWS\system32\svchost.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x00192c68, EntryPoint 0x76a80000, SizeOfImage 1990831412,
                 BaseDllName rpcss.dll
                 FullDllName c:\windows\system32\rpcss.dll
        DllBase 0x00192d08, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName c:\windows\system32\Secur32.dll
        DllBase 0x00192da8, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName c:\windows\system32\WS2_32.dll
        DllBase 0x00192e48, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName c:\windows\system32\WS2HELP.dll
        DllBase 0x00192ef0, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x00192f90, EntryPoint 0x0ffd0000, SizeOfImage  268317921,
                 BaseDllName rsaenh.dll
                 FullDllName C:\WINDOWS\system32\rsaenh.dll
        DllBase 0x00193030, EntryPoint 0x71a50000, SizeOfImage 1906644173,
                 BaseDllName mswsock.dll
                 FullDllName C:\WINDOWS\system32\mswsock.dll
        DllBase 0x001930d0, EntryPoint 0x662b0000, SizeOfImage 1714322001,
                 BaseDllName hnetcfg.dll
                 FullDllName C:\WINDOWS\system32\hnetcfg.dll
        DllBase 0x00193178, EntryPoint 0x71a90000, SizeOfImage 1906906158,
                 BaseDllName wshtcpip.dll
                 FullDllName C:\WINDOWS\System32\wshtcpip.dll
        DllBase 0x00193218, EntryPoint 0x76f20000, SizeOfImage 1995615519,
                 BaseDllName DNSAPI.dll
                 FullDllName C:\WINDOWS\system32\DNSAPI.dll
        DllBase 0x001932c0, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName C:\WINDOWS\system32\iphlpapi.dll
        DllBase 0x00193360, EntryPoint 0x76fb0000, SizeOfImage 1996165469,
                 BaseDllName winrnr.dll
                 FullDllName C:\WINDOWS\System32\winrnr.dll
        DllBase 0x00193400, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x001934a8, EntryPoint 0x76fc0000, SizeOfImage 1996231727,
                 BaseDllName rasadhlp.dll
                 FullDllName C:\WINDOWS\system32\rasadhlp.dll
        DllBase 0x00193548, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x001935e8, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
winproc: PID 0x000003d4 - PPID 0x00000258 - DTB 0x0683a000,0x067fb000 - Filename      svchost.exe - PEB at 0x7ffdf000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16786697,
                 BaseDllName svchost.exe
                 FullDllName C:\WINDOWS\System32\svchost.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\System32\ShimEng.dll
        DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\System32\WINMM.dll
        DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\System32\MSACM32.dll
        DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\System32\UxTheme.dll
        DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x00192c68, EntryPoint 0x77690000, SizeOfImage 2003375157,
                 BaseDllName NTMARTA.DLL
                 FullDllName C:\WINDOWS\System32\NTMARTA.DLL
        DllBase 0x00192d08, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x00192da8, EntryPoint 0x71bf0000, SizeOfImage 1908347277,
                 BaseDllName SAMLIB.dll
                 FullDllName C:\WINDOWS\System32\SAMLIB.dll
        DllBase 0x00192e50, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\System32\xpsp2res.dll
        DllBase 0x00192ef0, EntryPoint 0x776e0000, SizeOfImage 2003785218,
                 BaseDllName shsvcs.dll
                 FullDllName c:\windows\system32\shsvcs.dll
        DllBase 0x00192f90, EntryPoint 0x76360000, SizeOfImage 1983254752,
                 BaseDllName WINSTA.dll
                 FullDllName C:\WINDOWS\System32\WINSTA.dll
        DllBase 0x00193038, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName NETAPI32.dll
                 FullDllName C:\WINDOWS\system32\NETAPI32.dll
        DllBase 0x001930e0, EntryPoint 0x76d80000, SizeOfImage 1993872381,
                 BaseDllName dhcpcsvc.dll
                 FullDllName c:\windows\system32\dhcpcsvc.dll
        DllBase 0x00193180, EntryPoint 0x76f20000, SizeOfImage 1995615519,
                 BaseDllName DNSAPI.dll
                 FullDllName c:\windows\system32\DNSAPI.dll
        DllBase 0x00193220, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName c:\windows\system32\WS2_32.dll
        DllBase 0x001932c0, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName c:\windows\system32\WS2HELP.dll
        DllBase 0x00193368, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName c:\windows\system32\iphlpapi.dll
        DllBase 0x00193408, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName c:\windows\system32\Secur32.dll
        DllBase 0x001934a8, EntryPoint 0x71a50000, SizeOfImage 1906644173,
                 BaseDllName mswsock.dll
                 FullDllName C:\WINDOWS\system32\mswsock.dll
        DllBase 0x00193548, EntryPoint 0x662b0000, SizeOfImage 1714322001,
                 BaseDllName hnetcfg.dll
                 FullDllName C:\WINDOWS\System32\hnetcfg.dll
        DllBase 0x001935f0, EntryPoint 0x71a90000, SizeOfImage 1906906158,
                 BaseDllName wshtcpip.dll
                 FullDllName C:\WINDOWS\System32\wshtcpip.dll
        DllBase 0x00193690, EntryPoint 0x0ffd0000, SizeOfImage  268317921,
                 BaseDllName rsaenh.dll
                 FullDllName C:\WINDOWS\System32\rsaenh.dll
        DllBase 0x00193730, EntryPoint 0x77620000, SizeOfImage 2003070992,
                 BaseDllName wzcsvc.dll
                 FullDllName c:\windows\system32\wzcsvc.dll
        DllBase 0x001937d0, EntryPoint 0x76e80000, SizeOfImage 1994925151,
                 BaseDllName rtutils.dll
                 FullDllName c:\windows\system32\rtutils.dll
        DllBase 0x00193868, EntryPoint 0x76d30000, SizeOfImage          0,
                 BaseDllName WMI.dll
                 FullDllName c:\windows\system32\WMI.dll
        DllBase 0x00193908, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x001939a8, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x00193a50, EntryPoint 0x76f50000, SizeOfImage 1995781085,
                 BaseDllName WTSAPI32.dll
                 FullDllName c:\windows\system32\WTSAPI32.dll
        DllBase 0x00193af0, EntryPoint 0x606b0000, SizeOfImage 1617629917,
