Supermium 122 does not start on Windows XP SP3 x32

oleg-dubinskiy commented 6 months ago

Describe the bug Latest Supermium 122 Release installed from installer does not start on Windows XP Professional SP3 x32 with all the latest updates (for XP until 2014 + for Embedded POSReady unitl 2019). It fails to find _wsplitpath_s export in msvcrt.dll. Also, the log provides the following information:

[0307/232557.825:ERROR:crashpad_client_win.cc(476)] InitializeProcThreadAttributeList (size): Для указанной программы требуется более поздняя версия Windows. (0x47E)
[0307/232602.293:ERROR:crashpad_client_win.cc(144)] crash server failed to launch, self-terminating
[0307/232606.934:ERROR:crashpad_client_win.cc(476)] InitializeProcThreadAttributeList (size): Для указанной программы требуется более поздняя версия Windows. (0x47E)
[0307/232610.090:ERROR:crashpad_client_win.cc(144)] crash server failed to launch, self-terminating
[0307/233309.779:ERROR:crashpad_client_win.cc(476)] InitializeProcThreadAttributeList (size): Для указанной программы требуется более поздняя версия Windows. (0x47E)
[0307/233312.904:ERROR:crashpad_client_win.cc(144)] crash server failed to launch, self-terminating

It fails due to VerifyVersionInfoW from kernel32.dll returns ERROR_OLD_WIN_VERSION. It runs properly only on Windows Server 2003 SP2 however, without any updates, for comparison.

To Reproduce Steps to reproduce the behavior:

Download Supermium 122 here: https://github.com/win32ss/supermium/releases/download/v122/supermium_122_32_setup.exe.
Install it by double-clicking on the installer.
After installing, try to run it by double clicking on chrome.exe or on the link to it.
An error about missing _wsplitpath_s export in msvcrt.dll should now appear. Then the browser does not start. Also, the error logging described above appears in debug.log.

Expected behavior Browser should start properly without any errors/error logging.

Screenshots supermium

Desktop:

OS: Windows XP SP3 x32.
Bitness of browser: x32.

Additional context Regarding an error from the log, it seems to be already a known issue, but missing export error was not reported yet. Perhaps it makes sense to switch on non-secured _wsplitpath, which exists on Windows XP SP3 too? :thinking:

IDA-RE-things commented 6 months ago

Known/related issue: #323.

win32ss commented 6 months ago

The problem is that Supermium components do not import directly from msvcrt, relying solely on the statically-linked VC++ 14 runtime. Only system components such as setupapi import from msvcrt in the Supermium dependency tree.

I would recommend trying to launch chrome.exe in Dependency Walker to identify the module that does import from msvcrt.

oleg-dubinskiy commented 6 months ago

The problem is that Supermium components do not import directly from msvcrt, relying solely on the statically-linked VC++ 14 runtime. Only system components such as setupapi import from msvcrt in the Supermium dependency tree.

I would recommend trying to launch chrome.exe in Dependency Walker to identify the module that does import from msvcrt.

OK, here it is: It is indeed imported indirectly.

IDA-RE-things commented 6 months ago

Strange issue... Are you can show the callstack for it, when it happens ? Looks like a problem with ReactOS dll's Also Dependency Walker itself can trace process of DLL loading and function lookup. You can try. Not just open to show dependencies, but launch in trace mode.

oleg-dubinskiy commented 6 months ago

Strange issue. Are you can show the callstack for it, when it happens ? Looks like a problem with ReactOS dll's

This is not ReactOS, I tested it on Windows XP. Or you mean its dlls used in Supermium somewhere?

IDA-RE-things commented 6 months ago

Yes, not ReactOS. I'm seen it here: https://github.com/win32ss/supermium/issues/339 But try this:

Dependency Walker itself can trace process of DLL loading and function lookup. You can try. Not just open to show dependencies, but launch in trace mode.

and show the log

oleg-dubinskiy commented 6 months ago

Yes, not ReactOS. But try this:

Dependency Walker itself can trace process of DLL loading and function lookup. You can try. Not just open to show dependencies, but launch in trace mode.

and show the log

OK, done. Here's the log (everything what appear before error is shown). I guess this is enough:

Warning: At least one delay-load dependency module was not found.
Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.

--------------------------------------------------------------------------------
Starting profile on 08.03.2024 at 20:43:28

Operating System: Microsoft Windows XP Professional (32-bit), version 5.01.2600 Service Pack 3
Program Executable: c:\program files\supermium\CHROME.EXE
Program Arguments: 
Starting Directory: C:\Program Files\Supermium\
Search Path: C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Telegram\Telegram_DLL

Options Selected:
     Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
     Log DllMain calls for process attach and process detach messages.
     Log DllMain calls for all other messages, including thread attach and thread detach.
     Hook the process to gather more detailed dependency information.
     Log LoadLibrary function calls.
     Log GetProcAddress function calls.
     Log debug output messages.
     Automatically open and profile child processes.
--------------------------------------------------------------------------------

