Jump to content











Photo
- - - - -

poweroff


  • Please log in to reply
6 replies to this topic

#1 rawr

rawr

    Frequent Member

  • Advanced user
  • 163 posts

Posted 10 October 2008 - 11:38 PM

http://www.boot-land...amp;hl=Poweroff
http://www.boot-land...amp;showfile=13

:confused1: just an update then

Poweroff is a small program that allows you to control the power state of your pc.

It can power off, shutdown or reboot your pc, log you off, lock your workstation, go to standby or hibernation mode and even wake up another pc.

All actions can be done locally or on a remote pc (if they are running poweroff).

The action can be performed immediately or scheduled, by using a built-in scheduler.

All actions and options can be controlled by command line options. This way, you can easily integrate poweroff in your batch files.

It should run on Windows 95/98/Me/NT4.0/2000/XP, each with its own limitations. Beware that I haven’t tested the program on these operating systems, but in theory it should work on all of them…

Since this release has been completely rewritten from scratch, it may be possible that it still contains some bugs. Please let me know if you find one.

Full source code is included!



http://users.telenet...ff/poweroff.htm
users.pandora.be/jbosman/ pwroff30.zip <latest

#2 Guest_Boot_Monkey_*

Guest_Boot_Monkey_*
  • Guests

Posted 29 June 2012 - 03:03 AM

This tool doesn't work in my Win7PESE builds.

Something is missing and I'm trying to find out what.

#3 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 29 June 2012 - 01:11 PM

Take dependency walker and use the profiling option to run the program, then choose the option you want and look, what problems the log shows.

If this is also about the sleep option, know that a lot of the power management depends on drivers properly working, which is always a tricky thing in PE.

:cheers:

#4 Guest_Boot_Monkey_*

Guest_Boot_Monkey_*
  • Guests

Posted 04 July 2012 - 11:08 PM

Hello MedEvil,

Thanks for mentioning the profiling option.

This is the result I got. Just posting it up here so I can share the results to save anyone else having to do it.

( sorry I don't have the spoiler quoting option )


Starting profile on 5/07/2012 at 8:54:18 AM

Operating System: Microsoft Windows NT/2000/XP/2003/Vista based Enterprise (32-bit), version 6.01.7600

Program Executable: c:\Temp\pwroff30\POWEROFF.EXE

Program Arguments:

Starting Directory: c:\Temp\pwroff30\

Search Path:

Options Selected:

Simulate ShellExecute by inserting any App Paths directories into the PATH environment variable.

Log DllMain calls for process attach and process detach messages.

Hook the process to gather more detailed dependency information.

Log LoadLibrary function calls.

Log GetProcAddress function calls.

Log debug output messages.

Use full paths when logging file names.

Automatically open and profile child processes.

--------------------------------------------------------------------------------

Started "c:\Temp\pwroff30\POWEROFF.EXE" (process 0xC4C) at address 0x00400000. Successfully hooked module.

Loaded "c:\windows\system32\NTDLL.DLL" at address 0x77120000. Successfully hooked module.

Loaded "c:\windows\system32\KERNEL32.DLL" at address 0x75930000. Successfully hooked module.

Loaded "c:\windows\system32\KERNELBASE.DLL" at address 0x75380000. Successfully hooked module.

DllMain(0x75380000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNELBASE.DLL" called.

DllMain(0x75380000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNELBASE.DLL" returned 1 (0x1).

DllMain(0x75930000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNEL32.DLL" called.

DllMain(0x75930000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\KERNEL32.DLL" returned 1 (0x1).

Injected "c:	emp\depends22_x86\DEPENDS.DLL" at address 0x08370000.

DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "c:	emp\depends22_x86\DEPENDS.DLL" called.

DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x00000000) in "c:	emp\depends22_x86\DEPENDS.DLL" returned 1 (0x1).

Loaded "c:\windows\system32\USER32.DLL" at address 0x76120000. Successfully hooked module.

Loaded "c:\windows\system32\GDI32.DLL" at address 0x75C00000. Successfully hooked module.

Loaded "c:\windows\system32\LPK.DLL" at address 0x77260000. Successfully hooked module.

Loaded "c:\windows\system32\USP10.DLL" at address 0x75B60000. Successfully hooked module.

Loaded "c:\windows\system32\MSVCRT.DLL" at address 0x77280000. Successfully hooked module.