                 BaseDllName ESENT.dll
                 FullDllName c:\windows\system32\ESENT.dll
        DllBase 0x00193b88, EntryPoint 0x76b20000, SizeOfImage 1991418080,
                 BaseDllName ATL.DLL
                 FullDllName c:\windows\system32\ATL.DLL
        DllBase 0x00193c30, EntryPoint 0x77920000, SizeOfImage 2006062490,
                 BaseDllName SETUPAPI.DLL
                 FullDllName C:\WINDOWS\System32\SETUPAPI.DLL
        DllBase 0x00193cd0, EntryPoint 0x76b70000, SizeOfImage 1991798229,
                 BaseDllName rastls.dll
                 FullDllName C:\WINDOWS\System32\rastls.dll
        DllBase 0x00193d70, EntryPoint 0x754d0000, SizeOfImage 1967986347,
                 BaseDllName CRYPTUI.dll
                 FullDllName C:\WINDOWS\system32\CRYPTUI.dll
        DllBase 0x00193e18, EntryPoint 0x76c30000, SizeOfImage 1992496425,
                 BaseDllName WINTRUST.dll
                 FullDllName C:\WINDOWS\system32\WINTRUST.dll
        DllBase 0x00193ec0, EntryPoint 0x76c90000, SizeOfImage 1992888941,
                 BaseDllName IMAGEHLP.dll
                 FullDllName C:\WINDOWS\system32\IMAGEHLP.dll
        DllBase 0x00193f60, EntryPoint 0x771b0000, SizeOfImage 1998263633,
                 BaseDllName WININET.dll
                 FullDllName C:\WINDOWS\system32\WININET.dll
        DllBase 0x00194000, EntryPoint 0x76d40000, SizeOfImage 1993614945,
                 BaseDllName MPRAPI.dll
                 FullDllName C:\WINDOWS\System32\MPRAPI.dll
        DllBase 0x001940a8, EntryPoint 0x77cc0000, SizeOfImage 2009862928,
                 BaseDllName ACTIVEDS.dll
                 FullDllName C:\WINDOWS\System32\ACTIVEDS.dll
        DllBase 0x00194148, EntryPoint 0x76e10000, SizeOfImage 1994461952,
                 BaseDllName adsldpc.dll
                 FullDllName C:\WINDOWS\System32\adsldpc.dll
        DllBase 0x001941f0, EntryPoint 0x76ee0000, SizeOfImage 1995322021,
                 BaseDllName RASAPI32.dll
                 FullDllName C:\WINDOWS\System32\RASAPI32.dll
        DllBase 0x00194290, EntryPoint 0x76e90000, SizeOfImage 1994986000,
                 BaseDllName rasman.dll
                 FullDllName C:\WINDOWS\System32\rasman.dll
        DllBase 0x00194330, EntryPoint 0x76eb0000, SizeOfImage 1995117472,
                 BaseDllName TAPI32.dll
                 FullDllName C:\WINDOWS\System32\TAPI32.dll
        DllBase 0x001943d8, EntryPoint 0x767f0000, SizeOfImage 1988039789,
                 BaseDllName SCHANNEL.dll
                 FullDllName C:\WINDOWS\System32\SCHANNEL.dll
        DllBase 0x00194480, EntryPoint 0x723d0000, SizeOfImage 1916605136,
                 BaseDllName WinSCard.dll
                 FullDllName C:\WINDOWS\System32\WinSCard.dll
        DllBase 0x00194528, EntryPoint 0x76bd0000, SizeOfImage 1992145087,
                 BaseDllName raschap.dll
                 FullDllName C:\WINDOWS\System32\raschap.dll
        DllBase 0x00194610, EntryPoint 0x77c70000, SizeOfImage 2009548937,
                 BaseDllName msv1_0.dll
                 FullDllName C:\WINDOWS\system32\msv1_0.dll
        DllBase 0x001946b0, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\System32\CLBCATQ.DLL
        DllBase 0x00194750, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\System32\COMRes.dll
        DllBase 0x001948e8, EntryPoint 0x77300000, SizeOfImage 1999681899,
                 BaseDllName schedsvc.dll
                 FullDllName c:\windows\system32\schedsvc.dll
        DllBase 0x00194848, EntryPoint 0x767a0000, SizeOfImage 1987711568,
                 BaseDllName NTDSAPI.dll
                 FullDllName c:\windows\system32\NTDSAPI.dll
        DllBase 0x00194988, EntryPoint 0x74f50000, SizeOfImage 1962218177,
                 BaseDllName MSIDLE.DLL
                 FullDllName C:\WINDOWS\System32\MSIDLE.DLL
        DllBase 0x001947f0, EntryPoint 0x708b0000, SizeOfImage 1888168459,
                 BaseDllName audiosrv.dll
                 FullDllName c:\windows\system32\audiosrv.dll
        DllBase 0x00194a30, EntryPoint 0x76e40000, SizeOfImage 1994667978,
                 BaseDllName wkssvc.dll
                 FullDllName c:\windows\system32\wkssvc.dll
        DllBase 0x00194ad8, EntryPoint 0x71d40000, SizeOfImage 1909723837,
                 BaseDllName actxprxy.dll
                 FullDllName C:\WINDOWS\system32\actxprxy.dll
        DllBase 0x00194b80, EntryPoint 0x76ce0000, SizeOfImage 1993216992,
                 BaseDllName cryptsvc.dll
                 FullDllName c:\windows\system32\cryptsvc.dll
        DllBase 0x00194c20, EntryPoint 0x77b90000, SizeOfImage 2008619030,
                 BaseDllName certcli.dll
                 FullDllName c:\windows\system32\certcli.dll
        DllBase 0x00194cc0, EntryPoint 0x767c0000, SizeOfImage 1987845943,
                 BaseDllName w32time.dll
                 FullDllName c:\windows\system32\w32time.dll
        DllBase 0x00194d60, EntryPoint 0x76080000, SizeOfImage 1980240658,
                 BaseDllName MSVCP60.dll
                 FullDllName c:\windows\system32\MSVCP60.dll
        DllBase 0x00194e00, EntryPoint 0x75070000, SizeOfImage 1963400639,
                 BaseDllName trkwks.dll
                 FullDllName c:\windows\system32\trkwks.dll
        DllBase 0x00194ea0, EntryPoint 0x751a0000, SizeOfImage 1964699137,
                 BaseDllName srsvc.dll
                 FullDllName c:\windows\system32\srsvc.dll
        DllBase 0x00194f48, EntryPoint 0x74ad0000, SizeOfImage 1957499730,
                 BaseDllName POWRPROF.dll
                 FullDllName c:\windows\system32\POWRPROF.dll
        DllBase 0x00194ff0, EntryPoint 0x73d20000, SizeOfImage 1943146933,
                 BaseDllName seclogon.dll
                 FullDllName c:\windows\system32\seclogon.dll
        DllBase 0x00195090, EntryPoint 0x77d00000, SizeOfImage 2010127023,
                 BaseDllName netman.dll
                 FullDllName c:\windows\system32\netman.dll
        DllBase 0x00195138, EntryPoint 0x76400000, SizeOfImage 1983955113,
                 BaseDllName netshell.dll
                 FullDllName c:\windows\system32\netshell.dll
        DllBase 0x001951d8, EntryPoint 0x76c00000, SizeOfImage 1992344278,
                 BaseDllName credui.dll
