http://bugs.winehq.org/show_bug.cgi?id=2667
Summary: CloseProfileUserMapping not implemented - needed by Sierra Zeus game Product: Wine Version: 20041201 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-binary AssignedTo: wine-bugs@winehq.org ReportedBy: david@mckelvie.org.uk
Sierra's Master of Olympus game fails to run. Possibly because of unimplemented (stub) function CloseProfileUserMapping ( in kernel32.dll )
Wine version = 20041201 OS = Linux Fedora core 1 Installed as RPM from wine-20041201-1fc1winehq.i686.rpm Using Wine without the help of a Windows installation.
Installed game from CD under Wine - seems to go fine.
Downloaded a non copy protected version of the game from http://m0015.gamecopyworld.com/games/f1664936/zeus.zip
Replaced Zeus.exe with version from zip file. Ran the setupreg.exe program in that zip file under Wine - seems OK.
Ran wine "c:\Sierra\Master of Olympus - Zeus\Zeus.exe"
and got a number of popup windows saying "missing pak or sav in Basic tutorial 0" and then game exited. The pak or sav files do exist in the c:\Sierra\Master of Olympus - Zeus directory.
Wine diagnostics said: wine "c:\Sierra\Master of Olympus - Zeus\Zeus.exe" err:wave:OSS_WaveOutInit /dev/mixer1: No such device fixme:profile:CloseProfileUserMapping (), stub! err:sync:CreateEventW Bad security attributes pointer 0x1 fixme:tape:BackupSeek ((nil), 256, 5852924, 0x1, (nil), (nil)) stub!
I ran WINEDEBUG=+relay wine "c:\Sierra\Master of Olympus - Zeus\Zeus.exe" and extracted 500 lines centered on the fixme:profile:CloseProfileUserMapping message as follows
0009:Ret ntdll.RtlInitUnicodeString() retval=0000002a ret=11870ff3 0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,3340e8e8,3340e8e0) ret=1187102b 0009:Ret ntdll.RtlQueryEnvironmentVariable_U() retval=c0000100 ret=1187102b 0009:Call ntdll.RtlNtStatusToDosError(c0000100) ret=11871056 0009:Ret ntdll.RtlNtStatusToDosError() retval=000000cb ret=11871056 0009:Call ntdll.RtlFreeUnicodeString(3340e92c) ret=11870f0d 0009:Ret ntdll.RtlFreeUnicodeString() retval=00000001 ret=11870f0d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b48afc8) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetEnvironmentVariableA() retval=00000000 ret=211362ee 0009:Call kernel32.GetModuleHandleA(00000000) ret=21136277 0009:Ret kernel32.GetModuleHandleA() retval=00400000 ret=21136277 0009:Call ntdll.RtlAllocateHeap(7e290000,00000000,00000140) ret=2113782d 0009:Ret ntdll.RtlAllocateHeap() retval=7e290098 ret=2113782d 0009:Call kernel32.GetCommandLineA() ret=21133a25 0009:Ret kernel32.GetCommandLineA() retval=6b4518a0 ret=21133a25 0009:Call kernel32.GetEnvironmentStringsW() ret=211369d2 0009:Ret kernel32.GetEnvironmentStringsW() retval=6b230000 ret=211369d2 0009:Call kernel32.WideCharToMultiByte(00000000,00000000,6b230000 L"WINEDEBUG=+relay",0000075b,00000000,00000000,00000000,00000000) ret=21136a4a 0009:Ret kernel32.WideCharToMultiByte() retval=0000075b ret=21136a4a 0009:Call ntdll.RtlAllocateHeap(7e290000,00000000,00000760) ret=21136d23 0009:Ret ntdll.RtlAllocateHeap() retval=7e2901e0 ret=21136d23 0009:Call kernel32.WideCharToMultiByte(00000000,00000000,6b230000 L"WINEDEBUG=+relay",0000075b,7e2901e0,0000075b,00000000,00000000) ret=21136a6c 0009:Ret kernel32.WideCharToMultiByte() retval=0000075b ret=21136a6c 0009:Call kernel32.FreeEnvironmentStringsW(6b230000) ret=21136a89 0009:Ret kernel32.FreeEnvironmentStringsW() retval=00000001 ret=21136a89 0009:Call ntdll.RtlAllocateHeap(7e290000,00000008,000041c4) ret=21137f21 0009:Ret ntdll.RtlAllocateHeap() retval=7e290948 ret=21137f21 0009:Call kernel32.VirtualAlloc(00000000,00100000,00002000,00000004) ret=21137f3b 0009:Call ntdll.NtAllocateVirtualMemory(ffffffff,3340faa4,00000000,3340fabc,00002000,00000004) ret=118bed57 0009:Ret ntdll.NtAllocateVirtualMemory() retval=00000000 ret=118bed57 0009:Ret kernel32.VirtualAlloc() retval=7e180000 ret=21137f3b 0009:Call kernel32.VirtualAlloc(7e180000,00008000,00001000,00000004) ret=21137fc7 0009:Call ntdll.NtAllocateVirtualMemory(ffffffff,3340fa94,00000000,3340faac,00001000,00000004) ret=118bed57 0009:Ret ntdll.NtAllocateVirtualMemory() retval=00000000 ret=118bed57 0009:Ret kernel32.VirtualAlloc() retval=7e180000 ret=21137fc7 0009:Call kernel32.GetStartupInfoA(3340fc30) ret=21136540 0009:Ret