I too am having the same issue on customer machines.
It appears to be happening on XP2P 2 either Home version or Professional.
It appears that the process loads two versions of COMCTL32.dll, which I find odd.
One is in Windows\System32\ComCtl32.dll (5.82 - xpsp.060825-0040)
The other is in the Windows\winsxs\x86..._6.0.2600.2982....\comctl32.dll (6.0 - xpsp.060825-0040)
When I run the application, it starts and goes away immediately.
I'm including Depends.exe profiling output where it shows failing on call to GetCurrentThemeName.
Lastly, it appears that I was able to get around the problem on some customers machines by going to the Vista System Properties Performance page and choosing the option for best performance (which turns off all the fancy XP visual themes).
If I profile it under Depends.exe, I get the following output:
Warning: At least one delay-load dependency module was not found. Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.
-------------------------------------------------------------------------------- Starting profile on 1/21/2008 at 9:19:12 PM
Operating System: Microsoft Windows XP Home (32-bit), version 5.01.2600 Service Pack 2 Program Executable: c:\program files\intellitax\2007\ITAU.EXE Program Arguments: Starting Directory: C:\Program Files\IntelliTax\2007\ Search Path: C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Diskeeper Corporation\Diskeeper\;C:\Program Files\Common Files\Lenovo;C:\Program Files\Lenovo\Client Security Solution;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\IntelliTax\;C:\Program Files\IntelliTax\2007\
Options Selected: Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable. Log DllMain calls for process attach and process detach messages. Hook the process to gather more detailed dependency information. Log LoadLibrary function calls. Log GetProcAddress function calls. Log thread information. Use simple thread numbers instead of actual thread IDs. Log first chance exceptions. Log debug output messages. Use full paths when logging file names. Log a time stamp with each line of log. Automatically open and profile child processes. --------------------------------------------------------------------------------
00:00:00.000: Started "c:\program files\intellitax\2007\ITAU.EXE" (process 0xDFC) at address 0x00400000 by thread 1. Successfully hooked module. 00:00:00.000: Loaded "c:\windows\system32\NTDLL.DLL" at address 0x7C900000 by thread 1. Successfully hooked module. 00:00:00.047: Loaded "c:\windows\system32\KERNEL32.DLL" at address 0x7C800000 by thread 1. Successfully hooked module. 00:00:00.047: DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NTDLL.DLL" called by thread 1. 00:00:00.047: DllMain(0x7C900000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NTDLL.DLL" returned 1 (0x1) by thread 1. 00:00:00.047: DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNEL32.DLL" called by thread 1. 00:00:00.047: DllMain(0x7C800000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNEL32.DLL" returned 1 (0x1) by thread 1. 00:00:00.063: Injected "c:\documents and settings\gautam kumar\desktop\depends22_x86\DEPENDS.DLL" at address 0x08370000 by thread 1. 00:00:00.078: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\documents and settings\gautam kumar\desktop\depends22_x86\DEPENDS.DLL" called by thread 1. 00:00:00.110: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\documents and settings\gautam kumar\desktop\depends22_x86\DEPENDS.DLL" returned 1 (0x1) by thread 1. 00:00:00.141: Loaded "c:\windows\system32\SHLWAPI.DLL" at address 0x77F60000 by thread 1. Successfully hooked module. 00:00:00.157: Loaded "c:\windows\system32\ADVAPI32.DLL" at address 0x77DD0000 by thread 1. Successfully hooked module. 00:00:00.188: Loaded "c:\windows\system32\RPCRT4.DLL" at address 0x77E70000 by thread 1. Successfully hooked module. 00:00:00.203: Loaded "c:\windows\system32\GDI32.DLL" at address 0x77F10000 by thread 1. Successfully hooked module. 00:00:00.235: Loaded "c:\windows\system32\USER32.DLL" at address 0x7E410000 by thread 1. Successfully hooked module. 00:00:00.266: Loaded "c:\windows\system32\MSVCRT.DLL" at address 0x77C10000 by thread 1. Successfully hooked module. 00:00:00.282: Loaded "c:\program files\intellitax\2007\ITSHARED.DLL" at address 0x3F170000 by thread 1. Successfully hooked module. 00:00:00.297: Loaded "c:\windows\system32\OLE32.DLL" at address 0x774E0000 by thread 1. Successfully hooked module. 00:00:00.328: Loaded "c:\windows\system32\OLEAUT32.DLL" at address 0x77120000 by thread 1. Successfully hooked module. 00:00:00.344: Loaded "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.DLL" at address 0x7C420000 by thread 1. Successfully hooked module. 00:00:00.344: Loaded "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78130000 by thread 1. Successfully hooked module. 00:00:00.375: Loaded "c:\windows\system32\VERSION.DLL" at address 0x77C00000 by thread 1. Successfully hooked module. 00:00:00.391: Loaded "c:\windows\system32\WININET.DLL" at address 0x42C10000 by thread 1. Successfully hooked module. 00:00:00.407: Loaded "c:\windows\system32\NORMALIZ.DLL" at address 0x00350000 by thread 1. Successfully hooked module. 00:00:00.407: Loaded "c:\windows\system32\IERTUTIL.DLL" at address 0x42990000 by thread 1. Successfully hooked module. 00:00:00.422: Loaded "c:\windows\system32\PSAPI.DLL" at address 0x76BF0000 by thread 1. Successfully hooked module. 00:00:00.438: Loaded "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x781D0000 by thread 1. Successfully hooked module. 