Started "CHROME.EXE" (process 0x98) at address 0x00400000.  Successfully hooked module.
Loaded "NTDLL.DLL" at address 0x7ED30000.  Successfully hooked module.
Loaded "KERNEL32.DLL" at address 0x7C800000.  Successfully hooked module.
DllMain(0x7ED30000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
Injected "DEPENDS.DLL" at address 0x08370000.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
Loaded "CHROME_ELF.DLL" at address 0x01C20000.  Successfully hooked module.
Loaded "PROGWRP.DLL" at address 0x07000000.  Successfully hooked module.
Loaded "PSAPI.DLL" at address 0x76BE0000.  Successfully hooked module.
Loaded "SETUPAPI.DLL" at address 0x77910000.  Successfully hooked module.
Loaded "ADVAPI32.DLL" at address 0x77DC0000.  Successfully hooked module.
Loaded "RPCRT4.DLL" at address 0x77E70000.  Successfully hooked module.
Loaded "SECUR32.DLL" at address 0x77FE0000.  Successfully hooked module.
Loaded "GDI32.DLL" at address 0x77F10000.  Successfully hooked module.
Loaded "USER32.DLL" at address 0x7E360000.  Successfully hooked module.
Loaded "MSVCRT.DLL" at address 0x77C00000.  Successfully hooked module.
Loaded "PDH.DLL" at address 0x74C70000.  Successfully hooked module.
Loaded "COMDLG32.DLL" at address 0x76380000.  Successfully hooked module.
Loaded "COMCTL32.DLL" at address 0x773C0000.  Successfully hooked module.
Loaded "SHLWAPI.DLL" at address 0x77F60000.  Successfully hooked module.
Loaded "SHELL32.DLL" at address 0x7C9C0000.  Successfully hooked module.
Loaded "CRYPT32.DLL" at address 0x77A70000.  Successfully hooked module.
Loaded "MSASN1.DLL" at address 0x77B10000.  Successfully hooked module.
Loaded "ODBC32.DLL" at address 0x73FB0000.  Successfully hooked module.
Loaded "ODBCBCP.DLL" at address 0x5C050000.  Successfully hooked module.
Loaded "VERSION.DLL" at address 0x77BF0000.  Successfully hooked module.
Loaded "OLE32.DLL" at address 0x7EDF0000.  Successfully hooked module.
Loaded "OLEAUT32.DLL" at address 0x77110000.  Successfully hooked module.
Loaded "MSVCP60.DLL" at address 0x76050000.  Successfully hooked module.
Entrypoint reached. All implicit modules have been loaded.
DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PSAPI.DLL" called.
DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PSAPI.DLL" returned 131073 (0x20001).
DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SECUR32.DLL" called.
DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SECUR32.DLL" returned 1 (0x1).
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "RPCRT4.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x7E360000, DLL_PROCESS_ATTACH, 0x000AFD30) in "USER32.DLL" called.
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "USER32.DLL" at address 0x7E39E01C.
Loaded "IMM32.DLL" at address 0x76360000.  Successfully hooked module.
DllMain(0x76360000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x7E38D486 and returned 0x7636E679.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x7E38D49B and returned 0x7636E6A0.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x7E38D4B0 and returned 0x7636EB34.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x7E38D4C5 and returned 0x7636EB4F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x7E38D4DA and returned 0x7636E769.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x7E38D4EF and returned 0x7636E79D.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x7E38D504 and returned 0x7636E804.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x7E38D519 and returned 0x7636E90C.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x7E38D52E and returned 0x7636E995.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x7E38D543 and returned 0x7636EAB9.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x7E38D558 and returned 0x76362378.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x7E38D56D and returned 0x76367C25.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x7E38D582 and returned 0x76367EA1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x7E38D597 and returned 0x76365B62.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x7E38D5AC and returned 0x7636548A.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x7E38D5C1 and returned 0x76363B48.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x7E38D5D6 and returned 0x763623A1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x7E38D5EB and returned 0x763697BE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x7E38D600 and returned 0x76368C54.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x7E38D615 and returned 0x763629D3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x7E38D62A and returned 0x763622B3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x7E38D63F and returned 0x76364829.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x7E38D654 and returned 0x76364791.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x7E38D669 and returned 0x763649CE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x7E38D67E and returned 0x763648C1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x7E38D693 and returned 0x76364DD6.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x7E38D6A8 and returned 0x76366FD8.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x7E38D6BD and returned 0x76369F2D.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x7E38D6D2 and returned 0x76369F45.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x7E38D6E7 and returned 0x7636776F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x7E38D6FC and returned 0x7636470B.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x7E38D711 and returned 0x76366E43.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x7E38D726 and returned 0x763677CD.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x7E38D73B and returned 0x76363B93.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x7E38D750 and returned 0x76364E54.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x7E38D765 and returned 0x76367A7B.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x7E38D77A and returned 0x76363A86.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x7E38D78F and returned 0x763645F7.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x7E38D7A4 and returned 0x76364D6E.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x7E38D7B9 and returned 0x76369C7F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x7E38D7CE and returned 0x76369BAC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x7E38D7E3 and returned 0x76369BFC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x7E38D7F8 and returned 0x76363AC3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x7E38D80D and returned 0x763629DE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x7E38D822 and returned 0x7636DE65.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x7E38D837 and returned 0x76368719.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x7E38D84C and returned 0x7636E0D3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x7E38D861 and returned 0x76372E03.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x7E38D876 and returned 0x76368B8E.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x7E38D88B and returned 0x763667D5.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x7E38D8A0 and returned 0x763667FC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x7E38D8B5 and returned 0x763637CA.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x7E38D8CA and returned 0x76369D74.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x7E38D8DF and returned 0x76373F0B.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x7E38D8F4 and returned 0x763734DA.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x7E38D909 and returned 0x76373511.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x7E38D91E and returned 0x76374304.
DllMain(0x76360000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x76360000.
DllMain(0x7E360000, DLL_PROCESS_ATTACH, 0x000AFD30) in "USER32.DLL" returned 1 (0x1).
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "GDI32.DLL" called.
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCRT.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "MSVCRT.DLL" at address 0x77C279C2 and returned 0x7C80C9F5.
DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHLWAPI.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D29 and returned 0x7C82FFAD.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D38 and returned 0x7C864E33.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D47 and returned 0x7C824AD4.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ChangeTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D57 and returned 0x7C80BE3E.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D65 and returned 0x7C824A16.
DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHLWAPI.DLL" returned 1 (0x1).
DllMain(0x773C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMCTL32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "COMCTL32.DLL" at address 0x7744B789 and returned 0x7C80AEE9.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "COMCTL32.DLL" at address 0x7744B60C and returned 0x7C815294.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "COMCTL32.DLL" at address 0x7744B69E and returned 0x7C80A804.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "COMCTL32.DLL" at address 0x7744B6F4 and returned 0x7C80A835.
DllMain(0x773C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMCTL32.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHELL32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "SHELL32.DLL" at address 0x7CA27676 and returned 0x7C815294.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "SHELL32.DLL" at address 0x7C9E76B9 and returned 0x7C80A804.
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA272B0.
LoadLibraryW("comctl32.dll") returned 0x773C0000.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "SHELL32.DLL" at address 0x7C9E7724 and returned 0x7C80A835.
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA273DE.
LoadLibraryW("comctl32.dll") returned 0x773C0000.
GetProcAddress(0x773C0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "SHELL32.DLL" at address 0x7CA273EE and returned 0x773C4088.
DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMDLG32.DLL" called.
DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMDLG32.DLL" returned 1 (0x1).
DllMain(0x77B10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSASN1.DLL" called.
DllMain(0x77B10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSASN1.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CRYPT32.DLL" called.
LoadLibraryA("advapi32.dll") called from "CRYPT32.DLL" at address 0x77A76566.
LoadLibraryA("advapi32.dll") returned 0x77DC0000.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptAcquireContextW") called from "CRYPT32.DLL" at address 0x77A76579 and returned 0x77DD7F99.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptSignHashW") called from "CRYPT32.DLL" at address 0x77A7658B and returned 0x77E02359.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptVerifySignatureW") called from "CRYPT32.DLL" at address 0x77A7659D and returned 0x77DE3522.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptSetProviderW") called from "CRYPT32.DLL" at address 0x77A765AF and returned 0x77E02FF1.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptEnumProvidersW") called from "CRYPT32.DLL" at address 0x77A765C1 and returned 0x77E02E99.
LoadLibraryA("kernel32.dll") called from "CRYPT32.DLL" at address 0x77A77982.
LoadLibraryA("kernel32.dll") returned 0x7C800000.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "RegisterWaitForSingleObject") called from "CRYPT32.DLL" at address 0x77A7799D and returned 0x7C824B24.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "UnregisterWaitEx") called from "CRYPT32.DLL" at address 0x77A779B7 and returned 0x7C82412F.
LoadLibraryA("advapi32.dll") called from "MSASN1.DLL" at address 0x77B135EA.
LoadLibraryA("advapi32.dll") returned 0x77DC0000.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "RegOpenKeyExA") called from "MSASN1.DLL" at address 0x77B13600 and returned 0x77DC7852.
DllMain(0x77A70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x73FB0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBC32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "TryEnterCriticalSection") called from "ODBC32.DLL" at address 0x73FBFC73 and returned 0x7ED31118.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "TryEnterCriticalSection") called from "ODBC32.DLL" at address 0x73FBF094 and returned 0x7ED31118.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "SetCriticalSectionSpinCount") called from "ODBC32.DLL" at address 0x73FBF0A1 and returned 0x7ED4A990.
LoadLibraryExA("C:\WINDOWS\system32\odbcint.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "ODBC32.DLL" at address 0x73FBF4E2.
Loaded "ODBCINT.DLL" at address 0x1F840000.  Successfully hooked module.
LoadLibraryExA("C:\WINDOWS\system32\odbcint.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x1F840000.
DllMain(0x73FB0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBC32.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x76050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCP60.DLL" called.
DllMain(0x76050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCP60.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x74C70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PDH.DLL" called.
LoadLibraryW("rpcrt4.dll") called from "RPCRT4.DLL" at address 0x77E8B525.
LoadLibraryW("rpcrt4.dll") returned 0x77E70000.
DllMain(0x74C70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PDH.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PROGWRP.DLL" called.
Loaded "DBGHELP.DLL" at address 0x59C60000.  Successfully hooked module.
DllMain(0x59C60000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" called.
DllMain(0x59C60000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" returned 1 (0x1).
Loaded "WS2_32.DLL" at address 0x71A90000.  Successfully hooked module.
Loaded "WS2HELP.DLL" at address 0x71A80000.  Successfully hooked module.
DllMain(0x71A80000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL" called.
DllMain(0x71A80000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
Loaded "IPHLPAPI.DLL" at address 0x76D50000.  Successfully hooked module.
DllMain(0x76D50000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" called.
DllMain(0x76D50000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" returned 1 (0x1).
Loaded "WEVTAPI.DLL" at address 0x6DC40000.  Successfully hooked module.

win32ss commented 6 months ago

I don't see any issues with msvcrt there. But Dependency Walker should also create new MDI windows for debugging child processes at the same time, where problems may be occurring.

