Error: At least one module has an unresolved import due to a missing export function in an implicitly dependent module. Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module. -------------------------------------------------------------------------------- Starting profile on 11/09/2017 at 21:11:35 Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Professional (32-bit), version 6.01.7601 Service Pack 1 Program Executable: c:\program files\mozilla firefox\FIREFOX.EXE Program Arguments: Starting Directory: C:\Program Files\Mozilla Firefox\ Search Path: C:\Program Files\Mozilla Firefox;C:\windows\system32;C:\windows;C:\windows\system32\wbem Options Selected: Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable. Log DllMain calls for process attach and process detach messages. Hook the process to gather more detailed dependency information. Log LoadLibrary function calls. Log GetProcAddress function calls. Log debug output messages. Automatically open and profile child processes. -------------------------------------------------------------------------------- Started "FIREFOX.EXE" (process 0x2E) at address 0x00400000. Successfully hooked module. Loaded "KERNEL32.DLL" at address 0x7B410000. Successfully hooked module. Loaded "NTDLL.DLL" at address 0x7BC10000. Successfully hooked module. Loaded "VERSION.DLL" at address 0x7EFF0000. Successfully hooked module. Loaded "UCRTBASE.DLL" at address 0x7E9D0000. Successfully hooked module. Loaded "MSVCP140.DLL" at address 0x7EAF0000. Successfully hooked module. Loaded "VCRUNTIME140.DLL" at address 0x7EFE0000. Successfully hooked module. Loaded "API-MS-WIN-CRT-STDIO-L1-1-0.DLL" at address 0x7EFC0000. Successfully hooked module. Loaded "API-MS-WIN-CRT-MATH-L1-1-0.DLL" at address 0x7E9A0000. Successfully hooked module. Loaded "API-MS-WIN-CRT-STRING-L1-1-0.DLL" at address 0x7E990000. Successfully hooked module. Loaded "API-MS-WIN-CRT-CONVERT-L1-1-0.DLL" at address 0x7E980000. Successfully hooked module. Loaded "API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL" at address 0x7E960000. Successfully hooked module. Loaded "API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL" at address 0x7E950000. Successfully hooked module. Loaded "MOZGLUE.DLL" at address 0x10000000. Successfully hooked module. Loaded "ADVAPI32.DLL" at address 0x7E8E0000. Successfully hooked module. Loaded "API-MS-WIN-CRT-LOCALE-L1-1-0.DLL" at address 0x7E8C0000. Successfully hooked module. Loaded "API-MS-WIN-CRT-HEAP-L1-1-0.DLL" at address 0x7E8B0000. Successfully hooked module. DllMain(0x7BC10000, DLL_PROCESS_ATTACH, 0x00000001) in "NTDLL.DLL" called. DllMain(0x7BC10000, DLL_PROCESS_ATTACH, 0x00000001) in "NTDLL.DLL" returned 1 (0x1). DllMain(0x7B410000, DLL_PROCESS_ATTACH, 0x00000001) in "KERNEL32.DLL" called. DllMain(0x7B410000, DLL_PROCESS_ATTACH, 0x00000001) in "KERNEL32.DLL" returned 1 (0x1). Injected "DEPENDS.DLL" at address 0x08370000. DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called. DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1). DllMain(0x7EFF0000, DLL_PROCESS_ATTACH, 0x00000001) in "VERSION.DLL" called. DllMain(0x7EFF0000, DLL_PROCESS_ATTACH, 0x00000001) in "VERSION.DLL" returned 1 (0x1). DllMain(0x7E9D0000, DLL_PROCESS_ATTACH, 0x00000001) in "UCRTBASE.DLL" called. DllMain(0x7E9D0000, DLL_PROCESS_ATTACH, 0x00000001) in "UCRTBASE.DLL" returned 1 (0x1). DllMain(0x7EAF0000, DLL_PROCESS_ATTACH, 0x00000001) in "MSVCP140.DLL" called. GetProcAddress(0x7E9D0000 [UCRTBASE.DLL], "_set_new_handler") called from "MSVCP140.DLL" at address 0x7EB4AC33 and returned 0x7EA13EE0. LoadLibraryA("concrt140.dll") called from "MSVCP140.DLL" at address 0x7EB4AC4D. Loaded "CONCRT140.DLL" at address 0x7E890000. Successfully hooked module. DllMain(0x7E890000, DLL_PROCESS_ATTACH, 0x00000000) in "CONCRT140.DLL" called. DllMain(0x7E890000, DLL_PROCESS_ATTACH, 0x00000000) in "CONCRT140.DLL" returned 1 (0x1). LoadLibraryA("concrt140.dll") returned 0x7E890000. Loaded "MSVCR120.DLL" at address 0x7E7C0000. Successfully hooked module. DllMain(0x7E7C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR120.DLL" called. DllMain(0x7E7C0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR120.DLL" returned 1 (0x1). GetProcAddress(0x7E890000 [CONCRT140.DLL], "??0critical_section@Concurrency@@QAE@XZ") called from "MSVCP140.DLL" at address 0x7EB4AC6D and returned 0x7E7F6768. GetProcAddress(0x7E890000 [CONCRT140.DLL], "??1critical_section@Concurrency@@QAE@XZ") called from "MSVCP140.DLL" at address 0x7EB4AC82 and returned 0x7E7F6770. GetProcAddress(0x7E890000 [CONCRT140.DLL], "?lock@critical_section@Concurrency@@QAEXXZ") called from "MSVCP140.DLL" at address 0x7EB4AC97 and returned 0x7E7F6778. GetProcAddress(0x7E890000 [CONCRT140.DLL], "?unlock@critical_section@Concurrency@@QAEXXZ") called from "MSVCP140.DLL" at address 0x7EB4ACAC and returned 0x7E7F6788. GetProcAddress(0x7E890000 [CONCRT140.DLL], "?try_lock@critical_section@Concurrency@@QAE_NXZ") called from "MSVCP140.DLL" at address 0x7EB4ACC1 and returned 0x7E7F6780. GetProcAddress(0x7E890000 [CONCRT140.DLL], "?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ") called from "MSVCP140.DLL" at address 0x7EB4ACD6 and returned 0x7E81E1F0. DllMain(0x7EAF0000, DLL_PROCESS_ATTACH, 0x00000001) in "MSVCP140.DLL" returned 1 (0x1). DllMain(0x7EFE0000, DLL_PROCESS_ATTACH, 0x00000001) in "VCRUNTIME140.DLL" called. DllMain(0x7EFE0000, DLL_PROCESS_ATTACH, 0x00000001) in "VCRUNTIME140.DLL" returned 1 (0x1). DllMain(0x7EFC0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-STDIO-L1-1-0.DLL" called. DllMain(0x7EFC0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-STDIO-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E9A0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-MATH-L1-1-0.DLL" called. DllMain(0x7E9A0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-MATH-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E990000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-STRING-L1-1-0.DLL" called. DllMain(0x7E990000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-STRING-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E980000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-CONVERT-L1-1-0.DLL" called. DllMain(0x7E980000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-CONVERT-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E960000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL" called. DllMain(0x7E960000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E950000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL" called. DllMain(0x7E950000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL" returned 1 (0x1). DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x00000001) in "MOZGLUE.DLL" called. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetTickCount64") called from "MOZGLUE.DLL" at address 0x1000A3AF and returned 0x7B446890. DllMain(0x10000000, DLL_PROCESS_ATTACH, 0x00000001) in "MOZGLUE.DLL" returned 1 (0x1). DllMain(0x7E8E0000, DLL_PROCESS_ATTACH, 0x00000001) in "ADVAPI32.DLL" called. DllMain(0x7E8E0000, DLL_PROCESS_ATTACH, 0x00000001) in "ADVAPI32.DLL" returned 1 (0x1). DllMain(0x7E8C0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-LOCALE-L1-1-0.DLL" called. DllMain(0x7E8C0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-LOCALE-L1-1-0.DLL" returned 1 (0x1). DllMain(0x7E8B0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-HEAP-L1-1-0.DLL" called. DllMain(0x7E8B0000, DLL_PROCESS_ATTACH, 0x00000001) in "API-MS-WIN-CRT-HEAP-L1-1-0.DLL" returned 1 (0x1). Entrypoint reached. All implicit modules have been loaded. LoadLibraryExA("ntdll.dll", 0x00000000, 0x00000000) called from "MOZGLUE.DLL" at address 0x1000A6BD. LoadLibraryExA("ntdll.dll", 0x00000000, 0x00000000) returned 0x7BC10000. LoadLibraryExA("ntdll.dll", 0x00000000, 0x00000000) called from "MOZGLUE.DLL" at address 0x1000A8B3. LoadLibraryExA("ntdll.dll", 0x00000000, 0x00000000) returned 0x7BC10000. GetProcAddress(0x7BC10000 [NTDLL.DLL], "LdrLoadDll") called from "MOZGLUE.DLL" at address 0x1000A874 and returned 0x7BC576D0. LoadLibraryExW("c:\program files\mozilla firefox\MSVCP140.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\MSVCP140.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7EAF0000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E960000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E990000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E8B0000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7EFC0000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E980000. LoadLibraryExW("c:\program files\mozilla firefox\VCRUNTIME140.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\VCRUNTIME140.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7EFE0000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E9A0000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E950000. LoadLibraryExW("c:\program files\mozilla firefox\mozglue.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\mozglue.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x10000000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL" at address 0xF7580000. Successfully hooked module. DllMain(0xF7580000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL" called. DllMain(0xF7580000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF7580000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "API-MS-WIN-CRT-UTILITY-L1-1-0.DLL" at address 0xF7570000. Successfully hooked module. DllMain(0xF7570000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-UTILITY-L1-1-0.DLL" called. DllMain(0xF7570000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-UTILITY-L1-1-0.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF7570000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "API-MS-WIN-CRT-TIME-L1-1-0.DLL" at address 0xF7560000. Successfully hooked module. DllMain(0xF7560000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-TIME-L1-1-0.DLL" called. DllMain(0xF7560000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-TIME-L1-1-0.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF7560000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL" at address 0xF7340000. Successfully hooked module. DllMain(0xF7340000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL" called. DllMain(0xF7340000, DLL_PROCESS_ATTACH, 0x00000000) in "API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF7340000. LoadLibraryExW("c:\program files\mozilla firefox\nss3.