                 FullDllName c:\windows\system32\credui.dll
        DllBase 0x00195278, EntryPoint 0x73030000, SizeOfImage 1929591385,
                 BaseDllName WZCSAPI.DLL
                 FullDllName c:\windows\system32\WZCSAPI.DLL
        DllBase 0x00195318, EntryPoint 0x75090000, SizeOfImage 1963567846,
                 BaseDllName srvsvc.dll
                 FullDllName c:\windows\system32\srvsvc.dll
        DllBase 0x001953e0, EntryPoint 0x74f40000, SizeOfImage 1962155692,
                 BaseDllName pchsvc.dll
                 FullDllName c:\windows\pchealth\helpctr\binaries\pchsvc.dll
        DllBase 0x00195518, EntryPoint 0x77710000, SizeOfImage 2004079882,
                 BaseDllName es.dll
                 FullDllName c:\windows\system32\es.dll
        DllBase 0x00195480, EntryPoint 0x74f80000, SizeOfImage 1962425078,
                 BaseDllName ersvc.dll
                 FullDllName c:\windows\system32\ersvc.dll
        DllBase 0x001955c0, EntryPoint 0x74f90000, SizeOfImage 1962479905,
                 BaseDllName dmserver.dll
                 FullDllName c:\windows\system32\dmserver.dll
        DllBase 0x00195668, EntryPoint 0x59490000, SizeOfImage 1498009826,
                 BaseDllName wmisvc.dll
                 FullDllName c:\windows\system32\wbem\wmisvc.dll
        DllBase 0x00195708, EntryPoint 0x753e0000, SizeOfImage 1967166274,
                 BaseDllName VSSAPI.DLL
                 FullDllName C:\WINDOWS\system32\VSSAPI.DLL
        DllBase 0x001957b0, EntryPoint 0x50000000, SizeOfImage 1342181602,
                 BaseDllName wuauserv.dll
                 FullDllName c:\windows\system32\wuauserv.dll
        DllBase 0x00195850, EntryPoint 0x50040000, SizeOfImage 1343441783,
                 BaseDllName wuaueng.dll
                 FullDllName C:\WINDOWS\system32\wuaueng.dll
        DllBase 0x001958f0, EntryPoint 0x75260000, SizeOfImage 1965503152,
                 BaseDllName ADVPACK.dll
                 FullDllName C:\WINDOWS\System32\ADVPACK.dll
        DllBase 0x00195998, EntryPoint 0x76780000, SizeOfImage 1987580272,
                 BaseDllName SHFOLDER.dll
                 FullDllName C:\WINDOWS\System32\SHFOLDER.dll
        DllBase 0x00195a40, EntryPoint 0x73000000, SizeOfImage 1929399552,
                 BaseDllName WINSPOOL.DRV
                 FullDllName C:\WINDOWS\System32\WINSPOOL.DRV
        DllBase 0x00195ae0, EntryPoint 0x4d4f0000, SizeOfImage 1297295142,
                 BaseDllName WINHTTP.dll
                 FullDllName C:\WINDOWS\System32\WINHTTP.dll
        DllBase 0x00195b80, EntryPoint 0x75150000, SizeOfImage 1964314768,
                 BaseDllName Cabinet.dll
                 FullDllName C:\WINDOWS\System32\Cabinet.dll
        DllBase 0x00195c28, EntryPoint 0x600a0000, SizeOfImage 1611289006,
                 BaseDllName mspatcha.dll
                 FullDllName C:\WINDOWS\System32\mspatcha.dll
        DllBase 0x00195cc0, EntryPoint 0x76bb0000, SizeOfImage 1991971379,
                 BaseDllName sfc.dll
                 FullDllName C:\WINDOWS\System32\sfc.dll
        DllBase 0x00195d60, EntryPoint 0x76c60000, SizeOfImage 1992749210,
                 BaseDllName sfc_os.dll
                 FullDllName C:\WINDOWS\System32\sfc_os.dll
        DllBase 0x00195e00, EntryPoint 0x722d0000, SizeOfImage 1915556515,
                 BaseDllName sens.dll
                 FullDllName c:\windows\system32\sens.dll
        DllBase 0x00195ea0, EntryPoint 0x76da0000, SizeOfImage 1994003852,
                 BaseDllName browser.dll
                 FullDllName c:\windows\system32\browser.dll
        DllBase 0x00195f40, EntryPoint 0x4c0a0000, SizeOfImage 1275747947,
                 BaseDllName wscsvc.dll
                 FullDllName c:\windows\system32\wscsvc.dll
        DllBase 0x00195fd8, EntryPoint 0x745e0000, SizeOfImage 1952329829,
                 BaseDllName msi.dll
                 FullDllName c:\windows\system32\msi.dll
        DllBase 0x00196088, EntryPoint 0x74ef0000, SizeOfImage 1961824879,
                 BaseDllName wbemprox.dll
                 FullDllName C:\WINDOWS\system32\wbem\wbemprox.dll
        DllBase 0x00196188, EntryPoint 0x75290000, SizeOfImage 1965688573,
                 BaseDllName wbemcomn.dll
                 FullDllName C:\WINDOWS\system32\wbem\wbemcomn.dll
        DllBase 0x00196238, EntryPoint 0x762c0000, SizeOfImage 1982931911,
                 BaseDllName wbemcore.dll
                 FullDllName C:\WINDOWS\System32\Wbem\wbemcore.dll
        DllBase 0x001962d8, EntryPoint 0x75310000, SizeOfImage 1966331650,
                 BaseDllName esscli.dll
                 FullDllName C:\WINDOWS\System32\Wbem\esscli.dll
        DllBase 0x001963d8, EntryPoint 0x75690000, SizeOfImage 1970096555,
                 BaseDllName FastProx.dll
                 FullDllName C:\WINDOWS\System32\Wbem\FastProx.dll
        DllBase 0x00196470, EntryPoint 0x75e90000, SizeOfImage 1978356416,
                 BaseDllName SXS.DLL
                 FullDllName C:\WINDOWS\System32\SXS.DLL
        DllBase 0x001964c8, EntryPoint 0x66460000, SizeOfImage 1716074020,
                 BaseDllName ipnathlp.dll
                 FullDllName c:\windows\system32\ipnathlp.dll
        DllBase 0x00196520, EntryPoint 0x776c0000, SizeOfImage 2003571152,
                 BaseDllName AUTHZ.dll
                 FullDllName c:\windows\system32\AUTHZ.dll
        DllBase 0x00196680, EntryPoint 0x75020000, SizeOfImage 1963127777,
                 BaseDllName wmiutils.dll
                 FullDllName C:\WINDOWS\system32\wbem\wmiutils.dll
        DllBase 0x00196720, EntryPoint 0x76620000, SizeOfImage 1986150637,
                 BaseDllName comsvcs.dll
                 FullDllName C:\WINDOWS\system32\comsvcs.dll
        DllBase 0x001967c0, EntryPoint 0x75130000, SizeOfImage 1964184742,
                 BaseDllName colbact.DLL
                 FullDllName C:\WINDOWS\system32\colbact.DLL
        DllBase 0x00196860, EntryPoint 0x750f0000, SizeOfImage 1963922085,
                 BaseDllName MTXCLU.DLL
                 FullDllName C:\WINDOWS\system32\MTXCLU.DLL
        DllBase 0x00196900, EntryPoint 0x71ad0000, SizeOfImage 1907167289,
                 BaseDllName WSOCK32.dll
                 FullDllName C:\WINDOWS\system32\WSOCK32.dll
        DllBase 0x001969a0, EntryPoint 0x76d10000, SizeOfImage 1993413081,