Loaded "c:\windows\system32\ADVAPI32.DLL" at address 0x75DF0000. Successfully hooked module.

Loaded "c:\windows\system32\SECHOST.DLL" at address 0x77330000. Successfully hooked module.

Loaded "c:\windows\system32\RPCRT4.DLL" at address 0x75A20000. Successfully hooked module.

Loaded "c:\windows\system32\COMDLG32.DLL" at address 0x76E40000. Successfully hooked module.

Loaded "c:\windows\system32\SHLWAPI.DLL" at address 0x75710000. Successfully hooked module.

Loaded "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741C0000. Successfully hooked module.

Loaded "c:\windows\system32\SHELL32.DLL" at address 0x761F0000. Successfully hooked module.

Loaded "c:\windows\system32\WINMM.DLL" at address 0x6FCF0000. Successfully hooked module.

Loaded "c:\windows\system32\MPR.DLL" at address 0x70EE0000. Successfully hooked module.

Loaded "c:\windows\system32\WSOCK32.DLL" at address 0x732D0000. Successfully hooked module.

Loaded "c:\windows\system32\WS2_32.DLL" at address 0x75590000. Successfully hooked module.

Loaded "c:\windows\system32\NSI.DLL" at address 0x75F10000. Successfully hooked module.

Entrypoint reached. All implicit modules have been loaded.

DllMain(0x77280000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\MSVCRT.DLL" called.

DllMain(0x77280000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\MSVCRT.DLL" returned 1 (0x1).

DllMain(0x75B60000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\USP10.DLL" called.

LoadLibraryA("gdi32.dll") called from "c:\windows\system32\USP10.DLL" at address 0x75B76890.

LoadLibraryA("gdi32.dll") returned 0x75C00000.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetCharABCWidthsI") called from "c:\windows\system32\USP10.DLL" at address 0x75B768C5 and returned 0x75C0B99A.

DllMain(0x75B60000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\USP10.DLL" returned 1 (0x1).

DllMain(0x77260000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\LPK.DLL" called.

DllMain(0x77260000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\LPK.DLL" returned 1 (0x1).

DllMain(0x75C00000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\GDI32.DLL" called.

DllMain(0x75C00000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\GDI32.DLL" returned 1 (0x1).

DllMain(0x76120000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\USER32.DLL" called.

LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") called from "c:\windows\system32\USER32.DLL" at address 0x76140AEB.

Loaded "c:\windows\system32\IMM32.DLL" at address 0x75570000. Successfully hooked module.

Loaded "c:\windows\system32\MSCTF.DLL" at address 0x77050000. Successfully hooked module.

DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\MSCTF.DLL" called.

DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\MSCTF.DLL" returned 1 (0x1).