kernel32.GetStartupInfoA() retval=00000044 ret=21136540 0009:Call kernel32.GetStdHandle(fffffff6) ret=2113663f 0009:Ret kernel32.GetStdHandle() retval=00000004 ret=2113663f 0009:Call kernel32.GetFileType(00000004) ret=2113664d 0009:Call ntdll.NtQueryVolumeInformationFile(00000004,3340fb1c,3340fb24,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000002 ret=2113664d 0009:Call kernel32.GetStdHandle(fffffff5) ret=2113663f 0009:Ret kernel32.GetStdHandle() retval=00000008 ret=2113663f 0009:Call kernel32.GetFileType(00000008) ret=2113664d 0009:Call ntdll.NtQueryVolumeInformationFile(00000008,3340fb1c,3340fb24,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000001 ret=2113664d 0009:Call kernel32.GetStdHandle(fffffff4) ret=2113663f 0009:Ret kernel32.GetStdHandle() retval=0000000c ret=2113663f 0009:Call kernel32.GetFileType(0000000c) ret=2113664d 0009:Call ntdll.NtQueryVolumeInformationFile(0000000c,3340fb1c,3340fb24,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000001 ret=2113664d 0009:Call kernel32.SetHandleCount(00000020) ret=21136684 0009:Ret kernel32.SetHandleCount() retval=00000020 ret=21136684 0009:Call kernel32.GetACP() ret=2113aa39 0009:Ret kernel32.GetACP() retval=000004e4 ret=2113aa39 0009:Call kernel32.GetCPInfo(000004e4,3340fc34) ret=2113aa76 0009:Ret kernel32.GetCPInfo() retval=00000001 ret=2113aa76 0009:Call kernel32.GetCPInfo(000004e4,3340fc0c) ret=2113ac81 0009:Ret kernel32.GetCPInfo() retval=00000001 ret=2113ac81 0009:Call kernel32.GetStringTypeW(00000001,21147ccc L"",00000001,3340f6c8) ret=21139529 0009:Ret kernel32.GetStringTypeW() retval=00000001 ret=21139529 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=211395af 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=211395af 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340f4b0,00000100) ret=21139605 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=21139605 0009:Call kernel32.GetStringTypeW(00000001,3340f4b0 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,3340f70c) ret=21139617 0009:Ret kernel32.GetStringTypeW() retval=00000001 ret=21139617 0009:Call kernel32.LCMapStringW(00000000,00000100,21147ccc L"",00000001,00000000,00000000) ret=2113565d 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f51c) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Ret kernel32.LCMapStringW() retval=00000001 ret=2113565d 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=211356fa 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=211356fa 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340f48c,00000100) ret=21135752 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=21135752 0009:Call kernel32.LCMapStringW(00000000,00000100,3340f48c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=21135768 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f31c) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Ret kernel32.LCMapStringW() retval=00000100 ret=21135768 0009:Call kernel32.LCMapStringW(00000000,00000100,3340f48c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,3340f28c,00000100) ret=21135803 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f11c) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Ret kernel32.LCMapStringW() retval=00000100 ret=21135803 0009:Call kernel32.WideCharToMultiByte(000004e4,00000220,3340f28c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0161"...,00000100,3340fa0c,00000100,00000000,00000000) ret=21135828 0009:Ret kernel32.WideCharToMultiByte() retval=00000100 ret=21135828 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=211356fa 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=211356fa 0009:Call kernel32.MultiByteToWideChar(000004e4,00000001,3340fb0c " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340f46c,00000100) ret=21135752 0009:Ret kernel32.MultiByteToWideChar() retval=00000100 ret=21135752 0009:Call kernel32.LCMapStringW(00000000,00000200,3340f46c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=21135768 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f2fc) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Ret kernel32.LCMapStringW() retval=00000100 ret=21135768 0009:Call kernel32.LCMapStringW(00000000,00000200,3340f46c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,3340f26c,00000100) ret=21135803 