                 BaseDllName CLUSAPI.DLL
                 FullDllName C:\WINDOWS\System32\CLUSAPI.DLL
        DllBase 0x00196a48, EntryPoint 0x750b0000, SizeOfImage 1963659940,
                 BaseDllName RESUTILS.DLL
                 FullDllName C:\WINDOWS\System32\RESUTILS.DLL
        DllBase 0x00196af8, EntryPoint 0x75200000, SizeOfImage 1965172023,
                 BaseDllName repdrvfs.dll
                 FullDllName C:\WINDOWS\system32\wbem\repdrvfs.dll
        DllBase 0x00196c48, EntryPoint 0x597f0000, SizeOfImage 1501802666,
                 BaseDllName wmiprvsd.dll
                 FullDllName C:\WINDOWS\system32\wbem\wmiprvsd.dll
        DllBase 0x00196cf0, EntryPoint 0x5f770000, SizeOfImage 1601638730,
                 BaseDllName NCObjAPI.DLL
                 FullDllName C:\WINDOWS\system32\NCObjAPI.DLL
        DllBase 0x00196d90, EntryPoint 0x76de0000, SizeOfImage 1994314490,
                 BaseDllName upnp.dll
                 FullDllName C:\WINDOWS\system32\upnp.dll
        DllBase 0x00196e30, EntryPoint 0x74f00000, SizeOfImage 1961907764,
                 BaseDllName SSDPAPI.dll
                 FullDllName C:\WINDOWS\system32\SSDPAPI.dll
        DllBase 0x00196ed8, EntryPoint 0x76fc0000, SizeOfImage 1996231727,
                 BaseDllName rasadhlp.dll
                 FullDllName C:\WINDOWS\System32\rasadhlp.dll
        DllBase 0x00196f78, EntryPoint 0x77b40000, SizeOfImage 2008292371,
                 BaseDllName Apphelp.dll
                 FullDllName C:\WINDOWS\system32\Apphelp.dll
        DllBase 0x00197028, EntryPoint 0x75390000, SizeOfImage 1966864406,
                 BaseDllName wbemess.dll
                 FullDllName C:\WINDOWS\system32\wbem\wbemess.dll
        DllBase 0x00197168, EntryPoint 0x506a0000, SizeOfImage 1349347889,
                 BaseDllName wuapi.dll
                 FullDllName C:\WINDOWS\system32\wuapi.dll
        DllBase 0x00197208, EntryPoint 0x768d0000, SizeOfImage 1989180749,
                 BaseDllName RASDLG.dll
                 FullDllName C:\WINDOWS\System32\RASDLG.dll
        DllBase 0x001972b0, EntryPoint 0x5f740000, SizeOfImage 1601468462,
                 BaseDllName ncprov.dll
                 FullDllName C:\WINDOWS\system32\wbem\ncprov.dll
        DllBase 0x00197350, EntryPoint 0x50640000, SizeOfImage 1348763569,
                 BaseDllName wups.dll
                 FullDllName C:\WINDOWS\system32\wups.dll
        DllBase 0x001974a0, EntryPoint 0x76fb0000, SizeOfImage 1996165469,
                 BaseDllName winrnr.dll
                 FullDllName C:\WINDOWS\System32\winrnr.dll
winproc: PID 0x000004d8 - PPID 0x00000258 - DTB 0x07fb0000,0x07ff1000 - Filename      svchost.exe - PEB at 0x7ffde000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16786697,
                 BaseDllName svchost.exe
                 FullDllName C:\WINDOWS\system32\svchost.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001921a8, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x00192250, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001922f0, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00192390, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00192430, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x001924d0, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192570, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x00192c68, EntryPoint 0x77690000, SizeOfImage 2003375157,
                 BaseDllName NTMARTA.DLL
                 FullDllName C:\WINDOWS\system32\NTMARTA.DLL
        DllBase 0x00192d08, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x00192da8, EntryPoint 0x71bf0000, SizeOfImage 1908347277,
                 BaseDllName SAMLIB.dll
                 FullDllName C:\WINDOWS\system32\SAMLIB.dll
        DllBase 0x00192e50, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x00192ef0, EntryPoint 0x74c40000, SizeOfImage 1959008251,
                 BaseDllName lmhsvc.dll
                 FullDllName c:\windows\system32\lmhsvc.dll
        DllBase 0x00192f98, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName c:\windows\system32\iphlpapi.dll
        DllBase 0x00193038, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName c:\windows\system32\WS2_32.dll
        DllBase 0x001930d8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName c:\windows\system32\WS2HELP.dll
        DllBase 0x00193178, EntryPoint 0x5a6e0000, SizeOfImage 1517211335,
                 BaseDllName webclnt.dll
                 FullDllName c:\windows\system32\webclnt.dll
        DllBase 0x00193218, EntryPoint 0x771b0000, SizeOfImage 1998263633,
                 BaseDllName WININET.dll
                 FullDllName C:\WINDOWS\system32\WININET.dll
        DllBase 0x001932b8, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x00193358, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x001933f8, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName C:\WINDOWS\system32\Secur32.dll
        DllBase 0x00193498, EntryPoint 0x71ad0000, SizeOfImage 1907167289,
                 BaseDllName wsock32.dll
                 FullDllName C:\WINDOWS\system32\wsock32.dll
        DllBase 0x00193538, EntryPoint 0x76af0000, SizeOfImage 1991185097,
                 BaseDllName regsvc.dll
                 FullDllName c:\windows\system32\regsvc.dll
        DllBase 0x001935d8, EntryPoint 0x765e0000, SizeOfImage 1985880687,
                 BaseDllName ssdpsrv.dll
                 FullDllName c:\windows\system32\ssdpsrv.dll
        DllBase 0x00193678, EntryPoint 0x662b0000, SizeOfImage 1714322001,
                 BaseDllName hnetcfg.dll
                 FullDllName C:\WINDOWS\system32\hnetcfg.dll
        DllBase 0x00193718, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x001937b8, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
        DllBase 0x00193858, EntryPoint 0x71a50000, SizeOfImage 1906644173,
                 BaseDllName mswsock.dll
                 FullDllName C:\WINDOWS\system32\mswsock.dll
        DllBase 0x00193900, EntryPoint 0x71a90000, SizeOfImage 1906906158,
                 BaseDllName wshtcpip.dll
                 FullDllName C:\WINDOWS\System32\wshtcpip.dll
winproc: PID 0x000005cc - PPID 0x00000258 - DTB 0x0899a000,0x0895b000 - Filename      spoolsv.exe - PEB at 0x7ffdf000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16795163,