DllMain(0x75570000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\IMM32.DLL" called.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmWINNLSEnableIME") called from "c:\windows\system32\USER32.DLL" at address 0x7613FD74 and returned 0x75580171.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmWINNLSGetEnableStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7613FD89 and returned 0x75580198.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSendIMEMessageExW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FD9E and returned 0x75580426.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSendIMEMessageExA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FDB3 and returned 0x75580441.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPGetIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FDC8 and returned 0x7558069F.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPGetIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FDDD and returned 0x755806D3.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPQueryIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FDF2 and returned 0x75580504.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPQueryIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE07 and returned 0x75580610.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPSetIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE1C and returned 0x75580280.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIMPSetIMEA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE31 and returned 0x755803A8.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmAssociateContext") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE46 and returned 0x75573515.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmEscapeA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE5B and returned 0x7557A08A.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmEscapeW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE70 and returned 0x7557A309.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE85 and returned 0x755784B9.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionStringW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FE9A and returned 0x755777B0.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7613FEAF and returned 0x75572D44.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetContext") called from "c:\windows\system32\USER32.DLL" at address 0x7613FEC4 and returned 0x7557299D.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetDefaultIMEWnd") called from "c:\windows\system32\USER32.DLL" at address 0x7613FED9 and returned 0x75572968.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmIsIME") called from "c:\windows\system32\USER32.DLL" at address 0x7613FEEE and returned 0x75572CEB.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmReleaseContext") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF03 and returned 0x75572A67.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmRegisterClient") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF18 and returned 0x755715C2.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionFontW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF2D and returned 0x75576CA3.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCompositionFontA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF42 and returned 0x75576C07.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionFontW") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF57 and returned 0x75574918.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionFontA") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF6C and returned 0x75576D3F.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF81 and returned 0x7557489B.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmNotifyIME") called from "c:\windows\system32\USER32.DLL" at address 0x7613FF96 and returned 0x75574700.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmLockIMC") called from "c:\windows\system32\USER32.DLL" at address 0x7613FFAB and returned 0x755727F2.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmUnlockIMC") called from "c:\windows\system32\USER32.DLL" at address 0x7613FFC0 and returned 0x75572873.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmLoadIME") called from "c:\windows\system32\USER32.DLL" at address 0x7613FFD5 and returned 0x75572FC6.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetOpenStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7613FFEA and returned 0x75574D84.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmFreeLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7613FFFF and returned 0x7557A548.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmActivateLayout") called from "c:\windows\system32\USER32.DLL" at address 0x76140014 and returned 0x75579B87.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetCandidateWindow") called from "c:\windows\system32\USER32.DLL" at address 0x76140029 and returned 0x75572D87.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCandidateWindow") called from "c:\windows\system32\USER32.DLL" at address 0x7614003E and returned 0x75576EB9.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmConfigureIMEW") called from "c:\windows\system32\USER32.DLL" at address 0x76140053 and returned 0x75579EAC.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetConversionStatus") called from "c:\windows\system32\USER32.DLL" at address 0x76140068 and returned 0x755737DC.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetConversionStatus") called from "c:\windows\system32\USER32.DLL" at address 0x7614007D and returned 0x75574C7D.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetStatusWindowPos") called from "c:\windows\system32\USER32.DLL" at address 0x76140092 and returned 0x75576E51.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetImeInfoEx") called from "c:\windows\system32\USER32.DLL" at address 0x761400A7 and returned 0x75572DD7.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmLockImeDpi") called from "c:\windows\system32\USER32.DLL" at address 0x761400BC and returned 0x75572AC6.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmUnlockImeDpi") called from "c:\windows\system32\USER32.DLL" at address 0x761400D1 and returned 0x75572A79.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetOpenStatus") called from "c:\windows\system32\USER32.DLL" at address 0x761400E6 and returned 0x75576766.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetActiveContext") called from "c:\windows\system32\USER32.DLL" at address 0x761400FB and returned 0x75572B6E.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmTranslateMessage") called from "c:\windows\system32\USER32.DLL" at address 0x76140110 and returned 0x7557FDB9.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmLoadLayout") called from "c:\windows\system32\USER32.DLL" at address 0x76140125 and returned 0x75574356.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmProcessKey") called from "c:\windows\system32\USER32.DLL" at address 0x7614013A and returned 0x755749E8.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmPutImeMenuItemsIntoMappedFile") called from "c:\windows\system32\USER32.DLL" at address 0x7614014F and returned 0x7558599C.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmGetProperty") called from "c:\windows\system32\USER32.DLL" at address 0x76140164 and returned 0x75574AF6.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringA") called from "c:\windows\system32\USER32.DLL" at address 0x76140179 and returned 0x75579166.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSetCompositionStringW") called from "c:\windows\system32\USER32.DLL" at address 0x7614018E and returned 0x7557918D.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmEnumInputContext") called from "c:\windows\system32\USER32.DLL" at address 0x761401A3 and returned 0x755740D2.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "ImmSystemHandler") called from "c:\windows\system32\USER32.DLL" at address 0x761401B8 and returned 0x7557BD2A.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmTIMActivate") called from "c:\windows\system32\USER32.DLL" at address 0x761401C9 and returned 0x75572ED6.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmRestoreToolbarWnd") called from "c:\windows\system32\USER32.DLL" at address 0x761401DA and returned 0x75585C1A.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmHideToolbarWnd") called from "c:\windows\system32\USER32.DLL" at address 0x761401EB and returned 0x75585C51.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmDispatchDefImeMessage") called from "c:\windows\system32\USER32.DLL" at address 0x761401FC and returned 0x75571579.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmNotify") called from "c:\windows\system32\USER32.DLL" at address 0x7614020D and returned 0x7557152D.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmSetDefaultRemoteKeyboardLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7614021E and returned 0x75585EB7.

GetProcAddress(0x75570000 [c:\windows\system32\IMM32.DLL], "CtfImmGetCompatibleKeyboardLayout") called from "c:\windows\system32\USER32.DLL" at address 0x7614022F and returned 0x75585EC7.