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f0fc) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Ret kernel32.LCMapStringW() retval=00000100 ret=21135803 0009:Call kernel32.WideCharToMultiByte(000004e4,00000220,3340f26c L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\007f\20ac\0081\201a\0191\201e\2026\2020\2021\02c6\2030\0160"...,00000100,3340f90c,00000100,00000000,00000000) ret=21135828 0009:Ret kernel32.WideCharToMultiByte() retval=00000100 ret=21135828 0009:Call kernel32.GetModuleFileNameA(00000000,2115536c,00000104) ret=21136791 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000208) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894b8 ret=1187c69d 0009:Call ntdll.LdrLockLoaderLock(00000000,00000000,3340fb30) ret=1188ef5a 0009:Ret ntdll.LdrLockLoaderLock() retval=00000000 ret=1188ef5a 0009:Call ntdll.LdrFindEntryForAddress(00400000,3340fb2c) ret=1188ef74 0009:Ret ntdll.LdrFindEntryForAddress() retval=00000000 ret=1188ef74 0009:Call ntdll.LdrUnlockLoaderLock(00000000,00000009) ret=1188efc9 0009:Ret ntdll.LdrUnlockLoaderLock() retval=00000000 ret=1188efc9 0009:Call ntdll.RtlUnicodeToMultiByteN(2115536c,00000104,3340fb34,6b4894b8,00000056) ret=118733ed 0009:Ret ntdll.RtlUnicodeToMultiByteN() retval=00000000 ret=118733ed 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894b8) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetModuleFileNameA() retval=0000002b ret=21136791 0009:Call ntdll.RtlFreeHeap(7e290000,00000000,7e2901e0) ret=21134ea8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=21134ea8 0009:Call kernel32.GetModuleHandleA(2113e4c8 "KERNEL32") ret=211350f1 0009:Call ntdll.RtlInitAnsiString(3340fb54,2113e4c8 "KERNEL32") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000009 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340fb54,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlInitUnicodeString(3340fb58,25921c00 L"KERNEL32") ret=1188eded 0009:Ret ntdll.RtlInitUnicodeString() retval=00000012 ret=1188eded 0009:Call ntdll.LdrGetDllHandle(00000000,00000000,3340fb58,3340fb54) ret=1188ee0d 0009:Ret ntdll.LdrGetDllHandle() retval=00000000 ret=1188ee0d 0009:Ret kernel32.GetModuleHandleA() retval=11840000 ret=211350f1 0009:Call kernel32.GetProcAddress(11840000,21147c98 "IsProcessorFeaturePresent") ret=21135101 0009:Call ntdll.RtlInitAnsiString(3340fb64,21147c98 "IsProcessorFeaturePresent") ret=1188f8f9 0009:Ret ntdll.RtlInitAnsiString() retval=0000001a ret=1188f8f9 0009:Call ntdll.LdrGetProcedureAddress(11840000,3340fb64,00000000,3340fb60) ret=1188f915 0009:Ret ntdll.LdrGetProcedureAddress() retval=00000000 ret=1188f915 0009:Ret kernel32.GetProcAddress() retval=119250e0 ret=21135101 0009:Call kernel32.IsProcessorFeaturePresent(00000000) ret=21135109 0009:Ret kernel32.IsProcessorFeaturePresent() retval=00000000 ret=21135109 0009:Call ntdll.RtlAllocateHeap(7e290000,00000008,00000800) ret=2113b263 0009:Ret ntdll.RtlAllocateHeap() retval=7e294b18 ret=2113b263 0009:Call kernel32.GetModuleFileNameA(21100000,211509dc,00000103) ret=21101d08 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000206) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894b8 ret=1187c69d 0009:Call ntdll.LdrLockLoaderLock(00000000,00000000,3340fa3c) ret=1188ef5a 0009:Ret ntdll.LdrLockLoaderLock() retval=00000000 ret=1188ef5a 0009:Call ntdll.LdrFindEntryForAddress(21100000,3340fa38) ret=1188ef74 0009:Ret ntdll.LdrFindEntryForAddress() retval=00000000 ret=1188ef74 0009:Call ntdll.LdrUnlockLoaderLock(00000000,00000009) ret=1188efc9 0009:Ret ntdll.LdrUnlockLoaderLock() retval=00000000 ret=1188efc9 0009:Call ntdll.RtlUnicodeToMultiByteN(211509dc,00000103,3340fa40,6b4894b8,00000058) ret=118733ed 0009:Ret ntdll.RtlUnicodeToMultiByteN() retval=00000000 ret=118733ed 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894b8) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetModuleFileNameA() retval=0000002c ret=21101d08 0009:Call kernel32.GetWindowsDirectoryA(3340fb6c,00000103) ret=21101d42 0009:Call ntdll.RtlInitUnicodeString(3340fa4c,6b440098 L"c:\windows") ret=11896af3 0009:Ret ntdll.RtlInitUnicodeString() retval=00000016 ret=11896af3 0009:Call ntdll.RtlUnicodeStringToAnsiSize(3340fa4c) ret=11896b02 0009:Ret ntdll.RtlUnicodeStringToAnsiSize() retval=0000000b ret=11896b02 0009:Call ntdll.RtlUnicodeStringToAnsiString(3340fa44,3340fa4c,00000000) ret=11896b37 