00:00:00.469: Loaded "c:\windows\system32\SHELL32.DLL" at address 0x7C9C0000 by thread 1. Successfully hooked module. 00:00:00.485: Loaded "c:\windows\system32\COMCTL32.DLL" at address 0x5D090000 by thread 1. Successfully hooked module. 00:00:00.516: Loaded "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E360000 by thread 1. Successfully hooked module. 00:00:00.532: Loaded "c:\windows\system32\WINMM.DLL" at address 0x76B40000 by thread 1. Successfully hooked module. 00:00:00.547: Loaded "c:\windows\system32\IMAGEHLP.DLL" at address 0x76C90000 by thread 1. Successfully hooked module. 00:00:00.547: Entrypoint reached. All implicit modules have been loaded. 00:00:00.547: Loaded "c:\windows\system32\SHIMENG.DLL" at address 0x5CB70000 by thread 1. Successfully hooked module. 00:00:00.578: Loaded "c:\windows\apppatch\ACGENRAL.DLL" at address 0x6F880000 by thread 1. Successfully hooked module. 00:00:00.657: Loaded "c:\windows\system32\MSACM32.DLL" at address 0x77BE0000 by thread 1. Successfully hooked module. 00:00:00.657: Loaded "c:\windows\system32\USERENV.DLL" at address 0x769C0000 by thread 1. Successfully hooked module. 00:00:00.672: Loaded "c:\windows\system32\UXTHEME.DLL" at address 0x5AD70000 by thread 1. Successfully hooked module. 00:00:00.688: DllMain(0x6F880000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\apppatch\ACGENRAL.DLL" called by thread 1. 00:00:00.688: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "c:\windows\apppatch\ACGENRAL.DLL" at address 0x6F8ACDA5 and returned 0x7C80B829 by thread 1. 00:00:00.703: DllMain(0x6F880000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\apppatch\ACGENRAL.DLL" returned 1 (0x1) by thread 1. 00:00:00.703: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\documents and settings\gautam kumar\desktop\depends22_x86\DEPENDS.DLL" called by thread 1. 00:00:00.703: DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\documents and settings\gautam kumar\desktop\depends22_x86\DEPENDS.DLL" returned 1 (0x1) by thread 1. 00:00:00.703: DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\RPCRT4.DLL" called by thread 1. 00:00:00.703: DllMain(0x77E70000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\RPCRT4.DLL" returned 1 (0x1) by thread 1. 00:00:00.703: DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\ADVAPI32.DLL" called by thread 1. 00:00:00.703: DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\ADVAPI32.DLL" returned 1 (0x1) by thread 1. 00:00:00.703: DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\USER32.DLL" called by thread 1. 00:00:00.703: LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "c:\windows\system32\USER32.DLL" at address 0x7E44DED0 by thread 1. 00:00:00.719: Loaded "c:\windows\system32\IMM32.DLL" at address 0x76390000 by thread 1. Successfully hooked module. 00:00:00.719: DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\IMM32.DLL" called by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmWINNLSEnableIME") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D45E and returned 0x7639E699 by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D473 and returned 0x7639E6C0 by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSendIMEMessageExW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D488 and returned 0x7639EB54 by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSendIMEMessageExA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D49D and returned 0x7639EB6F by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPGetIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D4B2 and returned 0x7639E789 by thread 1. 00:00:00.719: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPGetIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D4C7 and returned 0x7639E7BD by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPQueryIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D4DC and returned 0x7639E824 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPQueryIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D4F1 and returned 0x7639E92C by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPSetIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D506 and returned 0x7639E9B5 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIMPSetIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D51B and returned 0x7639EAD9 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmAssociateContext") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D530 and returned 0x763923BF by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmEscapeA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D545 and returned 0x76397C45 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmEscapeW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D55A and returned 0x76397EC1 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D56F and returned 0x76395B82 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D584 and returned 0x763954AA by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D599 and returned 0x76393B68 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetContext") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D5AE and returned 0x763922B3 by thread 1. 