DllMain(0x75570000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\IMM32.DLL" returned 1 (0x1).

LoadLibraryW("C:\WINDOWS\system32\IMM32.DLL") returned 0x75570000.

GetProcAddress(0x77260000 [c:\windows\system32\LPK.DLL], "LpkTabbedTextOut") called from "c:\windows\system32\GDI32.DLL" at address 0x75C0F020 and returned 0x772654F3.

GetProcAddress(0x77260000 [c:\windows\system32\LPK.DLL], "LpkPSMTextOut") called from "c:\windows\system32\GDI32.DLL" at address 0x75C0F02B and returned 0x77264251.

GetProcAddress(0x77260000 [c:\windows\system32\LPK.DLL], "LpkDrawTextEx") called from "c:\windows\system32\GDI32.DLL" at address 0x75C0F036 and returned 0x77261770.

GetProcAddress(0x77260000 [c:\windows\system32\LPK.DLL], "LpkEditControl") called from "c:\windows\system32\GDI32.DLL" at address 0x75C0F041 and returned 0x7726706C.

DllMain(0x76120000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\USER32.DLL" returned 1 (0x1).

DllMain(0x75A20000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\RPCRT4.DLL" called.

DllMain(0x75A20000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\RPCRT4.DLL" returned 1973786881 (0x75A59901).

DllMain(0x77330000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SECHOST.DLL" called.

DllMain(0x77330000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SECHOST.DLL" returned 1 (0x1).

DllMain(0x75DF0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\ADVAPI32.DLL" called.

DllMain(0x75DF0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\ADVAPI32.DLL" returned 1 (0x1).

DllMain(0x75710000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SHLWAPI.DLL" called.

DllMain(0x75710000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SHLWAPI.DLL" returned 1 (0x1).

DllMain(0x741C0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" called.

GetProcAddress(0x77260000 [c:\windows\system32\LPK.DLL], "LpkEditControl") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F39BC and returned 0x7726706C.

DllMain(0x741C0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" returned 1 (0x1).

DllMain(0x761F0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SHELL32.DLL" called.

DllMain(0x761F0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\SHELL32.DLL" returned 1 (0x1).

DllMain(0x76E40000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\COMDLG32.DLL" called.

DllMain(0x76E40000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\COMDLG32.DLL" returned 1 (0x1).

DllMain(0x6FCF0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WINMM.DLL" called.

DllMain(0x6FCF0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WINMM.DLL" returned 1 (0x1).

DllMain(0x70EE0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\MPR.DLL" called.

DllMain(0x70EE0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\MPR.DLL" returned 1 (0x1).

DllMain(0x75F10000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\NSI.DLL" called.

DllMain(0x75F10000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\NSI.DLL" returned 1 (0x1).

DllMain(0x75590000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WS2_32.DLL" called.

DllMain(0x75590000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WS2_32.DLL" returned 1 (0x1).

DllMain(0x732D0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WSOCK32.DLL" called.

DllMain(0x732D0000, DLL_PROCESS_ATTACH, 0x0012FD24) in "c:\windows\system32\WSOCK32.DLL" returned 1 (0x1).

Loaded "c:\program files\blue coat\proxyclient\PROXYCLIENT.DLL" at address 0x6AD50000. Successfully hooked module.

Loaded "c:\windows\system32\OLEAUT32.DLL" at address 0x75AD0000. Successfully hooked module.

Loaded "c:\windows\system32\OLE32.DLL" at address 0x757D0000. Successfully hooked module.

DllMain(0x757D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\OLE32.DLL" called.

DllMain(0x757D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\OLE32.DLL" returned 1 (0x1).

DllMain(0x75AD0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\OLEAUT32.DLL" called.

DllMain(0x75AD0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\OLEAUT32.DLL" returned 1 (0x1).

LoadLibraryA("USER32.dll") returned 0x76120000.

Loaded "c:\windows\system32\DBGHELP.DLL" at address 0x71750000. Successfully hooked module.

DllMain(0x71750000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DBGHELP.DLL" called.

DllMain(0x71750000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DBGHELP.DLL" returned 1 (0x1).

LoadLibraryA("dbghelp.dll") returned 0x71750000.

Loaded "c:\windows\system32\NETAPI32.DLL" at address 0x735E0000. Successfully hooked module.