0009:Ret ntdll.RtlUnicodeStringToAnsiString() retval=00000000 ret=11896b37 0009:Ret kernel32.GetWindowsDirectoryA() retval=0000000a ret=21101d42 0009:Call kernel32.GetSystemDirectoryA(3340fb6c,00000103) ret=21101d85 0009:Call ntdll.RtlInitUnicodeString(3340fa4c,6b440410 L"c:\windows\system") ret=11896af3 0009:Ret ntdll.RtlInitUnicodeString() retval=00000024 ret=11896af3 0009:Call ntdll.RtlUnicodeStringToAnsiSize(3340fa4c) ret=11896b02 0009:Ret ntdll.RtlUnicodeStringToAnsiSize() retval=00000012 ret=11896b02 0009:Call ntdll.RtlUnicodeStringToAnsiString(3340fa44,3340fa4c,00000000) ret=11896b37 0009:Ret ntdll.RtlUnicodeStringToAnsiString() retval=00000000 ret=11896b37 0009:Ret kernel32.GetSystemDirectoryA() retval=00000011 ret=21101d85 0009:Call kernel32.GetVersionExA(3340fbdc) ret=21101f50 0009:Call ntdll.RtlGetVersion(3340f9bc) ret=118be82d 0009:Ret ntdll.RtlGetVersion() retval=00000000 ret=118be82d 0009:Ret kernel32.GetVersionExA() retval=00000001 ret=21101f50 0009:Call kernel32.QueryPerformanceFrequency(21151df0) ret=21101f63 0009:Ret kernel32.QueryPerformanceFrequency() retval=00000001 ret=21101f63 0009:Call kernel32.QueryPerformanceCounter(211515d8) ret=21101f7c 0009:Ret kernel32.QueryPerformanceCounter() retval=00000001 ret=21101f7c 0009:Ret PE DLL (proc=0x21133a87,module=0x21100000 L"MSS32.DLL",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Ret ntdll.LdrInitializeThunk() retval=00000000 ret=1189c49b 0009:Call ntdll.RtlImageNtHeader(00400000) ret=1189c4a9 0009:Ret ntdll.RtlImageNtHeader() retval=00400120 ret=1189c4a9 0009:Starting process L"C:\Sierra\Master of Olympus - Zeus\zeus.exe" (entryproc=0x584250) 0009:Call kernel32.GetVersion() ret=0058427c 0009:Call ntdll.RtlGetVersion(3340fc9c) ret=118be670 0009:Ret ntdll.RtlGetVersion() retval=00000000 ret=118be670 0009:Ret kernel32.GetVersion() retval=c0000a04 ret=0058427c 0009:Call kernel32.HeapCreate(00000001,00001000,00000000) ret=00587480 0009:Call ntdll.RtlCreateHeap(00000001,00000000,00000000,00001000,00000000,00000000) ret=1187c41f 0009:Ret ntdll.RtlCreateHeap() retval=7e060000 ret=1187c41f 0009:Ret kernel32.HeapCreate() retval=7e060000 ret=00587480 0009:Call kernel32.GetVersionExA(3340fe04) ret=00587346 0009:Call ntdll.RtlGetVersion(3340ea54) ret=118be82d 0009:Ret ntdll.RtlGetVersion() retval=00000000 ret=118be82d 0009:Ret kernel32.GetVersionExA() retval=00000001 ret=00587346 0009:Call kernel32.GetEnvironmentVariableA(00594f30 "__MSVCRT_HEAP_SELECT",3340ec70,00001090) ret=0058737b 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00002120) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b48afc8 ret=1187c69d 0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(3340eb60,00594f30 "__MSVCRT_HEAP_SELECT") ret=11870ed1 0009:Ret ntdll.RtlCreateUnicodeStringFromAsciiz() retval=00000001 ret=11870ed1 0009:Call ntdll.RtlInitUnicodeString(3340eb1c,6b4894e0 L"__MSVCRT_HEAP_SELECT") ret=11870ff3 0009:Ret ntdll.RtlInitUnicodeString() retval=0000002a ret=11870ff3 0009:Call ntdll.RtlQueryEnvironmentVariable_U(00000000,3340eb1c,3340eb14) ret=1187102b 0009:Ret ntdll.RtlQueryEnvironmentVariable_U() retval=c0000100 ret=1187102b 0009:Call ntdll.RtlNtStatusToDosError(c0000100) ret=11871056 0009:Ret ntdll.RtlNtStatusToDosError() retval=000000cb ret=11871056 0009:Call ntdll.RtlFreeUnicodeString(3340eb60) ret=11870f0d 0009:Ret ntdll.RtlFreeUnicodeString() retval=00000001 ret=11870f0d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b48afc8) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetEnvironmentVariableA() retval=00000000 ret=0058737b 0009:Call kernel32.GetModuleHandleA(00000000) ret=00587304 0009:Ret kernel32.GetModuleHandleA() retval=00400000 ret=00587304 0009:Call ntdll.RtlAllocateHeap(7e060000,00000000,00000140) ret=005874d9 0009:Ret ntdll.RtlAllocateHeap() retval=7e060098 ret=005874d9 0009:Call ntdll.RtlAllocateHeap(7e060000,00000008,000041c4) ret=00587bcd 0009:Ret ntdll.RtlAllocateHeap() retval=7e0601e0 ret=00587bcd 0009:Call kernel32.VirtualAlloc(00000000,00100000,00002000,00000004) ret=00587be7 0009:Call ntdll.NtAllocateVirtualMemory(ffffffff,3340fcd8,00000000,3340fcf0,00002000,00000004) ret=118bed57 0009:Ret ntdll.NtAllocateVirtualMemory() retval=00000000 ret=118bed57 0009:Ret kernel32.VirtualAlloc() retval=7df50000 ret=00587be7 0009:Call