                 BaseDllName spoolsv.exe
                 FullDllName C:\WINDOWS\system32\spoolsv.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192068, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00192108, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001921a8, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x00192248, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x001922e8, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192388, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x00192430, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001924d0, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x00192570, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192618, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x001926b8, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x00192758, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x001927f8, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192898, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192938, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001929d8, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x00192b20, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00192bc8, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x00192c68, EntryPoint 0x742e0000, SizeOfImage 1949194787,
                 BaseDllName SPOOLSS.DLL
                 FullDllName C:\WINDOWS\system32\SPOOLSS.DLL
        DllBase 0x00192d08, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\system32\WS2_32.dll
        DllBase 0x00192da8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\system32\WS2HELP.dll
        DllBase 0x00192ee8, EntryPoint 0x76f20000, SizeOfImage 1995615519,
                 BaseDllName DNSAPI.dll
                 FullDllName C:\WINDOWS\system32\DNSAPI.dll
        DllBase 0x00192f90, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName C:\WINDOWS\system32\iphlpapi.dll
        DllBase 0x00193178, EntryPoint 0x76fc0000, SizeOfImage 1996231727,
                 BaseDllName rasadhlp.dll
                 FullDllName C:\WINDOWS\system32\rasadhlp.dll
        DllBase 0x00192e48, EntryPoint 0x75bb0000, SizeOfImage 1975322525,
                 BaseDllName localspl.dll
                 FullDllName C:\WINDOWS\system32\localspl.dll
        DllBase 0x001930d0, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName C:\WINDOWS\system32\Secur32.dll
        DllBase 0x00193030, EntryPoint 0x76c60000, SizeOfImage 1992749210,
                 BaseDllName sfc_os.dll
                 FullDllName C:\WINDOWS\system32\sfc_os.dll
        DllBase 0x00193270, EntryPoint 0x76c30000, SizeOfImage 1992496425,
                 BaseDllName WINTRUST.dll
                 FullDllName C:\WINDOWS\system32\WINTRUST.dll
        DllBase 0x001932c8, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x00193368, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x00193410, EntryPoint 0x76c90000, SizeOfImage 1992888941,
                 BaseDllName IMAGEHLP.dll
                 FullDllName C:\WINDOWS\system32\IMAGEHLP.dll
        DllBase 0x001934b8, EntryPoint 0x73000000, SizeOfImage 1929399552,
                 BaseDllName winspool.drv
                 FullDllName C:\WINDOWS\system32\winspool.drv
        DllBase 0x00193560, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName netapi32.dll
                 FullDllName C:\WINDOWS\system32\netapi32.dll
        DllBase 0x00193600, EntryPoint 0x742a0000, SizeOfImage 1948914953,
                 BaseDllName cnbjmon.dll
                 FullDllName C:\WINDOWS\system32\cnbjmon.dll
        DllBase 0x001936a0, EntryPoint 0x74280000, SizeOfImage 1948785005,
                 BaseDllName pjlmon.dll
                 FullDllName C:\WINDOWS\system32\pjlmon.dll
        DllBase 0x00193740, EntryPoint 0x72400000, SizeOfImage 1916801573,
                 BaseDllName tcpmon.dll
                 FullDllName C:\WINDOWS\system32\tcpmon.dll
        DllBase 0x001937e0, EntryPoint 0x723f0000, SizeOfImage 1916735963,
                 BaseDllName usbmon.dll
                 FullDllName C:\WINDOWS\system32\usbmon.dll
        DllBase 0x00193888, EntryPoint 0x71a50000, SizeOfImage 1906644173,
                 BaseDllName mswsock.dll
                 FullDllName C:\WINDOWS\System32\mswsock.dll
        DllBase 0x00193970, EntryPoint 0x76fb0000, SizeOfImage 1996165469,
                 BaseDllName winrnr.dll
                 FullDllName C:\WINDOWS\System32\winrnr.dll
        DllBase 0x00193a10, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x00193a68, EntryPoint 0x75c10000, SizeOfImage 1975599131,
                 BaseDllName win32spl.dll
                 FullDllName C:\WINDOWS\system32\win32spl.dll
        DllBase 0x00193b08, EntryPoint 0x71c80000, SizeOfImage 1908936821,
                 BaseDllName NETRAP.dll
                 FullDllName C:\WINDOWS\system32\NETRAP.dll
        DllBase 0x00193ba8, EntryPoint 0x767a0000, SizeOfImage 1987711568,
                 BaseDllName NTDSAPI.dll
                 FullDllName C:\WINDOWS\system32\NTDSAPI.dll
        DllBase 0x00193c48, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x00193ce8, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
        DllBase 0x00193d90, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x00193e30, EntryPoint 0x74300000, SizeOfImage 1949307632,
                 BaseDllName inetpp.dll
                 FullDllName C:\WINDOWS\system32\inetpp.dll
winproc: PID 0x00000600 - PPID 0x00000588 - DTB 0x08c7f000,0x09000000 - Filename     explorer.exe - PEB at 0x7ffdb000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16900686,
                 BaseDllName Explorer.EXE
                 FullDllName C:\WINDOWS\Explorer.EXE
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x00192108, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x001921a8, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x00192248, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x001922e8, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00192388, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192428, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x001924c8, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x00192570, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x00192618, EntryPoint 0x75f80000, SizeOfImage 1979201246,