00:00:00.735: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetDefaultIMEWnd") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D5C3 and returned 0x763997DE by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmIsIME") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D5D8 and returned 0x76398C74 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmReleaseContext") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D5ED and returned 0x763929F3 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmRegisterClient") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D602 and returned 0x763922FA by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionFontW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D617 and returned 0x76394849 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionFontA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D62C and returned 0x763947B1 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionFontW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D641 and returned 0x763949EE by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionFontA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D656 and returned 0x763948E1 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D66B and returned 0x76394DF6 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmNotifyIME") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D680 and returned 0x76396FF8 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmLockIMC") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D695 and returned 0x76399F4D by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmUnlockIMC") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D6AA and returned 0x76399F65 by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmLoadIME") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D6BF and returned 0x7639778F by thread 1. 00:00:00.750: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetOpenStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D6D4 and returned 0x7639472B by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmFreeLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D6E9 and returned 0x76396E63 by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmActivateLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D6FE and returned 0x763977ED by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCandidateWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D713 and returned 0x76393BB3 by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCandidateWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D728 and returned 0x76394E74 by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmConfigureIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D73D and returned 0x76397A9B by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetConversionStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D752 and returned 0x76393AA6 by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetConversionStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D767 and returned 0x76394617 by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetStatusWindowPos") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D77C and returned 0x76394D8E by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetImeInfoEx") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D791 and returned 0x76399C9F by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmLockImeDpi") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D7A6 and returned 0x76399BCC by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmUnlockImeDpi") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D7BB and returned 0x76399C1C by thread 1. 00:00:00.766: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetOpenStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D7D0 and returned 0x76393AE3 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetActiveContext") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D7E5 and returned 0x763929FE by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmTranslateMessage") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D7FA and returned 0x7639DE85 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmLoadLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D80F and returned 0x76398739 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmProcessKey") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D824 and returned 0x7639E0F3 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D839 and returned 0x763A2E24 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetProperty") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D84E and returned 0x76398BAE by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringA") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D863 and returned 0x763967F5 by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringW") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D878 and returned 0x7639681C by thread 1. 00:00:00.782: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmEnumInputContext") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D88D and returned 0x763937EA by thread 1. 00:00:00.797: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSystemHandler") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D8A2 and returned 0x76399D94 by thread 1. 00:00:00.797: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "CtfImmTIMActivate") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D8B7 and returned 0x763A3F2B by thread 1. 00:00:00.797: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D8CC and returned 0x763A34FA by thread 1. 00:00:00.797: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "CtfImmHideToolbarWnd") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D8E1 and returned 0x763A3531 by thread 1. 