kernel32.VirtualAlloc(7df50000,00008000,00001000,00000004) ret=00587c73 0009:Call ntdll.NtAllocateVirtualMemory(ffffffff,3340fcc8,00000000,3340fce0,00001000,00000004) ret=118bed57 0009:Ret ntdll.NtAllocateVirtualMemory() retval=00000000 ret=118bed57 0009:Ret kernel32.VirtualAlloc() retval=7df50000 ret=00587c73 0009:Call kernel32.GetStartupInfoA(3340fe64) ret=00586da9 0009:Ret kernel32.GetStartupInfoA() retval=00000044 ret=00586da9 0009:Call kernel32.GetStdHandle(fffffff6) ret=00586ea8 0009:Ret kernel32.GetStdHandle() retval=00000004 ret=00586ea8 0009:Call kernel32.GetFileType(00000004) ret=00586eb6 0009:Call ntdll.NtQueryVolumeInformationFile(00000004,3340fd50,3340fd58,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000002 ret=00586eb6 0009:Call kernel32.GetStdHandle(fffffff5) ret=00586ea8 0009:Ret kernel32.GetStdHandle() retval=00000008 ret=00586ea8 0009:Call kernel32.GetFileType(00000008) ret=00586eb6 0009:Call ntdll.NtQueryVolumeInformationFile(00000008,3340fd50,3340fd58,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000001 ret=00586eb6 0009:Call kernel32.GetStdHandle(fffffff4) ret=00586ea8 0009:Ret kernel32.GetStdHandle() retval=0000000c ret=00586ea8 0009:Call kernel32.GetFileType(0000000c) ret=00586eb6 0009:Call ntdll.NtQueryVolumeInformationFile(0000000c,3340fd50,3340fd58,00000008,00000004) ret=11874403 0009:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=11874403 0009:Ret kernel32.GetFileType() retval=00000001 ret=00586eb6 0009:Call kernel32.SetHandleCount(00000020) ret=00586eed 0009:Ret kernel32.SetHandleCount() retval=00000020 ret=00586eed 0009:Call kernel32.GetCommandLineA() ret=005842ca 0009:Ret kernel32.GetCommandLineA() retval=6b4518a0 ret=005842ca 0009:Call kernel32.CloseProfileUserMapping() ret=0058a5da fixme:profile:CloseProfileUserMapping (), stub! 0009:Ret kernel32.CloseProfileUserMapping() retval=00000000 ret=0058a5da 0009:Call kernel32.GetEnvironmentStrings() ret=0058a5f2 0009:Call ntdll.RtlAcquirePebLock() ret=11870c79 0009:Ret ntdll.RtlAcquirePebLock() retval=00000000 ret=11870c79 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000075b) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b48afc8 ret=1187c69d 0009:Call ntdll.RtlReleasePebLock() ret=11870dd2 0009:Ret ntdll.RtlReleasePebLock() retval=00000000 ret=11870dd2 0009:Ret kernel32.GetEnvironmentStrings() retval=6b48afc8 ret=0058a5f2 0009:Call ntdll.RtlAllocateHeap(7e060000,00000000,00000760) ret=00583586 0009:Ret ntdll.RtlAllocateHeap() retval=7e0643b0 ret=00583586 0009:Call kernel32.FreeEnvironmentStringsA(6b48afc8) ret=0058a6e2 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b48afc8) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.FreeEnvironmentStringsA() retval=00000001 ret=0058a6e2 0009:Call kernel32.GetACP() ret=00589c82 0009:Ret kernel32.GetACP() retval=000004e4 ret=00589c82 0009:Call kernel32.GetCPInfo(000004e4,3340fe68) ret=00589cbf 0009:Ret kernel32.GetCPInfo() retval=00000001 ret=00589cbf 0009:Call kernel32.GetCPInfo(000004e4,3340fe40) ret=00589eca 0009:Ret kernel32.GetCPInfo() retval=00000001 ret=00589eca 0009:Call kernel32.CreateEventW(00000001,00594efc,00000001,3340f8fc L"") ret=0058b71a err:sync:CreateEventW Bad security attributes pointer 0x1 0009:Ret kernel32.CreateEventW() retval=00000000 ret=0058b71a 0009:Call kernel32.GetStringTypeA(00000000,00000001,00594ef8 "",00000001,3340f8fc) ret=0058b734 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f728) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f734) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.LdrFindResource_U(11840000,3340f6e0,00000003,3340f61c) ret=118a7cad 0009:Ret ntdll.LdrFindResource_U() retval=00000000 ret=118a7cad 0009:Call ntdll.LdrAccessResource(11840000,1192e2d0,3340f72c,00000000) ret=118a9097 0009:Ret ntdll.LdrAccessResource() retval=00000000 ret=118a9097 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000000a) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000002) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetStringTypeA() retval=00000001 ret=0058b734 0009:Call kernel32.GetStringTypeA(00000000,00000001,3340fd40 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340f940) ret=0058b768 