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "GDI32.DLL" at address 0xF7010000. Successfully hooked module. Loaded "USER32.DLL" at address 0xF7140000. Successfully hooked module. Loaded "RPCRT4.DLL" at address 0xF6E50000. Successfully hooked module. Loaded "OLE32.DLL" at address 0xF6EE0000. Successfully hooked module. Loaded "MSACM32.DLL" at address 0xF6E20000. Successfully hooked module. Loaded "WINMM.DLL" at address 0xF7280000. Successfully hooked module. Loaded "WS2_32.DLL" at address 0xF6DD0000. Successfully hooked module. Loaded "IPHLPAPI.DLL" at address 0xF6DA0000. Successfully hooked module. Loaded "WSOCK32.DLL" at address 0xF6E00000. Successfully hooked module. Loaded "NSS3.DLL" at address 0x00900000. Successfully hooked module. DllMain(0xF7010000, DLL_PROCESS_ATTACH, 0x00000000) in "GDI32.DLL" called. DllMain(0xF7010000, DLL_PROCESS_ATTACH, 0x00000000) in "GDI32.DLL" returned 1 (0x1). DllMain(0xF7140000, DLL_PROCESS_ATTACH, 0x00000000) in "USER32.DLL" called. GetProcAddress(0xF7010000 [GDI32.DLL], "pfnSelectPalette") called from "USER32.DLL" at address 0xF71BDC49 and returned 0xF70D56A4. GetProcAddress(0xF7010000 [GDI32.DLL], "pfnRealizePalette") called from "USER32.DLL" at address 0xF71BDC72 and returned 0xF70D56A0. LoadLibraryW("imm32.dll") called from "USER32.DLL" at address 0xF71BDC9A. Loaded "IMM32.DLL" at address 0xF6D80000. Successfully hooked module. DllMain(0xF6D80000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called. GetProcAddress(0xF6D80000 [IMM32.DLL], "__wine_get_ui_window") called from "USER32.DLL" at address 0xF71A0499 and returned 0xF6D8D9C0. GetProcAddress(0xF6D80000 [IMM32.DLL], "__wine_register_window") called from "USER32.DLL" at address 0xF71A04AC and returned 0xF6D8C5E0. GetProcAddress(0xF6D80000 [IMM32.DLL], "__wine_unregister_window") called from "USER32.DLL" at address 0xF71A04BF and returned 0xF6D8C840. DllMain(0xF6D80000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1). LoadLibraryW("imm32.dll") returned 0xF6D80000. DllMain(0xF7140000, DLL_PROCESS_ATTACH, 0x00000000) in "USER32.DLL" returned 1 (0x1). DllMain(0xF6E50000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRT4.DLL" called. DllMain(0xF6E50000, DLL_PROCESS_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 1 (0x1). DllMain(0xF6EE0000, DLL_PROCESS_ATTACH, 0x00000000) in "OLE32.DLL" called. DllMain(0xF6EE0000, DLL_PROCESS_ATTACH, 0x00000000) in "OLE32.DLL" returned 1 (0x1). DllMain(0xF6E20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSACM32.DLL" called. DllMain(0xF6E20000, DLL_PROCESS_ATTACH, 0x00000000) in "MSACM32.DLL" returned 1 (0x1). DllMain(0xF7280000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" called. DllMain(0xF7280000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" returned 1 (0x1). DllMain(0xF6DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" called. DllMain(0xF6DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1). DllMain(0xF6DA0000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" called. DllMain(0xF6DA0000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" returned 1 (0x1). DllMain(0xF6E00000, DLL_PROCESS_ATTACH, 0x00000000) in "WSOCK32.DLL" called. DllMain(0xF6E00000, DLL_PROCESS_ATTACH, 0x00000000) in "WSOCK32.DLL" returned 1 (0x1). DllMain(0x00900000, DLL_PROCESS_ATTACH, 0x00000000) in "NSS3.DLL" called. DllMain(0x00900000, DLL_PROCESS_ATTACH, 0x00000000) in "NSS3.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\nss3.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x00900000. LoadLibraryExW("c:\program files\mozilla firefox\lgpllibs.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "LGPLLIBS.DLL" at address 0x00B60000. Successfully hooked module. DllMain(0x00B60000, DLL_PROCESS_ATTACH, 0x00000000) in "LGPLLIBS.DLL" called. DllMain(0x00B60000, DLL_PROCESS_ATTACH, 0x00000000) in "LGPLLIBS.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\lgpllibs.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x00B60000. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. LoadLibraryExW("c:\program files\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x7E8C0000. LoadLibraryExW("c:\program files\mozilla firefox\xul.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "FIREFOX.EXE" at address 0x004044B4. Loaded "SHLWAPI.DLL" at address 0xF6980000. Successfully hooked module. Loaded "SHELL32.DLL" at address 0xF69F0000. Successfully hooked module. Loaded "USP10.DLL" at address 0xF6930000. Successfully hooked module. Loaded "MSIMG32.DLL" at address 0xF6D70000. Successfully hooked module. Loaded "CRYPT32.DLL" at address 0xF6870000. Successfully hooked module. Loaded "UXTHEME.DLL" at address 0xF6830000. Successfully hooked module. Loaded "SETUPAPI.DLL" at address 0xF67C0000. Successfully hooked module. Loaded "WINTRUST.DLL" at address 0xF6790000. Successfully hooked module. Loaded "WTSAPI32.DLL" at address 0xF6770000. Successfully hooked module. Loaded "OLEAUT32.DLL" at address 0xF6650000. Successfully hooked module. Loaded "PDH.DLL" at address 0xF6620000. Successfully hooked module. Loaded "XUL.DLL" at address 0x00C20000. Successfully hooked module. DllMain(0xF6980000, DLL_PROCESS_ATTACH, 0x00000000) in "SHLWAPI.DLL" called. DllMain(0xF6980000, DLL_PROCESS_ATTACH, 0x00000000) in "SHLWAPI.DLL" returned 1 (0x1). DllMain(0xF69F0000, DLL_PROCESS_ATTACH, 0x00000000) in "SHELL32.DLL" called. DllMain(0xF69F0000, DLL_PROCESS_ATTACH, 0x00000000) in "SHELL32.DLL" returned 1 (0x1). DllMain(0xF6930000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" called. DllMain(0xF6930000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" returned 1 (0x1). DllMain(0xF6D70000, DLL_PROCESS_ATTACH, 0x00000000) in "MSIMG32.DLL" called. DllMain(0xF6D70000, DLL_PROCESS_ATTACH, 0x00000000) in "MSIMG32.DLL" returned 1 (0x1). DllMain(0xF6870000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL" called. DllMain(0xF6870000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1). DllMain(0xF6830000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called. DllMain(0xF6830000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1). DllMain(0xF67C0000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" called. DllMain(0xF67C0000, DLL_PROCESS_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1). DllMain(0xF6790000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" called. DllMain(0xF6790000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" returned 1 (0x1). DllMain(0xF6770000, DLL_PROCESS_ATTACH, 0x00000000) in "WTSAPI32.DLL" called. DllMain(0xF6770000, DLL_PROCESS_ATTACH, 0x00000000) in "WTSAPI32.DLL" returned 1 (0x1). DllMain(0xF6650000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL" called. DllMain(0xF6650000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1). DllMain(0xF6620000, DLL_PROCESS_ATTACH, 0x00000000) in "PDH.DLL" called. DllMain(0xF6620000, DLL_PROCESS_ATTACH, 0x00000000) in "PDH.DLL" returned 1 (0x1). DllMain(0x00C20000, DLL_PROCESS_ATTACH, 0x00000000) in "XUL.DLL" called. GetProcAddress(0x7B410000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "NSS3.DLL" at address 0x0094224E and returned 0x7B470B20. GetProcAddress(0x7B410000 [KERNEL32.DLL], "InitializeConditionVariable") called from "XUL.DLL" at address 0x01078BF4 and returned 0x7BC86710. GetProcAddress(0x7B410000 [KERNEL32.DLL], "WakeConditionVariable") called from "XUL.DLL" at address 0x01078BF4 and returned 0x7BC86720. GetProcAddress(0x7B410000 [KERNEL32.DLL], "WakeAllConditionVariable") called from "XUL.DLL" at address 0x01078BF4 and returned 0x7BC867A0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "SleepConditionVariableCS") called from "XUL.DLL" at address 0x01078C5A and returned 0x7B474930. GetProcAddress(0x7B410000 [KERNEL32.DLL], "InitializeCriticalSectionEx") called from "XUL.DLL" at address 0x012820DE and returned 0x7B470B20. LoadLibraryW("dwmapi.dll") called from "XUL.DLL" at address 0x012449FA. Loaded "DWMAPI.DLL" at address 0xF6610000. Successfully hooked module. DllMain(0xF6610000, DLL_PROCESS_ATTACH, 0x00000000) in "DWMAPI.DLL" called. DllMain(0xF6610000, DLL_PROCESS_ATTACH, 0x00000000) in "DWMAPI.DLL" returned 1 (0x1). LoadLibraryW("dwmapi.dll") returned 0xF6610000. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmExtendFrameIntoClientArea") called from "XUL.DLL" at address 0x01244A0F and returned 0xF6619240. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmIsCompositionEnabled") called from "XUL.DLL" at address 0x01244A21 and returned 0xF6619120. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmSetIconicThumbnail") called from "XUL.DLL" at address 0x01244A33 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmSetIconicLivePreviewBitmap") called from "XUL.DLL" at address 0x01244A45 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmGetWindowAttribute") called from "XUL.DLL" at address 0x01244A57 and returned 0xF6619750. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmSetWindowAttribute") called from "XUL.DLL" at address 0x01244A69 and returned 0xF66193E0. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmInvalidateIconicBitmaps") called from "XUL.DLL" at address 0x01244A7B and returned 0xF6619360. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmDefWindowProc") called from "XUL.DLL" at address 0x01244A8D and returned 0xF66196D0. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmGetCompositionTimingInfo") called from "XUL.DLL" at address 0x01244A9F and returned 0xF6619830. GetProcAddress(0xF6610000 [DWMAPI.DLL], "DwmFlush") called from "XUL.DLL" at address 0x01244AB1 and returned 0xF6619300. DllMain(0x00C20000, DLL_PROCESS_ATTACH, 0x00000000) in "XUL.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\xul.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x00C20000. GetProcAddress(0x00C20000 [XUL.DLL], "NS_GetFrozenFunctions") called from "FIREFOX.EXE" at address 0x00404517 and returned 0x0127F5CA. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_GetFileFromPath") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x01270398. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_CreateAppData") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0255CECD. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_FreeAppData") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0255CF95. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_TelemetryAccumulate") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0253FE6F. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_StartupTimelineRecord") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x01283B89. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_main") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0103FE68. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_StopLateWriteChecks") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0255935A. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_XPCShellMain") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x01856F40. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_GetProcessType") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x011837F3. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_SetProcessType") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0255A00F. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_InitChildProcess") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x0255972C. GetProcAddress(0x00C20000 [XUL.DLL], "XRE_EnableSameExecutableForContentProc") called from "FIREFOX.EXE" at address 0x004031BD and returned 0x012842DF. GetProcAddress(0x00400000 [FIREFOX.EXE], "GetHandleVerifier") called from "FIREFOX.EXE" at address 0x004020A1 and returned 0x0040223C. LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) called from "FIREFOX.EXE" at address 0x004058F6. LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) returned 0xF7140000. GetProcAddress(0xF7140000 [USER32.DLL], "GetProcessWindowStation") called from "FIREFOX.EXE" at address 0x004059C4 and returned 0xF71D1AF0. LoadLibraryW("C:\windows\system32\winex11.drv") called from "USER32.DLL" at address 0xF716BED9. Loaded "WINEX11.DRV" at address 0xF6590000. Successfully hooked module. DllMain(0xF6590000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEX11.DRV" called. DllMain(0xF6590000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEX11.DRV" returned 1 (0x1). LoadLibraryW("C:\windows\system32\winex11.drv") returned 0xF6590000. GetProcAddress(0xF6590000 [WINEX11.DRV], "ActivateKeyboardLayout") called from "USER32.DLL" at address 0xF716C000 and returned 0xF65AE340. GetProcAddress(0xF6590000 [WINEX11.DRV], "Beep") called from "USER32.DLL" at address 0xF716C01B and returned 0xF65AFE60. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetAsyncKeyState") called from "USER32.DLL" at address 0xF716C037 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6590000 [WINEX11.DRV], "GetKeyNameText") called from "USER32.DLL" at address 0xF716C053 and returned 0xF65AEDA0. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetKeyboardLayout") called from "USER32.DLL" at address 0xF716C06F and returned 0xF65AE1D0. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetKeyboardLayoutList") called from "USER32.DLL" at address 0xF716C08B and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6590000 [WINEX11.DRV], "GetKeyboardLayoutName") called from "USER32.DLL" at address 0xF716C0A7 and returned 0xF65ACAB0. GetProcAddress(0xF6590000 [WINEX11.DRV], "LoadKeyboardLayout") called from "USER32.DLL" at address 0xF716C0C3 and returned 0xF65AE270. GetProcAddress(0xF6590000 [WINEX11.DRV], "MapVirtualKeyEx") called from "USER32.DLL" at address 0xF716C0DF and returned 0xF65AE8E0. GetProcAddress(0xF6590000 [WINEX11.DRV], "RegisterHotKey") called from "USER32.DLL" at address 0xF716C0FB and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6590000 [WINEX11.DRV], "ToUnicodeEx") called from "USER32.DLL" at address 0xF716C117 and returned 0xF65AF200. GetProcAddress(0xF6590000 [WINEX11.DRV], "UnloadKeyboardLayout") called from "USER32.DLL" at address 0xF716C133 and returned 0xF65AE2E0. GetProcAddress(0xF6590000 [WINEX11.DRV], "UnregisterHotKey") called from "USER32.DLL" at address 0xF716C14F and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6590000 [WINEX11.DRV], "VkKeyScanEx") called from "USER32.DLL" at address 0xF716C16B and returned 0xF65AE550. GetProcAddress(0xF6590000 [WINEX11.DRV], "DestroyCursorIcon") called from "USER32.DLL" at address 0xF716C187 and returned 0xF65B2B20. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetCursor") called from "USER32.DLL" at address 0xF716C1A3 and returned 0xF65B2BD0. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetCursorPos") called from "USER32.DLL" at address 0xF716C1BF and returned 0xF65B2D10. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetCursorPos") called from "USER32.DLL" at address 0xF716C1DB and returned 0xF65B2C50. GetProcAddress(0xF6590000 [WINEX11.DRV], "ClipCursor") called from "USER32.DLL" at address 0xF716C1F7 and returned 0xF65B2E20. GetProcAddress(0xF6590000 [WINEX11.DRV], "UpdateClipboard") called from "USER32.DLL" at address 0xF716C213 and returned 0xF659ED80. GetProcAddress(0xF6590000 [WINEX11.DRV], "ChangeDisplaySettingsEx") called from "USER32.DLL" at address 0xF716C22F and returned 0xF65BED00. GetProcAddress(0xF6590000 [WINEX11.DRV], "EnumDisplayMonitors") called from "USER32.DLL" at address 0xF716C24B and returned 0xF65D0AA0. GetProcAddress(0xF6590000 [WINEX11.DRV], "EnumDisplaySettingsEx") called from "USER32.DLL" at address 0xF716C267 and returned 0xF65BE680. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetMonitorInfo") called from "USER32.DLL" at address 0xF716C283 and returned 0xF65D0A00. GetProcAddress(0xF6590000 [WINEX11.DRV], "CreateDesktopWindow") called from "USER32.DLL" at address 0xF716C29F and returned 0xF65C4160. GetProcAddress(0xF6590000 [WINEX11.DRV], "CreateWindow") called from "USER32.DLL" at address 0xF716C2BB and returned 0xF65C42A0. GetProcAddress(0xF6590000 [WINEX11.DRV], "DestroyWindow") called from "USER32.DLL" at address 0xF716C2D7 and returned 0xF65C4480. GetProcAddress(0xF6590000 [WINEX11.DRV], "FlashWindowEx") called from "USER32.DLL" at address 0xF716C2F3 and returned 0xF65C8080. GetProcAddress(0xF6590000 [WINEX11.DRV], "GetDC") called from "USER32.DLL" at address 0xF716C30F and returned 0xF65C5950. GetProcAddress(0xF6590000 [WINEX11.DRV], "MsgWaitForMultipleObjectsEx") called from "USER32.DLL" at address 0xF716C32B and returned 0xF65A2F70. GetProcAddress(0xF6590000 [WINEX11.DRV], "ReleaseDC") called from "USER32.DLL" at address 0xF716C347 and returned 0xF65C5AE0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ScrollDC") called from "USER32.DLL" at address 0xF716C363 and returned 0xF65C5B80. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetCapture") called from "USER32.DLL" at address 0xF716C37F and returned 0xF65C5CB0. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetFocus") called from "USER32.DLL" at address 0xF716C39E and returned 0xF65A3730. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetLayeredWindowAttributes") called from "USER32.DLL" at address 0xF716C3BD and returned 0xF65C74B0. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetParent") called from "USER32.DLL" at address 0xF716C3DC and returned 0xF65C5DD0. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetWindowRgn") called from "USER32.DLL" at address 0xF716C3FB and returned 0xF65C7420. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetWindowIcon") called from "USER32.DLL" at address 0xF716C41A and returned 0xF65C7370. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetWindowStyle") called from "USER32.DLL" at address 0xF716C439 and returned 0xF65C55B0. GetProcAddress(0xF6590000 [WINEX11.DRV], "SetWindowText") called from "USER32.DLL" at address 0xF716C458 and returned 0xF65C5840. GetProcAddress(0xF6590000 [WINEX11.DRV], "ShowWindow") called from "USER32.DLL" at address 0xF716C477 and returned 0xF65C70C0. GetProcAddress(0xF6590000 [WINEX11.DRV], "SysCommand") called from "USER32.DLL" at address 0xF716C496 and returned 0xF65C7D50. GetProcAddress(0xF6590000 [WINEX11.DRV], "UpdateLayeredWindow") called from "USER32.DLL" at address 0xF716C4B5 and returned 0xF65C7690. GetProcAddress(0xF6590000 [WINEX11.DRV], "WindowMessage") called from "USER32.DLL" at address 0xF716C4D4 and returned 0xF65C7BB0. GetProcAddress(0xF6590000 [WINEX11.DRV], "WindowPosChanging") called from "USER32.DLL" at address 0xF716C4F3 and returned 0xF65C5E90. GetProcAddress(0xF6590000 [WINEX11.DRV], "WindowPosChanged") called from "USER32.DLL" at address 0xF716C512 and returned 0xF65C6320. GetProcAddress(0xF6590000 [WINEX11.DRV], "SystemParametersInfo") called from "USER32.DLL" at address 0xF716C531 and returned 0xF65CCEE0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ThreadDetach") called from "USER32.DLL" at address 0xF716C550 and returned 0xF65CCBB0. GetProcAddress(0xF6590000 [WINEX11.DRV], "wine_get_gdi_driver") called from "GDI32.DLL" at address 0xF705DEC6 and returned 0xF65AB9D0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "SetProcessDEPPolicy") called from "XUL.DLL" at address 0x011AB334 and returned 0x7B466BB0. LoadLibraryW("dwrite.dll") called from "XUL.DLL" at address 0x0127835A. LoadLibraryW("dbghelp.dll") called from "XUL.DLL" at address 0x01166B03. Loaded "DWRITE.DLL" at address 0xF6330000. Successfully hooked module. DllMain(0xF6330000, DLL_PROCESS_ATTACH, 0x00000000) in "DWRITE.DLL" called. DllMain(0xF6330000, DLL_PROCESS_ATTACH, 0x00000000) in "DWRITE.DLL" returned 1 (0x1). LoadLibraryW("dwrite.dll") returned 0xF6330000. Loaded "DBGHELP.DLL" at address 0xF61A0000. Successfully hooked module. DllMain(0xF61A0000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" called. DllMain(0xF61A0000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" returned 1 (0x1). LoadLibraryW("dbghelp.dll") returned 0xF61A0000. GetProcAddress(0xF6330000 [DWRITE.DLL], "DWriteCreateFactory") called from "XUL.DLL" at address 0x0127836A and returned 0xF6365200. GetProcAddress(0xF61A0000 [DBGHELP.DLL], "MiniDumpWriteDump") called from "XUL.DLL" at address 0x01166B18 and returned 0xF61C5A80. LoadLibraryW("rpcrt4.dll") called from "XUL.DLL" at address 0x01166B26. LoadLibraryW("rpcrt4.dll") returned 0xF6E50000. GetProcAddress(0xF6E50000 [RPCRT4.DLL], "UuidCreate") called from "XUL.DLL" at address 0x01166B35 and returned 0xF6E97220. LoadLibraryExA("kernel32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F204B. LoadLibraryExA("kernel32.dll", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "SetUnhandledExceptionFilter") called from "XUL.DLL" at address 0x011F1E80 and returned 0x7B43C300. LoadLibraryA("ole32.dll") called from "SHELL32.DLL" at address 0xF6A7B16E. LoadLibraryA("ole32.dll") returned 0xF6EE0000. GetProcAddress(0xF6EE0000 [OLE32.DLL], "CoTaskMemAlloc") called from "SHELL32.DLL" at address 0xF6A7B141 and returned 0xF6F169D0. GetProcAddress(0xF6EE0000 [OLE32.DLL], "StringFromGUID2") called from "SHELL32.DLL" at address 0xF6A7B141 and returned 0xF6EFC590. GetProcAddress(0xF6EE0000 [OLE32.DLL], "CoTaskMemFree") called from "SHELL32.DLL" at address 0xF6A7B141 and returned 0xF6F16A10. LoadLibraryA("ole32.dll") called from "SHLWAPI.DLL" at address 0xF69B74DE. LoadLibraryA("ole32.dll") returned 0xF6EE0000. GetProcAddress(0xF6EE0000 [OLE32.DLL], "CoTaskMemFree") called from "SHLWAPI.DLL" at address 0xF69B74B1 and returned 0xF6F16A10. LoadLibraryA("imm32.dll") called from "WINEX11.DRV" at address 0xF65D702E. LoadLibraryA("imm32.dll") returned 0xF6D80000. GetProcAddress(0xF6D80000 [IMM32.DLL], "ImmGetContext") called from "WINEX11.DRV" at address 0xF65D7001 and returned 0xF6D92540. LoadLibraryExA("Kernel32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F204B. LoadLibraryExA("Kernel32.dll", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "VirtualAlloc") called from "XUL.DLL" at address 0x011F1E80 and returned 0x7B47A3F0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "MapViewOfFile") called from "XUL.DLL" at address 0x011F1E80 and returned 0x7B47AC90. LoadLibraryExA("Gdi32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F204B. LoadLibraryExA("Gdi32.dll", 0x00000000, 0x00000000) returned 0xF7010000. GetProcAddress(0xF7010000 [GDI32.DLL], "CreateDIBSection") called from "XUL.DLL" at address 0x011F1E80 and returned 0xF7027F90. LoadLibraryExW("C:\windows\system32\shell32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. LoadLibraryExW("C:\windows\system32\shell32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF69F0000. GetProcAddress(0xF69F0000 [SHELL32.