00:00:00.797: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "c:\windows\system32\USER32.DLL" at address 0x7E43D8F6 and returned 0x763A4324 by thread 1. 00:00:00.797: DllMain(0x76390000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\IMM32.DLL" returned 1 (0x1) by thread 1. 00:00:00.797: LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x76390000 by thread 1. 00:00:00.813: DllMain(0x7E410000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\USER32.DLL" returned 1 (0x1) by thread 1. 00:00:00.813: DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\GDI32.DLL" called by thread 1. 00:00:00.813: DllMain(0x77F10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\GDI32.DLL" returned 1 (0x1) by thread 1. 00:00:00.813: DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\MSVCRT.DLL" called by thread 1. 00:00:00.828: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "c:\windows\system32\MSVCRT.DLL" at address 0x77C379C2 and returned 0x7C80B829 by thread 1. 00:00:00.828: DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\MSVCRT.DLL" returned 1 (0x1) by thread 1. 00:00:00.828: DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\SHLWAPI.DLL" called by thread 1. 00:00:00.828: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateTimerQueue") called from "c:\windows\system32\SHLWAPI.DLL" at address 0x77F65CA1 and returned 0x7C82BFD6 by thread 1. 00:00:00.844: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeleteTimerQueue") called from "c:\windows\system32\SHLWAPI.DLL" at address 0x77F65CB0 and returned 0x7C862D8B by thread 1. 00:00:00.860: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateTimerQueueTimer") called from "c:\windows\system32\SHLWAPI.DLL" at address 0x77F65CBF and returned 0x7C82117D by thread 1. 00:00:00.860: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ChangeTimerQueueTimer") called from "c:\windows\system32\SHLWAPI.DLL" at address 0x77F65CCF and returned 0x7C812723 by thread 1. 00:00:00.860: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeleteTimerQueueTimer") called from "c:\windows\system32\SHLWAPI.DLL" at address 0x77F65CDD and returned 0x7C821130 by thread 1. 00:00:00.860: DllMain(0x77F60000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\SHLWAPI.DLL" returned 1 (0x1) by thread 1. 00:00:00.860: DllMain(0x774E0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\OLE32.DLL" called by thread 1. 00:00:00.860: DllMain(0x774E0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\OLE32.DLL" returned 1 (0x1) by thread 1. 00:00:00.860: DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\OLEAUT32.DLL" called by thread 1. 00:00:00.860: DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\OLEAUT32.DLL" returned 1 (0x1) by thread 1. 00:00:00.875: DllMain(0x78130000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" called by thread 1. 00:00:00.875: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "FlsAlloc") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78133001 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:00.907: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "FlsGetValue") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x7813300E and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:00.907: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "FlsSetValue") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x7813301B and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:00.907: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "FlsFree") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78133028 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:00.907: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.922: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.938: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78139654 and returned 0x7C80B829 by thread 1. 00:00:00.938: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132BBC and returned 0x7C913917 by thread 1. 00:00:00.938: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.938: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.953: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132C33 and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "EncodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132D3A and returned 0x7C913917 by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DecodePointer") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78132D4A and returned 0x7C91393D by thread 1. 00:00:00.969: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "IsProcessorFeaturePresent") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x7814A9AE and returned 0x7C80AE2A by thread 1. 00:00:00.969: GetProcAddress(0x77C10000 [c:\windows\system32\MSVCRT.DLL], "_set_error_mode") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78134447 and returned 0x77C35348 by thread 1. 00:00:00.985: GetProcAddress(0x77C10000 [c:\windows\system32\MSVCRT.DLL], " mailto:?set_terminate@@YAP6AXXZP6AXXZ@Z - ?set_terminate@@YAP6AXXZP6AXXZ@Z ") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78134463 and returned 0x77C22567 by thread 1. 00:00:00.985: GetProcAddress(0x77C10000 [c:\windows\system32\MSVCRT.DLL], "_get_terminate") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x7813447F and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:00.985: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "FindActCtxSectionStringW") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78131DBE and returned 0x7C82FD4C by thread 1. 