Loaded "c:\windows\system32\NETUTILS.DLL" at address 0x74C90000. Successfully hooked module.

Loaded "c:\windows\system32\SRVCLI.DLL" at address 0x74FA0000. Successfully hooked module.

Loaded "c:\windows\system32\WKSCLI.DLL" at address 0x73540000. Successfully hooked module.

DllMain(0x74C90000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NETUTILS.DLL" called.

DllMain(0x74C90000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NETUTILS.DLL" returned 1 (0x1).

DllMain(0x74FA0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\SRVCLI.DLL" called.

DllMain(0x74FA0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\SRVCLI.DLL" returned 1 (0x1).

DllMain(0x73540000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\WKSCLI.DLL" called.

DllMain(0x73540000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\WKSCLI.DLL" returned 1 (0x1).

DllMain(0x735E0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NETAPI32.DLL" called.

DllMain(0x735E0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\NETAPI32.DLL" returned 1 (0x1).

LoadLibraryW("netapi32.dll") returned 0x735E0000.

LoadLibraryA("ADVAPI32.dll") returned 0x75DF0000.

DllMain(0x6AD50000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\program files\blue coat\proxyclient\PROXYCLIENT.DLL" returned 1 (0x1).

LoadLibraryA("Powrprof.dll") called from "c:	emp\pwroff30\POWEROFF.EXE" at address 0x00405128.

Loaded "c:\windows\system32\POWRPROF.DLL" at address 0x740F0000. Successfully hooked module.

Loaded "c:\windows\system32\SETUPAPI.DLL" at address 0x75C50000. Successfully hooked module.

Loaded "c:\windows\system32\CFGMGR32.DLL" at address 0x753D0000. Successfully hooked module.

Loaded "c:\windows\system32\DEVOBJ.DLL" at address 0x75520000. Successfully hooked module.

DllMain(0x753D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\CFGMGR32.DLL" called.

DllMain(0x753D0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\CFGMGR32.DLL" returned 1 (0x1).

DllMain(0x75520000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DEVOBJ.DLL" called.

DllMain(0x75520000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DEVOBJ.DLL" returned 1 (0x1).

DllMain(0x75C50000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\SETUPAPI.DLL" called.

LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "c:\windows\system32\SETUPAPI.DLL" at address 0x75C5C2DC.

LoadLibraryExW("API-MS-Win-Core-LocalRegistry-L1-1-0.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x75930000.

GetProcAddress(0x75930000 [c:\windows\system32\KERNEL32.DLL], "RegQueryValueExW") called from "c:\windows\system32\SETUPAPI.DLL" at address 0x75C5C296 and returned 0x7597FC91.

DllMain(0x75C50000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\SETUPAPI.DLL" returned 1 (0x1).

DllMain(0x740F0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\POWRPROF.DLL" called.

DllMain(0x740F0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\POWRPROF.DLL" returned 1 (0x1).

LoadLibraryA("Powrprof.dll") returned 0x740F0000.

GetProcAddress(0x740F0000 [c:\windows\system32\POWRPROF.DLL], "SetSuspendState") called from "c:	emp\pwroff30\POWEROFF.EXE" at address 0x00405144 and returned 0x740F398B.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "c:\windows\system32\USER32.DLL" at address 0x761339C2.

Loaded "c:\windows\system32\UXTHEME.DLL" at address 0x73FD0000. Successfully hooked module.

DllMain(0x73FD0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\UXTHEME.DLL" called.

DllMain(0x73FD0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\UXTHEME.DLL" returned 1 (0x1).

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73FD0000.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "ThemeInitApiHook") called from "c:\windows\system32\USER32.DLL" at address 0x76133A02 and returned 0x73FDB176.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "c:\windows\system32\USER32.DLL" at address 0x761339C2.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73FD0000.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "ThemeInitApiHook") called from "c:\windows\system32\USER32.DLL" at address 0x76133A02 and returned 0x73FDB176.

GetProcAddress(0x76120000 [c:\windows\system32\USER32.DLL], "IsProcessDPIAware") called from "c:\windows\system32\UXTHEME.DLL" at address 0x73FDB4EA and returned 0x76133919.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "c:\windows\system32\USER32.DLL" at address 0x761339C2.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73FD0000.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "ThemeInitApiHook") called from "c:\windows\system32\USER32.DLL" at address 0x76133A02 and returned 0x73FDB176.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) called from "c:\windows\system32\USER32.DLL" at address 0x761339C2.