                 BaseDllName BROWSEUI.dll
                 FullDllName C:\WINDOWS\system32\BROWSEUI.dll
        DllBase 0x001926b8, EntryPoint 0x7e290000, SizeOfImage 2116705889,
                 BaseDllName SHDOCVW.dll
                 FullDllName C:\WINDOWS\system32\SHDOCVW.dll
        DllBase 0x00192758, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x001927f8, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x00192898, EntryPoint 0x754d0000, SizeOfImage 1967986347,
                 BaseDllName CRYPTUI.dll
                 FullDllName C:\WINDOWS\system32\CRYPTUI.dll
        DllBase 0x00192940, EntryPoint 0x76c30000, SizeOfImage 1992496425,
                 BaseDllName WINTRUST.dll
                 FullDllName C:\WINDOWS\system32\WINTRUST.dll
        DllBase 0x001929e8, EntryPoint 0x76c90000, SizeOfImage 1992888941,
                 BaseDllName IMAGEHLP.dll
                 FullDllName C:\WINDOWS\system32\IMAGEHLP.dll
        DllBase 0x00192a90, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName NETAPI32.dll
                 FullDllName C:\WINDOWS\system32\NETAPI32.dll
        DllBase 0x00192b30, EntryPoint 0x771b0000, SizeOfImage 1998263633,
                 BaseDllName WININET.dll
                 FullDllName C:\WINDOWS\system32\WININET.dll
        DllBase 0x00192bd0, EntryPoint 0x76f60000, SizeOfImage 1995837744,
                 BaseDllName WLDAP32.dll
                 FullDllName C:\WINDOWS\system32\WLDAP32.dll
        DllBase 0x00192c70, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x00192d10, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x00192db0, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x00192e58, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x00192ef8, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x00192f98, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x00193038, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x00193180, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00193228, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x001932d0, EntryPoint 0x77b40000, SizeOfImage 2008292371,
                 BaseDllName appHelp.dll
                 FullDllName C:\WINDOWS\system32\appHelp.dll
        DllBase 0x001933b8, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x00193458, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
        DllBase 0x001934f8, EntryPoint 0x77a20000, SizeOfImage 2007111664,
                 BaseDllName cscui.dll
                 FullDllName C:\WINDOWS\System32\cscui.dll
        DllBase 0x00193598, EntryPoint 0x76600000, SizeOfImage 1986007664,
                 BaseDllName CSCDLL.dll
                 FullDllName C:\WINDOWS\System32\CSCDLL.dll
        DllBase 0x001936d8, EntryPoint 0x5ba60000, SizeOfImage 1537815282,
                 BaseDllName themeui.dll
                 FullDllName C:\WINDOWS\system32\themeui.dll
        DllBase 0x00193778, EntryPoint 0x77fe0000, SizeOfImage 2013143345,
                 BaseDllName Secur32.dll
                 FullDllName C:\WINDOWS\system32\Secur32.dll
        DllBase 0x00193818, EntryPoint 0x76380000, SizeOfImage 1983385868,
                 BaseDllName MSIMG32.dll
                 FullDllName C:\WINDOWS\system32\MSIMG32.dll
        DllBase 0x00193638, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x001938c0, EntryPoint 0x71d40000, SizeOfImage 1909723837,
                 BaseDllName actxprxy.dll
                 FullDllName C:\WINDOWS\system32\actxprxy.dll
        DllBase 0x00193918, EntryPoint 0x71bf0000, SizeOfImage 1908347277,
                 BaseDllName SAMLIB.dll
                 FullDllName C:\WINDOWS\system32\SAMLIB.dll
        DllBase 0x001939c0, EntryPoint 0x77920000, SizeOfImage 2006062490,
                 BaseDllName SETUPAPI.dll
                 FullDllName C:\WINDOWS\system32\SETUPAPI.dll
        DllBase 0x00193a68, EntryPoint 0x76400000, SizeOfImage 1983955113,
                 BaseDllName NETSHELL.dll
                 FullDllName C:\WINDOWS\system32\NETSHELL.dll
        DllBase 0x00193b08, EntryPoint 0x76e80000, SizeOfImage 1994925151,
                 BaseDllName rtutils.dll
                 FullDllName C:\WINDOWS\system32\rtutils.dll
        DllBase 0x00193ba8, EntryPoint 0x76c00000, SizeOfImage 1992344278,
                 BaseDllName credui.dll
                 FullDllName C:\WINDOWS\system32\credui.dll
        DllBase 0x00193c48, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\system32\WS2_32.dll
        DllBase 0x00193ce8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\system32\WS2HELP.dll
        DllBase 0x00193d80, EntryPoint 0x76b20000, SizeOfImage 1991418080,
                 BaseDllName ATL.DLL
                 FullDllName C:\WINDOWS\system32\ATL.DLL
        DllBase 0x00193e28, EntryPoint 0x76d60000, SizeOfImage 1993757450,
                 BaseDllName iphlpapi.dll
                 FullDllName C:\WINDOWS\system32\iphlpapi.dll
        DllBase 0x00193ec8, EntryPoint 0x76360000, SizeOfImage 1983254752,
                 BaseDllName WINSTA.dll
                 FullDllName C:\WINDOWS\system32\WINSTA.dll
        DllBase 0x00193f70, EntryPoint 0x74b30000, SizeOfImage 1957894166,
                 BaseDllName webcheck.dll
                 FullDllName C:\WINDOWS\system32\webcheck.dll
        DllBase 0x00194010, EntryPoint 0x71ad0000, SizeOfImage 1907167289,
                 BaseDllName WSOCK32.dll
                 FullDllName C:\WINDOWS\system32\WSOCK32.dll
        DllBase 0x001940b8, EntryPoint 0x76280000, SizeOfImage 1982340440,
                 BaseDllName stobject.dll
                 FullDllName C:\WINDOWS\system32\stobject.dll
        DllBase 0x00194160, EntryPoint 0x74af0000, SizeOfImage 1957630758,
                 BaseDllName BatMeter.dll
                 FullDllName C:\WINDOWS\system32\BatMeter.dll
        DllBase 0x00194208, EntryPoint 0x74ad0000, SizeOfImage 1957499730,
                 BaseDllName POWRPROF.dll
                 FullDllName C:\WINDOWS\system32\POWRPROF.dll
        DllBase 0x001942b0, EntryPoint 0x76f50000, SizeOfImage 1995781085,
                 BaseDllName WTSAPI32.dll
                 FullDllName C:\WINDOWS\system32\WTSAPI32.dll
        DllBase 0x00194348, EntryPoint 0x71b20000, SizeOfImage 1907495498,