00:00:00.985: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" at address 0x78131F1A and returned 0x7C80AD29 by thread 1. 00:00:01.000: DllMain(0x78130000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.DLL" returned 1 (0x1) by thread 1. 00:00:01.000: DllMain(0x7C420000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.DLL" called by thread 1. 00:00:01.000: DllMain(0x7C420000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.DLL" returned 1 (0x1) by thread 1. 00:00:01.000: DllMain(0x3F170000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\program files\intellitax\2007\ITSHARED.DLL" called by thread 1. 00:00:01.000: DllMain(0x3F170000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\program files\intellitax\2007\ITSHARED.DLL" returned 1 (0x1) by thread 1. 00:00:01.000: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\VERSION.DLL" called by thread 1. 00:00:01.016: DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\VERSION.DLL" returned 1 (0x1) by thread 1. 00:00:01.016: DllMain(0x00350000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\NORMALIZ.DLL" called by thread 1. 00:00:01.016: DllMain(0x00350000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\NORMALIZ.DLL" returned 1 (0x1) by thread 1. 00:00:01.016: DllMain(0x42990000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\IERTUTIL.DLL" called by thread 1. 00:00:01.016: DllMain(0x42990000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\IERTUTIL.DLL" returned 1 (0x1) by thread 1. 00:00:01.016: DllMain(0x42C10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\WININET.DLL" called by thread 1. 00:00:01.016: Thread 2 started in "c:\windows\system32\KERNEL32.DLL" at address 0x7C810659. 00:00:01.016: LoadLibraryW("comctl32.dll") called from "c:\windows\system32\WININET.DLL" at address 0x42C3DBC4 by thread 1. 00:00:01.032: Loaded "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" at address 0x773D0000 by thread 1. Successfully hooked module. 00:00:01.032: DllMain(0x773D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" called by thread 1. 00:00:01.032: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "GetSystemWindowsDirectoryW") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" at address 0x7745B739 and returned 0x7C80AD29 by thread 1. 00:00:01.032: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateActCtxW") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" at address 0x7745B5BC and returned 0x7C81545C by thread 1. 00:00:01.047: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ActivateActCtx") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" at address 0x7745B64E and returned 0x7C80A644 by thread 1. 00:00:01.047: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeactivateActCtx") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" at address 0x7745B6A4 and returned 0x7C80A675 by thread 1. 00:00:01.047: DllMain(0x773D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.DLL" returned 1 (0x1) by thread 1. 00:00:01.047: LoadLibraryW("comctl32.dll") returned 0x773D0000 by thread 1. 00:00:01.110: GetProcAddress(0x77DD0000 [c:\windows\system32\ADVAPI32.DLL], "EventRegister") called from "c:\windows\system32\WININET.DLL" at address 0x42C3D873 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:01.125: GetProcAddress(0x77DD0000 [c:\windows\system32\ADVAPI32.DLL], "EventUnregister") called from "c:\windows\system32\WININET.DLL" at address 0x42C3D885 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:01.125: GetProcAddress(0x77DD0000 [c:\windows\system32\ADVAPI32.DLL], "EventEnabled") called from "c:\windows\system32\WININET.DLL" at address 0x42C3D897 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:01.125: GetProcAddress(0x77DD0000 [c:\windows\system32\ADVAPI32.DLL], "EventWrite") called from "c:\windows\system32\WININET.DLL" at address 0x42C3D8A9 and returned NULL by thread 1. Error: The specified procedure could not be found (127). 00:00:01.125: DllMain(0x42C10000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\WININET.DLL" returned 1 (0x1) by thread 1. 00:00:01.125: DllMain(0x76BF0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\PSAPI.DLL" called by thread 1. 00:00:01.125: DllMain(0x76BF0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\PSAPI.DLL" returned 131073 (0x20001) by thread 1. 00:00:01.125: DllMain(0x781D0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" called by thread 1. 00:00:01.125: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateActCtxW") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x781FF411 and returned 0x7C81545C by thread 1. 00:00:01.141: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ReleaseActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x781FF423 and returned 0x7C81305F by thread 1. 00:00:01.141: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ActivateActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x781FF435 and returned 0x7C80A644 by thread 1. 00:00:01.141: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeactivateActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x781FF447 and returned 0x7C80A675 by thread 1. 00:00:01.141: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "NotifyWinEvent") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x78239813 and returned 0x7E41BFDB by thread 1. 00:00:01.157: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "GetUserDefaultUILanguage") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x782388E3 and returned 0x7C813070 by thread 1. 