IDA-RE-things commented 6 months ago

I don't see any issues with msvcrt there. But Dependency Walker should also create new MDI windows for debugging child processes at the same time, where problems may be occurring.

Thats true, no errors here. @oleg-dubinskiy, Are you checked "Automatically open and profile child processes" ?

oleg-dubinskiy commented 6 months ago

I don't see any issues with msvcrt there. But Dependency Walker should also create new MDI windows for debugging child processes at the same time, where problems may be occurring.

Thats true, no errors here. @oleg-dubinskiy, Are you checked "Automatically open and profile child processes" ?

Yes, that checkbox was enabled automatically by default from the start. Here's my full options setup if what:

oleg-dubinskiy commented 6 months ago

I don't see any issues with msvcrt there. But Dependency Walker should also create new MDI windows for debugging child processes at the same time, where problems may be occurring.

I doubt where these MDI windows are, because I did not see any of them during startup, only message box. Also, after closing the message box, there appear some errors in the further logging. The full log before an error appears and after I close it:

Warning: At least one delay-load dependency module was not found.
Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.

--------------------------------------------------------------------------------
Starting profile on 08.03.2024 at 20:43:28

Operating System: Microsoft Windows XP Professional (32-bit), version 5.01.2600 Service Pack 3
Program Executable: c:\program files\supermium\CHROME.EXE
Program Arguments: 
Starting Directory: C:\Program Files\Supermium\
Search Path: C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Telegram\Telegram_DLL

Options Selected:
     Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.
     Log DllMain calls for process attach and process detach messages.
     Log DllMain calls for all other messages, including thread attach and thread detach.
     Hook the process to gather more detailed dependency information.
     Log LoadLibrary function calls.
     Log GetProcAddress function calls.
     Log debug output messages.
     Automatically open and profile child processes.
--------------------------------------------------------------------------------