                 BaseDllName MPR.dll
                 FullDllName C:\WINDOWS\system32\MPR.dll
        DllBase 0x001943e8, EntryPoint 0x75f60000, SizeOfImage 1979060513,
                 BaseDllName drprov.dll
                 FullDllName C:\WINDOWS\System32\drprov.dll
        DllBase 0x00194490, EntryPoint 0x71c10000, SizeOfImage 1908479813,
                 BaseDllName ntlanman.dll
                 FullDllName C:\WINDOWS\System32\ntlanman.dll
        DllBase 0x00194530, EntryPoint 0x71cd0000, SizeOfImage 1909288257,
                 BaseDllName NETUI0.dll
                 FullDllName C:\WINDOWS\System32\NETUI0.dll
        DllBase 0x001945d0, EntryPoint 0x71c90000, SizeOfImage 1909101749,
                 BaseDllName NETUI1.dll
                 FullDllName C:\WINDOWS\System32\NETUI1.dll
        DllBase 0x00194670, EntryPoint 0x71c80000, SizeOfImage 1908936821,
                 BaseDllName NETRAP.dll
                 FullDllName C:\WINDOWS\System32\NETRAP.dll
        DllBase 0x00194710, EntryPoint 0x75f70000, SizeOfImage 1979126775,
                 BaseDllName davclnt.dll
                 FullDllName C:\WINDOWS\System32\davclnt.dll
winproc: PID 0x0000021c - PPID 0x000003d4 - DTB 0x0be81000,0x0be42000 - Filename      wuauclt.exe - PEB at 0x7ffd6000
winproc:   +     ImageBaseAddress: 0x00400000
        DllBase 0x001a1ec0, EntryPoint 0x00400000, SizeOfImage    4244888,
                 BaseDllName wuauclt.exe
                 FullDllName C:\WINDOWS\system32\wuauclt.exe
        DllBase 0x001a1f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x001a1fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x001a2060, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x001a20f8, EntryPoint 0x76b20000, SizeOfImage 1991418080,
                 BaseDllName ATL.DLL
                 FullDllName C:\WINDOWS\system32\ATL.DLL
        DllBase 0x001a2198, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x001a2238, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x001a22e0, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x001a2380, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x001a24c8, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName COMCTL32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
        DllBase 0x001a2568, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x001a2608, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x001a26b0, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x001a2750, EntryPoint 0x50940000, SizeOfImage 1351895412,
                 BaseDllName wuaucpl.cpl
                 FullDllName C:\WINDOWS\system32\wuaucpl.cpl
        DllBase 0x001a27f8, EntryPoint 0x76780000, SizeOfImage 1987580272,
                 BaseDllName SHFOLDER.dll
                 FullDllName C:\WINDOWS\system32\SHFOLDER.dll
        DllBase 0x001a2898, EntryPoint 0x50040000, SizeOfImage 1343441783,
                 BaseDllName wuaueng.dll
                 FullDllName C:\WINDOWS\system32\wuaueng.dll
        DllBase 0x001a2938, EntryPoint 0x75260000, SizeOfImage 1965503152,
                 BaseDllName ADVPACK.dll
                 FullDllName C:\WINDOWS\system32\ADVPACK.dll
        DllBase 0x001a29d8, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x001a2a78, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x001a2b18, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\system32\WS2_32.dll
        DllBase 0x001a2bb8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\system32\WS2HELP.dll
        DllBase 0x001a2c58, EntryPoint 0x606b0000, SizeOfImage 1617629917,
                 BaseDllName ESENT.dll
                 FullDllName C:\WINDOWS\system32\ESENT.dll
        DllBase 0x001a2d00, EntryPoint 0x76f50000, SizeOfImage 1995781085,
                 BaseDllName WTSAPI32.dll
                 FullDllName C:\WINDOWS\system32\WTSAPI32.dll
        DllBase 0x001a2da0, EntryPoint 0x76360000, SizeOfImage 1983254752,
                 BaseDllName WINSTA.dll
                 FullDllName C:\WINDOWS\system32\WINSTA.dll
        DllBase 0x001a2e48, EntryPoint 0x5b860000, SizeOfImage 1535543448,
                 BaseDllName NETAPI32.dll
                 FullDllName C:\WINDOWS\system32\NETAPI32.dll
        DllBase 0x001a2ef0, EntryPoint 0x73000000, SizeOfImage 1929399552,
                 BaseDllName WINSPOOL.DRV
                 FullDllName C:\WINDOWS\system32\WINSPOOL.DRV
        DllBase 0x001a2f98, EntryPoint 0x77920000, SizeOfImage 2006062490,
                 BaseDllName SETUPAPI.dll
                 FullDllName C:\WINDOWS\system32\SETUPAPI.dll
        DllBase 0x001a3038, EntryPoint 0x4d4f0000, SizeOfImage 1297295142,
                 BaseDllName WINHTTP.dll
                 FullDllName C:\WINDOWS\system32\WINHTTP.dll
        DllBase 0x001a30e0, EntryPoint 0x76c30000, SizeOfImage 1992496425,
                 BaseDllName WINTRUST.dll
                 FullDllName C:\WINDOWS\system32\WINTRUST.dll
        DllBase 0x001a3180, EntryPoint 0x77a80000, SizeOfImage 2007504450,
                 BaseDllName CRYPT32.dll
                 FullDllName C:\WINDOWS\system32\CRYPT32.dll
        DllBase 0x001a3220, EntryPoint 0x77b20000, SizeOfImage 2008167321,
                 BaseDllName MSASN1.dll
                 FullDllName C:\WINDOWS\system32\MSASN1.dll
        DllBase 0x001a32c8, EntryPoint 0x76c90000, SizeOfImage 1992888941,
                 BaseDllName IMAGEHLP.dll
                 FullDllName C:\WINDOWS\system32\IMAGEHLP.dll
        DllBase 0x001a3368, EntryPoint 0x75150000, SizeOfImage 1964314768,
                 BaseDllName Cabinet.dll
                 FullDllName C:\WINDOWS\system32\Cabinet.dll
        DllBase 0x001a3410, EntryPoint 0x600a0000, SizeOfImage 1611289006,
                 BaseDllName mspatcha.dll
                 FullDllName C:\WINDOWS\system32\mspatcha.dll
        DllBase 0x001a34a8, EntryPoint 0x76bb0000, SizeOfImage 1991971379,
                 BaseDllName sfc.dll
                 FullDllName C:\WINDOWS\system32\sfc.dll
        DllBase 0x001a3548, EntryPoint 0x76c60000, SizeOfImage 1992749210,
                 BaseDllName sfc_os.dll
                 FullDllName C:\WINDOWS\system32\sfc_os.dll
        DllBase 0x001a35e8, EntryPoint 0x76380000, SizeOfImage 1983385868,
                 BaseDllName MSIMG32.dll
                 FullDllName C:\WINDOWS\system32\MSIMG32.dll