00:00:01.157: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "GetSystemDefaultUILanguage") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x78238935 and returned 0x7C813038 by thread 1. 00:00:01.157: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateActCtxA") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x782387E8 and returned 0x7C86B775 by thread 1. 00:00:01.172: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ReleaseActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x782387F5 and returned 0x7C81305F by thread 1. 00:00:01.172: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ActivateActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x78238802 and returned 0x7C80A644 by thread 1. 00:00:01.172: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeactivateActCtx") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x7823880F and returned 0x7C80A675 by thread 1. 00:00:01.172: LoadLibraryA("MFC80ENU.DLL") called from "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" at address 0x7823878F by thread 1. 00:00:01.172: Loaded "c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80ENU.DLL" at address 0x5D360000 by thread 1. Successfully hooked module. 00:00:01.172: LoadLibraryA("MFC80ENU.DLL") returned 0x5D360000 by thread 1. 00:00:01.203: DllMain(0x781D0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL" returned 1 (0x1) by thread 1. 00:00:01.203: DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\SHELL32.DLL" called by thread 1. 00:00:01.203: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateActCtxW") called from "c:\windows\system32\SHELL32.DLL" at address 0x7CA27816 and returned 0x7C81545C by thread 1. 00:00:01.219: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ActivateActCtx") called from "c:\windows\system32\SHELL32.DLL" at address 0x7C9E7639 and returned 0x7C80A644 by thread 1. 00:00:01.219: LoadLibraryW("comctl32.dll") called from "c:\windows\system32\SHELL32.DLL" at address 0x7CA2744C by thread 1. 00:00:01.219: LoadLibraryW("comctl32.dll") returned 0x773D0000 by thread 1. 00:00:01.219: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeactivateActCtx") called from "c:\windows\system32\SHELL32.DLL" at address 0x7C9E76A4 and returned 0x7C80A675 by thread 1. 00:00:01.235: LoadLibraryW("comctl32.dll") called from "c:\windows\system32\SHELL32.DLL" at address 0x7CA2757E by thread 1. 00:00:01.235: LoadLibraryW("comctl32.dll") returned 0x5D090000 by thread 1. 00:00:01.235: GetProcAddress(0x5D090000 [c:\windows\system32\COMCTL32.DLL], "InitCommonControlsEx") called from "c:\windows\system32\SHELL32.DLL" at address 0x7CA2758E and returned 0x5D093619 by thread 1. 00:00:01.235: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "CreateActCtxW") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0FF198 and returned 0x7C81545C by thread 1. 00:00:01.250: DllMain(0x7C9C0000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\SHELL32.DLL" returned 1 (0x1) by thread 1. 00:00:01.250: DllMain(0x5D090000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\COMCTL32.DLL" called by thread 1. 00:00:01.250: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "InitializeCriticalSectionAndSpinCount") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D095338 and returned 0x7C80B829 by thread 1. 00:00:01.266: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ProcessIdToSessionId") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0954D8 and returned 0x7C812F89 by thread 1. 00:00:01.266: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "GetSystemMetrics") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0955CE and returned 0x7E418F8C by thread 1. 00:00:01.266: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "MonitorFromWindow") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0955E3 and returned 0x7E41CE49 by thread 1. 00:00:01.266: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "MonitorFromRect") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0955F8 and returned 0x7E41E0F3 by thread 1. 00:00:01.266: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "MonitorFromPoint") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D09560D and returned 0x7E41E774 by thread 1. 00:00:01.282: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "EnumDisplayMonitors") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D095622 and returned 0x7E41CF4B by thread 1. 00:00:01.282: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "EnumDisplayDevicesW") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D095637 and returned 0x7E427B73 by thread 1. 00:00:01.282: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "GetMonitorInfoW") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D095654 and returned 0x7E41CEA9 by thread 1. 00:00:01.282: LoadLibraryW("imm32.dll") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6EB1 by thread 1. 00:00:01.282: LoadLibraryW("imm32.dll") returned 0x76390000 by thread 1. 