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f728) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f734) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.LdrFindResource_U(11840000,3340f6e0,00000003,3340f61c) ret=118a7cad 0009:Ret ntdll.LdrFindResource_U() retval=00000000 ret=118a7cad 0009:Call ntdll.LdrAccessResource(11840000,1192e2d0,3340f72c,00000000) ret=118a9097 0009:Ret ntdll.LdrAccessResource() retval=00000000 ret=118a9097 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000000a) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000200) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894e0 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894e0) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetStringTypeA() retval=00000001 ret=0058b768 0009:Call kernel32.BackupSeek(00000000,00000100,00594efc,00000001,00000000,00000000) ret=005870d2 fixme:tape:BackupSeek ((nil), 256, 5852924, 0x1, (nil), (nil)) stub! 0009:Ret kernel32.BackupSeek() retval=00000000 ret=005870d2 0009:Call kernel32.LCMapStringA(00000000,00000100,00594ef8 "",00000001,00000000,00000000) ret=005870ee 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6ec) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6f8) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.LdrFindResource_U(11840000,3340f6a4,00000003,3340f5e0) ret=118a7cad 0009:Ret ntdll.LdrFindResource_U() retval=00000000 ret=118a7cad 0009:Call ntdll.LdrAccessResource(11840000,1192e2d0,3340f6f0,00000000) ret=118a9097 0009:Ret ntdll.LdrAccessResource() retval=00000000 ret=118a9097 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000000a) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f704) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000002) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f704) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.LCMapStringA() retval=00000001 ret=005870ee 0009:Call kernel32.LCMapStringA(00000000,00000100,3340fd40 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340fc40,00000100) ret=00587137 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6ec) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6f8) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.LdrFindResource_U(11840000,3340f6a4,00000003,3340f5e0) ret=118a7cad 0009:Ret ntdll.LdrFindResource_U() retval=00000000 ret=118a7cad 0009:Call ntdll.LdrAccessResource(11840000,1192e2d0,3340f6f0,00000000) ret=118a9097 0009:Ret ntdll.LdrAccessResource() retval=00000000 ret=118a9097 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000000a) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f704) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000200) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894e0 ret=1187c69d 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f704) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894e0) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.LCMapStringA() retval=00000100 ret=00587137 0009:Call kernel32.LCMapStringA(00000000,00000200,3340fd40 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,3340fb40,00000100) ret=00587137 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6cc) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6d8) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.LdrFindResource_U(11840000,3340f684,00000003,3340f5c0) ret=118a7cad 0009:Ret ntdll.LdrFindResource_U() retval=00000000 ret=118a7cad 0009:Call ntdll.LdrAccessResource(11840000,1192e2d0,3340f6d0,00000000) ret=118a9097 0009:Ret ntdll.LdrAccessResource() retval=00000000 ret=118a9097 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,0000000a) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b488398 ret=1187c69d 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b488398) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6e4) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000200) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894e0 ret=1187c69d 0009:Call ntdll.NtQueryDefaultLocale(00000001,3340f6e4) ret=11889627 0009:Ret ntdll.NtQueryDefaultLocale() retval=00000000 ret=11889627 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894e0) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.LCMapStringA() retval=00000100 ret=00587137 0009:Call kernel32.GetModuleFileNameA(00000000,0140bf60,00000104) ret=0058a399 0009:Call ntdll.RtlAllocateHeap(6b440000,00000000,00000208) ret=1187c69d 0009:Ret ntdll.RtlAllocateHeap() retval=6b4894e0 