Started "CHROME.EXE" (process 0x98) at address 0x00400000.  Successfully hooked module.
Loaded "NTDLL.DLL" at address 0x7ED30000.  Successfully hooked module.
Loaded "KERNEL32.DLL" at address 0x7C800000.  Successfully hooked module.
DllMain(0x7ED30000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_PROCESS_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
Injected "DEPENDS.DLL" at address 0x08370000.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" called.
DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "DEPENDS.DLL" returned 1 (0x1).
Loaded "CHROME_ELF.DLL" at address 0x01C20000.  Successfully hooked module.
Loaded "PROGWRP.DLL" at address 0x07000000.  Successfully hooked module.
Loaded "PSAPI.DLL" at address 0x76BE0000.  Successfully hooked module.
Loaded "SETUPAPI.DLL" at address 0x77910000.  Successfully hooked module.
Loaded "ADVAPI32.DLL" at address 0x77DC0000.  Successfully hooked module.
Loaded "RPCRT4.DLL" at address 0x77E70000.  Successfully hooked module.
Loaded "SECUR32.DLL" at address 0x77FE0000.  Successfully hooked module.
Loaded "GDI32.DLL" at address 0x77F10000.  Successfully hooked module.
Loaded "USER32.DLL" at address 0x7E360000.  Successfully hooked module.
Loaded "MSVCRT.DLL" at address 0x77C00000.  Successfully hooked module.
Loaded "PDH.DLL" at address 0x74C70000.  Successfully hooked module.
Loaded "COMDLG32.DLL" at address 0x76380000.  Successfully hooked module.
Loaded "COMCTL32.DLL" at address 0x773C0000.  Successfully hooked module.
Loaded "SHLWAPI.DLL" at address 0x77F60000.  Successfully hooked module.
Loaded "SHELL32.DLL" at address 0x7C9C0000.  Successfully hooked module.
Loaded "CRYPT32.DLL" at address 0x77A70000.  Successfully hooked module.
Loaded "MSASN1.DLL" at address 0x77B10000.  Successfully hooked module.
Loaded "ODBC32.DLL" at address 0x73FB0000.  Successfully hooked module.
Loaded "ODBCBCP.DLL" at address 0x5C050000.  Successfully hooked module.
Loaded "VERSION.DLL" at address 0x77BF0000.  Successfully hooked module.
Loaded "OLE32.DLL" at address 0x7EDF0000.  Successfully hooked module.
Loaded "OLEAUT32.DLL" at address 0x77110000.  Successfully hooked module.
Loaded "MSVCP60.DLL" at address 0x76050000.  Successfully hooked module.
Entrypoint reached. All implicit modules have been loaded.
DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PSAPI.DLL" called.
DllMain(0x76BE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PSAPI.DLL" returned 131073 (0x20001).
DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SECUR32.DLL" called.
DllMain(0x77FE0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SECUR32.DLL" returned 1 (0x1).
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "RPCRT4.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ADVAPI32.DLL" returned 1 (0x1).
DllMain(0x7E360000, DLL_PROCESS_ATTACH, 0x000AFD30) in "USER32.DLL" called.
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "USER32.DLL" at address 0x7E39E01C.
Loaded "IMM32.DLL" at address 0x76360000.  Successfully hooked module.
DllMain(0x76360000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" called.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmWINNLSEnableIME") called from "USER32.DLL" at address 0x7E38D486 and returned 0x7636E679.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "USER32.DLL" at address 0x7E38D49B and returned 0x7636E6A0.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSendIMEMessageExW") called from "USER32.DLL" at address 0x7E38D4B0 and returned 0x7636EB34.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSendIMEMessageExA") called from "USER32.DLL" at address 0x7E38D4C5 and returned 0x7636EB4F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPGetIMEW") called from "USER32.DLL" at address 0x7E38D4DA and returned 0x7636E769.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPGetIMEA") called from "USER32.DLL" at address 0x7E38D4EF and returned 0x7636E79D.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPQueryIMEW") called from "USER32.DLL" at address 0x7E38D504 and returned 0x7636E804.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPQueryIMEA") called from "USER32.DLL" at address 0x7E38D519 and returned 0x7636E90C.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPSetIMEW") called from "USER32.DLL" at address 0x7E38D52E and returned 0x7636E995.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIMPSetIMEA") called from "USER32.DLL" at address 0x7E38D543 and returned 0x7636EAB9.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmAssociateContext") called from "USER32.DLL" at address 0x7E38D558 and returned 0x76362378.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEscapeA") called from "USER32.DLL" at address 0x7E38D56D and returned 0x76367C25.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEscapeW") called from "USER32.DLL" at address 0x7E38D582 and returned 0x76367EA1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionStringA") called from "USER32.DLL" at address 0x7E38D597 and returned 0x76365B62.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionStringW") called from "USER32.DLL" at address 0x7E38D5AC and returned 0x7636548A.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionWindow") called from "USER32.DLL" at address 0x7E38D5C1 and returned 0x76363B48.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetContext") called from "USER32.DLL" at address 0x7E38D5D6 and returned 0x763623A1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "USER32.DLL" at address 0x7E38D5EB and returned 0x763697BE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmIsIME") called from "USER32.DLL" at address 0x7E38D600 and returned 0x76368C54.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmReleaseContext") called from "USER32.DLL" at address 0x7E38D615 and returned 0x763629D3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmRegisterClient") called from "USER32.DLL" at address 0x7E38D62A and returned 0x763622B3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionFontW") called from "USER32.DLL" at address 0x7E38D63F and returned 0x76364829.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCompositionFontA") called from "USER32.DLL" at address 0x7E38D654 and returned 0x76364791.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionFontW") called from "USER32.DLL" at address 0x7E38D669 and returned 0x763649CE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionFontA") called from "USER32.DLL" at address 0x7E38D67E and returned 0x763648C1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionWindow") called from "USER32.DLL" at address 0x7E38D693 and returned 0x76364DD6.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmNotifyIME") called from "USER32.DLL" at address 0x7E38D6A8 and returned 0x76366FD8.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLockIMC") called from "USER32.DLL" at address 0x7E38D6BD and returned 0x76369F2D.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmUnlockIMC") called from "USER32.DLL" at address 0x7E38D6D2 and returned 0x76369F45.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLoadIME") called from "USER32.DLL" at address 0x7E38D6E7 and returned 0x7636776F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetOpenStatus") called from "USER32.DLL" at address 0x7E38D6FC and returned 0x7636470B.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmFreeLayout") called from "USER32.DLL" at address 0x7E38D711 and returned 0x76366E43.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmActivateLayout") called from "USER32.DLL" at address 0x7E38D726 and returned 0x763677CD.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetCandidateWindow") called from "USER32.DLL" at address 0x7E38D73B and returned 0x76363B93.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCandidateWindow") called from "USER32.DLL" at address 0x7E38D750 and returned 0x76364E54.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmConfigureIMEW") called from "USER32.DLL" at address 0x7E38D765 and returned 0x76367A7B.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetConversionStatus") called from "USER32.DLL" at address 0x7E38D77A and returned 0x76363A86.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetConversionStatus") called from "USER32.DLL" at address 0x7E38D78F and returned 0x763645F7.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetStatusWindowPos") called from "USER32.DLL" at address 0x7E38D7A4 and returned 0x76364D6E.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetImeInfoEx") called from "USER32.DLL" at address 0x7E38D7B9 and returned 0x76369C7F.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLockImeDpi") called from "USER32.DLL" at address 0x7E38D7CE and returned 0x76369BAC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmUnlockImeDpi") called from "USER32.DLL" at address 0x7E38D7E3 and returned 0x76369BFC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetOpenStatus") called from "USER32.DLL" at address 0x7E38D7F8 and returned 0x76363AC3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetActiveContext") called from "USER32.DLL" at address 0x7E38D80D and returned 0x763629DE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmTranslateMessage") called from "USER32.DLL" at address 0x7E38D822 and returned 0x7636DE65.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmLoadLayout") called from "USER32.DLL" at address 0x7E38D837 and returned 0x76368719.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmProcessKey") called from "USER32.DLL" at address 0x7E38D84C and returned 0x7636E0D3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "USER32.DLL" at address 0x7E38D861 and returned 0x76372E03.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetProperty") called from "USER32.DLL" at address 0x7E38D876 and returned 0x76368B8E.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionStringA") called from "USER32.DLL" at address 0x7E38D88B and returned 0x763667D5.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetCompositionStringW") called from "USER32.DLL" at address 0x7E38D8A0 and returned 0x763667FC.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmEnumInputContext") called from "USER32.DLL" at address 0x7E38D8B5 and returned 0x763637CA.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSystemHandler") called from "USER32.DLL" at address 0x7E38D8CA and returned 0x76369D74.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmTIMActivate") called from "USER32.DLL" at address 0x7E38D8DF and returned 0x76373F0B.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "USER32.DLL" at address 0x7E38D8F4 and returned 0x763734DA.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmHideToolbarWnd") called from "USER32.DLL" at address 0x7E38D909 and returned 0x76373511.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "USER32.DLL" at address 0x7E38D91E and returned 0x76374304.
DllMain(0x76360000, DLL_PROCESS_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x76360000.
DllMain(0x7E360000, DLL_PROCESS_ATTACH, 0x000AFD30) in "USER32.DLL" returned 1 (0x1).
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "GDI32.DLL" called.
DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "GDI32.DLL" returned 1 (0x1).
DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCRT.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "MSVCRT.DLL" at address 0x77C279C2 and returned 0x7C80C9F5.
DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHLWAPI.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D29 and returned 0x7C82FFAD.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueue") called from "SHLWAPI.DLL" at address 0x77F65D38 and returned 0x7C864E33.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D47 and returned 0x7C824AD4.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ChangeTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D57 and returned 0x7C80BE3E.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeleteTimerQueueTimer") called from "SHLWAPI.DLL" at address 0x77F65D65 and returned 0x7C824A16.
DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHLWAPI.DLL" returned 1 (0x1).
DllMain(0x773C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMCTL32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "COMCTL32.DLL" at address 0x7744B789 and returned 0x7C80AEE9.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "COMCTL32.DLL" at address 0x7744B60C and returned 0x7C815294.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "COMCTL32.DLL" at address 0x7744B69E and returned 0x7C80A804.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "COMCTL32.DLL" at address 0x7744B6F4 and returned 0x7C80A835.
DllMain(0x773C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMCTL32.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHELL32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "CreateActCtxW") called from "SHELL32.DLL" at address 0x7CA27676 and returned 0x7C815294.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "ActivateActCtx") called from "SHELL32.DLL" at address 0x7C9E76B9 and returned 0x7C80A804.
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA272B0.
LoadLibraryW("comctl32.dll") returned 0x773C0000.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "DeactivateActCtx") called from "SHELL32.DLL" at address 0x7C9E7724 and returned 0x7C80A835.
LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CA273DE.
LoadLibraryW("comctl32.dll") returned 0x773C0000.
GetProcAddress(0x773C0000 [COMCTL32.DLL], "InitCommonControlsEx") called from "SHELL32.DLL" at address 0x7CA273EE and returned 0x773C4088.
DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMDLG32.DLL" called.
DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x000AFD30) in "COMDLG32.DLL" returned 1 (0x1).
DllMain(0x77B10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSASN1.DLL" called.
DllMain(0x77B10000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSASN1.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CRYPT32.DLL" called.
LoadLibraryA("advapi32.dll") called from "CRYPT32.DLL" at address 0x77A76566.
LoadLibraryA("advapi32.dll") returned 0x77DC0000.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptAcquireContextW") called from "CRYPT32.DLL" at address 0x77A76579 and returned 0x77DD7F99.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptSignHashW") called from "CRYPT32.DLL" at address 0x77A7658B and returned 0x77E02359.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptVerifySignatureW") called from "CRYPT32.DLL" at address 0x77A7659D and returned 0x77DE3522.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptSetProviderW") called from "CRYPT32.DLL" at address 0x77A765AF and returned 0x77E02FF1.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "CryptEnumProvidersW") called from "CRYPT32.DLL" at address 0x77A765C1 and returned 0x77E02E99.
LoadLibraryA("kernel32.dll") called from "CRYPT32.DLL" at address 0x77A77982.
LoadLibraryA("kernel32.dll") returned 0x7C800000.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "RegisterWaitForSingleObject") called from "CRYPT32.DLL" at address 0x77A7799D and returned 0x7C824B24.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "UnregisterWaitEx") called from "CRYPT32.DLL" at address 0x77A779B7 and returned 0x7C82412F.
LoadLibraryA("advapi32.dll") called from "MSASN1.DLL" at address 0x77B135EA.
LoadLibraryA("advapi32.dll") returned 0x77DC0000.
GetProcAddress(0x77DC0000 [ADVAPI32.DLL], "RegOpenKeyExA") called from "MSASN1.DLL" at address 0x77B13600 and returned 0x77DC7852.
DllMain(0x77A70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x73FB0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBC32.DLL" called.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "TryEnterCriticalSection") called from "ODBC32.DLL" at address 0x73FBFC73 and returned 0x7ED31118.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "TryEnterCriticalSection") called from "ODBC32.DLL" at address 0x73FBF094 and returned 0x7ED31118.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "SetCriticalSectionSpinCount") called from "ODBC32.DLL" at address 0x73FBF0A1 and returned 0x7ED4A990.
LoadLibraryExA("C:\WINDOWS\system32\odbcint.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "ODBC32.DLL" at address 0x73FBF4E2.
Loaded "ODBCINT.DLL" at address 0x1F840000.  Successfully hooked module.
LoadLibraryExA("C:\WINDOWS\system32\odbcint.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x1F840000.
DllMain(0x73FB0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBC32.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x76050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCP60.DLL" called.
DllMain(0x76050000, DLL_PROCESS_ATTACH, 0x000AFD30) in "MSVCP60.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_PROCESS_ATTACH, 0x000AFD30) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x74C70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PDH.DLL" called.
LoadLibraryW("rpcrt4.dll") called from "RPCRT4.DLL" at address 0x77E8B525.
LoadLibraryW("rpcrt4.dll") returned 0x77E70000.
DllMain(0x74C70000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PDH.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PROGWRP.DLL" called.
Loaded "DBGHELP.DLL" at address 0x59C60000.  Successfully hooked module.
DllMain(0x59C60000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" called.
DllMain(0x59C60000, DLL_PROCESS_ATTACH, 0x00000000) in "DBGHELP.DLL" returned 1 (0x1).
Loaded "WS2_32.DLL" at address 0x71A90000.  Successfully hooked module.
Loaded "WS2HELP.DLL" at address 0x71A80000.  Successfully hooked module.
DllMain(0x71A80000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL" called.
DllMain(0x71A80000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
Loaded "IPHLPAPI.DLL" at address 0x76D50000.  Successfully hooked module.
DllMain(0x76D50000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" called.
DllMain(0x76D50000, DLL_PROCESS_ATTACH, 0x00000000) in "IPHLPAPI.DLL" returned 1 (0x1).
Loaded "WEVTAPI.DLL" at address 0x6DC40000.  Successfully hooked module.
Unloaded "WEVTAPI.DLL" at address 0x6DC40000.
Loaded "DWMAPI.DLL" at address 0x10000000.  Successfully hooked module.
Loaded "USP10.DLL" at address 0x75540000.  Successfully hooked module.
DllMain(0x75540000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" called.
LoadLibraryA("gdi32.dll") called from "USP10.DLL" at address 0x7555E2BF.
LoadLibraryA("gdi32.dll") returned 0x77F10000.
GetProcAddress(0x77F10000 [GDI32.DLL], "GetCharABCWidthsI") called from "USP10.DLL" at address 0x7555E2DF and returned 0x77F3EA82.
DllMain(0x75540000, DLL_PROCESS_ATTACH, 0x00000000) in "USP10.DLL" returned 1 (0x1).
Loaded "WTSAPI32.DLL" at address 0x76F40000.  Successfully hooked module.
Loaded "WINSTA.DLL" at address 0x76330000.  Successfully hooked module.
Loaded "NETAPI32.DLL" at address 0x5BD50000.  Successfully hooked module.
DllMain(0x5BD50000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" called.
DllMain(0x5BD50000, DLL_PROCESS_ATTACH, 0x00000000) in "NETAPI32.DLL" returned 1 (0x1).
DllMain(0x76330000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSTA.DLL" called.
DllMain(0x76330000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSTA.DLL" returned 1 (0x1).
DllMain(0x76F40000, DLL_PROCESS_ATTACH, 0x00000000) in "WTSAPI32.DLL" called.
DllMain(0x76F40000, DLL_PROCESS_ATTACH, 0x00000000) in "WTSAPI32.DLL" returned 1 (0x1).
Loaded "POWRPROF.DLL" at address 0x74A90000.  Successfully hooked module.
DllMain(0x74A90000, DLL_PROCESS_ATTACH, 0x00000000) in "POWRPROF.DLL" called.
DllMain(0x74A90000, DLL_PROCESS_ATTACH, 0x00000000) in "POWRPROF.DLL" returned 1957253377 (0x74A95101).
DllMain(0x07000000, DLL_PROCESS_ATTACH, 0x000AFD30) in "PROGWRP.DLL" returned 1 (0x1).
DllMain(0x01C20000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CHROME_ELF.DLL" called.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CB4D73.
Loaded "API-MS-WIN-CORE-SYNCH-L1-2-0.DLL" at address 0x00CA0000.  Successfully hooked module.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CB4D73.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CB4D73.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
Loaded "API-MS-WIN-CORE-STRING-L1-1-0.DLL" at address 0x00CF0000.  Successfully hooked module.
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) returned 0x00CF0000.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) called from "CHROME_ELF.DLL" at address 0x01CAA2E2.
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
DllMain(0x01C20000, DLL_PROCESS_ATTACH, 0x000AFD30) in "CHROME_ELF.DLL" returned 1 (0x1).
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x0052C1BF.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x0052C1BF.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x0052C1BF.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) returned 0x00CF0000.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00520052.
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("c:\program files\supermium\CHROME.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "VERSION.DLL" at address 0x77BF13BD.
Mapped "CHROME.EXE" as a data file into memory at address 0x00400000.
LoadLibraryExW("c:\program files\supermium\CHROME.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x00400000.
LoadLibraryExW("c:\program files\supermium\CHROME.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) called from "VERSION.DLL" at address 0x77BF169F.
Mapped "CHROME.EXE" as a data file into memory at address 0x00400000.
LoadLibraryExW("c:\program files\supermium\CHROME.EXE", 0x00000000, LOAD_LIBRARY_AS_DATAFILE) returned 0x00400000.
LoadLibraryExW("api-ms-win-downlevel-shell32-l1-1-0.dll", 0x00000000, 0x00000800) called from "CHROME.EXE" at address 0x00433424.
LoadLibraryExW("api-ms-win-downlevel-shell32-l1-1-0.dll", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) called from "CHROME.EXE" at address 0x00505128.
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) returned 0x7C9C0000.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "CHROME.EXE" at address 0x00505128.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x77DC0000.
LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) called from "CHROME.EXE" at address 0x00505128.
LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) returned 0x7E360000.
LoadLibraryA("dwrite.dll") called from "CHROME.EXE" at address 0x0044BFEB.
LoadLibraryA("dwrite.dll") returned NULL. Error:     (126).
LoadLibraryW("NTMARTA.DLL") called from "ADVAPI32.DLL" at address 0x77DDA4FF.