00:00:01.282: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmCreateContext") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6ED7 and returned 0x76392995 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmDestroyContext") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6EEC and returned 0x763936C8 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmNotifyIME") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F01 and returned 0x76396FF8 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmAssociateContext") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F16 and returned 0x763923BF by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmReleaseContext") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F27 and returned 0x763929F3 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetContext") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F38 and returned 0x763922B3 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringA") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F49 and returned 0x76395B82 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringA") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F5A and returned 0x763967F5 by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringW") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F6B and returned 0x763954AA by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringW") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F7C and returned 0x7639681C by thread 1. 00:00:01.297: GetProcAddress(0x76390000 [c:\windows\system32\IMM32.DLL], "ImmSetCandidateWindow") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0B6F8D and returned 0x76394E74 by thread 1. 00:00:01.313: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "ActivateActCtx") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0FF24A and returned 0x7C80A644 by thread 1. 00:00:01.313: GetProcAddress(0x7C800000 [c:\windows\system32\KERNEL32.DLL], "DeactivateActCtx") called from "c:\windows\system32\COMCTL32.DLL" at address 0x5D0FF2AF and returned 0x7C80A675 by thread 1. 00:00:01.313: DllMain(0x5D090000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\COMCTL32.DLL" returned 1 (0x1) by thread 1. 00:00:01.313: DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\WINMM.DLL" called by thread 1. 00:00:01.313: DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\WINMM.DLL" returned 1 (0x1) by thread 1. 00:00:01.313: DllMain(0x76C90000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\IMAGEHLP.DLL" called by thread 1. 00:00:01.313: DllMain(0x76C90000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\windows\system32\IMAGEHLP.DLL" returned 1 (0x1) by thread 1. 00:00:01.313: DllMain(0x3E360000, DLL_PROCESS_ATTACH, 0x0013FD30) in "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" called by thread 1. 00:00:01.328: LoadLibraryA("msimg32.dll") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E366C9B by thread 1. 00:00:01.328: Loaded "c:\windows\system32\MSIMG32.DLL" at address 0x76380000 by thread 1. Successfully hooked module. 00:00:01.328: DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\MSIMG32.DLL" called by thread 1. 00:00:01.328: DllMain(0x76380000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\MSIMG32.DLL" returned 1 (0x1) by thread 1. 00:00:01.328: LoadLibraryA("msimg32.dll") returned 0x76380000 by thread 1. 00:00:01.344: GetProcAddress(0x76380000 [c:\windows\system32\MSIMG32.DLL], "GradientFill") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E366CAE and returned 0x76381180 by thread 1. 00:00:01.344: LoadLibraryA("msimg32.dll") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E373219 by thread 1. 00:00:01.344: LoadLibraryA("msimg32.dll") returned 0x76380000 by thread 1. 00:00:01.344: GetProcAddress(0x76380000 [c:\windows\system32\MSIMG32.DLL], "AlphaBlend") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E37323C and returned 0x7638119C by thread 1. 00:00:01.344: GetProcAddress(0x76380000 [c:\windows\system32\MSIMG32.DLL], "TransparentBlt") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E37324A and returned 0x763810F0 by thread 1. 00:00:01.344: GetProcAddress(0x5D090000 [c:\windows\system32\COMCTL32.DLL], "DllGetVersion") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E38458E and returned 0x5D0FABAB by thread 1. 00:00:01.344: LoadLibraryA("UxTheme.dll") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E388FC0 by thread 1. 00:00:01.360: LoadLibraryA("UxTheme.dll") returned 0x5AD70000 by thread 1. 00:00:01.360: LoadLibraryA("dwmapi.dll") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E38B248 by thread 1. 00:00:01.360: LoadLibraryA("dwmapi.dll") returned NULL by thread 1. Error: The specified module could not be found (126). 00:00:01.375: GetProcAddress(0x7E410000 [c:\windows\system32\USER32.DLL], "UpdateLayeredWindow") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E3EE03E and returned 0x7E41E873 by thread 1. 00:00:01.391: GetProcAddress(0x5AD70000 [c:\windows\system32\UXTHEME.DLL], "IsThemeActive") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E38ABBA and returned 0x5AD797AD by thread 1. 00:00:01.407: GetProcAddress(0x5AD70000 [c:\windows\system32\UXTHEME.DLL], "GetCurrentThemeName") called from "c:\program files\intellitax\2007\TOOLKITPRO1042VC80.DLL" at address 0x3E389674 and returned 0x5AD7D2B1 by thread 1. 00:00:01.407: First chance exception 0xC0000005 (Access Violation) occurred in "c:\windows\system32\UXTHEME.DLL" at address 0x5AD71531 by thread 1. 00:00:01.407: First chance exception 0xC0000005 (Access Violation) occurred in "c:\windows\system32\NTDLL.DLL" at address 0x7C964ED1 by thread 1. 00:00:01.407: Second chance exception 0xC0000005 (Access Violation) occurred in "c:\windows\system32\NTDLL.DLL" at address 0x7C964ED1 by thread 1. 00:00:01.407: Thread 2 exited with code -1073741819 (0xC0000005). 00:00:01.407: Exited "c:\program files\intellitax\2007\ITAU.EXE" (process 0xDFC) with code -1073741819 (0xC0000005) by thread 1.
------------- L. Violette Monolith www.lith.com Xtreme Toolkit Pro v22.1.0
|