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF6A29C40. GetProcAddress(0xF69F0000 [SHELL32.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF6A3C530. GetProcAddress(0xF69F0000 [SHELL32.DLL], "SHGetKnownFolderPath") called from "XUL.DLL" at address 0x01282F8A and returned 0xF6A49700. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetSystemTimePreciseAsFileTime") called from "XUL.DLL" at address 0x01078B68 and returned 0x7B476F10. Could not read chrome manifest 'file:///c:/program%20files/mozilla%20firefox/chrome.manifest'. LoadLibraryA("Dnsapi.dll") called from "XUL.DLL" at address 0x010CDCB7. Loaded "NETAPI32.DLL" at address 0xF6150000. Successfully hooked module. Loaded "DNSAPI.DLL" at address 0xF6180000. Successfully hooked module. DllMain(0xF6150000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" called. DllMain(0xF6150000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" returned 1 (0x1). DllMain(0xF6180000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" called. DllMain(0xF6180000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" returned 1 (0x1). LoadLibraryA("Dnsapi.dll") returned 0xF6180000. GetProcAddress(0xF6180000 [DNSAPI.DLL], "DnsQuery_A") called from "XUL.DLL" at address 0x010CDCCF and returned 0xF6191B70. GetProcAddress(0xF6180000 [DNSAPI.DLL], "DnsFree") called from "XUL.DLL" at address 0x010CDCDA and returned 0xF61932E0. LoadLibraryW("Iphlpapi.dll") called from "XUL.DLL" at address 0x012378C1. LoadLibraryW("Iphlpapi.dll") returned 0xF6DA0000. GetProcAddress(0xF6DA0000 [IPHLPAPI.DLL], "NotifyIpInterfaceChange") called from "XUL.DLL" at address 0x012378D6 and returned 0xF6DB7590. GetProcAddress(0xF6DA0000 [IPHLPAPI.DLL], "CancelMibChangeNotify2") called from "XUL.DLL" at address 0x012378EC and returned 0xF6DB42F0. LoadLibraryExW("c:\program files\mozilla firefox\browser\components\browsercomps.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "BROWSERCOMPS.DLL" at address 0x00360000. Successfully hooked module. DllMain(0x00360000, DLL_PROCESS_ATTACH, 0x00000000) in "BROWSERCOMPS.DLL" called. DllMain(0x00360000, DLL_PROCESS_ATTACH, 0x00000000) in "BROWSERCOMPS.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\browser\components\browsercomps.dll", 0x00000000, 0x00000000) returned 0x00360000. GetProcAddress(0x00360000 [BROWSERCOMPS.DLL], "NSModule") called from "NSS3.DLL" at address 0x009047C7 and returned 0x00369408. GetProcAddress(0x7B410000 [KERNEL32.DLL], "LocaleNameToLCID") called from "XUL.DLL" at address 0x011AB2FE and returned 0x7B44C700. GetProcAddress(0x7B410000 [KERNEL32.DLL], "LCIDToLocaleName") called from "XUL.DLL" at address 0x011AB30F and returned 0x7B44E3F0. LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F204B. LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) returned 0xF7140000. LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F1FDF. LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) returned 0xF7140000. GetProcAddress(0xF7140000 [USER32.DLL], "CreateWindowExW") called from "XUL.DLL" at address 0x011F1D0B and returned 0xF71BF7A0. GetProcAddress(0xF7140000 [USER32.DLL], "CreateWindowExA") called from "XUL.DLL" at address 0x011F1D0B and returned 0xF71BF670. GetProcAddress(0xF7140000 [USER32.DLL], "CreateWindowW") called from "XUL.DLL" at address 0x011F1D0B and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") called from "XUL.DLL" at address 0x011EC42E. GetProcAddress(0xF7140000 [USER32.DLL], "CreateWindowA") called from "XUL.DLL" at address 0x011F1D0B and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") returned 0xF6DD0000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "WSCGetProviderInfo") called from "XUL.DLL" at address 0x011EC440 and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") called from "XUL.DLL" at address 0x011EC42E. LoadLibraryW("ws2_32.dll") returned 0xF6DD0000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "WSCGetProviderInfo") called from "XUL.DLL" at address 0x011EC440 and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") called from "XUL.DLL" at address 0x011EC42E. LoadLibraryW("ws2_32.dll") returned 0xF6DD0000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "WSCGetProviderInfo") called from "XUL.DLL" at address 0x011EC440 and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") called from "XUL.DLL" at address 0x011EC42E. LoadLibraryW("ws2_32.dll") returned 0xF6DD0000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "WSCGetProviderInfo") called from "XUL.DLL" at address 0x011EC440 and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("ws2_32.dll") called from "XUL.DLL" at address 0x011EC42E. LoadLibraryW("ws2_32.dll") returned 0xF6DD0000. LoadLibraryExW("C:\windows\system32\wbem\wbemprox.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "WINSPOOL.DRV" at address 0xF60E0000. Successfully hooked module. Loaded "OPENGL32.DLL" at address 0x7A820000. Successfully hooked module. Loaded "WINED3D.DLL" at address 0xF5DD0000. Successfully hooked module. Loaded "DXGI.DLL" at address 0xF6060000. Successfully hooked module. Loaded "WBEMPROX.DLL" at address 0xF6120000. Successfully hooked module. DllMain(0xF60E0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSPOOL.DRV" called. DllMain(0xF60E0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSPOOL.DRV" returned 1 (0x1). DllMain(0x7A820000, DLL_PROCESS_ATTACH, 0x00000000) in "OPENGL32.DLL" called. DllMain(0x7A820000, DLL_PROCESS_ATTACH, 0x00000000) in "OPENGL32.DLL" returned 1 (0x1). DllMain(0xF5DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINED3D.DLL" called. DllMain(0xF5DD0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINED3D.DLL" returned 1 (0x1). DllMain(0xF6060000, DLL_PROCESS_ATTACH, 0x00000000) in "DXGI.DLL" called. DllMain(0xF6060000, DLL_PROCESS_ATTACH, 0x00000000) in "DXGI.DLL" returned 1 (0x1). DllMain(0xF6120000, DLL_PROCESS_ATTACH, 0x00000000) in "WBEMPROX.DLL" called. DllMain(0xF6120000, DLL_PROCESS_ATTACH, 0x00000000) in "WBEMPROX.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\wbem\wbemprox.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF6120000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "WSCGetProviderInfo") called from "XUL.DLL" at address 0x011EC440 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6120000 [WBEMPROX.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF6131250. GetProcAddress(0xF6120000 [WBEMPROX.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF6131060. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetLogicalProcessorInformation") called from "XUL.DLL" at address 0x01223351 and returned 0x7B466800. [JavaScript Error: "Could not detect default browser: [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIExternalProtocolService.getApplicationDescription]" nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)" location: "JS frame :: resource:///modules/MigrationUtils.jsm :: getMigratorKeyForDefaultBrowser :: line 707" data: no]" {file: "resource:///modules/MigrationUtils.jsm" line: 713}] getMigratorKeyForDefaultBrowser@resource:///modules/MigrationUtils.jsm:713:7 MU_startupMigrator@resource:///modules/MigrationUtils.jsm:889:31 LoadLibraryW("user32.dll") called from "XUL.DLL" at address 0x0104B724. LoadLibraryW("user32.dll") returned 0xF7140000. LoadLibraryW("uxtheme.dll") called from "XUL.DLL" at address 0x01284824. LoadLibraryW("uxtheme.dll") returned 0xF6830000. GetProcAddress(0xF7140000 [USER32.DLL], "GetGestureInfo") called from "XUL.DLL" at address 0x0104B74B and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF7140000 [USER32.DLL], "CloseGestureInfoHandle") called from "XUL.DLL" at address 0x0104B75D and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF7140000 [USER32.DLL], "GetGestureExtraArgs") called from "XUL.DLL" at address 0x0104B76F and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF7140000 [USER32.DLL], "SetGestureConfig") called from "XUL.DLL" at address 0x0104B781 and returned 0xF71A09D0. GetProcAddress(0xF7140000 [USER32.DLL], "GetGestureConfig") called from "XUL.DLL" at address 0x0104B793 and returned 0xF71A0940. GetProcAddress(0xF7140000 [USER32.DLL], "RegisterTouchWindow") called from "XUL.DLL" at address 0x0104B7A5 and returned 0xF71C72B0. GetProcAddress(0xF7140000 [USER32.DLL], "UnregisterTouchWindow") called from "XUL.DLL" at address 0x0104B7B7 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF7140000 [USER32.DLL], "GetTouchInputInfo") called from "XUL.DLL" at address 0x0104B7C9 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF7140000 [USER32.DLL], "CloseTouchInputHandle") called from "XUL.DLL" at address 0x0104B7DB and returned NULL. Error: Procdure introuvable (127). LoadLibraryW("shell32.dll") called from "XUL.DLL" at address 0x014EE275. LoadLibraryW("shell32.dll") returned 0xF69F0000. GetProcAddress(0xF69F0000 [SHELL32.DLL], "SetCurrentProcessExplicitAppUserModelID") called from "XUL.DLL" at address 0x014EE283 and returned 0xF6A29E50. LoadLibraryExW("C:\windows\system32\msctf.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "MSCTF.DLL" at address 0xF6020000. Successfully hooked module. DllMain(0xF6020000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called. DllMain(0xF6020000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\msctf.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF6020000. GetProcAddress(0xF6020000 [MSCTF.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF603C900. GetProcAddress(0xF6020000 [MSCTF.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF603C910. GetProcAddress(0xF6020000 [MSCTF.DLL], "SetInputScopes") called from "XUL.DLL" at address 0x0154501A and returned 0xF603CCC0. LoadLibraryW("C:\windows\system32\winex11.drv") called from "IMM32.DLL" at address 0xF6D8D8B9. LoadLibraryW("C:\windows\system32\winex11.drv") returned 0xF6590000. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeInquire") called from "IMM32.DLL" at address 0xF6D8CF5A and returned 0xF65A9970. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeDestroy") called from "IMM32.DLL" at address 0xF6D8D022 and returned 0xF65A9B50. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeSelect") called from "IMM32.DLL" at address 0xF6D8D04E and returned 0xF65A9C90. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeConfigure") called from "IMM32.DLL" at address 0xF6D8D085 and returned 0xF65A9A50. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeEscape") called from "IMM32.DLL" at address 0xF6D8D0B1 and returned 0xF65A9BD0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeSetActiveContext") called from "IMM32.DLL" at address 0xF6D8D0DD and returned 0xF65A9ED0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeToAsciiEx") called from "IMM32.DLL" at address 0xF6D8D109 and returned 0xF65A9F30. GetProcAddress(0xF6590000 [WINEX11.DRV], "NotifyIME") called from "IMM32.DLL" at address 0xF6D8D135 and returned 0xF65A9F80. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeRegisterWord") called from "IMM32.DLL" at address 0xF6D8D161 and returned 0xF65AA5F0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeUnregisterWord") called from "IMM32.DLL" at address 0xF6D8D18D and returned 0xF65AA680. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeEnumRegisterWord") called from "IMM32.DLL" at address 0xF6D8D1B9 and returned 0xF65AA780. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeSetCompositionString") called from "IMM32.DLL" at address 0xF6D8D1E8 and returned 0xF65AA820. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeConversionList") called from "IMM32.DLL" at address 0xF6D8D217 and returned 0xF65A9AC0. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeProcessKey") called from "IMM32.DLL" at address 0xF6D8D246 and returned 0xF65A9C40. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeGetRegisterWordStyle") called from "IMM32.DLL" at address 0xF6D8D275 and returned 0xF65AA710. GetProcAddress(0xF6590000 [WINEX11.DRV], "ImeGetImeMenuItems") called from "IMM32.DLL" at address 0xF6D8D2A4 and returned 0xF65AAA50. LoadLibraryExW("shcore", 0x00000000, 0x00000800) called from "XUL.DLL" at address 0x0127DF7B. LoadLibraryExW("shcore", 0x00000000, 0x00000800) returned NULL. Error: Module introuvable (126). GetProcAddress(0xF6D80000 [IMM32.DLL], "ImmLockIMC") called from "WINEX11.DRV" at address 0xF65D7001 and returned 0xF6D91860. LoadLibraryExW("C:\windows\system32\ole32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. LoadLibraryExW("C:\windows\system32\ole32.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF6EE0000. GetProcAddress(0xF6EE0000 [OLE32.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned NULL. Error: Procdure introuvable (127). GetProcAddress(0xF6EE0000 [OLE32.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF6F2AA40. [JavaScript Error: "NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIProperties.get]" {file: "resource://gre/components/XULStore.js" line: 66}] LoadLibraryExW("C:\windows\system32\wpc.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "WPC.DLL" at address 0xF54A0000. Successfully hooked module. DllMain(0xF54A0000, DLL_PROCESS_ATTACH, 0x00000000) in "WPC.DLL" called. DllMain(0xF54A0000, DLL_PROCESS_ATTACH, 0x00000000) in "WPC.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\wpc.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF54A0000. GetProcAddress(0xF54A0000 [WPC.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF54A5320. GetProcAddress(0xF54A0000 [WPC.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF54A50B0. [JavaScript Error: "Could not detect default browser: [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIExternalProtocolService.getApplicationDescription]" nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)" location: "JS frame :: resource:///modules/MigrationUtils.jsm :: getMigratorKeyForDefaultBrowser :: line 707" data: no]" {file: "resource:///modules/MigrationUtils.jsm" line: 713}] getMigratorKeyForDefaultBrowser@resource:///modules/MigrationUtils.jsm:713:7 MigrationWizard.onImportSourcePageShow@chrome://browser/content/migration/migration.js:109:28 MigrationWizard.init@chrome://browser/content/migration/migration.js:56:5 onload@chrome://browser/content/migration/migration.xul:1:1 MU_showMigrationWizard@resource:///modules/MigrationUtils.jsm:841:5 MU_startupMigrator@resource:///modules/MigrationUtils.jsm:935:5 LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x011F204B. LoadLibraryExA("user32.dll", 0x00000000, 0x00000000) returned 0xF7140000. GetProcAddress(0xF7140000 [USER32.DLL], "GetWindowInfo") called from "XUL.DLL" at address 0x011F1E80 and returned 0xF71C45F0. LoadLibraryA("imm32.dll") called from "USER32.DLL" at address 0xF71D3FFE. LoadLibraryA("imm32.dll") returned 0xF6D80000. GetProcAddress(0xF6D80000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0xF71D3FD1 and returned 0xF6D8C950. GetProcAddress(0xF6D80000 [IMM32.DLL], "ImmIsUIMessageW") called from "USER32.DLL" at address 0xF71D3FD1 and returned 0xF6D8F550. LoadLibraryA("advapi32.dll") called from "UCRTBASE.DLL" at address 0x7EA5901E. LoadLibraryA("advapi32.dll") returned 0x7E8E0000. GetProcAddress(0x7E8E0000 [ADVAPI32.DLL], "SystemFunction036") called from "UCRTBASE.DLL" at address 0x7EA58FF1 and returned 0x7E8F72B0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CancelSynchronousIo") called from "XUL.DLL" at address 0x01078C32 and returned 0x7B43DFB0. LoadLibraryExW("c:\program files\mozilla firefox\softokn3.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "NSS3.DLL" at address 0x0090269C. Loaded "SOFTOKN3.DLL" at address 0x006B0000. Successfully hooked module. DllMain(0x006B0000, DLL_PROCESS_ATTACH, 0x00000000) in "SOFTOKN3.DLL" called. DllMain(0x006B0000, DLL_PROCESS_ATTACH, 0x00000000) in "SOFTOKN3.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\softokn3.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x006B0000. GetProcAddress(0x006B0000 [SOFTOKN3.DLL], "NSC_GetFunctionList") called from "NSS3.DLL" at address 0x009047C7 and returned 0x006B59FA. GetProcAddress(0x006B0000 [SOFTOKN3.DLL], "NSC_ModuleDBFunc") called from "NSS3.DLL" at address 0x009047C7 and returned 0x006B5A07. LoadLibraryExW("c:\program files\mozilla firefox\nssdbm3.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "NSSDBM3.DLL" at address 0x003E0000. Successfully hooked module. DllMain(0x003E0000, DLL_PROCESS_ATTACH, 0x00000000) in "NSSDBM3.DLL" called. DllMain(0x003E0000, DLL_PROCESS_ATTACH, 0x00000000) in "NSSDBM3.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\nssdbm3.dll", 0x00000000, 0x00000000) returned 0x003E0000. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_Open") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003E75D9. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_ReadSecmodDB") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003ED46A. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_ReleaseSecmodDBData") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003ED5C3. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_DeleteSecmodDB") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003ED3E4. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_AddSecmodDB") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003ED31F. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_Shutdown") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003E7706. GetProcAddress(0x003E0000 [NSSDBM3.DLL], "legacy_SetCryptFunctions") called from "NSS3.DLL" at address 0x009047C7 and returned 0x003E7C93. GetProcAddress(0x006B0000 [SOFTOKN3.DLL], "NSC_GetFunctionList") called from "NSS3.DLL" at address 0x009047C7 and returned 0x006B59FA. LoadLibraryExW("c:\program files\mozilla firefox\freebl3.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "FREEBL3.DLL" at address 0x0CB00000. Successfully hooked module. DllMain(0x0CB00000, DLL_PROCESS_ATTACH, 0x00000000) in "FREEBL3.DLL" called. DllMain(0x0CB00000, DLL_PROCESS_ATTACH, 0x00000000) in "FREEBL3.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\freebl3.dll", 0x00000000, 0x00000000) returned 0x0CB00000. GetProcAddress(0x0CB00000 [FREEBL3.DLL], "FREEBL_GetVector") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0CB01000. GetProcAddress(0x0CB00000 [FREEBL3.DLL], "FREEBL_GetVector") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0CB01000. LoadLibraryExW("c:\program files\mozilla firefox\nssckbi.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "NSSCKBI.DLL" at address 0x0CB60000. Successfully hooked module. DllMain(0x0CB60000, DLL_PROCESS_ATTACH, 0x00000000) in "NSSCKBI.DLL" called. DllMain(0x0CB60000, DLL_PROCESS_ATTACH, 0x00000000) in "NSSCKBI.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\nssckbi.dll", 0x00000000, 0x00000000) returned 0x0CB60000. GetProcAddress(0x0CB60000 [NSSCKBI.DLL], "C_GetFunctionList") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0CB6175F. DllMain(0xF6180000, DLL_PROCESS_DETACH, 0x00000000) in "DNSAPI.DLL" called. DllMain(0xF6180000, DLL_PROCESS_DETACH, 0x00000000) in "DNSAPI.DLL" returned 1 (0x1). DllMain(0xF6150000, DLL_PROCESS_DETACH, 0x00000000) in "NETAPI32.DLL" called. DllMain(0xF6150000, DLL_PROCESS_DETACH, 0x00000000) in "NETAPI32.DLL" returned 1 (0x1). Unloaded "DNSAPI.DLL" at address 0xF6180000. Unloaded "NETAPI32.DLL" at address 0xF6150000. LoadLibraryA("Dnsapi.dll") called from "XUL.DLL" at address 0x010CDCB7. Loaded "NETAPI32.DLL" at address 0xF6150000. Successfully hooked module. Loaded "DNSAPI.DLL" at address 0xF6180000. Successfully hooked module. DllMain(0xF6150000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" called. DllMain(0xF6150000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" returned 1 (0x1). DllMain(0xF6180000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" called. DllMain(0xF6180000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" returned 1 (0x1). LoadLibraryA("Dnsapi.dll") returned 0xF6180000. GetProcAddress(0xF6180000 [DNSAPI.DLL], "DnsQuery_A") called from "XUL.DLL" at address 0x010CDCCF and returned 0xF6191B70. GetProcAddress(0xF6180000 [DNSAPI.DLL], "DnsFree") called from "XUL.DLL" at address 0x010CDCDA and returned 0xF61932E0. LoadLibraryExA("PSAPI.DLL", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x012EB9A2. Loaded "PSAPI.DLL" at address 0xF53F0000. Successfully hooked module. DllMain(0xF53F0000, DLL_PROCESS_ATTACH, 0x00000000) in "PSAPI.DLL" called. DllMain(0xF53F0000, DLL_PROCESS_ATTACH, 0x00000000) in "PSAPI.DLL" returned 1 (0x1). LoadLibraryExA("PSAPI.DLL", 0x00000000, 0x00000000) returned 0xF53F0000. GetProcAddress(0xF53F0000 [PSAPI.DLL], "GetProcessMemoryInfo") called from "XUL.DLL" at address 0x012EBA70 and returned 0x7B464660. [JavaScript Error: "Error getting CPU revision. Exception: [Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIWindowsRegKey.readBinaryValue]" nsresult: "0x80004005 (NS_ERROR_FAILURE)" location: "JS frame :: resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///c:/program%20files/mozilla%20firefox/browser/features/aushelper@mozilla.org.xpi!