Loaded "NTMARTA.DLL" at address 0x77680000.  Successfully hooked module.
Loaded "SAMLIB.DLL" at address 0x71BD0000.  Successfully hooked module.
Loaded "WLDAP32.DLL" at address 0x76F50000.  Successfully hooked module.
DllMain(0x71BD0000, DLL_PROCESS_ATTACH, 0x00000000) in "SAMLIB.DLL" called.
DllMain(0x71BD0000, DLL_PROCESS_ATTACH, 0x00000000) in "SAMLIB.DLL" returned 1 (0x1).
DllMain(0x76F50000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76F50000, DLL_PROCESS_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x77680000, DLL_PROCESS_ATTACH, 0x00000000) in "NTMARTA.DLL" called.
DllMain(0x77680000, DLL_PROCESS_ATTACH, 0x00000000) in "NTMARTA.DLL" returned 1 (0x1).
LoadLibraryW("NTMARTA.DLL") returned 0x77680000.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccFreeIndexArray") called from "ADVAPI32.DLL" at address 0x77DDA518 and returned 0x77688632.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccTreeResetNamedSecurityInfo") called from "ADVAPI32.DLL" at address 0x77DDA52D and returned 0x77689253.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccGetInheritanceSource") called from "ADVAPI32.DLL" at address 0x77DDA542 and returned 0x77688E1D.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccLookupAccountTrustee") called from "ADVAPI32.DLL" at address 0x77DDA557 and returned 0x77696901.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteGetNamedRights") called from "ADVAPI32.DLL" at address 0x77DDA56C and returned 0x776825CD.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteSetNamedRights") called from "ADVAPI32.DLL" at address 0x77DDA581 and returned 0x7768324D.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteGetHandleRights") called from "ADVAPI32.DLL" at address 0x77DDA596 and returned 0x776830D1.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteSetHandleRights") called from "ADVAPI32.DLL" at address 0x77DDA5AB and returned 0x77682F83.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteSetEntriesInAcl") called from "ADVAPI32.DLL" at address 0x77DDA5C0 and returned 0x77682A56.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccRewriteGetExplicitEntriesFromAcl") called from "ADVAPI32.DLL" at address 0x77DDA5D5 and returned 0x77689EC8.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccLookupAccountName") called from "ADVAPI32.DLL" at address 0x77DDA5EA and returned 0x776952D2.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccLookupAccountSid") called from "ADVAPI32.DLL" at address 0x77DDA5FF and returned 0x776964B3.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccSetEntriesInAList") called from "ADVAPI32.DLL" at address 0x77DDA614 and returned 0x77695C9A.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccConvertAccessToSecurityDescriptor") called from "ADVAPI32.DLL" at address 0x77DDA629 and returned 0x77695D8D.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccConvertSDToAccess") called from "ADVAPI32.DLL" at address 0x77DDA63A and returned 0x77695E9C.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccGetAccessForTrustee") called from "ADVAPI32.DLL" at address 0x77DDA64B and returned 0x77696050.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccConvertAclToAccess") called from "ADVAPI32.DLL" at address 0x77DDA65C and returned 0x776960C9.
GetProcAddress(0x77680000 [NTMARTA.DLL], "AccGetExplicitEntries") called from "ADVAPI32.DLL" at address 0x77DDA66D and returned 0x7769628B.
LoadLibraryExW("c:\program files\supermium\122.0.6261.85\chrome.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "CHROME.EXE" at address 0x00469B50.
Loaded "CHROME.DLL" at address 0x12000000.  Successfully hooked module.
Loaded "WINMM.DLL" at address 0x76B20000.  Successfully hooked module.
Loaded "USERENV.DLL" at address 0x769A0000.  Successfully hooked module.
Loaded "WINTRUST.DLL" at address 0x76C20000.  Successfully hooked module.
Loaded "IMAGEHLP.DLL" at address 0x76C80000.  Successfully hooked module.
Loaded "WINHTTP.DLL" at address 0x4D550000.  Successfully hooked module.
Loaded "WINSPOOL.DRV" at address 0x72FC0000.  Successfully hooked module.
Loaded "DHCPCSVC.DLL" at address 0x7D4B0000.  Successfully hooked module.
Loaded "DNSAPI.DLL" at address 0x76F10000.  Successfully hooked module.
DllMain(0x76B20000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" called.
DllMain(0x76B20000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" returned 1 (0x1).
DllMain(0x769A0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" called.
DllMain(0x769A0000, DLL_PROCESS_ATTACH, 0x00000000) in "USERENV.DLL" returned 1 (0x1).
DllMain(0x76C80000, DLL_PROCESS_ATTACH, 0x00000000) in "IMAGEHLP.DLL" called.
DllMain(0x76C80000, DLL_PROCESS_ATTACH, 0x00000000) in "IMAGEHLP.DLL" returned 1 (0x1).
DllMain(0x76C20000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" called.
DllMain(0x76C20000, DLL_PROCESS_ATTACH, 0x00000000) in "WINTRUST.DLL" returned 1 (0x1).
DllMain(0x4D550000, DLL_PROCESS_ATTACH, 0x00000000) in "WINHTTP.DLL" called.
DllMain(0x4D550000, DLL_PROCESS_ATTACH, 0x00000000) in "WINHTTP.DLL" returned 1 (0x1).
DllMain(0x72FC0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSPOOL.DRV" called.
DllMain(0x72FC0000, DLL_PROCESS_ATTACH, 0x00000000) in "WINSPOOL.DRV" returned 1 (0x1).
DllMain(0x76F10000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" called.
DllMain(0x76F10000, DLL_PROCESS_ATTACH, 0x00000000) in "DNSAPI.DLL" returned 1 (0x1).
DllMain(0x7D4B0000, DLL_PROCESS_ATTACH, 0x00000000) in "DHCPCSVC.DLL" called.
DllMain(0x7D4B0000, DLL_PROCESS_ATTACH, 0x00000000) in "DHCPCSVC.DLL" returned 1 (0x1).
DllMain(0x12000000, DLL_PROCESS_ATTACH, 0x00000000) in "CHROME.DLL" called.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C4DC4F.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C4DC4F.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C4DC4F.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-synch-l1-2-0", 0x00000000, 0x00000800) returned 0x00CA0000.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-fibers-l1-1-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("kernel32", 0x00000000, 0x00000800) returned 0x7C800000.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-localization-l1-2-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-string-l1-1-0", 0x00000000, 0x00000800) returned 0x00CF0000.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-datetime-l1-1-1", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x17C422AA.
LoadLibraryExW("api-ms-win-core-localization-obsolete-l1-2-0", 0x00000000, 0x00000800) returned NULL. Error:     (126).
DllMain(0x12000000, DLL_PROCESS_ATTACH, 0x00000000) in "CHROME.DLL" returned 1 (0x1).
LoadLibraryExW("c:\program files\supermium\122.0.6261.85\chrome.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x12000000.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "CHROME.DLL" at address 0x17C152A0.
LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x77DC0000.
LoadLibraryExW("api-ms-win-downlevel-shell32-l1-1-0.dll", 0x00000000, 0x00000800) called from "CHROME.DLL" at address 0x12EE4D43.
LoadLibraryExW("api-ms-win-downlevel-shell32-l1-1-0.dll", 0x00000000, 0x00000800) returned NULL. Error:     (126).
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) called from "CHROME.DLL" at address 0x17C152A0.
LoadLibraryExA("SHELL32.dll", 0x00000000, 0x00000000) returned 0x7C9C0000.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" called.
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" called.
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" returned 2147344385 (0x7FFDE001).
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 4294967041 (0xFFFFFF01).
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" called.
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" called.
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" called.
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" called.
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" called.
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" returned 1 (0x1).
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" called.
LoadLibraryW("KBDUS.DLL") called from "USER32.DLL" at address 0x7E376A99.
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" returned 1 (0x1).
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" called.
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" returned 1 (0x1).
Loaded "KBDUS.DLL" at address 0x5FFF0000.  Successfully hooked module.
LoadLibraryW("KBDUS.DLL") returned 0x5FFF0000.
GetProcAddress(0x5FFF0000 [KBDUS.DLL], 0x00000003) called from "USER32.DLL" at address 0x7E376AC3 and returned NULL. Error:      %1 (182).
GetProcAddress(0x5FFF0000 [KBDUS.DLL], 0x00000005) called from "USER32.DLL" at address 0x7E376AD3 and returned NULL. Error:      %1 (182).
GetProcAddress(0x5FFF0000 [KBDUS.DLL], 0x00000006) called from "USER32.DLL" at address 0x7E376B06 and returned NULL. Error:      %1 (182).
GetProcAddress(0x5FFF0000 [KBDUS.DLL], 0x00000001) called from "USER32.DLL" at address 0x7E376B32 and returned 0x5FFF1A5A.
GetProcAddress(0x5FFF0000 [KBDUS.DLL], 0x00000002) called from "USER32.DLL" at address 0x7E376B76 and returned NULL. Error:      %1 (182).
Unloaded "KBDUS.DLL" at address 0x5FFF0000.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" called.
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" called.
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" returned 2147340289 (0x7FFDD001).
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 4294967041 (0xFFFFFF01).
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" called.
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" called.
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" called.
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" called.
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" called.
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" returned 1 (0x1).
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" called.
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" returned 1 (0x1).
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" called.
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" returned 1 (0x1).
LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) called from "CHROME.DLL" at address 0x17C152A0.
LoadLibraryExA("USER32.dll", 0x00000000, 0x00000000) returned 0x7E360000.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
Loaded "UXTHEME.DLL" at address 0x5B260000.  Successfully hooked module.
DllMain(0x5B260000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
DllMain(0x5B260000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1).
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5B260000.
LoadLibraryW("uxtheme.dll") called from "UXTHEME.DLL" at address 0x5B26A1EC.
LoadLibraryW("uxtheme.dll") returned 0x5B260000.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5B260000.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5B260000.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5B260000.
LoadLibraryExW("C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
Loaded "IPREPAIR.DLL" at address 0x01C00000.  Successfully hooked module.
DllMain(0x01C00000, DLL_PROCESS_ATTACH, 0x00000000) in "IPREPAIR.DLL" called.