ret=1187c69d 0009:Call ntdll.LdrLockLoaderLock(00000000,00000000,3340fd64) ret=1188ef5a 0009:Ret ntdll.LdrLockLoaderLock() retval=00000000 ret=1188ef5a 0009:Call ntdll.LdrFindEntryForAddress(00400000,3340fd60) ret=1188ef74 0009:Ret ntdll.LdrFindEntryForAddress() retval=00000000 ret=1188ef74 0009:Call ntdll.LdrUnlockLoaderLock(00000000,00000009) ret=1188efc9 0009:Ret ntdll.LdrUnlockLoaderLock() retval=00000000 ret=1188efc9 0009:Call ntdll.RtlUnicodeToMultiByteN(0140bf60,00000104,3340fd68,6b4894e0,00000056) ret=118733ed 0009:Ret ntdll.RtlUnicodeToMultiByteN() retval=00000000 ret=118733ed 0009:Call ntdll.RtlFreeHeap(6b440000,00000000,6b4894e0) ret=1187c6dd 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=1187c6dd 0009:Ret kernel32.GetModuleFileNameA() retval=0000002b ret=0058a399 0009:Call ntdll.RtlFreeHeap(7e060000,00000000,7e0643b0) ret=005835ee 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=005835ee 0009:Call kernel32.GetModuleHandleA(00594dfc "KERNEL32") ret=00585112 0009:Call ntdll.RtlInitAnsiString(3340fd88,00594dfc "KERNEL32") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000009 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340fd88,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlInitUnicodeString(3340fd8c,25921c00 L"KERNEL32") ret=1188eded 0009:Ret ntdll.RtlInitUnicodeString() retval=00000012 ret=1188eded 0009:Call ntdll.LdrGetDllHandle(00000000,00000000,3340fd8c,3340fd88) ret=1188ee0d 0009:Ret ntdll.LdrGetDllHandle() retval=00000000 ret=1188ee0d 0009:Ret kernel32.GetModuleHandleA() retval=11840000 ret=00585112 0009:Call kernel32.GetProcAddress(11840000,00594de0 "IsProcessorFeaturePresent") ret=00585122 0009:Call ntdll.RtlInitAnsiString(3340fd98,00594de0 "IsProcessorFeaturePresent") ret=1188f8f9 0009:Ret ntdll.RtlInitAnsiString() retval=0000001a ret=1188f8f9 0009:Call ntdll.LdrGetProcedureAddress(11840000,3340fd98,00000000,3340fd94) ret=1188f915 0009:Ret ntdll.LdrGetProcedureAddress() retval=00000000 ret=1188f915 0009:Ret kernel32.GetProcAddress() retval=119250e0 ret=00585122 0009:Call kernel32.IsProcessorFeaturePresent(00000000) ret=0058512a 0009:Ret kernel32.IsProcessorFeaturePresent() retval=00000000 ret=0058512a 0009:Call ntdll.RtlAllocateHeap(7e060000,00000008,00000800) ret=00584409 0009:Ret ntdll.RtlAllocateHeap() retval=7e0643b0 ret=00584409 0009:Call kernel32.SetUnhandledExceptionFilter(0058b469) ret=0058b4ba 0009:Ret kernel32.SetUnhandledExceptionFilter() retval=00000000 ret=0058b4ba 0009:Call ntdll.RtlAllocateHeap(7e060000,00000000,00003660) ret=00583586 0009:Ret ntdll.RtlAllocateHeap() retval=7e064bb8 ret=00583586 0009:Call kernel32.CreateFileA(005d69f8 "Model\Zeus eventmsg.txt",80000000,00000003,3340fde4,00000003,00000080,00000000) ret=0058ac5f 0009:Call ntdll.RtlInitAnsiString(3340fc94,005d69f8 "Model\Zeus eventmsg.txt") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000018 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340fc94,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlIsDosDeviceName_U(25921c00 L"Model\Zeus eventmsg.txt") ret=1187542e 0009:Ret ntdll.RtlIsDosDeviceName_U() retval=00000000 ret=1187542e 0009:Call ntdll.RtlDosPathNameToNtPathName_U(25921c00 L"Model\Zeus eventmsg.txt",3340fc74,00000000,00000000) ret=11875179 0009:Ret ntdll.RtlDosPathNameToNtPathName_U() retval=00000001 ret=11875179 0009:Call ntdll.NtCreateFile(3340fc68,80000000,3340fc7c,3340fc6c,00000000,00000080,00000003,00000001,00000050,00000000,00000000) ret=11875269 0009:Ret ntdll.NtCreateFile() retval=c000003a ret=11875269 0009:Call ntdll.RtlNtStatusToDosError(c000003a) ret=1187529d 0009:Ret ntdll.RtlNtStatusToDosError() retval=00000003 ret=1187529d 0009:Call ntdll.RtlFreeUnicodeString(3340fc74) ret=118752b1 0009:Ret ntdll.RtlFreeUnicodeString() retval=00000001 ret=118752b1 0009:Ret kernel32.CreateFileA() retval=ffffffff ret=0058ac5f 0009:Call kernel32.GetLastError() ret=0058ac7d 0009:Ret kernel32.GetLastError() retval=00000003 ret=0058ac7d 0009:Call kernel32.CreateFileA(3340fc48 "Adventures\housing.pak",80000000,00000003,3340fbe8,00000003,00000080,00000000) ret=0058ac5f 0009:Call ntdll.RtlInitAnsiString(3340fa98,3340fc48 "Adventures\housing.pak") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000017 