/bootstrap.js :: startup :: line 67" data: no]" {file: "resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///c:/program%20files/mozilla%20firefox/browser/features/aushelper@mozilla.org.xpi!/bootstrap.js" line: 89}] startup@resource://gre/modules/addons/XPIProvider.jsm -> jar:file:///c:/program%20files/mozilla%20firefox/browser/features/aushelper@mozilla.org.xpi!/bootstrap.js:89:11 this.XPIProvider.callBootstrapMethod@resource://gre/modules/addons/XPIProvider.jsm:4944:9 this.XPIProvider.startup@resource://gre/modules/addons/XPIProvider.jsm:2868:13 callProvider@resource://gre/modules/AddonManager.jsm:235:12 _startProvider@resource://gre/modules/AddonManager.jsm:788:5 AddonManagerInternal.startup@resource://gre/modules/AddonManager.jsm:972:9 this.AddonManagerPrivate.startup@resource://gre/modules/AddonManager.jsm:3016:5 amManager.prototype.observe@resource://gre/components/addonManager.js:71:9 LoadLibraryExW("kernel32", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("kernel32", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetVersionExW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B479F10. LoadLibraryExW("C:\windows\system32\mmdevapi.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "MMDEVAPI.DLL" at address 0xF5480000. Successfully hooked module. DllMain(0xF5480000, DLL_PROCESS_ATTACH, 0x00000000) in "MMDEVAPI.DLL" called. DllMain(0xF5480000, DLL_PROCESS_ATTACH, 0x00000000) in "MMDEVAPI.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\mmdevapi.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF5480000. GetProcAddress(0xF5480000 [MMDEVAPI.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF54881F0. GetProcAddress(0xF5480000 [MMDEVAPI.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF5488200. LoadLibraryW("winepulse.drv") called from "MMDEVAPI.DLL" at address 0xF54878F4. Loaded "WINEPULSE.DRV" at address 0xF5450000. Successfully hooked module. DllMain(0xF5450000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEPULSE.DRV" called. DllMain(0xF5450000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEPULSE.DRV" returned 1 (0x1). LoadLibraryW("winepulse.drv") returned 0xF5450000. GetProcAddress(0xF5450000 [WINEPULSE.DRV], "GetPriority") called from "MMDEVAPI.DLL" at address 0xF5487923 and returned 0xF54635F0. GetProcAddress(0xF5450000 [WINEPULSE.DRV], "GetEndpointIDs") called from "MMDEVAPI.DLL" at address 0xF5487951 and returned 0xF54633F0. GetProcAddress(0xF5450000 [WINEPULSE.DRV], "GetAudioEndpoint") called from "MMDEVAPI.DLL" at address 0xF548797D and returned 0xF5463650. GetProcAddress(0xF5450000 [WINEPULSE.DRV], "GetAudioSessionManager") called from "MMDEVAPI.DLL" at address 0xF54879A9 and returned 0xF5463870. GetProcAddress(0xF5450000 [WINEPULSE.DRV], "GetPropValue") called from "MMDEVAPI.DLL" at address 0xF54879D5 and returned 0xF54638E0. LoadLibraryW("winealsa.drv") called from "MMDEVAPI.DLL" at address 0xF54878F4. Loaded "WINEALSA.DRV" at address 0xF5410000. Successfully hooked module. DllMain(0xF5410000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEALSA.DRV" called. DllMain(0xF5410000, DLL_PROCESS_ATTACH, 0x00000000) in "WINEALSA.DRV" returned 1 (0x1). LoadLibraryW("winealsa.drv") returned 0xF5410000. GetProcAddress(0xF5410000 [WINEALSA.DRV], "GetPriority") called from "MMDEVAPI.DLL" at address 0xF5487923 and returned 0xF5425540. GetProcAddress(0xF5410000 [WINEALSA.DRV], "GetEndpointIDs") called from "MMDEVAPI.DLL" at address 0xF5487951 and returned 0xF5425550. GetProcAddress(0xF5410000 [WINEALSA.DRV], "GetAudioEndpoint") called from "MMDEVAPI.DLL" at address 0xF548797D and returned 0xF5425700. GetProcAddress(0xF5410000 [WINEALSA.DRV], "GetAudioSessionManager") called from "MMDEVAPI.DLL" at address 0xF54879A9 and returned 0xF5425EC0. GetProcAddress(0xF5410000 [WINEALSA.DRV], "GetPropValue") called from "MMDEVAPI.DLL" at address 0xF54879D5 and returned 0xF5425F30. DllMain(0xF5410000, DLL_PROCESS_DETACH, 0x00000000) in "WINEALSA.DRV" called. DllMain(0xF5410000, DLL_PROCESS_DETACH, 0x00000000) in "WINEALSA.DRV" returned 1 (0x1). Unloaded "WINEALSA.DRV" at address 0xF5410000. LoadLibraryW("wineoss.drv") called from "MMDEVAPI.DLL" at address 0xF54878F4. LoadLibraryW("wineoss.drv") returned NULL. Error: Module introuvable (126). LoadLibraryW("winecoreaudio.drv") called from "MMDEVAPI.DLL" at address 0xF54878F4. LoadLibraryW("winecoreaudio.drv") returned NULL. Error: Module introuvable (126). LoadLibraryW("C:\windows\system32\mfplat.dll") called from "XUL.DLL" at address 0x010883EC. Loaded "MFPLAT.DLL" at address 0xF5420000. Successfully hooked module. DllMain(0xF5420000, DLL_PROCESS_ATTACH, 0x00000000) in "MFPLAT.DLL" called. DllMain(0xF5420000, DLL_PROCESS_ATTACH, 0x00000000) in "MFPLAT.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\mfplat.dll") returned 0xF5420000. LoadLibraryW("C:\windows\system32\mf.dll") called from "XUL.DLL" at address 0x010883EC. Loaded "MF.DLL" at address 0xF5400000. Successfully hooked module. DllMain(0xF5400000, DLL_PROCESS_ATTACH, 0x00000000) in "MF.DLL" called. DllMain(0xF5400000, DLL_PROCESS_ATTACH, 0x00000000) in "MF.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\mf.dll") returned 0xF5400000. LoadLibraryW("C:\windows\system32\dxva2.dll") called from "XUL.DLL" at address 0x010883EC. Loaded "DXVA2.DLL" at address 0xF4F10000. Successfully hooked module. DllMain(0xF4F10000, DLL_PROCESS_ATTACH, 0x00000000) in "DXVA2.DLL" called. DllMain(0xF4F10000, DLL_PROCESS_ATTACH, 0x00000000) in "DXVA2.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\dxva2.dll") returned 0xF4F10000. LoadLibraryW("C:\windows\system32\evr.dll") called from "XUL.DLL" at address 0x010883EC. Loaded "EVR.DLL" at address 0xF4CE0000. Successfully hooked module. DllMain(0xF4CE0000, DLL_PROCESS_ATTACH, 0x00000000) in "EVR.DLL" called. DllMain(0xF4CE0000, DLL_PROCESS_ATTACH, 0x00000000) in "EVR.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\evr.dll") returned 0xF4CE0000. GetProcAddress(0xF5420000 [MFPLAT.DLL], "MFStartup") called from "XUL.DLL" at address 0x01088320 and returned 0xF542C410. LoadLibraryExW("Kernel32.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("Kernel32.dll", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetProcessIoCounters") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B463E70. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetCurrentProcess") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B4667F0. LoadLibraryExW("c:\program files\mozilla firefox\mozavutil.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "MOZAVUTIL.DLL" at address 0x0F200000. Successfully hooked module. DllMain(0x0F200000, DLL_PROCESS_ATTACH, 0x00000000) in "MOZAVUTIL.DLL" called. DllMain(0x0F200000, DLL_PROCESS_ATTACH, 0x00000000) in "MOZAVUTIL.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\mozavutil.dll", 0x00000000, 0x00000000) returned 0x0F200000. LoadLibraryExW("c:\program files\mozilla firefox\mozavcodec.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. Loaded "MOZAVCODEC.DLL" at address 0x0F240000. Successfully hooked module. DllMain(0x0F240000, DLL_PROCESS_ATTACH, 0x00000000) in "MOZAVCODEC.DLL" called. DllMain(0x0F240000, DLL_PROCESS_ATTACH, 0x00000000) in "MOZAVCODEC.DLL" returned 1 (0x1). LoadLibraryExW("c:\program files\mozilla firefox\mozavcodec.dll", 0x00000000, 0x00000000) returned 0x0F240000. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_version") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D92A4. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "av_lockmgr_register") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D9BA5. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_alloc_context3") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D254C. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_close") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D84B1. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_decode_audio4") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D7904. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_decode_video2") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D765D. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_find_decoder") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D86C0. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_flush_buffers") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D92B6. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_open2") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D664B. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "avcodec_register_all") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2C9750. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "av_init_packet") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2C97AB. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "av_parser_init") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D28F6. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "av_parser_close") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D2D2E. GetProcAddress(0x0F240000 [MOZAVCODEC.DLL], "av_parser_parse2") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2D2A88. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_log_set_level") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2090B8. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_malloc") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F209B11. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_freep") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F209C66. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_frame_alloc") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F206CEB. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_frame_free") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F206D0E. GetProcAddress(0x0F200000 [MOZAVUTIL.DLL], "av_frame_unref") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0F2074E3. LoadLibraryExW("C:\windows\system32\quartz.