        DllBase 0x001a3688, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x001a3728, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\system32\ShimEng.dll
        DllBase 0x001a37d0, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x001a3870, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\system32\WINMM.dll
        DllBase 0x001a3910, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\system32\MSACM32.dll
        DllBase 0x001a39b0, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\system32\UxTheme.dll
        DllBase 0x001a3a58, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\system32\xpsp2res.dll
        DllBase 0x001a3af8, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\system32\CLBCATQ.DLL
        DllBase 0x001a3b98, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\system32\COMRes.dll
        DllBase 0x001a3c88, EntryPoint 0x50640000, SizeOfImage 1348763569,
                 BaseDllName wups.dll
                 FullDllName C:\WINDOWS\system32\wups.dll
winproc: PID 0x000003c8 - PPID 0x00000258 - DTB 0x0ce27000,0x0ce68000 - Filename          alg.exe - PEB at 0x7ffdb000
winproc:   +     ImageBaseAddress: 0x01000000
        DllBase 0x00191ec0, EntryPoint 0x01000000, SizeOfImage   16800710,
                 BaseDllName alg.exe
                 FullDllName C:\WINDOWS\System32\alg.exe
        DllBase 0x00191f18, EntryPoint 0x7c900000, SizeOfImage 2089890134,
                 BaseDllName ntdll.dll
                 FullDllName C:\WINDOWS\system32\ntdll.dll
        DllBase 0x00191fc0, EntryPoint 0x7c800000, SizeOfImage 2088809902,
                 BaseDllName kernel32.dll
                 FullDllName C:\WINDOWS\system32\kernel32.dll
        DllBase 0x00192060, EntryPoint 0x77c10000, SizeOfImage 2009199265,
                 BaseDllName msvcrt.dll
                 FullDllName C:\WINDOWS\system32\msvcrt.dll
        DllBase 0x001920f8, EntryPoint 0x76b20000, SizeOfImage 1991418080,
                 BaseDllName ATL.DLL
                 FullDllName C:\WINDOWS\System32\ATL.DLL
        DllBase 0x00192198, EntryPoint 0x77d40000, SizeOfImage 2010445112,
                 BaseDllName USER32.dll
                 FullDllName C:\WINDOWS\system32\USER32.dll
        DllBase 0x00192238, EntryPoint 0x77f10000, SizeOfImage 2012308922,
                 BaseDllName GDI32.dll
                 FullDllName C:\WINDOWS\system32\GDI32.dll
        DllBase 0x001922e0, EntryPoint 0x77dd0000, SizeOfImage 2011001044,
                 BaseDllName ADVAPI32.dll
                 FullDllName C:\WINDOWS\system32\ADVAPI32.dll
        DllBase 0x00192380, EntryPoint 0x77e70000, SizeOfImage 2011652740,
                 BaseDllName RPCRT4.dll
                 FullDllName C:\WINDOWS\system32\RPCRT4.dll
        DllBase 0x00192420, EntryPoint 0x774e0000, SizeOfImage 2001719457,
                 BaseDllName ole32.dll
                 FullDllName C:\WINDOWS\system32\ole32.dll
        DllBase 0x001924c8, EntryPoint 0x77120000, SizeOfImage 1997673816,
                 BaseDllName OLEAUT32.dll
                 FullDllName C:\WINDOWS\system32\OLEAUT32.dll
        DllBase 0x00192568, EntryPoint 0x71ad0000, SizeOfImage 1907167289,
                 BaseDllName WSOCK32.dll
                 FullDllName C:\WINDOWS\System32\WSOCK32.dll
        DllBase 0x00192608, EntryPoint 0x71ab0000, SizeOfImage 1907036787,
                 BaseDllName WS2_32.dll
                 FullDllName C:\WINDOWS\System32\WS2_32.dll
        DllBase 0x001926a8, EntryPoint 0x71aa0000, SizeOfImage 1906972226,
                 BaseDllName WS2HELP.dll
                 FullDllName C:\WINDOWS\System32\WS2HELP.dll
        DllBase 0x00192748, EntryPoint 0x71a50000, SizeOfImage 1906644173,
                 BaseDllName MSWSOCK.DLL
                 FullDllName C:\WINDOWS\System32\MSWSOCK.DLL
        DllBase 0x001927e8, EntryPoint 0x5cb70000, SizeOfImage 1555533369,
                 BaseDllName ShimEng.dll
                 FullDllName C:\WINDOWS\System32\ShimEng.dll
        DllBase 0x00192890, EntryPoint 0x6f880000, SizeOfImage 1871339034,
                 BaseDllName AcGenral.DLL
                 FullDllName C:\WINDOWS\AppPatch\AcGenral.DLL
        DllBase 0x00192930, EntryPoint 0x76b40000, SizeOfImage 1991519081,
                 BaseDllName WINMM.dll
                 FullDllName C:\WINDOWS\System32\WINMM.dll
        DllBase 0x001929d0, EntryPoint 0x77be0000, SizeOfImage 2008945298,
                 BaseDllName MSACM32.dll
                 FullDllName C:\WINDOWS\System32\MSACM32.dll
        DllBase 0x00192a70, EntryPoint 0x77c00000, SizeOfImage 2009076021,
                 BaseDllName VERSION.dll
                 FullDllName C:\WINDOWS\system32\VERSION.dll
        DllBase 0x00192b10, EntryPoint 0x7c9c0000, SizeOfImage 2090759014,
                 BaseDllName SHELL32.dll
                 FullDllName C:\WINDOWS\system32\SHELL32.dll
        DllBase 0x00192bb0, EntryPoint 0x77f60000, SizeOfImage 2012631547,
                 BaseDllName SHLWAPI.dll
                 FullDllName C:\WINDOWS\system32\SHLWAPI.dll
        DllBase 0x00192c50, EntryPoint 0x769c0000, SizeOfImage 1989940692,
                 BaseDllName USERENV.dll
                 FullDllName C:\WINDOWS\system32\USERENV.dll
        DllBase 0x00192cf0, EntryPoint 0x5ad70000, SizeOfImage 1524045350,
                 BaseDllName UxTheme.dll
                 FullDllName C:\WINDOWS\System32\UxTheme.dll
        DllBase 0x00192e38, EntryPoint 0x773d0000, SizeOfImage 2000503366,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
        DllBase 0x00192ee0, EntryPoint 0x5d090000, SizeOfImage 1560884410,
                 BaseDllName comctl32.dll
                 FullDllName C:\WINDOWS\system32\comctl32.dll
        DllBase 0x00192f80, EntryPoint 0x76fd0000, SizeOfImage 1996304661,
                 BaseDllName CLBCATQ.DLL
                 FullDllName C:\WINDOWS\System32\CLBCATQ.DLL
        DllBase 0x00193020, EntryPoint 0x77050000, SizeOfImage 1996820565,
                 BaseDllName COMRes.dll
                 FullDllName C:\WINDOWS\System32\COMRes.dll
        DllBase 0x001930c8, EntryPoint 0x20000000, SizeOfImage          0,
                 BaseDllName xpsp2res.dll
                 FullDllName C:\WINDOWS\System32\xpsp2res.dll
<bochs:2> fgets() returned ERROR.
intr request was 0