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340fa98,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlIsDosDeviceName_U(25921c00 L"Adventures\housing.pak") ret=1187542e 0009:Ret ntdll.RtlIsDosDeviceName_U() retval=00000000 ret=1187542e 0009:Call ntdll.RtlDosPathNameToNtPathName_U(25921c00 L"Adventures\housing.pak",3340fa78,00000000,00000000) ret=11875179 0009:Ret ntdll.RtlDosPathNameToNtPathName_U() retval=00000001 ret=11875179 0009:Call ntdll.NtCreateFile(3340fa6c,80000000,3340fa80,3340fa70,00000000,00000080,00000003,00000001,00000050,00000000,00000000) ret=11875269 0009:Ret ntdll.NtCreateFile() retval=c000003a ret=11875269 0009:Call ntdll.RtlNtStatusToDosError(c000003a) ret=1187529d 0009:Ret ntdll.RtlNtStatusToDosError() retval=00000003 ret=1187529d 0009:Call ntdll.RtlFreeUnicodeString(3340fa78) ret=118752b1 0009:Ret ntdll.RtlFreeUnicodeString() retval=00000001 ret=118752b1 0009:Ret kernel32.CreateFileA() retval=ffffffff ret=0058ac5f 0009:Call kernel32.GetLastError() ret=0058ac7d 0009:Ret kernel32.GetLastError() retval=00000003 ret=0058ac7d 0009:Call kernel32.CreateFileA(3340fc48 "Adventures\housing.pak",80000000,00000003,3340fbe8,00000003,00000080,00000000) ret=0058ac5f 0009:Call ntdll.RtlInitAnsiString(3340fa98,3340fc48 "Adventures\housing.pak") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000017 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340fa98,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlIsDosDeviceName_U(25921c00 L"Adventures\housing.pak") ret=1187542e 0009:Ret ntdll.RtlIsDosDeviceName_U() retval=00000000 ret=1187542e 0009:Call ntdll.RtlDosPathNameToNtPathName_U(25921c00 L"Adventures\housing.pak",3340fa78,00000000,00000000) ret=11875179 0009:Ret ntdll.RtlDosPathNameToNtPathName_U() retval=00000001 ret=11875179 0009:Call ntdll.NtCreateFile(3340fa6c,80000000,3340fa80,3340fa70,00000000,00000080,00000003,00000001,00000050,00000000,00000000) ret=11875269 0009:Ret ntdll.NtCreateFile() retval=c000003a ret=11875269 0009:Call ntdll.RtlNtStatusToDosError(c000003a) ret=1187529d 0009:Ret ntdll.RtlNtStatusToDosError() retval=00000003 ret=1187529d 0009:Call ntdll.RtlFreeUnicodeString(3340fa78) ret=118752b1 0009:Ret ntdll.RtlFreeUnicodeString() retval=00000001 ret=118752b1 0009:Ret kernel32.CreateFileA() retval=ffffffff ret=0058ac5f 0009:Call kernel32.GetLastError() ret=0058ac7d 0009:Ret kernel32.GetLastError() retval=00000003 ret=0058ac7d 0009:Call kernel32.SetCurrentDirectoryA(00e7e24c "") ret=0058ca8f 0009:Call ntdll.RtlInitAnsiString(3340f9f8,00e7e24c "") ret=118732cf 0009:Ret ntdll.RtlInitAnsiString() retval=00000001 ret=118732cf 0009:Call ntdll.RtlAnsiStringToUnicodeString(25921bf8,3340f9f8,00000000) ret=11873368 0009:Ret ntdll.RtlAnsiStringToUnicodeString() retval=00000000 ret=11873368 0009:Call ntdll.RtlInitUnicodeString(3340f9fc,25921c00 L"") ret=118999c9 0009:Ret ntdll.RtlInitUnicodeString() retval=00000002 ret=118999c9 0009:Call ntdll.RtlSetCurrentDirectory_U(3340f9fc) ret=118999d4 0009:Ret ntdll.RtlSetCurrentDirectory_U() retval=c0000033 ret=118999d4 0009:Call ntdll.RtlNtStatusToDosError(c0000033) ret=118999f8 0009:Ret ntdll.RtlNtStatusToDosError() retval=0000007b ret=118999f8 0009:Ret kernel32.SetCurrentDirectoryA() retval=00000000 ret=0058ca8f 0009:Call kernel32.GetLastError() ret=0058caf7 0009:Ret kernel32.GetLastError() retval=0000007b ret=0058caf7 0009:Call kernel32.GetCurrentDirectoryA(00000104,3340fafc) ret=00583679 0009:Call ntdll.RtlGetCurrentDirectory_U(00000208,3340f7ec) ret=11899908 0009:Ret ntdll.RtlGetCurrentDirectory_U() retval=0000001a ret=11899908 0009:Call ntdll.RtlInitUnicodeString(3340f7c4,3340f7ec L"Z:\home\david") ret=11896af3 0009:Ret ntdll.RtlInitUnicodeString() retval=0000001c ret=11896af3 0009:Call ntdll.RtlUnicodeStringToAnsiSize(3340f7c4) ret=11896b02 0009:Ret ntdll.RtlUnicodeStringToAnsiSize() retval=0000000e ret=11896b02 0009:Call ntdll.RtlUnicodeStringToAnsiString(3340f7bc,3340f7c4,00000000) ret=11896b37 0009:Ret ntdll.RtlUnicodeStringToAnsiString() retval=00000000 ret=11896b37 0009:Ret kernel32.GetCurrentDirectoryA() retval=0000000d ret=00583679 0009:Call user32.MessageBoxA(00000000,3340fd64 "Missing pak or sav in Basic tutorial 0",005f6edc "Tutorial File Error",00000000) ret=00575e87 0009:Call ntdll.RtlCreateUnicodeStringFromAsciiz(3340fbb4,3340fd64 "Missing pak or sav in Basic tutorial 0") ret=73467343