LoadLibraryExW("C:\WINDOWS\system32\uxtheme.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x73FD0000.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "ThemeInitApiHook") called from "c:\windows\system32\USER32.DLL" at address 0x76133A02 and returned 0x73FDB176.

LoadLibraryExA("dwmapi.dll", 0x00000000, 0x00000000) called from "c:\windows\system32\UXTHEME.DLL" at address 0x73FDC437.

Loaded "c:\windows\system32\DWMAPI.DLL" at address 0x73A50000. Successfully hooked module.

DllMain(0x73A50000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DWMAPI.DLL" called.

DllMain(0x73A50000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\DWMAPI.DLL" returned 1 (0x1).

LoadLibraryExA("dwmapi.dll", 0x00000000, 0x00000000) returned 0x73A50000.

GetProcAddress(0x73A50000 [c:\windows\system32\DWMAPI.DLL], "DwmIsCompositionEnabled") called from "c:\windows\system32\UXTHEME.DLL" at address 0x73FDC3DB and returned 0x73A51610.

GetProcAddress(0x73A50000 [c:\windows\system32\DWMAPI.DLL], "DwmGetWindowAttribute") called from "c:\windows\system32\UXTHEME.DLL" at address 0x73FDC3DB and returned 0x73A51C76.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetLayout") called from "c:\windows\system32\USP10.DLL" at address 0x75B74C56 and returned 0x75C07050.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GdiRealizationInfo") called from "c:\windows\system32\USP10.DLL" at address 0x75B6A182 and returned 0x75C07A22.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "FontIsLinked") called from "c:\windows\system32\USP10.DLL" at address 0x75B6DFB6 and returned 0x75C0B9BE.

LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) called from "c:\windows\system32\USP10.DLL" at address 0x75B9429F.

LoadLibraryExA("ADVAPI32.dll", 0x00000000, 0x00000000) returned 0x75DF0000.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegOpenKeyExW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BEC4.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegQueryInfoKeyW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BB42.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetTextFaceAliasW") called from "c:\windows\system32\USP10.DLL" at address 0x75B6D52A and returned 0x75C0B9EC.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegEnumValueW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BB72.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegCloseKey") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BED4.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegQueryValueExW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BCD5.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegQueryValueExW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BCD5.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetFontAssocStatus") called from "c:\windows\system32\USP10.DLL" at address 0x75B74C96 and returned 0x75C0B9D2.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegQueryValueExA") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BC25.

GetProcAddress(0x75DF0000 [c:\windows\system32\ADVAPI32.DLL], "RegEnumKeyExW") called from "c:\windows\system32\USP10.DLL" at address 0x75B9432F and returned 0x75E0BB65.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetTextFaceAliasW") called from "c:\windows\system32\USP10.DLL" at address 0x75B7227C and returned 0x75C0B9EC.

LoadLibraryW("comctl32.dll") called from "c:\windows\system32\USER32.DLL" at address 0x76129CCF.

LoadLibraryW("comctl32.dll") returned 0x741C0000.

GetProcAddress(0x741C0000 [c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL], "RegisterClassNameW") called from "c:\windows\system32\USER32.DLL" at address 0x76129CE7 and returned 0x741D4791.

LoadLibraryExA("UxTheme.dll", 0x00000000, 0x00000000) called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F600E.

LoadLibraryExA("UxTheme.dll", 0x00000000, 0x00000000) returned 0x73FD0000.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "EnableThemeDialogTexture") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FDFCAF.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "OpenThemeData") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD73D2.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "GetThemeBool") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD7C1F.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "GetThemeBool") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD7C1F.

GetProcAddress(0x73A50000 [c:\windows\system32\DWMAPI.DLL], "DwmSetWindowAttribute") called from "c:\windows\system32\UXTHEME.DLL" at address 0x73FDC3DB and returned 0x73A516C0.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GdiIsMetaPrintDC") called from "c:\windows\system32\USP10.DLL" at address 0x75B88306 and returned 0x75C08AB9.

LoadLibraryW("C:\WINDOWS\system32\ole32.dll") called from "c:\windows\system32\IMM32.DLL" at address 0x75573F1B.

LoadLibraryW("C:\WINDOWS\system32\ole32.dll") returned 0x757D0000.