DllMain(0x01C00000, DLL_PROCESS_ATTACH, 0x00000000) in "IPREPAIR.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x01C00000.
LoadLibraryExW("C:\WINDOWS\system32\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
Loaded "MSCTF.DLL" at address 0x746E0000.  Successfully hooked module.
DllMain(0x746E0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called.
GetProcAddress(0x7ED30000 [NTDLL.DLL], "NtQueryInformationProcess") called from "MSCTF.DLL" at address 0x746E3AB5 and returned 0x7ED3D7FE.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmCoUninitialize") called from "MSCTF.DLL" at address 0x746E2923 and returned 0x76373E9F.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmLastEnabledWndDestroy") called from "MSCTF.DLL" at address 0x746E2960 and returned 0x7637418A.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmSetCiceroStartInThread") called from "MSCTF.DLL" at address 0x746E29A3 and returned 0x763737A6.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmIsCiceroStartedInThread") called from "MSCTF.DLL" at address 0x746E29E8 and returned 0x7637378E.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmIsCiceroEnabled") called from "MSCTF.DLL" at address 0x746E2A2D and returned 0x76373773.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmIsTextFrameServiceDisabled") called from "MSCTF.DLL" at address 0x746E2A69 and returned 0x763738A1.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmEnterCoInitCountSkipMode") called from "MSCTF.DLL" at address 0x746E2AB0 and returned 0x763731F0.
GetProcAddress(0x76360000 [IMM32.DLL], "CtfImmLeaveCoInitCountSkipMode") called from "MSCTF.DLL" at address 0x746E2AF6 and returned 0x76373206.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetDefaultIMEWnd") called from "MSCTF.DLL" at address 0x746E2B3A and returned 0x763697BE.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmReleaseContext") called from "MSCTF.DLL" at address 0x746E2B73 and returned 0x763629D3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmNotifyIME") called from "MSCTF.DLL" at address 0x746E2BAD and returned 0x76366FD8.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetConversionStatus") called from "MSCTF.DLL" at address 0x746E2BE0 and returned 0x763645F7.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetConversionStatus") called from "MSCTF.DLL" at address 0x746E2C1E and returned 0x76363A86.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetProperty") called from "MSCTF.DLL" at address 0x746E2C5A and returned 0x76368B8E.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetOpenStatus") called from "MSCTF.DLL" at address 0x746E2C8E and returned 0x76363AC3.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetContext") called from "MSCTF.DLL" at address 0x746E2CC4 and returned 0x763623A1.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetOpenStatus") called from "MSCTF.DLL" at address 0x746E2CF9 and returned 0x7636470B.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmInstallIMEA") called from "MSCTF.DLL" at address 0x746E2D30 and returned 0x763696DF.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetDescriptionA") called from "MSCTF.DLL" at address 0x746E2D66 and returned 0x763689A2.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetDescriptionW") called from "MSCTF.DLL" at address 0x746E2D9E and returned 0x763688F5.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetIMEFileNameA") called from "MSCTF.DLL" at address 0x746E2DD6 and returned 0x76368AF0.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmGetIMEFileNameW") called from "MSCTF.DLL" at address 0x746E2E0E and returned 0x76368A39.
GetProcAddress(0x76360000 [IMM32.DLL], "ImmSetHotKey") called from "MSCTF.DLL" at address 0x746E32EC and returned 0x7E3A3CFB.
GetProcAddress(0x7C800000 [KERNEL32.DLL], "GetUserDefaultUILanguage") called from "MSCTF.DLL" at address 0x746E2EAF and returned 0x7C812EEE.
DllMain(0x746E0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
LoadLibraryExW("C:\WINDOWS\system32\MSCTF.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x746E0000.
LoadLibraryExW("C:\Program Files\Styler\StylerHelper.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x7E37E2DE.
Loaded "STYLERHELPER.DLL" at address 0x02CB0000.  Successfully hooked module.
Loaded "MFC42.DLL" at address 0x73D90000.  Successfully hooked module.
DllMain(0x73D90000, DLL_PROCESS_ATTACH, 0x00000000) in "MFC42.DLL" called.
LoadLibraryA("MSVCRT.DLL") called from "MFC42.DLL" at address 0x73E1E7E8.
LoadLibraryA("MSVCRT.DLL") returned 0x77C00000.
LoadLibraryA("C:\WINDOWS\system32\MFC42LOC.DLL") called from "MFC42.DLL" at address 0x73E1EB7A.
Loaded "MFC42LOC.DLL" at address 0x61EC0000.  Successfully hooked module.
LoadLibraryA("C:\WINDOWS\system32\MFC42LOC.DLL") returned 0x61EC0000.
DllMain(0x73D90000, DLL_PROCESS_ATTACH, 0x00000000) in "MFC42.DLL" returned 1 (0x1).
DllMain(0x02CB0000, DLL_PROCESS_ATTACH, 0x00000000) in "STYLERHELPER.DLL" called.
DllMain(0x02CB0000, DLL_PROCESS_ATTACH, 0x00000000) in "STYLERHELPER.DLL" returned 1 (0x1).
LoadLibraryExW("C:\Program Files\Styler\StylerHelper.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x02CB0000.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" called.
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" called.
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" returned 2147336193 (0x7FFDC001).
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 4294967041 (0xFFFFFF01).
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" called.
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" called.
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" called.
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" called.
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" called.
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" returned 1 (0x1).
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" called.
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" returned 1 (0x1).
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" called.
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" returned 1 (0x1).
DllMain(0x5B260000, DLL_THREAD_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
DllMain(0x5B260000, DLL_THREAD_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1).
DllMain(0x746E0000, DLL_THREAD_ATTACH, 0x00000000) in "MSCTF.DLL" called.
DllMain(0x746E0000, DLL_THREAD_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
DllMain(0x02CB0000, DLL_THREAD_ATTACH, 0x00000000) in "STYLERHELPER.DLL" called.
DllMain(0x02CB0000, DLL_THREAD_ATTACH, 0x00000000) in "STYLERHELPER.DLL" returned 1 (0x1).
DllMain(0x73D90000, DLL_THREAD_ATTACH, 0x00000000) in "MFC42.DLL" called.
DllMain(0x73D90000, DLL_THREAD_ATTACH, 0x00000000) in "MFC42.DLL" returned 1 (0x1).
LoadLibraryW("userenv.dll") called from "USERENV.DLL" at address 0x769A8782.
LoadLibraryW("userenv.dll") returned 0x769A0000.
LoadLibraryExA("SHLWAPI.dll", 0x00000000, 0x00000000) called from "CHROME.DLL" at address 0x17C152A0.
LoadLibraryExA("SHLWAPI.dll", 0x00000000, 0x00000000) returned 0x77F60000.
LoadLibraryA("netapi32") called from "SHLWAPI.DLL" at address 0x77F71D39.
LoadLibraryA("netapi32") returned 0x5BD50000.
GetProcAddress(0x5BD50000 [NETAPI32.DLL], "NetGetJoinInformation") called from "SHLWAPI.DLL" at address 0x77F71D40 and returned 0x5BD59B54.
GetProcAddress(0x5BD50000 [NETAPI32.DLL], "NetApiBufferFree") called from "SHLWAPI.DLL" at address 0x77F71DCD and returned 0x5BD57A00.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" called.
DllMain(0x7ED30000, DLL_THREAD_ATTACH, 0x00000000) in "NTDLL.DLL" returned 1 (0x1).
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
DllMain(0x7C800000, DLL_THREAD_ATTACH, 0x00000000) in "KERNEL32.DLL" returned 1 (0x1).
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" called.
DllMain(0x01C20000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME_ELF.DLL" returned 1 (0x1).
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" called.
DllMain(0x07000000, DLL_THREAD_ATTACH, 0x00000000) in "PROGWRP.DLL" returned 1 (0x1).
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" called.
DllMain(0x77910000, DLL_THREAD_ATTACH, 0x00000000) in "SETUPAPI.DLL" returned 1 (0x1).
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" called.
DllMain(0x77DC0000, DLL_THREAD_ATTACH, 0x00000000) in "ADVAPI32.DLL" returned 2147332097 (0x7FFDB001).
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" called.
DllMain(0x77E70000, DLL_THREAD_ATTACH, 0x00000000) in "RPCRT4.DLL" returned 4294967041 (0xFFFFFF01).
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" called.
DllMain(0x77C00000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCRT.DLL" returned 1 (0x1).
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" called.
DllMain(0x7C9C0000, DLL_THREAD_ATTACH, 0x00000000) in "SHELL32.DLL" returned 1 (0x1).
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" called.
DllMain(0x77A70000, DLL_THREAD_ATTACH, 0x00000000) in "CRYPT32.DLL" returned 1 (0x1).
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" called.
DllMain(0x5C050000, DLL_THREAD_ATTACH, 0x00000000) in "ODBCBCP.DLL" returned 1 (0x1).
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" called.
DllMain(0x77BF0000, DLL_THREAD_ATTACH, 0x00000000) in "VERSION.DLL" returned 1 (0x1).
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" called.
DllMain(0x7EDF0000, DLL_THREAD_ATTACH, 0x00000000) in "OLE32.DLL" returned 1 (0x1).
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" called.
DllMain(0x77110000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1).
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" called.
DllMain(0x76360000, DLL_THREAD_ATTACH, 0x00000000) in "IMM32.DLL" returned 1 (0x1).
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" called.
DllMain(0x71A90000, DLL_THREAD_ATTACH, 0x00000000) in "WS2_32.DLL" returned 1 (0x1).
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" called.
DllMain(0x76330000, DLL_THREAD_ATTACH, 0x00000000) in "WINSTA.DLL" returned 1 (0x1).
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" called.
DllMain(0x76F50000, DLL_THREAD_ATTACH, 0x00000000) in "WLDAP32.DLL" returned 1 (0x1).
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" called.
DllMain(0x12000000, DLL_THREAD_ATTACH, 0x00000000) in "CHROME.DLL" returned 1 (0x1).
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" called.
DllMain(0x4D550000, DLL_THREAD_ATTACH, 0x00000000) in "WINHTTP.DLL" returned 1 (0x1).
DllMain(0x5B260000, DLL_THREAD_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
DllMain(0x5B260000, DLL_THREAD_ATTACH, 0x00000000) in "UXTHEME.DLL" returned 1 (0x1).
DllMain(0x746E0000, DLL_THREAD_ATTACH, 0x00000000) in "MSCTF.DLL" called.
DllMain(0x746E0000, DLL_THREAD_ATTACH, 0x00000000) in "MSCTF.DLL" returned 1 (0x1).
DllMain(0x02CB0000, DLL_THREAD_ATTACH, 0x00000000) in "STYLERHELPER.DLL" called.
DllMain(0x02CB0000, DLL_THREAD_ATTACH, 0x00000000) in "STYLERHELPER.DLL" returned 1 (0x1).
DllMain(0x73D90000, DLL_THREAD_ATTACH, 0x00000000) in "MFC42.DLL" called.
DllMain(0x73D90000, DLL_THREAD_ATTACH, 0x00000000) in "MFC42.DLL" returned 1 (0x1).
Second chance exception 0xE0000008 (Unknown) occurred in "KERNEL32.DLL" at address 0x7C834F03.
Exited "CHROME.EXE" (process 0x98) with code -536870904 (0xE0000008).