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "DSOUND.DLL" at address 0xF4C90000. Successfully hooked module. Loaded "COMCTL32.DLL" at address 0xF4720000. Successfully hooked module. Loaded "MSVFW32.DLL" at address 0xF4C60000. Successfully hooked module. Loaded "QUARTZ.DLL" at address 0xF4820000. Successfully hooked module. DllMain(0xF4C90000, DLL_PROCESS_ATTACH, 0x00000000) in "DSOUND.DLL" called. DllMain(0xF4C90000, DLL_PROCESS_ATTACH, 0x00000000) in "DSOUND.DLL" returned 1 (0x1). DllMain(0xF4720000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" called. LoadLibraryA("uxtheme.dll") called from "COMCTL32.DLL" at address 0xF47B3DAE. LoadLibraryA("uxtheme.dll") returned 0xF6830000. GetProcAddress(0xF6830000 [UXTHEME.DLL], "IsThemeActive") called from "COMCTL32.DLL" at address 0xF47B3D81 and returned 0xF6845910. DllMain(0xF4720000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" returned 1 (0x1). DllMain(0xF4C60000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVFW32.DLL" called. DllMain(0xF4C60000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVFW32.DLL" returned 1 (0x1). DllMain(0xF4820000, DLL_PROCESS_ATTACH, 0x00000000) in "QUARTZ.DLL" called. DllMain(0xF4820000, DLL_PROCESS_ATTACH, 0x00000000) in "QUARTZ.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\quartz.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF4820000. GetProcAddress(0xF4820000 [QUARTZ.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF4852B70. GetProcAddress(0xF4820000 [QUARTZ.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF4852920. [JavaScript Warning: "HTTP Content-Type of video/mp4 is not supported. Load of media resource chrome://gfxsanity/content/videotest.mp4 failed." {file: "chrome://gfxsanity/content/sanitytest.html" line: 0}] GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43F050. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateDirectoryW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45C3E0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CloseHandle") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B4601D0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindFirstFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B4414B0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "SetFilePointer") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43EA40. GetProcAddress(0x7B410000 [KERNEL32.DLL], "WriteFile") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43DC40. GetProcAddress(0x7B410000 [KERNEL32.DLL], "RemoveDirectoryW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45C670. GetProcAddress(0x7B410000 [KERNEL32.DLL], "MoveFileExW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45BFE0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateDirectoryW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45C3E0. LoadLibraryExA("WININET.dll", 0x00000000, 0x00000000) called from "XUL.DLL" at address 0x012EB9A2. Loaded "MPR.DLL" at address 0xF4C40000. Successfully hooked module. Loaded "WININET.DLL" at address 0xF46B0000. Successfully hooked module. DllMain(0xF4C40000, DLL_PROCESS_ATTACH, 0x00000000) in "MPR.DLL" called. DllMain(0xF4C40000, DLL_PROCESS_ATTACH, 0x00000000) in "MPR.DLL" returned 1 (0x1). DllMain(0xF46B0000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" called. DllMain(0xF46B0000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" returned 1 (0x1). LoadLibraryExA("WININET.dll", 0x00000000, 0x00000000) returned 0xF46B0000. GetProcAddress(0xF46B0000 [WININET.DLL], "InternetGetConnectedStateExW") called from "XUL.DLL" at address 0x012EBA70 and returned 0xF46D05D0. GetProcAddress(0xF46B0000 [WININET.DLL], "InternetQueryOptionW") called from "XUL.DLL" at address 0x012EBA70 and returned 0xF46D3AF0. GetProcAddress(0xF46B0000 [WININET.DLL], "InternetQueryOptionW") called from "XUL.DLL" at address 0x012EBA70 and returned 0xF46D3AF0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindFirstFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B4414B0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindClose") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B440A70. LoadLibraryExW("ws2_32.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("ws2_32.dll", 0x00000000, 0x00000000) returned 0xF6DD0000. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "getaddrinfo") called from "NSS3.DLL" at address 0x009047C7 and returned 0xF6DED1A0. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "freeaddrinfo") called from "NSS3.DLL" at address 0x009047C7 and returned 0xF6DE7FF0. GetProcAddress(0xF6DD0000 [WS2_32.DLL], "getnameinfo") called from "NSS3.DLL" at address 0x009047C7 and returned 0xF6DEDE40. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindNextFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B440340. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. [JavaScript Warning: "To play video formats video/mp4, you need to install extra Microsoft software, see https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows" {file: "chrome://gfxsanity/content/sanitytest.html" line: 0}] LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FormatMessageW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B443D60. LoadLibraryW("msimg32") called from "XUL.DLL" at address 0x011A2346. LoadLibraryW("msimg32") returned 0xF6D70000. GetProcAddress(0xF6D70000 [MSIMG32.DLL], "AlphaBlend") called from "XUL.DLL" at address 0x011A2356 and returned 0xF701C390. LoadLibraryExW("C:\windows\system32\explorerframe.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "OLE32.DLL" at address 0xF6EF8075. Loaded "EXPLORERFRAME.DLL" at address 0xF4C20000. Successfully hooked module. DllMain(0xF4C20000, DLL_PROCESS_ATTACH, 0x00000000) in "EXPLORERFRAME.DLL" called. DllMain(0xF4C20000, DLL_PROCESS_ATTACH, 0x00000000) in "EXPLORERFRAME.DLL" returned 1 (0x1). LoadLibraryExW("C:\windows\system32\explorerframe.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0xF4C20000. GetProcAddress(0xF4C20000 [EXPLORERFRAME.DLL], "DllCanUnloadNow") called from "OLE32.DLL" at address 0xF6EF8093 and returned 0xF4C23E60. GetProcAddress(0xF4C20000 [EXPLORERFRAME.DLL], "DllGetClassObject") called from "OLE32.DLL" at address 0xF6EF80A5 and returned 0xF4C23FE0. LoadLibraryExW("Kernel32", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("Kernel32", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetNativeSystemInfo") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B435C50. LoadLibraryExW("Kernel32", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("Kernel32", 0x00000000, 0x00000000) returned 0x7B410000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetVersionExW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B479F10. GetProcAddress(0x7B410000 [KERNEL32.DLL], "IsProcessorFeaturePresent") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B435D00. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateMutexW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B471430. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. LoadLibraryExW("xul.dll", 0x00000000, 0x00000000) called from "NSS3.DLL" at address 0x0090269C. LoadLibraryExW("xul.dll", 0x00000000, 0x00000000) returned 0x00C20000. GetProcAddress(0x00C20000 [XUL.DLL], "workerlz4_maxCompressedSize") called from "NSS3.DLL" at address 0x009047C7 and returned 0x0127C784. GetProcAddress(0x00C20000 [XUL.DLL], "workerlz4_compress") called from "NSS3.DLL" at address 0x009047C7 and returned 0x012817C2. LoadLibraryW("C:\windows\system32\rsaenh.dll") called from "ADVAPI32.DLL" at address 0x7E8F375E. Loaded "RSAENH.DLL" at address 0xF4660000. Successfully hooked module. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_ATTACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). [JavaScript Warning: "Content Security Policy: Directive frame-src has been deprecated. Please use directive child-src instead."] LoadLibraryW("C:\windows\system32\rsaenh.dll") returned 0xF4660000. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPAcquireContext") called from "ADVAPI32.DLL" at address 0x7E8F3791 and returned 0xF467AD80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPCreateHash") called from "ADVAPI32.DLL" at address 0x7E8F37BD and returned 0xF467F520. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDecrypt") called from "ADVAPI32.DLL" at address 0x7E8F37EA and returned 0xF467E560. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDeriveKey") called from "ADVAPI32.DLL" at address 0x7E8F3817 and returned 0xF4680030. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyHash") called from "ADVAPI32.DLL" at address 0x7E8F3844 and returned 0xF4679FA0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDestroyKey") called from "ADVAPI32.DLL" at address 0x7E8F3871 and returned 0xF467A090. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateHash") called from "ADVAPI32.DLL" at address 0x7E8F389E and returned 0xF467B0F0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPDuplicateKey") called from "ADVAPI32.DLL" at address 0x7E8F38BF and returned 0xF467B360. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPEncrypt") called from "ADVAPI32.DLL" at address 0x7E8F38E0 and returned 0xF467D1C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPExportKey") called from "ADVAPI32.DLL" at address 0x7E8F390D and returned 0xF467B5C0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenKey") called from "ADVAPI32.DLL" at address 0x7E8F393A and returned 0xF467B7B0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGenRandom") called from "ADVAPI32.DLL" at address 0x7E8F3967 and returned 0xF467BBC0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3994 and returned 0xF467FC10. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F39C1 and returned 0xF467C320. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F39EE and returned 0xF467C690. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPGetUserKey") called from "ADVAPI32.DLL" at address 0x7E8F3A1B and returned 0xF467CE30. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashData") called from "ADVAPI32.DLL" at address 0x7E8F3A48 and returned 0xF467CF70. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPHashSessionKey") called from "ADVAPI32.DLL" at address 0x7E8F3A75 and returned 0xF467EAD0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPImportKey") called from "ADVAPI32.DLL" at address 0x7E8F3AA2 and returned 0xF467B710. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPReleaseContext") called from "ADVAPI32.DLL" at address 0x7E8F3ACF and returned 0xF467EC40. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetHashParam") called from "ADVAPI32.DLL" at address 0x7E8F3AFC and returned 0xF467ED00. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetKeyParam") called from "ADVAPI32.DLL" at address 0x7E8F3B29 and returned 0xF467BC80. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSetProvParam") called from "ADVAPI32.DLL" at address 0x7E8F3B56 and returned 0xF4680EE0. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPSignHash") called from "ADVAPI32.DLL" at address 0x7E8F3B83 and returned 0xF4681180. GetProcAddress(0xF4660000 [RSAENH.DLL], "CPVerifySignature") called from "ADVAPI32.DLL" at address 0x7E8F3BB0 and returned 0xF4681490. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" called. DllMain(0xF4660000, DLL_PROCESS_DETACH, 0x00000000) in "RSAENH.DLL" returned 1 (0x1). Unloaded "RSAENH.DLL" at address 0xF4660000. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateDirectoryW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45C3E0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CreateFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43F050. GetProcAddress(0x7B410000 [KERNEL32.DLL], "CloseHandle") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B4601D0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "SetFilePointer") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43EA40. GetProcAddress(0x7B410000 [KERNEL32.DLL], "WriteFile") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43DC40. GetProcAddress(0x7B410000 [KERNEL32.DLL], "MoveFileExW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B45BFE0. [JavaScript Warning: "Unknown property zoom. Declaration dropped." {file: "https://www.mozilla.org/media/css/firefox_firstrun-bundle.82e1aea605c6.css" line: 1 column: 604 source: ".notification-banner{background-color:#f4f2f2;background-repeat:repeat-x;background-image:-webkit-linear-gradient(left,#dad9d8,#f4f2f2);-ms-filter:"progid:DXImageTransform.Microsoft.gradient(startColorstr='#dad9d8', endColorstr='#f4f2f2', GradientType=1)";background-image:linear-gradient(to right,#dad9d8,#f4f2f2);background-image:url("/media/img/notification/background.d05af05e08eb.png");background-color:#dad9d8;background-position:top center;background-repeat:no-repeat;overflow:hidden}.notification-banner "}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://www.mozilla.org/media/css/firefox_firstrun-bundle.82e1aea605c6.css" line: 1 column: 1262 source: ".notification-banner{background-color:#f4f2f2;background-repeat:repeat-x;background-image:-webkit-linear-gradient(left,#dad9d8,#f4f2f2);-ms-filter:"progid:DXImageTransform.Microsoft.gradient(startColorstr='#dad9d8', endColorstr='#f4f2f2', GradientType=1)";background-image:linear-gradient(to right,#dad9d8,#f4f2f2);background-image:url("/media/img/notification/background.d05af05e08eb.png");background-color:#dad9d8;background-position:top center;background-repeat:no-repeat;overflow:hidden}.notification-banner "}] [JavaScript Warning: "Expected media feature name but found -o-min-device-pixel-ratio." {file: "https://www.mozilla.org/media/css/firefox_firstrun-bundle.82e1aea605c6.css" line: 1 column: 1333 source: ".notification-banner{background-color:#f4f2f2;background-repeat:repeat-x;background-image:-webkit-linear-gradient(left,#dad9d8,#f4f2f2);-ms-filter:"progid:DXImageTransform.Microsoft.gradient(startColorstr='#dad9d8', endColorstr='#f4f2f2', GradientType=1)";background-image:linear-gradient(to right,#dad9d8,#f4f2f2);background-image:url("/media/img/notification/background.d05af05e08eb.png");background-color:#dad9d8;background-position:top center;background-repeat:no-repeat;overflow:hidden}.notification-banner "}] [JavaScript Warning: "Unknown property zoom. Declaration dropped." {file: "https://www.mozilla.org/media/css/firefox-update-notification-modal-bundle.088f1fc278bc.css" line: 1 column: 1871 source: "html.noscroll body{overflow:hidden}#modal{background:#000;background:rgba(0,0,0,.85);width:100%;height:101%;position:fixed;top:0;right:0;bottom:0;left:0;z-index:9999999;overflow:auto;-webkit-animation:sand-fade-in .3s ease-in 0s 1 normal both;animation:sand-fade-in .3s ease-in 0s 1 normal both}#modal .window{padding:20px;color:#333}#modal .window .inner{position:relative}#modal .window .inner>header{display:block;height:auto;font-size:48px;font-size:3rem;line-height:1.3;padding:0 60px;text-align:center;colo"}] [JavaScript Warning: "Content Security Policy: Directive frame-src has been deprecated. Please use directive child-src instead."] [JavaScript Warning: "Content Security Policy: Couldnt process unknown directive worker-src"] [JavaScript Warning: "Error in parsing value for -webkit-text-size-adjust. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 354 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown pseudo-class or pseudo-element -webkit-search-cancel-button. Ruleset ignored due to bad selector." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 1593 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property speak. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 2368 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property appearance. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 5109 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown pseudo-class or pseudo-element -ms-input-placeholder. Ruleset ignored due to bad selector." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 6010 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property appearance. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 17768 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 20729 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 20766 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property user-select. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 22770 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown pseudo-class or pseudo-element -webkit-inner-spin-button. Ruleset ignored due to bad selector." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 25262 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 29113 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 29150 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 29795 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 29832 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 30339 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 30376 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property appearance. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 30761 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property user-select. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 31047 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 31500 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 31537 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown pseudo-class or pseudo-element -ms-value. Ruleset ignored due to bad selector." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 31854 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown pseudo-class or pseudo-element -ms-value. Ruleset ignored due to bad selector." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 31905 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property user-select. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 34133 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for width. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 36516 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for width. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 36565 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for width. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 38172 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for width. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 38221 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for height. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 38810 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for height. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 38861 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property column-width. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 39310 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 40774 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 40811 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Error in parsing value for color. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 45154 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property text-wrap. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 46273 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property text-wrap. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 48796 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 55089 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 55126 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 55587 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 55624 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Unknown property user-select. Declaration dropped." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 62375 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 63052 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 63089 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 64221 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 64258 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found -webkit-min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 64765 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] [JavaScript Warning: "Expected media feature name but found min-device-pixel-ratio." {file: "https://accounts-static.cdn.mozilla.net/styles/be7b0796.en.css" line: 1 column: 64802 source: "/*! normalize.css v2.1.3 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a{background:0 0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotte"}] GetProcAddress(0x7B410000 [KERNEL32.DLL], "DeleteFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43FA60. GetProcAddress(0x7B410000 [KERNEL32.DLL], "GetFileInformationByHandle") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43E2A0. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FileTimeToSystemTime") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B477890. GetProcAddress(0x7B410000 [KERNEL32.DLL], "ReadFile") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B43D7F0. [JavaScript Warning: "To play video formats audio/mp4, video/mp4, you need to install extra Microsoft software, see https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows" {file: "chrome://browser/content/browser.xul" line: 0}] GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindClose") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B440A70. GetProcAddress(0x7B410000 [KERNEL32.DLL], "FindNextFileW") called from "NSS3.DLL" at address 0x009047C7 and returned 0x7B440340.