GetProcAddress(0x757D0000 [c:\windows\system32\OLE32.DLL], "CoInitializeEx") called from "c:\windows\system32\IMM32.DLL" at address 0x75573F68 and returned 0x758108CC.

GetProcAddress(0x757D0000 [c:\windows\system32\OLE32.DLL], "CoUninitialize") called from "c:\windows\system32\IMM32.DLL" at address 0x75573F68 and returned 0x75817197.

Loaded "c:\windows\system32\CRYPTBASE.DLL" at address 0x751C0000. Successfully hooked module.

DllMain(0x751C0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\CRYPTBASE.DLL" called.

DllMain(0x751C0000, DLL_PROCESS_ATTACH, 0x00000000) in "c:\windows\system32\CRYPTBASE.DLL" returned 1 (0x1).

GetProcAddress(0x757D0000 [c:\windows\system32\OLE32.DLL], "CoRegisterInitializeSpy") called from "c:\windows\system32\IMM32.DLL" at address 0x75573F68 and returned 0x7581690E.

GetProcAddress(0x757D0000 [c:\windows\system32\OLE32.DLL], "CoRevokeInitializeSpy") called from "c:\windows\system32\IMM32.DLL" at address 0x75573F68 and returned 0x7581829A.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "BufferedPaintInit") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD940E.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "BufferedPaintRenderAnimation") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FE08ED.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "BeginBufferedAnimation") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FE09AE.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "IsThemeBackgroundPartiallyTransparent") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD60AB.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "DrawThemeParentBackground") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD53E5.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "GetThemePartSize") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FDCDB1.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "DrawThemeBackground") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD3982.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "GetThemeBackgroundContentRect") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FDCD2E.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "DrawThemeText") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD4EA1.

GetProcAddress(0x75C00000 [c:\windows\system32\GDI32.DLL], "GetTextExtentExPointWPri") called from "c:\windows\system32\USP10.DLL" at address 0x75B892C6 and returned 0x75C0C0BC.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "EndBufferedAnimation") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD3F9A.

GetProcAddress(0x73FD0000 [c:\windows\system32\UXTHEME.DLL], "GetThemeTextExtent") called from "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" at address 0x741F5FB2 and returned 0x73FD2D57.

DllMain(0x751C0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\CRYPTBASE.DLL" called.

DllMain(0x751C0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\CRYPTBASE.DLL" returned 1 (0x1).

DllMain(0x73A50000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DWMAPI.DLL" called.

DllMain(0x73A50000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DWMAPI.DLL" returned 1 (0x1).

DllMain(0x73FD0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\UXTHEME.DLL" called.

DllMain(0x73FD0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\UXTHEME.DLL" returned 1 (0x1).

DllMain(0x740F0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\POWRPROF.DLL" called.

DllMain(0x740F0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\POWRPROF.DLL" returned 1 (0x1).

DllMain(0x75C50000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SETUPAPI.DLL" called.

DllMain(0x75C50000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SETUPAPI.DLL" returned 1 (0x1).

DllMain(0x75520000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DEVOBJ.DLL" called.

DllMain(0x75520000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DEVOBJ.DLL" returned 1 (0x1).

DllMain(0x753D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\CFGMGR32.DLL" called.

DllMain(0x753D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\CFGMGR32.DLL" returned 1 (0x1).

DllMain(0x735E0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NETAPI32.DLL" called.

DllMain(0x735E0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NETAPI32.DLL" returned 1 (0x1).

DllMain(0x73540000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WKSCLI.DLL" called.

DllMain(0x73540000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WKSCLI.DLL" returned 1 (0x1).

DllMain(0x74FA0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SRVCLI.DLL" called.

DllMain(0x74FA0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SRVCLI.DLL" returned 1 (0x1).

DllMain(0x74C90000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NETUTILS.DLL" called.

DllMain(0x74C90000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NETUTILS.DLL" returned 1 (0x1).

DllMain(0x71750000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DBGHELP.DLL" called.

DllMain(0x71750000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\DBGHELP.DLL" returned 1 (0x1).

DllMain(0x75AD0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\OLEAUT32.DLL" called.

DllMain(0x75AD0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\OLEAUT32.DLL" returned 1 (0x1).

DllMain(0x757D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\OLE32.DLL" called.

DllMain(0x757D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\OLE32.DLL" returned 1 (0x1).

DllMain(0x75570000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\IMM32.DLL" called.

DllMain(0x75570000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\IMM32.DLL" returned 1 (0x1).

DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MSCTF.DLL" called.

DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MSCTF.DLL" returned 1 (0x1).

DllMain(0x732D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WSOCK32.DLL" called.

DllMain(0x732D0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WSOCK32.DLL" returned 1 (0x1).

DllMain(0x75590000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WS2_32.DLL" called.

DllMain(0x75590000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WS2_32.DLL" returned 1 (0x1).

DllMain(0x75F10000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NSI.DLL" called.

DllMain(0x75F10000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\NSI.DLL" returned 1 (0x1).

DllMain(0x70EE0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MPR.DLL" called.

DllMain(0x70EE0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MPR.DLL" returned 1 (0x1).

DllMain(0x6FCF0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WINMM.DLL" called.

DllMain(0x6FCF0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\WINMM.DLL" returned 1 (0x1).

DllMain(0x76E40000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\COMDLG32.DLL" called.

DllMain(0x76E40000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\COMDLG32.DLL" returned 1 (0x1).

DllMain(0x761F0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SHELL32.DLL" called.

DllMain(0x761F0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SHELL32.DLL" returned 1 (0x1).

DllMain(0x741C0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" called.

DllMain(0x741C0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\COMCTL32.DLL" returned 1 (0x1).

DllMain(0x75710000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SHLWAPI.DLL" called.

DllMain(0x75710000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SHLWAPI.DLL" returned 1 (0x1).

DllMain(0x75DF0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\ADVAPI32.DLL" called.

DllMain(0x75DF0000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\ADVAPI32.DLL" returned 1 (0x1).

DllMain(0x77330000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SECHOST.DLL" called.

DllMain(0x77330000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\SECHOST.DLL" returned 1 (0x1).

DllMain(0x75A20000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\RPCRT4.DLL" called.

DllMain(0x75A20000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\RPCRT4.DLL" returned 1 (0x1).

DllMain(0x76120000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\USER32.DLL" called.

DllMain(0x76120000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\USER32.DLL" returned 1 (0x1).

DllMain(0x75C00000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\GDI32.DLL" called.

DllMain(0x75C00000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\GDI32.DLL" returned 1 (0x1).

DllMain(0x77260000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\LPK.DLL" called.

DllMain(0x77260000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\LPK.DLL" returned 1 (0x1).

DllMain(0x75B60000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\USP10.DLL" called.

DllMain(0x75B60000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\USP10.DLL" returned 1 (0x1).

DllMain(0x77280000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MSVCRT.DLL" called.

DllMain(0x77280000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\MSVCRT.DLL" returned 1 (0x1).

DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "c:\temp\depends22_x86\DEPENDS.DLL" called.

DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "c:\temp\depends22_x86\DEPENDS.DLL" returned 1 (0x1).

DllMain(0x75930000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\KERNEL32.DLL" called.

DllMain(0x75930000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\KERNEL32.DLL" returned 1 (0x1).

DllMain(0x75380000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\KERNELBASE.DLL" called.

DllMain(0x75380000, DLL_PROCESS_DETACH, 0x00000001) in "c:\windows\system32\KERNELBASE.DLL" returned 1 (0x1).

Exited "c:\temp\pwroff30\POWEROFF.EXE" (process 0xC4C) with code 0 (0x0).


Edited by Boot_Monkey, 04 July 2012 - 11:15 PM.


#5 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 05 July 2012 - 09:58 AM

I see no files being mentioned as missing. This means usually, eighter a needed registry setting is missing or wrong or the feature is disabled by M$ in PE.

Since the Monitor powers down fine, i assume the required service working. Which brings us full circle to the drivers. If just a single one is not able to "sleep" Windows wont do it.

Maybe a good start would be, to send one component at a time to sleep. Unfortunately i don't know, how to do that.

:cheers:

#6 MedEvil

MedEvil

    Platinum Member

  • .script developer
  • 7771 posts

Posted 05 July 2012 - 10:02 AM

PS: Just tested. Wimbs 'Universal HDD Image file for Windows 7' can go to sleep and is also portable.

:cheers:

#7 Guest_Boot_Monkey_*

Guest_Boot_Monkey_*
  • Guests

Posted 05 July 2012 - 10:47 PM

I forgot to mention I ran that test on my build machine and not with-in WinPE.

I think you're right about the feature "disabled by M$ in PE".

Hmm, I'll have to look deeper.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users