IDA-RE-things commented 6 months ago

The problems with msvcrt here is not seen.

BTW, are you checked logs from ALL the created MDI windows from DependencyWalker itself ? It creates additionally windows. Accessible from Window menu.

In one of such windows, it should be catched such not found function. Try to find it and place here.

oleg-dubinskiy commented 6 months ago

Bad things .. :) Ok, what we can see with ProcessExplorer while running Chrome ? I mean callstacks and Process tree. Its not started while DLL resolving process, or it tryes to run something? so we can debug.

Because it seems like CrashPad component issue, we need to debug it step by spep.

OK, I monitored chrome.exe via Process Explorer using the PDB symbols for Supermium. I can see the appearing process in the process view, but unfortunately can't get the call stack of it, because the process does not start correctly (fails with error). It would be possible if the process starts correctly, since it's possible for other opened processes. See screenshot which shows what I mean: VirtualBox_Windows XP_08_03_2024_22_32_26

oleg-dubinskiy commented 6 months ago

The problems with msvcrt here is not seen.

BTW, are you checked logs from ALL the created MDI windows from DependencyWalker itself ? It creates additionally windows. Accessible from Window menu.

In one of such windows, it should be catched such not found function. Try to find it and place here.

Just checked that menu when error appears: there is only one window named "chrome": VirtualBox_Windows XP_08_03_2024_22_39_00

IDA-RE-things commented 6 months ago

Have seen... So.. try to place cursor to "modules" subwindow on msvcrt.dll with red color, and select "Highlight matching module in tree" We must search Red msvcrt.dll occurence. Then It will be seen which module tries to get _wsplitpath_s function from it.

oleg-dubinskiy commented 6 months ago

Have seen... So.. try to place cursor to "modules" subwindow on msvcrt.dll with red color, ant select "Highlight matching module in tree" We must search Red msvcrt.dll occurence. Then It will be seen which module tried to get _wsplitpath_s function from it.

Done. After selecting "Highlight matching module in tree", it redirects me to the same mcvcrt.dll occurrence which I attached with my first screenshot: chrome.exe -> chrome_elf.dll -> psapi.dll -> imagehlp.dll -> msvcrt.dll. See screenshot:

oleg-dubinskiy commented 6 months ago

So the guilty module is imagehlp.dll, which is delay-loaded btw.

oleg-dubinskiy commented 6 months ago

But what is more interesting, _wsplitpath_s is not shown as unresolved red export. There is only _wsplitpath, which is resolved correctly:

IDA-RE-things commented 6 months ago

But what is more interesting, _wsplitpath_s is not shown as unresolved red export. There is only _wsplitpath, which is resolved correctly:

So you must search for another occurrences of msvcrt.dll in the tree with red color... Is there are?

The tree as I can see on the screenshot, is long.

mserafym commented 6 months ago

But what is more interesting, _wsplitpath_s is not shown as unresolved red export. There is only _wsplitpath, which is resolved correctly:

It looks like the msvcrt.dll file has been replaced with something non-original... Is it possible to check the checksum of this file and provide versioninfo with a screenshot? Or the virus caused damage...

In my winxpsp3: msvcrt

Modules

oleg-dubinskiy commented 6 months ago

But what is more interesting, _wsplitpath_s is not shown as unresolved red export. There is only _wsplitpath, which is resolved correctly:

So you must search for another occurrences of msvcrt.dll in the tree with red color... Is there are?

The tree as I can see on the screenshot, is long.

No, after clicking "Highlight matching module in tree" multiple times, it always redirects to the same msvcrt.dll occurrence. So there is only one I guess.

oleg-dubinskiy commented 6 months ago

But what is more interesting, _wsplitpath_s is not shown as unresolved red export. There is only _wsplitpath, which is resolved correctly:

It looks like the msvcrt.dll file has been replaced with something non-original... Is it possible to check the checksum of this file and provide versioninfo with a screenshot? Or the virus caused damage...

In my winxpsp3:

OK, here are SHA256 hashsums of my msvcrt.dll, imagehlp.dll and psapi.dll: SHA256 As I see, all hash sums are matching. In case the system files are not original, the sums should be different I guess? :thinking:

oleg-dubinskiy commented 6 months ago

I exactly remember that I did not replace/modify these system files in any way.

oleg-dubinskiy commented 6 months ago

Just tried latest Hotfix release. Now missing export error is shown two times, and the browser tries to start, but then crashes anyway. :slightly_frowning_face: Peek 2024-03-09 11-27

oleg-dubinskiy commented 6 months ago

Awww, it was my bad, sorry! :sweat_smile: My XP installation was unclean. I simply had the directory with OneCoreAPI dlls on C:\ and it was added in Path environment variable! So those dlls caught this problem! After removing that (and the directory with files), the problem got solved for me! Latest Supermium 122 Hotfix now starts properly! :smiley: Please sorry again that I needlessly toke your time. I guess the issue can now be closed as invalid. VirtualBox_Windows XP_09_03_2024_12_37_45

hodaifa27 commented 6 months ago

e

hodaifa27 commented 6 months ago

but why u close as not planned when it's working?

oleg-dubinskiy commented 6 months ago

but why u close as not planned when it's working?

Because it was not actually a bug. The problem was caught by other 3rd party components, not by the browser itself.

win32ss / supermium

Supermium 122 does not start on Windows XP SP3 x32 #345